Publicité
Publicité
Format du document : text/plain
Prévisualisation
Resultado do exame da Farbar Recovery Scan Tool (FRST) (x86) Versão: 28-01-2017 01
Executado por Joao Francisco (administrador) em JOAOFRANCISCO (29-01-2017 12:59:12)
Executando a partir de C:\Users\Joao Francisco\Downloads
Perfis Carregados: Joao Francisco (Perfis Disponíveis: Joao Francisco)
Platform: Microsoft Windows 7 Ultimate (X86) Idioma: Português (Brasil)
Internet Explorer Versão 8 (Navegador padrão: FF)
Modo da Inicialização: Normal
Tutorial da Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Processos (Whitelisted) =================
(Se uma entrada for incluída na fixlist, o processo será fechado. O arquivo não será movido.)
(GAS Tecnologia) C:\Program Files\GbPlugin\GbpSv.exe
(ALWIL Software) C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
(Adobe Systems Incorporated) C:\Program Files\Common Files\Adobe\Adobe Desktop Common\ElevationManager\AdobeUpdateService.exe
(Adobe Systems, Incorporated) C:\Program Files\Common Files\Adobe\AdobeGCClient\AGSService.exe
(Microsoft Corporation) C:\Windows\System32\LogonUI.exe
(GAS Tecnologia) C:\Program Files\GbPlugin\GbpSv.exe
(Google Inc.) C:\Program Files\Google\Update\1.3.32.7\GoogleCrashHandler.exe
(ALWIL Software) C:\Program Files\Alwil Software\Avast5\AvastUI.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
(Adobe Systems Incorporated) C:\Program Files\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(BitTorrent Inc.) C:\Users\Joao Francisco\AppData\Roaming\uTorrent\uTorrent.exe
(Microsoft Corporation) C:\Windows\System32\StikyNot.exe
(BitTorrent Inc.) C:\Users\Joao Francisco\AppData\Roaming\uTorrent\updates\3.4.9_43085\utorrentie.exe
(BitTorrent Inc.) C:\Users\Joao Francisco\AppData\Roaming\uTorrent\updates\3.4.9_43085\utorrentie.exe
(Adobe Systems Incorporated) C:\Program Files\Common Files\Adobe\OOBE\PDApp\IPC\AdobeIPCBroker.exe
(Adobe Systems Incorporated) C:\Program Files\Common Files\Adobe\Adobe Desktop Common\ADS\Adobe Desktop Service.exe
(Adobe Systems Incorporated) C:\Program Files\Common Files\Adobe\Adobe Desktop Common\HEX\Adobe CEF Helper.exe
() C:\Program Files\Adobe\Adobe Creative Cloud\CoreSync\CoreSync.exe
(Adobe Systems Incorporated) C:\Program Files\Adobe\Adobe Creative Cloud\CCXProcess\CCXProcess.exe
(Node.js) C:\Program Files\Adobe\Adobe Creative Cloud\CCXProcess\libs\node.exe
(Adobe Systems Incorporated) C:\Program Files\Adobe\Adobe Creative Cloud\CCLibrary\CCLibrary.exe
(Node.js) C:\Program Files\Adobe\Adobe Creative Cloud\CCLibrary\libs\node.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
==================== Registro (Whitelisted) ====================
(Se uma entrada for incluída na fixlist, o ítem no Registro será restaurado para o padrão ou removido. O arquivo não será movido.)
HKLM\...\Run: [avast5] => C:\Program Files\Alwil Software\Avast5\avastUI.exe [2769336 2010-03-09] (ALWIL Software)
HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [508128 2016-07-01] (Adobe Systems Incorporated)
HKLM\...\Run: [AdobeCS6ServiceManager] => C:\Program Files\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe [1073312 2012-03-09] (Adobe Systems Incorporated)
HKLM\...\Run: [SwitchBoard] => C:\Program Files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated)
HKLM\...\Run: [GrooveMonitor] => C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe [31016 2006-10-27] (Microsoft Corporation)
HKLM\...\Run: [Adobe Creative Cloud] => C:\Program Files\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe [2384984 2016-12-09] (Adobe Systems Incorporated)
Winlogon\Notify\ GbPluginCef: C:\Program Files\GbPlugin\gbiehCef.dll [2016-08-10] (Caixa Economica Federal)
HKU\S-1-5-21-2200033659-2579681809-1596942645-1000\...\Run: [uTorrent] => C:\Users\Joao Francisco\AppData\Roaming\uTorrent\uTorrent.exe [1979072 2017-01-11] (BitTorrent Inc.)
HKU\S-1-5-21-2200033659-2579681809-1596942645-1000\...\Run: [RESTART_STICKY_NOTES] => C:\Windows\System32\StikyNot.exe [354304 2009-07-13] (Microsoft Corporation)
HKU\S-1-5-21-2200033659-2579681809-1596942645-1000\...\Run: [AdobeBridge] => [X]
HKU\S-1-5-21-2200033659-2579681809-1596942645-1000\...\MountPoints2: {b3b5e5b3-e1ae-11e6-908c-00e04cc54605} - F:\Lenovo_Suite.exe
ShellExecuteHooks: GbPluginObj Class - {E37CB5F0-51F5-4395-A808-5FA49E399003} - C:\Program Files\GbPlugin\gbiehcef.dll [1903328 2016-08-10] (Caixa Economica Federal)
ShellIconOverlayIdentifiers: [ AccExtIco1] -> {AB9CF9F8-8A96-4F9D-BF21-CE85714C3A47} => C:\Program Files\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x86.dll [2016-10-25] ()
ShellIconOverlayIdentifiers: [ AccExtIco2] -> {853B7E05-C47D-4985-909A-D0DC5C6D7303} => C:\Program Files\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x86.dll [2016-10-25] ()
ShellIconOverlayIdentifiers: [ AccExtIco3] -> {42D38F2E-98E9-4382-B546-E24E4D6D04BB} => C:\Program Files\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x86.dll [2016-10-25] ()
==================== Internet (Whitelisted) ====================
(Se um ítem for incluído na fixlist, sendo um ítem do Registro, será removido ou restaurado para o padrão.)
Tcpip\Parameters: [DhcpNameServer] 177.86.168.11 177.86.168.12
Tcpip\..\Interfaces\{079C3315-41A7-410C-B63A-C481AC97B629}: [DhcpNameServer] 177.86.168.11 177.86.168.12
Tcpip\..\Interfaces\{10DF0204-61E2-4136-9DDD-A0167166079B}: [DhcpNameServer] 177.86.168.11 177.86.168.12
Internet Explorer:
==================
SearchScopes: HKU\S-1-5-21-2200033659-2579681809-1596942645-1000 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
BHO: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll [2006-10-27] (Microsoft Corporation)
BHO: GbIehObj Class -> {C41A1C0E-EA6C-11D4-B1B8-444553540003} -> C:\Program Files\GbPlugin\gbiehcef.dll [2016-08-10] (Caixa Economica Federal)
Handler: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll [2006-10-27] (Microsoft Corporation)
FireFox:
========
FF DefaultProfile: he0a9q95.default
FF ProfilePath: C:\Users\Joao Francisco\AppData\Roaming\Mozilla\Firefox\Profiles\he0a9q95.default [2017-01-29]
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF32_24_0_0_194.dll [2017-01-13] ()
FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.32.7\npGoogleUpdate3.dll [2017-01-26] (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.32.7\npGoogleUpdate3.dll [2017-01-26] (Google Inc.)
FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect32.dll [2016-12-09] (Adobe Systems)
Chrome:
=======
CHR Profile: C:\Users\Joao Francisco\AppData\Local\Google\Chrome\User Data\Default [2017-01-29]
CHR Extension: (Google Apresentações) - C:\Users\Joao Francisco\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2017-01-26]
CHR Extension: (Google Docs) - C:\Users\Joao Francisco\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2017-01-26]
CHR Extension: (Google Drive) - C:\Users\Joao Francisco\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2017-01-26]
CHR Extension: (YouTube) - C:\Users\Joao Francisco\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2017-01-26]
CHR Extension: (Planilhas do Google) - C:\Users\Joao Francisco\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2017-01-26]
CHR Extension: (Documentos Google off-line) - C:\Users\Joao Francisco\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2017-01-26]
CHR Extension: (Pagamentos da Chrome Web Store) - C:\Users\Joao Francisco\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2017-01-26]
CHR Extension: (Gmail) - C:\Users\Joao Francisco\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2017-01-26]
CHR Extension: (Chrome Media Router) - C:\Users\Joao Francisco\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2017-01-26]
==================== Serviços (Whitelisted) ====================
(Se uma entrada for incluída na fixlist, será removida do Registro. O arquivo não será movido, a menos que seja colocado separadamente.)
R2 AdobeUpdateService; C:\Program Files\Common Files\Adobe\Adobe Desktop Common\ElevationManager\AdobeUpdateService.exe [753240 2016-12-09] (Adobe Systems Incorporated)
R2 AGSService; C:\Program Files\Common Files\Adobe\AdobeGCClient\AGSService.exe [2227312 2017-01-19] (Adobe Systems, Incorporated)
R2 avast! Antivirus; C:\Program Files\Alwil Software\Avast5\AvastSvc.exe [40384 2010-03-09] (ALWIL Software)
R3 avast! Mail Scanner; C:\Program Files\Alwil Software\Avast5\AvastSvc.exe [40384 2010-03-09] (ALWIL Software)
R3 avast! Web Scanner; C:\Program Files\Alwil Software\Avast5\AvastSvc.exe [40384 2010-03-09] (ALWIL Software)
S3 cphs; C:\Windows\system32\IntelCpHeciSvc.exe [290224 2015-06-01] (Intel Corporation)
R2 GbpSv; C:\Program Files\GbPlugin\GbpSv.exe [631520 2016-08-10] (GAS Tecnologia)
S3 SwitchBoard; C:\Program Files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated) [Arquivo não assinado]
R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [680960 2009-07-13] (Microsoft Corporation)
===================== Drivers (Whitelisted) ======================
(Se uma entrada for incluída na fixlist, será removida do Registro. O arquivo não será movido, a menos que seja colocado separadamente.)
R2 aswFsBlk; C:\Windows\system32\Drivers\aswFsBlk.sys [19024 2010-03-09] (ALWIL Software)
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [51792 2010-03-09] (ALWIL Software)
R1 aswRdr; C:\Windows\system32\Drivers\aswRdr.sys [23376 2010-03-09] (ALWIL Software)
R1 aswSP; C:\Windows\system32\Drivers\aswSP.sys [162640 2010-03-09] (ALWIL Software)
R1 aswTdi; C:\Windows\system32\Drivers\aswTdi.sys [46672 2010-03-09] (ALWIL Software)
R0 GbpKm; C:\Windows\System32\drivers\GbpKm.sys [49496 2016-08-10] (GAS Tecnologia)
R1 ndisrd; C:\Windows\System32\DRIVERS\gbpndisrdn.sys [29400 2017-01-25] (GAS Tecnologia)
R3 RTL8192Ce; C:\Windows\System32\DRIVERS\rtl8192Ce.sys [1057896 2011-10-05] (Realtek Semiconductor Corporation )
S0 gbpddreg; system32\drivers\gbpddreg32.sys [X]
==================== NetSvcs (Whitelisted) ===================
(Se uma entrada for incluída na fixlist, será removida do Registro. O arquivo não será movido, a menos que seja colocado separadamente.)
==================== Três Meses Criados arquivos e pastas ========
(Se uma entrada for incluída na fixlist, o arquivo/pasta será movido.)
2017-01-29 12:59 - 2017-01-29 13:00 - 00011401 _____ C:\Users\Joao Francisco\Downloads\FRST.txt
2017-01-29 12:59 - 2017-01-29 12:59 - 00000000 ____D C:\FRST
2017-01-29 12:58 - 2017-01-29 12:58 - 01762816 _____ (Farbar) C:\Users\Joao Francisco\Downloads\FRST.exe
2017-01-29 12:43 - 2017-01-29 12:43 - 00016224 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-runtime-l1-1-0.dll
2017-01-29 12:35 - 2017-01-29 12:37 - 00001050 _____ C:\Users\Public\Desktop\Dll-Files Fixer.lnk
2017-01-29 12:35 - 2017-01-29 12:37 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dll-Files Fixer
2017-01-29 12:35 - 2017-01-29 12:37 - 00000000 ____D C:\Program Files\Dll-Files.com Fixer
2017-01-29 12:35 - 2017-01-29 12:35 - 00000298 _____ C:\Windows\Tasks\DLL-Files.Com Fixer_Updates.job
2017-01-29 12:35 - 2017-01-29 12:35 - 00000282 _____ C:\Windows\Tasks\DLL-Files.Com Fixer_MONTHLY.job
2017-01-29 12:35 - 2017-01-29 12:35 - 00000000 ____D C:\Users\Joao Francisco\AppData\Roaming\dll-files.com
2017-01-29 12:35 - 2014-06-10 12:27 - 00017344 _____ (Dll-Files.com) C:\Windows\system32\roboot.exe
2017-01-29 12:34 - 2014-09-29 10:01 - 00000000 ____D C:\Users\Joao Francisco\Desktop\dll files fixer japa tutoriais
2017-01-29 12:33 - 2017-01-29 12:34 - 04950183 _____ C:\Users\Joao Francisco\Downloads\Dll Fixe files crackeado O Deficiente.rar
2017-01-29 12:20 - 2017-01-29 12:20 - 00629006 _____ C:\Users\Joao Francisco\Downloads\Windows6.1-KB2999226-x86.msu
2017-01-29 12:19 - 2017-01-29 12:20 - 13969576 _____ (Microsoft Corporation) C:\Users\Joao Francisco\Downloads\vc_redist.x86(1).exe
2017-01-29 11:44 - 2017-01-29 11:48 - 00000000 ____D C:\Windows\system32\MRT
2017-01-29 11:44 - 2017-01-29 11:44 - 133456224 ____C (Microsoft Corporation) C:\Windows\system32\MRT.exe
2017-01-29 11:41 - 2017-01-29 11:41 - 00000000 ____D C:\Program Files\Intel
2017-01-29 11:41 - 2017-01-29 11:41 - 00000000 ____D C:\Intel
2017-01-29 11:39 - 2011-04-09 03:56 - 00123904 _____ (Microsoft Corporation) C:\Windows\system32\poqexec.exe
2017-01-29 11:14 - 2016-06-25 13:43 - 00301056 _____ (Microsoft Corporation) C:\Windows\system32\EOSNotify.exe
2017-01-29 11:14 - 2014-09-14 22:42 - 02377216 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2017-01-29 11:14 - 2010-12-18 03:29 - 00541184 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2017-01-29 11:13 - 2015-03-19 00:57 - 03963320 _____ (Microsoft Corporation) C:\Windows\system32\ntkrnlpa.exe
2017-01-29 11:13 - 2015-03-19 00:57 - 03908024 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2017-01-29 11:13 - 2013-03-19 02:54 - 00038912 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll
2017-01-29 11:13 - 2013-03-19 00:50 - 00069632 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe
2017-01-29 11:05 - 2017-01-29 11:05 - 14230000 _____ (Microsoft Corporation) C:\Users\Joao Francisco\Downloads\vc_redist.x86.exe
2017-01-29 11:03 - 2012-06-02 20:19 - 01933848 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2017-01-29 11:03 - 2012-06-02 20:19 - 00577048 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2017-01-29 11:03 - 2012-06-02 20:19 - 00053784 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2017-01-29 11:03 - 2012-06-02 20:19 - 00045080 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
2017-01-29 11:03 - 2012-06-02 20:19 - 00035864 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
2017-01-29 11:03 - 2012-06-02 20:12 - 02422272 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2017-01-29 11:03 - 2012-06-02 20:12 - 00088576 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
2017-01-29 11:03 - 2012-06-02 15:19 - 00171904 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
2017-01-29 11:03 - 2012-06-02 15:12 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
2017-01-29 09:18 - 2017-01-29 09:18 - 00001278 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Photoshop CC 2015.5 (32 Bit).lnk
2017-01-28 22:30 - 2017-01-29 09:07 - 00000000 ____D C:\Users\Joao Francisco\Downloads\Adobe Photoshop CC 2015.5 v17.0 Multilingual (x86x64) Incl Patch [SadeemPC]
2017-01-28 22:09 - 2017-01-29 11:55 - 00000000 ___RD C:\Users\Joao Francisco\Creative Cloud Files
2017-01-28 22:09 - 2017-01-29 11:55 - 00000000 ____D C:\Users\Todos os Usuários\boost_interprocess
2017-01-28 22:09 - 2017-01-29 11:55 - 00000000 ____D C:\ProgramData\boost_interprocess
2017-01-28 22:03 - 2017-01-28 22:03 - 00001195 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Creative Cloud.lnk
2017-01-28 22:03 - 2017-01-28 22:03 - 00001183 _____ C:\Users\Public\Desktop\Adobe Creative Cloud.lnk
2017-01-28 21:45 - 2017-01-28 21:46 - 00000000 ____D C:\Users\Joao Francisco\Documents\ATIVADOR PHOTO
2017-01-28 21:36 - 2017-01-28 21:39 - 01562971 _____ C:\Users\Joao Francisco\Downloads\Ativador Adobe CC 2015.5.rar
2017-01-28 21:33 - 2017-01-28 21:33 - 00804440 _____ (Adobe Systems Incorporated) C:\Users\Joao Francisco\Downloads\CreativeCloudSet-Up.exe
2017-01-28 21:28 - 2017-01-28 21:28 - 00761108 _____ C:\Users\Joao Francisco\Downloads\PSCC2015.5.rar
2017-01-28 21:28 - 2016-09-15 12:42 - 00000000 ____D C:\Users\Joao Francisco\Documents\Adobe CC
2017-01-28 21:22 - 2017-01-28 21:22 - 05642320 _____ (Software company) C:\Users\Joao Francisco\Downloads\adobe-photoshop-cc-2015_3314969.exe
2017-01-27 22:34 - 2017-01-29 09:18 - 00000000 ____D C:\Users\Joao Francisco\Documents\Adobe
2017-01-27 22:34 - 2017-01-27 22:34 - 00001260 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Photoshop CC 2015 (32 Bit).lnk
2017-01-27 20:38 - 2017-01-27 20:40 - 21792085 _____ C:\Users\Joao Francisco\Downloads\air.com.adobe.pstouchphone_1.3.7_paid-www.apkhere.com.apk
2017-01-27 20:26 - 2017-01-27 21:20 - 00000000 ____D C:\Users\Joao Francisco\Downloads\Adobe Photoshop CC 2015 (20150529.r.88) (32+64Bit) + Crack
2017-01-27 19:58 - 2015-07-28 14:55 - 271866984 _____ C:\Users\Joao Francisco\Desktop\CameraRaw_9_1_1.exe
2017-01-27 19:43 - 2017-01-27 19:57 - 271106338 _____ C:\Users\Joao Francisco\Downloads\CameraRaw_9_1_1.zip
2017-01-27 19:41 - 2014-06-05 19:02 - 45337784 _____ (Adobe Systems Incorporated) C:\Users\Joao Francisco\Desktop\Camera Raw.8bi
2017-01-27 19:39 - 2017-01-27 19:40 - 30081324 _____ C:\Users\Joao Francisco\Downloads\Camera Raw_8_5_w64bit.zip
2017-01-27 19:37 - 2015-11-06 01:37 - 284107264 ____N C:\Users\Joao Francisco\Downloads\CameraRaw_9_3.exe
2017-01-27 18:39 - 2017-01-27 18:51 - 283296781 _____ C:\Users\Joao Francisco\Downloads\CameraRaw_9_3.zip
2017-01-27 18:16 - 2017-01-27 18:23 - 53211694 _____ C:\Users\Joao Francisco\Downloads\Pincéis do tinho caricatura e desenho.abr
2017-01-27 18:14 - 2017-01-27 18:14 - 05302919 _____ C:\Users\Joao Francisco\Downloads\test.psd
2017-01-27 17:39 - 2017-01-28 00:27 - 00077904 _____ C:\Users\Joao Francisco\Downloads\WhatsApp Image 2017-01-27 at 17.39.03.jpeg
2017-01-27 14:12 - 2017-01-27 14:12 - 00000000 ____D C:\Users\Joao Francisco\Documents\Corel
2017-01-27 08:36 - 2017-01-27 08:36 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office
2017-01-27 08:35 - 2006-10-26 19:56 - 00032592 _____ (Microsoft Corporation) C:\Windows\system32\msonpmon.dll
2017-01-27 08:34 - 2017-01-27 08:34 - 00000000 ____D C:\Program Files\Microsoft Works
2017-01-27 08:33 - 2017-01-27 08:33 - 00000000 ____D C:\Program Files\Microsoft Visual Studio
2017-01-27 08:33 - 2017-01-27 08:33 - 00000000 ____D C:\Program Files\Common Files\DESIGNER
2017-01-27 08:32 - 2017-01-27 08:32 - 00000000 ____D C:\Windows\PCHEALTH
2017-01-27 08:30 - 2017-01-27 08:30 - 00000000 ____D C:\Program Files\Microsoft Visual Studio 8
2017-01-27 08:29 - 2017-01-27 08:36 - 00000000 ____D C:\Users\Todos os Usuários\Microsoft Help
2017-01-27 08:29 - 2017-01-27 08:34 - 00000000 ____D C:\Program Files\Microsoft Office
2017-01-27 08:29 - 2017-01-27 08:29 - 00000000 ____D C:\Users\Joao Francisco\AppData\Local\Microsoft Help
2017-01-27 08:28 - 2017-01-27 08:28 - 00000000 __RHD C:\MSOCache
2017-01-27 08:07 - 2017-01-29 11:54 - 00000000 ____D C:\Users\Joao Francisco\AppData\LocalLow\uTorrent
2017-01-26 21:44 - 2017-01-26 21:55 - 46218084 _____ C:\Users\Public\Documents\MyAppTemplates-Filters-Sample.zip
2017-01-26 21:13 - 2017-01-26 23:01 - 1756130200 _____ (Google Inc.) C:\Users\Joao Francisco\Downloads\android-studio-bundle-145.3537739-windows.exe
2017-01-26 19:07 - 2017-01-26 19:07 - 00000638 _____ C:\Users\Joao Francisco\Desktop\notas.txt
2017-01-26 12:36 - 2017-01-26 12:36 - 00002215 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2017-01-26 12:36 - 2017-01-26 12:36 - 00002203 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2017-01-26 12:34 - 2017-01-26 12:36 - 00000000 ____D C:\Program Files\Google
2017-01-26 12:33 - 2017-01-26 12:44 - 00000000 ____D C:\Users\Joao Francisco\AppData\Local\Google
2017-01-26 12:33 - 2017-01-26 12:33 - 01065376 _____ (Google Inc.) C:\Users\Joao Francisco\Downloads\ChromeSetup.exe
2017-01-25 15:25 - 2017-01-29 11:54 - 00000000 ____D C:\Users\Todos os Usuários\GbPlugin
2017-01-25 15:25 - 2017-01-29 11:54 - 00000000 ____D C:\ProgramData\GbPlugin
2017-01-25 15:25 - 2017-01-27 08:06 - 00000000 ____D C:\Program Files\GbPlugin
2017-01-25 15:25 - 2017-01-25 15:25 - 00029400 _____ (GAS Tecnologia) C:\Windows\system32\Drivers\gbpndisrdn.sys
2017-01-25 15:25 - 2017-01-25 15:25 - 00000000 ____D C:\Users\Todos os Usuários\GAS Tecnologia
2017-01-25 15:25 - 2017-01-25 15:25 - 00000000 ____D C:\ProgramData\GAS Tecnologia
2017-01-25 15:25 - 2016-08-10 15:58 - 00049496 _____ (GAS Tecnologia) C:\Windows\system32\Drivers\gbpkm.sys
2017-01-25 15:24 - 2017-01-29 12:35 - 00000000 ____D C:\Users\Todos os Usuários\Temp
2017-01-25 15:24 - 2017-01-29 12:35 - 00000000 ____D C:\ProgramData\Temp
2017-01-25 15:23 - 2017-01-25 15:23 - 02891312 _____ (CAIXA) C:\Users\Joao Francisco\Downloads\GBPCEF.exe
2017-01-24 14:51 - 2017-01-24 14:51 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_WinUsb_01009.Wdf
2017-01-24 14:49 - 2017-01-24 14:50 - 00000000 ____D C:\Program Files\LenovoUsbDriver
2017-01-24 14:48 - 2017-01-24 14:48 - 09832044 _____ C:\Users\Joao Francisco\Downloads\LenovoUsbDriver_v1.1.16.zip
2017-01-24 14:44 - 2017-01-24 14:44 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Minimal ADB and Fastboot
2017-01-24 14:44 - 2017-01-24 14:44 - 00000000 ____D C:\Program Files\Minimal ADB and Fastboot
2017-01-24 14:43 - 2017-01-24 14:43 - 00918991 _____ C:\Users\Joao Francisco\Downloads\minimal_adb_fastboot_v1.4_setup.zip
2017-01-24 14:43 - 2016-06-06 19:14 - 00945381 _____ (Sam Rodberg ) C:\Users\Joao Francisco\Desktop\minimal_adb_fastboot_v1.4_setup.exe
2017-01-24 14:34 - 2016-07-19 12:03 - 00000000 ____D C:\Users\Joao Francisco\Desktop\Lenovo FRP
2017-01-24 14:33 - 2017-01-24 14:34 - 00551764 _____ C:\Users\Joao Francisco\Downloads\Lenovo-FRP.rar
2017-01-24 13:14 - 2017-01-29 12:15 - 00000000 ____D C:\Users\Joao Francisco\AppData\LocalLow\Mozilla
2017-01-24 11:52 - 2017-01-24 11:52 - 00287064 _____ C:\Users\Joao Francisco\Downloads\PROGRAMAÇÃO_4ºSemNacVerPDT (1).pdf
2017-01-24 02:57 - 2017-01-24 02:57 - 00000000 ____D C:\Users\Joao Francisco\AppData\Roaming\StageManager.BD092818F67280F4B42B04877600987F0111B594.1
2017-01-24 02:54 - 2017-01-24 02:54 - 00000000 ____D C:\Users\Joao Francisco\AppData\LocalLow\Adobe
2017-01-24 02:44 - 2016-04-29 14:23 - 00000000 ____D C:\Users\Joao Francisco\Downloads\CorelDraw Graphics Suite X8 Multilanguage 32 e 64 Bits
2017-01-24 02:39 - 2017-01-24 02:39 - 00001169 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Photoshop CS6.lnk
2017-01-24 02:37 - 2017-01-24 02:37 - 00001131 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Bridge CS6.lnk
2017-01-24 02:35 - 2017-01-24 02:35 - 00001481 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe ExtendScript Toolkit CS6.lnk
2017-01-23 22:23 - 2017-01-24 00:44 - 2047469266 ____R C:\Users\Joao Francisco\Downloads\CorelDraw X8 Graphics Suite X8 Multilanguage 32 e 64 Bits PT-BR.rar
2017-01-23 22:21 - 2017-01-23 22:22 - 00000000 ____D C:\Users\Joao Francisco\Downloads\Adobe Photoshop CS6 Extended x86 x64 Portugues BR
2017-01-20 23:19 - 2017-01-20 23:19 - 01210470 _____ (Vivid Document Imaging Technologies ) C:\Users\Joao Francisco\Downloads\Baixaki_pdf-viewer [1].exe
2017-01-20 23:19 - 2017-01-20 23:19 - 00001086 _____ C:\Users\Joao Francisco\Desktop\PDF Viewer for Windows 8.lnk
2017-01-20 23:19 - 2017-01-20 23:19 - 00000048 _____ C:\Users\Joao Francisco\Desktop\Create PDF files.url
2017-01-20 23:19 - 2017-01-20 23:19 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PDF Viewer for Windows 8
2017-01-20 23:19 - 2017-01-20 23:19 - 00000000 ____D C:\Program Files\PDF Viewer for Windows 8
2017-01-20 23:18 - 2017-01-20 23:19 - 01806672 _____ (App Lite ) C:\Users\Joao Francisco\Downloads\Baixaki_pdf-viewer.exe
2017-01-20 23:18 - 2017-01-20 23:18 - 00011780 _____ C:\Users\Joao Francisco\Downloads\33160700776574001390550050104561181358938865.pdf
2017-01-16 12:39 - 2017-01-16 12:43 - 00000000 ____D C:\Users\Joao Francisco\Downloads\Fontes
2017-01-15 23:20 - 2017-01-15 23:20 - 38768459 _____ C:\Users\Joao Francisco\Downloads\_gen.apk
2017-01-15 16:54 - 2017-01-27 21:35 - 00000000 ___SD C:\Users\Joao Francisco\AppData\LocalLow\Temp
2017-01-15 14:59 - 2017-01-15 15:05 - 39642851 _____ C:\Users\Joao Francisco\Downloads\LINHAINFINITAAAAA.apk
2017-01-15 13:52 - 2017-01-15 13:57 - 38585702 _____ C:\Users\Joao Francisco\Downloads\8 Ball Pool Jhonny EuSouAndroid.com.apk
2017-01-15 13:07 - 2017-01-15 13:07 - 60269654 _____ C:\Users\Joao Francisco\Downloads\VibeDanceDineyCorreia.zip
2017-01-15 13:03 - 2017-01-15 13:03 - 60357085 _____ C:\Users\Joao Francisco\Downloads\TopDance20DJWelligton.zip
2017-01-13 21:32 - 2017-01-13 21:32 - 00000000 ____D C:\Users\Joao Francisco\AppData\Local\Macromedia
2017-01-13 19:38 - 2017-01-27 22:01 - 00000000 ____D C:\Program Files\Mozilla Firefox
2017-01-13 18:02 - 2017-01-13 18:02 - 00000000 ____D C:\Users\Joao Francisco\AppData\Local\CEF
2017-01-13 17:59 - 2017-01-29 11:06 - 00000000 ____D C:\Users\Todos os Usuários\Package Cache
2017-01-13 17:59 - 2017-01-29 11:06 - 00000000 ____D C:\ProgramData\Package Cache
2017-01-13 17:59 - 2017-01-13 18:48 - 00000000 ____D C:\Program Files\McAfee
2017-01-13 17:47 - 2017-01-29 12:56 - 00000902 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2017-01-13 17:47 - 2017-01-13 18:34 - 00000000 ____D C:\Users\Todos os Usuários\McAfee
2017-01-13 17:47 - 2017-01-13 18:34 - 00000000 ____D C:\ProgramData\McAfee
2017-01-13 17:47 - 2017-01-13 17:47 - 00802904 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2017-01-13 17:47 - 2017-01-13 17:47 - 00144472 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl
2017-01-12 12:42 - 2017-01-12 12:42 - 01051734 _____ C:\Users\Joao Francisco\Downloads\Likesforinsta2.0.apk
2017-01-12 11:48 - 2017-01-12 11:48 - 00095416 _____ C:\Users\Joao Francisco\Downloads\00809.zip
2017-01-12 11:41 - 2017-01-12 11:41 - 00000000 ____D C:\Users\Joao Francisco\Downloads\portable-coreldraw-x6-pt-br
2017-01-11 23:31 - 2017-01-11 23:35 - 306533301 _____ C:\Users\Joao Francisco\Downloads\portable-coreldraw-x6-pt-br.rar
2017-01-11 23:19 - 2017-01-27 22:34 - 00000000 ____D C:\Users\Todos os Usuários\regid.1986-12.com.adobe
2017-01-11 23:19 - 2017-01-27 22:34 - 00000000 ____D C:\ProgramData\regid.1986-12.com.adobe
2017-01-11 23:19 - 2017-01-11 23:19 - 00001169 _____ C:\Users\Joao Francisco\Desktop\Adobe Fireworks CS6.lnk
2017-01-11 23:18 - 2017-01-11 23:18 - 00001315 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Extension Manager CS6.lnk
2017-01-11 23:18 - 2017-01-11 23:18 - 00001169 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Fireworks CS6.lnk
2017-01-11 23:17 - 2017-01-29 09:18 - 00000000 ____D C:\Program Files\Adobe
2017-01-11 23:17 - 2017-01-13 17:47 - 00000000 ____D C:\Windows\system32\Macromed
2017-01-11 23:17 - 2017-01-11 23:17 - 00000967 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Help.lnk
2017-01-11 23:17 - 2017-01-11 23:17 - 00000000 ____D C:\Users\Usuário Padrão\AppData\Roaming\Macromedia
2017-01-11 23:17 - 2017-01-11 23:17 - 00000000 ____D C:\Users\Default\AppData\Roaming\Macromedia
2017-01-11 23:17 - 2017-01-11 23:17 - 00000000 ____D C:\Users\Default User\AppData\Roaming\Macromedia
2017-01-11 23:17 - 2017-01-11 23:17 - 00000000 ____D C:\Program Files\Common Files\Adobe AIR
2017-01-11 23:15 - 2017-01-29 09:18 - 00000000 ____D C:\Program Files\Common Files\Adobe
2017-01-11 23:10 - 2017-01-29 09:18 - 00000000 ____D C:\Users\Joao Francisco\AppData\Roaming\Adobe
2017-01-11 23:10 - 2017-01-29 09:11 - 00000000 ____D C:\Users\Todos os Usuários\Adobe
2017-01-11 23:10 - 2017-01-29 09:11 - 00000000 ____D C:\ProgramData\Adobe
2017-01-11 23:10 - 2017-01-11 23:10 - 00000000 ____D C:\Users\Joao Francisco\AppData\Roaming\Macromedia
2017-01-11 23:09 - 2017-01-29 11:55 - 00000000 ____D C:\Users\Joao Francisco\AppData\Local\Adobe
2017-01-11 22:52 - 2013-06-07 02:59 - 00000000 ____D C:\Users\Joao Francisco\Downloads\Adobe Fireworks CS6
2017-01-11 22:40 - 2017-01-11 22:50 - 65444688 _____ (Microsoft Corporation) C:\Users\Joao Francisco\Downloads\NDP46-KB3045557-x86-x64-AllOS-ENU.exe
2017-01-11 22:34 - 2009-11-25 11:47 - 01130824 _____ (Microsoft Corporation) C:\Windows\system32\dfshim.dll
2017-01-11 22:34 - 2009-11-25 11:47 - 00297808 _____ (Microsoft Corporation) C:\Windows\system32\mscoree.dll
2017-01-11 22:34 - 2009-11-25 11:47 - 00295264 _____ (Microsoft Corporation) C:\Windows\system32\PresentationHost.exe
2017-01-11 22:34 - 2009-11-25 11:47 - 00099176 _____ (Microsoft Corporation) C:\Windows\system32\PresentationHostProxy.dll
2017-01-11 22:34 - 2009-11-25 11:47 - 00049472 _____ (Microsoft Corporation) C:\Windows\system32\netfxperf.dll
2017-01-11 22:24 - 2017-01-11 22:49 - 554042197 ____R C:\Users\Joao Francisco\Downloads\Adobe Fireworks CS6.zip
2017-01-11 22:23 - 2017-01-11 22:23 - 00000000 ____D C:\Users\Joao Francisco\AppData\Roaming\WinRAR
2017-01-11 22:03 - 2017-01-11 22:03 - 00000000 ____D C:\Users\Joao Francisco\Documents\Backup
2017-01-11 21:24 - 2016-10-26 16:29 - 00407720 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
2017-01-11 21:10 - 2017-01-11 22:23 - 1971255235 _____ C:\Users\Joao Francisco\Downloads\CorelDRAW Graphics Suite X8 18.0.0.448 Multilingual + Keygen [SadeemPC].zip
2017-01-11 21:09 - 2017-01-27 12:33 - 00100896 _____ C:\Users\Joao Francisco\AppData\Local\GDIPFONTCACHEV1.DAT
2017-01-11 21:07 - 2017-01-11 21:07 - 00000865 _____ C:\Users\Joao Francisco\Desktop\µTorrent.lnk
2017-01-11 21:07 - 2017-01-11 21:07 - 00000845 _____ C:\Users\Joao Francisco\AppData\Roaming\Microsoft\Windows\Start Menu\µTorrent.lnk
2017-01-11 21:06 - 2017-01-29 12:59 - 00000000 ____D C:\Users\Joao Francisco\AppData\Roaming\uTorrent
2017-01-11 21:05 - 2017-01-11 20:11 - 00000000 ____D C:\Windows\Panther
2017-01-11 20:56 - 2017-01-27 22:01 - 00000000 ____D C:\Program Files\Mozilla Maintenance Service
2017-01-11 20:56 - 2017-01-11 20:57 - 00000000 ____D C:\Users\Joao Francisco\AppData\Roaming\Mozilla
2017-01-11 20:56 - 2017-01-11 20:57 - 00000000 ____D C:\Users\Joao Francisco\AppData\Local\Mozilla
2017-01-11 20:56 - 2017-01-11 20:56 - 00001121 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2017-01-11 20:56 - 2017-01-11 20:56 - 00001109 _____ C:\Users\Public\Desktop\Mozilla Firefox.lnk
2017-01-11 20:56 - 2017-01-11 20:56 - 00000000 ____D C:\Users\Todos os Usuários\Mozilla
2017-01-11 20:56 - 2017-01-11 20:56 - 00000000 ____D C:\ProgramData\Mozilla
2017-01-11 20:49 - 2011-10-05 22:23 - 01057896 _____ (Realtek Semiconductor Corporation ) C:\Windows\system32\Drivers\rtl8192ce.sys
2017-01-11 20:44 - 2017-01-11 20:44 - 00000000 ____D C:\Program Files\REALTEK RTL8187SE Wireless LAN Driver
2017-01-11 20:44 - 2009-10-29 11:24 - 00373248 _____ (Realtek Semiconductor Corporation ) C:\Windows\system32\Drivers\rtl8187Se.sys
2017-01-11 20:44 - 2009-04-02 10:27 - 00188416 _____ (Realtek Semiconductor Corp. ) C:\Windows\system32\RTLExtUI.dll
2017-01-11 20:44 - 2009-04-02 10:27 - 00188416 _____ (Realtek Semiconductor Corp. ) C:\Windows\RTLExtUI.dll
2017-01-11 20:44 - 2009-03-31 14:31 - 00380928 _____ (Realtek) C:\Windows\system32\RtlUI2.exe
2017-01-11 20:44 - 2009-03-31 14:31 - 00380928 _____ (Realtek) C:\Windows\RtlUI2.exe
2017-01-11 20:44 - 2008-07-01 12:31 - 00614400 _____ (Realtek Semiconductor Corp. ) C:\Windows\system32\Rtlihvs.dll
2017-01-11 20:44 - 2008-07-01 12:31 - 00614400 _____ (Realtek Semiconductor Corp. ) C:\Windows\Rtlihvs.dll
2017-01-11 20:38 - 2017-01-11 20:50 - 00000000 ____D C:\Program Files\REALTEK PCIE Wireless LAN Driver
2017-01-11 20:38 - 2017-01-11 20:38 - 00000000 ____D C:\Program Files\Cisco
2017-01-11 20:38 - 2012-02-04 14:27 - 01118312 _____ (Realtek Semiconductor Corporation ) C:\Windows\system32\Drivers\rtl8192se.sys
2017-01-11 20:38 - 2010-12-01 09:31 - 00451072 _____ C:\Windows\system32\ISSRemoveSP.exe
2017-01-11 20:35 - 2017-01-11 20:35 - 00000000 ____H C:\Windows\system32\Drivers\Msft_User_WpdMtpDr_01_09_00.Wdf
2017-01-11 20:25 - 2017-01-11 20:25 - 00000000 ____D C:\Program Files\Qualcomm Atheros WiFi Driver Installation
2017-01-11 20:25 - 2012-01-15 08:37 - 00072522 _____ C:\Windows\system32\athrext.cat
2017-01-11 20:25 - 2012-01-10 21:39 - 02231808 _____ (Atheros Communications, Inc.) C:\Windows\system32\athr.sys
2017-01-11 20:24 - 2017-01-11 20:24 - 00000000 ____D C:\Users\Todos os Usuários\Qualcomm Atheros
2017-01-11 20:24 - 2017-01-11 20:24 - 00000000 ____D C:\ProgramData\Qualcomm Atheros
2017-01-11 20:22 - 2017-01-11 20:49 - 00000000 ___HD C:\Program Files\InstallShield Installation Information
2017-01-11 20:22 - 2017-01-11 20:22 - 00000000 ____D C:\Program Files\Realtek
2017-01-11 20:22 - 2011-04-22 02:17 - 00381032 _____ (Realtek ) C:\Windows\system32\Drivers\Rt86win7.sys
2017-01-11 20:22 - 2011-04-22 02:17 - 00100896 _____ (Realtek Semiconductor Corporation) C:\Windows\system32\RTNUninst32.dll
2017-01-11 20:22 - 2011-04-22 02:17 - 00080416 _____ C:\Windows\system32\RtNicProp32.dll
2017-01-11 20:20 - 2017-01-11 20:20 - 00002009 _____ C:\Users\Public\Desktop\avast! Free Antivirus.lnk
2017-01-11 20:20 - 2017-01-11 20:20 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\avast! Free Antivirus
2017-01-11 20:20 - 2010-03-09 08:12 - 00162640 _____ (ALWIL Software) C:\Windows\system32\Drivers\aswSP.sys
2017-01-11 20:20 - 2010-03-09 08:12 - 00046672 _____ (ALWIL Software) C:\Windows\system32\Drivers\aswTdi.sys
2017-01-11 20:20 - 2010-03-09 08:09 - 00023376 _____ (ALWIL Software) C:\Windows\system32\Drivers\aswRdr.sys
2017-01-11 20:20 - 2010-03-09 08:08 - 00051792 _____ (ALWIL Software) C:\Windows\system32\Drivers\aswMonFlt.sys
2017-01-11 20:20 - 2010-03-09 08:08 - 00019024 _____ (ALWIL Software) C:\Windows\system32\Drivers\aswFsBlk.sys
2017-01-11 20:19 - 2017-01-11 20:19 - 00000000 ____D C:\Users\Todos os Usuários\Alwil Software
2017-01-11 20:19 - 2017-01-11 20:19 - 00000000 ____D C:\ProgramData\Alwil Software
2017-01-11 20:19 - 2017-01-11 20:19 - 00000000 ____D C:\Program Files\Alwil Software
2017-01-11 20:19 - 2010-03-09 08:24 - 00153184 _____ (ALWIL Software) C:\Windows\system32\aswBoot.exe
2017-01-11 20:19 - 2010-03-09 08:24 - 00038848 _____ (ALWIL Software) C:\Windows\system32\avastSS.scr
2017-01-11 20:17 - 2017-01-11 20:17 - 00000000 ____D C:\Users\Joao Francisco\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
2017-01-11 20:17 - 2017-01-11 20:17 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
2017-01-11 20:17 - 2017-01-11 20:17 - 00000000 ____D C:\Program Files\WinRAR
2017-01-11 20:16 - 2017-01-29 09:18 - 01633534 _____ C:\Windows\system32\PerfStringBackup.INI
2017-01-11 20:12 - 2017-01-11 20:12 - 00001393 _____ C:\Users\Joao Francisco\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2017-01-11 20:12 - 2017-01-11 20:12 - 00000020 ___SH C:\Users\Joao Francisco\ntuser.ini
2017-01-11 20:12 - 2017-01-11 20:12 - 00000000 _SHDL C:\Users\Joao Francisco\Modelos
2017-01-11 20:12 - 2017-01-11 20:12 - 00000000 _SHDL C:\Users\Joao Francisco\Meus documentos
2017-01-11 20:12 - 2017-01-11 20:12 - 00000000 _SHDL C:\Users\Joao Francisco\Menu Iniciar
2017-01-11 20:12 - 2017-01-11 20:12 - 00000000 _SHDL C:\Users\Joao Francisco\Documents\Minhas músicas
2017-01-11 20:12 - 2017-01-11 20:12 - 00000000 _SHDL C:\Users\Joao Francisco\Documents\Minhas imagens
2017-01-11 20:12 - 2017-01-11 20:12 - 00000000 _SHDL C:\Users\Joao Francisco\Documents\Meus vídeos
2017-01-11 20:12 - 2017-01-11 20:12 - 00000000 _SHDL C:\Users\Joao Francisco\Dados de aplicativos
2017-01-11 20:12 - 2017-01-11 20:12 - 00000000 _SHDL C:\Users\Joao Francisco\Configurações locais
2017-01-11 20:12 - 2017-01-11 20:12 - 00000000 _SHDL C:\Users\Joao Francisco\AppData\Roaming\Microsoft\Windows\Start Menu\Programas
2017-01-11 20:12 - 2017-01-11 20:12 - 00000000 _SHDL C:\Users\Joao Francisco\AppData\Local\Histórico
2017-01-11 20:12 - 2017-01-11 20:12 - 00000000 _SHDL C:\Users\Joao Francisco\AppData\Local\Dados de aplicativos
2017-01-11 20:12 - 2017-01-11 20:12 - 00000000 _SHDL C:\Users\Joao Francisco\Ambiente de rede
2017-01-11 20:12 - 2017-01-11 20:12 - 00000000 _SHDL C:\Users\Joao Francisco\Ambiente de impressão
2017-01-11 20:12 - 2017-01-11 20:12 - 00000000 ____D C:\Users\Joao Francisco\AppData\Local\VirtualStore
2017-01-11 20:12 - 2009-07-14 06:52 - 00000000 ____D C:\Users\Joao Francisco\AppData\Roaming\Media Center Programs
2017-01-11 20:11 - 2017-01-29 09:27 - 00000000 ____D C:\Users\Joao Francisco
2017-01-11 20:11 - 2017-01-11 20:11 - 00000000 _SHDL C:\Users\Usuário Padrão\Documents\Minhas músicas
2017-01-11 20:11 - 2017-01-11 20:11 - 00000000 _SHDL C:\Users\Usuário Padrão\Documents\Minhas imagens
2017-01-11 20:11 - 2017-01-11 20:11 - 00000000 _SHDL C:\Users\Usuário Padrão\Documents\Meus vídeos
2017-01-11 20:11 - 2017-01-11 20:11 - 00000000 _SHDL C:\Users\Usuário Padrão\AppData\Roaming\Microsoft\Windows\Start Menu\Programas
2017-01-11 20:11 - 2017-01-11 20:11 - 00000000 _SHDL C:\Users\Usuário Padrão\AppData\Local\Histórico
2017-01-11 20:11 - 2017-01-11 20:11 - 00000000 _SHDL C:\Users\Usuário Padrão\AppData\Local\Dados de aplicativos
2017-01-11 20:11 - 2017-01-11 20:11 - 00000000 _SHDL C:\Users\Usuário Padrão
2017-01-11 20:11 - 2017-01-11 20:11 - 00000000 _SHDL C:\Users\Todos os Usuários\Modelos
2017-01-11 20:11 - 2017-01-11 20:11 - 00000000 _SHDL C:\Users\Todos os Usuários\Menu Iniciar
2017-01-11 20:11 - 2017-01-11 20:11 - 00000000 _SHDL C:\Users\Todos os Usuários\Favoritos
2017-01-11 20:11 - 2017-01-11 20:11 - 00000000 _SHDL C:\Users\Todos os Usuários\Documentos
2017-01-11 20:11 - 2017-01-11 20:11 - 00000000 _SHDL C:\Users\Todos os Usuários\Dados de aplicativos
2017-01-11 20:11 - 2017-01-11 20:11 - 00000000 _SHDL C:\Users\Todos os Usuários
2017-01-11 20:11 - 2017-01-11 20:11 - 00000000 _SHDL C:\Users\Public\Documents\Minhas músicas
2017-01-11 20:11 - 2017-01-11 20:11 - 00000000 _SHDL C:\Users\Public\Documents\Minhas imagens
2017-01-11 20:11 - 2017-01-11 20:11 - 00000000 _SHDL C:\Users\Public\Documents\Meus vídeos
2017-01-11 20:11 - 2017-01-11 20:11 - 00000000 _SHDL C:\Users\Default\Modelos
2017-01-11 20:11 - 2017-01-11 20:11 - 00000000 _SHDL C:\Users\Default\Meus documentos
2017-01-11 20:11 - 2017-01-11 20:11 - 00000000 _SHDL C:\Users\Default\Menu Iniciar
2017-01-11 20:11 - 2017-01-11 20:11 - 00000000 _SHDL C:\Users\Default\Documents\Minhas músicas
2017-01-11 20:11 - 2017-01-11 20:11 - 00000000 _SHDL C:\Users\Default\Documents\Minhas imagens
2017-01-11 20:11 - 2017-01-11 20:11 - 00000000 _SHDL C:\Users\Default\Documents\Meus vídeos
2017-01-11 20:11 - 2017-01-11 20:11 - 00000000 _SHDL C:\Users\Default\Dados de aplicativos
2017-01-11 20:11 - 2017-01-11 20:11 - 00000000 _SHDL C:\Users\Default\Configurações locais
2017-01-11 20:11 - 2017-01-11 20:11 - 00000000 _SHDL C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programas
2017-01-11 20:11 - 2017-01-11 20:11 - 00000000 _SHDL C:\Users\Default\AppData\Local\Histórico
2017-01-11 20:11 - 2017-01-11 20:11 - 00000000 _SHDL C:\Users\Default\AppData\Local\Dados de aplicativos
2017-01-11 20:11 - 2017-01-11 20:11 - 00000000 _SHDL C:\Users\Default\Ambiente de rede
2017-01-11 20:11 - 2017-01-11 20:11 - 00000000 _SHDL C:\Users\Default\Ambiente de impressão
2017-01-11 20:11 - 2017-01-11 20:11 - 00000000 _SHDL C:\Users\Default User\Documents\Minhas músicas
2017-01-11 20:11 - 2017-01-11 20:11 - 00000000 _SHDL C:\Users\Default User\Documents\Minhas imagens
2017-01-11 20:11 - 2017-01-11 20:11 - 00000000 _SHDL C:\Users\Default User\Documents\Meus vídeos
2017-01-11 20:11 - 2017-01-11 20:11 - 00000000 _SHDL C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programas
2017-01-11 20:11 - 2017-01-11 20:11 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Histórico
2017-01-11 20:11 - 2017-01-11 20:11 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Dados de aplicativos
2017-01-11 20:11 - 2017-01-11 20:11 - 00000000 _SHDL C:\ProgramData\Modelos
2017-01-11 20:11 - 2017-01-11 20:11 - 00000000 _SHDL C:\ProgramData\Microsoft\Windows\Start Menu\Programas
2017-01-11 20:11 - 2017-01-11 20:11 - 00000000 _SHDL C:\ProgramData\Menu Iniciar
2017-01-11 20:11 - 2017-01-11 20:11 - 00000000 _SHDL C:\ProgramData\Favoritos
2017-01-11 20:11 - 2017-01-11 20:11 - 00000000 _SHDL C:\ProgramData\Documentos
2017-01-11 20:11 - 2017-01-11 20:11 - 00000000 _SHDL C:\ProgramData\Dados de aplicativos
2017-01-11 20:11 - 2017-01-11 20:11 - 00000000 _SHDL C:\Program Files\Common Files\Sistema
2017-01-11 20:11 - 2017-01-11 20:11 - 00000000 _SHDL C:\Program Files\Arquivos Comuns
2017-01-11 20:11 - 2017-01-11 20:11 - 00000000 _SHDL C:\Arquivos de Programas
2017-01-11 20:09 - 2017-01-11 20:09 - 00001345 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Media Center.lnk
2017-01-11 20:09 - 2017-01-11 20:09 - 00001326 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows DVD Maker.lnk
2017-01-11 20:08 - 2017-01-11 20:08 - 00000000 ____H C:\Windows\system32\Drivers\Msft_User_WpdFs_01_09_00.Wdf
2016-10-31 15:00 - 2016-10-31 15:00 - 04775584 _____ (Microsoft Corporation) C:\Windows\system32\mfc140u.dll
2016-10-31 15:00 - 2016-10-31 15:00 - 04704920 _____ (Microsoft Corporation) C:\Windows\system32\mfc140.dll
2016-10-31 15:00 - 2016-10-31 15:00 - 00438584 _____ (Microsoft Corporation) C:\Windows\system32\msvcp140.dll
2016-10-31 15:00 - 2016-10-31 15:00 - 00397472 _____ (Microsoft Corporation) C:\Windows\system32\vcamp140.dll
2016-10-31 15:00 - 2016-10-31 15:00 - 00264368 _____ (Microsoft Corporation) C:\Windows\system32\vccorlib140.dll
2016-10-31 15:00 - 2016-10-31 15:00 - 00243008 _____ (Microsoft Corporation) C:\Windows\system32\concrt140.dll
2016-10-31 15:00 - 2016-10-31 15:00 - 00137888 _____ (Microsoft Corporation) C:\Windows\system32\vcomp140.dll
2016-10-31 15:00 - 2016-10-31 15:00 - 00094888 _____ (Microsoft Corporation) C:\Windows\system32\mfcm140u.dll
2016-10-31 15:00 - 2016-10-31 15:00 - 00094360 _____ (Microsoft Corporation) C:\Windows\system32\mfcm140.dll
2016-10-31 15:00 - 2016-10-31 15:00 - 00083792 _____ (Microsoft Corporation) C:\Windows\system32\vcruntime140.dll
2016-10-31 15:00 - 2016-10-31 15:00 - 00075432 _____ (Microsoft Corporation) C:\Windows\system32\mfc140fra.dll
2016-10-31 15:00 - 2016-10-31 15:00 - 00075424 _____ (Microsoft Corporation) C:\Windows\system32\mfc140deu.dll
2016-10-31 15:00 - 2016-10-31 15:00 - 00074400 _____ (Microsoft Corporation) C:\Windows\system32\mfc140esn.dll
2016-10-31 15:00 - 2016-10-31 15:00 - 00073376 _____ (Microsoft Corporation) C:\Windows\system32\mfc140ita.dll
2016-10-31 15:00 - 2016-10-31 15:00 - 00071328 _____ (Microsoft Corporation) C:\Windows\system32\mfc140rus.dll
2016-10-31 15:00 - 2016-10-31 15:00 - 00065696 _____ (Microsoft Corporation) C:\Windows\system32\mfc140enu.dll
2016-10-31 15:00 - 2016-10-31 15:00 - 00054952 _____ (Microsoft Corporation) C:\Windows\system32\mfc140jpn.dll
2016-10-31 15:00 - 2016-10-31 15:00 - 00053920 _____ (Microsoft Corporation) C:\Windows\system32\mfc140kor.dll
2016-10-31 15:00 - 2016-10-31 15:00 - 00046760 _____ (Microsoft Corporation) C:\Windows\system32\mfc140chs.dll
2016-10-31 15:00 - 2016-10-31 15:00 - 00046752 _____ (Microsoft Corporation) C:\Windows\system32\mfc140cht.dll
==================== Três Meses Modificados arquivos e pastas ========
(Se uma entrada for incluída na fixlist, o arquivo/pasta será movido.)
2017-01-29 12:02 - 2009-07-14 02:34 - 00016944 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2017-01-29 12:02 - 2009-07-14 02:34 - 00016944 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2017-01-29 11:53 - 2009-07-14 02:53 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2017-01-29 11:53 - 2009-07-14 02:33 - 03804832 _____ C:\Windows\system32\FNTCACHE.DAT
2017-01-29 11:43 - 2009-07-14 00:37 - 00000000 ____D C:\Windows\inf
2017-01-29 09:18 - 2009-07-14 06:31 - 00705268 _____ C:\Windows\system32\prfh0416.dat
2017-01-29 09:18 - 2009-07-14 06:31 - 00147108 _____ C:\Windows\system32\prfc0416.dat
2017-01-27 08:34 - 2009-07-14 02:52 - 00000000 ____D C:\Program Files\MSBuild
2017-01-27 08:34 - 2009-07-14 00:37 - 00000000 ____D C:\Program Files\Common Files\microsoft shared
2017-01-27 08:33 - 2009-07-14 06:53 - 00000000 ____D C:\Windows\ShellNew
2017-01-27 08:30 - 2009-07-14 00:37 - 00000000 ____D C:\Program Files\Common Files\System
2017-01-27 08:30 - 2009-07-14 00:04 - 00000478 _____ C:\Windows\win.ini
2017-01-26 19:31 - 2009-07-14 00:37 - 00000000 ____D C:\Windows\system32\NDF
2017-01-11 22:25 - 2016-03-21 05:03 - 00000000 ____D C:\Users\Joao Francisco\Downloads\CorelDRAW Graphics Suite X8 18.0.0.448 Multilingual + Keygen [SadeemPC]
2017-01-11 21:04 - 2009-07-14 02:52 - 00028672 _____ C:\Windows\system32\config\BCD-Template
2017-01-11 20:56 - 2009-07-14 00:37 - 00000000 __RHD C:\Users\Public\Libraries
2017-01-11 20:20 - 2009-07-14 00:04 - 00002577 _____ C:\Windows\system32\config.nt
2017-01-11 20:12 - 2009-07-14 00:37 - 00000000 ____D C:\Windows\rescache
2017-01-11 20:11 - 2009-07-14 00:37 - 00000000 ____D C:\Program Files\Windows NT
2017-01-11 20:09 - 2009-07-14 02:52 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
2017-01-11 20:08 - 2009-07-14 00:37 - 00000000 ____D C:\Windows\system32\sysprep
2017-01-11 20:06 - 2009-07-14 06:53 - 00000000 ____D C:\Windows\CSC
Alguns arquivos em TEMP:
====================
2017-01-11 23:14 - 2017-01-11 23:19 - 0009728 _____ () C:\Users\Joao Francisco\AppData\Local\Temp\bassmod.dll
==================== Bamital & volsnap ======================
(Não há correção automática para arquivos que não passaram na verificação.)
C:\Windows\explorer.exe => O arquivo é assinado digitalmente
C:\Windows\system32\winlogon.exe => O arquivo é assinado digitalmente
C:\Windows\system32\wininit.exe => O arquivo é assinado digitalmente
C:\Windows\system32\svchost.exe => O arquivo é assinado digitalmente
C:\Windows\system32\services.exe => O arquivo é assinado digitalmente
C:\Windows\system32\User32.dll => O arquivo é assinado digitalmente
C:\Windows\system32\userinit.exe => O arquivo é assinado digitalmente
C:\Windows\system32\rpcss.dll => O arquivo é assinado digitalmente
C:\Windows\system32\dnsapi.dll => O arquivo é assinado digitalmente
C:\Windows\system32\Drivers\volsnap.sys => O arquivo é assinado digitalmente
LastRegBack: 2017-01-23 20:45
==================== Fim de FRST.txt ============================
Executado por Joao Francisco (administrador) em JOAOFRANCISCO (29-01-2017 12:59:12)
Executando a partir de C:\Users\Joao Francisco\Downloads
Perfis Carregados: Joao Francisco (Perfis Disponíveis: Joao Francisco)
Platform: Microsoft Windows 7 Ultimate (X86) Idioma: Português (Brasil)
Internet Explorer Versão 8 (Navegador padrão: FF)
Modo da Inicialização: Normal
Tutorial da Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Processos (Whitelisted) =================
(Se uma entrada for incluída na fixlist, o processo será fechado. O arquivo não será movido.)
(GAS Tecnologia) C:\Program Files\GbPlugin\GbpSv.exe
(ALWIL Software) C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
(Adobe Systems Incorporated) C:\Program Files\Common Files\Adobe\Adobe Desktop Common\ElevationManager\AdobeUpdateService.exe
(Adobe Systems, Incorporated) C:\Program Files\Common Files\Adobe\AdobeGCClient\AGSService.exe
(Microsoft Corporation) C:\Windows\System32\LogonUI.exe
(GAS Tecnologia) C:\Program Files\GbPlugin\GbpSv.exe
(Google Inc.) C:\Program Files\Google\Update\1.3.32.7\GoogleCrashHandler.exe
(ALWIL Software) C:\Program Files\Alwil Software\Avast5\AvastUI.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
(Adobe Systems Incorporated) C:\Program Files\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(BitTorrent Inc.) C:\Users\Joao Francisco\AppData\Roaming\uTorrent\uTorrent.exe
(Microsoft Corporation) C:\Windows\System32\StikyNot.exe
(BitTorrent Inc.) C:\Users\Joao Francisco\AppData\Roaming\uTorrent\updates\3.4.9_43085\utorrentie.exe
(BitTorrent Inc.) C:\Users\Joao Francisco\AppData\Roaming\uTorrent\updates\3.4.9_43085\utorrentie.exe
(Adobe Systems Incorporated) C:\Program Files\Common Files\Adobe\OOBE\PDApp\IPC\AdobeIPCBroker.exe
(Adobe Systems Incorporated) C:\Program Files\Common Files\Adobe\Adobe Desktop Common\ADS\Adobe Desktop Service.exe
(Adobe Systems Incorporated) C:\Program Files\Common Files\Adobe\Adobe Desktop Common\HEX\Adobe CEF Helper.exe
() C:\Program Files\Adobe\Adobe Creative Cloud\CoreSync\CoreSync.exe
(Adobe Systems Incorporated) C:\Program Files\Adobe\Adobe Creative Cloud\CCXProcess\CCXProcess.exe
(Node.js) C:\Program Files\Adobe\Adobe Creative Cloud\CCXProcess\libs\node.exe
(Adobe Systems Incorporated) C:\Program Files\Adobe\Adobe Creative Cloud\CCLibrary\CCLibrary.exe
(Node.js) C:\Program Files\Adobe\Adobe Creative Cloud\CCLibrary\libs\node.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
==================== Registro (Whitelisted) ====================
(Se uma entrada for incluída na fixlist, o ítem no Registro será restaurado para o padrão ou removido. O arquivo não será movido.)
HKLM\...\Run: [avast5] => C:\Program Files\Alwil Software\Avast5\avastUI.exe [2769336 2010-03-09] (ALWIL Software)
HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [508128 2016-07-01] (Adobe Systems Incorporated)
HKLM\...\Run: [AdobeCS6ServiceManager] => C:\Program Files\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe [1073312 2012-03-09] (Adobe Systems Incorporated)
HKLM\...\Run: [SwitchBoard] => C:\Program Files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated)
HKLM\...\Run: [GrooveMonitor] => C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe [31016 2006-10-27] (Microsoft Corporation)
HKLM\...\Run: [Adobe Creative Cloud] => C:\Program Files\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe [2384984 2016-12-09] (Adobe Systems Incorporated)
Winlogon\Notify\ GbPluginCef: C:\Program Files\GbPlugin\gbiehCef.dll [2016-08-10] (Caixa Economica Federal)
HKU\S-1-5-21-2200033659-2579681809-1596942645-1000\...\Run: [uTorrent] => C:\Users\Joao Francisco\AppData\Roaming\uTorrent\uTorrent.exe [1979072 2017-01-11] (BitTorrent Inc.)
HKU\S-1-5-21-2200033659-2579681809-1596942645-1000\...\Run: [RESTART_STICKY_NOTES] => C:\Windows\System32\StikyNot.exe [354304 2009-07-13] (Microsoft Corporation)
HKU\S-1-5-21-2200033659-2579681809-1596942645-1000\...\Run: [AdobeBridge] => [X]
HKU\S-1-5-21-2200033659-2579681809-1596942645-1000\...\MountPoints2: {b3b5e5b3-e1ae-11e6-908c-00e04cc54605} - F:\Lenovo_Suite.exe
ShellExecuteHooks: GbPluginObj Class - {E37CB5F0-51F5-4395-A808-5FA49E399003} - C:\Program Files\GbPlugin\gbiehcef.dll [1903328 2016-08-10] (Caixa Economica Federal)
ShellIconOverlayIdentifiers: [ AccExtIco1] -> {AB9CF9F8-8A96-4F9D-BF21-CE85714C3A47} => C:\Program Files\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x86.dll [2016-10-25] ()
ShellIconOverlayIdentifiers: [ AccExtIco2] -> {853B7E05-C47D-4985-909A-D0DC5C6D7303} => C:\Program Files\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x86.dll [2016-10-25] ()
ShellIconOverlayIdentifiers: [ AccExtIco3] -> {42D38F2E-98E9-4382-B546-E24E4D6D04BB} => C:\Program Files\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x86.dll [2016-10-25] ()
==================== Internet (Whitelisted) ====================
(Se um ítem for incluído na fixlist, sendo um ítem do Registro, será removido ou restaurado para o padrão.)
Tcpip\Parameters: [DhcpNameServer] 177.86.168.11 177.86.168.12
Tcpip\..\Interfaces\{079C3315-41A7-410C-B63A-C481AC97B629}: [DhcpNameServer] 177.86.168.11 177.86.168.12
Tcpip\..\Interfaces\{10DF0204-61E2-4136-9DDD-A0167166079B}: [DhcpNameServer] 177.86.168.11 177.86.168.12
Internet Explorer:
==================
SearchScopes: HKU\S-1-5-21-2200033659-2579681809-1596942645-1000 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
BHO: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll [2006-10-27] (Microsoft Corporation)
BHO: GbIehObj Class -> {C41A1C0E-EA6C-11D4-B1B8-444553540003} -> C:\Program Files\GbPlugin\gbiehcef.dll [2016-08-10] (Caixa Economica Federal)
Handler: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll [2006-10-27] (Microsoft Corporation)
FireFox:
========
FF DefaultProfile: he0a9q95.default
FF ProfilePath: C:\Users\Joao Francisco\AppData\Roaming\Mozilla\Firefox\Profiles\he0a9q95.default [2017-01-29]
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF32_24_0_0_194.dll [2017-01-13] ()
FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.32.7\npGoogleUpdate3.dll [2017-01-26] (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.32.7\npGoogleUpdate3.dll [2017-01-26] (Google Inc.)
FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect32.dll [2016-12-09] (Adobe Systems)
Chrome:
=======
CHR Profile: C:\Users\Joao Francisco\AppData\Local\Google\Chrome\User Data\Default [2017-01-29]
CHR Extension: (Google Apresentações) - C:\Users\Joao Francisco\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2017-01-26]
CHR Extension: (Google Docs) - C:\Users\Joao Francisco\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2017-01-26]
CHR Extension: (Google Drive) - C:\Users\Joao Francisco\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2017-01-26]
CHR Extension: (YouTube) - C:\Users\Joao Francisco\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2017-01-26]
CHR Extension: (Planilhas do Google) - C:\Users\Joao Francisco\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2017-01-26]
CHR Extension: (Documentos Google off-line) - C:\Users\Joao Francisco\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2017-01-26]
CHR Extension: (Pagamentos da Chrome Web Store) - C:\Users\Joao Francisco\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2017-01-26]
CHR Extension: (Gmail) - C:\Users\Joao Francisco\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2017-01-26]
CHR Extension: (Chrome Media Router) - C:\Users\Joao Francisco\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2017-01-26]
==================== Serviços (Whitelisted) ====================
(Se uma entrada for incluída na fixlist, será removida do Registro. O arquivo não será movido, a menos que seja colocado separadamente.)
R2 AdobeUpdateService; C:\Program Files\Common Files\Adobe\Adobe Desktop Common\ElevationManager\AdobeUpdateService.exe [753240 2016-12-09] (Adobe Systems Incorporated)
R2 AGSService; C:\Program Files\Common Files\Adobe\AdobeGCClient\AGSService.exe [2227312 2017-01-19] (Adobe Systems, Incorporated)
R2 avast! Antivirus; C:\Program Files\Alwil Software\Avast5\AvastSvc.exe [40384 2010-03-09] (ALWIL Software)
R3 avast! Mail Scanner; C:\Program Files\Alwil Software\Avast5\AvastSvc.exe [40384 2010-03-09] (ALWIL Software)
R3 avast! Web Scanner; C:\Program Files\Alwil Software\Avast5\AvastSvc.exe [40384 2010-03-09] (ALWIL Software)
S3 cphs; C:\Windows\system32\IntelCpHeciSvc.exe [290224 2015-06-01] (Intel Corporation)
R2 GbpSv; C:\Program Files\GbPlugin\GbpSv.exe [631520 2016-08-10] (GAS Tecnologia)
S3 SwitchBoard; C:\Program Files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated) [Arquivo não assinado]
R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [680960 2009-07-13] (Microsoft Corporation)
===================== Drivers (Whitelisted) ======================
(Se uma entrada for incluída na fixlist, será removida do Registro. O arquivo não será movido, a menos que seja colocado separadamente.)
R2 aswFsBlk; C:\Windows\system32\Drivers\aswFsBlk.sys [19024 2010-03-09] (ALWIL Software)
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [51792 2010-03-09] (ALWIL Software)
R1 aswRdr; C:\Windows\system32\Drivers\aswRdr.sys [23376 2010-03-09] (ALWIL Software)
R1 aswSP; C:\Windows\system32\Drivers\aswSP.sys [162640 2010-03-09] (ALWIL Software)
R1 aswTdi; C:\Windows\system32\Drivers\aswTdi.sys [46672 2010-03-09] (ALWIL Software)
R0 GbpKm; C:\Windows\System32\drivers\GbpKm.sys [49496 2016-08-10] (GAS Tecnologia)
R1 ndisrd; C:\Windows\System32\DRIVERS\gbpndisrdn.sys [29400 2017-01-25] (GAS Tecnologia)
R3 RTL8192Ce; C:\Windows\System32\DRIVERS\rtl8192Ce.sys [1057896 2011-10-05] (Realtek Semiconductor Corporation )
S0 gbpddreg; system32\drivers\gbpddreg32.sys [X]
==================== NetSvcs (Whitelisted) ===================
(Se uma entrada for incluída na fixlist, será removida do Registro. O arquivo não será movido, a menos que seja colocado separadamente.)
==================== Três Meses Criados arquivos e pastas ========
(Se uma entrada for incluída na fixlist, o arquivo/pasta será movido.)
2017-01-29 12:59 - 2017-01-29 13:00 - 00011401 _____ C:\Users\Joao Francisco\Downloads\FRST.txt
2017-01-29 12:59 - 2017-01-29 12:59 - 00000000 ____D C:\FRST
2017-01-29 12:58 - 2017-01-29 12:58 - 01762816 _____ (Farbar) C:\Users\Joao Francisco\Downloads\FRST.exe
2017-01-29 12:43 - 2017-01-29 12:43 - 00016224 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-runtime-l1-1-0.dll
2017-01-29 12:35 - 2017-01-29 12:37 - 00001050 _____ C:\Users\Public\Desktop\Dll-Files Fixer.lnk
2017-01-29 12:35 - 2017-01-29 12:37 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dll-Files Fixer
2017-01-29 12:35 - 2017-01-29 12:37 - 00000000 ____D C:\Program Files\Dll-Files.com Fixer
2017-01-29 12:35 - 2017-01-29 12:35 - 00000298 _____ C:\Windows\Tasks\DLL-Files.Com Fixer_Updates.job
2017-01-29 12:35 - 2017-01-29 12:35 - 00000282 _____ C:\Windows\Tasks\DLL-Files.Com Fixer_MONTHLY.job
2017-01-29 12:35 - 2017-01-29 12:35 - 00000000 ____D C:\Users\Joao Francisco\AppData\Roaming\dll-files.com
2017-01-29 12:35 - 2014-06-10 12:27 - 00017344 _____ (Dll-Files.com) C:\Windows\system32\roboot.exe
2017-01-29 12:34 - 2014-09-29 10:01 - 00000000 ____D C:\Users\Joao Francisco\Desktop\dll files fixer japa tutoriais
2017-01-29 12:33 - 2017-01-29 12:34 - 04950183 _____ C:\Users\Joao Francisco\Downloads\Dll Fixe files crackeado O Deficiente.rar
2017-01-29 12:20 - 2017-01-29 12:20 - 00629006 _____ C:\Users\Joao Francisco\Downloads\Windows6.1-KB2999226-x86.msu
2017-01-29 12:19 - 2017-01-29 12:20 - 13969576 _____ (Microsoft Corporation) C:\Users\Joao Francisco\Downloads\vc_redist.x86(1).exe
2017-01-29 11:44 - 2017-01-29 11:48 - 00000000 ____D C:\Windows\system32\MRT
2017-01-29 11:44 - 2017-01-29 11:44 - 133456224 ____C (Microsoft Corporation) C:\Windows\system32\MRT.exe
2017-01-29 11:41 - 2017-01-29 11:41 - 00000000 ____D C:\Program Files\Intel
2017-01-29 11:41 - 2017-01-29 11:41 - 00000000 ____D C:\Intel
2017-01-29 11:39 - 2011-04-09 03:56 - 00123904 _____ (Microsoft Corporation) C:\Windows\system32\poqexec.exe
2017-01-29 11:14 - 2016-06-25 13:43 - 00301056 _____ (Microsoft Corporation) C:\Windows\system32\EOSNotify.exe
2017-01-29 11:14 - 2014-09-14 22:42 - 02377216 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2017-01-29 11:14 - 2010-12-18 03:29 - 00541184 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2017-01-29 11:13 - 2015-03-19 00:57 - 03963320 _____ (Microsoft Corporation) C:\Windows\system32\ntkrnlpa.exe
2017-01-29 11:13 - 2015-03-19 00:57 - 03908024 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2017-01-29 11:13 - 2013-03-19 02:54 - 00038912 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll
2017-01-29 11:13 - 2013-03-19 00:50 - 00069632 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe
2017-01-29 11:05 - 2017-01-29 11:05 - 14230000 _____ (Microsoft Corporation) C:\Users\Joao Francisco\Downloads\vc_redist.x86.exe
2017-01-29 11:03 - 2012-06-02 20:19 - 01933848 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2017-01-29 11:03 - 2012-06-02 20:19 - 00577048 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2017-01-29 11:03 - 2012-06-02 20:19 - 00053784 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2017-01-29 11:03 - 2012-06-02 20:19 - 00045080 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
2017-01-29 11:03 - 2012-06-02 20:19 - 00035864 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
2017-01-29 11:03 - 2012-06-02 20:12 - 02422272 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2017-01-29 11:03 - 2012-06-02 20:12 - 00088576 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
2017-01-29 11:03 - 2012-06-02 15:19 - 00171904 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
2017-01-29 11:03 - 2012-06-02 15:12 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
2017-01-29 09:18 - 2017-01-29 09:18 - 00001278 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Photoshop CC 2015.5 (32 Bit).lnk
2017-01-28 22:30 - 2017-01-29 09:07 - 00000000 ____D C:\Users\Joao Francisco\Downloads\Adobe Photoshop CC 2015.5 v17.0 Multilingual (x86x64) Incl Patch [SadeemPC]
2017-01-28 22:09 - 2017-01-29 11:55 - 00000000 ___RD C:\Users\Joao Francisco\Creative Cloud Files
2017-01-28 22:09 - 2017-01-29 11:55 - 00000000 ____D C:\Users\Todos os Usuários\boost_interprocess
2017-01-28 22:09 - 2017-01-29 11:55 - 00000000 ____D C:\ProgramData\boost_interprocess
2017-01-28 22:03 - 2017-01-28 22:03 - 00001195 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Creative Cloud.lnk
2017-01-28 22:03 - 2017-01-28 22:03 - 00001183 _____ C:\Users\Public\Desktop\Adobe Creative Cloud.lnk
2017-01-28 21:45 - 2017-01-28 21:46 - 00000000 ____D C:\Users\Joao Francisco\Documents\ATIVADOR PHOTO
2017-01-28 21:36 - 2017-01-28 21:39 - 01562971 _____ C:\Users\Joao Francisco\Downloads\Ativador Adobe CC 2015.5.rar
2017-01-28 21:33 - 2017-01-28 21:33 - 00804440 _____ (Adobe Systems Incorporated) C:\Users\Joao Francisco\Downloads\CreativeCloudSet-Up.exe
2017-01-28 21:28 - 2017-01-28 21:28 - 00761108 _____ C:\Users\Joao Francisco\Downloads\PSCC2015.5.rar
2017-01-28 21:28 - 2016-09-15 12:42 - 00000000 ____D C:\Users\Joao Francisco\Documents\Adobe CC
2017-01-28 21:22 - 2017-01-28 21:22 - 05642320 _____ (Software company) C:\Users\Joao Francisco\Downloads\adobe-photoshop-cc-2015_3314969.exe
2017-01-27 22:34 - 2017-01-29 09:18 - 00000000 ____D C:\Users\Joao Francisco\Documents\Adobe
2017-01-27 22:34 - 2017-01-27 22:34 - 00001260 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Photoshop CC 2015 (32 Bit).lnk
2017-01-27 20:38 - 2017-01-27 20:40 - 21792085 _____ C:\Users\Joao Francisco\Downloads\air.com.adobe.pstouchphone_1.3.7_paid-www.apkhere.com.apk
2017-01-27 20:26 - 2017-01-27 21:20 - 00000000 ____D C:\Users\Joao Francisco\Downloads\Adobe Photoshop CC 2015 (20150529.r.88) (32+64Bit) + Crack
2017-01-27 19:58 - 2015-07-28 14:55 - 271866984 _____ C:\Users\Joao Francisco\Desktop\CameraRaw_9_1_1.exe
2017-01-27 19:43 - 2017-01-27 19:57 - 271106338 _____ C:\Users\Joao Francisco\Downloads\CameraRaw_9_1_1.zip
2017-01-27 19:41 - 2014-06-05 19:02 - 45337784 _____ (Adobe Systems Incorporated) C:\Users\Joao Francisco\Desktop\Camera Raw.8bi
2017-01-27 19:39 - 2017-01-27 19:40 - 30081324 _____ C:\Users\Joao Francisco\Downloads\Camera Raw_8_5_w64bit.zip
2017-01-27 19:37 - 2015-11-06 01:37 - 284107264 ____N C:\Users\Joao Francisco\Downloads\CameraRaw_9_3.exe
2017-01-27 18:39 - 2017-01-27 18:51 - 283296781 _____ C:\Users\Joao Francisco\Downloads\CameraRaw_9_3.zip
2017-01-27 18:16 - 2017-01-27 18:23 - 53211694 _____ C:\Users\Joao Francisco\Downloads\Pincéis do tinho caricatura e desenho.abr
2017-01-27 18:14 - 2017-01-27 18:14 - 05302919 _____ C:\Users\Joao Francisco\Downloads\test.psd
2017-01-27 17:39 - 2017-01-28 00:27 - 00077904 _____ C:\Users\Joao Francisco\Downloads\WhatsApp Image 2017-01-27 at 17.39.03.jpeg
2017-01-27 14:12 - 2017-01-27 14:12 - 00000000 ____D C:\Users\Joao Francisco\Documents\Corel
2017-01-27 08:36 - 2017-01-27 08:36 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office
2017-01-27 08:35 - 2006-10-26 19:56 - 00032592 _____ (Microsoft Corporation) C:\Windows\system32\msonpmon.dll
2017-01-27 08:34 - 2017-01-27 08:34 - 00000000 ____D C:\Program Files\Microsoft Works
2017-01-27 08:33 - 2017-01-27 08:33 - 00000000 ____D C:\Program Files\Microsoft Visual Studio
2017-01-27 08:33 - 2017-01-27 08:33 - 00000000 ____D C:\Program Files\Common Files\DESIGNER
2017-01-27 08:32 - 2017-01-27 08:32 - 00000000 ____D C:\Windows\PCHEALTH
2017-01-27 08:30 - 2017-01-27 08:30 - 00000000 ____D C:\Program Files\Microsoft Visual Studio 8
2017-01-27 08:29 - 2017-01-27 08:36 - 00000000 ____D C:\Users\Todos os Usuários\Microsoft Help
2017-01-27 08:29 - 2017-01-27 08:34 - 00000000 ____D C:\Program Files\Microsoft Office
2017-01-27 08:29 - 2017-01-27 08:29 - 00000000 ____D C:\Users\Joao Francisco\AppData\Local\Microsoft Help
2017-01-27 08:28 - 2017-01-27 08:28 - 00000000 __RHD C:\MSOCache
2017-01-27 08:07 - 2017-01-29 11:54 - 00000000 ____D C:\Users\Joao Francisco\AppData\LocalLow\uTorrent
2017-01-26 21:44 - 2017-01-26 21:55 - 46218084 _____ C:\Users\Public\Documents\MyAppTemplates-Filters-Sample.zip
2017-01-26 21:13 - 2017-01-26 23:01 - 1756130200 _____ (Google Inc.) C:\Users\Joao Francisco\Downloads\android-studio-bundle-145.3537739-windows.exe
2017-01-26 19:07 - 2017-01-26 19:07 - 00000638 _____ C:\Users\Joao Francisco\Desktop\notas.txt
2017-01-26 12:36 - 2017-01-26 12:36 - 00002215 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2017-01-26 12:36 - 2017-01-26 12:36 - 00002203 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2017-01-26 12:34 - 2017-01-26 12:36 - 00000000 ____D C:\Program Files\Google
2017-01-26 12:33 - 2017-01-26 12:44 - 00000000 ____D C:\Users\Joao Francisco\AppData\Local\Google
2017-01-26 12:33 - 2017-01-26 12:33 - 01065376 _____ (Google Inc.) C:\Users\Joao Francisco\Downloads\ChromeSetup.exe
2017-01-25 15:25 - 2017-01-29 11:54 - 00000000 ____D C:\Users\Todos os Usuários\GbPlugin
2017-01-25 15:25 - 2017-01-29 11:54 - 00000000 ____D C:\ProgramData\GbPlugin
2017-01-25 15:25 - 2017-01-27 08:06 - 00000000 ____D C:\Program Files\GbPlugin
2017-01-25 15:25 - 2017-01-25 15:25 - 00029400 _____ (GAS Tecnologia) C:\Windows\system32\Drivers\gbpndisrdn.sys
2017-01-25 15:25 - 2017-01-25 15:25 - 00000000 ____D C:\Users\Todos os Usuários\GAS Tecnologia
2017-01-25 15:25 - 2017-01-25 15:25 - 00000000 ____D C:\ProgramData\GAS Tecnologia
2017-01-25 15:25 - 2016-08-10 15:58 - 00049496 _____ (GAS Tecnologia) C:\Windows\system32\Drivers\gbpkm.sys
2017-01-25 15:24 - 2017-01-29 12:35 - 00000000 ____D C:\Users\Todos os Usuários\Temp
2017-01-25 15:24 - 2017-01-29 12:35 - 00000000 ____D C:\ProgramData\Temp
2017-01-25 15:23 - 2017-01-25 15:23 - 02891312 _____ (CAIXA) C:\Users\Joao Francisco\Downloads\GBPCEF.exe
2017-01-24 14:51 - 2017-01-24 14:51 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_WinUsb_01009.Wdf
2017-01-24 14:49 - 2017-01-24 14:50 - 00000000 ____D C:\Program Files\LenovoUsbDriver
2017-01-24 14:48 - 2017-01-24 14:48 - 09832044 _____ C:\Users\Joao Francisco\Downloads\LenovoUsbDriver_v1.1.16.zip
2017-01-24 14:44 - 2017-01-24 14:44 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Minimal ADB and Fastboot
2017-01-24 14:44 - 2017-01-24 14:44 - 00000000 ____D C:\Program Files\Minimal ADB and Fastboot
2017-01-24 14:43 - 2017-01-24 14:43 - 00918991 _____ C:\Users\Joao Francisco\Downloads\minimal_adb_fastboot_v1.4_setup.zip
2017-01-24 14:43 - 2016-06-06 19:14 - 00945381 _____ (Sam Rodberg ) C:\Users\Joao Francisco\Desktop\minimal_adb_fastboot_v1.4_setup.exe
2017-01-24 14:34 - 2016-07-19 12:03 - 00000000 ____D C:\Users\Joao Francisco\Desktop\Lenovo FRP
2017-01-24 14:33 - 2017-01-24 14:34 - 00551764 _____ C:\Users\Joao Francisco\Downloads\Lenovo-FRP.rar
2017-01-24 13:14 - 2017-01-29 12:15 - 00000000 ____D C:\Users\Joao Francisco\AppData\LocalLow\Mozilla
2017-01-24 11:52 - 2017-01-24 11:52 - 00287064 _____ C:\Users\Joao Francisco\Downloads\PROGRAMAÇÃO_4ºSemNacVerPDT (1).pdf
2017-01-24 02:57 - 2017-01-24 02:57 - 00000000 ____D C:\Users\Joao Francisco\AppData\Roaming\StageManager.BD092818F67280F4B42B04877600987F0111B594.1
2017-01-24 02:54 - 2017-01-24 02:54 - 00000000 ____D C:\Users\Joao Francisco\AppData\LocalLow\Adobe
2017-01-24 02:44 - 2016-04-29 14:23 - 00000000 ____D C:\Users\Joao Francisco\Downloads\CorelDraw Graphics Suite X8 Multilanguage 32 e 64 Bits
2017-01-24 02:39 - 2017-01-24 02:39 - 00001169 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Photoshop CS6.lnk
2017-01-24 02:37 - 2017-01-24 02:37 - 00001131 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Bridge CS6.lnk
2017-01-24 02:35 - 2017-01-24 02:35 - 00001481 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe ExtendScript Toolkit CS6.lnk
2017-01-23 22:23 - 2017-01-24 00:44 - 2047469266 ____R C:\Users\Joao Francisco\Downloads\CorelDraw X8 Graphics Suite X8 Multilanguage 32 e 64 Bits PT-BR.rar
2017-01-23 22:21 - 2017-01-23 22:22 - 00000000 ____D C:\Users\Joao Francisco\Downloads\Adobe Photoshop CS6 Extended x86 x64 Portugues BR
2017-01-20 23:19 - 2017-01-20 23:19 - 01210470 _____ (Vivid Document Imaging Technologies ) C:\Users\Joao Francisco\Downloads\Baixaki_pdf-viewer [1].exe
2017-01-20 23:19 - 2017-01-20 23:19 - 00001086 _____ C:\Users\Joao Francisco\Desktop\PDF Viewer for Windows 8.lnk
2017-01-20 23:19 - 2017-01-20 23:19 - 00000048 _____ C:\Users\Joao Francisco\Desktop\Create PDF files.url
2017-01-20 23:19 - 2017-01-20 23:19 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PDF Viewer for Windows 8
2017-01-20 23:19 - 2017-01-20 23:19 - 00000000 ____D C:\Program Files\PDF Viewer for Windows 8
2017-01-20 23:18 - 2017-01-20 23:19 - 01806672 _____ (App Lite ) C:\Users\Joao Francisco\Downloads\Baixaki_pdf-viewer.exe
2017-01-20 23:18 - 2017-01-20 23:18 - 00011780 _____ C:\Users\Joao Francisco\Downloads\33160700776574001390550050104561181358938865.pdf
2017-01-16 12:39 - 2017-01-16 12:43 - 00000000 ____D C:\Users\Joao Francisco\Downloads\Fontes
2017-01-15 23:20 - 2017-01-15 23:20 - 38768459 _____ C:\Users\Joao Francisco\Downloads\_gen.apk
2017-01-15 16:54 - 2017-01-27 21:35 - 00000000 ___SD C:\Users\Joao Francisco\AppData\LocalLow\Temp
2017-01-15 14:59 - 2017-01-15 15:05 - 39642851 _____ C:\Users\Joao Francisco\Downloads\LINHAINFINITAAAAA.apk
2017-01-15 13:52 - 2017-01-15 13:57 - 38585702 _____ C:\Users\Joao Francisco\Downloads\8 Ball Pool Jhonny EuSouAndroid.com.apk
2017-01-15 13:07 - 2017-01-15 13:07 - 60269654 _____ C:\Users\Joao Francisco\Downloads\VibeDanceDineyCorreia.zip
2017-01-15 13:03 - 2017-01-15 13:03 - 60357085 _____ C:\Users\Joao Francisco\Downloads\TopDance20DJWelligton.zip
2017-01-13 21:32 - 2017-01-13 21:32 - 00000000 ____D C:\Users\Joao Francisco\AppData\Local\Macromedia
2017-01-13 19:38 - 2017-01-27 22:01 - 00000000 ____D C:\Program Files\Mozilla Firefox
2017-01-13 18:02 - 2017-01-13 18:02 - 00000000 ____D C:\Users\Joao Francisco\AppData\Local\CEF
2017-01-13 17:59 - 2017-01-29 11:06 - 00000000 ____D C:\Users\Todos os Usuários\Package Cache
2017-01-13 17:59 - 2017-01-29 11:06 - 00000000 ____D C:\ProgramData\Package Cache
2017-01-13 17:59 - 2017-01-13 18:48 - 00000000 ____D C:\Program Files\McAfee
2017-01-13 17:47 - 2017-01-29 12:56 - 00000902 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2017-01-13 17:47 - 2017-01-13 18:34 - 00000000 ____D C:\Users\Todos os Usuários\McAfee
2017-01-13 17:47 - 2017-01-13 18:34 - 00000000 ____D C:\ProgramData\McAfee
2017-01-13 17:47 - 2017-01-13 17:47 - 00802904 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2017-01-13 17:47 - 2017-01-13 17:47 - 00144472 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl
2017-01-12 12:42 - 2017-01-12 12:42 - 01051734 _____ C:\Users\Joao Francisco\Downloads\Likesforinsta2.0.apk
2017-01-12 11:48 - 2017-01-12 11:48 - 00095416 _____ C:\Users\Joao Francisco\Downloads\00809.zip
2017-01-12 11:41 - 2017-01-12 11:41 - 00000000 ____D C:\Users\Joao Francisco\Downloads\portable-coreldraw-x6-pt-br
2017-01-11 23:31 - 2017-01-11 23:35 - 306533301 _____ C:\Users\Joao Francisco\Downloads\portable-coreldraw-x6-pt-br.rar
2017-01-11 23:19 - 2017-01-27 22:34 - 00000000 ____D C:\Users\Todos os Usuários\regid.1986-12.com.adobe
2017-01-11 23:19 - 2017-01-27 22:34 - 00000000 ____D C:\ProgramData\regid.1986-12.com.adobe
2017-01-11 23:19 - 2017-01-11 23:19 - 00001169 _____ C:\Users\Joao Francisco\Desktop\Adobe Fireworks CS6.lnk
2017-01-11 23:18 - 2017-01-11 23:18 - 00001315 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Extension Manager CS6.lnk
2017-01-11 23:18 - 2017-01-11 23:18 - 00001169 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Fireworks CS6.lnk
2017-01-11 23:17 - 2017-01-29 09:18 - 00000000 ____D C:\Program Files\Adobe
2017-01-11 23:17 - 2017-01-13 17:47 - 00000000 ____D C:\Windows\system32\Macromed
2017-01-11 23:17 - 2017-01-11 23:17 - 00000967 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Help.lnk
2017-01-11 23:17 - 2017-01-11 23:17 - 00000000 ____D C:\Users\Usuário Padrão\AppData\Roaming\Macromedia
2017-01-11 23:17 - 2017-01-11 23:17 - 00000000 ____D C:\Users\Default\AppData\Roaming\Macromedia
2017-01-11 23:17 - 2017-01-11 23:17 - 00000000 ____D C:\Users\Default User\AppData\Roaming\Macromedia
2017-01-11 23:17 - 2017-01-11 23:17 - 00000000 ____D C:\Program Files\Common Files\Adobe AIR
2017-01-11 23:15 - 2017-01-29 09:18 - 00000000 ____D C:\Program Files\Common Files\Adobe
2017-01-11 23:10 - 2017-01-29 09:18 - 00000000 ____D C:\Users\Joao Francisco\AppData\Roaming\Adobe
2017-01-11 23:10 - 2017-01-29 09:11 - 00000000 ____D C:\Users\Todos os Usuários\Adobe
2017-01-11 23:10 - 2017-01-29 09:11 - 00000000 ____D C:\ProgramData\Adobe
2017-01-11 23:10 - 2017-01-11 23:10 - 00000000 ____D C:\Users\Joao Francisco\AppData\Roaming\Macromedia
2017-01-11 23:09 - 2017-01-29 11:55 - 00000000 ____D C:\Users\Joao Francisco\AppData\Local\Adobe
2017-01-11 22:52 - 2013-06-07 02:59 - 00000000 ____D C:\Users\Joao Francisco\Downloads\Adobe Fireworks CS6
2017-01-11 22:40 - 2017-01-11 22:50 - 65444688 _____ (Microsoft Corporation) C:\Users\Joao Francisco\Downloads\NDP46-KB3045557-x86-x64-AllOS-ENU.exe
2017-01-11 22:34 - 2009-11-25 11:47 - 01130824 _____ (Microsoft Corporation) C:\Windows\system32\dfshim.dll
2017-01-11 22:34 - 2009-11-25 11:47 - 00297808 _____ (Microsoft Corporation) C:\Windows\system32\mscoree.dll
2017-01-11 22:34 - 2009-11-25 11:47 - 00295264 _____ (Microsoft Corporation) C:\Windows\system32\PresentationHost.exe
2017-01-11 22:34 - 2009-11-25 11:47 - 00099176 _____ (Microsoft Corporation) C:\Windows\system32\PresentationHostProxy.dll
2017-01-11 22:34 - 2009-11-25 11:47 - 00049472 _____ (Microsoft Corporation) C:\Windows\system32\netfxperf.dll
2017-01-11 22:24 - 2017-01-11 22:49 - 554042197 ____R C:\Users\Joao Francisco\Downloads\Adobe Fireworks CS6.zip
2017-01-11 22:23 - 2017-01-11 22:23 - 00000000 ____D C:\Users\Joao Francisco\AppData\Roaming\WinRAR
2017-01-11 22:03 - 2017-01-11 22:03 - 00000000 ____D C:\Users\Joao Francisco\Documents\Backup
2017-01-11 21:24 - 2016-10-26 16:29 - 00407720 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
2017-01-11 21:10 - 2017-01-11 22:23 - 1971255235 _____ C:\Users\Joao Francisco\Downloads\CorelDRAW Graphics Suite X8 18.0.0.448 Multilingual + Keygen [SadeemPC].zip
2017-01-11 21:09 - 2017-01-27 12:33 - 00100896 _____ C:\Users\Joao Francisco\AppData\Local\GDIPFONTCACHEV1.DAT
2017-01-11 21:07 - 2017-01-11 21:07 - 00000865 _____ C:\Users\Joao Francisco\Desktop\µTorrent.lnk
2017-01-11 21:07 - 2017-01-11 21:07 - 00000845 _____ C:\Users\Joao Francisco\AppData\Roaming\Microsoft\Windows\Start Menu\µTorrent.lnk
2017-01-11 21:06 - 2017-01-29 12:59 - 00000000 ____D C:\Users\Joao Francisco\AppData\Roaming\uTorrent
2017-01-11 21:05 - 2017-01-11 20:11 - 00000000 ____D C:\Windows\Panther
2017-01-11 20:56 - 2017-01-27 22:01 - 00000000 ____D C:\Program Files\Mozilla Maintenance Service
2017-01-11 20:56 - 2017-01-11 20:57 - 00000000 ____D C:\Users\Joao Francisco\AppData\Roaming\Mozilla
2017-01-11 20:56 - 2017-01-11 20:57 - 00000000 ____D C:\Users\Joao Francisco\AppData\Local\Mozilla
2017-01-11 20:56 - 2017-01-11 20:56 - 00001121 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2017-01-11 20:56 - 2017-01-11 20:56 - 00001109 _____ C:\Users\Public\Desktop\Mozilla Firefox.lnk
2017-01-11 20:56 - 2017-01-11 20:56 - 00000000 ____D C:\Users\Todos os Usuários\Mozilla
2017-01-11 20:56 - 2017-01-11 20:56 - 00000000 ____D C:\ProgramData\Mozilla
2017-01-11 20:49 - 2011-10-05 22:23 - 01057896 _____ (Realtek Semiconductor Corporation ) C:\Windows\system32\Drivers\rtl8192ce.sys
2017-01-11 20:44 - 2017-01-11 20:44 - 00000000 ____D C:\Program Files\REALTEK RTL8187SE Wireless LAN Driver
2017-01-11 20:44 - 2009-10-29 11:24 - 00373248 _____ (Realtek Semiconductor Corporation ) C:\Windows\system32\Drivers\rtl8187Se.sys
2017-01-11 20:44 - 2009-04-02 10:27 - 00188416 _____ (Realtek Semiconductor Corp. ) C:\Windows\system32\RTLExtUI.dll
2017-01-11 20:44 - 2009-04-02 10:27 - 00188416 _____ (Realtek Semiconductor Corp. ) C:\Windows\RTLExtUI.dll
2017-01-11 20:44 - 2009-03-31 14:31 - 00380928 _____ (Realtek) C:\Windows\system32\RtlUI2.exe
2017-01-11 20:44 - 2009-03-31 14:31 - 00380928 _____ (Realtek) C:\Windows\RtlUI2.exe
2017-01-11 20:44 - 2008-07-01 12:31 - 00614400 _____ (Realtek Semiconductor Corp. ) C:\Windows\system32\Rtlihvs.dll
2017-01-11 20:44 - 2008-07-01 12:31 - 00614400 _____ (Realtek Semiconductor Corp. ) C:\Windows\Rtlihvs.dll
2017-01-11 20:38 - 2017-01-11 20:50 - 00000000 ____D C:\Program Files\REALTEK PCIE Wireless LAN Driver
2017-01-11 20:38 - 2017-01-11 20:38 - 00000000 ____D C:\Program Files\Cisco
2017-01-11 20:38 - 2012-02-04 14:27 - 01118312 _____ (Realtek Semiconductor Corporation ) C:\Windows\system32\Drivers\rtl8192se.sys
2017-01-11 20:38 - 2010-12-01 09:31 - 00451072 _____ C:\Windows\system32\ISSRemoveSP.exe
2017-01-11 20:35 - 2017-01-11 20:35 - 00000000 ____H C:\Windows\system32\Drivers\Msft_User_WpdMtpDr_01_09_00.Wdf
2017-01-11 20:25 - 2017-01-11 20:25 - 00000000 ____D C:\Program Files\Qualcomm Atheros WiFi Driver Installation
2017-01-11 20:25 - 2012-01-15 08:37 - 00072522 _____ C:\Windows\system32\athrext.cat
2017-01-11 20:25 - 2012-01-10 21:39 - 02231808 _____ (Atheros Communications, Inc.) C:\Windows\system32\athr.sys
2017-01-11 20:24 - 2017-01-11 20:24 - 00000000 ____D C:\Users\Todos os Usuários\Qualcomm Atheros
2017-01-11 20:24 - 2017-01-11 20:24 - 00000000 ____D C:\ProgramData\Qualcomm Atheros
2017-01-11 20:22 - 2017-01-11 20:49 - 00000000 ___HD C:\Program Files\InstallShield Installation Information
2017-01-11 20:22 - 2017-01-11 20:22 - 00000000 ____D C:\Program Files\Realtek
2017-01-11 20:22 - 2011-04-22 02:17 - 00381032 _____ (Realtek ) C:\Windows\system32\Drivers\Rt86win7.sys
2017-01-11 20:22 - 2011-04-22 02:17 - 00100896 _____ (Realtek Semiconductor Corporation) C:\Windows\system32\RTNUninst32.dll
2017-01-11 20:22 - 2011-04-22 02:17 - 00080416 _____ C:\Windows\system32\RtNicProp32.dll
2017-01-11 20:20 - 2017-01-11 20:20 - 00002009 _____ C:\Users\Public\Desktop\avast! Free Antivirus.lnk
2017-01-11 20:20 - 2017-01-11 20:20 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\avast! Free Antivirus
2017-01-11 20:20 - 2010-03-09 08:12 - 00162640 _____ (ALWIL Software) C:\Windows\system32\Drivers\aswSP.sys
2017-01-11 20:20 - 2010-03-09 08:12 - 00046672 _____ (ALWIL Software) C:\Windows\system32\Drivers\aswTdi.sys
2017-01-11 20:20 - 2010-03-09 08:09 - 00023376 _____ (ALWIL Software) C:\Windows\system32\Drivers\aswRdr.sys
2017-01-11 20:20 - 2010-03-09 08:08 - 00051792 _____ (ALWIL Software) C:\Windows\system32\Drivers\aswMonFlt.sys
2017-01-11 20:20 - 2010-03-09 08:08 - 00019024 _____ (ALWIL Software) C:\Windows\system32\Drivers\aswFsBlk.sys
2017-01-11 20:19 - 2017-01-11 20:19 - 00000000 ____D C:\Users\Todos os Usuários\Alwil Software
2017-01-11 20:19 - 2017-01-11 20:19 - 00000000 ____D C:\ProgramData\Alwil Software
2017-01-11 20:19 - 2017-01-11 20:19 - 00000000 ____D C:\Program Files\Alwil Software
2017-01-11 20:19 - 2010-03-09 08:24 - 00153184 _____ (ALWIL Software) C:\Windows\system32\aswBoot.exe
2017-01-11 20:19 - 2010-03-09 08:24 - 00038848 _____ (ALWIL Software) C:\Windows\system32\avastSS.scr
2017-01-11 20:17 - 2017-01-11 20:17 - 00000000 ____D C:\Users\Joao Francisco\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
2017-01-11 20:17 - 2017-01-11 20:17 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
2017-01-11 20:17 - 2017-01-11 20:17 - 00000000 ____D C:\Program Files\WinRAR
2017-01-11 20:16 - 2017-01-29 09:18 - 01633534 _____ C:\Windows\system32\PerfStringBackup.INI
2017-01-11 20:12 - 2017-01-11 20:12 - 00001393 _____ C:\Users\Joao Francisco\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2017-01-11 20:12 - 2017-01-11 20:12 - 00000020 ___SH C:\Users\Joao Francisco\ntuser.ini
2017-01-11 20:12 - 2017-01-11 20:12 - 00000000 _SHDL C:\Users\Joao Francisco\Modelos
2017-01-11 20:12 - 2017-01-11 20:12 - 00000000 _SHDL C:\Users\Joao Francisco\Meus documentos
2017-01-11 20:12 - 2017-01-11 20:12 - 00000000 _SHDL C:\Users\Joao Francisco\Menu Iniciar
2017-01-11 20:12 - 2017-01-11 20:12 - 00000000 _SHDL C:\Users\Joao Francisco\Documents\Minhas músicas
2017-01-11 20:12 - 2017-01-11 20:12 - 00000000 _SHDL C:\Users\Joao Francisco\Documents\Minhas imagens
2017-01-11 20:12 - 2017-01-11 20:12 - 00000000 _SHDL C:\Users\Joao Francisco\Documents\Meus vídeos
2017-01-11 20:12 - 2017-01-11 20:12 - 00000000 _SHDL C:\Users\Joao Francisco\Dados de aplicativos
2017-01-11 20:12 - 2017-01-11 20:12 - 00000000 _SHDL C:\Users\Joao Francisco\Configurações locais
2017-01-11 20:12 - 2017-01-11 20:12 - 00000000 _SHDL C:\Users\Joao Francisco\AppData\Roaming\Microsoft\Windows\Start Menu\Programas
2017-01-11 20:12 - 2017-01-11 20:12 - 00000000 _SHDL C:\Users\Joao Francisco\AppData\Local\Histórico
2017-01-11 20:12 - 2017-01-11 20:12 - 00000000 _SHDL C:\Users\Joao Francisco\AppData\Local\Dados de aplicativos
2017-01-11 20:12 - 2017-01-11 20:12 - 00000000 _SHDL C:\Users\Joao Francisco\Ambiente de rede
2017-01-11 20:12 - 2017-01-11 20:12 - 00000000 _SHDL C:\Users\Joao Francisco\Ambiente de impressão
2017-01-11 20:12 - 2017-01-11 20:12 - 00000000 ____D C:\Users\Joao Francisco\AppData\Local\VirtualStore
2017-01-11 20:12 - 2009-07-14 06:52 - 00000000 ____D C:\Users\Joao Francisco\AppData\Roaming\Media Center Programs
2017-01-11 20:11 - 2017-01-29 09:27 - 00000000 ____D C:\Users\Joao Francisco
2017-01-11 20:11 - 2017-01-11 20:11 - 00000000 _SHDL C:\Users\Usuário Padrão\Documents\Minhas músicas
2017-01-11 20:11 - 2017-01-11 20:11 - 00000000 _SHDL C:\Users\Usuário Padrão\Documents\Minhas imagens
2017-01-11 20:11 - 2017-01-11 20:11 - 00000000 _SHDL C:\Users\Usuário Padrão\Documents\Meus vídeos
2017-01-11 20:11 - 2017-01-11 20:11 - 00000000 _SHDL C:\Users\Usuário Padrão\AppData\Roaming\Microsoft\Windows\Start Menu\Programas
2017-01-11 20:11 - 2017-01-11 20:11 - 00000000 _SHDL C:\Users\Usuário Padrão\AppData\Local\Histórico
2017-01-11 20:11 - 2017-01-11 20:11 - 00000000 _SHDL C:\Users\Usuário Padrão\AppData\Local\Dados de aplicativos
2017-01-11 20:11 - 2017-01-11 20:11 - 00000000 _SHDL C:\Users\Usuário Padrão
2017-01-11 20:11 - 2017-01-11 20:11 - 00000000 _SHDL C:\Users\Todos os Usuários\Modelos
2017-01-11 20:11 - 2017-01-11 20:11 - 00000000 _SHDL C:\Users\Todos os Usuários\Menu Iniciar
2017-01-11 20:11 - 2017-01-11 20:11 - 00000000 _SHDL C:\Users\Todos os Usuários\Favoritos
2017-01-11 20:11 - 2017-01-11 20:11 - 00000000 _SHDL C:\Users\Todos os Usuários\Documentos
2017-01-11 20:11 - 2017-01-11 20:11 - 00000000 _SHDL C:\Users\Todos os Usuários\Dados de aplicativos
2017-01-11 20:11 - 2017-01-11 20:11 - 00000000 _SHDL C:\Users\Todos os Usuários
2017-01-11 20:11 - 2017-01-11 20:11 - 00000000 _SHDL C:\Users\Public\Documents\Minhas músicas
2017-01-11 20:11 - 2017-01-11 20:11 - 00000000 _SHDL C:\Users\Public\Documents\Minhas imagens
2017-01-11 20:11 - 2017-01-11 20:11 - 00000000 _SHDL C:\Users\Public\Documents\Meus vídeos
2017-01-11 20:11 - 2017-01-11 20:11 - 00000000 _SHDL C:\Users\Default\Modelos
2017-01-11 20:11 - 2017-01-11 20:11 - 00000000 _SHDL C:\Users\Default\Meus documentos
2017-01-11 20:11 - 2017-01-11 20:11 - 00000000 _SHDL C:\Users\Default\Menu Iniciar
2017-01-11 20:11 - 2017-01-11 20:11 - 00000000 _SHDL C:\Users\Default\Documents\Minhas músicas
2017-01-11 20:11 - 2017-01-11 20:11 - 00000000 _SHDL C:\Users\Default\Documents\Minhas imagens
2017-01-11 20:11 - 2017-01-11 20:11 - 00000000 _SHDL C:\Users\Default\Documents\Meus vídeos
2017-01-11 20:11 - 2017-01-11 20:11 - 00000000 _SHDL C:\Users\Default\Dados de aplicativos
2017-01-11 20:11 - 2017-01-11 20:11 - 00000000 _SHDL C:\Users\Default\Configurações locais
2017-01-11 20:11 - 2017-01-11 20:11 - 00000000 _SHDL C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programas
2017-01-11 20:11 - 2017-01-11 20:11 - 00000000 _SHDL C:\Users\Default\AppData\Local\Histórico
2017-01-11 20:11 - 2017-01-11 20:11 - 00000000 _SHDL C:\Users\Default\AppData\Local\Dados de aplicativos
2017-01-11 20:11 - 2017-01-11 20:11 - 00000000 _SHDL C:\Users\Default\Ambiente de rede
2017-01-11 20:11 - 2017-01-11 20:11 - 00000000 _SHDL C:\Users\Default\Ambiente de impressão
2017-01-11 20:11 - 2017-01-11 20:11 - 00000000 _SHDL C:\Users\Default User\Documents\Minhas músicas
2017-01-11 20:11 - 2017-01-11 20:11 - 00000000 _SHDL C:\Users\Default User\Documents\Minhas imagens
2017-01-11 20:11 - 2017-01-11 20:11 - 00000000 _SHDL C:\Users\Default User\Documents\Meus vídeos
2017-01-11 20:11 - 2017-01-11 20:11 - 00000000 _SHDL C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programas
2017-01-11 20:11 - 2017-01-11 20:11 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Histórico
2017-01-11 20:11 - 2017-01-11 20:11 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Dados de aplicativos
2017-01-11 20:11 - 2017-01-11 20:11 - 00000000 _SHDL C:\ProgramData\Modelos
2017-01-11 20:11 - 2017-01-11 20:11 - 00000000 _SHDL C:\ProgramData\Microsoft\Windows\Start Menu\Programas
2017-01-11 20:11 - 2017-01-11 20:11 - 00000000 _SHDL C:\ProgramData\Menu Iniciar
2017-01-11 20:11 - 2017-01-11 20:11 - 00000000 _SHDL C:\ProgramData\Favoritos
2017-01-11 20:11 - 2017-01-11 20:11 - 00000000 _SHDL C:\ProgramData\Documentos
2017-01-11 20:11 - 2017-01-11 20:11 - 00000000 _SHDL C:\ProgramData\Dados de aplicativos
2017-01-11 20:11 - 2017-01-11 20:11 - 00000000 _SHDL C:\Program Files\Common Files\Sistema
2017-01-11 20:11 - 2017-01-11 20:11 - 00000000 _SHDL C:\Program Files\Arquivos Comuns
2017-01-11 20:11 - 2017-01-11 20:11 - 00000000 _SHDL C:\Arquivos de Programas
2017-01-11 20:09 - 2017-01-11 20:09 - 00001345 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Media Center.lnk
2017-01-11 20:09 - 2017-01-11 20:09 - 00001326 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows DVD Maker.lnk
2017-01-11 20:08 - 2017-01-11 20:08 - 00000000 ____H C:\Windows\system32\Drivers\Msft_User_WpdFs_01_09_00.Wdf
2016-10-31 15:00 - 2016-10-31 15:00 - 04775584 _____ (Microsoft Corporation) C:\Windows\system32\mfc140u.dll
2016-10-31 15:00 - 2016-10-31 15:00 - 04704920 _____ (Microsoft Corporation) C:\Windows\system32\mfc140.dll
2016-10-31 15:00 - 2016-10-31 15:00 - 00438584 _____ (Microsoft Corporation) C:\Windows\system32\msvcp140.dll
2016-10-31 15:00 - 2016-10-31 15:00 - 00397472 _____ (Microsoft Corporation) C:\Windows\system32\vcamp140.dll
2016-10-31 15:00 - 2016-10-31 15:00 - 00264368 _____ (Microsoft Corporation) C:\Windows\system32\vccorlib140.dll
2016-10-31 15:00 - 2016-10-31 15:00 - 00243008 _____ (Microsoft Corporation) C:\Windows\system32\concrt140.dll
2016-10-31 15:00 - 2016-10-31 15:00 - 00137888 _____ (Microsoft Corporation) C:\Windows\system32\vcomp140.dll
2016-10-31 15:00 - 2016-10-31 15:00 - 00094888 _____ (Microsoft Corporation) C:\Windows\system32\mfcm140u.dll
2016-10-31 15:00 - 2016-10-31 15:00 - 00094360 _____ (Microsoft Corporation) C:\Windows\system32\mfcm140.dll
2016-10-31 15:00 - 2016-10-31 15:00 - 00083792 _____ (Microsoft Corporation) C:\Windows\system32\vcruntime140.dll
2016-10-31 15:00 - 2016-10-31 15:00 - 00075432 _____ (Microsoft Corporation) C:\Windows\system32\mfc140fra.dll
2016-10-31 15:00 - 2016-10-31 15:00 - 00075424 _____ (Microsoft Corporation) C:\Windows\system32\mfc140deu.dll
2016-10-31 15:00 - 2016-10-31 15:00 - 00074400 _____ (Microsoft Corporation) C:\Windows\system32\mfc140esn.dll
2016-10-31 15:00 - 2016-10-31 15:00 - 00073376 _____ (Microsoft Corporation) C:\Windows\system32\mfc140ita.dll
2016-10-31 15:00 - 2016-10-31 15:00 - 00071328 _____ (Microsoft Corporation) C:\Windows\system32\mfc140rus.dll
2016-10-31 15:00 - 2016-10-31 15:00 - 00065696 _____ (Microsoft Corporation) C:\Windows\system32\mfc140enu.dll
2016-10-31 15:00 - 2016-10-31 15:00 - 00054952 _____ (Microsoft Corporation) C:\Windows\system32\mfc140jpn.dll
2016-10-31 15:00 - 2016-10-31 15:00 - 00053920 _____ (Microsoft Corporation) C:\Windows\system32\mfc140kor.dll
2016-10-31 15:00 - 2016-10-31 15:00 - 00046760 _____ (Microsoft Corporation) C:\Windows\system32\mfc140chs.dll
2016-10-31 15:00 - 2016-10-31 15:00 - 00046752 _____ (Microsoft Corporation) C:\Windows\system32\mfc140cht.dll
==================== Três Meses Modificados arquivos e pastas ========
(Se uma entrada for incluída na fixlist, o arquivo/pasta será movido.)
2017-01-29 12:02 - 2009-07-14 02:34 - 00016944 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2017-01-29 12:02 - 2009-07-14 02:34 - 00016944 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2017-01-29 11:53 - 2009-07-14 02:53 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2017-01-29 11:53 - 2009-07-14 02:33 - 03804832 _____ C:\Windows\system32\FNTCACHE.DAT
2017-01-29 11:43 - 2009-07-14 00:37 - 00000000 ____D C:\Windows\inf
2017-01-29 09:18 - 2009-07-14 06:31 - 00705268 _____ C:\Windows\system32\prfh0416.dat
2017-01-29 09:18 - 2009-07-14 06:31 - 00147108 _____ C:\Windows\system32\prfc0416.dat
2017-01-27 08:34 - 2009-07-14 02:52 - 00000000 ____D C:\Program Files\MSBuild
2017-01-27 08:34 - 2009-07-14 00:37 - 00000000 ____D C:\Program Files\Common Files\microsoft shared
2017-01-27 08:33 - 2009-07-14 06:53 - 00000000 ____D C:\Windows\ShellNew
2017-01-27 08:30 - 2009-07-14 00:37 - 00000000 ____D C:\Program Files\Common Files\System
2017-01-27 08:30 - 2009-07-14 00:04 - 00000478 _____ C:\Windows\win.ini
2017-01-26 19:31 - 2009-07-14 00:37 - 00000000 ____D C:\Windows\system32\NDF
2017-01-11 22:25 - 2016-03-21 05:03 - 00000000 ____D C:\Users\Joao Francisco\Downloads\CorelDRAW Graphics Suite X8 18.0.0.448 Multilingual + Keygen [SadeemPC]
2017-01-11 21:04 - 2009-07-14 02:52 - 00028672 _____ C:\Windows\system32\config\BCD-Template
2017-01-11 20:56 - 2009-07-14 00:37 - 00000000 __RHD C:\Users\Public\Libraries
2017-01-11 20:20 - 2009-07-14 00:04 - 00002577 _____ C:\Windows\system32\config.nt
2017-01-11 20:12 - 2009-07-14 00:37 - 00000000 ____D C:\Windows\rescache
2017-01-11 20:11 - 2009-07-14 00:37 - 00000000 ____D C:\Program Files\Windows NT
2017-01-11 20:09 - 2009-07-14 02:52 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
2017-01-11 20:08 - 2009-07-14 00:37 - 00000000 ____D C:\Windows\system32\sysprep
2017-01-11 20:06 - 2009-07-14 06:53 - 00000000 ____D C:\Windows\CSC
Alguns arquivos em TEMP:
====================
2017-01-11 23:14 - 2017-01-11 23:19 - 0009728 _____ () C:\Users\Joao Francisco\AppData\Local\Temp\bassmod.dll
==================== Bamital & volsnap ======================
(Não há correção automática para arquivos que não passaram na verificação.)
C:\Windows\explorer.exe => O arquivo é assinado digitalmente
C:\Windows\system32\winlogon.exe => O arquivo é assinado digitalmente
C:\Windows\system32\wininit.exe => O arquivo é assinado digitalmente
C:\Windows\system32\svchost.exe => O arquivo é assinado digitalmente
C:\Windows\system32\services.exe => O arquivo é assinado digitalmente
C:\Windows\system32\User32.dll => O arquivo é assinado digitalmente
C:\Windows\system32\userinit.exe => O arquivo é assinado digitalmente
C:\Windows\system32\rpcss.dll => O arquivo é assinado digitalmente
C:\Windows\system32\dnsapi.dll => O arquivo é assinado digitalmente
C:\Windows\system32\Drivers\volsnap.sys => O arquivo é assinado digitalmente
LastRegBack: 2017-01-23 20:45
==================== Fim de FRST.txt ============================