cjoint

Publicité


Publicité

Format du document : text/plain

Prévisualisation

Resultado do exame da Farbar Recovery Scan Tool (FRST) (x64) Versão: 09-08-2016 01
Executado por Beto (administrador) em BETO-PC (09-08-2016 16:01:38)
Executando a partir de C:\Users\Beto\Downloads
Perfis Carregados: Beto (Perfis Disponíveis: Beto)
Platform: Windows 7 Ultimate (X64) Idioma: Português (Brasil)
Internet Explorer Versão 8 (Navegador padrão: Chrome)
Modo da Inicialização: Normal
Tutorial da Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processos (Whitelisted) =================

(Se uma entrada for incluída na fixlist, o processo será fechado. O arquivo não será movido.)

(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\avastui.exe
() C:\Program Files (x86)\Viva\viva.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe


==================== Registro (Whitelisted) ===========================

(Se uma entrada for incluída na fixlist, o ítem no Registro será restaurado para o padrão ou removido. O arquivo não será movido.)

HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [9071752 2016-08-09] (AVAST Software)
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2016-08-09] (AVAST Software)

==================== Internet (Whitelisted) ====================

(Se um ítem for incluído na fixlist, sendo um ítem do Registro, será removido ou restaurado para o padrão.)

Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{61430233-D427-4B3D-9D4E-6CEFA4FF52F3}: [DhcpNameServer] 192.168.1.1

Internet Explorer:
==================
BHO: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\root\Office16\OCHelper.dll [2016-08-09] (Microsoft Corporation)
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2016-08-09] (AVAST Software)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\root\Office16\URLREDIR.DLL [2016-08-09] (Microsoft Corporation)
BHO: Microsoft OneDrive for Business Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office\root\Office16\GROOVEEX.DLL [2016-08-09] (Microsoft Corporation)
BHO-x32: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\OCHelper.dll [2016-08-09] (Microsoft Corporation)
BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2016-08-09] (AVAST Software)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\URLREDIR.DLL [2016-08-09] (Microsoft Corporation)
BHO-x32: Microsoft OneDrive for Business Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\GROOVEEX.DLL [2016-08-09] (Microsoft Corporation)
Handler: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2016-08-09] (Microsoft Corporation)
Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2016-08-09] (Microsoft Corporation)
Handler: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2016-08-09] (Microsoft Corporation)
Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2016-08-09] (Microsoft Corporation)
Handler: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2016-08-09] (Microsoft Corporation)
Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2016-08-09] (Microsoft Corporation)
Handler: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2016-08-09] (Microsoft Corporation)
Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2016-08-09] (Microsoft Corporation)
Filter: deflate - {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\Windows\system32\urlmon.dll [2009-07-13] (Microsoft Corporation)
Filter-x32: deflate - {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\Windows\SysWOW64\urlmon.dll [2009-07-13] (Microsoft Corporation)
Filter: gzip - {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\Windows\system32\urlmon.dll [2009-07-13] (Microsoft Corporation)
Filter-x32: gzip - {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\Windows\SysWOW64\urlmon.dll [2009-07-13] (Microsoft Corporation)

FireFox:
========
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\Office16\NPSPWRAP.DLL [2016-08-09] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2016-08-09] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\NPSPWRAP.DLL [2016-08-09] (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.31.5\npGoogleUpdate3.dll [2016-08-09] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.31.5\npGoogleUpdate3.dll [2016-08-09] (Google Inc.)
FF HKLM\...\Firefox\Extensions: [sp@avast.com] - C:\Program Files\AVAST Software\Avast\SafePrice\FF
FF Extension: Avast SafePrice - C:\Program Files\AVAST Software\Avast\SafePrice\FF [2016-08-09]
FF HKLM\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: Avast Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2016-08-09]
FF HKLM-x32\...\Firefox\Extensions: [sp@avast.com] - C:\Program Files\AVAST Software\Avast\SafePrice\FF
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF

Chrome:
=======
CHR HomePage: Default -> about:newtab?source=home
CHR StartupUrls: Default -> "hxxps://www.google.com.br/"
CHR DefaultSearchURL: Default -> hxxp://www.searchme.com/cgi/sm_redirector.cgi?src=ds&q={searchTerms}
CHR DefaultSearchKeyword: Default -> searchme.com
CHR Profile: C:\Users\Beto\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Apresentações) - C:\Users\Beto\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2016-08-09]
CHR Extension: (Google Docs) - C:\Users\Beto\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2016-08-09]
CHR Extension: (Google Drive) - C:\Users\Beto\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2016-08-09]
CHR Extension: (YouTube) - C:\Users\Beto\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2016-08-09]
CHR Extension: (Desprotetor.com - Desprotetor de links) - C:\Users\Beto\AppData\Local\Google\Chrome\User Data\Default\Extensions\cocohmmjllchepkjocddkihldoiillkl [2016-08-09]
CHR Extension: (Avast SafePrice) - C:\Users\Beto\AppData\Local\Google\Chrome\User Data\Default\Extensions\eofcbnmajmjmplflapaojjnihcjkigck [2016-08-09]
CHR Extension: (Planilhas do Google) - C:\Users\Beto\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2016-08-09]
CHR Extension: (Documentos Google off-line) - C:\Users\Beto\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-08-09]
CHR Extension: (Avast Online Security) - C:\Users\Beto\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2016-08-09]
CHR Extension: (searchme.com) - C:\Users\Beto\AppData\Local\Google\Chrome\User Data\Default\Extensions\hglpncllpkioeodfjadihgdidcmnodhd [2016-08-09]
CHR Extension: (Pagamentos da Chrome Web Store) - C:\Users\Beto\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2016-08-09]
CHR Extension: (Gmail) - C:\Users\Beto\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2016-08-09]
CHR Extension: (Chrome Media Router) - C:\Users\Beto\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2016-08-09]
CHR HKLM-x32\...\Chrome\Extension: [eofcbnmajmjmplflapaojjnihcjkigck] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - hxxps://clients2.google.com/service/update2/crx

==================== Serviços (Whitelisted) ========================

(Se uma entrada for incluída na fixlist, será removida do Registro. O arquivo não será movido, a menos que seja colocado separadamente.)

R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [197640 2016-08-09] (AVAST Software)
R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [2950856 2016-07-25] (Microsoft Corporation)
R2 COMLiveService; C:\Program Files (x86)\Viva\viva.exe [346624 2015-10-05] () [Arquivo não assinado]
S3 ose64; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [242224 2016-07-23] (Microsoft Corporation) [Arquivo não assinado]
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2009-07-13] (Microsoft Corporation)

===================== Drivers (Whitelisted) ==========================

(Se uma entrada for incluída na fixlist, será removida do Registro. O arquivo não será movido, a menos que seja colocado separadamente.)

R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [37656 2016-08-09] (AVAST Software)
R1 aswKbd; C:\Windows\system32\drivers\aswKbd.sys [37144 2016-08-09] (AVAST Software)
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [108816 2016-08-09] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [103064 2016-08-09] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [74544 2016-08-09] (AVAST Software)
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [968536 2016-08-09] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [513496 2016-08-09] (AVAST Software)
R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [163416 2016-08-09] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [292704 2016-08-09] (AVAST Software)
S3 ebdrv; C:\Windows\system32\DRIVERS\evbda.sys [3286016 2009-06-10] (Broadcom Corporation)
R1 vivadrv; C:\Windows\System32\drivers\vivadrv.sys [57600 2015-09-17] (Windows (R) Win 7 DDK provider)

==================== NetSvcs (Whitelisted) ===================

(Se uma entrada for incluída na fixlist, será removida do Registro. O arquivo não será movido, a menos que seja colocado separadamente.)


==================== Um Mês Criados arquivos e pastas ========

(Se uma entrada for incluída na fixlist, o arquivo/pasta será movido.)

2016-08-09 18:10 - 2016-08-09 13:16 - 00000000 ____D C:\Windows\Panther
2016-08-09 16:01 - 2016-08-09 16:01 - 02393600 _____ (Farbar) C:\Users\Beto\Downloads\FRST64.exe
2016-08-09 16:01 - 2016-08-09 16:01 - 00012346 _____ C:\Users\Beto\Downloads\FRST.txt
2016-08-09 16:01 - 2016-08-09 16:01 - 00000000 ____D C:\FRST
2016-08-09 15:30 - 2016-08-09 15:30 - 00000000 ____D C:\Users\Beto\Documents\Adobe Scripts
2016-08-09 15:05 - 2016-08-09 15:33 - 00000000 ____D C:\Users\Todos os Usuários\Adobe
2016-08-09 15:05 - 2016-08-09 15:33 - 00000000 ____D C:\ProgramData\Adobe
2016-08-09 15:05 - 2016-08-09 15:32 - 00000000 ____D C:\Users\Beto\AppData\Roaming\Adobe
2016-08-09 15:05 - 2016-08-09 15:05 - 00000000 ____D C:\Users\Beto\AppData\Roaming\Macromedia
2016-08-09 15:05 - 2016-08-09 15:05 - 00000000 ____D C:\Users\Beto\AppData\Local\Adobe
2016-08-09 15:02 - 2016-08-09 15:02 - 00722130 _____ C:\Windows\unins000.exe
2016-08-09 15:00 - 2016-08-09 13:33 - 00083312 _____ (AVAST Software) C:\Windows\system32\Drivers\aswHdsKe.sys
2016-08-09 14:48 - 2016-08-09 14:48 - 00002154 _____ C:\Users\Beto\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Microsoft OneDrive.lnk
2016-08-09 14:48 - 2016-08-09 14:48 - 00002102 _____ C:\Users\Usuário Padrão\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Microsoft OneDrive.lnk
2016-08-09 14:48 - 2016-08-09 14:48 - 00002102 _____ C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Microsoft OneDrive.lnk
2016-08-09 14:48 - 2016-08-09 14:48 - 00002102 _____ C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Microsoft OneDrive.lnk
2016-08-09 14:48 - 2016-08-09 14:48 - 00000000 ___RD C:\Users\Beto\OneDrive
2016-08-09 14:48 - 2016-08-09 14:48 - 00000000 ____D C:\Users\Todos os Usuários\Microsoft OneDrive
2016-08-09 14:48 - 2016-08-09 14:48 - 00000000 ____D C:\ProgramData\Microsoft OneDrive
2016-08-09 14:48 - 2016-08-09 14:48 - 00000000 ____D C:\Program Files (x86)\Microsoft OneDrive
2016-08-09 14:47 - 2016-08-09 14:47 - 00000000 ____D C:\Program Files\Common Files\DESIGNER
2016-08-09 14:31 - 2016-08-09 14:31 - 00002415 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OneDrive for Business.lnk
2016-08-09 14:31 - 2016-08-09 14:31 - 00002379 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype for Business 2016.lnk
2016-08-09 14:31 - 2016-08-09 14:31 - 00002374 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Word 2016.lnk
2016-08-09 14:31 - 2016-08-09 14:31 - 00002373 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PowerPoint 2016.lnk
2016-08-09 14:31 - 2016-08-09 14:31 - 00002337 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Access 2016.lnk
2016-08-09 14:31 - 2016-08-09 14:31 - 00002336 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Excel 2016.lnk
2016-08-09 14:31 - 2016-08-09 14:31 - 00002330 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Outlook 2016.lnk
2016-08-09 14:31 - 2016-08-09 14:31 - 00002324 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Publisher 2016.lnk
2016-08-09 14:31 - 2016-08-09 14:31 - 00002316 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OneNote 2016.lnk
2016-08-09 14:31 - 2016-08-09 14:31 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2016 Tools
2016-08-09 14:28 - 2016-08-09 14:47 - 00000000 ____D C:\Users\Todos os Usuários\regid.1991-06.com.microsoft
2016-08-09 14:28 - 2016-08-09 14:47 - 00000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2016-08-09 14:28 - 2016-08-09 14:28 - 00000000 ____D C:\Windows\System32\Tasks\OfficeSoftwareProtectionPlatform
2016-08-09 14:27 - 2016-08-09 14:26 - 01804512 _____ C:\WindowsGABRIOLA.tt2
2016-08-09 14:26 - 2016-08-09 14:28 - 00000000 ____D C:\Program Files\Microsoft Office
2016-08-09 14:26 - 2016-08-09 14:26 - 00000000 ____D C:\Program Files\Microsoft Office 15
2016-08-09 14:25 - 2016-08-09 16:00 - 00000000 ____D C:\viva
2016-08-09 14:25 - 2016-08-09 15:02 - 00001432 _____ C:\Windows\unins000.dat
2016-08-09 14:25 - 2016-08-09 15:02 - 00000000 ____D C:\Program Files (x86)\Viva
2016-08-09 14:25 - 2015-09-17 21:27 - 00057600 _____ (Windows (R) Win 7 DDK provider) C:\Windows\system32\Drivers\vivadrv.sys
2016-08-09 14:24 - 2016-08-09 14:25 - 00000000 ____D C:\Users\Beto\Downloads\Adobe Photoshop CS6 Extended x86 x64 Portugues BR
2016-08-09 14:23 - 2016-08-09 14:23 - 00530760 _____ C:\Users\Beto\Downloads\adobe.photoshop.cs6.extended.x86.x64.portugues.br.[programasviatorrents.com].torrent
2016-08-09 14:08 - 2016-08-09 14:08 - 00000000 ____D C:\Users\Beto\Downloads\Suicide Squad 2016 CAM UnKnOwN
2016-08-09 14:08 - 2016-08-09 14:08 - 00000000 ____D C:\Users\Beto\Downloads\MICROSOFT Office PRO Plus 2016 v16.0.4266.1003 RTM + Activator [TechTools.NET]
2016-08-09 14:07 - 2016-08-09 14:59 - 00000000 ___SD C:\Users\Beto\AppData\LocalLow\Temp
2016-08-09 14:06 - 2016-08-09 14:07 - 00000000 ____D C:\Users\Beto\AppData\LocalLow\uTorrent
2016-08-09 14:05 - 2016-08-09 15:00 - 00000000 ____D C:\Users\Beto\AppData\Roaming\uTorrent
2016-08-09 14:05 - 2016-08-09 14:05 - 00002633 _____ C:\Users\Beto\Desktop\µTorrent.lnk
2016-08-09 14:05 - 2016-08-09 14:05 - 00002633 _____ C:\Users\Beto\AppData\Roaming\Microsoft\Windows\Start Menu\µTorrent.lnk
2016-08-09 13:33 - 2016-08-09 13:33 - 00037144 _____ (AVAST Software) C:\Windows\system32\Drivers\aswKbd.sys
2016-08-09 13:33 - 2016-08-09 13:33 - 00003894 _____ C:\Windows\System32\Tasks\SafeZone scheduled Autoupdate 1470760400
2016-08-09 13:33 - 2016-08-09 13:33 - 00001043 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avast SafeZone Browser.lnk
2016-08-09 13:33 - 2016-08-09 13:33 - 00000000 ____D C:\Users\Beto\AppData\Local\CEF
2016-08-09 13:32 - 2016-08-09 15:10 - 00004180 _____ C:\Windows\System32\Tasks\avast! Emergency Update
2016-08-09 13:32 - 2016-08-09 13:32 - 00513496 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSP.sys
2016-08-09 13:32 - 2016-08-09 13:32 - 00391496 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe
2016-08-09 13:32 - 2016-08-09 13:32 - 00292704 _____ (AVAST Software) C:\Windows\system32\Drivers\aswvmm.sys
2016-08-09 13:32 - 2016-08-09 13:32 - 00163416 _____ (AVAST Software) C:\Windows\system32\Drivers\aswStm.sys
2016-08-09 13:32 - 2016-08-09 13:32 - 00108816 _____ (AVAST Software) C:\Windows\system32\Drivers\aswMonFlt.sys
2016-08-09 13:32 - 2016-08-09 13:32 - 00074544 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRvrt.sys
2016-08-09 13:32 - 2016-08-09 13:32 - 00037656 _____ (AVAST Software) C:\Windows\system32\Drivers\aswHwid.sys
2016-08-09 13:32 - 2016-08-09 13:32 - 00001922 _____ C:\Users\Public\Desktop\Avast Free Antivirus.lnk
2016-08-09 13:32 - 2016-08-09 13:32 - 00000000 ____D C:\Windows\System32\Tasks\AVAST Software
2016-08-09 13:32 - 2016-08-09 13:32 - 00000000 ____D C:\Users\Beto\AppData\Roaming\AVAST Software
2016-08-09 13:32 - 2016-08-09 13:32 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVAST Software
2016-08-09 13:32 - 2016-08-09 13:32 - 00000000 ____D C:\Program Files\Common Files\AV
2016-08-09 13:32 - 2016-08-09 13:31 - 00992960 _____ (Microsoft Corporation) C:\Windows\system32\ucrtbase.dll
2016-08-09 13:32 - 2016-08-09 13:31 - 00968536 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSnx.sys
2016-08-09 13:32 - 2016-08-09 13:31 - 00921280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ucrtbase.dll
2016-08-09 13:32 - 2016-08-09 13:31 - 00103064 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRdr2.sys
2016-08-09 13:31 - 2016-08-09 13:33 - 00000000 ____D C:\Users\Todos os Usuários\AVAST Software
2016-08-09 13:31 - 2016-08-09 13:33 - 00000000 ____D C:\ProgramData\AVAST Software
2016-08-09 13:31 - 2016-08-09 13:33 - 00000000 ____D C:\Program Files\AVAST Software
2016-08-09 13:31 - 2016-08-09 13:31 - 00053208 _____ (AVAST Software) C:\Windows\avastSS.scr
2016-08-09 13:29 - 2016-08-09 15:45 - 00001070 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2016-08-09 13:29 - 2016-08-09 15:41 - 00001066 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2016-08-09 13:29 - 2016-08-09 15:30 - 00111056 _____ C:\Users\Beto\AppData\Local\GDIPFONTCACHEV1.DAT
2016-08-09 13:29 - 2016-08-09 13:40 - 00004066 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2016-08-09 13:29 - 2016-08-09 13:40 - 00003814 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2016-08-09 13:29 - 2016-08-09 13:29 - 00002261 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2016-08-09 13:29 - 2016-08-09 13:29 - 00002249 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2016-08-09 13:29 - 2016-08-09 13:29 - 00000000 ____D C:\Users\Beto\AppData\Local\Google
2016-08-09 13:29 - 2016-08-09 13:29 - 00000000 ____D C:\Users\Beto\AppData\Local\Deployment
2016-08-09 13:29 - 2016-08-09 13:29 - 00000000 ____D C:\Users\Beto\AppData\Local\Apps\2.0
2016-08-09 13:29 - 2016-08-09 13:29 - 00000000 ____D C:\Program Files (x86)\Google
2016-08-09 13:20 - 2009-02-12 01:00 - 01481728 _____ C:\Windows\SysWOW64\LegitCheckControl.dll
2016-08-09 13:20 - 2009-02-12 01:00 - 00323072 _____ C:\Windows\SysWOW64\WgaTray.exe
2016-08-09 13:20 - 2009-02-12 01:00 - 00190976 _____ C:\Windows\SysWOW64\WgaLogon.dll
2016-08-09 13:17 - 2016-08-09 13:17 - 00001415 _____ C:\Users\Beto\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2016-08-09 13:17 - 2016-08-09 13:17 - 00001381 _____ C:\Users\Beto\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer (64-bit).lnk
2016-08-09 13:17 - 2016-08-09 13:17 - 00000000 ____D C:\Users\Beto\AppData\Local\VirtualStore
2016-08-09 13:17 - 2012-06-02 19:19 - 02428952 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2016-08-09 13:17 - 2012-06-02 19:19 - 00701976 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2016-08-09 13:17 - 2012-06-02 19:19 - 00057880 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2016-08-09 13:17 - 2012-06-02 19:19 - 00044056 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
2016-08-09 13:17 - 2012-06-02 19:19 - 00038424 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
2016-08-09 13:17 - 2012-06-02 19:15 - 02622464 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2016-08-09 13:17 - 2012-06-02 19:15 - 00099840 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
2016-08-09 13:17 - 2012-06-02 15:19 - 00186752 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
2016-08-09 13:17 - 2012-06-02 15:15 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
2016-08-09 13:16 - 2016-08-09 14:48 - 00000000 ____D C:\Users\Beto
2016-08-09 13:16 - 2016-08-09 13:16 - 00000020 ___SH C:\Users\Beto\ntuser.ini
2016-08-09 13:16 - 2016-08-09 13:16 - 00000000 _SHDL C:\Users\Usuário Padrão\Documents\Minhas músicas
2016-08-09 13:16 - 2016-08-09 13:16 - 00000000 _SHDL C:\Users\Usuário Padrão\Documents\Minhas imagens
2016-08-09 13:16 - 2016-08-09 13:16 - 00000000 _SHDL C:\Users\Usuário Padrão\Documents\Meus vídeos
2016-08-09 13:16 - 2016-08-09 13:16 - 00000000 _SHDL C:\Users\Usuário Padrão\AppData\Roaming\Microsoft\Windows\Start Menu\Programas
2016-08-09 13:16 - 2016-08-09 13:16 - 00000000 _SHDL C:\Users\Usuário Padrão\AppData\Local\Histórico
2016-08-09 13:16 - 2016-08-09 13:16 - 00000000 _SHDL C:\Users\Usuário Padrão\AppData\Local\Dados de aplicativos
2016-08-09 13:16 - 2016-08-09 13:16 - 00000000 _SHDL C:\Users\Usuário Padrão
2016-08-09 13:16 - 2016-08-09 13:16 - 00000000 _SHDL C:\Users\Todos os Usuários\Modelos
2016-08-09 13:16 - 2016-08-09 13:16 - 00000000 _SHDL C:\Users\Todos os Usuários\Menu Iniciar
2016-08-09 13:16 - 2016-08-09 13:16 - 00000000 _SHDL C:\Users\Todos os Usuários\Favoritos
2016-08-09 13:16 - 2016-08-09 13:16 - 00000000 _SHDL C:\Users\Todos os Usuários\Documentos
2016-08-09 13:16 - 2016-08-09 13:16 - 00000000 _SHDL C:\Users\Todos os Usuários\Dados de aplicativos
2016-08-09 13:16 - 2016-08-09 13:16 - 00000000 _SHDL C:\Users\Todos os Usuários
2016-08-09 13:16 - 2016-08-09 13:16 - 00000000 _SHDL C:\Users\Public\Documents\Minhas músicas
2016-08-09 13:16 - 2016-08-09 13:16 - 00000000 _SHDL C:\Users\Public\Documents\Minhas imagens
2016-08-09 13:16 - 2016-08-09 13:16 - 00000000 _SHDL C:\Users\Public\Documents\Meus vídeos
2016-08-09 13:16 - 2016-08-09 13:16 - 00000000 _SHDL C:\Users\Default\Modelos
2016-08-09 13:16 - 2016-08-09 13:16 - 00000000 _SHDL C:\Users\Default\Meus documentos
2016-08-09 13:16 - 2016-08-09 13:16 - 00000000 _SHDL C:\Users\Default\Menu Iniciar
2016-08-09 13:16 - 2016-08-09 13:16 - 00000000 _SHDL C:\Users\Default\Documents\Minhas músicas
2016-08-09 13:16 - 2016-08-09 13:16 - 00000000 _SHDL C:\Users\Default\Documents\Minhas imagens
2016-08-09 13:16 - 2016-08-09 13:16 - 00000000 _SHDL C:\Users\Default\Documents\Meus vídeos
2016-08-09 13:16 - 2016-08-09 13:16 - 00000000 _SHDL C:\Users\Default\Dados de aplicativos
2016-08-09 13:16 - 2016-08-09 13:16 - 00000000 _SHDL C:\Users\Default\Configurações locais
2016-08-09 13:16 - 2016-08-09 13:16 - 00000000 _SHDL C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programas
2016-08-09 13:16 - 2016-08-09 13:16 - 00000000 _SHDL C:\Users\Default\AppData\Local\Histórico
2016-08-09 13:16 - 2016-08-09 13:16 - 00000000 _SHDL C:\Users\Default\AppData\Local\Dados de aplicativos
2016-08-09 13:16 - 2016-08-09 13:16 - 00000000 _SHDL C:\Users\Default\Ambiente de rede
2016-08-09 13:16 - 2016-08-09 13:16 - 00000000 _SHDL C:\Users\Default\Ambiente de impressão
2016-08-09 13:16 - 2016-08-09 13:16 - 00000000 _SHDL C:\Users\Default User\Documents\Minhas músicas
2016-08-09 13:16 - 2016-08-09 13:16 - 00000000 _SHDL C:\Users\Default User\Documents\Minhas imagens
2016-08-09 13:16 - 2016-08-09 13:16 - 00000000 _SHDL C:\Users\Default User\Documents\Meus vídeos
2016-08-09 13:16 - 2016-08-09 13:16 - 00000000 _SHDL C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programas
2016-08-09 13:16 - 2016-08-09 13:16 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Histórico
2016-08-09 13:16 - 2016-08-09 13:16 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Dados de aplicativos
2016-08-09 13:16 - 2016-08-09 13:16 - 00000000 _SHDL C:\Users\Beto\Modelos
2016-08-09 13:16 - 2016-08-09 13:16 - 00000000 _SHDL C:\Users\Beto\Meus documentos
2016-08-09 13:16 - 2016-08-09 13:16 - 00000000 _SHDL C:\Users\Beto\Menu Iniciar
2016-08-09 13:16 - 2016-08-09 13:16 - 00000000 _SHDL C:\Users\Beto\Documents\Minhas músicas
2016-08-09 13:16 - 2016-08-09 13:16 - 00000000 _SHDL C:\Users\Beto\Documents\Minhas imagens
2016-08-09 13:16 - 2016-08-09 13:16 - 00000000 _SHDL C:\Users\Beto\Documents\Meus vídeos
2016-08-09 13:16 - 2016-08-09 13:16 - 00000000 _SHDL C:\Users\Beto\Dados de aplicativos
2016-08-09 13:16 - 2016-08-09 13:16 - 00000000 _SHDL C:\Users\Beto\Configurações locais
2016-08-09 13:16 - 2016-08-09 13:16 - 00000000 _SHDL C:\Users\Beto\AppData\Roaming\Microsoft\Windows\Start Menu\Programas
2016-08-09 13:16 - 2016-08-09 13:16 - 00000000 _SHDL C:\Users\Beto\AppData\Local\Histórico
2016-08-09 13:16 - 2016-08-09 13:16 - 00000000 _SHDL C:\Users\Beto\AppData\Local\Dados de aplicativos
2016-08-09 13:16 - 2016-08-09 13:16 - 00000000 _SHDL C:\Users\Beto\Ambiente de rede
2016-08-09 13:16 - 2016-08-09 13:16 - 00000000 _SHDL C:\Users\Beto\Ambiente de impressão
2016-08-09 13:16 - 2016-08-09 13:16 - 00000000 _SHDL C:\ProgramData\Modelos
2016-08-09 13:16 - 2016-08-09 13:16 - 00000000 _SHDL C:\ProgramData\Microsoft\Windows\Start Menu\Programas
2016-08-09 13:16 - 2016-08-09 13:16 - 00000000 _SHDL C:\ProgramData\Menu Iniciar
2016-08-09 13:16 - 2016-08-09 13:16 - 00000000 _SHDL C:\ProgramData\Favoritos
2016-08-09 13:16 - 2016-08-09 13:16 - 00000000 _SHDL C:\ProgramData\Documentos
2016-08-09 13:16 - 2016-08-09 13:16 - 00000000 _SHDL C:\ProgramData\Dados de aplicativos
2016-08-09 13:16 - 2016-08-09 13:16 - 00000000 _SHDL C:\Program Files\Common Files\Sistema
2016-08-09 13:16 - 2016-08-09 13:16 - 00000000 _SHDL C:\Program Files\Arquivos Comuns
2016-08-09 13:16 - 2016-08-09 13:16 - 00000000 _SHDL C:\Arquivos de Programas
2016-08-09 13:16 - 2009-07-14 04:45 - 00000000 ____D C:\Users\Beto\AppData\Roaming\Media Center Programs
2016-08-09 13:14 - 2016-08-09 13:14 - 00001345 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Media Center.lnk
2016-08-09 13:14 - 2016-08-09 13:14 - 00001326 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows DVD Maker.lnk
2016-08-09 13:13 - 2016-08-09 13:13 - 00000000 _____ C:\Windows\system32\atiicdxx.dat
2016-08-09 13:13 - 2016-08-09 13:13 - 00000000 _____ C:\Windows\ativpsrm.bin
2016-08-09 13:12 - 2016-08-09 13:12 - 00000000 ____H C:\Windows\system32\Drivers\Msft_User_WpdFs_01_09_00.Wdf
2016-07-23 09:53 - 2016-07-23 09:53 - 00635040 _____ (Microsoft Corporation) C:\Windows\system32\msvcp140.dll
2016-07-23 09:53 - 2016-07-23 09:53 - 00439608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvcp140.dll
2016-07-23 09:53 - 2016-07-23 09:53 - 00390320 _____ (Microsoft Corporation) C:\Windows\system32\vccorlib140.dll
2016-07-23 09:53 - 2016-07-23 09:53 - 00332968 _____ (Microsoft Corporation) C:\Windows\system32\concrt140.dll
2016-07-23 09:53 - 2016-07-23 09:53 - 00266928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vccorlib140.dll
2016-07-23 09:53 - 2016-07-23 09:53 - 00243520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\concrt140.dll
2016-07-23 09:53 - 2016-07-23 09:53 - 00088752 _____ (Microsoft Corporation) C:\Windows\system32\vcruntime140.dll
2016-07-23 09:53 - 2016-07-23 09:53 - 00085328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vcruntime140.dll

==================== Um Mês Modificados arquivos e pastas ========

(Se uma entrada for incluída na fixlist, o arquivo/pasta será movido.)

2016-08-09 18:10 - 2009-07-14 02:32 - 00028672 _____ C:\Windows\system32\config\BCD-Template
2016-08-09 15:47 - 2009-07-14 01:45 - 00014016 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2016-08-09 15:47 - 2009-07-14 01:45 - 00014016 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2016-08-09 15:45 - 2009-07-29 13:08 - 00654272 _____ C:\Windows\system32\prfh0416.dat
2016-08-09 15:45 - 2009-07-29 13:08 - 00124724 _____ C:\Windows\system32\prfc0416.dat
2016-08-09 15:45 - 2009-07-14 02:13 - 01491932 _____ C:\Windows\system32\PerfStringBackup.INI
2016-08-09 15:45 - 2009-07-14 00:20 - 00000000 ____D C:\Windows\inf
2016-08-09 15:41 - 2009-07-14 01:45 - 05053736 _____ C:\Windows\system32\FNTCACHE.DAT
2016-08-09 15:40 - 2009-07-14 02:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2016-08-09 15:09 - 2009-07-14 00:20 - 00000000 ____D C:\Program Files\Common Files\Microsoft Shared
2016-08-09 15:01 - 2009-07-14 02:09 - 00000000 ____D C:\Windows\System32\Tasks\WPD
2016-08-09 13:58 - 2009-07-14 00:20 - 00000000 ____D C:\Windows\rescache
2016-08-09 13:16 - 2009-07-14 00:20 - 00000000 __RHD C:\Users\Public\Libraries
2016-08-09 13:16 - 2009-07-14 00:20 - 00000000 ____D C:\Program Files\Windows NT
2016-08-09 13:14 - 2009-07-14 02:32 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
2016-08-09 13:13 - 2009-07-14 00:20 - 00000000 ____D C:\Windows\system32\sysprep
2016-08-09 13:11 - 2009-07-14 04:46 - 00000000 ____D C:\Windows\CSC

==================== Bamital & volsnap =================

(Não há correção automática para arquivos que não passaram na verificação.)

C:\Windows\system32\winlogon.exe => O arquivo é assinado digitalmente
C:\Windows\system32\wininit.exe => O arquivo é assinado digitalmente
C:\Windows\SysWOW64\wininit.exe => O arquivo é assinado digitalmente
C:\Windows\explorer.exe => O arquivo é assinado digitalmente
C:\Windows\SysWOW64\explorer.exe => O arquivo é assinado digitalmente
C:\Windows\system32\svchost.exe => O arquivo é assinado digitalmente
C:\Windows\SysWOW64\svchost.exe => O arquivo é assinado digitalmente
C:\Windows\system32\services.exe => O arquivo é assinado digitalmente
C:\Windows\system32\User32.dll => O arquivo é assinado digitalmente
C:\Windows\SysWOW64\User32.dll => O arquivo é assinado digitalmente
C:\Windows\system32\userinit.exe => O arquivo é assinado digitalmente
C:\Windows\SysWOW64\userinit.exe => O arquivo é assinado digitalmente
C:\Windows\system32\rpcss.dll => O arquivo é assinado digitalmente
C:\Windows\system32\dnsapi.dll => O arquivo é assinado digitalmente
C:\Windows\SysWOW64\dnsapi.dll => O arquivo é assinado digitalmente
C:\Windows\system32\Drivers\volsnap.sys => O arquivo é assinado digitalmente


LastRegBack: 2016-08-09 13:50

==================== Fim de FRST.txt ============================

Publicité


Signaler le contenu de ce document

Publicité