cjoint

Publicité


Publicité

Format du document : text/plain

Prévisualisation

Resultado do exame da Farbar Recovery Scan Tool (FRST) (x64) Versão: 04-11-2016
Executado por Augusto (administrador) em AUGUSTO-PC (07-11-2016 20:50:19)
Executando a partir de C:\Users\Augusto\Downloads
Perfis Carregados: Augusto (Perfis Disponíveis: Augusto)
Platform: Windows 7 Ultimate (X64) Idioma: Português (Brasil)
Internet Explorer Versão 8 (Navegador padrão: Chrome)
Modo da Inicialização: Normal
Tutorial da Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processos (Whitelisted) =================

(Se uma entrada for incluída na fixlist, o processo será fechado. O arquivo não será movido.)

(Microsoft Corporation) C:\Windows\SysWOW64\svchost.exe
(BitTorrent Inc.) C:\Users\Augusto\AppData\Roaming\uTorrent\uTorrent.exe
(Razer Inc.) C:\Program Files (x86)\Razer\Razer Game Booster\RzKLService.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(IObit) C:\Program Files (x86)\IObit\Game Booster 3\gbtray.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
() C:\Program Files (x86)\Razer\Razer Services\GSS\GameScannerService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Popcorn Time) C:\Program Files (x86)\Popcorn Time\Updater.exe
() C:\Program Files (x86)\Standard Mouse Driver\Monitor.EXE
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Users\Augusto\Downloads\vc_redist.x64.exe
(Microsoft Corporation) C:\Users\Augusto\Downloads\vc_redist.x64.exe
(Microsoft Corporation) C:\Windows\System32\msiexec.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe


==================== Registro (Whitelisted) ====================

(Se uma entrada for incluída na fixlist, o ítem no Registro será restaurado para o padrão ou removido. O arquivo não será movido.)

HKLM\...\Run: [StartCN] => C:\Program Files\AMD\CNext\CNext\cnext.exe [4859592 2015-11-18] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [Raptr] => C:\Program Files (x86)\Raptr\raptrstub.exe [56080 2015-12-11] (Raptr, Inc)
HKLM-x32\...\Run: [Standard Mouse Driver] => C:\Program Files (x86)\Standard Mouse Driver\Monitor.EXE [471040 2013-12-09] ()
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKU\S-1-5-21-1439520339-1936661288-3728334394-1000\...\Run: [uTorrent] => C:\Users\Augusto\AppData\Roaming\uTorrent\uTorrent.exe [1977536 2016-10-08] (BitTorrent Inc.)
HKU\S-1-5-21-1439520339-1936661288-3728334394-1000\...\Run: [GoogleChromeAutoLaunch_5B97D652D31642E4BA9D579560216F0B] => C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [921704 2016-10-20] (Google Inc.)
HKU\S-1-5-21-1439520339-1936661288-3728334394-1000\...\MountPoints2: {ee84a399-1f42-11e5-b8a5-8e0238f1017d} - E:\SETUP.EXE
HKU\S-1-5-18\...\RunOnce: [SPReview] => C:\Windows\System32\SPReview\SPReview.exe [301568 2015-07-27] (Microsoft Corporation)
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => Nenhum Arquivo
BootExecute: autocheck autochk * sdnclean64.exe

==================== Internet (Whitelisted) ====================

(Se um ítem for incluído na fixlist, sendo um ítem do Registro, será removido ou restaurado para o padrão.)

Hosts: Há mais de uma entrada no Hosts. Veja a seção Hosts do Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{6B79A55C-2475-4247-89E5-1098F1073D5B}: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{9BC6D287-E07C-4887-A274-0FF6CCD05982}: [DhcpNameServer] 177.39.160.251 177.39.160.252

Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page =
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page =
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL =
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL =
HKU\S-1-5-21-1439520339-1936661288-3728334394-1000\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.istartsurf.com/web/?type=dspp&ts=1437705949&z=87fce0085a2c77c3e639bcdg0zfcem1m4e6wbt6e4b&from=smt&uid=ST500DM002-1BD142_S2A0Z0ZZXXXXS2A0Z0ZZ&q={searchTerms}
HKU\S-1-5-21-1439520339-1936661288-3728334394-1000\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.istartsurf.com/web/?type=dspp&ts=1437705949&z=87fce0085a2c77c3e639bcdg0zfcem1m4e6wbt6e4b&from=smt&uid=ST500DM002-1BD142_S2A0Z0ZZXXXXS2A0Z0ZZ&q={searchTerms}
SearchScopes: HKU\S-1-5-21-1439520339-1936661288-3728334394-1000 -> DefaultScope {2023ECEC-E06A-4372-A1C7-0B49F9E0FFF0} URL = hxxp://www.oursurfing.com/web/?utm_source=b&utm_medium=smt&utm_campaign=install_ie&utm_content=ds&from=smt&uid=ST500DM002-1BD142_S2A0Z0ZZXXXXS2A0Z0ZZ&ts=1437706094&type=default&q={searchTerms}
SearchScopes: HKU\S-1-5-21-1439520339-1936661288-3728334394-1000 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.oursurfing.com/web/?utm_source=b&utm_medium=smt&utm_campaign=install_ie&utm_content=ds&from=smt&uid=ST500DM002-1BD142_S2A0Z0ZZXXXXS2A0Z0ZZ&ts=1437706094&type=default&q={searchTerms}
SearchScopes: HKU\S-1-5-21-1439520339-1936661288-3728334394-1000 -> {2023ECEC-E06A-4372-A1C7-0B49F9E0FFF0} URL = hxxp://www.oursurfing.com/web/?utm_source=b&utm_medium=smt&utm_campaign=install_ie&utm_content=ds&from=smt&uid=ST500DM002-1BD142_S2A0Z0ZZXXXXS2A0Z0ZZ&ts=1437706094&type=default&q={searchTerms}
SearchScopes: HKU\S-1-5-21-1439520339-1936661288-3728334394-1000 -> {E733165D-CBCF-4FDA-883E-ADEF965B476C} URL = hxxp://www.oursurfing.com/web/?utm_source=b&utm_medium=smt&utm_campaign=install_ie&utm_content=ds&from=smt&uid=ST500DM002-1BD142_S2A0Z0ZZXXXXS2A0Z0ZZ&ts=1437706094&type=default&q={searchTerms}
BHO: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\Office15\OCHelper.dll [2012-10-01] (Microsoft Corporation)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-08-18] (Microsoft Corporation)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office15\URLREDIR.DLL [2012-10-01] (Microsoft Corporation)
BHO: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office\Office15\GROOVEEX.DLL [2012-10-01] (Microsoft Corporation)
BHO-x32: HP Print Enhancer -> {0347C33E-8762-4905-BF09-768834316C61} -> C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll [2009-05-21] (Hewlett-Packard Co.)
BHO-x32: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll [2012-10-01] (Microsoft Corporation)
BHO-x32: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL [2010-03-25] (Microsoft Corporation)
BHO-x32: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-08-18] (Microsoft Corporation)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL [2010-02-28] (Microsoft Corporation)
BHO-x32: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\Office15\GROOVEEX.DLL [2012-10-01] (Microsoft Corporation)
BHO-x32: HP Smart BHO Class -> {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} -> C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll [2009-05-21] (Hewlett-Packard Co.)
Handler: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office\Office15\MSOSB.DLL [2012-10-01] (Microsoft Corporation)
Filter: deflate - {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\Windows\system32\urlmon.dll [2009-07-13] (Microsoft Corporation)
Filter-x32: deflate - {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\Windows\SysWOW64\urlmon.dll [2009-07-13] (Microsoft Corporation)
Filter: gzip - {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\Windows\system32\urlmon.dll [2009-07-13] (Microsoft Corporation)
Filter-x32: gzip - {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\Windows\SysWOW64\urlmon.dll [2009-07-13] (Microsoft Corporation)
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe hxxp://www.istartsurf.com/?type=sc&ts=1437705868&z=5a0583f23042bbc39c74e7bgfzfc7m0meefwdb6o7m&from=smt&uid=ST500DM002-1BD142_S2A0Z0ZZXXXXS2A0Z0ZZ

FireFox:
========
FF HKLM-x32\...\Firefox\Extensions: [smartwebprinting@hp.com] - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3
FF Extension: (HP Smart Web Printing) - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 [2015-06-30] [não assinado]
FF HKLM-x32\...\Firefox\Extensions: [{F003DA68-8256-4b37-A6C4-350FA04494DF}] - C:\Program Files\Logitech\SetPointP\LogiSmoothFirefoxExt => não encontrado (a)
FF HKU\S-1-5-21-1439520339-1936661288-3728334394-1000\...\Firefox\Extensions: [smartwebprinting@hp.com] - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~1\MICROS~2\Office15\NPSPWRAP.DLL [2012-10-01] (Microsoft Corporation)
FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/pdf -> C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll [2015-02-11] (Foxit Corporation)
FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.fdf -> C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll [2015-02-11] (Foxit Corporation)
FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.xdp -> C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll [2015-02-11] (Foxit Corporation)
FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.xfdf -> C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll [2015-02-11] (Foxit Corporation)
FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files (x86)\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2012-10-01] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~2\MICROS~2\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~2\Office14\NPSPWRAP.DLL [2010-03-24] (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.31.5\npGoogleUpdate3.dll [2016-07-28] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.31.5\npGoogleUpdate3.dll [2016-07-28] (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.2.1 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npMeetingJoinPluginOC.dll [2012-10-01] (Microsoft Corporation)

Chrome:
=======
CHR DefaultProfile: Default
CHR HomePage: Default -> hxxp://www.oursurfing.com/?type=sy&ts=1437706070&z=d1b95ea62ea55233f32a130g6z5camem9eaq3e5qeb&from=smt&uid=ST500DM002-1BD142_S2A0Z0ZZXXXXS2A0Z0ZZ
CHR StartupUrls: Default -> "","hxxp://www.google.com/","hxxp://www.istartsurf.com/?type=hppp&ts=1434753817&z=36f422ee3e714a41085411eg6zecdz2mfw0c3b6geo&from=cor&uid=ST500DM002-1BD142_S2A0Z0ZZXXXXS2A0Z0ZZ","hxxp://www.istartsurf.com/?type=hp&ts=1437705868&z=5a0583f23042bbc39c74e7bgfzfc7m0meefwdb6o7m&from=smt&uid=ST500DM002-1BD142_S2A0Z0ZZXXXXS2A0Z0ZZ","hxxp://www.oursurfing.com/?type=hp&ts=1437706024&z=7878e29b595461cc57ee3b4g7z0cbm5m2e8q9e4o6o&from=smt&uid=ST500DM002-1BD142_S2A0Z0ZZXXXXS2A0Z0ZZ","hxxp://www.istartsurf.com/?type=hppp&ts=1437705949&z=87fce0085a2c77c3e639bcdg0zfcem1m4e6wbt6e4b&from=smt&uid=ST500DM002-1BD142_S2A0Z0ZZXXXXS2A0Z0ZZ"
CHR Profile: C:\Users\Augusto\AppData\Local\Google\Chrome\User Data\Default [2016-11-07]
CHR Extension: (Glow) - C:\Users\Augusto\AppData\Local\Google\Chrome\User Data\Default\Extensions\bekmjjakgojplnhahcilegeiklenjbgb [2016-10-28]
CHR Extension: (Toggle JavaScript) - C:\Users\Augusto\AppData\Local\Google\Chrome\User Data\Default\Extensions\cidlcjdalomndpeagkjpnefhljffbnlo [2016-10-28]
CHR Extension: (AdBlock) - C:\Users\Augusto\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2016-10-28]
CHR Extension: (Desprotetor de Links) - C:\Users\Augusto\AppData\Local\Google\Chrome\User Data\Default\Extensions\imcbnnnoghiihopefblgehihofbfbmei [2016-11-04]
CHR Extension: (Google Play) - C:\Users\Augusto\AppData\Local\Google\Chrome\User Data\Default\Extensions\komhbcfkdcgmcdoenjcjheifdiabikfi [2016-10-28]
CHR Extension: (Google Dictionary (by Google)) - C:\Users\Augusto\AppData\Local\Google\Chrome\User Data\Default\Extensions\mgijmajocgfcbeboacabfgobmjgjcoja [2016-10-28]
CHR Extension: (Pagamentos da Chrome Web Store) - C:\Users\Augusto\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2016-10-28]
CHR Extension: (Chrome Media Router) - C:\Users\Augusto\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2016-10-28]
CHR HKU\S-1-5-21-1439520339-1936661288-3728334394-1000\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [bknbnapaddjdnbilpmlacdkjdkjmbjhd] - hxxp://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [bknbnapaddjdnbilpmlacdkjdkjmbjhd] - hxxp://clients2.google.com/service/update2/crx

==================== Serviços (Whitelisted) ====================

(Se uma entrada for incluída na fixlist, será removida do Registro. O arquivo não será movido, a menos que seja colocado separadamente.)

R3 hpqcxs08; C:\Program Files (x86)\HP\Digital Imaging\bin\hpqcxs08.dll [248832 2009-05-21] (Hewlett-Packard Co.) [Arquivo não assinado]
R2 hpqddsvc; C:\Program Files (x86)\HP\Digital Imaging\bin\hpqddsvc.dll [133120 2009-05-21] (Hewlett-Packard Co.) [Arquivo não assinado]
R2 Net Driver HPZ12; C:\Windows\system32\HPZinw12.dll [71680 2008-12-03] (Hewlett-Packard) [Arquivo não assinado]
R2 Pml Driver HPZ12; C:\Windows\system32\HPZipm12.dll [89600 2008-12-03] (Hewlett-Packard) [Arquivo não assinado]
R2 Razer Game Scanner Service; C:\Program Files (x86)\Razer\Razer Services\GSS\GameScannerService.exe [188072 2015-09-23] ()
U2 RzKLService; C:\Program Files (x86)\Razer\Razer Game Booster\RzKLService.exe [105448 2014-02-25] (Razer Inc.)
R2 Update service; C:\Program Files (x86)\Popcorn Time\Updater.exe [339968 2015-10-19] (Popcorn Time) [Arquivo não assinado]
S4 VIAKaraokeService; C:\Windows\system32\viakaraokesrv.exe [27760 2011-06-14] (VIA Technologies, Inc.)
R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2009-07-13] (Microsoft Corporation)
S2 FoxitCloudUpdateService; "C:\Program Files (x86)\Foxit Software\Foxit Reader\Foxit Cloud\FCUpdateService.exe" [X]

===================== Drivers (Whitelisted) ======================

(Se uma entrada for incluída na fixlist, será removida do Registro. O arquivo não será movido, a menos que seja colocado separadamente.)

R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283064 2015-06-30] (Disc Soft Ltd)
S3 ebdrv; C:\Windows\system32\DRIVERS\evbda.sys [3286016 2009-06-10] (Broadcom Corporation)
R3 L1C; C:\Windows\System32\DRIVERS\L1C62x64.sys [104560 2012-04-25] (Qualcomm Atheros Co., Ltd.)
R2 rzpmgrk; C:\Windows\system32\drivers\rzpmgrk.sys [37184 2015-09-22] (Razer, Inc.)
S3 WinRing0_1_2_0; C:\Program Files (x86)\IObit\Game Booster 3\Driver\WinRing0x64.sys [14544 2010-11-01] (OpenLibSys.org)

==================== NetSvcs (Whitelisted) ===================

(Se uma entrada for incluída na fixlist, será removida do Registro. O arquivo não será movido, a menos que seja colocado separadamente.)


==================== Um Mês Criados arquivos e pastas ========

(Se uma entrada for incluída na fixlist, o arquivo/pasta será movido.)

2016-11-07 20:50 - 2016-11-07 20:50 - 02410496 _____ (Farbar) C:\Users\Augusto\Downloads\FRST64.exe
2016-11-07 20:50 - 2016-11-07 20:50 - 00017693 _____ C:\Users\Augusto\Downloads\FRST.txt
2016-11-07 20:50 - 2016-11-07 20:50 - 00000000 ____D C:\FRST
2016-11-07 20:44 - 2016-11-07 20:45 - 14749120 _____ (Microsoft Corporation) C:\Users\Augusto\Downloads\vc_redist.x64.exe
2016-11-07 20:19 - 2016-11-06 21:38 - 00001022 _____ C:\Users\Augusto\Desktop\Mafia III.lnk
2016-11-07 20:18 - 2016-11-07 20:18 - 00000000 ____D C:\Users\Augusto\AppData\Local\2K Games
2016-11-07 19:45 - 2016-11-07 19:48 - 70087104 _____ (Microsoft Corporation) C:\Users\Augusto\Downloads\NDP451-KB2858728-x86-x64-AllOS-ENU.exe
2016-11-07 15:40 - 2016-11-07 15:40 - 00000000 ____D C:\Users\Augusto\AppData\OICE_15_974FA576_32C1D314_1B8C
2016-11-06 21:38 - 2016-11-06 21:38 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mafia III
2016-11-06 20:56 - 2016-11-06 21:40 - 00000000 ____D C:\Program Files (x86)\Mafia III
2016-11-01 17:50 - 2016-11-01 17:53 - 00000000 ____D C:\Users\Augusto\Downloads\From Dusk Till Dawn 1996 720p BRRip x264-HDLiTE
2016-11-01 17:47 - 2016-11-06 21:08 - 00000000 ____D C:\Users\Augusto\Downloads\300 (2006) [1080p]
2016-10-31 15:59 - 2016-10-31 15:59 - 00134576 _____ C:\Users\Augusto\Downloads\WhatsApp Image 2016-10-22 at 23.07.08.jpeg
2016-10-31 15:59 - 2016-10-31 15:59 - 00132460 _____ C:\Users\Augusto\Downloads\WhatsApp Image 2016-10-22 at 23.08.12.jpeg
2016-10-31 15:59 - 2016-10-31 15:59 - 00126139 _____ C:\Users\Augusto\Downloads\WhatsApp Image 2016-10-22 at 23.06.40.jpeg
2016-10-31 15:59 - 2016-10-31 15:59 - 00116736 _____ C:\Users\Augusto\Downloads\WhatsApp Image 2016-10-22 at 23.05.49.jpeg
2016-10-31 15:59 - 2016-10-31 15:59 - 00116188 _____ C:\Users\Augusto\Downloads\WhatsApp Image 2016-10-22 at 23.07.48.jpeg
2016-10-31 15:59 - 2016-10-31 15:59 - 00112999 _____ C:\Users\Augusto\Downloads\WhatsApp Image 2016-10-22 at 23.05.16.jpeg
2016-10-31 15:59 - 2016-10-31 15:59 - 00105210 _____ C:\Users\Augusto\Downloads\WhatsApp Image 2016-10-22 at 23.08.34.jpeg
2016-10-26 16:54 - 2016-11-07 16:54 - 00003436 _____ C:\Windows\System32\Tasks\SteamClient
2016-10-25 14:57 - 2016-10-25 14:57 - 00281216 _____ C:\Windows\Minidump\102516-21153-01.dmp
2016-10-16 22:38 - 2016-10-16 22:38 - 00001222 _____ C:\Users\Augusto\Desktop\Death to Spies.lnk
2016-10-16 22:38 - 2016-10-16 22:38 - 00000000 ____D C:\Users\Augusto\AppData\Roaming\Death to Spies
2016-10-16 17:26 - 2016-11-07 16:54 - 00000000 ____D C:\Users\Augusto\AppData\LocalLow\uTorrent
2016-10-16 01:37 - 2016-10-16 18:50 - 00000000 ____D C:\Users\Augusto\Downloads\Prisoners (2013)
2016-10-16 01:02 - 2016-10-16 01:02 - 00000000 ____D C:\Users\Augusto\Downloads\[R.G. Mechanics] Death to Spies. Gold Edition
2016-10-14 18:43 - 2016-10-14 18:46 - 04391322 _____ C:\Users\Augusto\Downloads\O Grande Livro das Coisas Horri - Matthew White.pdf
2016-10-13 01:10 - 2016-11-06 21:39 - 00000000 ____D C:\Users\Augusto\Downloads\Mafia.III-CODEX

==================== Um Mês Modificados arquivos e pastas ========

(Se uma entrada for incluída na fixlist, o arquivo/pasta será movido.)

2016-11-07 20:48 - 2015-07-07 23:58 - 00000000 ____D C:\Users\Augusto\AppData\Roaming\uTorrent
2016-11-07 20:45 - 2015-06-30 14:02 - 00000000 ____D C:\Users\Todos os Usuários\Package Cache
2016-11-07 20:45 - 2015-06-30 14:02 - 00000000 ____D C:\ProgramData\Package Cache
2016-11-07 20:21 - 2015-06-30 14:42 - 00001070 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2016-11-07 20:19 - 2015-06-30 18:56 - 00000000 ____D C:\Program Files (x86)\Steam
2016-11-07 19:51 - 2015-06-30 14:10 - 01609860 _____ C:\Windows\SysWOW64\PerfStringBackup.INI
2016-11-07 19:51 - 2009-07-14 15:55 - 00708838 _____ C:\Windows\system32\prfh0416.dat
2016-11-07 19:51 - 2009-07-14 15:55 - 00148566 _____ C:\Windows\system32\prfc0416.dat
2016-11-07 19:51 - 2009-07-14 03:13 - 01655368 _____ C:\Windows\system32\PerfStringBackup.INI
2016-11-07 19:51 - 2009-07-14 01:20 - 00000000 ____D C:\Windows\inf
2016-11-07 18:21 - 2015-06-30 14:42 - 00001066 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2016-11-07 17:16 - 2016-10-03 18:50 - 00005016 _____ C:\Windows\System32\Tasks\Microsoft Office 15 Sync Maintenance for Augusto-PC-Augusto Augusto-PC
2016-11-07 17:01 - 2009-07-14 02:45 - 00014016 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2016-11-07 17:01 - 2009-07-14 02:45 - 00014016 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2016-11-07 16:54 - 2009-07-14 03:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2016-11-07 15:40 - 2016-08-10 17:22 - 00000000 ____D C:\Users\Augusto\Downloads\Odonto
2016-11-06 21:35 - 2015-06-30 20:15 - 00000000 ____D C:\Users\Augusto\AppData\Roaming\vlc
2016-11-06 21:10 - 2015-06-30 19:43 - 00000000 ____D C:\Program Files (x86)\The KMPlayer
2016-11-06 20:54 - 2015-07-31 21:51 - 00000000 ____D C:\Program Files (x86)\R.G. Mechanics
2016-11-06 20:52 - 2015-01-07 20:22 - 00000000 ____D C:\Games
2016-11-04 12:12 - 2015-06-30 14:42 - 00000000 ____D C:\Users\Augusto\AppData\Local\Google
2016-10-26 17:46 - 2015-06-30 14:45 - 00002197 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2016-10-25 14:57 - 2015-06-30 18:19 - 00000000 ____D C:\Windows\Minidump
2016-10-16 22:38 - 2015-07-31 22:27 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\R.G. Mechanics
2016-10-15 14:05 - 2016-02-10 21:22 - 00000000 ___SD C:\Users\Augusto\AppData\LocalLow\Temp
2016-10-12 23:46 - 2016-04-10 19:34 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\by.xatab
2016-10-12 22:52 - 2016-09-15 14:08 - 00000000 ____D C:\Program Files (x86)\Wolfenstein The New Order
2016-10-08 18:57 - 2015-01-06 14:09 - 00000000 ____D C:\Users\Augusto\Downloads\Jogos

==================== Arquivos na raiz de alguns diretórios =======

2015-11-22 01:43 - 2015-11-22 01:43 - 0007605 _____ () C:\Users\Augusto\AppData\Local\Resmon.ResmonCfg
2015-06-30 14:33 - 2015-07-24 14:15 - 0001358 _____ () C:\ProgramData\hpzinstall.log

Alguns arquivos em TEMP:
====================
C:\Users\Augusto\AppData\Local\Temp\comver.dll
C:\Users\Augusto\AppData\Local\Temp\FoxitUpdater.exe
C:\Users\Augusto\AppData\Local\Temp\Intellectuals+paul+johnso__10924_i1740779849_il984242.exe
C:\Users\Augusto\AppData\Local\Temp\LMkRstPt.exe
C:\Users\Augusto\AppData\Local\Temp\MP3_Patch_Update_1_0_0_196.exe
C:\Users\Augusto\AppData\Local\Temp\Nexus Mod Manager-0.61.14.exe
C:\Users\Augusto\AppData\Local\Temp\radeon-crimson-15.11-minimalsetup.exe
C:\Users\Augusto\AppData\Local\Temp\raptrpatch.exe
C:\Users\Augusto\AppData\Local\Temp\raptr_stub.exe
C:\Users\Augusto\AppData\Local\Temp\Stremio_install_1453853074334.exe
C:\Users\Augusto\AppData\Local\Temp\tmd_34018321.exe
C:\Users\Augusto\AppData\Local\Temp\tmd_34019276.exe
C:\Users\Augusto\AppData\Local\Temp\tmp8BAB.exe
C:\Users\Augusto\AppData\Local\Temp\tmpE053.exe
C:\Users\Augusto\AppData\Local\Temp\UmmyVideoDownloader.exe
C:\Users\Augusto\AppData\Local\Temp\xmlUpdater.exe


==================== Bamital & volsnap ======================

(Não há correção automática para arquivos que não passaram na verificação.)

C:\Windows\system32\winlogon.exe => O arquivo é assinado digitalmente
C:\Windows\system32\wininit.exe => O arquivo é assinado digitalmente
C:\Windows\SysWOW64\wininit.exe => O arquivo é assinado digitalmente
C:\Windows\explorer.exe => O arquivo é assinado digitalmente
C:\Windows\SysWOW64\explorer.exe => O arquivo é assinado digitalmente
C:\Windows\system32\svchost.exe => O arquivo é assinado digitalmente
C:\Windows\SysWOW64\svchost.exe => O arquivo é assinado digitalmente
C:\Windows\system32\services.exe => O arquivo é assinado digitalmente
C:\Windows\system32\User32.dll => O arquivo é assinado digitalmente
C:\Windows\SysWOW64\User32.dll => O arquivo é assinado digitalmente
C:\Windows\system32\userinit.exe => O arquivo é assinado digitalmente
C:\Windows\SysWOW64\userinit.exe => O arquivo é assinado digitalmente
C:\Windows\system32\rpcss.dll => O arquivo é assinado digitalmente
C:\Windows\system32\dnsapi.dll => O arquivo é assinado digitalmente
C:\Windows\SysWOW64\dnsapi.dll => O arquivo é assinado digitalmente
C:\Windows\system32\Drivers\volsnap.sys => O arquivo é assinado digitalmente


LastRegBack: 2016-10-27 13:50

==================== Fim de FRST.txt ============================

Publicité


Signaler le contenu de ce document

Publicité