Publicité
Publicité
Format du document : text/plain
Prévisualisation
Resultado do exame da Farbar Recovery Scan Tool (FRST) (x64) Versão: 17-10-2016
Executado por veronica (administrador) em VERONICA-PC (24-10-2016 13:04:50)
Executando a partir de C:\Users\veronica\Desktop
Perfis Carregados: veronica (Perfis Disponíveis: veronica)
Platform: Windows 7 Home Premium (X64) Idioma: Português (Brasil)
Internet Explorer Versão 8 (Navegador padrão: Chrome)
Modo da Inicialização: Normal
Tutorial da Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Processos (Whitelisted) =================
(Se uma entrada for incluída na fixlist, o processo será fechado. O arquivo não será movido.)
(IObit) C:\Program Files (x86)\IObit\Advanced SystemCare\ASCService.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe
(IObit) C:\Program Files (x86)\IObit\Advanced SystemCare\Monitor.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.31.5\GoogleCrashHandler.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.31.5\GoogleCrashHandler64.exe
(@ByELDI) C:\Program Files\KMSpico\Service_KMS.exe
(IObit) C:\Program Files (x86)\IObit\Advanced SystemCare\ASCTray.exe
(BitTorrent Inc.) C:\Users\veronica\AppData\Roaming\uTorrent\uTorrent.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\avastui.exe
(IObit) C:\Program Files (x86)\IObit\IObit Uninstaller\UninstallMonitor.exe
(BitTorrent Inc.) C:\Users\veronica\AppData\Roaming\uTorrent\updates\3.4.9_42606\utorrentie.exe
(BitTorrent Inc.) C:\Users\veronica\AppData\Roaming\uTorrent\updates\3.4.9_42606\utorrentie.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
==================== Registro (Whitelisted) ====================
(Se uma entrada for incluída na fixlist, o ítem no Registro será restaurado para o padrão ou removido. O arquivo não será movido.)
HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [9083840 2016-10-23] (AVAST Software)
HKU\S-1-5-21-1489183723-1793641325-901411604-1001\...\Run: [Advanced SystemCare 9] => C:\Program Files (x86)\IObit\Advanced SystemCare\ASCTray.exe [2023712 2016-07-27] (IObit)
HKU\S-1-5-21-1489183723-1793641325-901411604-1001\...\Run: [uTorrent] => C:\Users\veronica\AppData\Roaming\uTorrent\uTorrent.exe [1977536 2016-10-23] (BitTorrent Inc.)
HKU\S-1-5-21-1489183723-1793641325-901411604-1001\...\RunOnce: [Uninstall C:\Users\veronica\AppData\Local\Microsoft\OneDrive\17.3.6390.0509\amd64] => C:\Windows\system32\cmd.exe /q /c rmdir /s /q "C:\Users\veronica\AppData\Local\Microsoft\OneDrive\17.3.6390.0509\amd64"
HKU\S-1-5-21-1489183723-1793641325-901411604-1001\...\Policies\Explorer: [NolowDiskSpaceChecks] 1
HKU\S-1-5-21-1489183723-1793641325-901411604-1001\...\MountPoints2: {27778593-995d-11e6-99d1-00235a71235a} - E:\AutoRun.exe
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2016-10-23] (AVAST Software)
==================== Internet (Whitelisted) ====================
(Se um ítem for incluído na fixlist, sendo um ítem do Registro, será removido ou restaurado para o padrão.)
Tcpip\Parameters: [DhcpNameServer] 187.2.216.40 187.2.216.35 192.168.0.1
Tcpip\..\Interfaces\{F139999F-21D7-4F67-AE03-473164810A06}: [DhcpNameServer] 187.2.216.40 187.2.216.35 192.168.0.1
Internet Explorer:
==================
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Restrição <======= ATENÇÃO
BHO: ExplorerWnd Helper -> {10921475-03CE-4E04-90CE-E2E7EF20C814} -> C:\Program Files (x86)\IObit\IObit Uninstaller\UninstallExplorer.dll [2015-11-12] (IObit)
BHO: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\root\Office16\OCHelper.dll [2016-10-23] (Microsoft Corporation)
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2016-10-23] (AVAST Software)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\root\Office16\URLREDIR.DLL [2016-10-23] (Microsoft Corporation)
BHO: Microsoft OneDrive for Business Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office\root\Office16\GROOVEEX.DLL [2016-10-23] (Microsoft Corporation)
BHO-x32: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\OCHelper.dll [2016-10-23] (Microsoft Corporation)
BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2016-10-23] (AVAST Software)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\URLREDIR.DLL [2016-10-23] (Microsoft Corporation)
BHO-x32: Advanced SystemCare Surfing Protection -> {BA0C978D-D909-49B6-AFE2-8BDE245DC7E6} -> C:\Program Files (x86)\IObit\Surfing Protection\BrowerProtect\ASCPlugin_Protection.dll [2015-07-09] (IObit)
BHO-x32: Microsoft OneDrive for Business Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\GROOVEEX.DLL [2016-10-23] (Microsoft Corporation)
Handler: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2016-10-23] (Microsoft Corporation)
Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2016-10-23] (Microsoft Corporation)
Handler: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2016-10-23] (Microsoft Corporation)
Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2016-10-23] (Microsoft Corporation)
Handler: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2016-10-23] (Microsoft Corporation)
Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2016-10-23] (Microsoft Corporation)
Handler: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2016-10-23] (Microsoft Corporation)
Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2016-10-23] (Microsoft Corporation)
Filter: deflate - {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\Windows\system32\urlmon.dll [2009-07-13] (Microsoft Corporation)
Filter-x32: deflate - {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\Windows\SysWOW64\urlmon.dll [2009-07-13] (Microsoft Corporation)
Filter: gzip - {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\Windows\system32\urlmon.dll [2009-07-13] (Microsoft Corporation)
Filter-x32: gzip - {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\Windows\SysWOW64\urlmon.dll [2009-07-13] (Microsoft Corporation)
FireFox:
========
FF HKLM\...\Firefox\Extensions: [sp@avast.com] - C:\Program Files\AVAST Software\Avast\SafePrice\FF
FF Extension: (Avast SafePrice) - C:\Program Files\AVAST Software\Avast\SafePrice\FF [2016-10-23]
FF HKLM\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: (Avast Online Security) - C:\Program Files\AVAST Software\Avast\WebRep\FF [2016-10-23]
FF HKLM-x32\...\Firefox\Extensions: [sp@avast.com] - C:\Program Files\AVAST Software\Avast\SafePrice\FF
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\Office16\NPSPWRAP.DLL [2016-10-23] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2016-10-23] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\NPSPWRAP.DLL [2016-10-23] (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.31.5\npGoogleUpdate3.dll [2016-10-23] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.31.5\npGoogleUpdate3.dll [2016-10-23] (Google Inc.)
Chrome:
=======
CHR HomePage: Default -> hxxp://www.google.com.br/
CHR Profile: C:\Users\veronica\AppData\Local\Google\Chrome\User Data\Default [2016-10-24]
CHR Extension: (Google Apresentações) - C:\Users\veronica\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2016-10-23]
CHR Extension: (Google Docs) - C:\Users\veronica\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2016-10-23]
CHR Extension: (Google Drive) - C:\Users\veronica\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2016-10-23]
CHR Extension: (YouTube) - C:\Users\veronica\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2016-10-23]
CHR Extension: (ARC Welder) - C:\Users\veronica\AppData\Local\Google\Chrome\User Data\Default\Extensions\emfinbmielocnlhgmfkkmkngdoccbadn [2016-10-23]
CHR Extension: (Planilhas do Google) - C:\Users\veronica\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2016-10-23]
CHR Extension: (Área de trabalho remota do Google Chrome) - C:\Users\veronica\AppData\Local\Google\Chrome\User Data\Default\Extensions\gbchcmhmhahfdphkhkmpfmihenigjmpp [2016-10-23]
CHR Extension: (Documentos Google off-line) - C:\Users\veronica\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-10-23]
CHR Extension: (App Runtime for Chrome (Beta)) - C:\Users\veronica\AppData\Local\Google\Chrome\User Data\Default\Extensions\mfaihdlpglflfgpfjcifdjdjcckigekc [2016-10-23]
CHR Extension: (Pagamentos da Chrome Web Store) - C:\Users\veronica\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2016-10-23]
CHR Extension: (GBBD Caixa Economica Federal) - C:\Users\veronica\AppData\Local\Google\Chrome\User Data\Default\Extensions\pbcaplhfkihhldmlbjhgajdeghjdbffi [2016-10-23]
CHR Extension: (Gmail) - C:\Users\veronica\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2016-10-23]
CHR Extension: (Chrome Media Router) - C:\Users\veronica\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2016-10-23]
CHR HKLM-x32\...\Chrome\Extension: [eofcbnmajmjmplflapaojjnihcjkigck] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - hxxps://clients2.google.com/service/update2/crx
==================== Serviços (Whitelisted) ====================
(Se uma entrada for incluída na fixlist, será removida do Registro. O arquivo não será movido, a menos que seja colocado separadamente.)
R2 AdvancedSystemCareService9; C:\Program Files (x86)\IObit\Advanced SystemCare\ASCService.exe [452384 2016-07-25] (IObit)
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [197128 2016-10-23] (AVAST Software)
R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [3064520 2016-10-08] (Microsoft Corporation)
S2 LiveUpdateSvc; C:\Program Files (x86)\IObit\LiveUpdate\LiveUpdate.exe [2960672 2016-07-20] (IObit)
R2 Service KMSELDI; C:\Program Files\KMSpico\Service_KMS.exe [737984 2015-08-30] (@ByELDI) [Arquivo não assinado]
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2009-07-13] (Microsoft Corporation)
===================== Drivers (Whitelisted) ======================
(Se uma entrada for incluída na fixlist, será removida do Registro. O arquivo não será movido, a menos que seja colocado separadamente.)
S3 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [37656 2016-10-23] (AVAST Software)
R1 aswKbd; C:\Windows\system32\drivers\aswKbd.sys [37144 2016-10-23] (AVAST Software)
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [108816 2016-10-23] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [103064 2016-10-23] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [74544 2016-10-23] (AVAST Software)
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [969184 2016-10-23] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [513632 2016-10-23] (AVAST Software)
R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [163416 2016-10-23] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [293352 2016-10-23] (AVAST Software)
S3 ebdrv; C:\Windows\system32\DRIVERS\evbda.sys [3286016 2009-06-10] (Broadcom Corporation)
R3 SiS6350; C:\Windows\System32\DRIVERS\SISGRKMD.sys [559104 2010-12-15] (Silicon Integrated Systems Corporation)
==================== NetSvcs (Whitelisted) ===================
(Se uma entrada for incluída na fixlist, será removida do Registro. O arquivo não será movido, a menos que seja colocado separadamente.)
==================== Três Meses Criados arquivos e pastas ========
(Se uma entrada for incluída na fixlist, o arquivo/pasta será movido.)
2016-10-24 13:04 - 2016-10-24 13:05 - 00014036 _____ C:\Users\veronica\Desktop\FRST.txt
2016-10-24 13:04 - 2016-10-24 13:04 - 00000000 ____D C:\FRST
2016-10-24 13:03 - 2016-10-24 13:03 - 02407424 _____ (Farbar) C:\Users\veronica\Desktop\FRST64.exe
2016-10-24 00:00 - 2016-10-24 00:00 - 01034556 _____ C:\Users\veronica\Downloads\Windows6.1-KB2999226-x64.msu
2016-10-23 21:54 - 2016-10-23 21:54 - 00000000 ____D C:\Program Files\Common Files\DESIGNER
2016-10-23 18:31 - 2016-10-23 18:31 - 00000000 ____H C:\Windows\system32\Drivers\Msft_User_WpdMtpDr_01_09_00.Wdf
2016-10-23 18:20 - 2016-10-23 18:20 - 00000000 ____D C:\Users\veronica\Documents\Modelos Personalizados do Office
2016-10-23 18:15 - 2016-10-24 12:50 - 00000000 ____D C:\Users\veronica\AppData\LocalLow\uTorrent
2016-10-23 17:36 - 2016-10-23 17:36 - 00003370 _____ C:\Windows\System32\Tasks\AutoPico Daily Restart
2016-10-23 17:36 - 2016-10-23 17:36 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\KMSpico
2016-10-23 17:36 - 2016-10-23 17:36 - 00000000 ____D C:\Program Files\KMSpico
2016-10-23 17:36 - 2010-12-06 00:16 - 00090112 _____ (Vestris Inc.) C:\Windows\system32\Vestris.ResourceLib.dll
2016-10-23 17:35 - 2015-09-27 22:08 - 00000000 ____D C:\Users\veronica\Downloads\AT O2016 By PHDowns
2016-10-23 17:21 - 2016-10-23 17:21 - 00002459 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OneDrive for Business.lnk
2016-10-23 17:21 - 2016-10-23 17:21 - 00002417 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype for Business 2016.lnk
2016-10-23 17:21 - 2016-10-23 17:21 - 00002406 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Word 2016.lnk
2016-10-23 17:21 - 2016-10-23 17:21 - 00002371 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Access 2016.lnk
2016-10-23 17:21 - 2016-10-23 17:21 - 00002355 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PowerPoint 2016.lnk
2016-10-23 17:21 - 2016-10-23 17:21 - 00002352 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Excel 2016.lnk
2016-10-23 17:21 - 2016-10-23 17:21 - 00002342 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OneNote 2016.lnk
2016-10-23 17:21 - 2016-10-23 17:21 - 00002338 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Outlook 2016.lnk
2016-10-23 17:21 - 2016-10-23 17:21 - 00002322 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Publisher 2016.lnk
2016-10-23 17:21 - 2016-10-23 17:21 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Ferramentas do Microsoft Office 2016
2016-10-23 17:18 - 2016-10-23 21:55 - 00000000 ____D C:\Users\Todos os Usuários\regid.1991-06.com.microsoft
2016-10-23 17:18 - 2016-10-23 21:55 - 00000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2016-10-23 17:16 - 2016-10-23 17:15 - 01804512 _____ C:\WindowsGABRIOLA.tt2
2016-10-23 17:15 - 2016-10-23 21:51 - 00000000 ____D C:\Program Files\Microsoft Office
2016-10-23 17:15 - 2016-10-23 17:15 - 00000000 ____D C:\Program Files\Microsoft Office 15
2016-10-23 16:53 - 2016-10-23 16:53 - 00000241 _____ C:\Users\veronica\Desktop\ativador office.txt
2016-10-23 16:42 - 2016-10-23 17:04 - 2299707392 ____R C:\Users\veronica\Downloads\pt_office_professional_plus_2016_x86_x64_dvd_6966451.iso
2016-10-23 15:17 - 2016-10-23 15:18 - 00000000 ____D C:\Users\Todos os Usuários\Microsoft Toolkit
2016-10-23 15:17 - 2016-10-23 15:18 - 00000000 ____D C:\ProgramData\Microsoft Toolkit
2016-10-23 11:48 - 2016-10-23 11:48 - 00003548 _____ C:\Windows\System32\Tasks\{803BBFAF-8211-4EBA-9DA3-6738CACBE698}
2016-10-23 11:28 - 2016-10-23 15:55 - 00002174 _____ C:\Users\veronica\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Microsoft OneDrive.lnk
2016-10-23 11:28 - 2016-10-23 11:28 - 00002106 _____ C:\Users\Usuário Padrão\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Microsoft OneDrive.lnk
2016-10-23 11:28 - 2016-10-23 11:28 - 00002106 _____ C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Microsoft OneDrive.lnk
2016-10-23 11:28 - 2016-10-23 11:28 - 00002106 _____ C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Microsoft OneDrive.lnk
2016-10-23 11:28 - 2016-10-23 11:28 - 00000000 ____D C:\Users\Todos os Usuários\Microsoft OneDrive
2016-10-23 11:28 - 2016-10-23 11:28 - 00000000 ____D C:\ProgramData\Microsoft OneDrive
2016-10-23 10:37 - 2016-10-23 16:42 - 00000000 ___SD C:\Users\veronica\AppData\LocalLow\Temp
2016-10-23 10:36 - 2016-10-23 10:36 - 00000857 _____ C:\Users\veronica\Desktop\µTorrent.lnk
2016-10-23 10:36 - 2016-10-23 10:36 - 00000837 _____ C:\Users\veronica\AppData\Roaming\Microsoft\Windows\Start Menu\µTorrent.lnk
2016-10-23 10:23 - 2016-10-24 13:05 - 00000000 ____D C:\Users\veronica\AppData\Roaming\uTorrent
2016-10-23 10:01 - 2016-10-23 10:01 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Socia2Sear
2016-10-23 10:00 - 2016-10-23 10:01 - 00000000 ____D C:\Program Files\b4a2b824511d7d1aa1afaefbd0e69450
2016-10-23 09:31 - 2016-10-23 09:31 - 57618432 _____ C:\Windows\system32\config\SOFTWARE.iodefrag.bak
2016-10-23 09:31 - 2016-10-23 09:31 - 57618432 _____ C:\Windows\system32\config\SOFTWARE.iodefrag
2016-10-23 09:31 - 2016-10-23 09:31 - 00249856 _____ C:\Windows\system32\config\DEFAULT.iodefrag.bak
2016-10-23 09:31 - 2016-10-23 09:31 - 00249856 _____ C:\Windows\system32\config\DEFAULT.iodefrag
2016-10-23 09:31 - 2016-10-23 09:31 - 00024576 _____ C:\Windows\system32\config\SECURITY.iodefrag.bak
2016-10-23 09:31 - 2016-10-23 09:31 - 00024576 _____ C:\Windows\system32\config\SECURITY.iodefrag
2016-10-23 09:31 - 2016-10-23 09:31 - 00024576 _____ C:\Windows\system32\config\SAM.iodefrag.bak
2016-10-23 09:31 - 2016-10-23 09:31 - 00024576 _____ C:\Windows\system32\config\SAM.iodefrag
2016-10-23 06:47 - 2016-10-23 06:47 - 00008192 __RSH C:\BOOTSECT.BAK
2016-10-23 06:47 - 2016-10-23 01:41 - 00000000 ____D C:\Windows\Panther
2016-10-23 06:46 - 2009-07-13 23:38 - 00383562 __RSH C:\bootmgr
2016-10-23 02:33 - 2014-10-16 10:27 - 00027424 _____ (IObit) C:\Windows\system32\RegistryDefragBootTime.exe
2016-10-23 02:06 - 2016-10-23 02:07 - 01595668 _____ C:\Windows\SysWOW64\PerfStringBackup.INI
2016-10-23 02:03 - 2009-11-25 17:47 - 01942856 _____ (Microsoft Corporation) C:\Windows\system32\dfshim.dll
2016-10-23 02:03 - 2009-11-25 17:47 - 01130824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dfshim.dll
2016-10-23 02:03 - 2009-11-25 17:47 - 00444752 _____ (Microsoft Corporation) C:\Windows\system32\mscoree.dll
2016-10-23 02:03 - 2009-11-25 17:47 - 00320352 _____ (Microsoft Corporation) C:\Windows\system32\PresentationHost.exe
2016-10-23 02:03 - 2009-11-25 17:47 - 00297808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mscoree.dll
2016-10-23 02:03 - 2009-11-25 17:47 - 00295264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PresentationHost.exe
2016-10-23 02:03 - 2009-11-25 17:47 - 00109912 _____ (Microsoft Corporation) C:\Windows\system32\PresentationHostProxy.dll
2016-10-23 02:03 - 2009-11-25 17:47 - 00099176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PresentationHostProxy.dll
2016-10-23 02:03 - 2009-11-25 17:47 - 00049472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netfxperf.dll
2016-10-23 02:03 - 2009-11-25 17:47 - 00048960 _____ (Microsoft Corporation) C:\Windows\system32\netfxperf.dll
2016-10-23 01:48 - 2016-10-23 15:55 - 00000000 ___RD C:\Users\veronica\OneDrive
2016-10-23 01:48 - 2016-10-23 11:28 - 00000000 ____D C:\Program Files (x86)\Microsoft OneDrive
2016-10-23 01:39 - 2016-10-23 01:39 - 53227520 _____ C:\Windows\system32\config\SOFTWARE.iobit
2016-10-23 01:39 - 2016-10-23 01:39 - 32153600 _____ C:\Windows\system32\config\COMPONENTS.iobit
2016-10-23 01:39 - 2016-10-23 01:39 - 00249856 _____ C:\Windows\system32\config\DEFAULT.iobit
2016-10-23 01:39 - 2016-10-23 01:39 - 00024576 _____ C:\Windows\system32\config\SECURITY.iobit
2016-10-23 01:39 - 2016-10-23 01:39 - 00024576 _____ C:\Windows\system32\config\SAM.iobit
2016-10-23 01:31 - 2016-10-23 01:31 - 00000000 ____D C:\Users\veronica\AppData\Roaming\Apple Computer
2016-10-23 01:30 - 2016-10-23 09:44 - 00000000 ____D C:\Users\Todos os Usuários\ProductData
2016-10-23 01:30 - 2016-10-23 09:44 - 00000000 ____D C:\ProgramData\ProductData
2016-10-23 01:30 - 2016-10-23 01:30 - 00000000 ____D C:\Windows\Tasks\ImCleanDisabled
2016-10-23 01:30 - 2016-10-23 01:30 - 00000000 ____D C:\Users\veronica\AppData\Roaming\ProductData
2016-10-23 01:29 - 2016-10-23 16:01 - 00002916 _____ C:\Windows\System32\Tasks\Uninstaller_SkipUac_veronica
2016-10-23 01:29 - 2016-10-23 01:42 - 00002262 _____ C:\Users\Public\Desktop\Advanced SystemCare 9.lnk
2016-10-23 01:29 - 2016-10-23 01:31 - 00000000 ____D C:\Users\veronica\AppData\LocalLow\IObit
2016-10-23 01:29 - 2016-10-23 01:30 - 00003192 _____ C:\Windows\System32\Tasks\ASC9_PerformanceMonitor
2016-10-23 01:29 - 2016-10-23 01:29 - 00002880 _____ C:\Windows\System32\Tasks\ASC9_SkipUac_veronica
2016-10-23 01:29 - 2016-10-23 01:29 - 00001366 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\IObit Uninstaller.lnk
2016-10-23 01:29 - 2016-10-23 01:29 - 00001354 _____ C:\Users\Public\Desktop\IObit Uninstaller.lnk
2016-10-23 01:29 - 2016-10-23 01:29 - 00000000 ____D C:\Windows\System32\Tasks\OfficeSoftwareProtectionPlatform
2016-10-23 01:29 - 2016-10-23 01:29 - 00000000 ____D C:\Users\Todos os Usuários\{FD6F83C0-EC70-4581-8361-C70CD1AA4B98}
2016-10-23 01:29 - 2016-10-23 01:29 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\IObit Uninstaller
2016-10-23 01:29 - 2016-10-23 01:29 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Advanced SystemCare
2016-10-23 01:29 - 2016-10-23 01:29 - 00000000 ____D C:\ProgramData\{FD6F83C0-EC70-4581-8361-C70CD1AA4B98}
2016-10-23 01:28 - 2016-10-23 01:31 - 00000000 ____D C:\Users\Todos os Usuários\IObit
2016-10-23 01:28 - 2016-10-23 01:31 - 00000000 ____D C:\ProgramData\IObit
2016-10-23 01:28 - 2016-10-23 01:31 - 00000000 ____D C:\Program Files (x86)\IObit
2016-10-23 01:28 - 2016-10-23 01:30 - 00000000 ____D C:\Users\veronica\AppData\Roaming\IObit
2016-10-23 01:25 - 2016-10-23 15:35 - 01804512 _____ C:\Windows\GABRIOLA.tt2
2016-10-23 01:21 - 2016-10-23 01:21 - 00000000 ____D C:\Users\veronica\AppData\Roaming\WinRAR
2016-10-23 01:21 - 2016-10-23 01:21 - 00000000 ____D C:\Users\veronica\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
2016-10-23 01:21 - 2016-10-23 01:21 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
2016-10-23 01:20 - 2016-10-23 01:21 - 00000000 ____D C:\Program Files (x86)\WinRAR
2016-10-23 01:17 - 2016-10-23 01:17 - 00037144 _____ (AVAST Software) C:\Windows\system32\Drivers\aswKbd.sys
2016-10-23 01:15 - 2016-10-23 01:15 - 00000000 ____D C:\Users\veronica\AppData\Local\CEF
2016-10-23 01:14 - 2016-10-23 01:14 - 00001922 _____ C:\Users\Public\Desktop\Avast Free Antivirus.lnk
2016-10-23 01:14 - 2016-10-23 01:14 - 00000000 ____D C:\Users\veronica\AppData\Roaming\AVAST Software
2016-10-23 01:14 - 2016-10-23 01:14 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVAST Software
2016-10-23 01:13 - 2016-10-23 01:17 - 00000000 ____D C:\Users\veronica\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Aplicativos do Google Chrome
2016-10-23 01:13 - 2016-10-23 01:14 - 00969184 _____ (AVAST Software) C:\Windows\system32\Drivers\aswsnx.sys
2016-10-23 01:13 - 2016-10-23 01:14 - 00513632 _____ (AVAST Software) C:\Windows\system32\Drivers\aswsp.sys
2016-10-23 01:13 - 2016-10-23 01:14 - 00293352 _____ (AVAST Software) C:\Windows\system32\Drivers\aswvmm.sys
2016-10-23 01:13 - 2016-10-23 01:13 - 00003922 _____ C:\Windows\System32\Tasks\avast! Emergency Update
2016-10-23 01:13 - 2016-10-23 01:13 - 00000000 ____D C:\Windows\System32\Tasks\AVAST Software
2016-10-23 01:13 - 2016-10-23 01:13 - 00000000 ____D C:\Program Files\Common Files\AV
2016-10-23 01:13 - 2016-10-23 01:12 - 00163416 _____ (AVAST Software) C:\Windows\system32\Drivers\aswStm.sys
2016-10-23 01:13 - 2016-10-23 01:12 - 00108816 _____ (AVAST Software) C:\Windows\system32\Drivers\aswMonFlt.sys
2016-10-23 01:13 - 2016-10-23 01:12 - 00103064 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRdr2.sys
2016-10-23 01:13 - 2016-10-23 01:12 - 00074544 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRvrt.sys
2016-10-23 01:13 - 2016-10-23 01:12 - 00037656 _____ (AVAST Software) C:\Windows\system32\Drivers\aswHwid.sys
2016-10-23 01:12 - 2016-10-23 01:12 - 00992960 _____ (Microsoft Corporation) C:\Windows\system32\ucrtbase.dll
2016-10-23 01:12 - 2016-10-23 01:12 - 00921280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ucrtbase.dll
2016-10-23 01:12 - 2016-10-23 01:12 - 00391496 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe
2016-10-23 01:12 - 2016-10-23 01:12 - 00053208 _____ (AVAST Software) C:\Windows\avastSS.scr
2016-10-23 01:11 - 2016-10-23 01:17 - 00000000 ____D C:\Users\Todos os Usuários\AVAST Software
2016-10-23 01:11 - 2016-10-23 01:17 - 00000000 ____D C:\ProgramData\AVAST Software
2016-10-23 01:11 - 2016-10-23 01:17 - 00000000 ____D C:\Program Files\AVAST Software
2016-10-23 01:10 - 2016-10-23 01:10 - 00002265 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2016-10-23 01:10 - 2016-10-23 01:10 - 00002253 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2016-10-23 01:09 - 2016-10-24 12:48 - 00001068 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2016-10-23 01:09 - 2016-10-24 00:14 - 00001072 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2016-10-23 01:09 - 2016-10-23 01:21 - 00000000 ____D C:\Users\veronica\AppData\Local\Google
2016-10-23 01:09 - 2016-10-23 01:10 - 00000000 ____D C:\Program Files (x86)\Google
2016-10-23 01:09 - 2016-10-23 01:09 - 00004068 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2016-10-23 01:09 - 2016-10-23 01:09 - 00003816 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2016-10-23 01:08 - 2016-10-23 15:18 - 00111056 _____ C:\Users\veronica\AppData\Local\GDIPFONTCACHEV1.DAT
2016-10-23 01:08 - 2016-10-23 01:09 - 00000000 ____D C:\Users\veronica\AppData\Local\Deployment
2016-10-23 01:08 - 2016-10-23 01:08 - 00000000 ____D C:\Users\veronica\AppData\Local\Apps\2.0
2016-10-23 00:57 - 2016-10-23 00:57 - 00001419 _____ C:\Users\veronica\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2016-10-23 00:57 - 2016-10-23 00:57 - 00001385 _____ C:\Users\veronica\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer (64-bit).lnk
2016-10-23 00:57 - 2016-10-23 00:57 - 00000020 ___SH C:\Users\veronica\ntuser.ini
2016-10-23 00:57 - 2016-10-23 00:57 - 00000000 _SHDL C:\Users\veronica\Modelos
2016-10-23 00:57 - 2016-10-23 00:57 - 00000000 _SHDL C:\Users\veronica\Meus documentos
2016-10-23 00:57 - 2016-10-23 00:57 - 00000000 _SHDL C:\Users\veronica\Menu Iniciar
2016-10-23 00:57 - 2016-10-23 00:57 - 00000000 _SHDL C:\Users\veronica\Documents\Minhas músicas
2016-10-23 00:57 - 2016-10-23 00:57 - 00000000 _SHDL C:\Users\veronica\Documents\Minhas imagens
2016-10-23 00:57 - 2016-10-23 00:57 - 00000000 _SHDL C:\Users\veronica\Documents\Meus vídeos
2016-10-23 00:57 - 2016-10-23 00:57 - 00000000 _SHDL C:\Users\veronica\Dados de aplicativos
2016-10-23 00:57 - 2016-10-23 00:57 - 00000000 _SHDL C:\Users\veronica\Configurações locais
2016-10-23 00:57 - 2016-10-23 00:57 - 00000000 _SHDL C:\Users\veronica\AppData\Roaming\Microsoft\Windows\Start Menu\Programas
2016-10-23 00:57 - 2016-10-23 00:57 - 00000000 _SHDL C:\Users\veronica\AppData\Local\Histórico
2016-10-23 00:57 - 2016-10-23 00:57 - 00000000 _SHDL C:\Users\veronica\AppData\Local\Dados de aplicativos
2016-10-23 00:57 - 2016-10-23 00:57 - 00000000 _SHDL C:\Users\veronica\Ambiente de rede
2016-10-23 00:57 - 2016-10-23 00:57 - 00000000 _SHDL C:\Users\veronica\Ambiente de impressão
2016-10-23 00:57 - 2016-10-23 00:57 - 00000000 ____D C:\Users\veronica\AppData\Local\VirtualStore
2016-10-23 00:56 - 2016-10-23 01:48 - 00000000 ____D C:\Users\veronica
2016-10-23 00:56 - 2016-10-23 00:56 - 00000000 _SHDL C:\Users\Usuário Padrão\Documents\Minhas músicas
2016-10-23 00:56 - 2016-10-23 00:56 - 00000000 _SHDL C:\Users\Usuário Padrão\Documents\Minhas imagens
2016-10-23 00:56 - 2016-10-23 00:56 - 00000000 _SHDL C:\Users\Usuário Padrão\Documents\Meus vídeos
2016-10-23 00:56 - 2016-10-23 00:56 - 00000000 _SHDL C:\Users\Usuário Padrão\AppData\Roaming\Microsoft\Windows\Start Menu\Programas
2016-10-23 00:56 - 2016-10-23 00:56 - 00000000 _SHDL C:\Users\Usuário Padrão\AppData\Local\Histórico
2016-10-23 00:56 - 2016-10-23 00:56 - 00000000 _SHDL C:\Users\Usuário Padrão\AppData\Local\Dados de aplicativos
2016-10-23 00:56 - 2016-10-23 00:56 - 00000000 _SHDL C:\Users\Usuário Padrão
2016-10-23 00:56 - 2016-10-23 00:56 - 00000000 _SHDL C:\Users\Todos os Usuários\Modelos
2016-10-23 00:56 - 2016-10-23 00:56 - 00000000 _SHDL C:\Users\Todos os Usuários\Menu Iniciar
2016-10-23 00:56 - 2016-10-23 00:56 - 00000000 _SHDL C:\Users\Todos os Usuários\Favoritos
2016-10-23 00:56 - 2016-10-23 00:56 - 00000000 _SHDL C:\Users\Todos os Usuários\Documentos
2016-10-23 00:56 - 2016-10-23 00:56 - 00000000 _SHDL C:\Users\Todos os Usuários\Dados de aplicativos
2016-10-23 00:56 - 2016-10-23 00:56 - 00000000 _SHDL C:\Users\Todos os Usuários
2016-10-23 00:56 - 2016-10-23 00:56 - 00000000 _SHDL C:\Users\Public\Documents\Minhas músicas
2016-10-23 00:56 - 2016-10-23 00:56 - 00000000 _SHDL C:\Users\Public\Documents\Minhas imagens
2016-10-23 00:56 - 2016-10-23 00:56 - 00000000 _SHDL C:\Users\Public\Documents\Meus vídeos
2016-10-23 00:56 - 2016-10-23 00:56 - 00000000 _SHDL C:\Users\Default\Modelos
2016-10-23 00:56 - 2016-10-23 00:56 - 00000000 _SHDL C:\Users\Default\Meus documentos
2016-10-23 00:56 - 2016-10-23 00:56 - 00000000 _SHDL C:\Users\Default\Menu Iniciar
2016-10-23 00:56 - 2016-10-23 00:56 - 00000000 _SHDL C:\Users\Default\Documents\Minhas músicas
2016-10-23 00:56 - 2016-10-23 00:56 - 00000000 _SHDL C:\Users\Default\Documents\Minhas imagens
2016-10-23 00:56 - 2016-10-23 00:56 - 00000000 _SHDL C:\Users\Default\Documents\Meus vídeos
2016-10-23 00:56 - 2016-10-23 00:56 - 00000000 _SHDL C:\Users\Default\Dados de aplicativos
2016-10-23 00:56 - 2016-10-23 00:56 - 00000000 _SHDL C:\Users\Default\Configurações locais
2016-10-23 00:56 - 2016-10-23 00:56 - 00000000 _SHDL C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programas
2016-10-23 00:56 - 2016-10-23 00:56 - 00000000 _SHDL C:\Users\Default\AppData\Local\Histórico
2016-10-23 00:56 - 2016-10-23 00:56 - 00000000 _SHDL C:\Users\Default\AppData\Local\Dados de aplicativos
2016-10-23 00:56 - 2016-10-23 00:56 - 00000000 _SHDL C:\Users\Default\Ambiente de rede
2016-10-23 00:56 - 2016-10-23 00:56 - 00000000 _SHDL C:\Users\Default\Ambiente de impressão
2016-10-23 00:56 - 2016-10-23 00:56 - 00000000 _SHDL C:\Users\Default User\Documents\Minhas músicas
2016-10-23 00:56 - 2016-10-23 00:56 - 00000000 _SHDL C:\Users\Default User\Documents\Minhas imagens
2016-10-23 00:56 - 2016-10-23 00:56 - 00000000 _SHDL C:\Users\Default User\Documents\Meus vídeos
2016-10-23 00:56 - 2016-10-23 00:56 - 00000000 _SHDL C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programas
2016-10-23 00:56 - 2016-10-23 00:56 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Histórico
2016-10-23 00:56 - 2016-10-23 00:56 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Dados de aplicativos
2016-10-23 00:56 - 2016-10-23 00:56 - 00000000 _SHDL C:\ProgramData\Modelos
2016-10-23 00:56 - 2016-10-23 00:56 - 00000000 _SHDL C:\ProgramData\Microsoft\Windows\Start Menu\Programas
2016-10-23 00:56 - 2016-10-23 00:56 - 00000000 _SHDL C:\ProgramData\Menu Iniciar
2016-10-23 00:56 - 2016-10-23 00:56 - 00000000 _SHDL C:\ProgramData\Favoritos
2016-10-23 00:56 - 2016-10-23 00:56 - 00000000 _SHDL C:\ProgramData\Documentos
2016-10-23 00:56 - 2016-10-23 00:56 - 00000000 _SHDL C:\ProgramData\Dados de aplicativos
2016-10-23 00:56 - 2016-10-23 00:56 - 00000000 _SHDL C:\Program Files\Common Files\Sistema
2016-10-23 00:56 - 2016-10-23 00:56 - 00000000 _SHDL C:\Program Files\Arquivos Comuns
2016-10-23 00:56 - 2016-10-23 00:56 - 00000000 _SHDL C:\Arquivos de Programas
2016-10-23 00:56 - 2009-07-14 05:44 - 00000000 ____D C:\Users\veronica\AppData\Roaming\Media Center Programs
2016-10-23 00:51 - 2016-10-23 00:51 - 00001345 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Media Center.lnk
2016-10-23 00:51 - 2016-10-23 00:51 - 00001326 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows DVD Maker.lnk
2016-10-23 00:50 - 2016-10-23 00:50 - 00000000 ____H C:\Windows\system32\Drivers\Msft_User_WpdFs_01_09_00.Wdf
2016-10-08 01:10 - 2016-10-08 01:10 - 00334616 _____ (Microsoft Corporation) C:\Windows\system32\concrt140.dll
2016-10-08 01:10 - 2016-10-08 01:10 - 00085744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vcruntime140.dll
2016-10-08 01:09 - 2016-10-08 01:09 - 00639728 _____ (Microsoft Corporation) C:\Windows\system32\msvcp140.dll
2016-10-08 01:09 - 2016-10-08 01:09 - 00443632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvcp140.dll
2016-10-08 01:09 - 2016-10-08 01:09 - 00244496 _____ (Microsoft Corporation) C:\Windows\SysWOW64\concrt140.dll
2016-10-08 01:08 - 2016-10-08 01:08 - 00394496 _____ (Microsoft Corporation) C:\Windows\system32\vccorlib140.dll
2016-10-08 01:08 - 2016-10-08 01:08 - 00271104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vccorlib140.dll
2016-10-08 01:08 - 2016-10-08 01:08 - 00089328 _____ (Microsoft Corporation) C:\Windows\system32\vcruntime140.dll
==================== Três Meses Modificados arquivos e pastas ========
(Se uma entrada for incluída na fixlist, o arquivo/pasta será movido.)
2016-10-24 12:53 - 2009-07-29 13:49 - 00703080 _____ C:\Windows\system32\prfh0416.dat
2016-10-24 12:53 - 2009-07-29 13:49 - 00145866 _____ C:\Windows\system32\prfc0416.dat
2016-10-24 12:53 - 2009-07-14 03:13 - 01628820 _____ C:\Windows\system32\PerfStringBackup.INI
2016-10-24 12:53 - 2009-07-14 01:20 - 00000000 ____D C:\Windows\inf
2016-10-24 12:48 - 2009-07-14 03:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2016-10-24 00:23 - 2009-07-14 02:45 - 00009584 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2016-10-24 00:23 - 2009-07-14 02:45 - 00009584 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2016-10-23 21:54 - 2009-07-14 01:20 - 00000000 ____D C:\Program Files\Common Files\Microsoft Shared
2016-10-23 20:28 - 2009-07-14 01:20 - 00000000 ____D C:\Windows\rescache
2016-10-23 20:23 - 2009-07-14 05:45 - 00000000 ____D C:\Program Files\Windows Journal
2016-10-23 20:23 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\SysWOW64\winrm
2016-10-23 20:23 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\SysWOW64\slmgr
2016-10-23 20:23 - 2009-07-14 03:32 - 00000000 ____D C:\Program Files\Windows Sidebar
2016-10-23 20:23 - 2009-07-14 03:32 - 00000000 ____D C:\Program Files\Windows Photo Viewer
2016-10-23 20:23 - 2009-07-14 03:32 - 00000000 ____D C:\Program Files\Windows Defender
2016-10-23 20:23 - 2009-07-14 03:32 - 00000000 ____D C:\Program Files\DVD Maker
2016-10-23 20:23 - 2009-07-14 03:32 - 00000000 ____D C:\Program Files (x86)\Windows Sidebar
2016-10-23 20:23 - 2009-07-14 03:32 - 00000000 ____D C:\Program Files (x86)\Windows Photo Viewer
2016-10-23 20:23 - 2009-07-14 03:32 - 00000000 ____D C:\Program Files (x86)\Windows Defender
2016-10-23 20:23 - 2009-07-14 01:20 - 00000000 ____D C:\Windows\SysWOW64\migwiz
2016-10-23 20:23 - 2009-07-14 01:20 - 00000000 ____D C:\Windows\servicing
2016-10-23 20:22 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\SysWOW64\WCN
2016-10-23 20:22 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\SysWOW64\Printing_Admin_Scripts
2016-10-23 20:22 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\system32\winrm
2016-10-23 20:22 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\system32\WCN
2016-10-23 20:22 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\system32\slmgr
2016-10-23 20:22 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\system32\Printing_Admin_Scripts
2016-10-23 20:22 - 2009-07-14 01:20 - 00000000 ____D C:\Windows\SysWOW64\Dism
2016-10-23 20:22 - 2009-07-14 01:20 - 00000000 ____D C:\Windows\system32\migwiz
2016-10-23 20:22 - 2009-07-14 01:20 - 00000000 ____D C:\Windows\system32\Dism
2016-10-23 16:29 - 2009-07-14 02:45 - 00436168 _____ C:\Windows\system32\FNTCACHE.DAT
2016-10-23 06:47 - 2009-07-14 03:32 - 00028672 _____ C:\Windows\system32\config\BCD-Template
2016-10-23 00:56 - 2009-07-14 01:20 - 00000000 __RHD C:\Users\Public\Libraries
2016-10-23 00:56 - 2009-07-14 01:20 - 00000000 ____D C:\Program Files\Windows NT
2016-10-23 00:51 - 2009-07-14 03:32 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
2016-10-23 00:51 - 2009-07-14 01:20 - 00000000 ____D C:\Windows\system32\sysprep
Alguns arquivos em TEMP:
====================
C:\Users\veronica\AppData\Local\Temp\PidGenX.dll
==================== Bamital & volsnap ======================
(Não há correção automática para arquivos que não passaram na verificação.)
C:\Windows\system32\winlogon.exe => O arquivo é assinado digitalmente
C:\Windows\system32\wininit.exe => O arquivo é assinado digitalmente
C:\Windows\SysWOW64\wininit.exe => O arquivo é assinado digitalmente
C:\Windows\explorer.exe => O arquivo é assinado digitalmente
C:\Windows\SysWOW64\explorer.exe => O arquivo é assinado digitalmente
C:\Windows\system32\svchost.exe => O arquivo é assinado digitalmente
C:\Windows\SysWOW64\svchost.exe => O arquivo é assinado digitalmente
C:\Windows\system32\services.exe => O arquivo é assinado digitalmente
C:\Windows\system32\User32.dll => O arquivo é assinado digitalmente
C:\Windows\SysWOW64\User32.dll => O arquivo é assinado digitalmente
C:\Windows\system32\userinit.exe => O arquivo é assinado digitalmente
C:\Windows\SysWOW64\userinit.exe => O arquivo é assinado digitalmente
C:\Windows\system32\rpcss.dll => O arquivo é assinado digitalmente
C:\Windows\system32\dnsapi.dll => O arquivo é assinado digitalmente
C:\Windows\SysWOW64\dnsapi.dll => O arquivo é assinado digitalmente
C:\Windows\system32\Drivers\volsnap.sys => O arquivo é assinado digitalmente
LastRegBack: 2016-10-23 19:13
==================== Fim de FRST.txt ============================
Executado por veronica (administrador) em VERONICA-PC (24-10-2016 13:04:50)
Executando a partir de C:\Users\veronica\Desktop
Perfis Carregados: veronica (Perfis Disponíveis: veronica)
Platform: Windows 7 Home Premium (X64) Idioma: Português (Brasil)
Internet Explorer Versão 8 (Navegador padrão: Chrome)
Modo da Inicialização: Normal
Tutorial da Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Processos (Whitelisted) =================
(Se uma entrada for incluída na fixlist, o processo será fechado. O arquivo não será movido.)
(IObit) C:\Program Files (x86)\IObit\Advanced SystemCare\ASCService.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe
(IObit) C:\Program Files (x86)\IObit\Advanced SystemCare\Monitor.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.31.5\GoogleCrashHandler.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.31.5\GoogleCrashHandler64.exe
(@ByELDI) C:\Program Files\KMSpico\Service_KMS.exe
(IObit) C:\Program Files (x86)\IObit\Advanced SystemCare\ASCTray.exe
(BitTorrent Inc.) C:\Users\veronica\AppData\Roaming\uTorrent\uTorrent.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\avastui.exe
(IObit) C:\Program Files (x86)\IObit\IObit Uninstaller\UninstallMonitor.exe
(BitTorrent Inc.) C:\Users\veronica\AppData\Roaming\uTorrent\updates\3.4.9_42606\utorrentie.exe
(BitTorrent Inc.) C:\Users\veronica\AppData\Roaming\uTorrent\updates\3.4.9_42606\utorrentie.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
==================== Registro (Whitelisted) ====================
(Se uma entrada for incluída na fixlist, o ítem no Registro será restaurado para o padrão ou removido. O arquivo não será movido.)
HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [9083840 2016-10-23] (AVAST Software)
HKU\S-1-5-21-1489183723-1793641325-901411604-1001\...\Run: [Advanced SystemCare 9] => C:\Program Files (x86)\IObit\Advanced SystemCare\ASCTray.exe [2023712 2016-07-27] (IObit)
HKU\S-1-5-21-1489183723-1793641325-901411604-1001\...\Run: [uTorrent] => C:\Users\veronica\AppData\Roaming\uTorrent\uTorrent.exe [1977536 2016-10-23] (BitTorrent Inc.)
HKU\S-1-5-21-1489183723-1793641325-901411604-1001\...\RunOnce: [Uninstall C:\Users\veronica\AppData\Local\Microsoft\OneDrive\17.3.6390.0509\amd64] => C:\Windows\system32\cmd.exe /q /c rmdir /s /q "C:\Users\veronica\AppData\Local\Microsoft\OneDrive\17.3.6390.0509\amd64"
HKU\S-1-5-21-1489183723-1793641325-901411604-1001\...\Policies\Explorer: [NolowDiskSpaceChecks] 1
HKU\S-1-5-21-1489183723-1793641325-901411604-1001\...\MountPoints2: {27778593-995d-11e6-99d1-00235a71235a} - E:\AutoRun.exe
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2016-10-23] (AVAST Software)
==================== Internet (Whitelisted) ====================
(Se um ítem for incluído na fixlist, sendo um ítem do Registro, será removido ou restaurado para o padrão.)
Tcpip\Parameters: [DhcpNameServer] 187.2.216.40 187.2.216.35 192.168.0.1
Tcpip\..\Interfaces\{F139999F-21D7-4F67-AE03-473164810A06}: [DhcpNameServer] 187.2.216.40 187.2.216.35 192.168.0.1
Internet Explorer:
==================
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Restrição <======= ATENÇÃO
BHO: ExplorerWnd Helper -> {10921475-03CE-4E04-90CE-E2E7EF20C814} -> C:\Program Files (x86)\IObit\IObit Uninstaller\UninstallExplorer.dll [2015-11-12] (IObit)
BHO: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\root\Office16\OCHelper.dll [2016-10-23] (Microsoft Corporation)
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2016-10-23] (AVAST Software)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\root\Office16\URLREDIR.DLL [2016-10-23] (Microsoft Corporation)
BHO: Microsoft OneDrive for Business Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office\root\Office16\GROOVEEX.DLL [2016-10-23] (Microsoft Corporation)
BHO-x32: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\OCHelper.dll [2016-10-23] (Microsoft Corporation)
BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2016-10-23] (AVAST Software)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\URLREDIR.DLL [2016-10-23] (Microsoft Corporation)
BHO-x32: Advanced SystemCare Surfing Protection -> {BA0C978D-D909-49B6-AFE2-8BDE245DC7E6} -> C:\Program Files (x86)\IObit\Surfing Protection\BrowerProtect\ASCPlugin_Protection.dll [2015-07-09] (IObit)
BHO-x32: Microsoft OneDrive for Business Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\GROOVEEX.DLL [2016-10-23] (Microsoft Corporation)
Handler: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2016-10-23] (Microsoft Corporation)
Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2016-10-23] (Microsoft Corporation)
Handler: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2016-10-23] (Microsoft Corporation)
Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2016-10-23] (Microsoft Corporation)
Handler: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2016-10-23] (Microsoft Corporation)
Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2016-10-23] (Microsoft Corporation)
Handler: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2016-10-23] (Microsoft Corporation)
Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2016-10-23] (Microsoft Corporation)
Filter: deflate - {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\Windows\system32\urlmon.dll [2009-07-13] (Microsoft Corporation)
Filter-x32: deflate - {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\Windows\SysWOW64\urlmon.dll [2009-07-13] (Microsoft Corporation)
Filter: gzip - {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\Windows\system32\urlmon.dll [2009-07-13] (Microsoft Corporation)
Filter-x32: gzip - {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\Windows\SysWOW64\urlmon.dll [2009-07-13] (Microsoft Corporation)
FireFox:
========
FF HKLM\...\Firefox\Extensions: [sp@avast.com] - C:\Program Files\AVAST Software\Avast\SafePrice\FF
FF Extension: (Avast SafePrice) - C:\Program Files\AVAST Software\Avast\SafePrice\FF [2016-10-23]
FF HKLM\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: (Avast Online Security) - C:\Program Files\AVAST Software\Avast\WebRep\FF [2016-10-23]
FF HKLM-x32\...\Firefox\Extensions: [sp@avast.com] - C:\Program Files\AVAST Software\Avast\SafePrice\FF
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\Office16\NPSPWRAP.DLL [2016-10-23] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2016-10-23] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\NPSPWRAP.DLL [2016-10-23] (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.31.5\npGoogleUpdate3.dll [2016-10-23] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.31.5\npGoogleUpdate3.dll [2016-10-23] (Google Inc.)
Chrome:
=======
CHR HomePage: Default -> hxxp://www.google.com.br/
CHR Profile: C:\Users\veronica\AppData\Local\Google\Chrome\User Data\Default [2016-10-24]
CHR Extension: (Google Apresentações) - C:\Users\veronica\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2016-10-23]
CHR Extension: (Google Docs) - C:\Users\veronica\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2016-10-23]
CHR Extension: (Google Drive) - C:\Users\veronica\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2016-10-23]
CHR Extension: (YouTube) - C:\Users\veronica\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2016-10-23]
CHR Extension: (ARC Welder) - C:\Users\veronica\AppData\Local\Google\Chrome\User Data\Default\Extensions\emfinbmielocnlhgmfkkmkngdoccbadn [2016-10-23]
CHR Extension: (Planilhas do Google) - C:\Users\veronica\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2016-10-23]
CHR Extension: (Área de trabalho remota do Google Chrome) - C:\Users\veronica\AppData\Local\Google\Chrome\User Data\Default\Extensions\gbchcmhmhahfdphkhkmpfmihenigjmpp [2016-10-23]
CHR Extension: (Documentos Google off-line) - C:\Users\veronica\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-10-23]
CHR Extension: (App Runtime for Chrome (Beta)) - C:\Users\veronica\AppData\Local\Google\Chrome\User Data\Default\Extensions\mfaihdlpglflfgpfjcifdjdjcckigekc [2016-10-23]
CHR Extension: (Pagamentos da Chrome Web Store) - C:\Users\veronica\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2016-10-23]
CHR Extension: (GBBD Caixa Economica Federal) - C:\Users\veronica\AppData\Local\Google\Chrome\User Data\Default\Extensions\pbcaplhfkihhldmlbjhgajdeghjdbffi [2016-10-23]
CHR Extension: (Gmail) - C:\Users\veronica\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2016-10-23]
CHR Extension: (Chrome Media Router) - C:\Users\veronica\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2016-10-23]
CHR HKLM-x32\...\Chrome\Extension: [eofcbnmajmjmplflapaojjnihcjkigck] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - hxxps://clients2.google.com/service/update2/crx
==================== Serviços (Whitelisted) ====================
(Se uma entrada for incluída na fixlist, será removida do Registro. O arquivo não será movido, a menos que seja colocado separadamente.)
R2 AdvancedSystemCareService9; C:\Program Files (x86)\IObit\Advanced SystemCare\ASCService.exe [452384 2016-07-25] (IObit)
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [197128 2016-10-23] (AVAST Software)
R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [3064520 2016-10-08] (Microsoft Corporation)
S2 LiveUpdateSvc; C:\Program Files (x86)\IObit\LiveUpdate\LiveUpdate.exe [2960672 2016-07-20] (IObit)
R2 Service KMSELDI; C:\Program Files\KMSpico\Service_KMS.exe [737984 2015-08-30] (@ByELDI) [Arquivo não assinado]
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2009-07-13] (Microsoft Corporation)
===================== Drivers (Whitelisted) ======================
(Se uma entrada for incluída na fixlist, será removida do Registro. O arquivo não será movido, a menos que seja colocado separadamente.)
S3 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [37656 2016-10-23] (AVAST Software)
R1 aswKbd; C:\Windows\system32\drivers\aswKbd.sys [37144 2016-10-23] (AVAST Software)
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [108816 2016-10-23] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [103064 2016-10-23] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [74544 2016-10-23] (AVAST Software)
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [969184 2016-10-23] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [513632 2016-10-23] (AVAST Software)
R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [163416 2016-10-23] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [293352 2016-10-23] (AVAST Software)
S3 ebdrv; C:\Windows\system32\DRIVERS\evbda.sys [3286016 2009-06-10] (Broadcom Corporation)
R3 SiS6350; C:\Windows\System32\DRIVERS\SISGRKMD.sys [559104 2010-12-15] (Silicon Integrated Systems Corporation)
==================== NetSvcs (Whitelisted) ===================
(Se uma entrada for incluída na fixlist, será removida do Registro. O arquivo não será movido, a menos que seja colocado separadamente.)
==================== Três Meses Criados arquivos e pastas ========
(Se uma entrada for incluída na fixlist, o arquivo/pasta será movido.)
2016-10-24 13:04 - 2016-10-24 13:05 - 00014036 _____ C:\Users\veronica\Desktop\FRST.txt
2016-10-24 13:04 - 2016-10-24 13:04 - 00000000 ____D C:\FRST
2016-10-24 13:03 - 2016-10-24 13:03 - 02407424 _____ (Farbar) C:\Users\veronica\Desktop\FRST64.exe
2016-10-24 00:00 - 2016-10-24 00:00 - 01034556 _____ C:\Users\veronica\Downloads\Windows6.1-KB2999226-x64.msu
2016-10-23 21:54 - 2016-10-23 21:54 - 00000000 ____D C:\Program Files\Common Files\DESIGNER
2016-10-23 18:31 - 2016-10-23 18:31 - 00000000 ____H C:\Windows\system32\Drivers\Msft_User_WpdMtpDr_01_09_00.Wdf
2016-10-23 18:20 - 2016-10-23 18:20 - 00000000 ____D C:\Users\veronica\Documents\Modelos Personalizados do Office
2016-10-23 18:15 - 2016-10-24 12:50 - 00000000 ____D C:\Users\veronica\AppData\LocalLow\uTorrent
2016-10-23 17:36 - 2016-10-23 17:36 - 00003370 _____ C:\Windows\System32\Tasks\AutoPico Daily Restart
2016-10-23 17:36 - 2016-10-23 17:36 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\KMSpico
2016-10-23 17:36 - 2016-10-23 17:36 - 00000000 ____D C:\Program Files\KMSpico
2016-10-23 17:36 - 2010-12-06 00:16 - 00090112 _____ (Vestris Inc.) C:\Windows\system32\Vestris.ResourceLib.dll
2016-10-23 17:35 - 2015-09-27 22:08 - 00000000 ____D C:\Users\veronica\Downloads\AT O2016 By PHDowns
2016-10-23 17:21 - 2016-10-23 17:21 - 00002459 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OneDrive for Business.lnk
2016-10-23 17:21 - 2016-10-23 17:21 - 00002417 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype for Business 2016.lnk
2016-10-23 17:21 - 2016-10-23 17:21 - 00002406 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Word 2016.lnk
2016-10-23 17:21 - 2016-10-23 17:21 - 00002371 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Access 2016.lnk
2016-10-23 17:21 - 2016-10-23 17:21 - 00002355 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PowerPoint 2016.lnk
2016-10-23 17:21 - 2016-10-23 17:21 - 00002352 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Excel 2016.lnk
2016-10-23 17:21 - 2016-10-23 17:21 - 00002342 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OneNote 2016.lnk
2016-10-23 17:21 - 2016-10-23 17:21 - 00002338 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Outlook 2016.lnk
2016-10-23 17:21 - 2016-10-23 17:21 - 00002322 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Publisher 2016.lnk
2016-10-23 17:21 - 2016-10-23 17:21 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Ferramentas do Microsoft Office 2016
2016-10-23 17:18 - 2016-10-23 21:55 - 00000000 ____D C:\Users\Todos os Usuários\regid.1991-06.com.microsoft
2016-10-23 17:18 - 2016-10-23 21:55 - 00000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2016-10-23 17:16 - 2016-10-23 17:15 - 01804512 _____ C:\WindowsGABRIOLA.tt2
2016-10-23 17:15 - 2016-10-23 21:51 - 00000000 ____D C:\Program Files\Microsoft Office
2016-10-23 17:15 - 2016-10-23 17:15 - 00000000 ____D C:\Program Files\Microsoft Office 15
2016-10-23 16:53 - 2016-10-23 16:53 - 00000241 _____ C:\Users\veronica\Desktop\ativador office.txt
2016-10-23 16:42 - 2016-10-23 17:04 - 2299707392 ____R C:\Users\veronica\Downloads\pt_office_professional_plus_2016_x86_x64_dvd_6966451.iso
2016-10-23 15:17 - 2016-10-23 15:18 - 00000000 ____D C:\Users\Todos os Usuários\Microsoft Toolkit
2016-10-23 15:17 - 2016-10-23 15:18 - 00000000 ____D C:\ProgramData\Microsoft Toolkit
2016-10-23 11:48 - 2016-10-23 11:48 - 00003548 _____ C:\Windows\System32\Tasks\{803BBFAF-8211-4EBA-9DA3-6738CACBE698}
2016-10-23 11:28 - 2016-10-23 15:55 - 00002174 _____ C:\Users\veronica\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Microsoft OneDrive.lnk
2016-10-23 11:28 - 2016-10-23 11:28 - 00002106 _____ C:\Users\Usuário Padrão\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Microsoft OneDrive.lnk
2016-10-23 11:28 - 2016-10-23 11:28 - 00002106 _____ C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Microsoft OneDrive.lnk
2016-10-23 11:28 - 2016-10-23 11:28 - 00002106 _____ C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Microsoft OneDrive.lnk
2016-10-23 11:28 - 2016-10-23 11:28 - 00000000 ____D C:\Users\Todos os Usuários\Microsoft OneDrive
2016-10-23 11:28 - 2016-10-23 11:28 - 00000000 ____D C:\ProgramData\Microsoft OneDrive
2016-10-23 10:37 - 2016-10-23 16:42 - 00000000 ___SD C:\Users\veronica\AppData\LocalLow\Temp
2016-10-23 10:36 - 2016-10-23 10:36 - 00000857 _____ C:\Users\veronica\Desktop\µTorrent.lnk
2016-10-23 10:36 - 2016-10-23 10:36 - 00000837 _____ C:\Users\veronica\AppData\Roaming\Microsoft\Windows\Start Menu\µTorrent.lnk
2016-10-23 10:23 - 2016-10-24 13:05 - 00000000 ____D C:\Users\veronica\AppData\Roaming\uTorrent
2016-10-23 10:01 - 2016-10-23 10:01 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Socia2Sear
2016-10-23 10:00 - 2016-10-23 10:01 - 00000000 ____D C:\Program Files\b4a2b824511d7d1aa1afaefbd0e69450
2016-10-23 09:31 - 2016-10-23 09:31 - 57618432 _____ C:\Windows\system32\config\SOFTWARE.iodefrag.bak
2016-10-23 09:31 - 2016-10-23 09:31 - 57618432 _____ C:\Windows\system32\config\SOFTWARE.iodefrag
2016-10-23 09:31 - 2016-10-23 09:31 - 00249856 _____ C:\Windows\system32\config\DEFAULT.iodefrag.bak
2016-10-23 09:31 - 2016-10-23 09:31 - 00249856 _____ C:\Windows\system32\config\DEFAULT.iodefrag
2016-10-23 09:31 - 2016-10-23 09:31 - 00024576 _____ C:\Windows\system32\config\SECURITY.iodefrag.bak
2016-10-23 09:31 - 2016-10-23 09:31 - 00024576 _____ C:\Windows\system32\config\SECURITY.iodefrag
2016-10-23 09:31 - 2016-10-23 09:31 - 00024576 _____ C:\Windows\system32\config\SAM.iodefrag.bak
2016-10-23 09:31 - 2016-10-23 09:31 - 00024576 _____ C:\Windows\system32\config\SAM.iodefrag
2016-10-23 06:47 - 2016-10-23 06:47 - 00008192 __RSH C:\BOOTSECT.BAK
2016-10-23 06:47 - 2016-10-23 01:41 - 00000000 ____D C:\Windows\Panther
2016-10-23 06:46 - 2009-07-13 23:38 - 00383562 __RSH C:\bootmgr
2016-10-23 02:33 - 2014-10-16 10:27 - 00027424 _____ (IObit) C:\Windows\system32\RegistryDefragBootTime.exe
2016-10-23 02:06 - 2016-10-23 02:07 - 01595668 _____ C:\Windows\SysWOW64\PerfStringBackup.INI
2016-10-23 02:03 - 2009-11-25 17:47 - 01942856 _____ (Microsoft Corporation) C:\Windows\system32\dfshim.dll
2016-10-23 02:03 - 2009-11-25 17:47 - 01130824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dfshim.dll
2016-10-23 02:03 - 2009-11-25 17:47 - 00444752 _____ (Microsoft Corporation) C:\Windows\system32\mscoree.dll
2016-10-23 02:03 - 2009-11-25 17:47 - 00320352 _____ (Microsoft Corporation) C:\Windows\system32\PresentationHost.exe
2016-10-23 02:03 - 2009-11-25 17:47 - 00297808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mscoree.dll
2016-10-23 02:03 - 2009-11-25 17:47 - 00295264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PresentationHost.exe
2016-10-23 02:03 - 2009-11-25 17:47 - 00109912 _____ (Microsoft Corporation) C:\Windows\system32\PresentationHostProxy.dll
2016-10-23 02:03 - 2009-11-25 17:47 - 00099176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PresentationHostProxy.dll
2016-10-23 02:03 - 2009-11-25 17:47 - 00049472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netfxperf.dll
2016-10-23 02:03 - 2009-11-25 17:47 - 00048960 _____ (Microsoft Corporation) C:\Windows\system32\netfxperf.dll
2016-10-23 01:48 - 2016-10-23 15:55 - 00000000 ___RD C:\Users\veronica\OneDrive
2016-10-23 01:48 - 2016-10-23 11:28 - 00000000 ____D C:\Program Files (x86)\Microsoft OneDrive
2016-10-23 01:39 - 2016-10-23 01:39 - 53227520 _____ C:\Windows\system32\config\SOFTWARE.iobit
2016-10-23 01:39 - 2016-10-23 01:39 - 32153600 _____ C:\Windows\system32\config\COMPONENTS.iobit
2016-10-23 01:39 - 2016-10-23 01:39 - 00249856 _____ C:\Windows\system32\config\DEFAULT.iobit
2016-10-23 01:39 - 2016-10-23 01:39 - 00024576 _____ C:\Windows\system32\config\SECURITY.iobit
2016-10-23 01:39 - 2016-10-23 01:39 - 00024576 _____ C:\Windows\system32\config\SAM.iobit
2016-10-23 01:31 - 2016-10-23 01:31 - 00000000 ____D C:\Users\veronica\AppData\Roaming\Apple Computer
2016-10-23 01:30 - 2016-10-23 09:44 - 00000000 ____D C:\Users\Todos os Usuários\ProductData
2016-10-23 01:30 - 2016-10-23 09:44 - 00000000 ____D C:\ProgramData\ProductData
2016-10-23 01:30 - 2016-10-23 01:30 - 00000000 ____D C:\Windows\Tasks\ImCleanDisabled
2016-10-23 01:30 - 2016-10-23 01:30 - 00000000 ____D C:\Users\veronica\AppData\Roaming\ProductData
2016-10-23 01:29 - 2016-10-23 16:01 - 00002916 _____ C:\Windows\System32\Tasks\Uninstaller_SkipUac_veronica
2016-10-23 01:29 - 2016-10-23 01:42 - 00002262 _____ C:\Users\Public\Desktop\Advanced SystemCare 9.lnk
2016-10-23 01:29 - 2016-10-23 01:31 - 00000000 ____D C:\Users\veronica\AppData\LocalLow\IObit
2016-10-23 01:29 - 2016-10-23 01:30 - 00003192 _____ C:\Windows\System32\Tasks\ASC9_PerformanceMonitor
2016-10-23 01:29 - 2016-10-23 01:29 - 00002880 _____ C:\Windows\System32\Tasks\ASC9_SkipUac_veronica
2016-10-23 01:29 - 2016-10-23 01:29 - 00001366 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\IObit Uninstaller.lnk
2016-10-23 01:29 - 2016-10-23 01:29 - 00001354 _____ C:\Users\Public\Desktop\IObit Uninstaller.lnk
2016-10-23 01:29 - 2016-10-23 01:29 - 00000000 ____D C:\Windows\System32\Tasks\OfficeSoftwareProtectionPlatform
2016-10-23 01:29 - 2016-10-23 01:29 - 00000000 ____D C:\Users\Todos os Usuários\{FD6F83C0-EC70-4581-8361-C70CD1AA4B98}
2016-10-23 01:29 - 2016-10-23 01:29 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\IObit Uninstaller
2016-10-23 01:29 - 2016-10-23 01:29 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Advanced SystemCare
2016-10-23 01:29 - 2016-10-23 01:29 - 00000000 ____D C:\ProgramData\{FD6F83C0-EC70-4581-8361-C70CD1AA4B98}
2016-10-23 01:28 - 2016-10-23 01:31 - 00000000 ____D C:\Users\Todos os Usuários\IObit
2016-10-23 01:28 - 2016-10-23 01:31 - 00000000 ____D C:\ProgramData\IObit
2016-10-23 01:28 - 2016-10-23 01:31 - 00000000 ____D C:\Program Files (x86)\IObit
2016-10-23 01:28 - 2016-10-23 01:30 - 00000000 ____D C:\Users\veronica\AppData\Roaming\IObit
2016-10-23 01:25 - 2016-10-23 15:35 - 01804512 _____ C:\Windows\GABRIOLA.tt2
2016-10-23 01:21 - 2016-10-23 01:21 - 00000000 ____D C:\Users\veronica\AppData\Roaming\WinRAR
2016-10-23 01:21 - 2016-10-23 01:21 - 00000000 ____D C:\Users\veronica\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
2016-10-23 01:21 - 2016-10-23 01:21 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
2016-10-23 01:20 - 2016-10-23 01:21 - 00000000 ____D C:\Program Files (x86)\WinRAR
2016-10-23 01:17 - 2016-10-23 01:17 - 00037144 _____ (AVAST Software) C:\Windows\system32\Drivers\aswKbd.sys
2016-10-23 01:15 - 2016-10-23 01:15 - 00000000 ____D C:\Users\veronica\AppData\Local\CEF
2016-10-23 01:14 - 2016-10-23 01:14 - 00001922 _____ C:\Users\Public\Desktop\Avast Free Antivirus.lnk
2016-10-23 01:14 - 2016-10-23 01:14 - 00000000 ____D C:\Users\veronica\AppData\Roaming\AVAST Software
2016-10-23 01:14 - 2016-10-23 01:14 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVAST Software
2016-10-23 01:13 - 2016-10-23 01:17 - 00000000 ____D C:\Users\veronica\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Aplicativos do Google Chrome
2016-10-23 01:13 - 2016-10-23 01:14 - 00969184 _____ (AVAST Software) C:\Windows\system32\Drivers\aswsnx.sys
2016-10-23 01:13 - 2016-10-23 01:14 - 00513632 _____ (AVAST Software) C:\Windows\system32\Drivers\aswsp.sys
2016-10-23 01:13 - 2016-10-23 01:14 - 00293352 _____ (AVAST Software) C:\Windows\system32\Drivers\aswvmm.sys
2016-10-23 01:13 - 2016-10-23 01:13 - 00003922 _____ C:\Windows\System32\Tasks\avast! Emergency Update
2016-10-23 01:13 - 2016-10-23 01:13 - 00000000 ____D C:\Windows\System32\Tasks\AVAST Software
2016-10-23 01:13 - 2016-10-23 01:13 - 00000000 ____D C:\Program Files\Common Files\AV
2016-10-23 01:13 - 2016-10-23 01:12 - 00163416 _____ (AVAST Software) C:\Windows\system32\Drivers\aswStm.sys
2016-10-23 01:13 - 2016-10-23 01:12 - 00108816 _____ (AVAST Software) C:\Windows\system32\Drivers\aswMonFlt.sys
2016-10-23 01:13 - 2016-10-23 01:12 - 00103064 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRdr2.sys
2016-10-23 01:13 - 2016-10-23 01:12 - 00074544 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRvrt.sys
2016-10-23 01:13 - 2016-10-23 01:12 - 00037656 _____ (AVAST Software) C:\Windows\system32\Drivers\aswHwid.sys
2016-10-23 01:12 - 2016-10-23 01:12 - 00992960 _____ (Microsoft Corporation) C:\Windows\system32\ucrtbase.dll
2016-10-23 01:12 - 2016-10-23 01:12 - 00921280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ucrtbase.dll
2016-10-23 01:12 - 2016-10-23 01:12 - 00391496 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe
2016-10-23 01:12 - 2016-10-23 01:12 - 00053208 _____ (AVAST Software) C:\Windows\avastSS.scr
2016-10-23 01:11 - 2016-10-23 01:17 - 00000000 ____D C:\Users\Todos os Usuários\AVAST Software
2016-10-23 01:11 - 2016-10-23 01:17 - 00000000 ____D C:\ProgramData\AVAST Software
2016-10-23 01:11 - 2016-10-23 01:17 - 00000000 ____D C:\Program Files\AVAST Software
2016-10-23 01:10 - 2016-10-23 01:10 - 00002265 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2016-10-23 01:10 - 2016-10-23 01:10 - 00002253 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2016-10-23 01:09 - 2016-10-24 12:48 - 00001068 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2016-10-23 01:09 - 2016-10-24 00:14 - 00001072 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2016-10-23 01:09 - 2016-10-23 01:21 - 00000000 ____D C:\Users\veronica\AppData\Local\Google
2016-10-23 01:09 - 2016-10-23 01:10 - 00000000 ____D C:\Program Files (x86)\Google
2016-10-23 01:09 - 2016-10-23 01:09 - 00004068 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2016-10-23 01:09 - 2016-10-23 01:09 - 00003816 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2016-10-23 01:08 - 2016-10-23 15:18 - 00111056 _____ C:\Users\veronica\AppData\Local\GDIPFONTCACHEV1.DAT
2016-10-23 01:08 - 2016-10-23 01:09 - 00000000 ____D C:\Users\veronica\AppData\Local\Deployment
2016-10-23 01:08 - 2016-10-23 01:08 - 00000000 ____D C:\Users\veronica\AppData\Local\Apps\2.0
2016-10-23 00:57 - 2016-10-23 00:57 - 00001419 _____ C:\Users\veronica\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2016-10-23 00:57 - 2016-10-23 00:57 - 00001385 _____ C:\Users\veronica\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer (64-bit).lnk
2016-10-23 00:57 - 2016-10-23 00:57 - 00000020 ___SH C:\Users\veronica\ntuser.ini
2016-10-23 00:57 - 2016-10-23 00:57 - 00000000 _SHDL C:\Users\veronica\Modelos
2016-10-23 00:57 - 2016-10-23 00:57 - 00000000 _SHDL C:\Users\veronica\Meus documentos
2016-10-23 00:57 - 2016-10-23 00:57 - 00000000 _SHDL C:\Users\veronica\Menu Iniciar
2016-10-23 00:57 - 2016-10-23 00:57 - 00000000 _SHDL C:\Users\veronica\Documents\Minhas músicas
2016-10-23 00:57 - 2016-10-23 00:57 - 00000000 _SHDL C:\Users\veronica\Documents\Minhas imagens
2016-10-23 00:57 - 2016-10-23 00:57 - 00000000 _SHDL C:\Users\veronica\Documents\Meus vídeos
2016-10-23 00:57 - 2016-10-23 00:57 - 00000000 _SHDL C:\Users\veronica\Dados de aplicativos
2016-10-23 00:57 - 2016-10-23 00:57 - 00000000 _SHDL C:\Users\veronica\Configurações locais
2016-10-23 00:57 - 2016-10-23 00:57 - 00000000 _SHDL C:\Users\veronica\AppData\Roaming\Microsoft\Windows\Start Menu\Programas
2016-10-23 00:57 - 2016-10-23 00:57 - 00000000 _SHDL C:\Users\veronica\AppData\Local\Histórico
2016-10-23 00:57 - 2016-10-23 00:57 - 00000000 _SHDL C:\Users\veronica\AppData\Local\Dados de aplicativos
2016-10-23 00:57 - 2016-10-23 00:57 - 00000000 _SHDL C:\Users\veronica\Ambiente de rede
2016-10-23 00:57 - 2016-10-23 00:57 - 00000000 _SHDL C:\Users\veronica\Ambiente de impressão
2016-10-23 00:57 - 2016-10-23 00:57 - 00000000 ____D C:\Users\veronica\AppData\Local\VirtualStore
2016-10-23 00:56 - 2016-10-23 01:48 - 00000000 ____D C:\Users\veronica
2016-10-23 00:56 - 2016-10-23 00:56 - 00000000 _SHDL C:\Users\Usuário Padrão\Documents\Minhas músicas
2016-10-23 00:56 - 2016-10-23 00:56 - 00000000 _SHDL C:\Users\Usuário Padrão\Documents\Minhas imagens
2016-10-23 00:56 - 2016-10-23 00:56 - 00000000 _SHDL C:\Users\Usuário Padrão\Documents\Meus vídeos
2016-10-23 00:56 - 2016-10-23 00:56 - 00000000 _SHDL C:\Users\Usuário Padrão\AppData\Roaming\Microsoft\Windows\Start Menu\Programas
2016-10-23 00:56 - 2016-10-23 00:56 - 00000000 _SHDL C:\Users\Usuário Padrão\AppData\Local\Histórico
2016-10-23 00:56 - 2016-10-23 00:56 - 00000000 _SHDL C:\Users\Usuário Padrão\AppData\Local\Dados de aplicativos
2016-10-23 00:56 - 2016-10-23 00:56 - 00000000 _SHDL C:\Users\Usuário Padrão
2016-10-23 00:56 - 2016-10-23 00:56 - 00000000 _SHDL C:\Users\Todos os Usuários\Modelos
2016-10-23 00:56 - 2016-10-23 00:56 - 00000000 _SHDL C:\Users\Todos os Usuários\Menu Iniciar
2016-10-23 00:56 - 2016-10-23 00:56 - 00000000 _SHDL C:\Users\Todos os Usuários\Favoritos
2016-10-23 00:56 - 2016-10-23 00:56 - 00000000 _SHDL C:\Users\Todos os Usuários\Documentos
2016-10-23 00:56 - 2016-10-23 00:56 - 00000000 _SHDL C:\Users\Todos os Usuários\Dados de aplicativos
2016-10-23 00:56 - 2016-10-23 00:56 - 00000000 _SHDL C:\Users\Todos os Usuários
2016-10-23 00:56 - 2016-10-23 00:56 - 00000000 _SHDL C:\Users\Public\Documents\Minhas músicas
2016-10-23 00:56 - 2016-10-23 00:56 - 00000000 _SHDL C:\Users\Public\Documents\Minhas imagens
2016-10-23 00:56 - 2016-10-23 00:56 - 00000000 _SHDL C:\Users\Public\Documents\Meus vídeos
2016-10-23 00:56 - 2016-10-23 00:56 - 00000000 _SHDL C:\Users\Default\Modelos
2016-10-23 00:56 - 2016-10-23 00:56 - 00000000 _SHDL C:\Users\Default\Meus documentos
2016-10-23 00:56 - 2016-10-23 00:56 - 00000000 _SHDL C:\Users\Default\Menu Iniciar
2016-10-23 00:56 - 2016-10-23 00:56 - 00000000 _SHDL C:\Users\Default\Documents\Minhas músicas
2016-10-23 00:56 - 2016-10-23 00:56 - 00000000 _SHDL C:\Users\Default\Documents\Minhas imagens
2016-10-23 00:56 - 2016-10-23 00:56 - 00000000 _SHDL C:\Users\Default\Documents\Meus vídeos
2016-10-23 00:56 - 2016-10-23 00:56 - 00000000 _SHDL C:\Users\Default\Dados de aplicativos
2016-10-23 00:56 - 2016-10-23 00:56 - 00000000 _SHDL C:\Users\Default\Configurações locais
2016-10-23 00:56 - 2016-10-23 00:56 - 00000000 _SHDL C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programas
2016-10-23 00:56 - 2016-10-23 00:56 - 00000000 _SHDL C:\Users\Default\AppData\Local\Histórico
2016-10-23 00:56 - 2016-10-23 00:56 - 00000000 _SHDL C:\Users\Default\AppData\Local\Dados de aplicativos
2016-10-23 00:56 - 2016-10-23 00:56 - 00000000 _SHDL C:\Users\Default\Ambiente de rede
2016-10-23 00:56 - 2016-10-23 00:56 - 00000000 _SHDL C:\Users\Default\Ambiente de impressão
2016-10-23 00:56 - 2016-10-23 00:56 - 00000000 _SHDL C:\Users\Default User\Documents\Minhas músicas
2016-10-23 00:56 - 2016-10-23 00:56 - 00000000 _SHDL C:\Users\Default User\Documents\Minhas imagens
2016-10-23 00:56 - 2016-10-23 00:56 - 00000000 _SHDL C:\Users\Default User\Documents\Meus vídeos
2016-10-23 00:56 - 2016-10-23 00:56 - 00000000 _SHDL C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programas
2016-10-23 00:56 - 2016-10-23 00:56 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Histórico
2016-10-23 00:56 - 2016-10-23 00:56 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Dados de aplicativos
2016-10-23 00:56 - 2016-10-23 00:56 - 00000000 _SHDL C:\ProgramData\Modelos
2016-10-23 00:56 - 2016-10-23 00:56 - 00000000 _SHDL C:\ProgramData\Microsoft\Windows\Start Menu\Programas
2016-10-23 00:56 - 2016-10-23 00:56 - 00000000 _SHDL C:\ProgramData\Menu Iniciar
2016-10-23 00:56 - 2016-10-23 00:56 - 00000000 _SHDL C:\ProgramData\Favoritos
2016-10-23 00:56 - 2016-10-23 00:56 - 00000000 _SHDL C:\ProgramData\Documentos
2016-10-23 00:56 - 2016-10-23 00:56 - 00000000 _SHDL C:\ProgramData\Dados de aplicativos
2016-10-23 00:56 - 2016-10-23 00:56 - 00000000 _SHDL C:\Program Files\Common Files\Sistema
2016-10-23 00:56 - 2016-10-23 00:56 - 00000000 _SHDL C:\Program Files\Arquivos Comuns
2016-10-23 00:56 - 2016-10-23 00:56 - 00000000 _SHDL C:\Arquivos de Programas
2016-10-23 00:56 - 2009-07-14 05:44 - 00000000 ____D C:\Users\veronica\AppData\Roaming\Media Center Programs
2016-10-23 00:51 - 2016-10-23 00:51 - 00001345 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Media Center.lnk
2016-10-23 00:51 - 2016-10-23 00:51 - 00001326 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows DVD Maker.lnk
2016-10-23 00:50 - 2016-10-23 00:50 - 00000000 ____H C:\Windows\system32\Drivers\Msft_User_WpdFs_01_09_00.Wdf
2016-10-08 01:10 - 2016-10-08 01:10 - 00334616 _____ (Microsoft Corporation) C:\Windows\system32\concrt140.dll
2016-10-08 01:10 - 2016-10-08 01:10 - 00085744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vcruntime140.dll
2016-10-08 01:09 - 2016-10-08 01:09 - 00639728 _____ (Microsoft Corporation) C:\Windows\system32\msvcp140.dll
2016-10-08 01:09 - 2016-10-08 01:09 - 00443632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvcp140.dll
2016-10-08 01:09 - 2016-10-08 01:09 - 00244496 _____ (Microsoft Corporation) C:\Windows\SysWOW64\concrt140.dll
2016-10-08 01:08 - 2016-10-08 01:08 - 00394496 _____ (Microsoft Corporation) C:\Windows\system32\vccorlib140.dll
2016-10-08 01:08 - 2016-10-08 01:08 - 00271104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vccorlib140.dll
2016-10-08 01:08 - 2016-10-08 01:08 - 00089328 _____ (Microsoft Corporation) C:\Windows\system32\vcruntime140.dll
==================== Três Meses Modificados arquivos e pastas ========
(Se uma entrada for incluída na fixlist, o arquivo/pasta será movido.)
2016-10-24 12:53 - 2009-07-29 13:49 - 00703080 _____ C:\Windows\system32\prfh0416.dat
2016-10-24 12:53 - 2009-07-29 13:49 - 00145866 _____ C:\Windows\system32\prfc0416.dat
2016-10-24 12:53 - 2009-07-14 03:13 - 01628820 _____ C:\Windows\system32\PerfStringBackup.INI
2016-10-24 12:53 - 2009-07-14 01:20 - 00000000 ____D C:\Windows\inf
2016-10-24 12:48 - 2009-07-14 03:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2016-10-24 00:23 - 2009-07-14 02:45 - 00009584 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2016-10-24 00:23 - 2009-07-14 02:45 - 00009584 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2016-10-23 21:54 - 2009-07-14 01:20 - 00000000 ____D C:\Program Files\Common Files\Microsoft Shared
2016-10-23 20:28 - 2009-07-14 01:20 - 00000000 ____D C:\Windows\rescache
2016-10-23 20:23 - 2009-07-14 05:45 - 00000000 ____D C:\Program Files\Windows Journal
2016-10-23 20:23 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\SysWOW64\winrm
2016-10-23 20:23 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\SysWOW64\slmgr
2016-10-23 20:23 - 2009-07-14 03:32 - 00000000 ____D C:\Program Files\Windows Sidebar
2016-10-23 20:23 - 2009-07-14 03:32 - 00000000 ____D C:\Program Files\Windows Photo Viewer
2016-10-23 20:23 - 2009-07-14 03:32 - 00000000 ____D C:\Program Files\Windows Defender
2016-10-23 20:23 - 2009-07-14 03:32 - 00000000 ____D C:\Program Files\DVD Maker
2016-10-23 20:23 - 2009-07-14 03:32 - 00000000 ____D C:\Program Files (x86)\Windows Sidebar
2016-10-23 20:23 - 2009-07-14 03:32 - 00000000 ____D C:\Program Files (x86)\Windows Photo Viewer
2016-10-23 20:23 - 2009-07-14 03:32 - 00000000 ____D C:\Program Files (x86)\Windows Defender
2016-10-23 20:23 - 2009-07-14 01:20 - 00000000 ____D C:\Windows\SysWOW64\migwiz
2016-10-23 20:23 - 2009-07-14 01:20 - 00000000 ____D C:\Windows\servicing
2016-10-23 20:22 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\SysWOW64\WCN
2016-10-23 20:22 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\SysWOW64\Printing_Admin_Scripts
2016-10-23 20:22 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\system32\winrm
2016-10-23 20:22 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\system32\WCN
2016-10-23 20:22 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\system32\slmgr
2016-10-23 20:22 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\system32\Printing_Admin_Scripts
2016-10-23 20:22 - 2009-07-14 01:20 - 00000000 ____D C:\Windows\SysWOW64\Dism
2016-10-23 20:22 - 2009-07-14 01:20 - 00000000 ____D C:\Windows\system32\migwiz
2016-10-23 20:22 - 2009-07-14 01:20 - 00000000 ____D C:\Windows\system32\Dism
2016-10-23 16:29 - 2009-07-14 02:45 - 00436168 _____ C:\Windows\system32\FNTCACHE.DAT
2016-10-23 06:47 - 2009-07-14 03:32 - 00028672 _____ C:\Windows\system32\config\BCD-Template
2016-10-23 00:56 - 2009-07-14 01:20 - 00000000 __RHD C:\Users\Public\Libraries
2016-10-23 00:56 - 2009-07-14 01:20 - 00000000 ____D C:\Program Files\Windows NT
2016-10-23 00:51 - 2009-07-14 03:32 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
2016-10-23 00:51 - 2009-07-14 01:20 - 00000000 ____D C:\Windows\system32\sysprep
Alguns arquivos em TEMP:
====================
C:\Users\veronica\AppData\Local\Temp\PidGenX.dll
==================== Bamital & volsnap ======================
(Não há correção automática para arquivos que não passaram na verificação.)
C:\Windows\system32\winlogon.exe => O arquivo é assinado digitalmente
C:\Windows\system32\wininit.exe => O arquivo é assinado digitalmente
C:\Windows\SysWOW64\wininit.exe => O arquivo é assinado digitalmente
C:\Windows\explorer.exe => O arquivo é assinado digitalmente
C:\Windows\SysWOW64\explorer.exe => O arquivo é assinado digitalmente
C:\Windows\system32\svchost.exe => O arquivo é assinado digitalmente
C:\Windows\SysWOW64\svchost.exe => O arquivo é assinado digitalmente
C:\Windows\system32\services.exe => O arquivo é assinado digitalmente
C:\Windows\system32\User32.dll => O arquivo é assinado digitalmente
C:\Windows\SysWOW64\User32.dll => O arquivo é assinado digitalmente
C:\Windows\system32\userinit.exe => O arquivo é assinado digitalmente
C:\Windows\SysWOW64\userinit.exe => O arquivo é assinado digitalmente
C:\Windows\system32\rpcss.dll => O arquivo é assinado digitalmente
C:\Windows\system32\dnsapi.dll => O arquivo é assinado digitalmente
C:\Windows\SysWOW64\dnsapi.dll => O arquivo é assinado digitalmente
C:\Windows\system32\Drivers\volsnap.sys => O arquivo é assinado digitalmente
LastRegBack: 2016-10-23 19:13
==================== Fim de FRST.txt ============================