Resultado do exame da Farbar Recovery Scan Tool (FRST) (x64) Versão: 02-07-2016
Executado por Carlos (administrador) em CARLOS-PC (06-07-2016 08:08:21)
Executando a partir de C:\Users\Carlos\Downloads
Perfis Carregados: Carlos (Perfis Disponíveis: Carlos)
Platform: Windows 7 Ultimate (X64) Idioma: Português (Brasil)
Internet Explorer Versão 8 (Navegador padrão: Chrome)
Modo da Inicialização: Normal
Tutorial da Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processos (Whitelisted) =================

(Se uma entrada for incluída na fixlist, o processo será fechado. O arquivo não será movido.)

(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Av\avgrsa.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Av\avgcsrva.exe
() C:\Program Files (x86)\AVG Web TuneUp\WtuSystemSupport.exe
(GAS Tecnologia) C:\Program Files (x86)\GbPlugin\GbpSv.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Av\avgidsagenta.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Framework\Common\avgsvca.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Av\avgwdsvca.exe
(HP) C:\Program Files (x86)\HP\HPLaserJetService\HPLaserJetService.exe
(HP) C:\Windows\System32\HPSIsvc.exe
(arvato digital services llc) C:\Program Files (x86)\Common Files\Protexis\License Service\PsiService_2.exe
(AVG Secure Search) C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\40.3.1\ToolbarUpdater.exe
(GAS Tecnologia LTDA) C:\Program Files\Diebold\Warsaw\core.exe
(GAS Tecnologia LTDA) C:\Program Files\Diebold\Warsaw\core.exe
() C:\Program Files (x86)\AVG Web TuneUp\vprot.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Av\avgui.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Framework\Common\avguix.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Av\avgnsa.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Av\avgemca.exe
(GAS Tecnologia) C:\Program Files (x86)\GbPlugin\GbpSv.exe
(Microsoft Corporation) C:\Windows\System32\msiexec.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office\Office15\OUTLOOK.EXE
() D:\Thiago\Programas\CDGSX8\COREL DRAW\Crack\Keygen.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\SysWOW64\dllhost.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe


==================== Registro (Whitelisted) ===========================

(Se uma entrada for incluída na fixlist, o ítem no Registro será restaurado para o padrão ou removido. O arquivo não será movido.)

HKLM\...\Run: [Diebold - Warsaw] => C:\Program Files\Diebold\Warsaw\core.exe [1058864 2016-05-11] (GAS Tecnologia LTDA)
HKLM-x32\...\Run: [] => [X]
HKLM-x32\...\Run: [HPUsageTrackingLEDM] => C:\Program Files (x86)\HP\HP UT LEDM\bin\hppusg.exe [30264 2009-08-04] (Hewlett-Packard Company)
HKLM-x32\...\Run: [AvgUi] => C:\Program Files (x86)\AVG\Framework\Common\avguirnx.exe [186640 2016-06-21] (AVG Technologies CZ, s.r.o.)
HKLM-x32\...\Run: [AVG_UI] => C:\Program Files (x86)\AVG\Av\avgui.exe [6570256 2016-06-09] (AVG Technologies CZ, s.r.o.)
HKLM-x32\...\Run: [vProt] => C:\Program Files (x86)\AVG Web TuneUp\vprot.exe [1941064 2016-06-20] ()
Winlogon\Notify\ GbPluginCef: C:\Program Files (x86)\GbPlugin\gbiehCef.dll [2015-09-22] (Caixa Economica Federal)
ShellExecuteHooks-x32: GbPluginObj Class - {E37CB5F0-51F5-4395-A808-5FA49E399003} - C:\Program Files (x86)\GbPlugin\gbiehcef.dll [1888480 2015-09-22] (Caixa Economica Federal)

==================== Internet (Whitelisted) ====================

(Se um ítem for incluído na fixlist, sendo um ítem do Registro, será removido ou restaurado para o padrão.)

Tcpip\Parameters: [DhcpNameServer] 201.75.168.36 201.75.168.42
Tcpip\..\Interfaces\{0654B701-CF7D-4AE3-8FD7-CF7E8FAFB274}: [DhcpNameServer] 201.75.168.36 201.75.168.42

Internet Explorer:
==================
HKU\S-1-5-21-612608877-635451796-1517691828-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxps://mysearch.avg.com/?cid={92011171-FBB9-41D1-84BB-1591A6F00E44}&mid=264af731029047cc8794c593af94f5fc-27ac99c58940ac69fe056e402726ac0236b953aa&lang=pt-br&ds=AVG&coid=avgtbavg&cmpid=0616av&pr=fr&d=2016-06-09 07:39:07&v=4.3.1.831&pid=wtu&sg=&sap=hp
SearchScopes: HKU\S-1-5-21-612608877-635451796-1517691828-1000 -> DefaultScope {95B7759C-8C7F-4BF1-B163-73684A933233} URL = hxxps://mysearch.avg.com/search?cid={92011171-FBB9-41D1-84BB-1591A6F00E44}&mid=264af731029047cc8794c593af94f5fc-27ac99c58940ac69fe056e402726ac0236b953aa&lang=pt-br&ds=AVG&coid=avgtbavg&cmpid=0616tb&pr=fr&d=2016-06-09 07:39:07&v=4.3.1.831&pid=wtu&sg=&sap=dsp&q={searchTerms}
SearchScopes: HKU\S-1-5-21-612608877-635451796-1517691828-1000 -> {95B7759C-8C7F-4BF1-B163-73684A933233} URL = hxxps://mysearch.avg.com/search?cid={92011171-FBB9-41D1-84BB-1591A6F00E44}&mid=264af731029047cc8794c593af94f5fc-27ac99c58940ac69fe056e402726ac0236b953aa&lang=pt-br&ds=AVG&coid=avgtbavg&cmpid=0616tb&pr=fr&d=2016-06-09 07:39:07&v=4.3.1.831&pid=wtu&sg=&sap=dsp&q={searchTerms}
BHO: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\Office15\OCHelper.dll [2014-10-22] (Microsoft Corporation)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office15\URLREDIR.DLL [2014-01-23] (Microsoft Corporation)
BHO: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office\Office15\GROOVEEX.DLL [2014-10-14] (Microsoft Corporation)
BHO-x32: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll [2014-10-22] (Microsoft Corporation)
BHO-x32: AVG Web TuneUp -> {95B7759C-8C7F-4BF1-B163-73684A933233} -> C:\Program Files (x86)\AVG Web TuneUp\4.3.1.831\AVG Web TuneUp.dll [2016-06-20] (AVG)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office15\URLREDIR.DLL [2014-01-21] (Microsoft Corporation)
BHO-x32: GbIehObj Class -> {C41A1C0E-EA6C-11D4-B1B8-444553540003} -> C:\Program Files (x86)\GbPlugin\gbiehcef.dll [2015-09-22] (Caixa Economica Federal)
BHO-x32: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\Office15\GROOVEEX.DLL [2014-10-14] (Microsoft Corporation)
Handler: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office\Office15\MSOSB.DLL [2014-10-14] (Microsoft Corporation)
Filter: deflate - {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\Windows\system32\urlmon.dll [2009-07-13] (Microsoft Corporation)
Filter-x32: deflate - {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\Windows\SysWOW64\urlmon.dll [2009-07-13] (Microsoft Corporation)
Filter: gzip - {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\Windows\system32\urlmon.dll [2009-07-13] (Microsoft Corporation)
Filter-x32: gzip - {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\Windows\SysWOW64\urlmon.dll [2009-07-13] (Microsoft Corporation)

FireFox:
========
FF Plugin: @microsoft.com/GENUINE -> disabled [Nenhum Arquivo]
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~1\MICROS~2\Office15\NPSPWRAP.DLL [2014-01-23] (Microsoft Corporation)
FF Plugin-x32: @avg.com/AVG SiteSafety plugin,version=11.0.0.1,application/x-avg-sitesafety-plugin -> C:\Program Files (x86)\Common Files\AVG Secure Search\SiteSafetyInstaller\40.3.1\\npsitesafety.dll [Nenhum Arquivo]
FF Plugin-x32: @microsoft.com/GENUINE -> disabled [Nenhum Arquivo]
FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files (x86)\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2014-01-21] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office15\NPSPWRAP.DLL [2014-01-21] (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.30.3\npGoogleUpdate3.dll [2016-05-11] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.30.3\npGoogleUpdate3.dll [2016-05-11] (Google Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2016-05-27] (Adobe Systems Inc.)
FF Plugin HKU\S-1-5-21-612608877-635451796-1517691828-1000: gastecnologia.com.br/sf/cef -> C:\Users\Carlos\AppData\Local\GAS Tecnologia\GBBD\npsf_cef.dll [2014-12-09] (GAS Tecnologia)
FF Plugin HKU\S-1-5-21-612608877-635451796-1517691828-1000: gastecnologia.com.br/sf/cef64 -> C:\Users\Carlos\AppData\Local\GAS Tecnologia\GBBD\npsf_cef_64.dll [2014-12-09] (GAS Tecnologia)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npMeetingJoinPluginOC.dll [2014-01-21] (Microsoft Corporation)
FF HKLM-x32\...\Firefox\Extensions: [quickprint@hp.com] - C:\Program Files (x86)\Hewlett-Packard\SmartPrint\QPExtension
FF Extension: SmartPrintButton - C:\Program Files (x86)\Hewlett-Packard\SmartPrint\QPExtension [2011-01-26] [não assinado]

Chrome: 
=======
CHR Profile: C:\Users\Carlos\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Apresentações) - C:\Users\Carlos\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2016-04-27]
CHR Extension: (Google Docs) - C:\Users\Carlos\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2016-04-27]
CHR Extension: (Google Drive) - C:\Users\Carlos\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2016-04-27]
CHR Extension: (YouTube) - C:\Users\Carlos\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2016-04-27]
CHR Extension: (Planilhas do Google) - C:\Users\Carlos\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2016-04-27]
CHR Extension: (Documentos Google off-line) - C:\Users\Carlos\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-04-27]
CHR Extension: (Pagamentos da Chrome Web Store) - C:\Users\Carlos\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2016-04-27]
CHR Extension: (Gmail) - C:\Users\Carlos\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2016-04-27]

==================== Serviços (Whitelisted) ========================

(Se uma entrada for incluída na fixlist, será removida do Registro. O arquivo não será movido, a menos que seja colocado separadamente.)

S3 AvgAMPS; C:\Program Files (x86)\AVG\Av\avgamps.exe [636312 2016-06-09] (AVG Technologies CZ, s.r.o.)
R2 AVGIDSAgent; C:\Program Files (x86)\AVG\Av\avgidsagenta.exe [5165824 2016-06-09] (AVG Technologies CZ, s.r.o.)
R2 avgsvc; C:\Program Files (x86)\AVG\Framework\Common\avgsvca.exe [1080080 2016-06-21] (AVG Technologies CZ, s.r.o.)
R2 avgwd; C:\Program Files (x86)\AVG\Av\avgwdsvca.exe [705528 2016-06-09] (AVG Technologies CZ, s.r.o.)
R2 GbpSv; C:\Program Files (x86)\GbPlugin\GbpSv.exe [593120 2015-09-22] (GAS Tecnologia)
R2 HP LaserJet Service; C:\Program Files (x86)\HP\HPLaserJetService\HPLaserJetService.exe [136704 2009-06-24] (HP) [Arquivo não assinado]
R2 PSI_SVC_2; c:\Program Files (x86)\Common Files\Protexis\License Service\PsiService_2.exe [277360 2014-04-30] (arvato digital services llc)
R2 vToolbarUpdater40.3.1; C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\40.3.1\ToolbarUpdater.exe [1323080 2016-06-09] (AVG Secure Search)
R2 Warsaw Technology; C:\Program Files\Diebold\Warsaw\core.exe [1058864 2016-05-11] (GAS Tecnologia LTDA)
S3 WatAdminSvc; C:\Windows\system32\Wat\WatAdminSvc.exe [1255736 2016-04-27] () [Arquivo não assinado]
R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2009-07-13] (Microsoft Corporation)
R2 WtuSystemSupport; C:\Program Files (x86)\AVG Web TuneUp\WtuSystemSupport.exe [972872 2016-06-20] ()

===================== Drivers (Whitelisted) ==========================

(Se uma entrada for incluída na fixlist, será removida do Registro. O arquivo não será movido, a menos que seja colocado separadamente.)

R1 Avgdiska; C:\Windows\System32\DRIVERS\avgdiska.sys [162592 2016-02-16] (AVG Technologies CZ, s.r.o.)
R1 AVGIDSDriver; C:\Windows\System32\DRIVERS\avgidsdrivera.sys [307456 2016-05-18] (AVG Technologies CZ, s.r.o.)
R0 AVGIDSHA; C:\Windows\System32\DRIVERS\avgidsha.sys [272304 2016-01-26] (AVG Technologies CZ, s.r.o.)
R1 Avgldx64; C:\Windows\System32\DRIVERS\avgldx64.sys [260352 2016-05-02] (AVG Technologies CZ, s.r.o.)
R0 Avgloga; C:\Windows\System32\DRIVERS\avgloga.sys [360736 2016-02-16] (AVG Technologies CZ, s.r.o.)
R0 Avgmfx64; C:\Windows\System32\DRIVERS\avgmfx64.sys [247040 2016-05-05] (AVG Technologies CZ, s.r.o.)
R0 Avgrkx64; C:\Windows\System32\DRIVERS\avgrkx64.sys [51968 2016-05-02] (AVG Technologies CZ, s.r.o.)
R1 Avgtdia; C:\Windows\System32\DRIVERS\avgtdia.sys [279296 2016-05-17] (AVG Technologies CZ, s.r.o.)
R0 avguniva; C:\Windows\System32\DRIVERS\avguniva.sys [71936 2016-05-05] (AVG Technologies CZ, s.r.o.)
S3 ebdrv; C:\Windows\system32\DRIVERS\evbda.sys [3286016 2009-06-10] (Broadcom Corporation)
R3 GBPRCM; C:\Program Files (x86)\GbPlugin\gbprcm64.sys [29912 2015-12-08] (GAS Tecnologia)
R3 Warsaw_PP; C:\Program Files (x86)\GbPlugin\wsftprp64.sys [24792 2015-12-08] (GAS Tecnologia LTDA)
R4 WinDivert1.1; C:\Program Files\Diebold\Warsaw\WinDivert64.sys [38104 2015-07-07] (Basil)
R1 wsddfac; C:\Windows\System32\drivers\wsddfac.sys [101080 2016-07-06] (GAS Tecnologia)
R1 wsddpp; C:\Windows\system32\drivers\wsddpp.sys [103640 2015-03-18] (GAS Tecnologia)
S1 gbpddfac; system32\drivers\gbpddfac64.sys [X]
S0 gbpddreg; system32\drivers\gbpddreg64.sys [X]

==================== NetSvcs (Whitelisted) ===================

(Se uma entrada for incluída na fixlist, será removida do Registro. O arquivo não será movido, a menos que seja colocado separadamente.)


==================== Três Meses Criados arquivos e pastas ========

(Se uma entrada for incluída na fixlist, o arquivo/pasta será movido.)

2016-07-06 08:08 - 2016-07-06 08:08 - 00014430 _____ C:\Users\Carlos\Downloads\FRST.txt
2016-07-06 08:06 - 2016-07-06 08:08 - 00000000 ____D C:\FRST
2016-07-06 08:05 - 2016-07-06 08:06 - 02390016 _____ (Farbar) C:\Users\Carlos\Downloads\FRST64.exe
2016-07-06 08:04 - 2016-07-06 08:05 - 01740288 _____ (Farbar) C:\Users\Carlos\Downloads\FRST.exe
2016-07-06 08:03 - 2016-07-06 08:04 - 01034556 _____ C:\Users\Carlos\Downloads\Windows6.1-KB2999226-x64.msu
2016-07-06 07:59 - 2016-07-06 07:59 - 00000000 ____D C:\Users\Carlos\AppData\Roaming\Corel
2016-07-06 07:59 - 2016-07-06 07:56 - 00003063 _____ C:\Users\Public\Desktop\Corel PHOTO-PAINT X8 (64-Bit).lnk
2016-07-06 07:59 - 2016-07-06 07:56 - 00003060 _____ C:\Users\Public\Desktop\Corel CAPTURE X8 (64-Bit).lnk
2016-07-06 07:59 - 2016-07-06 07:56 - 00003015 _____ C:\Users\Public\Desktop\CorelDRAW X8 (64-Bit).lnk
2016-07-06 07:59 - 2016-07-06 07:56 - 00002343 _____ C:\Users\Public\Desktop\Corel CONNECT X8 (64-Bit).lnk
2016-07-06 07:59 - 2016-07-06 07:56 - 00002256 _____ C:\Users\Public\Desktop\Corel Font Manager X8 (64-Bit).lnk
2016-07-06 07:58 - 2016-07-06 07:59 - 00003320 _____ C:\Windows\System32\Tasks\CorelUpdateHelperTaskCore
2016-07-06 07:58 - 2016-07-06 07:58 - 00000000 ____D C:\Program Files\Common Files\Corel
2016-07-06 07:58 - 2016-07-06 07:58 - 00000000 ____D C:\Program Files (x86)\Corel
2016-07-06 07:56 - 2016-07-06 07:56 - 00000000 ____D C:\Users\Public\Documents\Corel
2016-07-06 07:56 - 2016-07-06 07:56 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CorelDRAW Graphics Suite X8 (64-bit)
2016-07-06 07:55 - 2016-07-06 07:58 - 00000000 ____D C:\Users\Todos os Usuários\Corel
2016-07-06 07:55 - 2016-07-06 07:58 - 00000000 ____D C:\ProgramData\Corel
2016-07-06 07:55 - 2016-07-06 07:58 - 00000000 ____D C:\Program Files\Corel
2016-07-06 07:46 - 2016-07-06 07:52 - 00000000 ____D C:\Users\Todos os Usuários\CorelDRAW Graphics Suite X7 x64
2016-07-06 07:46 - 2016-07-06 07:52 - 00000000 ____D C:\ProgramData\CorelDRAW Graphics Suite X7 x64
2016-07-06 07:45 - 2016-07-06 07:45 - 00000000 ____D C:\Users\Carlos\Desktop\Corel.DRAW.Graphics.Suite. 17.4.0.887.32.64.bit.PT-BR.Incl.Keygen.XFORCE.Repack - MGT
2016-07-04 13:35 - 2016-07-04 13:35 - 00004131 _____ C:\Users\Carlos\Downloads\comprovante (19).html
2016-06-24 11:01 - 2016-06-24 14:57 - 00000000 ____D C:\Users\Carlos\Desktop\usa
2016-06-24 10:27 - 2016-06-24 10:27 - 00093429 _____ C:\Users\Carlos\Downloads\115470_1466750018466_BoletoDigital.pdf
2016-06-23 15:18 - 2016-06-23 15:18 - 00422576 _____ C:\Users\Carlos\Desktop\Cópia_de_segurança_de_DQO.cdr
2016-06-22 15:38 - 2016-06-22 15:38 - 00394224 _____ C:\Users\Carlos\Desktop\Cópia_de_segurança_de_DQO.pdf
2016-06-22 14:36 - 2016-06-22 14:36 - 00000000 ____D C:\Users\Carlos\Desktop\downlink (1)
2016-06-22 14:35 - 2016-06-22 14:35 - 00052047 _____ C:\Users\Carlos\Desktop\downlink (1).zip
2016-06-22 14:33 - 2016-06-22 14:33 - 00984552 _____ C:\Users\Carlos\Downloads\uplink-windows.exe
2016-06-22 14:30 - 2016-06-22 14:30 - 00052047 _____ C:\Users\Carlos\Downloads\downlink.zip
2016-06-22 14:21 - 2016-06-22 14:21 - 00000000 ____D C:\Users\Carlos\Downloads\downlink
2016-06-22 14:18 - 2016-06-22 14:18 - 07532757 _____ (Introversion Software) C:\Users\Carlos\Downloads\uplinkdemo1.54 (1).exe
2016-06-22 14:17 - 2016-06-22 14:29 - 02233365 _____ (Introversion Software) C:\Users\Carlos\Downloads\Não confirmado 773334.crdownload
2016-06-21 14:59 - 2016-06-21 14:59 - 00004156 _____ C:\Users\Carlos\Downloads\comprovante (18).html
2016-06-20 09:07 - 2016-06-20 09:07 - 00004173 _____ C:\Users\Carlos\Downloads\comprovante (17).html
2016-06-20 09:07 - 2016-06-20 09:07 - 00004172 _____ C:\Users\Carlos\Downloads\comprovante (16).html
2016-06-17 13:59 - 2016-06-17 13:59 - 00003471 _____ C:\Users\Carlos\Downloads\comprovante (15).html
2016-06-17 13:56 - 2016-06-17 13:56 - 00003470 _____ C:\Users\Carlos\Downloads\comprovante (14).html
2016-06-17 13:54 - 2016-06-17 13:54 - 00004733 _____ C:\Users\Carlos\Downloads\comprovante (13).html
2016-06-17 13:53 - 2016-06-17 13:53 - 00004730 _____ C:\Users\Carlos\Downloads\comprovante (12).html
2016-06-14 13:53 - 2016-06-14 13:53 - 00012722 _____ C:\Users\Carlos\Downloads\boleto_735.pdf
2016-06-14 13:52 - 2016-06-14 13:52 - 00012722 _____ C:\Users\Carlos\Downloads\boleto_63.pdf
2016-06-14 13:52 - 2016-06-14 13:52 - 00012722 _____ C:\Users\Carlos\Downloads\boleto_329.pdf
2016-06-14 08:11 - 2016-06-14 08:11 - 00004139 _____ C:\Users\Carlos\Downloads\comprovante (11).html
2016-06-09 16:30 - 2016-06-09 16:30 - 00004734 _____ C:\Users\Carlos\Downloads\comprovante (9).html
2016-06-09 16:30 - 2016-06-09 16:30 - 00004733 _____ C:\Users\Carlos\Downloads\comprovante (10).html
2016-06-09 07:39 - 2016-06-20 07:49 - 00000000 ____D C:\Users\Todos os Usuários\AVG Web TuneUp
2016-06-09 07:39 - 2016-06-20 07:49 - 00000000 ____D C:\ProgramData\AVG Web TuneUp
2016-06-09 07:39 - 2016-06-09 07:39 - 00000000 ____D C:\Users\Carlos\AppData\Local\AVG Web TuneUp
2016-06-09 07:39 - 2016-06-09 07:39 - 00000000 ____D C:\Program Files\Common Files\AVG Secure Search
2016-06-09 07:38 - 2016-06-20 07:48 - 00000000 ____D C:\Program Files (x86)\AVG Web TuneUp
2016-06-08 10:21 - 2016-06-08 10:21 - 29134441 _____ C:\Users\Carlos\Downloads\Ingetean (2).rar
2016-06-08 10:21 - 2016-06-08 10:21 - 29134441 _____ C:\Users\Carlos\Desktop\Ingetean (2).rar
2016-06-07 16:52 - 2016-06-07 16:53 - 29134441 _____ C:\Users\Carlos\Downloads\Ingetean (1).rar
2016-06-07 16:51 - 2016-06-07 16:52 - 29134441 _____ C:\Users\Carlos\Downloads\Ingetean.rar
2016-06-07 16:27 - 2016-06-13 17:11 - 00898268 _____ C:\Users\Carlos\Desktop\Sem título-2.cdr
2016-06-07 16:27 - 2016-06-07 16:27 - 36539421 _____ C:\Users\Carlos\Desktop\Cópia_de_segurança_de_Sem título-2.cdr
2016-06-07 15:52 - 2016-06-07 15:57 - 559802735 _____ C:\Users\Carlos\Documents\Placa Segurança.eps
2016-06-07 10:05 - 2016-06-07 10:20 - 00343224 _____ C:\Users\Carlos\Documents\crachás.cdr
2016-06-07 10:05 - 2016-06-07 10:13 - 02072409 _____ C:\Users\Carlos\Documents\Cópia_de_segurança_de_crachás.cdr
2016-06-06 07:49 - 2016-06-06 07:49 - 00066425 _____ C:\Users\Carlos\Desktop\Banner silvana.pptx
2016-06-02 16:25 - 2016-06-02 16:25 - 00004758 _____ C:\Users\Carlos\Downloads\comprovante (8).html
2016-06-02 10:19 - 2016-06-02 10:19 - 00067325 _____ C:\Users\Carlos\Desktop\I_nter.net....pdf
2016-06-01 17:09 - 2016-06-01 17:09 - 00277112 _____ C:\Windows\Minidump\060116-34179-01.dmp
2016-06-01 08:56 - 2016-06-01 08:56 - 00074986 _____ C:\Users\Carlos\Desktop\» Gestão proativa de T.I..html
2016-06-01 08:56 - 2016-06-01 08:56 - 00000000 ____D C:\Users\Carlos\Desktop\» Gestão proativa de T.I._files
2016-05-30 14:35 - 2016-05-30 14:35 - 00153460 _____ C:\Users\Carlos\Desktop\UNIDADES DE MEDIDA.pdf
2016-05-25 14:50 - 2016-05-25 14:50 - 00004741 _____ C:\Users\Carlos\Downloads\comprovante (7).html
2016-05-25 09:17 - 2016-05-25 09:17 - 00061554 _____ C:\Users\Carlos\Desktop\Informações Cadastrais - ART PLACAS.pdf
2016-05-23 16:17 - 2016-05-23 16:17 - 00063191 _____ C:\Users\Carlos\Desktop\In t-e rnet____Banki-ng---CAIXA.pdf
2016-05-19 16:43 - 2016-05-19 16:43 - 00004406 _____ C:\Users\Carlos\Downloads\comprovante (6).html
2016-05-19 16:42 - 2016-05-19 16:42 - 00004405 _____ C:\Users\Carlos\Downloads\comprovante (5).html
2016-05-19 11:24 - 2016-06-01 07:45 - 00000000 ____D C:\Users\Carlos\Documents\DOCUMENTOS DA ARTPLACAS
2016-05-18 17:26 - 2016-05-18 17:26 - 00093407 _____ C:\Users\Carlos\Desktop\Protheus Report - Emissao dos Pedidos de Compras ou Autorizacoes de Entrega.pdf
2016-05-18 12:13 - 2016-05-18 12:13 - 00307456 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgidsdrivera.sys
2016-05-17 10:50 - 2016-05-17 10:50 - 00279296 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgtdia.sys
2016-05-16 09:50 - 2016-05-16 09:50 - 00445497 _____ C:\Users\Carlos\Downloads\EQPR0711R02.pdf
2016-05-16 07:40 - 2016-05-16 07:40 - 00000000 ____D C:\Users\Usuário Padrão\AppData\Roaming\TuneUp Software
2016-05-16 07:40 - 2016-05-16 07:40 - 00000000 ____D C:\Users\Default\AppData\Roaming\TuneUp Software
2016-05-16 07:40 - 2016-05-16 07:40 - 00000000 ____D C:\Users\Default User\AppData\Roaming\TuneUp Software
2016-05-10 15:01 - 2016-05-10 15:01 - 00003458 _____ C:\Users\Carlos\Downloads\comprovante (4).html
2016-05-09 16:46 - 2016-05-09 16:46 - 00000000 ____D C:\Program Files (x86)\gs
2016-05-09 16:11 - 2016-05-09 16:17 - 00000000 ____D C:\Windows\system32\MRT
2016-05-09 16:11 - 2016-05-09 16:11 - 135176864 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2016-05-09 16:10 - 2011-04-09 03:58 - 00142336 _____ (Microsoft Corporation) C:\Windows\system32\poqexec.exe
2016-05-09 16:10 - 2011-04-09 03:45 - 05509504 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2016-05-09 16:10 - 2011-04-09 03:13 - 03957632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2016-05-09 16:10 - 2011-04-09 03:13 - 03901824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2016-05-09 16:10 - 2011-04-09 02:56 - 00123904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\poqexec.exe
2016-05-09 15:33 - 2016-05-09 15:37 - 299312504 _____ (Corel Corporation) C:\Users\Carlos\Downloads\CDGSX7Update6.exe
2016-05-09 15:32 - 2016-05-09 15:32 - 13006000 _____ (Corel Corporation) C:\Users\Carlos\Downloads\CDGSX7U6HF1.exe
2016-05-06 09:52 - 2016-05-06 13:14 - 00016506 _____ C:\Users\Carlos\Desktop\PASTA - HUNTINGTON BEACH.xlsx
2016-05-05 11:06 - 2016-05-05 11:06 - 00247040 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgmfx64.sys
2016-05-05 11:06 - 2016-05-05 11:06 - 00071936 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avguniva.sys
2016-05-05 08:07 - 2016-05-05 08:07 - 00115293 _____ C:\Users\Carlos\Desktop\LISTA DE PRODUTOS - C & D ZODIACAEROSPACE.xlsx
2016-05-04 17:34 - 2016-05-04 17:34 - 01662642 _____ C:\Users\Carlos\Documents\CONTRATO SOCIAL 1ª ALTERACAO - ART PLACAS.pdf
2016-05-04 17:34 - 2016-05-04 17:34 - 00341657 _____ C:\Users\Carlos\Documents\CNPJ ART PLACAS.pdf
2016-05-04 13:12 - 2016-05-04 13:12 - 08476449 _____ C:\Users\Carlos\Documents\Sem título-1.eps
2016-05-03 11:28 - 2016-05-03 11:28 - 00277168 _____ C:\Windows\Minidump\050316-31340-01.dmp
2016-05-02 16:13 - 2016-05-02 16:13 - 00260352 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgldx64.sys
2016-05-02 16:06 - 2016-05-02 16:06 - 00051968 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgrkx64.sys
2016-05-02 11:37 - 2016-05-02 11:37 - 00003471 _____ C:\Users\Carlos\Downloads\comprovante (3).html
2016-04-29 15:25 - 2016-04-29 15:25 - 00000000 ____H C:\Windows\system32\Drivers\Msft_User_WpdMtpDr_01_09_00.Wdf
2016-04-29 14:46 - 2016-04-29 14:46 - 00003523 _____ C:\Users\Carlos\Downloads\comprovante (2).html
2016-04-29 14:36 - 2016-04-29 14:36 - 00003527 _____ C:\Users\Carlos\Downloads\comprovante (1).html
2016-04-29 10:43 - 2016-04-29 10:43 - 00004169 _____ C:\Users\Carlos\Downloads\comprovante.html
2016-04-28 11:43 - 2016-04-28 11:44 - 00000012 _____ C:\Users\Carlos\Desktop\RMPCUNLR.dll manual.txt
2016-04-28 11:36 - 2016-04-28 11:36 - 01005568 _____ (Microsoft Corporation) C:\Users\Carlos\Downloads\dotNetFx45_Full_setup (1).exe
2016-04-28 11:30 - 2016-04-28 11:32 - 67681000 _____ (Microsoft Corporation) C:\Users\Carlos\Downloads\NDP461-KB3102436-x86-x64-AllOS-ENU.exe
2016-04-28 11:23 - 2016-04-28 11:23 - 01497400 _____ (Microsoft Corporation) C:\Users\Carlos\Desktop\NDP46-KB3045560-Web (1).exe
2016-04-28 11:18 - 2016-04-28 11:18 - 00889416 _____ (Microsoft Corporation) C:\Users\Carlos\Downloads\dotNetFx40_Full_setup.exe
2016-04-28 11:14 - 2016-04-28 11:14 - 01497400 _____ (Microsoft Corporation) C:\Users\Carlos\Downloads\NDP46-KB3045560-Web.exe
2016-04-27 14:59 - 2016-07-06 07:33 - 00101080 _____ (GAS Tecnologia) C:\Windows\system32\Drivers\wsddfac.sys
2016-04-27 14:59 - 2016-04-27 14:59 - 00000000 ___HD C:\Program Files (x86)\GAS Tecnologia
2016-04-27 14:59 - 2016-04-27 14:59 - 00000000 ___HD C:\Program Files (x86)\Diebold
2016-04-27 14:59 - 2016-04-27 14:59 - 00000000 ____D C:\Program Files\Diebold
2016-04-27 14:59 - 2015-03-18 11:23 - 00103640 ____N (GAS Tecnologia) C:\Windows\system32\Drivers\wsddpp.sys
2016-04-27 14:57 - 2016-04-27 14:57 - 16373224 _____ (GAS Tecnologia ) C:\Users\Carlos\Downloads\gbpcefwr64 (3).exe
2016-04-27 14:47 - 2016-04-27 14:47 - 02665128 _____ (CAIXA) C:\Users\Carlos\Downloads\iGBPCEFwr (2).exe
2016-04-27 14:35 - 2016-04-27 15:00 - 00001024 _____ C:\.rnd
2016-04-27 14:34 - 2016-04-27 14:34 - 16373224 _____ (GAS Tecnologia ) C:\Users\Carlos\Downloads\gbpcefwr64 (2).exe
2016-04-27 14:33 - 2016-04-27 14:33 - 16373224 _____ (GAS Tecnologia ) C:\Users\Carlos\Downloads\gbpcefwr64 (1).exe
2016-04-27 14:32 - 2016-04-27 14:33 - 16373224 _____ (GAS Tecnologia ) C:\Users\Carlos\Downloads\gbpcefwr64.exe
2016-04-27 14:22 - 2016-04-27 14:22 - 02665128 _____ (CAIXA) C:\Users\Carlos\Downloads\iGBPCEFwr (1).exe
2016-04-27 14:07 - 2016-04-27 14:07 - 02665128 _____ (CAIXA) C:\Users\Carlos\Downloads\iGBPCEFwr.exe
2016-04-27 14:02 - 2016-04-27 14:03 - 00016689 _____ C:\Users\Carlos\AppData\Roaming\unins000.dat
2016-04-27 14:02 - 2016-04-27 14:02 - 00730322 _____ C:\Users\Carlos\AppData\Roaming\unins000.exe
2016-04-27 14:02 - 2016-04-27 14:02 - 00000000 ____D C:\Users\Todos os Usuários\boost_interprocess
2016-04-27 14:02 - 2016-04-27 14:02 - 00000000 ____D C:\Users\Carlos\AppData\Local\GAS Tecnologia
2016-04-27 14:02 - 2016-04-27 14:02 - 00000000 ____D C:\ProgramData\boost_interprocess
2016-04-27 13:53 - 2016-06-01 17:09 - 479911571 _____ C:\Windows\MEMORY.DMP
2016-04-27 13:53 - 2016-06-01 17:09 - 00000000 ____D C:\Windows\Minidump
2016-04-27 13:53 - 2016-04-27 13:53 - 00277112 _____ C:\Windows\Minidump\042716-44616-01.dmp
2016-04-27 13:50 - 2016-04-27 13:50 - 00000000 ____D C:\Users\Carlos\Documents\Modelos Personalizados do Office
2016-04-27 13:44 - 2016-04-27 13:44 - 00003276 _____ C:\Windows\System32\Tasks\{4B41475D-47A2-4430-AC7B-8221DD685F23}
2016-04-27 13:38 - 2016-07-06 07:33 - 00000000 ____D C:\Program Files (x86)\GbPlugin
2016-04-27 13:38 - 2016-04-27 14:02 - 00000000 ____D C:\Users\Todos os Usuários\GAS Tecnologia
2016-04-27 13:38 - 2016-04-27 14:02 - 00000000 ____D C:\ProgramData\GAS Tecnologia
2016-04-27 13:38 - 2016-04-27 13:39 - 00000000 ____D C:\Users\Todos os Usuários\GbPlugin
2016-04-27 13:38 - 2016-04-27 13:39 - 00000000 ____D C:\ProgramData\GbPlugin
2016-04-27 13:36 - 2016-04-27 13:36 - 02665128 _____ (CAIXA) C:\Users\Carlos\Downloads\iGBPCEFgb.exe
2016-04-27 13:25 - 2016-04-27 13:25 - 00000000 ____D C:\Users\Carlos\AppData\LocalLow\Adobe
2016-04-27 13:25 - 2016-04-27 13:25 - 00000000 ____D C:\Users\Carlos\AppData\Local\CEF
2016-04-27 13:11 - 2016-04-27 13:11 - 00000000 ____D C:\Users\Carlos\AppData\Roaming\AVG
2016-04-27 13:10 - 2016-06-15 08:08 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVG
2016-04-27 13:10 - 2016-04-27 13:10 - 00000000 ____D C:\Users\Carlos\AppData\Roaming\TuneUp Software
2016-04-27 13:10 - 2016-04-27 13:10 - 00000000 ____D C:\Program Files\Common Files\AV
2016-04-27 13:09 - 2016-04-27 13:09 - 00000000 ___HD C:\$AVG
2016-04-27 13:07 - 2016-04-27 13:09 - 00000000 ____D C:\Users\Todos os Usuários\Avg
2016-04-27 13:07 - 2016-04-27 13:09 - 00000000 ____D C:\ProgramData\Avg
2016-04-27 13:07 - 2016-04-27 13:09 - 00000000 ____D C:\Program Files (x86)\AVG
2016-04-27 13:06 - 2016-07-06 07:35 - 00000000 ____D C:\Users\Todos os Usuários\MFAData
2016-04-27 13:06 - 2016-07-06 07:35 - 00000000 ____D C:\ProgramData\MFAData
2016-04-27 13:06 - 2016-05-16 07:40 - 00000000 ____D C:\Users\Carlos\AppData\Local\Avg
2016-04-27 13:06 - 2016-04-27 13:07 - 00000000 ____D C:\Users\Carlos\AppData\Local\AvgSetupLog
2016-04-27 13:06 - 2016-04-27 13:06 - 00000000 ____D C:\Users\Carlos\AppData\Local\MFAData
2016-04-27 13:06 - 2016-04-27 13:06 - 00000000 ____D C:\Users\Carlos\AppData\Local\Avg2015
2016-04-27 13:00 - 2016-04-27 13:00 - 00000000 ____D C:\Users\Todos os Usuários\Protexis
2016-04-27 13:00 - 2016-04-27 13:00 - 00000000 ____D C:\Users\Carlos\Documents\Minhas paletas
2016-04-27 13:00 - 2016-04-27 13:00 - 00000000 ____D C:\ProgramData\Protexis
2016-04-27 12:58 - 2016-05-30 14:57 - 00000000 ____D C:\Users\Todos os Usuários\Protexis64
2016-04-27 12:58 - 2016-05-30 14:57 - 00000000 ____D C:\ProgramData\Protexis64
2016-04-27 12:51 - 2016-07-05 16:29 - 00000000 ____D C:\Users\Todos os Usuários\Package Cache
2016-04-27 12:51 - 2016-07-05 16:29 - 00000000 ____D C:\ProgramData\Package Cache
2016-04-27 12:49 - 2016-04-27 12:49 - 00000000 ____D C:\Program Files\Common Files\Protexis
2016-04-27 11:47 - 2016-04-27 11:47 - 00000000 ____D C:\Users\Carlos\Desktop\preços etiquetas Primos e ITW
2016-04-27 11:47 - 2016-04-27 11:47 - 00000000 ____D C:\Users\Carlos\Desktop\Lato2OFL
2016-04-27 11:47 - 2016-04-27 11:47 - 00000000 ____D C:\Users\Carlos\Desktop\FOTOS MOSTRA 1ºS ANOS
2016-04-27 11:47 - 2016-04-27 11:47 - 00000000 ____D C:\Users\Carlos\Desktop\Fotos casa Parque
2016-04-27 11:47 - 2016-04-27 11:47 - 00000000 ____D C:\Users\Carlos\Desktop\FOTOS ARTPLACAS
2016-04-27 11:47 - 2016-04-27 11:47 - 00000000 ____D C:\Users\Carlos\Desktop\fotos
2016-04-27 11:47 - 2016-04-27 11:47 - 00000000 ____D C:\Users\Carlos\Desktop\Enviar para Gráfica
2016-04-27 11:47 - 2016-04-27 11:47 - 00000000 ____D C:\Users\Carlos\Desktop\Dados anteriores do Firefox-2
2016-04-27 11:47 - 2016-04-27 11:47 - 00000000 ____D C:\Users\Carlos\Desktop\Dados anteriores do Firefox-1
2016-04-27 11:47 - 2016-03-31 16:37 - 09118361 _____ C:\Users\Carlos\Desktop\Conven Imóveis.eps
2016-04-27 11:47 - 2016-03-30 15:50 - 06102132 _____ C:\Users\Carlos\Desktop\Lato2OFL.zip
2016-04-27 11:47 - 2016-02-10 10:42 - 00900767 _____ C:\Users\Carlos\Desktop\GOLD MAX AMARELO MÉDIO IMPRIMAX.cdr
2016-04-27 11:47 - 2015-12-21 08:23 - 00045568 _____ C:\Users\Carlos\Desktop\NFF 026-15 Fornecedor Artplacas ( Etiqueta ).xls
2016-04-27 11:47 - 2015-10-20 10:16 - 00172276 _____ C:\Users\Carlos\Desktop\INFORMAÇÕES SOBRE A EMPRESA.pdf
2016-04-27 11:47 - 2015-10-05 14:45 - 04962168 ____T C:\Users\Carlos\Desktop\Documentos_Artplacas.rar
2016-04-27 11:47 - 2014-08-13 09:13 - 01033216 _____ C:\Users\Carlos\Desktop\APRESENTAÇÃO.msg
2016-04-27 11:47 - 2014-04-29 17:20 - 02149421 _____ C:\Users\Carlos\Desktop\ANA JULIA.cdr
2016-04-27 11:47 - 2012-10-23 11:18 - 01744471 _____ C:\Users\Carlos\Desktop\FOTO.cdr
2016-04-27 11:47 - 2011-11-18 12:21 - 00183296 _____ C:\Users\Carlos\Desktop\E-mail.oft
2016-04-27 11:35 - 2016-04-27 11:36 - 65444688 _____ (Microsoft Corporation) C:\Users\Carlos\Downloads\NDP46-KB3045557-x86-x64-AllOS-ENU.exe
2016-04-27 11:29 - 2016-07-06 07:49 - 00000000 ____D C:\Users\Carlos\Documents\Arquivos do Outlook
2016-04-27 11:28 - 2016-07-06 07:36 - 00003758 _____ C:\Windows\System32\Tasks\AutoKMS
2016-04-27 11:28 - 2016-05-30 14:57 - 00000000 ____D C:\Windows\AutoKMS
2016-04-27 11:27 - 2016-04-27 11:27 - 00000000 ____D C:\Users\Todos os Usuários\Microsoft Toolkit
2016-04-27 11:27 - 2016-04-27 11:27 - 00000000 ____D C:\Users\Todos os Usuários\Hewlett-Packard
2016-04-27 11:27 - 2016-04-27 11:27 - 00000000 ____D C:\ProgramData\Microsoft Toolkit
2016-04-27 11:27 - 2016-04-27 11:27 - 00000000 ____D C:\ProgramData\Hewlett-Packard
2016-04-27 11:25 - 2016-06-02 16:31 - 00002441 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk
2016-04-27 11:25 - 2016-05-12 07:47 - 00003886 _____ C:\Windows\System32\Tasks\Adobe Acrobat Update Task
2016-04-27 11:25 - 2016-04-27 11:39 - 00000000 ____D C:\Users\Todos os Usuários\Adobe
2016-04-27 11:25 - 2016-04-27 11:39 - 00000000 ____D C:\ProgramData\Adobe
2016-04-27 11:25 - 2016-04-27 11:25 - 00000000 ____D C:\Program Files (x86)\Adobe
2016-04-27 11:24 - 2016-04-27 13:25 - 00000000 ____D C:\Users\Carlos\AppData\Local\Adobe
2016-04-27 11:22 - 2016-04-28 11:48 - 01598192 _____ C:\Windows\SysWOW64\PerfStringBackup.INI
2016-04-27 11:20 - 2009-11-25 11:47 - 01942856 _____ (Microsoft Corporation) C:\Windows\system32\dfshim.dll
2016-04-27 11:20 - 2009-11-25 11:47 - 01130824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dfshim.dll
2016-04-27 11:20 - 2009-11-25 11:47 - 00444752 _____ (Microsoft Corporation) C:\Windows\system32\mscoree.dll
2016-04-27 11:20 - 2009-11-25 11:47 - 00320352 _____ (Microsoft Corporation) C:\Windows\system32\PresentationHost.exe
2016-04-27 11:20 - 2009-11-25 11:47 - 00297808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mscoree.dll
2016-04-27 11:20 - 2009-11-25 11:47 - 00295264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PresentationHost.exe
2016-04-27 11:20 - 2009-11-25 11:47 - 00109912 _____ (Microsoft Corporation) C:\Windows\system32\PresentationHostProxy.dll
2016-04-27 11:20 - 2009-11-25 11:47 - 00099176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PresentationHostProxy.dll
2016-04-27 11:20 - 2009-11-25 11:47 - 00049472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netfxperf.dll
2016-04-27 11:20 - 2009-11-25 11:47 - 00048960 _____ (Microsoft Corporation) C:\Windows\system32\netfxperf.dll
2016-04-27 11:18 - 2016-04-27 11:18 - 01005568 _____ (Microsoft Corporation) C:\Users\Carlos\Downloads\dotNetFx45_Full_setup.exe
2016-04-27 11:18 - 2016-04-27 11:18 - 00000000 ____D C:\Program Files (x86)\Hewlett-Packard
2016-04-27 11:17 - 2012-09-26 02:45 - 00052736 ____R C:\Windows\system32\HP1100SMs.dll
2016-04-27 11:17 - 2012-08-31 15:10 - 00350720 _____ C:\Windows\system32\mvhlewsi.DLL
2016-04-27 11:17 - 2012-08-31 15:03 - 01696256 _____ C:\Windows\system32\HP1100SM.EXE
2016-04-27 11:17 - 2012-08-31 15:03 - 00288768 _____ C:\Windows\system32\HP1100LM.DLL
2016-04-27 11:16 - 2016-04-27 11:17 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HP
2016-04-27 11:16 - 2016-04-27 11:16 - 00000000 ____D C:\Users\Todos os Usuários\HPSSUPPLY
2016-04-27 11:16 - 2016-04-27 11:16 - 00000000 ____D C:\ProgramData\HPSSUPPLY
2016-04-27 11:16 - 2012-09-26 21:27 - 00126880 _____ (HP) C:\Windows\system32\HPSIsvc.exe
2016-04-27 11:15 - 2016-04-27 11:16 - 00000000 ____D C:\Program Files (x86)\HP
2016-04-27 11:15 - 2016-04-27 11:15 - 00000000 ____D C:\Program Files\HP
2016-04-27 11:12 - 2016-04-27 13:25 - 00000000 ____D C:\Users\Carlos\AppData\Roaming\Adobe
2016-04-27 11:12 - 2016-04-27 11:12 - 00000000 ____D C:\Users\Carlos\Documents\QUIMESP SOLVENTES_arquivos
2016-04-27 11:12 - 2016-04-27 11:12 - 00000000 ____D C:\Users\Carlos\Documents\preços etiquetas Primos e ITW
2016-04-27 11:12 - 2016-04-27 11:12 - 00000000 ____D C:\Users\Carlos\Documents\Meus arquivos recebidos
2016-04-27 11:12 - 2015-01-27 08:35 - 00713901 _____ C:\Users\Carlos\Documents\PYK 26.pdf
2016-04-27 11:12 - 2014-11-18 14:46 - 04761562 _____ C:\Users\Carlos\Documents\Painel 3,0 x 1,0 texto.cdr
2016-04-27 11:12 - 2014-10-24 11:52 - 00085294 _____ C:\Users\Carlos\Documents\NICOLE.pdf
2016-04-27 11:12 - 2014-10-21 12:19 - 00115504 _____ C:\Users\Carlos\Documents\SENHA NOTA FICAL PAULISTA.pdf
2016-04-27 11:12 - 2014-08-08 11:05 - 01045817 _____ C:\Users\Carlos\Documents\GN Automação e Projetos ok.pdf
2016-04-27 11:12 - 2014-04-08 16:34 - 00117680 _____ C:\Users\Carlos\Documents\Relação de Etiquetas em Estoque.pdf
2016-04-27 11:12 - 2013-09-23 10:56 - 00447730 _____ C:\Users\Carlos\Documents\QUADRO ANÁLISE E SOLUÇÃO.pdf
2016-04-27 11:12 - 2013-09-23 10:55 - 00418424 _____ C:\Users\Carlos\Documents\Orçamento Quadro MDF Branco.pdf
2016-04-27 11:12 - 2013-08-21 14:57 - 00491063 _____ C:\Users\Carlos\Documents\gates fgb 048.pdf
2016-04-27 11:12 - 2013-08-20 11:38 - 00417987 _____ C:\Users\Carlos\Documents\Orçamento FGB 048.pdf
2016-04-27 11:12 - 2013-08-20 11:33 - 00418641 _____ C:\Users\Carlos\Documents\Orçamento bobina termica.pdf
2016-04-27 11:12 - 2013-08-09 15:40 - 00418965 _____ C:\Users\Carlos\Documents\Orçamento fotolitos linha prensa dos cód. C110 ao C150.pdf
2016-04-27 11:12 - 2013-08-09 15:39 - 00418935 _____ C:\Users\Carlos\Documents\Orçamento fotolitos linha prensa cód. C71 ao C109.pdf
2016-04-27 11:12 - 2013-08-09 15:38 - 00419049 _____ C:\Users\Carlos\Documents\Orçamento fotolito linha prensa dos cód. C215 ao CC180.pdf
2016-04-27 11:12 - 2013-08-09 15:36 - 00418967 _____ C:\Users\Carlos\Documents\Orçamento fotolitos linha prensa dos cód. C151 ao C210.pdf
2016-04-27 11:12 - 2013-07-05 17:00 - 00033099 _____ C:\Users\Carlos\Documents\Cópia_de_segurança_de_ARTPLACAS DESPESAS OBRA.cdr
2016-04-27 11:12 - 2013-07-05 17:00 - 00033084 _____ C:\Users\Carlos\Documents\ARTPLACAS DESPESAS OBRA.cdr
2016-04-27 11:12 - 2013-06-27 15:29 - 01345194 _____ C:\Users\Carlos\Documents\Quadro 5S Sempre.pdf
2016-04-27 11:12 - 2013-06-25 13:20 - 01178565 _____ C:\Users\Carlos\Documents\Quadro Micro V - Sincronizadora Automotiva.pdf
2016-04-27 11:12 - 2013-05-17 09:21 - 00015224 _____ C:\Users\Carlos\Documents\OBRA CAÇAPAVA.xlsx
2016-04-27 11:12 - 2013-04-01 12:28 - 03144856 _____ C:\Users\Carlos\Documents\EXTRATO.ai
2016-04-27 11:12 - 2013-03-04 14:56 - 00410382 _____ C:\Users\Carlos\Documents\COLDTEC.pdf
2016-04-27 11:12 - 2012-10-29 09:49 - 00399961 _____ C:\Users\Carlos\Documents\Placas velocidade.pdf
2016-04-27 11:12 - 2012-06-25 10:52 - 02303623 _____ C:\Users\Carlos\Documents\APRESENTAÇÃO ARTPLACAS.pdf
2016-04-27 11:12 - 2012-05-10 16:01 - 00034945 _____ C:\Users\Carlos\Documents\AUTO ESCOLA JR BANNER.ai
2016-04-27 11:12 - 2012-05-02 14:12 - 00011907 _____ C:\Users\Carlos\Documents\PASTA TABELA PREÇOS GATES.xlsx
2016-04-27 11:12 - 2012-03-06 13:59 - 00137216 _____ C:\Users\Carlos\Documents\MODELO PEDIDO DE COMPRA ARTPLACAS.xls
2016-04-27 11:12 - 2012-03-01 13:56 - 00044495 _____ C:\Users\Carlos\Documents\CARTÃO CNPJ ATUALIZADO.pdf
2016-04-27 11:12 - 2012-02-21 10:00 - 00066052 _____ C:\Users\Carlos\Documents\CARTAO DE VISITA novo.dotx
2016-04-27 11:12 - 2012-02-06 08:03 - 00417867 _____ C:\Users\Carlos\Documents\Orçamento adesivos SANY.pdf
2016-04-27 11:12 - 2012-01-27 09:59 - 00044273 _____ C:\Users\Carlos\Documents\QUIMESP SOLVENTES.htm
2016-04-27 11:12 - 2012-01-18 09:52 - 00197068 _____ C:\Users\Carlos\Documents\PLACA GERAL F4 (2).pdf
2016-04-27 11:12 - 2012-01-18 09:49 - 00181705 _____ C:\Users\Carlos\Documents\PLACA CABINES F4.pdf
2016-04-27 11:12 - 2011-12-16 10:46 - 00001727 _____ C:\Users\Carlos\Documents\DOCUMENTOS PARA SILK GATES.txt
2016-04-27 11:12 - 2011-11-10 08:28 - 00063700 _____ C:\Users\Carlos\Documents\(CDPL563_ECN#AB0AC2) PLACARDS, ENGLISH-PDF.zip
2016-04-27 11:12 - 2011-10-28 10:30 - 00076181 _____ C:\Users\Carlos\Documents\CONTAS2011_artplacas (2).xlsx
2016-04-27 11:12 - 2011-08-26 16:39 - 00051289 _____ C:\Users\Carlos\Documents\Cópia_de_segurança_de_CDPL561-5 Rev.cdr
2016-04-27 11:12 - 2011-08-26 16:39 - 00051281 _____ C:\Users\Carlos\Documents\CDPL561-5 Rev.cdr
2016-04-27 11:12 - 2011-07-14 16:09 - 03263617 _____ C:\Users\Carlos\Documents\CDPL561-5 Rev.eps
2016-04-27 11:12 - 2011-06-20 08:33 - 00270336 _____ C:\Users\Carlos\Documents\PLANILHA CONTROLE DE GASTOS  art placas jacarei.xls
2016-04-27 11:01 - 2016-06-13 19:31 - 00484008 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
2016-04-27 11:01 - 2016-04-27 11:01 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MPC-HC x64
2016-04-27 11:01 - 2016-04-27 11:01 - 00000000 ____D C:\Program Files\MPC-HC
2016-04-27 10:59 - 2016-04-27 11:04 - 00000000 ____D C:\Users\Carlos\Documents\Carlos
2016-04-27 10:58 - 2016-04-27 10:58 - 00000000 ____D C:\Users\Carlos\Documents\Alteração contrato social Artplacas_arquivos
2016-04-27 10:58 - 2016-04-27 10:58 - 00000000 ____D C:\Users\Carlos\Documents\ACERTO
2016-04-27 10:58 - 2016-04-27 10:58 - 00000000 ____D C:\Users\Carlos\Documents\(CDPL563_ECN#AB0AC2) PLACARDS, ENGLISH-PDF
2016-04-27 10:58 - 2012-02-15 16:56 - 00055758 _____ C:\Users\Carlos\Documents\Alteração contrato social Artplacas.htm
2016-04-27 10:57 - 2016-03-21 13:15 - 00850682 _____ C:\Users\Carlos\Downloads\wetransfer-4143ec.zip
2016-04-27 10:57 - 2016-03-07 15:37 - 93692022 _____ C:\Users\Carlos\Downloads\Painel Fachada 355 x 210 cm CURVA (4).cdr
2016-04-27 10:57 - 2016-03-07 15:32 - 93692022 _____ C:\Users\Carlos\Downloads\Painel Fachada 355 x 210 cm CURVA (3).cdr
2016-04-27 10:57 - 2016-03-07 15:14 - 104029141 _____ C:\Users\Carlos\Downloads\Painel Fachada 355 x 210 cm CURVA (2).cdr
2016-04-27 10:57 - 2016-03-07 14:45 - 93692022 _____ C:\Users\Carlos\Downloads\Painel Fachada 355 x 210 cm CURVA.cdr
2016-04-27 10:57 - 2016-03-02 11:17 - 00167998 _____ C:\Users\Carlos\Downloads\peas_carrots.zip
2016-04-27 10:57 - 2016-03-02 11:16 - 00086290 _____ C:\Users\Carlos\Downloads\young_beautiful.zip
2016-04-27 10:57 - 2016-01-07 15:06 - 00444895 _____ C:\Users\Carlos\Downloads\wetransfer-777838 (1).zip
2016-04-27 10:57 - 2016-01-07 14:58 - 00444895 _____ C:\Users\Carlos\Downloads\wetransfer-777838.zip
2016-04-27 10:57 - 2015-11-03 14:59 - 00055347 _____ C:\Users\Carlos\Downloads\ZA-Q-1030C_Sub Contractors_Fonseca_110215 (Artplacas) (1).xlsx
2016-04-27 10:57 - 2015-11-03 14:39 - 00055347 _____ C:\Users\Carlos\Downloads\ZA-Q-1030C_Sub Contractors_Fonseca_110215 (Artplacas).xlsx
2016-04-27 10:57 - 2015-10-28 14:34 - 01503872 _____ (Skype Technologies S.A.) C:\Users\Carlos\Downloads\SkypeSetup.exe
2016-04-27 10:57 - 2015-10-08 07:59 - 00127039 _____ C:\Users\Carlos\Downloads\PO No 1162943-C006348.pdf
2016-04-27 10:57 - 2015-09-15 08:08 - 00021910 _____ C:\Users\Carlos\Downloads\phinster-extrabold.zip
2016-04-27 10:57 - 2015-08-05 15:29 - 00171590 _____ C:\Users\Carlos\Downloads\Placa_FRS0639.PDF
2016-04-27 10:57 - 2015-02-03 15:32 - 00956896 _____ (Microsoft Corporation) C:\Users\Carlos\Downloads\SaveAsPDFandXPS.exe
2016-04-27 10:56 - 2016-05-30 14:57 - 00000000 ____D C:\Windows\System32\Tasks\OfficeSoftwareProtectionPlatform
2016-04-27 10:56 - 2016-04-27 11:09 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2013
2016-04-27 10:56 - 2016-04-27 10:56 - 00000000 ____D C:\Program Files\Common Files\DESIGNER
2016-04-27 10:56 - 2016-04-26 13:39 - 02944584 _____ (AVG Technologies CZ, s.r.o.) C:\Users\Carlos\Downloads\AVG_PCTuneUp_877.exe
2016-04-27 10:56 - 2016-04-26 13:06 - 05051824 _____ (AVG Technologies) C:\Users\Carlos\Downloads\avg_free_stb_all_2015_ltst_618.exe
2016-04-27 10:56 - 2016-03-30 10:57 - 00425312 _____ C:\Users\Carlos\Downloads\EQPR0592R00 (1).pdf
2016-04-27 10:56 - 2016-03-30 07:54 - 00425312 _____ C:\Users\Carlos\Downloads\EQPR0592R00.pdf
2016-04-27 10:56 - 2016-03-07 11:08 - 93692022 _____ C:\Users\Carlos\Downloads\Painel Fachada 355 x 210 cm CURVA (1).cdr
2016-04-27 10:56 - 2016-03-02 11:18 - 00056623 _____ C:\Users\Carlos\Downloads\janda_as_long_as_you_love_me.zip
2016-04-27 10:56 - 2016-03-01 09:26 - 00109814 _____ C:\Users\Carlos\Downloads\EQPR0297.pdf
2016-04-27 10:56 - 2016-02-19 10:13 - 00010373 _____ C:\Users\Carlos\Downloads\Laudos_19%2f02%2f2016.xlsx
2016-04-27 10:56 - 2016-02-19 10:13 - 00010372 _____ C:\Users\Carlos\Downloads\Laudos_19%2f02%2f2016 (1).xlsx
2016-04-27 10:56 - 2016-01-26 08:05 - 00610128 _____ C:\Users\Carlos\Downloads\especificação_identidade_visual_-_novo_adesivo.pdf
2016-04-27 10:56 - 2016-01-15 16:07 - 00439307 _____ C:\Users\Carlos\Downloads\Fr-411A - EQPR0989 R01 (2).pdf
2016-04-27 10:56 - 2016-01-15 16:07 - 00439307 _____ C:\Users\Carlos\Downloads\Fr-411A - EQPR0989 R01 (1).pdf
2016-04-27 10:56 - 2016-01-15 16:06 - 00439307 _____ C:\Users\Carlos\Downloads\Fr-411A - EQPR0989 R01.pdf
2016-04-27 10:56 - 2015-12-03 11:46 - 00357299 _____ C:\Users\Carlos\Downloads\destinacao_ipva_piscitelli.pdf
2016-04-27 10:56 - 2015-09-03 12:53 - 03591398 _____ C:\Users\Carlos\Downloads\kozuka-mincho-pro-m.zip
2016-04-27 10:56 - 2015-06-15 12:01 - 00432125 _____ C:\Users\Carlos\Downloads\Eras.zip
2016-04-27 10:56 - 2015-03-31 14:14 - 00448847 _____ C:\Users\Carlos\Downloads\LPMS BOARDS (US).xlsx
2016-04-27 10:55 - 2016-06-09 07:39 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2016-04-27 10:55 - 2016-04-27 10:55 - 00000000 ____D C:\Windows\PCHEALTH
2016-04-27 10:55 - 2016-04-27 10:55 - 00000000 ____D C:\Users\Todos os Usuários\regid.1991-06.com.microsoft
2016-04-27 10:55 - 2016-04-27 10:55 - 00000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2016-04-27 10:55 - 2016-04-27 10:55 - 00000000 ____D C:\Program Files\Microsoft SQL Server
2016-04-27 10:55 - 2016-04-27 10:55 - 00000000 ____D C:\Program Files (x86)\Microsoft SQL Server
2016-04-27 10:54 - 2016-04-27 10:54 - 00000000 ____D C:\Program Files\Microsoft Analysis Services
2016-04-27 10:54 - 2016-04-27 10:54 - 00000000 ____D C:\Program Files (x86)\Microsoft Analysis Services
2016-04-27 10:53 - 2016-07-04 16:19 - 00000000 ____D C:\Users\Carlos\AppData\Local\Microsoft Help
2016-04-27 10:53 - 2016-07-04 11:31 - 00000000 ____D C:\Users\Carlos\AppData\Local\ElevatedDiagnostics
2016-04-27 10:53 - 2016-04-27 11:09 - 00000000 ____D C:\Users\Todos os Usuários\Microsoft Help
2016-04-27 10:53 - 2016-04-27 10:55 - 00000000 ____D C:\Program Files\Microsoft Office
2016-04-27 10:53 - 2016-04-27 10:53 - 00000000 __RHD C:\MSOCache
2016-04-27 10:53 - 2016-04-27 10:53 - 00000000 ____D C:\Program Files (x86)\Microsoft Office
2016-04-27 10:51 - 2016-04-27 10:51 - 00000000 ____D C:\Users\Carlos\AppData\Roaming\WinRAR
2016-04-27 10:50 - 2016-06-20 08:02 - 00002193 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2016-04-27 10:50 - 2016-06-20 08:02 - 00002181 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2016-04-27 10:50 - 2016-04-27 10:50 - 00000000 ____D C:\Users\Carlos\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
2016-04-27 10:50 - 2016-04-27 10:50 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
2016-04-27 10:50 - 2016-04-27 10:50 - 00000000 ____D C:\Program Files\WinRAR
2016-04-27 10:49 - 2016-07-06 08:00 - 00001070 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2016-04-27 10:49 - 2016-07-06 08:00 - 00001066 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2016-04-27 10:49 - 2016-05-11 07:55 - 00004066 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2016-04-27 10:49 - 2016-05-11 07:55 - 00003814 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2016-04-27 10:49 - 2016-04-27 14:37 - 00000000 ____D C:\Users\Carlos\AppData\Local\Google
2016-04-27 10:49 - 2016-04-27 10:50 - 00000000 ____D C:\Program Files (x86)\Google
2016-04-27 10:49 - 2016-04-27 10:49 - 00000000 ____D C:\Users\Carlos\AppData\Local\Deployment
2016-04-27 10:49 - 2016-04-27 10:49 - 00000000 ____D C:\Users\Carlos\AppData\Local\Apps\2.0
2016-04-27 10:48 - 2016-07-06 07:42 - 00004318 _____ C:\Windows\System32\Tasks\User_Feed_Synchronization-{6ADA9010-5501-4DF1-BC96-F74C4E3A5256}
2016-04-27 10:38 - 2016-06-22 14:51 - 00138008 _____ C:\Users\Carlos\AppData\Local\GDIPFONTCACHEV1.DAT
2016-04-27 10:38 - 2016-04-27 10:38 - 00001419 _____ C:\Users\Carlos\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2016-04-27 10:38 - 2016-04-27 10:38 - 00001385 _____ C:\Users\Carlos\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer (64-bit).lnk
2016-04-27 10:37 - 2016-05-30 14:58 - 00000000 ____D C:\Users\Carlos
2016-04-27 10:37 - 2016-04-27 10:37 - 00000020 ___SH C:\Users\Carlos\ntuser.ini
2016-04-27 10:37 - 2016-04-27 10:37 - 00000000 _SHDL C:\Users\Carlos\Modelos
2016-04-27 10:37 - 2016-04-27 10:37 - 00000000 _SHDL C:\Users\Carlos\Meus documentos
2016-04-27 10:37 - 2016-04-27 10:37 - 00000000 _SHDL C:\Users\Carlos\Menu Iniciar
2016-04-27 10:37 - 2016-04-27 10:37 - 00000000 _SHDL C:\Users\Carlos\Documents\Minhas músicas
2016-04-27 10:37 - 2016-04-27 10:37 - 00000000 _SHDL C:\Users\Carlos\Documents\Minhas imagens
2016-04-27 10:37 - 2016-04-27 10:37 - 00000000 _SHDL C:\Users\Carlos\Documents\Meus vídeos
2016-04-27 10:37 - 2016-04-27 10:37 - 00000000 _SHDL C:\Users\Carlos\Dados de aplicativos
2016-04-27 10:37 - 2016-04-27 10:37 - 00000000 _SHDL C:\Users\Carlos\Configurações locais
2016-04-27 10:37 - 2016-04-27 10:37 - 00000000 _SHDL C:\Users\Carlos\AppData\Roaming\Microsoft\Windows\Start Menu\Programas
2016-04-27 10:37 - 2016-04-27 10:37 - 00000000 _SHDL C:\Users\Carlos\AppData\Local\Histórico
2016-04-27 10:37 - 2016-04-27 10:37 - 00000000 _SHDL C:\Users\Carlos\AppData\Local\Dados de aplicativos
2016-04-27 10:37 - 2016-04-27 10:37 - 00000000 _SHDL C:\Users\Carlos\Ambiente de rede
2016-04-27 10:37 - 2016-04-27 10:37 - 00000000 _SHDL C:\Users\Carlos\Ambiente de impressão
2016-04-27 10:37 - 2016-04-27 10:37 - 00000000 ____D C:\Users\Carlos\AppData\Local\VirtualStore
2016-04-27 10:37 - 2009-07-14 15:11 - 00000000 ____D C:\Users\Carlos\AppData\Roaming\Media Center Programs
2016-04-27 10:36 - 2012-06-02 19:19 - 02428952 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2016-04-27 10:36 - 2012-06-02 19:19 - 00701976 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2016-04-27 10:36 - 2012-06-02 19:19 - 00057880 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2016-04-27 10:36 - 2012-06-02 19:19 - 00044056 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
2016-04-27 10:36 - 2012-06-02 19:19 - 00038424 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
2016-04-27 10:36 - 2012-06-02 19:15 - 02622464 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2016-04-27 10:36 - 2012-06-02 19:15 - 00099840 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
2016-04-27 10:36 - 2012-06-02 15:19 - 00186752 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
2016-04-27 10:36 - 2012-06-02 15:15 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
2016-04-27 10:35 - 2016-04-27 10:35 - 00000000 _SHDL C:\Users\Usuário Padrão\Documents\Minhas músicas
2016-04-27 10:35 - 2016-04-27 10:35 - 00000000 _SHDL C:\Users\Usuário Padrão\Documents\Minhas imagens
2016-04-27 10:35 - 2016-04-27 10:35 - 00000000 _SHDL C:\Users\Usuário Padrão\Documents\Meus vídeos
2016-04-27 10:35 - 2016-04-27 10:35 - 00000000 _SHDL C:\Users\Usuário Padrão\AppData\Roaming\Microsoft\Windows\Start Menu\Programas
2016-04-27 10:35 - 2016-04-27 10:35 - 00000000 _SHDL C:\Users\Usuário Padrão\AppData\Local\Histórico
2016-04-27 10:35 - 2016-04-27 10:35 - 00000000 _SHDL C:\Users\Usuário Padrão\AppData\Local\Dados de aplicativos
2016-04-27 10:35 - 2016-04-27 10:35 - 00000000 _SHDL C:\Users\Usuário Padrão
2016-04-27 10:35 - 2016-04-27 10:35 - 00000000 _SHDL C:\Users\Todos os Usuários\Modelos
2016-04-27 10:35 - 2016-04-27 10:35 - 00000000 _SHDL C:\Users\Todos os Usuários\Menu Iniciar
2016-04-27 10:35 - 2016-04-27 10:35 - 00000000 _SHDL C:\Users\Todos os Usuários\Favoritos
2016-04-27 10:35 - 2016-04-27 10:35 - 00000000 _SHDL C:\Users\Todos os Usuários\Documentos
2016-04-27 10:35 - 2016-04-27 10:35 - 00000000 _SHDL C:\Users\Todos os Usuários\Dados de aplicativos
2016-04-27 10:35 - 2016-04-27 10:35 - 00000000 _SHDL C:\Users\Todos os Usuários
2016-04-27 10:35 - 2016-04-27 10:35 - 00000000 _SHDL C:\Users\Public\Documents\Minhas músicas
2016-04-27 10:35 - 2016-04-27 10:35 - 00000000 _SHDL C:\Users\Public\Documents\Minhas imagens
2016-04-27 10:35 - 2016-04-27 10:35 - 00000000 _SHDL C:\Users\Public\Documents\Meus vídeos
2016-04-27 10:35 - 2016-04-27 10:35 - 00000000 _SHDL C:\Users\Default\Modelos
2016-04-27 10:35 - 2016-04-27 10:35 - 00000000 _SHDL C:\Users\Default\Meus documentos
2016-04-27 10:35 - 2016-04-27 10:35 - 00000000 _SHDL C:\Users\Default\Menu Iniciar
2016-04-27 10:35 - 2016-04-27 10:35 - 00000000 _SHDL C:\Users\Default\Documents\Minhas músicas
2016-04-27 10:35 - 2016-04-27 10:35 - 00000000 _SHDL C:\Users\Default\Documents\Minhas imagens
2016-04-27 10:35 - 2016-04-27 10:35 - 00000000 _SHDL C:\Users\Default\Documents\Meus vídeos
2016-04-27 10:35 - 2016-04-27 10:35 - 00000000 _SHDL C:\Users\Default\Dados de aplicativos
2016-04-27 10:35 - 2016-04-27 10:35 - 00000000 _SHDL C:\Users\Default\Configurações locais
2016-04-27 10:35 - 2016-04-27 10:35 - 00000000 _SHDL C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programas
2016-04-27 10:35 - 2016-04-27 10:35 - 00000000 _SHDL C:\Users\Default\AppData\Local\Histórico
2016-04-27 10:35 - 2016-04-27 10:35 - 00000000 _SHDL C:\Users\Default\AppData\Local\Dados de aplicativos
2016-04-27 10:35 - 2016-04-27 10:35 - 00000000 _SHDL C:\Users\Default\Ambiente de rede
2016-04-27 10:35 - 2016-04-27 10:35 - 00000000 _SHDL C:\Users\Default\Ambiente de impressão
2016-04-27 10:35 - 2016-04-27 10:35 - 00000000 _SHDL C:\Users\Default User\Documents\Minhas músicas
2016-04-27 10:35 - 2016-04-27 10:35 - 00000000 _SHDL C:\Users\Default User\Documents\Minhas imagens
2016-04-27 10:35 - 2016-04-27 10:35 - 00000000 _SHDL C:\Users\Default User\Documents\Meus vídeos
2016-04-27 10:35 - 2016-04-27 10:35 - 00000000 _SHDL C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programas
2016-04-27 10:35 - 2016-04-27 10:35 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Histórico
2016-04-27 10:35 - 2016-04-27 10:35 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Dados de aplicativos
2016-04-27 10:35 - 2016-04-27 10:35 - 00000000 _SHDL C:\ProgramData\Modelos
2016-04-27 10:35 - 2016-04-27 10:35 - 00000000 _SHDL C:\ProgramData\Microsoft\Windows\Start Menu\Programas
2016-04-27 10:35 - 2016-04-27 10:35 - 00000000 _SHDL C:\ProgramData\Menu Iniciar
2016-04-27 10:35 - 2016-04-27 10:35 - 00000000 _SHDL C:\ProgramData\Favoritos
2016-04-27 10:35 - 2016-04-27 10:35 - 00000000 _SHDL C:\ProgramData\Documentos
2016-04-27 10:35 - 2016-04-27 10:35 - 00000000 _SHDL C:\ProgramData\Dados de aplicativos
2016-04-27 10:35 - 2016-04-27 10:35 - 00000000 _SHDL C:\Program Files\Common Files\Sistema
2016-04-27 10:35 - 2016-04-27 10:35 - 00000000 _SHDL C:\Program Files\Arquivos Comuns
2016-04-27 10:35 - 2016-04-27 10:35 - 00000000 _SHDL C:\Arquivos de Programas
2016-04-27 10:33 - 2016-04-27 10:33 - 00001345 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Media Center.lnk
2016-04-27 10:33 - 2016-04-27 10:33 - 00001326 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows DVD Maker.lnk
2016-04-27 10:32 - 2016-04-27 10:32 - 00000000 ____H C:\Windows\system32\Drivers\Msft_User_WpdFs_01_09_00.Wdf
2016-04-27 10:29 - 2016-04-27 10:36 - 00000000 ____D C:\Windows\Panther

==================== Três Meses Modificados arquivos e pastas ========

(Se uma entrada for incluída na fixlist, o arquivo/pasta será movido.)

2016-07-06 07:46 - 2009-07-14 14:55 - 00705110 _____ C:\Windows\system32\prfh0416.dat
2016-07-06 07:46 - 2009-07-14 14:55 - 00146910 _____ C:\Windows\system32\prfc0416.dat
2016-07-06 07:46 - 2009-07-14 02:13 - 01633574 _____ C:\Windows\system32\PerfStringBackup.INI
2016-07-06 07:46 - 2009-07-14 00:20 - 00000000 ____D C:\Windows\inf
2016-07-06 07:41 - 2009-07-14 01:45 - 00014016 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2016-07-06 07:41 - 2009-07-14 01:45 - 00014016 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2016-07-06 07:33 - 2009-07-14 02:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2016-06-23 07:50 - 2009-07-14 01:45 - 00517656 _____ C:\Windows\system32\FNTCACHE.DAT

==================== Arquivos na raiz de alguns diretórios =======

2016-04-27 14:02 - 2016-04-27 14:03 - 0016689 _____ () C:\Users\Carlos\AppData\Roaming\unins000.dat
2016-04-27 14:02 - 2016-04-27 14:02 - 0730322 _____ () C:\Users\Carlos\AppData\Roaming\unins000.exe

Alguns arquivos em TEMP:
====================
C:\Users\Carlos\AppData\Local\Temp\avg-a9d5597e-a556-4375-88aa-6f4a8ff5c378.exe
C:\Users\Carlos\AppData\Local\Temp\avguirn_08117618634.exe
C:\Users\Carlos\AppData\Local\Temp\avguirn_081470122759.exe
C:\Users\Carlos\AppData\Local\Temp\avguirn_0867761194.exe
C:\Users\Carlos\AppData\Local\Temp\ose00000.exe


==================== Bamital & volsnap =================

(Não há correção automática para arquivos que não passaram na verificação.)

C:\Windows\system32\winlogon.exe => O arquivo é assinado digitalmente
C:\Windows\system32\wininit.exe => O arquivo é assinado digitalmente
C:\Windows\SysWOW64\wininit.exe => O arquivo é assinado digitalmente
C:\Windows\explorer.exe => O arquivo é assinado digitalmente
C:\Windows\SysWOW64\explorer.exe => O arquivo é assinado digitalmente
C:\Windows\system32\svchost.exe => O arquivo é assinado digitalmente
C:\Windows\SysWOW64\svchost.exe => O arquivo é assinado digitalmente
C:\Windows\system32\services.exe => O arquivo é assinado digitalmente
C:\Windows\system32\User32.dll
[2009-07-13 20:38] - [2016-04-27 10:38] - 1008640 ____A (Microsoft Corporation) 2C353B6CE0C8D03225CAA2AF33B68D79

C:\Windows\SysWOW64\User32.dll
[2009-07-13 20:24] - [2016-04-27 10:38] - 0833024 ____A (Microsoft Corporation) 861C4346F9281DC0380DE72C8D55D6BE

C:\Windows\system32\userinit.exe => O arquivo é assinado digitalmente
C:\Windows\SysWOW64\userinit.exe => O arquivo é assinado digitalmente
C:\Windows\system32\rpcss.dll => O arquivo é assinado digitalmente
C:\Windows\system32\dnsapi.dll => O arquivo é assinado digitalmente
C:\Windows\SysWOW64\dnsapi.dll => O arquivo é assinado digitalmente
C:\Windows\system32\Drivers\volsnap.sys => O arquivo é assinado digitalmente


LastRegBack: 2016-06-27 09:36

==================== Fim de FRST.txt ============================