Publicité
Publicité
Format du document : text/plain
Prévisualisation
Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version:27-01-2016
Ran by Cristiano (administrator) on CTV (03-02-2016 10:19:36)
Running from C:\Users\Cristiano\Desktop
Loaded Profiles: Cristiano & Outros (Available Profiles: Cristiano & Outros)
Platform: Windows 7 Ultimate Service Pack 1 (X64) Language: Português (Portugal)
Internet Explorer Version 11 (Default browser: FF)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Av\avgrsa.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Av\avgcsrva.exe
() C:\Program Files (x86)\AVG Web TuneUp\WtuSystemSupport.exe
(GAS Tecnologia) C:\Program Files (x86)\GbPlugin\gbpsv.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(Atheros) C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe
(Atheros Commnucations) C:\Program Files (x86)\Bluetooth Suite\AdminService.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Av\avgidsagent.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Framework\Common\avgsvca.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Av\avgwdsvcx.exe
(Microsoft Corporation) C:\Windows\SysWOW64\svchost.exe
(Microsoft) C:\Program Files\Softland\novaPDF 8\Server\novapdfs.exe
(Alps Electric Co., Ltd.) C:\Program Files\Apoint\Apoint.exe
(Conexant Systems, Inc.) C:\Program Files\CONEXANT\cAudioFilterAgent\CAudioFilterAgent64.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Atheros Communications) C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe
(Microsoft Corporation) C:\Windows\System32\GWX\GWX.exe
(Atheros Commnucations) C:\Program Files (x86)\Bluetooth Suite\AthBtTray.exe
(GAS Tecnologia LTDA) C:\Program Files\Diebold\Warsaw\core.exe
(Hewlett-Packard Co.) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe
(Hewlett-Packard) C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Av\avgnsa.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Av\avgemca.exe
() C:\Program Files (x86)\AVG Web TuneUp\vprot.exe
(Wondershare) C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Framework\Common\avguix.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Av\avgui.exe
(Sony Corporation) C:\Program Files (x86)\Sony\VAIO Event Service\VESMgr.exe
(Sony Corporation) C:\Program Files (x86)\Sony\VAIO Event Service\VESMgrSub.exe
(AVG Secure Search) C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\40.2.4\ToolbarUpdater.exe
(GAS Tecnologia LTDA) C:\Program Files\Diebold\Warsaw\core.exe
() C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\40.2.4\loggingserver.exe
(Wondershare) C:\Program Files (x86)\Wondershare\WAF\2.1.4.4\WsAppService.exe
(Microsoft Corporation) C:\Windows\SysWOW64\dllhost.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Smart Network\VSNService.exe
(Alps Electric Co., Ltd.) C:\Program Files\Apoint\ApMsgFwd.exe
(ALPS) C:\Program Files\Apoint\Apvfb.exe
(Alps Electric Co., Ltd.) C:\Program Files\Apoint\ApntEx.exe
(Hewlett-Packard Co.) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqste08.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Update\VAIOUpdt.exe
(Hewlett-Packard Co.) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqbam08.exe
(Hewlett-Packard) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqgpc01.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Update\VUAgent.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Realsil Microelectronics Inc.) C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(GAS Tecnologia) C:\Program Files (x86)\GbPlugin\gbpsv.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE
(BitTorrent Inc.) C:\Users\Cristiano\AppData\Roaming\uTorrent\uTorrent.exe
(BitTorrent Inc.) C:\Users\Cristiano\AppData\Roaming\uTorrent\updates\3.4.5_41372\utorrentie.exe
(BitTorrent Inc.) C:\Users\Cristiano\AppData\Roaming\uTorrent\updates\3.4.5_41372\utorrentie.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
==================== Registry (Whitelisted) ===========================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [Apoint] => C:\Program Files\Apoint\Apoint.exe [226672 2011-03-23] (Alps Electric Co., Ltd.)
HKLM\...\Run: [cAudioFilterAgent] => C:\Program Files\Conexant\cAudioFilterAgent\cAudioFilterAgent64.exe [911576 2013-10-30] (Conexant Systems, Inc.)
HKLM\...\Run: [AtherosBtStack] => C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe [790176 2011-03-31] (Atheros Communications)
HKLM\...\Run: [AthBtTray] => C:\Program Files (x86)\Bluetooth Suite\AthBtTray.exe [657056 2011-03-31] (Atheros Commnucations)
HKLM\...\Run: [Diebold - Warsaw] => C:\Program Files\Diebold\Warsaw\core.exe [904928 2015-11-04] (GAS Tecnologia LTDA)
HKLM\...\Run: [IAStorIcon] => C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [287592 2013-11-21] (Intel Corporation)
HKLM-x32\...\Run: [HP Software Update] => C:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe [96056 2013-05-30] (Hewlett-Packard)
HKLM-x32\...\Run: [AvgUi] => C:\Program Files (x86)\AVG\Framework\Common\avguirnx.exe [179624 2016-01-12] (AVG Technologies CZ, s.r.o.)
HKLM-x32\...\Run: [AVG_UI] => C:\Program Files (x86)\AVG\Av\avgui.exe [3874216 2016-01-08] (AVG Technologies CZ, s.r.o.)
HKLM-x32\...\Run: [vProt] => C:\Program Files (x86)\AVG Web TuneUp\vprot.exe [2814864 2016-01-27] ()
HKLM-x32\...\Run: [Wondershare Helper Compact.exe] => C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe [2072928 2014-10-31] (Wondershare)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [596528 2015-12-22] (Oracle Corporation)
HKLM-x32\...\Run: [DivXMediaServer] => C:\Program Files (x86)\DivX\DivX Media Server\DivXMediaServer.exe
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
Winlogon\Notify\ GbPluginBb: C:\Program Files (x86)\GbPlugin\gbieh.dll [2015-10-20] (Banco do Brasil)
Winlogon\Notify\ GbPluginBes: C:\Program Files (x86)\GbPlugin\gbiehBes.dll [2015-09-04] (Banco do Estado de Sergipe - BANESE)
HKU\S-1-5-21-2916229193-2596999592-3945810575-1000\...\Policies\system: [LogonHoursAction] 2
HKU\S-1-5-21-2916229193-2596999592-3945810575-1000\...\Policies\system: [DontDisplayLogonHoursWarnings] 1
HKU\S-1-5-21-2916229193-2596999592-3945810575-1001\...\Policies\system: [LogonHoursAction] 2
HKU\S-1-5-21-2916229193-2596999592-3945810575-1001\...\Policies\system: [DontDisplayLogonHoursWarnings] 1
ShellExecuteHooks-x32: GbPluginObj Class - {E37CB5F0-51F5-4395-A808-5FA49E399F83} - C:\PROGRAM FILES (X86)\GbPlugin\gbieh.dll [1945472 2015-10-20] (Banco do Brasil)
ShellExecuteHooks-x32: GbPluginObj Class - {E37CB5F0-51F5-4395-A808-5FA49E399027} - C:\PROGRAM FILES (X86)\GbPlugin\gbiehbes.dll [1873264 2015-09-04] (Banco do Estado de Sergipe - BANESE)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\HP Digital Imaging Monitor.lnk [2014-11-10]
ShortcutTarget: HP Digital Imaging Monitor.lnk -> C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe (Hewlett-Packard Co.)
GroupPolicy: Restriction - Chrome <======= ATTENTION
GroupPolicyUsers\S-1-5-21-2916229193-2596999592-3945810575-1001\User: Restriction <======= ATTENTION
CHR HKLM\SOFTWARE\Policies\Google: Restriction <======= ATTENTION
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
Tcpip\Parameters: [DhcpNameServer] 192.168.25.1
Tcpip\..\Interfaces\{C5BE2224-CCD5-440C-A3F9-284283D8CD70}: [DhcpNameServer] 192.168.25.1
Tcpip\..\Interfaces\{EE8652D7-6E76-44A0-9D1A-D2926C54634A}: [DhcpNameServer] 192.168.25.1
Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = www.google.com
HKU\S-1-5-21-2916229193-2596999592-3945810575-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxps://mysearch.avg.com/?cid={BF7D4E18-4A00-4299-BD5D-A529363BE94C}&mid=578fb1f658b047cdb879414908571c9f-0cda3a16e75c0e17fa580d9f3ddce2aeee134f51&lang=pt-br&ds=AVG&coid=avgtbavg&cmpid=0116tb&pr=fr&d=2015-09-29 11:08:44&v=4.2.4.155&pid=wtu&sg=&sap=hp
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-2916229193-2596999592-3945810575-1000 -> DefaultScope {95B7759C-8C7F-4BF1-B163-73684A933233} URL = hxxps://mysearch.avg.com/search?cid={BF7D4E18-4A00-4299-BD5D-A529363BE94C}&mid=578fb1f658b047cdb879414908571c9f-0cda3a16e75c0e17fa580d9f3ddce2aeee134f51&lang=pt-br&ds=AVG&coid=avgtbavg&cmpid=0116tb&pr=fr&d=2015-09-29 11:08:44&v=4.2.4.155&pid=wtu&sg=&sap=dsp&q={searchTerms}
SearchScopes: HKU\S-1-5-21-2916229193-2596999592-3945810575-1000 -> {95B7759C-8C7F-4BF1-B163-73684A933233} URL = hxxps://mysearch.avg.com/search?cid={BF7D4E18-4A00-4299-BD5D-A529363BE94C}&mid=578fb1f658b047cdb879414908571c9f-0cda3a16e75c0e17fa580d9f3ddce2aeee134f51&lang=pt-br&ds=AVG&coid=avgtbavg&cmpid=0116tb&pr=fr&d=2015-09-29 11:08:44&v=4.2.4.155&pid=wtu&sg=&sap=dsp&q={searchTerms}
BHO: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\Office15\OCHelper.dll [2015-06-25] (Microsoft Corporation)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office15\URLREDIR.DLL [2014-01-23] (Microsoft Corporation)
BHO: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office\Office15\GROOVEEX.DLL [2015-06-16] (Microsoft Corporation)
BHO-x32: HP Print Enhancer -> {0347C33E-8762-4905-BF09-768834316C61} -> C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll [2009-05-21] (Hewlett-Packard Co.)
BHO-x32: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll [2015-06-25] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_71\bin\ssv.dll [2016-01-25] (Oracle Corporation)
BHO-x32: CIESpeechBHO Class -> {8D10F6C4-0E01-4BD4-8601-11AC1FDF8126} -> C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll [2011-03-31] (Atheros Commnucations)
BHO-x32: AVG Web TuneUp -> {95B7759C-8C7F-4BF1-B163-73684A933233} -> C:\Program Files (x86)\AVG Web TuneUp\4.2.4.155\AVG Web TuneUp.dll [2016-01-27] (AVG)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office15\URLREDIR.DLL [2014-01-22] (Microsoft Corporation)
BHO-x32: GbIehObj Class -> {C41A1C0E-EA6C-11D4-B1B8-444553540000} -> C:\PROGRAM FILES (X86)\GBPLUGIN\gbieh.dll [2015-10-20] (Banco do Brasil)
BHO-x32: GbIehObj Class -> {C41A1C0E-EA6C-11D4-B1B8-444553540027} -> C:\PROGRAM FILES (X86)\GBPLUGIN\gbiehbes.dll [2015-09-04] (Banco do Estado de Sergipe - BANESE)
BHO-x32: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\Office15\GROOVEEX.DLL [2015-06-16] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_71\bin\jp2ssv.dll [2016-01-25] (Oracle Corporation)
BHO-x32: HP Smart BHO Class -> {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} -> C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll [2009-05-21] (Hewlett-Packard Co.)
Handler: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office\Office15\MSOSB.DLL [2014-04-01] (Microsoft Corporation)
StartMenuInternet: IEXPLORE.EXE - iexplore.exe
FireFox:
========
FF ProfilePath: C:\Users\Cristiano\AppData\Roaming\Mozilla\Firefox\Profiles\f714aep6.default-1435240498475
FF Homepage: www.google.com.br
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_20_0_0_286.dll [2016-01-20] ()
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.41212.0\npctrl.dll [2015-12-11] ( Microsoft Corporation)
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~1\MICROS~2\Office15\NPSPWRAP.DLL [2014-01-23] (Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_20_0_0_286.dll [2016-01-20] ()
FF Plugin-x32: @avg.com/AVG SiteSafety plugin,version=11.0.0.1,application/x-avg-sitesafety-plugin -> C:\Program Files (x86)\Common Files\AVG Secure Search\SiteSafetyInstaller\40.2.4\\npsitesafety.dll [No File]
FF Plugin-x32: @java.com/DTPlugin,version=11.71.2 -> C:\Program Files (x86)\Java\jre1.8.0_71\bin\dtplugin\npDeployJava1.dll [2016-01-25] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.71.2 -> C:\Program Files (x86)\Java\jre1.8.0_71\bin\plugin2\npjp2.dll [2016-01-25] (Oracle Corporation)
FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files (x86)\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2015-06-25] (Microsoft Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.41212.0\npctrl.dll [2015-12-11] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office15\NPSPWRAP.DLL [2014-01-22] (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.29.5\npGoogleUpdate3.dll [2016-02-03] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.29.5\npGoogleUpdate3.dll [2016-02-03] (Google Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2015-12-18] (Adobe Systems Inc.)
FF Plugin HKU\S-1-5-21-2916229193-2596999592-3945810575-1000: gastecnologia.com.br/sf/bb64 -> C:\Users\Cristiano\AppData\Local\GAS Tecnologia\GBBD\npsf_bb_64.dll [No File]
FF Plugin HKU\S-1-5-21-2916229193-2596999592-3945810575-1000: gastecnologia.com.br/sf/cef64 -> C:\Users\Cristiano\AppData\Local\GAS Tecnologia\GBBD\npsf_cef_64.dll [No File]
FF Plugin HKU\S-1-5-21-2916229193-2596999592-3945810575-1000: gastecnologia.com.br/sf/gas64 -> C:\Users\Cristiano\AppData\Local\GAS Tecnologia\GBBD\npsf_gas_64.dll [No File]
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npMeetingJoinPluginOC.dll [2015-06-25] (Microsoft Corporation)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll [2015-12-18] (Adobe Systems Inc.)
FF SearchPlugin: C:\Users\Cristiano\AppData\Roaming\Mozilla\Firefox\Profiles\f714aep6.default-1435240498475\searchplugins\avg-secure-search.xml [2016-02-03]
FF Extension: NetVideoHunter - C:\Users\Cristiano\AppData\Roaming\Mozilla\Firefox\Profiles\f714aep6.default-1435240498475\extensions\netvideohunter@netvideohunter.com [2015-11-10]
FF Extension: AVG Web TuneUp - C:\Users\Cristiano\AppData\Roaming\Mozilla\Firefox\Profiles\f714aep6.default-1435240498475\Extensions\avg@toolbar.xpi [2016-01-27]
FF Extension: Adblock Plus - C:\Users\Cristiano\AppData\Roaming\Mozilla\Firefox\Profiles\f714aep6.default-1435240498475\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2016-01-19]
FF HKLM-x32\...\Firefox\Extensions: [smartwebprinting@hp.com] - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3
FF Extension: HP Smart Web Printing - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 [2014-11-10] [not signed]
FF HKU\S-1-5-21-2916229193-2596999592-3945810575-1000\...\Firefox\Extensions: [smartwebprinting@hp.com] - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3
FF HKU\S-1-5-21-2916229193-2596999592-3945810575-1000\...\Firefox\Extensions: [{87F8774F-B485-47E2-A755-A40A8A5E886C}] - C:\Users\Cristiano\AppData\Local\GAS Tecnologia\GBBD\bb\xpi => not found
FF HKU\S-1-5-21-2916229193-2596999592-3945810575-1000\...\Firefox\Extensions: [{87F8774F-B485-47E2-A755-A40A8A5E8878}] - C:\Users\Cristiano\AppData\Local\GAS Tecnologia\GBBD\bes\xpi => not found
FF HKU\S-1-5-21-2916229193-2596999592-3945810575-1000\...\Firefox\Extensions: [{87F8774F-B485-47E2-A755-A40A8A5E886D}] - C:\Users\Cristiano\AppData\Local\GAS Tecnologia\GBBD\cef\xpi => not found
Chrome:
=======
CHR dev: Chrome dev build detected! <======= ATTENTION
CHR StartupUrls: Default -> "hxxp://www.google.com.br/"
CHR Profile: C:\Users\Cristiano\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Apresentações) - C:\Users\Cristiano\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-05-13]
CHR Extension: (Google Docs) - C:\Users\Cristiano\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-05-13]
CHR Extension: (Google Drive) - C:\Users\Cristiano\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2016-01-27]
CHR Extension: (YouTube) - C:\Users\Cristiano\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-09-29]
CHR Extension: (Google Search) - C:\Users\Cristiano\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2016-01-27]
CHR Extension: (Planilhas do Google) - C:\Users\Cristiano\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-05-13]
CHR Extension: (Documentos Google off-line) - C:\Users\Cristiano\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-01-27]
CHR Extension: (GBBD Banco do Brasil) - C:\Users\Cristiano\AppData\Local\Google\Chrome\User Data\Default\Extensions\mkeabchhfifpaaoefpockjhaphjmoapp [2015-01-12]
CHR Extension: (Pagamentos da Chrome Web Store) - C:\Users\Cristiano\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2016-01-27]
CHR Extension: (Gmail) - C:\Users\Cristiano\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-09-29]
CHR HKU\S-1-5-21-2916229193-2596999592-3945810575-1000\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [bbjllphbppobebmjpjcijfbakobcheof] - hxxps://clients2.google.com/service/update2/crx
CHR HKU\S-1-5-21-2916229193-2596999592-3945810575-1000\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [chfdnecihphmhljaaejmgoiahnihplgn] - hxxps://clients2.google.com/service/update2/crx
CHR HKU\S-1-5-21-2916229193-2596999592-3945810575-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [bbjllphbppobebmjpjcijfbakobcheof] - hxxps://clients2.google.com/service/update2/crx
==================== Services (Whitelisted) ========================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
S3 ACDaemon; C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACService.exe [113152 2010-03-18] (ArcSoft Inc.)
R2 Atheros Bt&Wlan Coex Agent; C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe [146592 2011-03-31] (Atheros) [File not signed]
R2 AtherosSvc; C:\Program Files (x86)\Bluetooth Suite\adminservice.exe [75936 2011-03-31] (Atheros Commnucations) [File not signed]
S3 AvgAMPS; C:\Program Files (x86)\AVG\Av\avgamps.exe [627544 2016-01-08] (AVG Technologies CZ, s.r.o.)
R2 AVGIDSAgent; C:\Program Files (x86)\AVG\Av\avgidsagent.exe [3906568 2016-01-08] (AVG Technologies CZ, s.r.o.)
R2 avgsvc; C:\Program Files (x86)\AVG\Framework\Common\avgsvca.exe [1048488 2016-01-12] (AVG Technologies CZ, s.r.o.)
R2 avgwd; C:\Program Files (x86)\AVG\Av\avgwdsvcx.exe [583936 2016-01-08] (AVG Technologies CZ, s.r.o.)
S3 DCDhcpService; C:\Program Files\Sony\VAIO Smart Network\WFDA\DCDhcpService.exe [104096 2011-07-19] (Atheros Communication Inc.) [File not signed]
R2 GbpSv; C:\Program Files (x86)\GbPlugin\gbpsv.exe [593120 2015-09-22] (GAS Tecnologia)
R3 hpqcxs08; C:\Program Files (x86)\HP\Digital Imaging\bin\hpqcxs08.dll [248832 2009-05-21] (Hewlett-Packard Co.) [File not signed]
R2 hpqddsvc; C:\Program Files (x86)\HP\Digital Imaging\bin\hpqddsvc.dll [133120 2009-05-21] (Hewlett-Packard Co.) [File not signed]
R2 IAStorDataMgrSvc; C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [15720 2013-11-21] (Intel Corporation)
R2 Net Driver HPZ12; C:\Windows\system32\HPZinw12.dll [71680 2010-08-06] (Hewlett-Packard) [File not signed]
R2 NovaPdfServer; C:\Program Files\Softland\novaPDF 8\Server\novapdfs.exe [35616 2015-01-09] (Microsoft)
R2 Pml Driver HPZ12; C:\Windows\system32\HPZipm12.dll [89600 2010-08-06] (Hewlett-Packard) [File not signed]
R2 vToolbarUpdater40.2.4; C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\40.2.4\ToolbarUpdater.exe [1923984 2015-12-21] (AVG Secure Search)
R3 VUAgent; C:\Program Files\Sony\VAIO Update\vuagent.exe [1653272 2015-07-31] (Sony Corporation)
R2 Warsaw Technology; C:\Program Files\Diebold\Warsaw\core.exe [904928 2015-11-04] (GAS Tecnologia LTDA)
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)
R2 WsAppService; C:\Program Files (x86)\Wondershare\WAF\2.1.4.4\WsAppService.exe [382464 2015-11-19] (Wondershare) [File not signed]
R2 WtuSystemSupport; C:\Program Files (x86)\AVG Web TuneUp\WtuSystemSupport.exe [1164688 2016-01-27] ()
===================== Drivers (Whitelisted) ==========================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
R1 Avgdiska; C:\Windows\System32\DRIVERS\avgdiska.sys [184240 2015-11-06] (AVG Technologies CZ, s.r.o.)
R1 AVGIDSDriver; C:\Windows\System32\DRIVERS\avgidsdrivera.sys [315312 2015-12-04] (AVG Technologies CZ, s.r.o.)
R0 AVGIDSHA; C:\Windows\System32\DRIVERS\avgidsha.sys [298416 2015-08-20] (AVG Technologies CZ, s.r.o.)
R1 Avgldx64; C:\Windows\System32\DRIVERS\avgldx64.sys [284080 2015-10-21] (AVG Technologies CZ, s.r.o.)
R0 Avgloga; C:\Windows\System32\DRIVERS\avgloga.sys [398256 2015-08-14] (AVG Technologies CZ, s.r.o.)
R0 Avgmfx64; C:\Windows\System32\DRIVERS\avgmfx64.sys [258480 2015-12-04] (AVG Technologies CZ, s.r.o.)
R0 Avgrkx64; C:\Windows\System32\DRIVERS\avgrkx64.sys [42416 2015-12-04] (AVG Technologies CZ, s.r.o.)
R1 Avgtdia; C:\Windows\System32\DRIVERS\avgtdia.sys [302000 2015-10-08] (AVG Technologies CZ, s.r.o.)
S3 ebdrv; C:\Windows\system32\drivers\evbda.sys [3286016 2009-06-10] (Broadcom Corporation)
R1 gbpddfac; C:\Windows\System32\drivers\gbpddfac64.sys [28888 2016-02-03] (GAS Tecnologia)
R1 HWiNFO32; C:\Windows\system32\drivers\HWiNFO64A.SYS [27552 2014-11-08] (REALiX(tm))
R0 iaStorF; C:\Windows\System32\DRIVERS\iaStorF.sys [28008 2013-11-21] (Intel Corporation)
R1 ISODrive; C:\Program Files (x86)\UltraISO\drivers\ISODrv64.sys [115448 2013-11-21] (EZB Systems, Inc.)
U3 TrueSight; C:\Windows\System32\drivers\TrueSight.sys [35064 2015-07-07] ()
R4 WinDivert1.1; C:\Program Files\Diebold\Warsaw\WinDivert64.sys [38104 2015-07-07] (Basil)
R1 wsddfac; C:\Windows\System32\drivers\wsddfac.sys [101080 2016-02-03] (GAS Tecnologia)
R1 wsddpp; C:\Windows\system32\drivers\wsddpp.sys [103640 2015-03-18] (GAS Tecnologia)
S0 gbpddreg; system32\drivers\gbpddreg64.sys [X]
R3 GBPRCM; \??\C:\Program Files (x86)\GbPlugin\gbprcm64.sys [X]
S3 VGPU; System32\drivers\rdvgkmd.sys [X]
R3 Warsaw_PP; \??\C:\PROGRA~2\GbPlugin\wsftprp64.sys [X]
==================== NetSvcs (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
==================== Three Months Created files and folders ========
(If an entry is included in the fixlist, the file/folder will be moved.)
2016-02-03 10:19 - 2016-02-03 10:20 - 00025833 _____ C:\Users\Cristiano\Desktop\FRST.txt
2016-02-03 10:17 - 2016-02-03 10:19 - 00000000 ____D C:\FRST
2016-02-03 10:17 - 2016-02-03 10:17 - 00021164 _____ C:\Users\Cristiano\Desktop\Resumo Evolução da Seguridade Solcial no Brasil e no Mundo.odt
2016-02-03 10:16 - 2016-02-03 10:16 - 02370560 _____ (Farbar) C:\Users\Cristiano\Desktop\FRST64.exe
2016-02-03 10:06 - 2016-02-03 10:06 - 00068186 _____ C:\Users\Cristiano\Desktop\Conteúdo Progrmático INSS 2016.pdf
2016-02-03 07:44 - 2016-02-03 07:44 - 00000000 ___RD C:\Users\Cristiano\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BT Devices
2016-02-02 14:06 - 2016-02-02 14:06 - 00122186 _____ C:\Users\Outros\Desktop\conta_pdf_10022016.pdf
2016-02-02 13:49 - 2016-02-02 13:49 - 00531891 _____ C:\Users\Outros\Desktop\Minha_Fatura_MASTERCARD_05-02-2016.pdf
2016-02-02 13:47 - 2016-02-02 13:47 - 00001144 _____ C:\Users\Outros\Desktop\ComprovanteBB - 2016-01-21-183818.pdf
2016-02-02 13:34 - 2016-02-02 13:34 - 00000000 ___RD C:\Users\Outros\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BT Devices
2016-02-02 09:29 - 2016-02-02 09:29 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Wise Program Uninstaller
2016-02-02 09:29 - 2016-02-02 09:29 - 00000000 ____D C:\Program Files (x86)\Wise
2016-02-02 09:28 - 2016-02-02 09:28 - 00000000 ____D C:\Users\Cristiano\AppData\Roaming\Thunderbird
2016-02-02 09:28 - 2016-02-02 09:28 - 00000000 ____D C:\Users\Cristiano\AppData\Local\Thunderbird
2016-02-02 09:27 - 2016-02-02 09:27 - 00001213 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Thunderbird.lnk
2016-02-02 09:27 - 2016-02-02 09:27 - 00000000 ____D C:\Program Files (x86)\Mozilla Thunderbird
2016-02-01 23:00 - 2016-02-01 23:05 - 00262660 _____ C:\Windows\ntbtlog.txt
2016-02-01 22:49 - 2016-02-01 22:49 - 00000000 ____D C:\Users\Cristiano\Intel
2016-01-31 16:00 - 2016-01-31 16:00 - 00007597 _____ C:\Users\Cristiano\AppData\Local\Resmon.ResmonCfg
2016-01-29 16:54 - 2016-01-29 17:17 - 00000000 ____D C:\Users\Cristiano\AppData\Local\EvernoteNW
2016-01-27 13:47 - 2016-01-27 13:47 - 00000000 ____D C:\Users\Outros\AppData\Roaming\DivX
2016-01-27 09:45 - 2016-01-28 10:58 - 00000000 ____D C:\Users\Cristiano\Desktop\Vídeos Dicas INSS
2016-01-27 08:52 - 2016-01-27 13:45 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2016-01-27 08:47 - 2016-01-27 08:47 - 00000000 ____D C:\Users\Cristiano\.MCTranscodingSDK
2016-01-27 08:42 - 2016-02-01 23:16 - 00000000 ____D C:\Users\Cristiano\AppData\Roaming\DivX
2016-01-27 08:34 - 2016-02-01 23:17 - 00000000 ____D C:\ProgramData\DivX
2016-01-27 07:54 - 2016-01-27 07:54 - 00000000 ____D C:\Users\Cristiano\AppData\Roaming\LibreOffice
2016-01-26 21:18 - 2016-01-26 21:18 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LibreOffice 4.4
2016-01-26 21:16 - 2016-01-26 21:18 - 00000000 ____D C:\Program Files (x86)\LibreOffice 4
2016-01-25 20:51 - 2016-01-25 20:51 - 00000000 ____D C:\Users\Cristiano\AppData\LocalLow\Evernote
2016-01-25 20:51 - 2016-01-25 20:51 - 00000000 ____D C:\Users\Cristiano\AppData\Local\Evernote
2016-01-25 20:50 - 2016-01-25 20:50 - 00000000 ____D C:\Users\Cristiano\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Evernote
2016-01-25 20:50 - 2016-01-25 20:50 - 00000000 ____D C:\Users\Cristiano\AppData\Local\Apps\Evernote
2016-01-25 08:31 - 2016-01-25 08:31 - 00003234 _____ C:\Windows\System32\Tasks\{48EC10B8-086B-4EEA-BCBB-78BDF62F37E0}
2016-01-24 18:51 - 2016-02-03 09:54 - 00000000 ____D C:\Users\Cristiano\AppData\LocalLow\uTorrent
2016-01-24 18:27 - 2016-01-24 18:27 - 00000000 ____D C:\Users\Cristiano\Documents\Ashampoo Burning Studio 16
2016-01-24 18:26 - 2016-01-24 18:26 - 00000000 ____D C:\Users\Cristiano\AppData\Roaming\Ashampoo
2016-01-24 18:24 - 2016-01-24 18:26 - 00000000 ____D C:\Users\Cristiano\AppData\Local\ashampoo
2016-01-24 18:24 - 2016-01-24 18:24 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Ashampoo
2016-01-24 18:23 - 2016-01-24 18:24 - 00000000 ____D C:\ProgramData\Ashampoo
2016-01-24 18:23 - 2016-01-24 18:23 - 00000000 ____D C:\Program Files (x86)\Ashampoo
2016-01-24 15:44 - 2016-01-24 15:44 - 00000034 _____ C:\Users\Cristiano\Desktop\Netflix.txt
2016-01-14 16:58 - 2016-01-14 16:58 - 00005370 _____ C:\Users\Outros\Desktop\ALDO GOMES DE MATOS 1.pdf
2016-01-11 20:43 - 2016-02-03 07:44 - 00101080 _____ (GAS Tecnologia) C:\Windows\system32\Drivers\wsddfac.sys
2016-01-11 20:43 - 2016-01-11 20:43 - 00000000 ___HD C:\Program Files (x86)\GAS Tecnologia
2016-01-11 20:43 - 2016-01-11 20:43 - 00000000 ___HD C:\Program Files (x86)\Diebold
2016-01-11 20:43 - 2016-01-11 20:43 - 00000000 ____D C:\Program Files\Diebold
2016-01-11 20:43 - 2015-03-18 11:23 - 00103640 ____N (GAS Tecnologia) C:\Windows\system32\Drivers\wsddpp.sys
2016-01-10 21:58 - 2016-01-11 20:41 - 00000000 ____D C:\Users\Cristiano\Desktop\Monja Coen
2016-01-07 19:51 - 2016-01-07 19:50 - 00001447 _____ C:\Users\Cristiano\Desktop\Comprovante Inscrição INSS.pdf
2016-01-07 19:45 - 2016-01-07 19:45 - 00044263 _____ C:\Users\Cristiano\Documents\Inscrição INSS.pdf
2016-01-07 18:36 - 2016-02-03 09:25 - 00021592 _____ C:\Users\Cristiano\Desktop\CICLO INSS.xlsx
2016-01-07 17:55 - 2016-01-07 12:54 - 00110949 ____N C:\Users\Cristiano\Desktop\CRISTIANO TELES DE MATOS_31419554259043540.pdf
2016-01-07 17:54 - 2016-01-07 17:54 - 00496860 _____ C:\Users\Cristiano\Desktop\Outlook.com.zip
2016-01-07 11:23 - 2016-01-07 11:23 - 00037935 _____ C:\Users\Cristiano\Documents\ANATEL RESPOSTA - SUPORTE DO ATENDIMENTO AOS USUÁRIOS - [SIS versão 2.2.pdf
2016-01-07 07:56 - 2016-01-07 11:34 - 00000000 ____D C:\Users\Cristiano\Desktop\Leis
2016-01-06 21:59 - 2016-01-26 21:00 - 00000000 ____D C:\Users\Cristiano\Desktop\Informática INSS
2016-01-06 11:10 - 2016-02-02 11:05 - 00038003 _____ C:\Users\Cristiano\Desktop\Aniversários.xlsx
2016-01-05 10:26 - 2016-01-05 10:25 - 00001961 _____ C:\Users\Cristiano\Desktop\Comprovante Coaching Ali Mohamad Jaha.pdf
2016-01-03 21:01 - 2016-01-06 11:04 - 00011818 _____ C:\Users\Cristiano\Desktop\HORÁRIO DE ESTUDO 2016.xlsx
2016-01-01 00:04 - 2016-01-03 11:41 - 00000175 _____ C:\Users\Cristiano\Desktop\comprar.txt
2015-12-29 17:42 - 2015-12-29 17:42 - 00000000 ____D C:\Users\Outros\AppData\Local\Wondershare
2015-12-28 21:05 - 2015-12-28 21:05 - 00027617 _____ C:\Users\Cristiano\Documents\ANATEL - SUPORTE DO ATENDIMENTO AOS USUÁRIOS - [SIS versão 2.2.pdf
2015-12-28 09:38 - 2015-12-28 09:45 - 00000067 _____ C:\Users\Cristiano\Desktop\protocolo.txt
2015-12-24 09:49 - 2016-01-25 08:35 - 00524288 ___SH C:\Windows\system32\config\COMPONENTS{4c09d2d8-aa3c-11e5-bce8-90004eb3f56c}.TMContainer00000000000000000001.regtrans-ms
2015-12-24 09:49 - 2016-01-25 08:35 - 00065536 ___SH C:\Windows\system32\config\COMPONENTS{4c09d2d8-aa3c-11e5-bce8-90004eb3f56c}.TM.blf
2015-12-24 09:49 - 2015-12-24 10:03 - 00524288 ___SH C:\Windows\system32\config\COMPONENTS{4c09d2d8-aa3c-11e5-bce8-90004eb3f56c}.TMContainer00000000000000000002.regtrans-ms
2015-12-23 15:57 - 2015-12-23 15:57 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_WinUsb_01009.Wdf
2015-12-23 15:56 - 2015-12-23 15:56 - 01721576 _____ (Microsoft Corporation) C:\Windows\system32\WdfCoInstaller01009.dll
2015-12-23 15:56 - 2015-12-23 15:56 - 01002728 _____ (Microsoft Corporation) C:\Windows\system32\WinUSBCoInstaller2.dll
2015-12-23 15:49 - 2015-12-23 15:49 - 00000000 ____D C:\Users\Cristiano\AppData\Roaming\HMYGSetting
2015-12-23 15:48 - 2015-12-24 10:25 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Wondershare
2015-12-23 15:47 - 2015-12-23 15:56 - 00000000 ____D C:\Users\Cristiano\.android
2015-12-23 15:43 - 2015-12-23 15:43 - 00000000 ____D C:\Users\Cristiano\AppData\Local\Wondershare
2015-12-23 13:08 - 2016-01-26 21:08 - 00016180 _____ C:\Users\Cristiano\Desktop\CONTEÚDO PROGRAMÁTICO INSS 2016.docx
2015-12-23 12:09 - 2015-12-23 12:09 - 00585071 _____ C:\Users\Cristiano\Desktop\EDITAL INSS 2016.PDF
2015-12-15 19:30 - 2015-12-15 19:31 - 44783845 _____ C:\Users\Cristiano\Desktop\Concurso INSS Dica 19 - Língua Portuguesa - YouTube.mp4
2015-12-12 15:07 - 2015-11-24 10:04 - 00148088 _____ (GAS Tecnologia) C:\Windows\system32\Drivers\wsddin64.sys
2015-12-10 17:27 - 2015-12-10 17:27 - 00000000 ____D C:\Program Files\Common Files\AVG Secure Search
2015-12-09 11:05 - 2015-12-10 17:45 - 00001461 _____ C:\Users\Cristiano\Desktop\Chás.txt
2015-12-07 09:20 - 2015-12-07 09:20 - 00389508 _____ C:\Users\Cristiano\Desktop\FORMULARIO AUTO CRISTIANO.pdf
2015-12-04 14:36 - 2015-12-04 14:36 - 00258480 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgmfx64.sys
2015-12-04 14:35 - 2015-12-04 14:35 - 00315312 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgidsdrivera.sys
2015-12-04 14:27 - 2015-12-04 14:27 - 00042416 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgrkx64.sys
2015-11-13 14:54 - 2015-11-13 14:54 - 00000114 _____ C:\Users\Cristiano\Desktop\Dados Do Veículo.txt
2015-11-13 14:42 - 2015-11-13 14:42 - 00139404 _____ C:\Users\Cristiano\Desktop\SINISTRO.jpg
2015-11-12 22:27 - 2016-01-12 20:19 - 00000000 ____D C:\Users\Cristiano\Desktop\Raciocínio Lógico Técnico INSS Ponto 2015.2
2015-11-12 18:11 - 2015-11-12 18:11 - 00000000 ____D C:\Program Files (x86)\VideoLAN
2015-11-06 15:50 - 2015-11-06 15:50 - 00184240 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgdiska.sys
==================== Three Months Modified files and folders ========
(If an entry is included in the fixlist, the file/folder will be moved.)
2016-02-03 10:19 - 2014-11-07 20:51 - 00001068 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2016-02-03 10:16 - 2014-11-07 21:10 - 00000000 ____D C:\Users\Cristiano\AppData\Roaming\uTorrent
2016-02-03 10:08 - 2009-07-14 01:45 - 00025760 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2016-02-03 10:08 - 2009-07-14 01:45 - 00025760 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2016-02-03 10:04 - 2014-11-10 17:02 - 00000902 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2016-02-03 09:59 - 2015-07-22 21:14 - 00000000 ____D C:\Users\Cristiano\AppData\Roaming\MPC-HC
2016-02-03 09:19 - 2014-11-07 20:51 - 00001064 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2016-02-03 09:14 - 2014-11-07 20:51 - 00004064 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2016-02-03 09:14 - 2014-11-07 20:51 - 00003812 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2016-02-03 08:19 - 2015-09-29 10:57 - 00000000 ____D C:\ProgramData\MFAData
2016-02-03 07:48 - 2014-11-13 16:04 - 00000000 ____D C:\Users\Cristiano\AppData\Local\CrashDumps
2016-02-03 07:48 - 2014-11-11 18:08 - 00000000 ____D C:\Program Files (x86)\GbPlugin
2016-02-03 07:45 - 2015-07-11 21:48 - 00028888 _____ (GAS Tecnologia) C:\Windows\system32\Drivers\gbpddfac64.sys
2016-02-03 07:43 - 2009-07-14 02:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2016-02-02 21:01 - 2015-07-08 19:30 - 00000000 ____D C:\ProgramData\GbPlugin
2016-02-02 13:46 - 2015-01-19 12:49 - 00000000 ____D C:\Users\Outros\AppData\Local\CrashDumps
2016-02-02 13:35 - 2014-11-10 17:50 - 00105184 _____ C:\Users\Outros\AppData\Local\GDIPFONTCACHEV1.DAT
2016-02-02 13:32 - 2015-06-25 10:40 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2016-02-01 23:00 - 2014-11-07 19:55 - 00000000 ____D C:\Program Files (x86)\Intel
2016-02-01 22:54 - 2014-11-08 10:00 - 00000000 ____D C:\Program Files\Intel
2016-02-01 22:54 - 2014-11-07 23:32 - 00706418 _____ C:\Windows\system32\prfh0416.dat
2016-02-01 22:54 - 2014-11-07 23:32 - 00147756 _____ C:\Windows\system32\prfc0416.dat
2016-02-01 22:54 - 2014-11-07 22:33 - 02533120 _____ C:\Windows\SysWOW64\PerfStringBackup.INI
2016-02-01 22:54 - 2014-11-07 20:13 - 00000000 ____D C:\ProgramData\Intel
2016-02-01 22:54 - 2014-11-07 19:55 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel
2016-02-01 22:54 - 2011-04-12 09:55 - 00721556 _____ C:\Windows\system32\prfh0816.dat
2016-02-01 22:54 - 2011-04-12 09:55 - 00153006 _____ C:\Windows\system32\prfc0816.dat
2016-02-01 22:54 - 2009-07-14 00:20 - 00000000 ____D C:\Windows\inf
2016-02-01 22:49 - 2014-11-07 19:36 - 00000000 ____D C:\Users\Cristiano
2016-02-01 21:16 - 2015-01-16 16:21 - 00000000 ____D C:\Users\Cristiano\Desktop\INSS
2016-01-31 16:02 - 2014-11-08 07:26 - 00000000 ____D C:\Windows\pss
2016-01-30 20:25 - 2014-11-07 20:53 - 00002210 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2016-01-30 19:30 - 2009-07-14 00:20 - 00000000 ____D C:\Windows\system32\NDF
2016-01-27 20:42 - 2015-09-29 11:08 - 00000000 ____D C:\Program Files (x86)\AVG Web TuneUp
2016-01-27 07:54 - 2009-07-14 01:45 - 00430944 _____ C:\Windows\system32\FNTCACHE.DAT
2016-01-27 07:53 - 2014-11-07 20:04 - 00105184 _____ C:\Users\Cristiano\AppData\Local\GDIPFONTCACHEV1.DAT
2016-01-26 10:10 - 2009-07-14 02:13 - 02506158 _____ C:\Windows\system32\PerfStringBackup.INI
2016-01-25 20:40 - 2014-11-08 00:43 - 00000000 ____D C:\Program Files\Microsoft Silverlight
2016-01-25 20:40 - 2014-11-08 00:43 - 00000000 ____D C:\Program Files (x86)\Microsoft Silverlight
2016-01-25 08:38 - 2014-11-08 00:44 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
2016-01-25 08:35 - 2014-12-04 18:27 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2016-01-25 08:35 - 2014-11-10 18:44 - 00000000 ____D C:\Program Files (x86)\Java
2016-01-25 08:35 - 2014-11-08 09:21 - 00000000 ____D C:\ProgramData\Oracle
2016-01-25 08:33 - 2015-08-31 20:08 - 00000000 ____D C:\Users\Cristiano\.oracle_jre_usage
2016-01-25 08:33 - 2014-12-04 18:27 - 00097888 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2016-01-24 19:25 - 2014-11-08 09:07 - 00000000 ____D C:\ProgramData\Nero
2016-01-21 20:25 - 2014-11-07 21:15 - 00000000 ____D C:\Users\Cristiano\AppData\Roaming\Q-Dir
2016-01-20 20:14 - 2015-09-29 11:03 - 00000936 _____ C:\Users\Public\Desktop\AVG Protection.lnk
2016-01-20 20:14 - 2015-09-29 11:03 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVG
2016-01-20 10:58 - 2015-05-14 18:18 - 00003842 _____ C:\Windows\System32\Tasks\Opera scheduled Autoupdate 1431638293
2016-01-20 10:58 - 2015-05-14 18:12 - 00000000 ____D C:\Program Files (x86)\Opera
2016-01-20 08:04 - 2014-11-10 17:02 - 00796864 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2016-01-20 08:04 - 2014-11-10 17:02 - 00142528 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2016-01-20 08:04 - 2014-11-10 17:02 - 00003840 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2016-01-17 12:58 - 2014-12-13 09:15 - 00032568 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2016-01-14 17:26 - 2014-12-23 20:02 - 00003886 _____ C:\Windows\System32\Tasks\Adobe Acrobat Update Task
2016-01-14 17:25 - 2015-08-13 17:35 - 00002441 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk
2016-01-11 20:44 - 2015-06-25 10:08 - 00000000 ____D C:\ProgramData\Temp
2016-01-10 21:46 - 2015-07-01 22:07 - 00000000 ___RD C:\Users\Cristiano\Desktop\Faturas a pagar
2016-01-08 20:34 - 2014-11-08 11:04 - 00000000 ____D C:\Users\Cristiano\Documents\Bluetooth Folder
==================== Files in the root of some directories =======
2015-05-16 16:26 - 2015-05-16 16:26 - 0000022 _____ () C:\Users\Cristiano\AppData\Roaming\langInstall.exe
2016-01-31 16:00 - 2016-01-31 16:00 - 0007597 _____ () C:\Users\Cristiano\AppData\Local\Resmon.ResmonCfg
2014-11-10 21:15 - 2014-11-10 21:25 - 0001266 _____ () C:\ProgramData\hpzinstall.log
Some files in TEMP:
====================
C:\Users\Outros\AppData\Local\Temp\avguirn_082106442303.exe
C:\Users\Outros\AppData\Local\Temp\ICReinstall_Porca_Veia_Eu_Gostei_Do_Baile_Veio_Tche_Bailao.exe
==================== Bamital & volsnap =================
(There is no automatic fix for files that do not pass verification.)
C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\dnsapi.dll => File is digitally signed
C:\Windows\SysWOW64\dnsapi.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed
LastRegBack: 2016-02-01 13:52
==================== End of FRST.txt ============================
Ran by Cristiano (administrator) on CTV (03-02-2016 10:19:36)
Running from C:\Users\Cristiano\Desktop
Loaded Profiles: Cristiano & Outros (Available Profiles: Cristiano & Outros)
Platform: Windows 7 Ultimate Service Pack 1 (X64) Language: Português (Portugal)
Internet Explorer Version 11 (Default browser: FF)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Av\avgrsa.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Av\avgcsrva.exe
() C:\Program Files (x86)\AVG Web TuneUp\WtuSystemSupport.exe
(GAS Tecnologia) C:\Program Files (x86)\GbPlugin\gbpsv.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(Atheros) C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe
(Atheros Commnucations) C:\Program Files (x86)\Bluetooth Suite\AdminService.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Av\avgidsagent.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Framework\Common\avgsvca.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Av\avgwdsvcx.exe
(Microsoft Corporation) C:\Windows\SysWOW64\svchost.exe
(Microsoft) C:\Program Files\Softland\novaPDF 8\Server\novapdfs.exe
(Alps Electric Co., Ltd.) C:\Program Files\Apoint\Apoint.exe
(Conexant Systems, Inc.) C:\Program Files\CONEXANT\cAudioFilterAgent\CAudioFilterAgent64.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Atheros Communications) C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe
(Microsoft Corporation) C:\Windows\System32\GWX\GWX.exe
(Atheros Commnucations) C:\Program Files (x86)\Bluetooth Suite\AthBtTray.exe
(GAS Tecnologia LTDA) C:\Program Files\Diebold\Warsaw\core.exe
(Hewlett-Packard Co.) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe
(Hewlett-Packard) C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Av\avgnsa.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Av\avgemca.exe
() C:\Program Files (x86)\AVG Web TuneUp\vprot.exe
(Wondershare) C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Framework\Common\avguix.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Av\avgui.exe
(Sony Corporation) C:\Program Files (x86)\Sony\VAIO Event Service\VESMgr.exe
(Sony Corporation) C:\Program Files (x86)\Sony\VAIO Event Service\VESMgrSub.exe
(AVG Secure Search) C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\40.2.4\ToolbarUpdater.exe
(GAS Tecnologia LTDA) C:\Program Files\Diebold\Warsaw\core.exe
() C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\40.2.4\loggingserver.exe
(Wondershare) C:\Program Files (x86)\Wondershare\WAF\2.1.4.4\WsAppService.exe
(Microsoft Corporation) C:\Windows\SysWOW64\dllhost.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Smart Network\VSNService.exe
(Alps Electric Co., Ltd.) C:\Program Files\Apoint\ApMsgFwd.exe
(ALPS) C:\Program Files\Apoint\Apvfb.exe
(Alps Electric Co., Ltd.) C:\Program Files\Apoint\ApntEx.exe
(Hewlett-Packard Co.) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqste08.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Update\VAIOUpdt.exe
(Hewlett-Packard Co.) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqbam08.exe
(Hewlett-Packard) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqgpc01.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Update\VUAgent.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Realsil Microelectronics Inc.) C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(GAS Tecnologia) C:\Program Files (x86)\GbPlugin\gbpsv.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE
(BitTorrent Inc.) C:\Users\Cristiano\AppData\Roaming\uTorrent\uTorrent.exe
(BitTorrent Inc.) C:\Users\Cristiano\AppData\Roaming\uTorrent\updates\3.4.5_41372\utorrentie.exe
(BitTorrent Inc.) C:\Users\Cristiano\AppData\Roaming\uTorrent\updates\3.4.5_41372\utorrentie.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
==================== Registry (Whitelisted) ===========================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [Apoint] => C:\Program Files\Apoint\Apoint.exe [226672 2011-03-23] (Alps Electric Co., Ltd.)
HKLM\...\Run: [cAudioFilterAgent] => C:\Program Files\Conexant\cAudioFilterAgent\cAudioFilterAgent64.exe [911576 2013-10-30] (Conexant Systems, Inc.)
HKLM\...\Run: [AtherosBtStack] => C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe [790176 2011-03-31] (Atheros Communications)
HKLM\...\Run: [AthBtTray] => C:\Program Files (x86)\Bluetooth Suite\AthBtTray.exe [657056 2011-03-31] (Atheros Commnucations)
HKLM\...\Run: [Diebold - Warsaw] => C:\Program Files\Diebold\Warsaw\core.exe [904928 2015-11-04] (GAS Tecnologia LTDA)
HKLM\...\Run: [IAStorIcon] => C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [287592 2013-11-21] (Intel Corporation)
HKLM-x32\...\Run: [HP Software Update] => C:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe [96056 2013-05-30] (Hewlett-Packard)
HKLM-x32\...\Run: [AvgUi] => C:\Program Files (x86)\AVG\Framework\Common\avguirnx.exe [179624 2016-01-12] (AVG Technologies CZ, s.r.o.)
HKLM-x32\...\Run: [AVG_UI] => C:\Program Files (x86)\AVG\Av\avgui.exe [3874216 2016-01-08] (AVG Technologies CZ, s.r.o.)
HKLM-x32\...\Run: [vProt] => C:\Program Files (x86)\AVG Web TuneUp\vprot.exe [2814864 2016-01-27] ()
HKLM-x32\...\Run: [Wondershare Helper Compact.exe] => C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe [2072928 2014-10-31] (Wondershare)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [596528 2015-12-22] (Oracle Corporation)
HKLM-x32\...\Run: [DivXMediaServer] => C:\Program Files (x86)\DivX\DivX Media Server\DivXMediaServer.exe
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
Winlogon\Notify\ GbPluginBb: C:\Program Files (x86)\GbPlugin\gbieh.dll [2015-10-20] (Banco do Brasil)
Winlogon\Notify\ GbPluginBes: C:\Program Files (x86)\GbPlugin\gbiehBes.dll [2015-09-04] (Banco do Estado de Sergipe - BANESE)
HKU\S-1-5-21-2916229193-2596999592-3945810575-1000\...\Policies\system: [LogonHoursAction] 2
HKU\S-1-5-21-2916229193-2596999592-3945810575-1000\...\Policies\system: [DontDisplayLogonHoursWarnings] 1
HKU\S-1-5-21-2916229193-2596999592-3945810575-1001\...\Policies\system: [LogonHoursAction] 2
HKU\S-1-5-21-2916229193-2596999592-3945810575-1001\...\Policies\system: [DontDisplayLogonHoursWarnings] 1
ShellExecuteHooks-x32: GbPluginObj Class - {E37CB5F0-51F5-4395-A808-5FA49E399F83} - C:\PROGRAM FILES (X86)\GbPlugin\gbieh.dll [1945472 2015-10-20] (Banco do Brasil)
ShellExecuteHooks-x32: GbPluginObj Class - {E37CB5F0-51F5-4395-A808-5FA49E399027} - C:\PROGRAM FILES (X86)\GbPlugin\gbiehbes.dll [1873264 2015-09-04] (Banco do Estado de Sergipe - BANESE)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\HP Digital Imaging Monitor.lnk [2014-11-10]
ShortcutTarget: HP Digital Imaging Monitor.lnk -> C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe (Hewlett-Packard Co.)
GroupPolicy: Restriction - Chrome <======= ATTENTION
GroupPolicyUsers\S-1-5-21-2916229193-2596999592-3945810575-1001\User: Restriction <======= ATTENTION
CHR HKLM\SOFTWARE\Policies\Google: Restriction <======= ATTENTION
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
Tcpip\Parameters: [DhcpNameServer] 192.168.25.1
Tcpip\..\Interfaces\{C5BE2224-CCD5-440C-A3F9-284283D8CD70}: [DhcpNameServer] 192.168.25.1
Tcpip\..\Interfaces\{EE8652D7-6E76-44A0-9D1A-D2926C54634A}: [DhcpNameServer] 192.168.25.1
Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = www.google.com
HKU\S-1-5-21-2916229193-2596999592-3945810575-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxps://mysearch.avg.com/?cid={BF7D4E18-4A00-4299-BD5D-A529363BE94C}&mid=578fb1f658b047cdb879414908571c9f-0cda3a16e75c0e17fa580d9f3ddce2aeee134f51&lang=pt-br&ds=AVG&coid=avgtbavg&cmpid=0116tb&pr=fr&d=2015-09-29 11:08:44&v=4.2.4.155&pid=wtu&sg=&sap=hp
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-2916229193-2596999592-3945810575-1000 -> DefaultScope {95B7759C-8C7F-4BF1-B163-73684A933233} URL = hxxps://mysearch.avg.com/search?cid={BF7D4E18-4A00-4299-BD5D-A529363BE94C}&mid=578fb1f658b047cdb879414908571c9f-0cda3a16e75c0e17fa580d9f3ddce2aeee134f51&lang=pt-br&ds=AVG&coid=avgtbavg&cmpid=0116tb&pr=fr&d=2015-09-29 11:08:44&v=4.2.4.155&pid=wtu&sg=&sap=dsp&q={searchTerms}
SearchScopes: HKU\S-1-5-21-2916229193-2596999592-3945810575-1000 -> {95B7759C-8C7F-4BF1-B163-73684A933233} URL = hxxps://mysearch.avg.com/search?cid={BF7D4E18-4A00-4299-BD5D-A529363BE94C}&mid=578fb1f658b047cdb879414908571c9f-0cda3a16e75c0e17fa580d9f3ddce2aeee134f51&lang=pt-br&ds=AVG&coid=avgtbavg&cmpid=0116tb&pr=fr&d=2015-09-29 11:08:44&v=4.2.4.155&pid=wtu&sg=&sap=dsp&q={searchTerms}
BHO: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\Office15\OCHelper.dll [2015-06-25] (Microsoft Corporation)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office15\URLREDIR.DLL [2014-01-23] (Microsoft Corporation)
BHO: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office\Office15\GROOVEEX.DLL [2015-06-16] (Microsoft Corporation)
BHO-x32: HP Print Enhancer -> {0347C33E-8762-4905-BF09-768834316C61} -> C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll [2009-05-21] (Hewlett-Packard Co.)
BHO-x32: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll [2015-06-25] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_71\bin\ssv.dll [2016-01-25] (Oracle Corporation)
BHO-x32: CIESpeechBHO Class -> {8D10F6C4-0E01-4BD4-8601-11AC1FDF8126} -> C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll [2011-03-31] (Atheros Commnucations)
BHO-x32: AVG Web TuneUp -> {95B7759C-8C7F-4BF1-B163-73684A933233} -> C:\Program Files (x86)\AVG Web TuneUp\4.2.4.155\AVG Web TuneUp.dll [2016-01-27] (AVG)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office15\URLREDIR.DLL [2014-01-22] (Microsoft Corporation)
BHO-x32: GbIehObj Class -> {C41A1C0E-EA6C-11D4-B1B8-444553540000} -> C:\PROGRAM FILES (X86)\GBPLUGIN\gbieh.dll [2015-10-20] (Banco do Brasil)
BHO-x32: GbIehObj Class -> {C41A1C0E-EA6C-11D4-B1B8-444553540027} -> C:\PROGRAM FILES (X86)\GBPLUGIN\gbiehbes.dll [2015-09-04] (Banco do Estado de Sergipe - BANESE)
BHO-x32: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\Office15\GROOVEEX.DLL [2015-06-16] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_71\bin\jp2ssv.dll [2016-01-25] (Oracle Corporation)
BHO-x32: HP Smart BHO Class -> {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} -> C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll [2009-05-21] (Hewlett-Packard Co.)
Handler: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office\Office15\MSOSB.DLL [2014-04-01] (Microsoft Corporation)
StartMenuInternet: IEXPLORE.EXE - iexplore.exe
FireFox:
========
FF ProfilePath: C:\Users\Cristiano\AppData\Roaming\Mozilla\Firefox\Profiles\f714aep6.default-1435240498475
FF Homepage: www.google.com.br
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_20_0_0_286.dll [2016-01-20] ()
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.41212.0\npctrl.dll [2015-12-11] ( Microsoft Corporation)
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~1\MICROS~2\Office15\NPSPWRAP.DLL [2014-01-23] (Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_20_0_0_286.dll [2016-01-20] ()
FF Plugin-x32: @avg.com/AVG SiteSafety plugin,version=11.0.0.1,application/x-avg-sitesafety-plugin -> C:\Program Files (x86)\Common Files\AVG Secure Search\SiteSafetyInstaller\40.2.4\\npsitesafety.dll [No File]
FF Plugin-x32: @java.com/DTPlugin,version=11.71.2 -> C:\Program Files (x86)\Java\jre1.8.0_71\bin\dtplugin\npDeployJava1.dll [2016-01-25] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.71.2 -> C:\Program Files (x86)\Java\jre1.8.0_71\bin\plugin2\npjp2.dll [2016-01-25] (Oracle Corporation)
FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files (x86)\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2015-06-25] (Microsoft Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.41212.0\npctrl.dll [2015-12-11] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office15\NPSPWRAP.DLL [2014-01-22] (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.29.5\npGoogleUpdate3.dll [2016-02-03] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.29.5\npGoogleUpdate3.dll [2016-02-03] (Google Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2015-12-18] (Adobe Systems Inc.)
FF Plugin HKU\S-1-5-21-2916229193-2596999592-3945810575-1000: gastecnologia.com.br/sf/bb64 -> C:\Users\Cristiano\AppData\Local\GAS Tecnologia\GBBD\npsf_bb_64.dll [No File]
FF Plugin HKU\S-1-5-21-2916229193-2596999592-3945810575-1000: gastecnologia.com.br/sf/cef64 -> C:\Users\Cristiano\AppData\Local\GAS Tecnologia\GBBD\npsf_cef_64.dll [No File]
FF Plugin HKU\S-1-5-21-2916229193-2596999592-3945810575-1000: gastecnologia.com.br/sf/gas64 -> C:\Users\Cristiano\AppData\Local\GAS Tecnologia\GBBD\npsf_gas_64.dll [No File]
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npMeetingJoinPluginOC.dll [2015-06-25] (Microsoft Corporation)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll [2015-12-18] (Adobe Systems Inc.)
FF SearchPlugin: C:\Users\Cristiano\AppData\Roaming\Mozilla\Firefox\Profiles\f714aep6.default-1435240498475\searchplugins\avg-secure-search.xml [2016-02-03]
FF Extension: NetVideoHunter - C:\Users\Cristiano\AppData\Roaming\Mozilla\Firefox\Profiles\f714aep6.default-1435240498475\extensions\netvideohunter@netvideohunter.com [2015-11-10]
FF Extension: AVG Web TuneUp - C:\Users\Cristiano\AppData\Roaming\Mozilla\Firefox\Profiles\f714aep6.default-1435240498475\Extensions\avg@toolbar.xpi [2016-01-27]
FF Extension: Adblock Plus - C:\Users\Cristiano\AppData\Roaming\Mozilla\Firefox\Profiles\f714aep6.default-1435240498475\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2016-01-19]
FF HKLM-x32\...\Firefox\Extensions: [smartwebprinting@hp.com] - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3
FF Extension: HP Smart Web Printing - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 [2014-11-10] [not signed]
FF HKU\S-1-5-21-2916229193-2596999592-3945810575-1000\...\Firefox\Extensions: [smartwebprinting@hp.com] - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3
FF HKU\S-1-5-21-2916229193-2596999592-3945810575-1000\...\Firefox\Extensions: [{87F8774F-B485-47E2-A755-A40A8A5E886C}] - C:\Users\Cristiano\AppData\Local\GAS Tecnologia\GBBD\bb\xpi => not found
FF HKU\S-1-5-21-2916229193-2596999592-3945810575-1000\...\Firefox\Extensions: [{87F8774F-B485-47E2-A755-A40A8A5E8878}] - C:\Users\Cristiano\AppData\Local\GAS Tecnologia\GBBD\bes\xpi => not found
FF HKU\S-1-5-21-2916229193-2596999592-3945810575-1000\...\Firefox\Extensions: [{87F8774F-B485-47E2-A755-A40A8A5E886D}] - C:\Users\Cristiano\AppData\Local\GAS Tecnologia\GBBD\cef\xpi => not found
Chrome:
=======
CHR dev: Chrome dev build detected! <======= ATTENTION
CHR StartupUrls: Default -> "hxxp://www.google.com.br/"
CHR Profile: C:\Users\Cristiano\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Apresentações) - C:\Users\Cristiano\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-05-13]
CHR Extension: (Google Docs) - C:\Users\Cristiano\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-05-13]
CHR Extension: (Google Drive) - C:\Users\Cristiano\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2016-01-27]
CHR Extension: (YouTube) - C:\Users\Cristiano\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-09-29]
CHR Extension: (Google Search) - C:\Users\Cristiano\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2016-01-27]
CHR Extension: (Planilhas do Google) - C:\Users\Cristiano\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-05-13]
CHR Extension: (Documentos Google off-line) - C:\Users\Cristiano\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-01-27]
CHR Extension: (GBBD Banco do Brasil) - C:\Users\Cristiano\AppData\Local\Google\Chrome\User Data\Default\Extensions\mkeabchhfifpaaoefpockjhaphjmoapp [2015-01-12]
CHR Extension: (Pagamentos da Chrome Web Store) - C:\Users\Cristiano\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2016-01-27]
CHR Extension: (Gmail) - C:\Users\Cristiano\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-09-29]
CHR HKU\S-1-5-21-2916229193-2596999592-3945810575-1000\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [bbjllphbppobebmjpjcijfbakobcheof] - hxxps://clients2.google.com/service/update2/crx
CHR HKU\S-1-5-21-2916229193-2596999592-3945810575-1000\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [chfdnecihphmhljaaejmgoiahnihplgn] - hxxps://clients2.google.com/service/update2/crx
CHR HKU\S-1-5-21-2916229193-2596999592-3945810575-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [bbjllphbppobebmjpjcijfbakobcheof] - hxxps://clients2.google.com/service/update2/crx
==================== Services (Whitelisted) ========================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
S3 ACDaemon; C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACService.exe [113152 2010-03-18] (ArcSoft Inc.)
R2 Atheros Bt&Wlan Coex Agent; C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe [146592 2011-03-31] (Atheros) [File not signed]
R2 AtherosSvc; C:\Program Files (x86)\Bluetooth Suite\adminservice.exe [75936 2011-03-31] (Atheros Commnucations) [File not signed]
S3 AvgAMPS; C:\Program Files (x86)\AVG\Av\avgamps.exe [627544 2016-01-08] (AVG Technologies CZ, s.r.o.)
R2 AVGIDSAgent; C:\Program Files (x86)\AVG\Av\avgidsagent.exe [3906568 2016-01-08] (AVG Technologies CZ, s.r.o.)
R2 avgsvc; C:\Program Files (x86)\AVG\Framework\Common\avgsvca.exe [1048488 2016-01-12] (AVG Technologies CZ, s.r.o.)
R2 avgwd; C:\Program Files (x86)\AVG\Av\avgwdsvcx.exe [583936 2016-01-08] (AVG Technologies CZ, s.r.o.)
S3 DCDhcpService; C:\Program Files\Sony\VAIO Smart Network\WFDA\DCDhcpService.exe [104096 2011-07-19] (Atheros Communication Inc.) [File not signed]
R2 GbpSv; C:\Program Files (x86)\GbPlugin\gbpsv.exe [593120 2015-09-22] (GAS Tecnologia)
R3 hpqcxs08; C:\Program Files (x86)\HP\Digital Imaging\bin\hpqcxs08.dll [248832 2009-05-21] (Hewlett-Packard Co.) [File not signed]
R2 hpqddsvc; C:\Program Files (x86)\HP\Digital Imaging\bin\hpqddsvc.dll [133120 2009-05-21] (Hewlett-Packard Co.) [File not signed]
R2 IAStorDataMgrSvc; C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [15720 2013-11-21] (Intel Corporation)
R2 Net Driver HPZ12; C:\Windows\system32\HPZinw12.dll [71680 2010-08-06] (Hewlett-Packard) [File not signed]
R2 NovaPdfServer; C:\Program Files\Softland\novaPDF 8\Server\novapdfs.exe [35616 2015-01-09] (Microsoft)
R2 Pml Driver HPZ12; C:\Windows\system32\HPZipm12.dll [89600 2010-08-06] (Hewlett-Packard) [File not signed]
R2 vToolbarUpdater40.2.4; C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\40.2.4\ToolbarUpdater.exe [1923984 2015-12-21] (AVG Secure Search)
R3 VUAgent; C:\Program Files\Sony\VAIO Update\vuagent.exe [1653272 2015-07-31] (Sony Corporation)
R2 Warsaw Technology; C:\Program Files\Diebold\Warsaw\core.exe [904928 2015-11-04] (GAS Tecnologia LTDA)
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)
R2 WsAppService; C:\Program Files (x86)\Wondershare\WAF\2.1.4.4\WsAppService.exe [382464 2015-11-19] (Wondershare) [File not signed]
R2 WtuSystemSupport; C:\Program Files (x86)\AVG Web TuneUp\WtuSystemSupport.exe [1164688 2016-01-27] ()
===================== Drivers (Whitelisted) ==========================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
R1 Avgdiska; C:\Windows\System32\DRIVERS\avgdiska.sys [184240 2015-11-06] (AVG Technologies CZ, s.r.o.)
R1 AVGIDSDriver; C:\Windows\System32\DRIVERS\avgidsdrivera.sys [315312 2015-12-04] (AVG Technologies CZ, s.r.o.)
R0 AVGIDSHA; C:\Windows\System32\DRIVERS\avgidsha.sys [298416 2015-08-20] (AVG Technologies CZ, s.r.o.)
R1 Avgldx64; C:\Windows\System32\DRIVERS\avgldx64.sys [284080 2015-10-21] (AVG Technologies CZ, s.r.o.)
R0 Avgloga; C:\Windows\System32\DRIVERS\avgloga.sys [398256 2015-08-14] (AVG Technologies CZ, s.r.o.)
R0 Avgmfx64; C:\Windows\System32\DRIVERS\avgmfx64.sys [258480 2015-12-04] (AVG Technologies CZ, s.r.o.)
R0 Avgrkx64; C:\Windows\System32\DRIVERS\avgrkx64.sys [42416 2015-12-04] (AVG Technologies CZ, s.r.o.)
R1 Avgtdia; C:\Windows\System32\DRIVERS\avgtdia.sys [302000 2015-10-08] (AVG Technologies CZ, s.r.o.)
S3 ebdrv; C:\Windows\system32\drivers\evbda.sys [3286016 2009-06-10] (Broadcom Corporation)
R1 gbpddfac; C:\Windows\System32\drivers\gbpddfac64.sys [28888 2016-02-03] (GAS Tecnologia)
R1 HWiNFO32; C:\Windows\system32\drivers\HWiNFO64A.SYS [27552 2014-11-08] (REALiX(tm))
R0 iaStorF; C:\Windows\System32\DRIVERS\iaStorF.sys [28008 2013-11-21] (Intel Corporation)
R1 ISODrive; C:\Program Files (x86)\UltraISO\drivers\ISODrv64.sys [115448 2013-11-21] (EZB Systems, Inc.)
U3 TrueSight; C:\Windows\System32\drivers\TrueSight.sys [35064 2015-07-07] ()
R4 WinDivert1.1; C:\Program Files\Diebold\Warsaw\WinDivert64.sys [38104 2015-07-07] (Basil)
R1 wsddfac; C:\Windows\System32\drivers\wsddfac.sys [101080 2016-02-03] (GAS Tecnologia)
R1 wsddpp; C:\Windows\system32\drivers\wsddpp.sys [103640 2015-03-18] (GAS Tecnologia)
S0 gbpddreg; system32\drivers\gbpddreg64.sys [X]
R3 GBPRCM; \??\C:\Program Files (x86)\GbPlugin\gbprcm64.sys [X]
S3 VGPU; System32\drivers\rdvgkmd.sys [X]
R3 Warsaw_PP; \??\C:\PROGRA~2\GbPlugin\wsftprp64.sys [X]
==================== NetSvcs (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
==================== Three Months Created files and folders ========
(If an entry is included in the fixlist, the file/folder will be moved.)
2016-02-03 10:19 - 2016-02-03 10:20 - 00025833 _____ C:\Users\Cristiano\Desktop\FRST.txt
2016-02-03 10:17 - 2016-02-03 10:19 - 00000000 ____D C:\FRST
2016-02-03 10:17 - 2016-02-03 10:17 - 00021164 _____ C:\Users\Cristiano\Desktop\Resumo Evolução da Seguridade Solcial no Brasil e no Mundo.odt
2016-02-03 10:16 - 2016-02-03 10:16 - 02370560 _____ (Farbar) C:\Users\Cristiano\Desktop\FRST64.exe
2016-02-03 10:06 - 2016-02-03 10:06 - 00068186 _____ C:\Users\Cristiano\Desktop\Conteúdo Progrmático INSS 2016.pdf
2016-02-03 07:44 - 2016-02-03 07:44 - 00000000 ___RD C:\Users\Cristiano\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BT Devices
2016-02-02 14:06 - 2016-02-02 14:06 - 00122186 _____ C:\Users\Outros\Desktop\conta_pdf_10022016.pdf
2016-02-02 13:49 - 2016-02-02 13:49 - 00531891 _____ C:\Users\Outros\Desktop\Minha_Fatura_MASTERCARD_05-02-2016.pdf
2016-02-02 13:47 - 2016-02-02 13:47 - 00001144 _____ C:\Users\Outros\Desktop\ComprovanteBB - 2016-01-21-183818.pdf
2016-02-02 13:34 - 2016-02-02 13:34 - 00000000 ___RD C:\Users\Outros\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BT Devices
2016-02-02 09:29 - 2016-02-02 09:29 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Wise Program Uninstaller
2016-02-02 09:29 - 2016-02-02 09:29 - 00000000 ____D C:\Program Files (x86)\Wise
2016-02-02 09:28 - 2016-02-02 09:28 - 00000000 ____D C:\Users\Cristiano\AppData\Roaming\Thunderbird
2016-02-02 09:28 - 2016-02-02 09:28 - 00000000 ____D C:\Users\Cristiano\AppData\Local\Thunderbird
2016-02-02 09:27 - 2016-02-02 09:27 - 00001213 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Thunderbird.lnk
2016-02-02 09:27 - 2016-02-02 09:27 - 00000000 ____D C:\Program Files (x86)\Mozilla Thunderbird
2016-02-01 23:00 - 2016-02-01 23:05 - 00262660 _____ C:\Windows\ntbtlog.txt
2016-02-01 22:49 - 2016-02-01 22:49 - 00000000 ____D C:\Users\Cristiano\Intel
2016-01-31 16:00 - 2016-01-31 16:00 - 00007597 _____ C:\Users\Cristiano\AppData\Local\Resmon.ResmonCfg
2016-01-29 16:54 - 2016-01-29 17:17 - 00000000 ____D C:\Users\Cristiano\AppData\Local\EvernoteNW
2016-01-27 13:47 - 2016-01-27 13:47 - 00000000 ____D C:\Users\Outros\AppData\Roaming\DivX
2016-01-27 09:45 - 2016-01-28 10:58 - 00000000 ____D C:\Users\Cristiano\Desktop\Vídeos Dicas INSS
2016-01-27 08:52 - 2016-01-27 13:45 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2016-01-27 08:47 - 2016-01-27 08:47 - 00000000 ____D C:\Users\Cristiano\.MCTranscodingSDK
2016-01-27 08:42 - 2016-02-01 23:16 - 00000000 ____D C:\Users\Cristiano\AppData\Roaming\DivX
2016-01-27 08:34 - 2016-02-01 23:17 - 00000000 ____D C:\ProgramData\DivX
2016-01-27 07:54 - 2016-01-27 07:54 - 00000000 ____D C:\Users\Cristiano\AppData\Roaming\LibreOffice
2016-01-26 21:18 - 2016-01-26 21:18 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LibreOffice 4.4
2016-01-26 21:16 - 2016-01-26 21:18 - 00000000 ____D C:\Program Files (x86)\LibreOffice 4
2016-01-25 20:51 - 2016-01-25 20:51 - 00000000 ____D C:\Users\Cristiano\AppData\LocalLow\Evernote
2016-01-25 20:51 - 2016-01-25 20:51 - 00000000 ____D C:\Users\Cristiano\AppData\Local\Evernote
2016-01-25 20:50 - 2016-01-25 20:50 - 00000000 ____D C:\Users\Cristiano\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Evernote
2016-01-25 20:50 - 2016-01-25 20:50 - 00000000 ____D C:\Users\Cristiano\AppData\Local\Apps\Evernote
2016-01-25 08:31 - 2016-01-25 08:31 - 00003234 _____ C:\Windows\System32\Tasks\{48EC10B8-086B-4EEA-BCBB-78BDF62F37E0}
2016-01-24 18:51 - 2016-02-03 09:54 - 00000000 ____D C:\Users\Cristiano\AppData\LocalLow\uTorrent
2016-01-24 18:27 - 2016-01-24 18:27 - 00000000 ____D C:\Users\Cristiano\Documents\Ashampoo Burning Studio 16
2016-01-24 18:26 - 2016-01-24 18:26 - 00000000 ____D C:\Users\Cristiano\AppData\Roaming\Ashampoo
2016-01-24 18:24 - 2016-01-24 18:26 - 00000000 ____D C:\Users\Cristiano\AppData\Local\ashampoo
2016-01-24 18:24 - 2016-01-24 18:24 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Ashampoo
2016-01-24 18:23 - 2016-01-24 18:24 - 00000000 ____D C:\ProgramData\Ashampoo
2016-01-24 18:23 - 2016-01-24 18:23 - 00000000 ____D C:\Program Files (x86)\Ashampoo
2016-01-24 15:44 - 2016-01-24 15:44 - 00000034 _____ C:\Users\Cristiano\Desktop\Netflix.txt
2016-01-14 16:58 - 2016-01-14 16:58 - 00005370 _____ C:\Users\Outros\Desktop\ALDO GOMES DE MATOS 1.pdf
2016-01-11 20:43 - 2016-02-03 07:44 - 00101080 _____ (GAS Tecnologia) C:\Windows\system32\Drivers\wsddfac.sys
2016-01-11 20:43 - 2016-01-11 20:43 - 00000000 ___HD C:\Program Files (x86)\GAS Tecnologia
2016-01-11 20:43 - 2016-01-11 20:43 - 00000000 ___HD C:\Program Files (x86)\Diebold
2016-01-11 20:43 - 2016-01-11 20:43 - 00000000 ____D C:\Program Files\Diebold
2016-01-11 20:43 - 2015-03-18 11:23 - 00103640 ____N (GAS Tecnologia) C:\Windows\system32\Drivers\wsddpp.sys
2016-01-10 21:58 - 2016-01-11 20:41 - 00000000 ____D C:\Users\Cristiano\Desktop\Monja Coen
2016-01-07 19:51 - 2016-01-07 19:50 - 00001447 _____ C:\Users\Cristiano\Desktop\Comprovante Inscrição INSS.pdf
2016-01-07 19:45 - 2016-01-07 19:45 - 00044263 _____ C:\Users\Cristiano\Documents\Inscrição INSS.pdf
2016-01-07 18:36 - 2016-02-03 09:25 - 00021592 _____ C:\Users\Cristiano\Desktop\CICLO INSS.xlsx
2016-01-07 17:55 - 2016-01-07 12:54 - 00110949 ____N C:\Users\Cristiano\Desktop\CRISTIANO TELES DE MATOS_31419554259043540.pdf
2016-01-07 17:54 - 2016-01-07 17:54 - 00496860 _____ C:\Users\Cristiano\Desktop\Outlook.com.zip
2016-01-07 11:23 - 2016-01-07 11:23 - 00037935 _____ C:\Users\Cristiano\Documents\ANATEL RESPOSTA - SUPORTE DO ATENDIMENTO AOS USUÁRIOS - [SIS versão 2.2.pdf
2016-01-07 07:56 - 2016-01-07 11:34 - 00000000 ____D C:\Users\Cristiano\Desktop\Leis
2016-01-06 21:59 - 2016-01-26 21:00 - 00000000 ____D C:\Users\Cristiano\Desktop\Informática INSS
2016-01-06 11:10 - 2016-02-02 11:05 - 00038003 _____ C:\Users\Cristiano\Desktop\Aniversários.xlsx
2016-01-05 10:26 - 2016-01-05 10:25 - 00001961 _____ C:\Users\Cristiano\Desktop\Comprovante Coaching Ali Mohamad Jaha.pdf
2016-01-03 21:01 - 2016-01-06 11:04 - 00011818 _____ C:\Users\Cristiano\Desktop\HORÁRIO DE ESTUDO 2016.xlsx
2016-01-01 00:04 - 2016-01-03 11:41 - 00000175 _____ C:\Users\Cristiano\Desktop\comprar.txt
2015-12-29 17:42 - 2015-12-29 17:42 - 00000000 ____D C:\Users\Outros\AppData\Local\Wondershare
2015-12-28 21:05 - 2015-12-28 21:05 - 00027617 _____ C:\Users\Cristiano\Documents\ANATEL - SUPORTE DO ATENDIMENTO AOS USUÁRIOS - [SIS versão 2.2.pdf
2015-12-28 09:38 - 2015-12-28 09:45 - 00000067 _____ C:\Users\Cristiano\Desktop\protocolo.txt
2015-12-24 09:49 - 2016-01-25 08:35 - 00524288 ___SH C:\Windows\system32\config\COMPONENTS{4c09d2d8-aa3c-11e5-bce8-90004eb3f56c}.TMContainer00000000000000000001.regtrans-ms
2015-12-24 09:49 - 2016-01-25 08:35 - 00065536 ___SH C:\Windows\system32\config\COMPONENTS{4c09d2d8-aa3c-11e5-bce8-90004eb3f56c}.TM.blf
2015-12-24 09:49 - 2015-12-24 10:03 - 00524288 ___SH C:\Windows\system32\config\COMPONENTS{4c09d2d8-aa3c-11e5-bce8-90004eb3f56c}.TMContainer00000000000000000002.regtrans-ms
2015-12-23 15:57 - 2015-12-23 15:57 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_WinUsb_01009.Wdf
2015-12-23 15:56 - 2015-12-23 15:56 - 01721576 _____ (Microsoft Corporation) C:\Windows\system32\WdfCoInstaller01009.dll
2015-12-23 15:56 - 2015-12-23 15:56 - 01002728 _____ (Microsoft Corporation) C:\Windows\system32\WinUSBCoInstaller2.dll
2015-12-23 15:49 - 2015-12-23 15:49 - 00000000 ____D C:\Users\Cristiano\AppData\Roaming\HMYGSetting
2015-12-23 15:48 - 2015-12-24 10:25 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Wondershare
2015-12-23 15:47 - 2015-12-23 15:56 - 00000000 ____D C:\Users\Cristiano\.android
2015-12-23 15:43 - 2015-12-23 15:43 - 00000000 ____D C:\Users\Cristiano\AppData\Local\Wondershare
2015-12-23 13:08 - 2016-01-26 21:08 - 00016180 _____ C:\Users\Cristiano\Desktop\CONTEÚDO PROGRAMÁTICO INSS 2016.docx
2015-12-23 12:09 - 2015-12-23 12:09 - 00585071 _____ C:\Users\Cristiano\Desktop\EDITAL INSS 2016.PDF
2015-12-15 19:30 - 2015-12-15 19:31 - 44783845 _____ C:\Users\Cristiano\Desktop\Concurso INSS Dica 19 - Língua Portuguesa - YouTube.mp4
2015-12-12 15:07 - 2015-11-24 10:04 - 00148088 _____ (GAS Tecnologia) C:\Windows\system32\Drivers\wsddin64.sys
2015-12-10 17:27 - 2015-12-10 17:27 - 00000000 ____D C:\Program Files\Common Files\AVG Secure Search
2015-12-09 11:05 - 2015-12-10 17:45 - 00001461 _____ C:\Users\Cristiano\Desktop\Chás.txt
2015-12-07 09:20 - 2015-12-07 09:20 - 00389508 _____ C:\Users\Cristiano\Desktop\FORMULARIO AUTO CRISTIANO.pdf
2015-12-04 14:36 - 2015-12-04 14:36 - 00258480 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgmfx64.sys
2015-12-04 14:35 - 2015-12-04 14:35 - 00315312 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgidsdrivera.sys
2015-12-04 14:27 - 2015-12-04 14:27 - 00042416 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgrkx64.sys
2015-11-13 14:54 - 2015-11-13 14:54 - 00000114 _____ C:\Users\Cristiano\Desktop\Dados Do Veículo.txt
2015-11-13 14:42 - 2015-11-13 14:42 - 00139404 _____ C:\Users\Cristiano\Desktop\SINISTRO.jpg
2015-11-12 22:27 - 2016-01-12 20:19 - 00000000 ____D C:\Users\Cristiano\Desktop\Raciocínio Lógico Técnico INSS Ponto 2015.2
2015-11-12 18:11 - 2015-11-12 18:11 - 00000000 ____D C:\Program Files (x86)\VideoLAN
2015-11-06 15:50 - 2015-11-06 15:50 - 00184240 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgdiska.sys
==================== Three Months Modified files and folders ========
(If an entry is included in the fixlist, the file/folder will be moved.)
2016-02-03 10:19 - 2014-11-07 20:51 - 00001068 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2016-02-03 10:16 - 2014-11-07 21:10 - 00000000 ____D C:\Users\Cristiano\AppData\Roaming\uTorrent
2016-02-03 10:08 - 2009-07-14 01:45 - 00025760 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2016-02-03 10:08 - 2009-07-14 01:45 - 00025760 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2016-02-03 10:04 - 2014-11-10 17:02 - 00000902 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2016-02-03 09:59 - 2015-07-22 21:14 - 00000000 ____D C:\Users\Cristiano\AppData\Roaming\MPC-HC
2016-02-03 09:19 - 2014-11-07 20:51 - 00001064 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2016-02-03 09:14 - 2014-11-07 20:51 - 00004064 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2016-02-03 09:14 - 2014-11-07 20:51 - 00003812 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2016-02-03 08:19 - 2015-09-29 10:57 - 00000000 ____D C:\ProgramData\MFAData
2016-02-03 07:48 - 2014-11-13 16:04 - 00000000 ____D C:\Users\Cristiano\AppData\Local\CrashDumps
2016-02-03 07:48 - 2014-11-11 18:08 - 00000000 ____D C:\Program Files (x86)\GbPlugin
2016-02-03 07:45 - 2015-07-11 21:48 - 00028888 _____ (GAS Tecnologia) C:\Windows\system32\Drivers\gbpddfac64.sys
2016-02-03 07:43 - 2009-07-14 02:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2016-02-02 21:01 - 2015-07-08 19:30 - 00000000 ____D C:\ProgramData\GbPlugin
2016-02-02 13:46 - 2015-01-19 12:49 - 00000000 ____D C:\Users\Outros\AppData\Local\CrashDumps
2016-02-02 13:35 - 2014-11-10 17:50 - 00105184 _____ C:\Users\Outros\AppData\Local\GDIPFONTCACHEV1.DAT
2016-02-02 13:32 - 2015-06-25 10:40 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2016-02-01 23:00 - 2014-11-07 19:55 - 00000000 ____D C:\Program Files (x86)\Intel
2016-02-01 22:54 - 2014-11-08 10:00 - 00000000 ____D C:\Program Files\Intel
2016-02-01 22:54 - 2014-11-07 23:32 - 00706418 _____ C:\Windows\system32\prfh0416.dat
2016-02-01 22:54 - 2014-11-07 23:32 - 00147756 _____ C:\Windows\system32\prfc0416.dat
2016-02-01 22:54 - 2014-11-07 22:33 - 02533120 _____ C:\Windows\SysWOW64\PerfStringBackup.INI
2016-02-01 22:54 - 2014-11-07 20:13 - 00000000 ____D C:\ProgramData\Intel
2016-02-01 22:54 - 2014-11-07 19:55 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel
2016-02-01 22:54 - 2011-04-12 09:55 - 00721556 _____ C:\Windows\system32\prfh0816.dat
2016-02-01 22:54 - 2011-04-12 09:55 - 00153006 _____ C:\Windows\system32\prfc0816.dat
2016-02-01 22:54 - 2009-07-14 00:20 - 00000000 ____D C:\Windows\inf
2016-02-01 22:49 - 2014-11-07 19:36 - 00000000 ____D C:\Users\Cristiano
2016-02-01 21:16 - 2015-01-16 16:21 - 00000000 ____D C:\Users\Cristiano\Desktop\INSS
2016-01-31 16:02 - 2014-11-08 07:26 - 00000000 ____D C:\Windows\pss
2016-01-30 20:25 - 2014-11-07 20:53 - 00002210 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2016-01-30 19:30 - 2009-07-14 00:20 - 00000000 ____D C:\Windows\system32\NDF
2016-01-27 20:42 - 2015-09-29 11:08 - 00000000 ____D C:\Program Files (x86)\AVG Web TuneUp
2016-01-27 07:54 - 2009-07-14 01:45 - 00430944 _____ C:\Windows\system32\FNTCACHE.DAT
2016-01-27 07:53 - 2014-11-07 20:04 - 00105184 _____ C:\Users\Cristiano\AppData\Local\GDIPFONTCACHEV1.DAT
2016-01-26 10:10 - 2009-07-14 02:13 - 02506158 _____ C:\Windows\system32\PerfStringBackup.INI
2016-01-25 20:40 - 2014-11-08 00:43 - 00000000 ____D C:\Program Files\Microsoft Silverlight
2016-01-25 20:40 - 2014-11-08 00:43 - 00000000 ____D C:\Program Files (x86)\Microsoft Silverlight
2016-01-25 08:38 - 2014-11-08 00:44 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
2016-01-25 08:35 - 2014-12-04 18:27 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2016-01-25 08:35 - 2014-11-10 18:44 - 00000000 ____D C:\Program Files (x86)\Java
2016-01-25 08:35 - 2014-11-08 09:21 - 00000000 ____D C:\ProgramData\Oracle
2016-01-25 08:33 - 2015-08-31 20:08 - 00000000 ____D C:\Users\Cristiano\.oracle_jre_usage
2016-01-25 08:33 - 2014-12-04 18:27 - 00097888 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2016-01-24 19:25 - 2014-11-08 09:07 - 00000000 ____D C:\ProgramData\Nero
2016-01-21 20:25 - 2014-11-07 21:15 - 00000000 ____D C:\Users\Cristiano\AppData\Roaming\Q-Dir
2016-01-20 20:14 - 2015-09-29 11:03 - 00000936 _____ C:\Users\Public\Desktop\AVG Protection.lnk
2016-01-20 20:14 - 2015-09-29 11:03 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVG
2016-01-20 10:58 - 2015-05-14 18:18 - 00003842 _____ C:\Windows\System32\Tasks\Opera scheduled Autoupdate 1431638293
2016-01-20 10:58 - 2015-05-14 18:12 - 00000000 ____D C:\Program Files (x86)\Opera
2016-01-20 08:04 - 2014-11-10 17:02 - 00796864 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2016-01-20 08:04 - 2014-11-10 17:02 - 00142528 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2016-01-20 08:04 - 2014-11-10 17:02 - 00003840 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2016-01-17 12:58 - 2014-12-13 09:15 - 00032568 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2016-01-14 17:26 - 2014-12-23 20:02 - 00003886 _____ C:\Windows\System32\Tasks\Adobe Acrobat Update Task
2016-01-14 17:25 - 2015-08-13 17:35 - 00002441 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk
2016-01-11 20:44 - 2015-06-25 10:08 - 00000000 ____D C:\ProgramData\Temp
2016-01-10 21:46 - 2015-07-01 22:07 - 00000000 ___RD C:\Users\Cristiano\Desktop\Faturas a pagar
2016-01-08 20:34 - 2014-11-08 11:04 - 00000000 ____D C:\Users\Cristiano\Documents\Bluetooth Folder
==================== Files in the root of some directories =======
2015-05-16 16:26 - 2015-05-16 16:26 - 0000022 _____ () C:\Users\Cristiano\AppData\Roaming\langInstall.exe
2016-01-31 16:00 - 2016-01-31 16:00 - 0007597 _____ () C:\Users\Cristiano\AppData\Local\Resmon.ResmonCfg
2014-11-10 21:15 - 2014-11-10 21:25 - 0001266 _____ () C:\ProgramData\hpzinstall.log
Some files in TEMP:
====================
C:\Users\Outros\AppData\Local\Temp\avguirn_082106442303.exe
C:\Users\Outros\AppData\Local\Temp\ICReinstall_Porca_Veia_Eu_Gostei_Do_Baile_Veio_Tche_Bailao.exe
==================== Bamital & volsnap =================
(There is no automatic fix for files that do not pass verification.)
C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\dnsapi.dll => File is digitally signed
C:\Windows\SysWOW64\dnsapi.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed
LastRegBack: 2016-02-01 13:52
==================== End of FRST.txt ============================