cjoint

Publicité


Publicité

Format du document : text/plain

Prévisualisation

Resultado do exame da Farbar Recovery Scan Tool (FRST) (x64) Versão: 27-07-2016
Executado por Holana (administrador) em HOLANA-PC (31-07-2016 02:56:58)
Executando a partir de C:\Users\Holana\Desktop
Perfis Carregados: Holana (Perfis Disponíveis: Holana)
Platform: Windows 8 (X64) Idioma: Português (Brasil)
Internet Explorer Versão 10 (Navegador padrão: Chrome)
Modo da Inicialização: Normal
Tutorial da Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processos (Whitelisted) =================

(Se uma entrada for incluída na fixlist, o processo será fechado. O arquivo não será movido.)

(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe
(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe
(Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe
() C:\Program Files (x86)\Canon\IJPLM\ijplmsvc.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16.4.4206.722_x64__8wekyb3d8bbwe\LiveComm.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\AppVShNotify.exe
(Microsoft Corporation) C:\Windows\System32\WWAHost.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe


==================== Registro (Whitelisted) ===========================

(Se uma entrada for incluída na fixlist, o ítem no Registro será restaurado para o padrão ou removido. O arquivo não será movido.)

HKLM-x32\...\Run: [tuto4pc_br_46] => [X]
HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [8900328 2016-07-06] (AVAST Software)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [508800 2014-12-17] (Oracle Corporation)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKU\S-1-5-21-3653245818-3898939100-4217711198-1001\...\Run: [Facebook Update] => C:\Users\Holana\AppData\Local\Facebook\Update\FacebookUpdate.exe [138096 2013-08-25] (Facebook Inc.)
HKU\S-1-5-21-3653245818-3898939100-4217711198-1001\...\Run: [OfficeSyncProcess] => "C:\Program Files\Microsoft Office\Office14\MSOSYNC.EXE"
HKU\S-1-5-21-3653245818-3898939100-4217711198-1001\...\Run: [AceWebExtensionUpdater] => C:\Users\Holana\AppData\Roaming\AceWebExtension\updater\ace_web_extension.exe [22824 2015-02-27] ()
HKU\S-1-5-21-3653245818-3898939100-4217711198-1001\...\RunOnce: [Uninstall C:\Users\Holana\AppData\Local\Microsoft\OneDrive\17.3.6281.1202_2\amd64] => C:\Windows\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Holana\AppData\Local\Microsoft\OneDrive\17.3.6281.1202_2\amd64"
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2016-07-06] (AVAST Software)
ShellIconOverlayIdentifiers: [DropboxExt1] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => Nenhum Arquivo
ShellIconOverlayIdentifiers: [DropboxExt2] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => Nenhum Arquivo
ShellIconOverlayIdentifiers: [DropboxExt3] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => Nenhum Arquivo
ShellIconOverlayIdentifiers: [DropboxExt4] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => Nenhum Arquivo
Startup: C:\Users\Holana\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Enviar para o OneNote.lnk [2016-07-13]
ShortcutTarget: Enviar para o OneNote.lnk -> C:\Program Files (x86)\Microsoft Office\root\Office16\ONENOTEM.EXE (Microsoft Corporation)
GroupPolicy: Restrição - Chrome <======= ATENÇÃO
GroupPolicy-x32: Restrição - Chrome <======= ATENÇÃO
CHR HKLM\SOFTWARE\Policies\Google: Restrição <======= ATENÇÃO

==================== Internet (Whitelisted) ====================

(Se um ítem for incluído na fixlist, sendo um ítem do Registro, será removido ou restaurado para o padrão.)

AutoConfigURL: [S-1-5-21-3653245818-3898939100-4217711198-1001] => file://C:\Program Files (x86)\Greener Web\bin\Pac9064.js
Tcpip\Parameters: [DhcpNameServer] 201.46.240.42 201.46.240.49
Tcpip\..\Interfaces\{9F3260BF-9A74-4076-9E17-3661C28C951D}: [DhcpNameServer] 201.46.240.42 201.46.240.49
Tcpip\..\Interfaces\{E688411E-665D-4B29-9376-550472024A0B}: [DhcpNameServer] 10.17.16.4 10.17.16.5
ManualProxies: 0file://C:\Program Files (x86)\Greener Web\bin\Pac9064.js

Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.yoursites123.com/?type=hp&ts=1457668492&z=e5106d6f75a2efab2622f12g0zdw6bao4c1ocwce3e&from=wpm0314&uid=SAMSUNGXHM500JJ_S2JJJ56B501683
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.yoursites123.com/?type=hp&ts=1457668492&z=e5106d6f75a2efab2622f12g0zdw6bao4c1ocwce3e&from=wpm0314&uid=SAMSUNGXHM500JJ_S2JJJ56B501683
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://yoursites123.com/web?type=ds&ts=1457668608&z=1b8f496ef2ffded5bce12eeg6z7w6m1tct4bfz3o4m&from=wpm0314&uid=SAMSUNGXHM500JJ_S2JJJ56B501683&q={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = hxxp://yoursites123.com/web?type=ds&ts=1457668608&z=1b8f496ef2ffded5bce12eeg6z7w6m1tct4bfz3o4m&from=wpm0314&uid=SAMSUNGXHM500JJ_S2JJJ56B501683&q={searchTerms}
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.yoursites123.com/?type=hp&ts=1457668492&z=e5106d6f75a2efab2622f12g0zdw6bao4c1ocwce3e&from=wpm0314&uid=SAMSUNGXHM500JJ_S2JJJ56B501683
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.yoursites123.com/?type=hp&ts=1457668492&z=e5106d6f75a2efab2622f12g0zdw6bao4c1ocwce3e&from=wpm0314&uid=SAMSUNGXHM500JJ_S2JJJ56B501683
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://yoursites123.com/web?type=ds&ts=1457668608&z=1b8f496ef2ffded5bce12eeg6z7w6m1tct4bfz3o4m&from=wpm0314&uid=SAMSUNGXHM500JJ_S2JJJ56B501683&q={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://yoursites123.com/web?type=ds&ts=1457668608&z=1b8f496ef2ffded5bce12eeg6z7w6m1tct4bfz3o4m&from=wpm0314&uid=SAMSUNGXHM500JJ_S2JJJ56B501683&q={searchTerms}
HKU\S-1-5-21-3653245818-3898939100-4217711198-1001\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://yoursites123.com/web?type=ds&ts=1457668492&z=e5106d6f75a2efab2622f12g0zdw6bao4c1ocwce3e&from=wpm0314&uid=SAMSUNGXHM500JJ_S2JJJ56B501683&q={searchTerms}
HKU\S-1-5-21-3653245818-3898939100-4217711198-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.yoursites123.com/?type=hp&ts=1457668492&z=e5106d6f75a2efab2622f12g0zdw6bao4c1ocwce3e&from=wpm0314&uid=SAMSUNGXHM500JJ_S2JJJ56B501683
HKU\S-1-5-21-3653245818-3898939100-4217711198-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.yoursites123.com/?type=hp&ts=1457668492&z=e5106d6f75a2efab2622f12g0zdw6bao4c1ocwce3e&from=wpm0314&uid=SAMSUNGXHM500JJ_S2JJJ56B501683
HKU\S-1-5-21-3653245818-3898939100-4217711198-1001\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://yoursites123.com/web?type=ds&ts=1457668492&z=e5106d6f75a2efab2622f12g0zdw6bao4c1ocwce3e&from=wpm0314&uid=SAMSUNGXHM500JJ_S2JJJ56B501683&q={searchTerms}
SearchScopes: HKU\.DEFAULT -> DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://yoursites123.com/web?type=ds&ts=1457668608&z=1b8f496ef2ffded5bce12eeg6z7w6m1tct4bfz3o4m&from=wpm0314&uid=SAMSUNGXHM500JJ_S2JJJ56B501683&q={searchTerms}
SearchScopes: HKU\.DEFAULT -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://yoursites123.com/web?type=ds&ts=1457668608&z=1b8f496ef2ffded5bce12eeg6z7w6m1tct4bfz3o4m&from=wpm0314&uid=SAMSUNGXHM500JJ_S2JJJ56B501683&q={searchTerms}
SearchScopes: HKU\S-1-5-21-3653245818-3898939100-4217711198-1001 -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://yoursites123.com/web?type=ds&ts=1457668492&z=e5106d6f75a2efab2622f12g0zdw6bao4c1ocwce3e&from=wpm0314&uid=SAMSUNGXHM500JJ_S2JJJ56B501683&q={searchTerms}
BHO: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX64\Microsoft Office\Office16\OCHelper.dll [2016-07-17] (Microsoft Corporation)
BHO: Canon Easy-WebPrint EX BHO -> {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} -> C:\Program Files (x86)\Canon\Easy-WebPrint EX\addon64\ewpexbho.dll [2014-01-24] (CANON INC.)
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2016-07-06] (AVAST Software)
BHO: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2016-05-25] (Microsoft Corporation)
BHO: Microsoft OneDrive for Business Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX64\Microsoft Office\Office16\GROOVEEX.DLL [2016-07-17] (Microsoft Corporation)
BHO-x32: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\root\Office16\OCHelper.dll [2016-07-17] (Microsoft Corporation)
BHO-x32: Canon Easy-WebPrint EX BHO -> {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} -> C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexbho.dll [2014-01-24] (CANON INC.)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\ssv.dll [2015-02-07] (Oracle Corporation)
BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2016-07-06] (AVAST Software)
BHO-x32: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2016-05-25] (Microsoft Corporation)
BHO-x32: Microsoft OneDrive for Business Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\root\Office16\GROOVEEX.DLL [2016-07-17] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\jp2ssv.dll [2015-02-07] (Oracle Corporation)
Toolbar: HKLM - Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\addon64\ewpexhlp.dll [2014-01-24] (CANON INC.)
Toolbar: HKLM-x32 - Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexhlp.dll [2014-01-24] (CANON INC.)
Toolbar: HKU\.DEFAULT -> Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\addon64\ewpexhlp.dll [2014-01-24] (CANON INC.)
Toolbar: HKU\S-1-5-21-3653245818-3898939100-4217711198-1001 -> Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\addon64\ewpexhlp.dll [2014-01-24] (CANON INC.)
Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2016-07-17] (Microsoft Corporation)
Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2016-07-17] (Microsoft Corporation)
Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2016-07-17] (Microsoft Corporation)
Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2016-07-17] (Microsoft Corporation)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll [2016-02-01] (Skype Technologies)
Handler: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2016-05-25] (Microsoft Corporation)
Handler-x32: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2016-05-25] (Microsoft Corporation)
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe hxxp://www.istartsurf.com/?type=sc&ts=1442694180&z=e83c713f57b2b1d1de38243g3zdz4o7qctczde6gcz&from=cor&uid=SAMSUNGXHM500JJ_S2JJJ56B501683

FireFox:
========
FF ProfilePath: C:\Users\Holana\AppData\Roaming\Mozilla\Firefox\Profiles\zuqz70y0.default
FF NewTab: chrome://quick_start/content/index.html
FF DefaultSearchEngine: yoursites123
FF Homepage: hxxp://www.yoursites123.com/?type=hp&ts=1457668492&z=e5106d6f75a2efab2622f12g0zdw6bao4c1ocwce3e&from=wpm0314&uid=SAMSUNGXHM500JJ_S2JJJ56B501683
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_22_0_0_209.dll [2016-07-13] ()
FF Plugin: @videolan.org/vlc,version=2.0.7 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2013-06-10] (VideoLAN)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_22_0_0_209.dll [2016-07-13] ()
FF Plugin-x32: @canon.com/EPPEX -> C:\Program Files (x86)\Canon\My Image Garden\AddOn\CIG\npmigfpi.dll [2011-11-30] (CANON INC.)
FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/pdf -> C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll [2013-04-02] (Foxit Corporation)
FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.fdf -> C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll [2013-04-02] (Foxit Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=11.31.2 -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\dtplugin\npDeployJava1.dll [2015-02-07] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.31.2 -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\plugin2\npjp2.dll [2015-02-07] (Oracle Corporation)
FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX86\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2016-07-17] (Microsoft Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.10411.0\npctrl.dll [2012-04-11] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files (x86)\Microsoft Office\root\Office16\NPSPWRAP.DLL [2016-07-17] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3528.0331 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2014-03-31] (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.31.5\npGoogleUpdate3.dll [2016-07-29] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.31.5\npGoogleUpdate3.dll [2016-07-29] (Google Inc.)
FF Plugin HKU\S-1-5-21-3653245818-3898939100-4217711198-1001: @Skype Limited.com/Facebook Video Calling Plugin -> C:\Users\Holana\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll [2014-07-24] (Skype Limited)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\buscape.xml [2015-08-30]
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\mercadolivre.xml [2015-08-30]
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yoursites123.xml [2016-03-11]
FF Extension: Default NewTab - C:\Users\Holana\AppData\Roaming\Mozilla\Firefox\Profiles\zuqz70y0.default\extensions\default_newtabff@gmail.com [2016-03-11] [não assinado]
FF Extension: Skype - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}.xpi [2016-05-25]
FF HKLM\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: Avast Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2016-07-06]
FF HKLM\...\Firefox\Extensions: [sp@avast.com] - C:\Program Files\AVAST Software\Avast\SafePrice\FF
FF Extension: Avast SafePrice - C:\Program Files\AVAST Software\Avast\SafePrice\FF [2016-07-06]
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF HKLM-x32\...\Firefox\Extensions: [defsearchp@gmail.com] - C:\Users\Holana\AppData\Roaming\Mozilla\Firefox\Profiles\zuqz70y0.default\extensions\defsearchp@gmail.com => não encontrado (a)
FF HKLM-x32\...\Firefox\Extensions: [deskCutv2@gmail.com] - C:\Users\Holana\AppData\Roaming\Mozilla\Firefox\Profiles\zuqz70y0.default\extensions\deskCutv2@gmail.com => não encontrado (a)
FF HKLM-x32\...\Firefox\Extensions: [default_newtabff@gmail.com] - C:\Users\Holana\AppData\Roaming\Mozilla\Firefox\Profiles\zuqz70y0.default\extensions\default_newtabff@gmail.com
FF HKLM-x32\...\Firefox\Extensions: [sp@avast.com] - C:\Program Files\AVAST Software\Avast\SafePrice\FF
StartMenuInternet: FIREFOX.EXE - C:\Program Files (x86)\Mozilla Firefox\firefox.exe hxxp://www.yoursites123.com/?type=sc&ts=1457668492&z=e5106d6f75a2efab2622f12g0zdw6bao4c1ocwce3e&from=wpm0314&uid=SAMSUNGXHM500JJ_S2JJJ56B501683

Chrome:
=======
CHR HomePage: Default -> hxxp://g0zdw6bao4c1ocwce3e%26from%3Dwpm0314%26uid%3Dsamsungxhm500jj_s2jjj56b501683/
CHR StartupUrls: Default -> "hxxp://www.uol.com.br/"
CHR Profile: C:\Users\Holana\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Drive) - C:\Users\Holana\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-10-21]
CHR Extension: (YouTube) - C:\Users\Holana\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-09-27]
CHR Extension: (Google Search) - C:\Users\Holana\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-10-26]
CHR Extension: (Skype) - C:\Users\Holana\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl [2016-05-26]
CHR Extension: (Pagamentos da Chrome Web Store) - C:\Users\Holana\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2016-03-30]
CHR Extension: (Gmail) - C:\Users\Holana\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-09-19]
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2015-07-23]
CHR HKLM-x32\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files (x86)\Skype\Toolbars\ChromeExtension\skype_chrome_extension.crx [2016-05-25]

==================== Serviços (Whitelisted) ========================

(Se uma entrada for incluída na fixlist, será removida do Registro. O arquivo não será movido, a menos que seja colocado separadamente.)

R2 Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [77128 2015-01-19] (Apple Inc.)
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [197128 2016-07-06] (AVAST Software)
R2 c2cautoupdatesvc; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1364096 2016-05-25] (Microsoft Corporation)
R2 c2cpnrsvc; C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1687680 2016-05-25] (Microsoft Corporation)
R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [2944768 2016-07-17] (Microsoft Corporation)
R2 IJPLMSVC; C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.EXE [140936 2013-05-14] ()
S3 Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [2122248 2016-07-13] (Electronic Arts)
S3 ose; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [200240 2016-07-16] (Microsoft Corporation) [Arquivo não assinado]
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [15440 2012-07-26] (Microsoft Corporation)

===================== Drivers (Whitelisted) ==========================

(Se uma entrada for incluída na fixlist, será removida do Registro. O arquivo não será movido, a menos que seja colocado separadamente.)

R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [37656 2016-07-06] (AVAST Software)
R1 aswKbd; C:\Windows\system32\drivers\aswKbd.sys [37144 2016-07-06] (AVAST Software)
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [108304 2016-07-06] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [103064 2016-07-06] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [74544 2016-07-06] (AVAST Software)
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1070904 2016-07-06] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [473592 2016-07-06] (AVAST Software)
R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [162904 2016-07-06] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [290088 2016-07-06] (AVAST Software)
R3 BCM43XX; C:\Windows\system32\DRIVERS\bcmwl63a.sys [5139968 2012-06-02] (Broadcom Corporation)
S0 ebdrv; C:\Windows\System32\drivers\evbda.sys [3295984 2012-07-26] (Broadcom Corporation)
S3 EsgScanner; C:\Windows\System32\DRIVERS\EsgScanner.sys [22704 2016-03-11] ()
S3 WdBoot; C:\Windows\system32\drivers\WdBoot.sys [34216 2012-07-26] (Microsoft Corporation)
S3 WdFilter; C:\Windows\system32\drivers\WdFilter.sys [258288 2012-07-26] (Microsoft Corporation)
S3 Spring; \??\C:\Program Files (x86)\Baidu Security\Baidu Antivirus\Spring64.sys [X]
S1 tcfd_vw_1_10_0_24; system32\drivers\tcfd_vw_1_10_0_24.sys [X]

==================== NetSvcs (Whitelisted) ===================

(Se uma entrada for incluída na fixlist, será removida do Registro. O arquivo não será movido, a menos que seja colocado separadamente.)


==================== Três Meses Criados arquivos e pastas ========

(Se uma entrada for incluída na fixlist, o arquivo/pasta será movido.)

2016-07-31 02:55 - 2016-07-31 02:56 - 00013311 _____ C:\Users\Holana\Desktop\Addition.txt
2016-07-31 02:54 - 2016-07-31 02:56 - 00022767 _____ C:\Users\Holana\Desktop\FRST.txt
2016-07-31 02:54 - 2016-07-31 02:56 - 00000000 ____D C:\FRST
2016-07-31 02:54 - 2016-07-31 02:54 - 02394112 _____ (Farbar) C:\Users\Holana\Desktop\FRST64.exe
2016-07-31 01:24 - 2016-07-31 01:24 - 00020362 _____ C:\Users\Holana\Desktop\Anexos_2016731.zip
2016-07-28 15:43 - 2016-07-28 17:02 - 00000000 ____D C:\Users\Holana\Desktop\fotos Valdeci
2016-07-13 20:03 - 2016-07-13 20:03 - 00321132 _____ C:\Users\Holana\Desktop\Novo Documento 22_2.pdf
2016-07-13 20:02 - 2016-07-13 20:02 - 00219004 _____ C:\Users\Holana\Desktop\pedreiro.pdf
2016-07-13 19:59 - 2016-07-13 19:59 - 00001411 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Photo Gallery.lnk
2016-07-13 19:59 - 2016-07-13 19:59 - 00001342 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Movie Maker.lnk
2016-07-13 19:59 - 2016-07-13 19:59 - 00000000 ___HD C:\OneDriveTemp
2016-07-13 19:58 - 2016-07-13 19:58 - 03251164 _____ C:\Users\Holana\Desktop\Anexos_2016713.zip
2016-07-13 19:58 - 2016-07-13 19:58 - 00000000 ____D C:\Windows\PCHEALTH
2016-07-13 19:58 - 2016-07-13 19:58 - 00000000 ____D C:\Program Files (x86)\Windows Live
2016-07-13 19:58 - 2016-07-13 19:58 - 00000000 ____D C:\Program Files (x86)\Microsoft SQL Server Compact Edition
2016-07-13 19:56 - 2016-07-28 14:57 - 00000000 ____D C:\Users\Holana\AppData\Local\Windows Live
2016-07-13 19:56 - 2016-07-13 20:35 - 00000000 ____D C:\Users\Holana\Desktop\IPAD
2016-07-13 19:49 - 2016-07-13 19:49 - 00000165 ____H C:\Users\Holana\Desktop\~$poster Alexandre versão final.pptx
2016-07-13 19:48 - 2016-07-13 19:48 - 00262144 _____ C:\Windows\Minidump\071316-19390-01.dmp
2016-07-13 19:48 - 2016-07-13 19:48 - 00262144 _____ C:\Windows\Minidump\071316-19234-01.dmp
2016-07-13 19:48 - 2016-07-13 19:48 - 00262144 _____ C:\Windows\Minidump\071316-18781-01.dmp
2016-07-13 19:48 - 2016-07-13 19:48 - 00262144 _____ C:\Windows\Minidump\071316-17156-01.dmp
2016-07-13 19:11 - 2016-07-13 19:11 - 00000000 ____D C:\Users\Holana\AppData\Local\CEF
2016-07-06 11:27 - 2016-07-06 11:27 - 00003898 _____ C:\Windows\System32\Tasks\SafeZone scheduled Autoupdate 1467815259
2016-07-06 11:27 - 2016-07-06 11:27 - 00001037 _____ C:\Users\Public\Desktop\Avast SafeZone Browser.lnk
2016-07-06 11:27 - 2016-07-06 11:27 - 00001037 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avast SafeZone Browser.lnk
2016-07-06 11:11 - 2016-07-06 11:11 - 00390984 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe
2016-07-06 11:11 - 2016-07-06 11:10 - 00992960 _____ (Microsoft Corporation) C:\Windows\system32\ucrtbase.dll
2016-07-06 11:11 - 2016-07-06 11:10 - 00921280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ucrtbase.dll
2016-07-06 11:11 - 2016-07-06 11:09 - 00037144 _____ (AVAST Software) C:\Windows\system32\Drivers\aswKbd.sys
2016-07-06 11:10 - 2016-07-06 11:10 - 00053208 _____ (AVAST Software) C:\Windows\avastSS.scr
2016-07-06 11:07 - 2016-07-06 11:07 - 00054350 _____ C:\Users\Holana\Desktop\Modulo_III_org_TCC_lista_ord_polo_b.ods
2016-06-18 04:23 - 2016-06-18 04:23 - 00585155 _____ C:\Users\Holana\Desktop\Modelo_Monografia.zip
2016-06-18 04:23 - 2016-06-18 04:23 - 00187096 _____ C:\Users\Holana\Desktop\Modelo_Poster.zip
2016-06-18 03:38 - 2016-06-18 03:41 - 00042880 _____ C:\Users\Holana\Desktop\Cópia de GALVÃO SIMULADO.xlsx
2016-06-18 03:31 - 2016-06-18 03:31 - 00000165 ____H C:\Users\Holana\Desktop\~$Cópia de GALVÃO SIMULADO.xlsx
2016-06-13 23:31 - 2016-06-13 23:31 - 00741734 _____ C:\Users\Holana\Desktop\914757.pdf
2016-06-02 00:50 - 2016-06-14 00:17 - 00000000 ____D C:\Users\Holana\Desktop\Alice
2016-06-02 00:33 - 2016-06-02 00:33 - 01946560 _____ C:\Users\Holana\Desktop\AAP - Matemática - 3ª série do Ensino Médio.pdf
2016-06-02 00:00 - 2016-06-02 00:00 - 00146432 _____ C:\Users\Holana\Desktop\NOTAS AAP 2016.xls
2016-05-26 16:39 - 2016-05-26 16:32 - 03996642 ____H C:\Users\Holana\Desktop\~WRL0003.tmp
2016-05-26 16:22 - 2016-05-26 16:22 - 02373242 _____ C:\Users\Holana\Desktop\Guia_TCC_BCo_UFSCar.pdf
2016-05-26 16:18 - 2016-05-26 16:32 - 00000000 ____D C:\Users\Holana\Documents\Blocos de Anotações do OneNote
2016-05-26 16:05 - 2016-06-02 00:24 - 00359424 _____ C:\Users\Holana\Desktop\aula sobre sen cos tg.ppt
2016-05-26 16:03 - 2016-05-26 16:03 - 04858652 _____ C:\Users\Holana\Documents\tcc imagnes.pptm
2016-05-17 19:38 - 2016-05-12 14:06 - 06904765 ____N C:\Users\Holana\Desktop\VID-20160512-WA0002.mp4
2016-05-17 19:32 - 2016-05-17 19:32 - 03192520 _____ (Microsoft Corporation) C:\Users\Holana\Desktop\Setup.X86.pt-BR_O365ProPlusRetail_3dd9def4-b426-4867-b66d-3a56f3685458_TX_PR_b_48_.exe
2016-05-17 19:17 - 2016-05-17 19:17 - 00002538 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OneDrive for Business.lnk
2016-05-17 19:17 - 2016-05-17 19:17 - 00002496 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype for Business 2016.lnk
2016-05-17 19:17 - 2016-05-17 19:17 - 00002485 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Word 2016.lnk
2016-05-17 19:17 - 2016-05-17 19:17 - 00002450 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Access 2016.lnk
2016-05-17 19:17 - 2016-05-17 19:17 - 00002434 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PowerPoint 2016.lnk
2016-05-17 19:17 - 2016-05-17 19:17 - 00002431 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Excel 2016.lnk
2016-05-17 19:17 - 2016-05-17 19:17 - 00002421 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OneNote 2016.lnk
2016-05-17 19:17 - 2016-05-17 19:17 - 00002417 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Outlook 2016.lnk
2016-05-17 19:17 - 2016-05-17 19:17 - 00002401 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Publisher 2016.lnk
2016-05-17 19:17 - 2016-05-17 18:46 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Ferramentas do Microsoft Office 2016
2016-05-17 18:59 - 2016-07-13 19:58 - 06079168 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerInstaller.exe
2016-05-17 18:57 - 2016-05-17 18:57 - 00000000 ____D C:\Users\Holana\Documents\Modelos Personalizados do Office
2016-05-17 18:45 - 2016-07-31 01:04 - 00000000 ___RD C:\Users\Holana\OneDrive
2016-05-17 18:45 - 2016-05-17 18:56 - 00002300 _____ C:\Users\Holana\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2016-05-17 18:45 - 2016-05-17 18:46 - 00000000 ____D C:\Program Files (x86)\Microsoft OneDrive
2016-05-17 18:45 - 2016-05-17 18:45 - 00002277 _____ C:\Users\Usuário Padrão\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2016-05-17 18:45 - 2016-05-17 18:45 - 00002277 _____ C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2016-05-17 18:45 - 2016-05-17 18:45 - 00002277 _____ C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2016-05-17 18:45 - 2016-05-17 18:45 - 00000000 ____D C:\Users\Todos os Usuários\Microsoft OneDrive
2016-05-17 18:45 - 2016-05-17 18:45 - 00000000 ____D C:\ProgramData\Microsoft OneDrive
2016-05-17 18:41 - 2016-07-31 01:08 - 00000000 ____D C:\Program Files (x86)\Microsoft Office
2016-05-17 18:41 - 2016-05-17 18:46 - 00000000 ____D C:\Program Files\Microsoft Office 15
2016-05-17 18:40 - 2016-05-17 18:40 - 00262144 _____ C:\Windows\Minidump\051716-18812-01.dmp
2016-05-17 18:40 - 2016-05-17 18:40 - 00262144 _____ C:\Windows\Minidump\051716-15609-01.dmp
2016-05-17 18:40 - 2016-05-17 18:40 - 00262144 _____ C:\Windows\Minidump\051716-15515-01.dmp
2016-05-04 22:58 - 2016-05-04 22:58 - 00000165 ____H C:\Users\Holana\Desktop\~$tcc atividades.pptx
2016-05-04 22:37 - 2016-05-04 22:37 - 00027547 _____ C:\Users\Holana\Desktop\1_39345095_4717994734626193249.htm
2016-05-04 22:36 - 2016-07-30 22:20 - 00000000 ____D C:\Users\Holana\Desktop\TCC
2016-05-02 09:05 - 2016-05-02 09:05 - 00635112 _____ (Microsoft Corporation) C:\Windows\system32\msvcp140.dll
2016-05-02 09:05 - 2016-05-02 09:05 - 00390400 _____ (Microsoft Corporation) C:\Windows\system32\vccorlib140.dll
2016-05-02 09:05 - 2016-05-02 09:05 - 00333080 _____ (Microsoft Corporation) C:\Windows\system32\concrt140.dll
2016-05-02 09:05 - 2016-05-02 09:05 - 00088816 _____ (Microsoft Corporation) C:\Windows\system32\vcruntime140.dll
2016-05-02 06:51 - 2016-05-02 06:51 - 00439528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvcp140.dll
2016-05-02 06:51 - 2016-05-02 06:51 - 00267008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vccorlib140.dll
2016-05-02 06:51 - 2016-05-02 06:51 - 00243480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\concrt140.dll
2016-05-02 06:51 - 2016-05-02 06:51 - 00085232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vcruntime140.dll

==================== Três Meses Modificados arquivos e pastas ========

(Se uma entrada for incluída na fixlist, o arquivo/pasta será movido.)

2016-07-31 02:52 - 2015-01-25 15:59 - 03257856 ___SH C:\Users\Holana\Desktop\Thumbs.db
2016-07-31 02:45 - 2013-08-18 12:04 - 00001096 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2016-07-31 01:58 - 2013-08-16 21:50 - 00000902 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2016-07-31 01:01 - 2013-08-16 10:40 - 00003598 _____ C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-3653245818-3898939100-4217711198-1001
2016-07-31 00:57 - 2013-08-18 12:04 - 00001092 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2016-07-31 00:56 - 2012-07-26 04:22 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2016-07-31 00:56 - 2012-07-26 02:26 - 00786432 ___SH C:\Windows\system32\config\BBI
2016-07-31 00:14 - 2014-07-28 20:54 - 00004180 _____ C:\Windows\System32\Tasks\avast! Emergency Update
2016-07-31 00:12 - 2013-08-25 21:07 - 00000952 _____ C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-3653245818-3898939100-4217711198-1001UA.job
2016-07-29 17:42 - 2012-07-26 05:12 - 00000000 ____D C:\Users\Todos os Usuários\regid.1991-06.com.microsoft
2016-07-29 17:42 - 2012-07-26 05:12 - 00000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2016-07-29 17:40 - 2013-08-18 12:04 - 00004068 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2016-07-29 17:40 - 2013-08-18 12:04 - 00003832 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2016-07-28 17:33 - 2012-07-26 07:33 - 01211450 _____ C:\Windows\system32\prfh0416.dat
2016-07-28 17:33 - 2012-07-26 07:33 - 00583850 _____ C:\Windows\system32\prfc0416.dat
2016-07-28 17:33 - 2012-07-26 04:28 - 00005432 _____ C:\Windows\system32\PerfStringBackup.INI
2016-07-28 16:22 - 2013-08-16 10:08 - 00000000 ____D C:\Users\Holana\AppData\Local\Packages
2016-07-27 22:22 - 2013-08-16 10:30 - 00000000 ____D C:\Users\Holana\AppData\Roaming\Skype
2016-07-27 21:24 - 2013-08-25 21:07 - 00000930 _____ C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-3653245818-3898939100-4217711198-1001Core.job
2016-07-27 21:21 - 2014-03-25 21:15 - 00000000 ___RD C:\Program Files (x86)\Skype
2016-07-27 21:21 - 2013-08-16 10:30 - 00000000 ____D C:\Users\Todos os Usuários\Skype
2016-07-27 21:21 - 2013-08-16 10:30 - 00000000 ____D C:\ProgramData\Skype
2016-07-13 20:22 - 2016-04-11 00:54 - 00000000 ____D C:\Users\Holana\Tracing
2016-07-13 20:22 - 2013-08-16 10:08 - 00000000 ____D C:\Users\Holana
2016-07-13 20:15 - 2014-10-16 15:20 - 00000000 ____D C:\Program Files (x86)\Origin
2016-07-13 20:15 - 2014-06-12 10:08 - 00000000 ____D C:\Users\Todos os Usuários\Origin
2016-07-13 20:15 - 2014-06-12 10:08 - 00000000 ____D C:\ProgramData\Origin
2016-07-13 19:59 - 2012-07-26 05:12 - 00000000 ____D C:\Windows\system32\NDF
2016-07-13 19:58 - 2013-08-16 21:50 - 00003790 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2016-07-13 19:58 - 2012-07-26 05:12 - 00000000 ____D C:\Windows\SysWOW64\Macromed
2016-07-13 19:58 - 2012-07-26 05:12 - 00000000 ____D C:\Windows\system32\Macromed
2016-07-13 19:58 - 2012-07-26 05:12 - 00000000 ____D C:\Program Files\Common Files\microsoft shared
2016-07-13 19:48 - 2016-03-30 13:28 - 278404320 _____ C:\Windows\MEMORY.DMP
2016-07-13 19:48 - 2014-02-28 14:09 - 00000000 ____D C:\Windows\Minidump
2016-07-06 11:16 - 2014-07-28 20:51 - 00473592 _____ (AVAST Software) C:\Windows\system32\Drivers\aswsp.sys
2016-07-06 11:11 - 2014-07-28 20:51 - 00473592 _____ (AVAST Software) C:\Windows\system32\Drivers\aswsp.sys.146781435059302
2016-07-06 11:11 - 2014-07-28 20:51 - 00290088 _____ (AVAST Software) C:\Windows\system32\Drivers\aswVmm.sys
2016-07-06 11:11 - 2014-07-28 20:51 - 00162904 _____ (AVAST Software) C:\Windows\system32\Drivers\aswStm.sys
2016-07-06 11:11 - 2014-07-28 20:51 - 00108304 _____ (AVAST Software) C:\Windows\system32\Drivers\aswMonFlt.sys
2016-07-06 11:11 - 2014-07-28 20:51 - 00103064 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRdr2.sys
2016-07-06 11:11 - 2014-07-28 20:51 - 00074544 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRvrt.sys
2016-07-06 11:11 - 2014-07-28 20:51 - 00037656 _____ (AVAST Software) C:\Windows\system32\Drivers\aswHwid.sys
2016-07-06 11:11 - 2013-08-18 12:03 - 00000000 ____D C:\Users\Todos os Usuários\AVAST Software
2016-07-06 11:11 - 2013-08-18 12:03 - 00000000 ____D C:\ProgramData\AVAST Software
2016-07-06 11:11 - 2012-07-26 02:37 - 00000000 ____D C:\Windows\Inf
2016-07-06 11:09 - 2014-07-28 20:51 - 01070904 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSnx.sys
2016-07-06 11:09 - 2014-07-28 20:43 - 00000000 ____D C:\Program Files\AVAST Software

==================== Arquivos na raiz de alguns diretórios =======

2013-08-16 10:15 - 2013-08-16 22:01 - 0000067 _____ () C:\Users\Holana\AppData\Roaming\burnaware.ini
2015-08-16 23:39 - 2016-05-04 23:10 - 0005120 _____ () C:\Users\Holana\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2015-09-26 08:17 - 2015-09-26 08:17 - 0000000 _____ () C:\Users\Holana\AppData\Local\{E74DE316-21DF-4126-915F-0551D67ED9D9}
2014-10-26 16:46 - 2014-10-26 16:46 - 0000020 _____ () C:\ProgramData\bc.ini
2015-09-19 17:25 - 2015-09-19 17:25 - 0000102 _____ () C:\ProgramData\{262E20B8-6E20-4CEF-B1FD-D022AB1085F5}.dat

Arquivos para serem movidos ou deletados:
====================
C:\ProgramData\{262E20B8-6E20-4CEF-B1FD-D022AB1085F5}.dat
C:\Users\Todos os Usuários\{262E20B8-6E20-4CEF-B1FD-D022AB1085F5}.dat


Alguns arquivos em TEMP:
====================
C:\Users\Holana\AppData\Local\Temp\Foxit Reader Updater.exe
C:\Users\Holana\AppData\Local\Temp\Regutil222609352799206768.exe
C:\Users\Holana\AppData\Local\Temp\SkypeSetup.exe
C:\Users\Holana\AppData\Local\Temp\unins000.exe
C:\Users\Holana\AppData\Local\Temp\{60EF85F2-8C02-4238-9917-02548ED5A11C}-GoogleUpdateSetup.exe


==================== Bamital & volsnap =================

(Não há correção automática para arquivos que não passaram na verificação.)

C:\Windows\system32\winlogon.exe => O arquivo é assinado digitalmente
C:\Windows\system32\wininit.exe => O arquivo é assinado digitalmente
C:\Windows\explorer.exe => O arquivo é assinado digitalmente
C:\Windows\SysWOW64\explorer.exe => O arquivo é assinado digitalmente
C:\Windows\system32\svchost.exe => O arquivo é assinado digitalmente
C:\Windows\SysWOW64\svchost.exe => O arquivo é assinado digitalmente
C:\Windows\system32\services.exe => O arquivo é assinado digitalmente
C:\Windows\system32\User32.dll => O arquivo é assinado digitalmente
C:\Windows\SysWOW64\User32.dll => O arquivo é assinado digitalmente
C:\Windows\system32\userinit.exe => O arquivo é assinado digitalmente
C:\Windows\SysWOW64\userinit.exe => O arquivo é assinado digitalmente
C:\Windows\system32\rpcss.dll => O arquivo é assinado digitalmente
C:\Windows\system32\dnsapi.dll => O arquivo é assinado digitalmente
C:\Windows\SysWOW64\dnsapi.dll => O arquivo é assinado digitalmente
C:\Windows\system32\Drivers\volsnap.sys => O arquivo é assinado digitalmente


LastRegBack: 2016-07-27 21:43

==================== Fim de FRST.txt ============================

Publicité


Signaler le contenu de ce document

Publicité