Publicité
Publicité
Format du document : text/plain
Prévisualisation
Resultado do exame da Farbar Recovery Scan Tool (FRST) (x64) Versão: 15-01-2017
Executado por Dell (administrador) em DELL-PC (17-01-2017 14:26:46)
Executando a partir de C:\Users\Dell\Desktop
Perfis Carregados: Dell (Perfis Disponíveis: Dell)
Platform: Windows 7 Professional Service Pack 1 (X64) Idioma: Português (Brasil)
Internet Explorer Versão 11 (Navegador padrão: IE)
Modo da Inicialização: Normal
Tutorial da Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Processos (Whitelisted) =================
(Se uma entrada for incluída na fixlist, o processo será fechado. O arquivo não será movido.)
(GAS Tecnologia) C:\Program Files (x86)\GbPlugin\gbpsv.exe
(IDT, Inc.) C:\Program Files\IDT\WDM\stacsv64.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(GAS Tecnologia LTDA) C:\Program Files\Diebold\Warsaw\core.exe
(Apple Inc.) C:\Program Files\iTunes\iTunesHelper.exe
(BitTorrent Inc.) C:\Users\Dell\AppData\Roaming\uTorrent\uTorrent.exe
(© 2015 Microsoft Corporation) C:\Users\Dell\AppData\Local\Microsoft\BingSvc\BingSvc.exe
(Huawei Technologies Co., Ltd.) C:\Users\Dell\AppData\Roaming\VIVO INTERNET\ouc.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Google Inc.) C:\Users\Dell\AppData\Local\Google\Chrome\Application\chrome.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\avastui.exe
(BitTorrent Inc.) C:\Users\Dell\AppData\Roaming\uTorrent\updates\3.4.9_43085\utorrentie.exe
(BitTorrent Inc.) C:\Users\Dell\AppData\Roaming\uTorrent\updates\3.4.9_43085\utorrentie.exe
(Google Inc.) C:\Users\Dell\AppData\Local\Google\Chrome\Application\chrome.exe
(Andrea Electronics Corporation) C:\Program Files\IDT\WDM\AESTSr64.exe
(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
() C:\ProgramData\DatacardService\HWDeviceService64.exe
(Huawei Technologies Co., Ltd.) C:\ProgramData\DatacardService\DCSHelper.exe
(Google Inc.) C:\Users\Dell\AppData\Local\Google\Chrome\Application\chrome.exe
() C:\Program Files (x86)\LitePDFReader\1.0.0.8000113\LitePDFReaderServ.exe
(Spotify Ltd) C:\Users\Dell\AppData\Roaming\Spotify\Spotify.exe
() C:\Program Files (x86)\LitePDFReader\1.0.0.8000113\LitePDFReader.exe
(Google Inc.) C:\Users\Dell\AppData\Local\Google\Chrome\Application\chrome.exe
(Spotify Ltd) C:\Users\Dell\AppData\Roaming\Spotify\Spotify.exe
(Spotify Ltd) C:\Users\Dell\AppData\Roaming\Spotify\SpotifyWebHelper.exe
(Google Inc.) C:\Users\Dell\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Dell\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Dell\AppData\Local\Google\Chrome\Application\chrome.exe
(Spotify Ltd) C:\Users\Dell\AppData\Roaming\Spotify\Spotify.exe
(Baidu Inc.) C:\Program Files (x86)\baidu\Baidu Browser\sparkservice.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
(GAS Tecnologia LTDA) C:\Program Files\Diebold\Warsaw\core.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(GAS Tecnologia) C:\Program Files (x86)\GbPlugin\gbpsv.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE
(Google Inc.) C:\Users\Dell\AppData\Local\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
(Google Inc.) C:\Users\Dell\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Dell\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Dell\AppData\Local\Google\Chrome\Application\chrome.exe
==================== Registro (Whitelisted) ====================
(Se uma entrada for incluída na fixlist, o ítem no Registro será restaurado para o padrão ou removido. O arquivo não será movido.)
HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [472992 2013-03-21] (Adobe Systems Incorporated)
HKLM\...\Run: [Diebold - Warsaw] => C:\Program Files\Diebold\Warsaw\core.exe [927280 2016-11-11] (GAS Tecnologia LTDA)
HKLM\...\Run: [iTunesHelper] => C:\Program Files\iTunes\iTunesHelper.exe [170256 2015-12-17] (Apple Inc.)
HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [9080768 2016-11-16] (AVAST Software)
HKLM-x32\...\Run: [AdobeCEPServiceManager] => C:\Program Files (x86)\Common Files\Adobe\CEPServiceManager4\CEPServiceManager.exe [1039248 2013-03-13] (Adobe Systems Incorporated)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
Winlogon\Notify\ GbPluginBb: C:\Program Files (x86)\GbPlugin\gbieh.dll [2016-08-04] (Banco do Brasil)
HKU\S-1-5-21-541809767-3259473088-422590649-1000\...\Run: [uTorrent] => C:\Users\Dell\AppData\Roaming\uTorrent\uTorrent.exe [1979072 2016-12-20] (BitTorrent Inc.)
HKU\S-1-5-21-541809767-3259473088-422590649-1000\...\Run: [Google Update] => C:\Users\Dell\AppData\Local\Google\Update\1.3.32.7\GoogleUpdateCore.exe [601752 2016-12-19] (Google Inc.)
HKU\S-1-5-21-541809767-3259473088-422590649-1000\...\Run: [BingSvc] => C:\Users\Dell\AppData\Local\Microsoft\BingSvc\BingSvc.exe [144008 2016-02-12] (© 2015 Microsoft Corporation)
HKU\S-1-5-21-541809767-3259473088-422590649-1000\...\Run: [HW_OPENEYE_OUC_VIVO INTERNET] => C:\Program Files (x86)\VIVO INTERNET\UpdateDog\ouc.exe [110592 2009-07-27] (Huawei Technologies Co., Ltd.)
HKU\S-1-5-21-541809767-3259473088-422590649-1000\...\Run: [Spotify Web Helper] => C:\Users\Dell\AppData\Roaming\Spotify\SpotifyWebHelper.exe [1444976 2017-01-12] (Spotify Ltd)
HKU\S-1-5-21-541809767-3259473088-422590649-1000\...\Run: [Spotify] => C:\Users\Dell\AppData\Roaming\Spotify\Spotify.exe [7153264 2017-01-12] (Spotify Ltd)
HKU\S-1-5-21-541809767-3259473088-422590649-1000\...\Run: [GoogleChromeAutoLaunch_D622EF8A2681BC7366969A9522AD93CD] => C:\Users\Dell\AppData\Local\Google\Chrome\Application\chrome.exe [935768 2016-12-08] (Google Inc.)
HKU\S-1-5-21-541809767-3259473088-422590649-1000\...\MountPoints2: {46bfe7e2-3179-11e6-a86c-d067e5f6255d} - E:\AutoRun.exe
HKU\S-1-5-21-541809767-3259473088-422590649-1000\...\MountPoints2: {4f1e1d42-dfaa-11e5-a026-d067e5f6255d} - E:\AutoRun.exe
HKU\S-1-5-21-541809767-3259473088-422590649-1000\...\MountPoints2: {8475437e-62f7-11e6-9889-d067e5f6255d} - E:\AutoRun.exe
ShellExecuteHooks-x32: GbPluginObj Class - {E37CB5F0-51F5-4395-A808-5FA49E399F83} - C:\PROGRAM FILES (X86)\GbPlugin\gbieh.dll [1947872 2016-08-04] (Banco do Brasil)
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2016-09-09] (AVAST Software)
ShellIconOverlayIdentifiers: [BaiduAntivirusIconLock] -> {0A93904A-BB1E-4a0c-9753-B57B9AE272CC} => C:\Program Files (x86)\Baidu Security\Baidu Antivirus\5.4.3.133394.0\BavShx64.dll -> Nenhum Arquivo
GroupPolicy: Restrição - Chrome <======= ATENÇÃO
CHR HKLM\SOFTWARE\Policies\Google: Restrição <======= ATENÇÃO
==================== Internet (Whitelisted) ====================
(Se um ítem for incluído na fixlist, sendo um ítem do Registro, será removido ou restaurado para o padrão.)
Tcpip\Parameters: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{784B1A0D-CA35-4ABB-BBC9-01171D5BB598}: [NameServer] 8.8.8.8,8.8.4.4
Tcpip\..\Interfaces\{784B1A0D-CA35-4ABB-BBC9-01171D5BB598}: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{F2CAAA75-2A04-4FB3-AF44-B1CAE46AA2CF}: [DhcpNameServer] 172.20.10.1
Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://br.hao123.com/?tn=sdkr_inner_hp_09_hao123_br&guid=6931d7e3955ba491d230ad21e3862095
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://br.hao123.com/?tn=sdkr_inner_hp_09_hao123_br&guid=6931d7e3955ba491d230ad21e3862095
HKU\S-1-5-21-541809767-3259473088-422590649-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://br.hao123.com/?tn=sdkr_inner_hp_09_hao123_br&guid=6931d7e3955ba491d230ad21e3862095
BHO: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL [2010-03-25] (Microsoft Corporation)
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2016-10-24] (AVAST Software)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17] (Microsoft Corp.)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL [2010-02-28] (Microsoft Corporation)
BHO-x32: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL [2010-03-25] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_66\bin\ssv.dll [2016-01-09] (Oracle Corporation)
BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2016-10-24] (AVAST Software)
BHO-x32: Auxiliar de Conexão de Conta da Microsoft -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17] (Microsoft Corp.)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL [2010-02-28] (Microsoft Corporation)
BHO-x32: GbIehObj Class -> {C41A1C0E-EA6C-11D4-B1B8-444553540000} -> C:\PROGRAM FILES (X86)\GBPLUGIN\gbieh.dll [2016-08-04] (Banco do Brasil)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_66\bin\jp2ssv.dll [2016-01-09] (Oracle Corporation)
FireFox:
========
FF DefaultProfile: zx90lo99.default
FF ProfilePath: C:\Users\Dell\AppData\Roaming\Mozilla\Firefox\Profiles\zx90lo99.default [2016-12-14]
FF SearchEngineOrder.3: Mozilla\Firefox\Profiles\zx90lo99.default -> Bing
FF SelectedSearchEngine: Mozilla\Firefox\Profiles\zx90lo99.default -> Bing
FF Homepage: Mozilla\Firefox\Profiles\zx90lo99.default -> hxxp://www.msn.com/?pc=SL5M&ocid=SL5MDHP&osmkt=pt-br
FF Keyword.URL: Mozilla\Firefox\Profiles\zx90lo99.default -> hxxp://www.bing.com/search?FORM=SL5MDF&PC=SL5M&q=
FF Homepage: Mozilla\Firefox\Profiles\zx90lo99.default -> hxxp://br.hao123.com/?tn=sdkr_inner_hp_09_hao123_br&guid=6931d7e3955ba491d230ad21e3862095
FF Extension: (Bing Search) - C:\Users\Dell\AppData\Roaming\Mozilla\Firefox\Profiles\zx90lo99.default\Extensions\bingsearch.full@microsoft.com.xpi [2016-02-12]
FF Extension: (Firefox Hotfix) - C:\Users\Dell\AppData\Roaming\Mozilla\Firefox\Profiles\zx90lo99.default\Extensions\firefox-hotfix@mozilla.org.xpi [2016-08-30]
FF SearchPlugin: C:\Users\Dell\AppData\Roaming\Mozilla\Firefox\Profiles\zx90lo99.default\searchplugins\bing-.xml [2016-02-12]
FF HKLM\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: (Avast Online Security) - C:\Program Files\AVAST Software\Avast\WebRep\FF [2016-09-19]
FF HKLM\...\Firefox\Extensions: [sp@avast.com] - C:\Program Files\AVAST Software\Avast\SafePrice\FF
FF Extension: (Avast SafePrice) - C:\Program Files\AVAST Software\Avast\SafePrice\FF [2016-09-19]
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF HKLM-x32\...\Firefox\Extensions: [sp@avast.com] - C:\Program Files\AVAST Software\Avast\SafePrice\FF
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.41212.0\npctrl.dll [2015-12-11] ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~1\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect64.dll [2013-03-21] (Adobe Systems)
FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll [2015-10-14] ()
FF Plugin-x32: @java.com/DTPlugin,version=11.66.2 -> C:\Program Files (x86)\Java\jre1.8.0_66\bin\dtplugin\npDeployJava1.dll [2016-01-09] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.66.2 -> C:\Program Files (x86)\Java\jre1.8.0_66\bin\plugin2\npjp2.dll [2016-01-09] (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.41212.0\npctrl.dll [2015-12-11] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL [2010-03-24] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3528.0331 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2014-03-31] (Microsoft Corporation)
FF Plugin-x32: @videolan.org/vlc,version=2.2.1 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2016-12-23] (Adobe Systems Inc.)
FF Plugin-x32: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect32.dll [2013-03-21] (Adobe Systems)
FF Plugin HKU\S-1-5-21-541809767-3259473088-422590649-1000: @tools.google.com/Google Update;version=3 -> C:\Users\Dell\AppData\Local\Google\Update\1.3.32.7\npGoogleUpdate3.dll [2016-12-19] (Google Inc.)
FF Plugin HKU\S-1-5-21-541809767-3259473088-422590649-1000: @tools.google.com/Google Update;version=9 -> C:\Users\Dell\AppData\Local\Google\Update\1.3.32.7\npGoogleUpdate3.dll [2016-12-19] (Google Inc.)
Chrome:
=======
CHR HomePage: Default -> msn.com/?pc=__PARAM__&ocid=__PARAM__DHP&osmkt=pt-br
CHR StartupUrls: Default -> "hxxps://www.google.com.br/","hxxp://www.google.com.br/"
CHR Profile: C:\Users\Dell\AppData\Local\Google\Chrome\User Data\Default [2017-01-17]
CHR Extension: (Google Docs) - C:\Users\Dell\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2016-01-09]
CHR Extension: (Google Drive) - C:\Users\Dell\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2016-01-09]
CHR Extension: (YouTube) - C:\Users\Dell\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2016-01-09]
CHR Extension: (Google Cast) - C:\Users\Dell\AppData\Local\Google\Chrome\User Data\Default\Extensions\boadgeojelhgndaghljhdicfkmllpafd [2016-08-02]
CHR Extension: (Videostream for Google Chromecast™) - C:\Users\Dell\AppData\Local\Google\Chrome\User Data\Default\Extensions\cnciopoikihiagdjbjpnocolokfelagl [2016-11-28]
CHR Extension: (Google Search) - C:\Users\Dell\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2016-01-09]
CHR Extension: (Adobe Acrobat) - C:\Users\Dell\AppData\Local\Google\Chrome\User Data\Default\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2017-01-17]
CHR Extension: (Avast SafePrice) - C:\Users\Dell\AppData\Local\Google\Chrome\User Data\Default\Extensions\eofcbnmajmjmplflapaojjnihcjkigck [2016-11-21]
CHR Extension: (Documentos Google off-line) - C:\Users\Dell\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-03-21]
CHR Extension: (GBBD Guardião - Itaú 30 horas) - C:\Users\Dell\AppData\Local\Google\Chrome\User Data\Default\Extensions\kgmpojlddncminmkddkpoegdjhojjipg [2016-01-12]
CHR Extension: (NTabs) - C:\Users\Dell\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhinokolmgnfenkflfinnjkgjgpdamao [2017-01-10]
CHR Extension: (AVG Secure Search) - C:\Users\Dell\AppData\Local\Google\Chrome\User Data\Default\Extensions\ndibdjnfmopecpmkdieinmbadjfpblof [2016-01-12]
CHR Extension: (Pagamentos da Chrome Web Store) - C:\Users\Dell\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2016-04-04]
CHR Extension: (Gmail) - C:\Users\Dell\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2016-01-09]
CHR Extension: (Chrome Media Router) - C:\Users\Dell\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2016-12-16]
CHR HKU\S-1-5-21-541809767-3259473088-422590649-1000\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [fcfenmboojpjinhpgggodefccipikbpd] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [eofcbnmajmjmplflapaojjnihcjkigck] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChromeSp.crx
StartMenuInternet: Google Chrome.2HFLTDG7T36IFDD7XI2LU35AWY - C:\Users\Dell\AppData\Local\Google\Chrome\Application\chrome.exe
==================== Serviços (Whitelisted) ====================
(Se uma entrada for incluída na fixlist, será removida do Registro. O arquivo não será movido, a menos que seja colocado separadamente.)
R2 Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [77104 2015-10-07] (Apple Inc.)
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [197128 2016-09-09] (AVAST Software)
R2 GbpSv; C:\Program Files (x86)\GbPlugin\gbpsv.exe [631520 2016-08-04] (GAS Tecnologia)
R2 HWDeviceService64.exe; C:\ProgramData\DatacardService\HWDeviceService64.exe [339456 2010-11-16] () [Arquivo não assinado]
R2 LitePDFReaderService; C:\Program Files (x86)\LitePDFReader\1.0.0.8000113\LitePDFReaderServ.exe [154216 2016-12-29] ()
S2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [1135416 2015-10-05] (Malwarebytes)
S3 NMIndexingService; C:\Program Files (x86)\Common Files\Ahead\Lib\NMIndexingService.exe [279848 2007-06-27] (Nero AG)
R2 SparkSvc; C:\Program Files (x86)\baidu\Baidu Browser\sparkservice.exe [97080 2016-01-15] (Baidu Inc.)
S3 SparkUpdater; C:\Program Files (x86)\Baidu\SparkUpdate\Sparkupdate.exe [1372472 2016-01-15] (Baidu.com, Inc.)
R2 TeamViewer; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [5613328 2015-07-29] (TeamViewer GmbH)
S3 TermService; C:\Windows\System32\termsrv.dll [683520 2015-09-03] (Microsoft Corporation) [Arquivo não assinado]
R2 Warsaw Technology; C:\Program Files\Diebold\Warsaw\core.exe [927280 2016-11-11] (GAS Tecnologia LTDA)
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2015-09-03] (Microsoft Corporation)
===================== Drivers (Whitelisted) ======================
(Se uma entrada for incluída na fixlist, será removida do Registro. O arquivo não será movido, a menos que seja colocado separadamente.)
S3 aswHdsKe; C:\Windows\system32\drivers\aswHdsKe.sys [82936 2016-11-16] (AVAST Software)
S3 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [37656 2016-09-09] (AVAST Software)
R1 aswKbd; C:\Windows\system32\drivers\aswKbd.sys [37144 2016-09-09] (AVAST Software)
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [108816 2016-09-09] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [103064 2016-09-09] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [74544 2016-09-09] (AVAST Software)
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [969184 2016-09-19] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [513632 2016-09-22] (AVAST Software)
R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [163416 2016-09-09] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [293352 2016-10-18] (AVAST Software)
S3 EsgScanner; C:\Windows\System32\DRIVERS\EsgScanner.sys [22704 2016-01-11] ()
R1 gbpddfac; C:\Windows\System32\drivers\gbpddfac64.sys [28888 2017-01-17] (GAS Tecnologia)
R0 gbpddreg; C:\Windows\System32\drivers\gbpddreg64.sys [29816 2017-01-17] (GAS Tecnologia)
R3 GBPRCM; C:\Program Files (x86)\GbPlugin\gbprcm64.sys [29912 2015-09-22] (GAS Tecnologia)
R3 int0800; C:\Windows\System32\DRIVERS\flashud.sys [51712 2009-09-09] (Intel Corporation)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2015-10-05] (Malwarebytes)
S3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [63704 2015-10-05] (Malwarebytes Corporation)
R3 RTSUER; C:\Windows\System32\Drivers\RtsUer.sys [377560 2014-12-08] (Realsil Semiconductor Corporation)
R3 SmbDrvI; C:\Windows\System32\DRIVERS\Smb_driver_Intel.sys [33448 2015-03-20] (Synaptics Incorporated)
R3 Warsaw_PP; C:\Program Files (x86)\GbPlugin\wsftprp64.sys [24792 2015-09-22] (GAS Tecnologia LTDA)
R1 wsddfac; C:\Windows\System32\drivers\wsddfac.sys [28376 2017-01-12] (GAS Tecnologia)
R1 wsddntf; C:\Windows\System32\DRIVERS\wsddntf.sys [36984 2016-11-11] (GAS Tecnologia)
R1 wsddpp; C:\Windows\system32\drivers\wsddpp.sys [25184 2016-11-11] (GAS Tecnologia)
R3 wsddprm; C:\Windows\system32\drivers\wsddprm.sys [25184 2016-11-11] (GAS Tecnologia)
S3 cykbfltrService; system32\DRIVERS\cykbfltr.sys [X]
S3 cymfltrService; system32\DRIVERS\cymfltr.sys [X]
==================== NetSvcs (Whitelisted) ===================
(Se uma entrada for incluída na fixlist, será removida do Registro. O arquivo não será movido, a menos que seja colocado separadamente.)
==================== Três Meses Criados arquivos e pastas ========
(Se uma entrada for incluída na fixlist, o arquivo/pasta será movido.)
2017-01-17 14:26 - 2017-01-17 14:28 - 00022177 _____ C:\Users\Dell\Desktop\FRST.txt
2017-01-17 14:26 - 2017-01-17 14:26 - 00000000 ____D C:\FRST
2017-01-17 14:25 - 2017-01-17 14:25 - 02419200 _____ (Farbar) C:\Users\Dell\Desktop\FRST64.exe
2017-01-17 14:16 - 2017-01-17 14:13 - 00003060 _____ C:\Users\Public\Desktop\Corel CAPTURE X8 (64-Bit).lnk
2017-01-17 14:16 - 2017-01-17 14:13 - 00002343 _____ C:\Users\Public\Desktop\Corel CONNECT X8 (64-Bit).lnk
2017-01-17 14:16 - 2017-01-17 14:12 - 00003063 _____ C:\Users\Public\Desktop\Corel PHOTO-PAINT X8 (64-Bit).lnk
2017-01-17 14:16 - 2017-01-17 14:12 - 00003015 _____ C:\Users\Public\Desktop\CorelDRAW X8 (64-Bit).lnk
2017-01-17 14:16 - 2017-01-17 14:12 - 00002256 _____ C:\Users\Public\Desktop\Corel Font Manager X8 (64-Bit).lnk
2017-01-17 14:15 - 2017-01-17 14:16 - 00003312 _____ C:\Windows\System32\Tasks\CorelUpdateHelperTaskCore
2017-01-17 14:15 - 2017-01-17 14:15 - 00000000 ____D C:\Program Files (x86)\Corel
2017-01-17 14:13 - 2017-01-17 14:13 - 00000000 ____D C:\Users\Public\Documents\Corel
2017-01-17 14:12 - 2017-01-17 14:13 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CorelDRAW Graphics Suite X8 (64-bit)
2017-01-17 12:43 - 2017-01-17 12:43 - 06478939 _____ C:\Users\Dell\Desktop\SLIDE COACHING PARA MULHERES.pptx
2017-01-17 10:57 - 2017-01-17 10:57 - 00000165 ____H C:\Users\Dell\Desktop\~$696.xlsx
2017-01-17 10:56 - 2017-01-17 10:56 - 00021748 _____ C:\Users\Dell\Desktop\696.xlsx
2017-01-12 15:31 - 2017-01-12 15:31 - 17742949 _____ C:\Users\Dell\Desktop\Update_KB2670838_Win7.zip
2017-01-12 15:08 - 2017-01-17 14:15 - 00000000 ____D C:\Program Files\Corel
2017-01-12 14:23 - 2017-01-12 14:23 - 12215366 _____ C:\Users\Dell\Desktop\(VCTOTUROSHD) faltando api-ms-win-crt-runtime-l1-1-0.dll - 32 BISTS.rar
2017-01-12 14:11 - 2017-01-12 14:12 - 12505160 _____ (Corel Corporation) C:\Users\Dell\Desktop\cdgsx8seo (1).exe
2017-01-12 14:07 - 2017-01-12 14:07 - 12998216 _____ C:\Users\Dell\Desktop\(VCTOTUROSHD) faltando api-ms-win-crt-runtime-l1-1-0.dll - 64 BISTS.rar
2017-01-12 12:54 - 2017-01-12 12:55 - 14749120 _____ (Microsoft Corporation) C:\Users\Dell\Desktop\vc_redist.x64.exe
2017-01-12 12:44 - 2017-01-12 12:44 - 00000547 _____ C:\Users\Dell\Desktop\INFORMAÇÕES DL.txt
2017-01-12 12:42 - 2017-01-12 12:42 - 00000000 ____D C:\Users\Dell\AppData\Roaming\Corel
2017-01-12 12:41 - 2017-01-12 12:41 - 00000000 ____D C:\Program Files (x86)\gs
2017-01-12 12:39 - 2017-01-12 12:39 - 00000000 ____D C:\Users\Todos os Usuários\VsTelemetry
2017-01-12 12:39 - 2017-01-12 12:39 - 00000000 ____D C:\ProgramData\VsTelemetry
2017-01-12 12:37 - 2017-01-12 12:37 - 00000000 ____D C:\Program Files\Common Files\Corel
2017-01-12 12:28 - 2017-01-17 14:23 - 00000000 ____D C:\Users\Todos os Usuários\Corel
2017-01-12 12:28 - 2017-01-17 14:23 - 00000000 ____D C:\ProgramData\Corel
2017-01-12 11:43 - 2017-01-12 11:43 - 00003880 _____ C:\Windows\System32\Tasks\94A46359-5537-4201-BEFD-1EC63DFD0942
2017-01-12 11:42 - 2017-01-12 11:42 - 00000229 _____ C:\Users\Todos os Usuários\nbc.ini
2017-01-12 11:42 - 2017-01-12 11:42 - 00000229 _____ C:\ProgramData\nbc.ini
2017-01-12 11:40 - 2017-01-17 14:07 - 534612834 _____ C:\Users\Dell\Desktop\CorelDRAWGraphicsSuiteX8Installer_pt64Bit.zip
2017-01-12 11:39 - 2017-01-12 11:39 - 00000000 ____D C:\Users\Todos os Usuários\UniqueId
2017-01-12 11:39 - 2017-01-12 11:39 - 00000000 ____D C:\ProgramData\UniqueId
2017-01-12 11:37 - 2017-01-12 11:38 - 12505160 _____ (Corel Corporation) C:\Users\Dell\Desktop\cdgsx8seo.exe
2017-01-12 11:36 - 2017-01-12 11:36 - 14882731 _____ C:\Users\Dell\Desktop\CRACHÁS - DL 009.cdr
2017-01-09 10:44 - 2017-01-09 10:44 - 02151923 _____ C:\Users\Dell\Desktop\RAIKA CANETA 2.psd
2017-01-09 10:40 - 2017-01-09 10:40 - 00486293 _____ C:\Users\Dell\Desktop\CANETA.pdf
2017-01-09 10:40 - 2017-01-09 10:40 - 00001747 _____ C:\Users\Dell\.recently-used.xbel
2017-01-09 10:16 - 2017-01-09 10:16 - 00000000 ____D C:\Users\Dell\AppData\Roaming\inkscape
2017-01-09 10:05 - 2017-01-09 10:05 - 00001051 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Inkscape.lnk
2017-01-09 10:03 - 2017-01-09 10:03 - 00001007 _____ C:\Users\Public\Desktop\Inkscape.lnk
2017-01-09 09:53 - 2017-01-09 10:07 - 00000000 ____D C:\Program Files (x86)\Inkscape
2017-01-09 09:48 - 2017-01-09 09:52 - 34662316 _____ (inkscape.org) C:\Users\Dell\Desktop\Inkscape-0.48.0-1.exe
2017-01-06 16:02 - 2017-01-06 16:02 - 03070800 _____ C:\Users\Dell\Desktop\RAIKA CANETA 2.pdf
2017-01-06 15:57 - 2017-01-06 15:57 - 03072870 _____ C:\Users\Dell\Desktop\RAIKA CANETA.pdf
2017-01-06 09:49 - 2017-01-12 13:07 - 00028376 _____ (GAS Tecnologia) C:\Windows\system32\Drivers\wsddfac.sys
2017-01-06 09:49 - 2016-11-11 15:41 - 00036984 _____ (GAS Tecnologia) C:\Windows\system32\Drivers\wsddntf.sys
2017-01-06 09:49 - 2016-11-11 15:41 - 00025184 ____N (GAS Tecnologia) C:\Windows\system32\Drivers\wsddprm.sys
2017-01-06 09:49 - 2016-11-11 15:41 - 00025184 ____N (GAS Tecnologia) C:\Windows\system32\Drivers\wsddpp.sys
2017-01-06 09:49 - 2016-11-11 15:41 - 00008811 _____ C:\Windows\system32\Drivers\wsddntf.cat
2017-01-04 15:25 - 2017-01-04 15:25 - 00001260 _____ C:\Users\Dell\Desktop\4K Video Downloader.lnk
2017-01-04 15:25 - 2017-01-04 15:25 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\4K Download
2017-01-04 15:22 - 2017-01-17 10:34 - 00000000 ____D C:\Users\Dell\AppData\Roaming\LitePDFReader
2017-01-04 15:22 - 2017-01-04 15:23 - 00000000 ____D C:\Users\Todos os Usuários\tools
2017-01-04 15:22 - 2017-01-04 15:23 - 00000000 ____D C:\ProgramData\tools
2017-01-04 15:22 - 2017-01-04 15:22 - 00000000 ____D C:\Program Files (x86)\Tools
2017-01-04 15:22 - 2017-01-04 15:22 - 00000000 ____D C:\Program Files (x86)\LitePDFReader
2017-01-03 11:30 - 2017-01-03 11:30 - 00000000 ____D C:\Users\Dell\AppData\Local\4kdownload.com
2017-01-03 11:29 - 2017-01-03 11:29 - 00000000 ____D C:\Program Files (x86)\4KDownload
2016-12-25 00:39 - 2017-01-12 13:05 - 00000000 ____D C:\Users\Dell\AppData\LocalLow\uTorrent
2016-12-20 12:37 - 2016-12-20 12:37 - 00104210 _____ C:\Users\Dell\Desktop\696 CRISTHIANE PINTO RESENDE COSTA ARAUJO.pdf
2016-12-16 16:36 - 2016-12-16 16:36 - 00000000 ____D C:\Users\Dell\AppData\Roaming\Opera Software
2016-12-16 16:36 - 2016-12-16 16:36 - 00000000 ____D C:\Users\Dell\AppData\Local\Opera Software
2016-12-16 16:36 - 2016-12-16 16:36 - 00000000 ____D C:\Users\Dell\.MCTranscodingSDK
2016-12-15 17:47 - 2016-12-15 17:47 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Lightworks
2016-12-15 17:46 - 2016-12-15 17:46 - 00000000 ____D C:\Users\Todos os Usuários\Geevs
2016-12-15 17:46 - 2016-12-15 17:46 - 00000000 ____D C:\ProgramData\Geevs
2016-12-15 17:45 - 2016-12-16 16:35 - 00000000 ____D C:\Users\Public\Documents\Lightworks
2016-12-15 17:30 - 2017-01-12 14:27 - 00000000 ____D C:\Users\Todos os Usuários\Package Cache
2016-12-15 17:30 - 2017-01-12 14:27 - 00000000 ____D C:\ProgramData\Package Cache
2016-12-15 17:28 - 2016-12-16 16:36 - 00000000 ____D C:\Program Files (x86)\Lightworks
2016-12-15 17:20 - 2017-01-12 12:17 - 00000000 ____D C:\Program Files (x86)\Opera
2016-12-15 17:20 - 2017-01-12 12:16 - 00000000 ____D C:\Users\Dell\AppData\Roaming\opera_helper
2016-12-15 17:20 - 2016-12-15 17:20 - 00000000 ___HD C:\Users\Dell\AppData\Roaming\GoldenGate
2016-12-15 15:44 - 2016-12-15 15:44 - 00355838 _____ C:\Users\Dell\Desktop\rb.png
2016-12-13 16:56 - 2016-12-13 16:56 - 00000162 ____H C:\Users\Dell\Desktop\~$_inscaltercadastralempresa.doc
2016-12-13 16:17 - 2016-12-13 16:17 - 00002599 _____ C:\Users\Dell\Desktop\Emissor de Nota Fiscal Eletronica (NF-e) 3.10 - Versao de Teste.lnk
2016-12-13 16:17 - 2016-12-13 16:17 - 00000000 ____D C:\Users\Dell\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Programas Secretaria da Fazenda
2016-12-13 16:17 - 2016-12-13 16:17 - 00000000 ____D C:\log
2016-12-13 16:17 - 2016-12-13 16:17 - 00000000 ____D C:\database
2016-12-05 16:33 - 2017-01-17 14:05 - 00000000 ____D C:\Users\Dell\Desktop\Coaching Mulheres
2016-12-02 14:34 - 2016-12-02 14:34 - 00000165 ____H C:\Users\Dell\Desktop\~$Visitas.xlsx
2016-12-01 10:35 - 2016-12-01 10:35 - 04094085 _____ C:\Users\Dell\Desktop\Saudarei este dia com amor no coração!.png
2016-11-30 09:08 - 2016-11-30 09:08 - 00000162 ____H C:\Users\Dell\Desktop\~$ (Treinamento) - CRICA.docx
2016-11-28 14:46 - 2016-11-28 14:46 - 01881176 _____ C:\Users\Dell\Desktop\Catalogo_2015_Produtos_AVIVAR.pdf
2016-11-28 14:36 - 2016-11-28 14:36 - 00010988 _____ C:\Users\Dell\Desktop\Visitas.xlsx
2016-11-22 17:00 - 2016-11-22 17:00 - 00322304 _____ C:\Users\Dell\Desktop\Cristhiane Pinto Resende Costa Araújo.docx
2016-11-21 08:38 - 2016-11-16 17:39 - 00082936 _____ (AVAST Software) C:\Windows\system32\Drivers\aswHdsKe.sys
2016-11-16 17:15 - 2016-11-16 17:15 - 00000000 ____D C:\Users\Todos os Usuários\Hewlett-Packard
2016-11-16 17:15 - 2016-11-16 17:15 - 00000000 ____D C:\ProgramData\Hewlett-Packard
2016-11-16 10:06 - 2016-11-16 10:06 - 00000165 ____H C:\Users\Dell\Desktop\~$21 - Tabela MG - VRJ MTZ.xlsx
2016-11-08 17:35 - 2016-11-28 18:10 - 00000000 ___RD C:\Users\Dell\Desktop\AVIVAR
2016-11-08 14:41 - 2016-11-16 12:48 - 00000000 _____ C:\Users\Todos os Usuários\appVAVI.dt3
2016-11-08 14:41 - 2016-11-16 12:48 - 00000000 _____ C:\Users\Todos os Usuários\appVAVI.dt2
2016-11-08 14:41 - 2016-11-16 12:48 - 00000000 _____ C:\Users\Todos os Usuários\appVAVI.dt1
2016-11-08 14:41 - 2016-11-16 12:48 - 00000000 _____ C:\ProgramData\appVAVI.dt3
2016-11-08 14:41 - 2016-11-16 12:48 - 00000000 _____ C:\ProgramData\appVAVI.dt2
2016-11-08 14:41 - 2016-11-16 12:48 - 00000000 _____ C:\ProgramData\appVAVI.dt1
2016-10-27 17:10 - 2016-12-13 16:07 - 00000000 ____D C:\Users\Dell\Desktop\Documentos
2016-10-19 12:24 - 2016-10-19 12:24 - 00099536 _____ C:\Users\Dell\Desktop\13254863_10209349455354468_4543747328226759138_o (1).jpg
2016-10-19 12:14 - 2016-10-19 12:14 - 00052728 _____ C:\Users\Dell\Desktop\Assinatura.png
==================== Três Meses Modificados arquivos e pastas ========
(Se uma entrada for incluída na fixlist, o arquivo/pasta será movido.)
2017-01-17 14:28 - 2016-01-12 09:23 - 00028888 _____ (GAS Tecnologia) C:\Windows\system32\Drivers\gbpddfac64.sys
2017-01-17 14:25 - 2016-01-13 14:43 - 00000000 ____D C:\Users\Dell\AppData\Roaming\uTorrent
2017-01-17 14:19 - 2016-01-12 09:23 - 00029816 _____ (GAS Tecnologia) C:\Windows\system32\Drivers\gbpddreg64.sys
2017-01-17 14:19 - 2016-01-12 09:23 - 00000000 ____D C:\Program Files (x86)\GbPlugin
2017-01-17 13:59 - 2016-03-24 13:53 - 00000000 ___RD C:\Users\Dell\Desktop\ESPAÇO VIVENCIAR
2017-01-17 13:25 - 2016-01-14 14:53 - 00000000 ____D C:\Users\Dell\AppData\Local\ElevatedDiagnostics
2017-01-17 12:49 - 2016-10-10 18:15 - 00000000 ____D C:\Users\Dell\AppData\Roaming\Spotify
2017-01-17 12:07 - 2011-04-12 11:40 - 00708664 _____ C:\Windows\system32\prfh0416.dat
2017-01-17 12:07 - 2011-04-12 11:40 - 00148404 _____ C:\Windows\system32\prfc0416.dat
2017-01-17 12:07 - 2009-07-14 03:13 - 01642514 _____ C:\Windows\system32\PerfStringBackup.INI
2017-01-17 12:07 - 2009-07-14 01:20 - 00000000 ____D C:\Windows\inf
2017-01-17 10:47 - 2009-07-14 02:45 - 00021088 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2017-01-17 10:47 - 2009-07-14 02:45 - 00021088 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2017-01-17 10:42 - 2016-01-09 10:23 - 00003758 _____ C:\Windows\System32\Tasks\AutoKMS
2017-01-17 10:34 - 2016-10-10 18:19 - 00000000 ____D C:\Users\Dell\AppData\Local\Spotify
2017-01-12 14:35 - 2016-01-12 09:23 - 00000000 ____D C:\Users\Todos os Usuários\GbPlugin
2017-01-12 14:35 - 2016-01-12 09:23 - 00000000 ____D C:\ProgramData\GbPlugin
2017-01-12 13:05 - 2009-07-14 03:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2017-01-12 13:04 - 2009-07-14 02:45 - 05265056 _____ C:\Windows\system32\FNTCACHE.DAT
2017-01-12 12:46 - 2016-01-09 10:23 - 00183136 _____ C:\Users\Dell\AppData\Local\GDIPFONTCACHEV1.DAT
2017-01-12 12:40 - 2009-07-14 01:20 - 00000000 ____D C:\Program Files\Common Files\Microsoft Shared
2017-01-12 12:17 - 2016-01-08 16:23 - 00001389 _____ C:\Users\Dell\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2017-01-12 12:07 - 2016-01-09 09:51 - 00002441 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk
2017-01-12 11:44 - 2016-10-03 12:08 - 00000000 ____D C:\Users\Todos os Usuários\Baidu Security
2017-01-12 11:44 - 2016-10-03 12:08 - 00000000 ____D C:\ProgramData\Baidu Security
2017-01-12 11:44 - 2016-09-29 15:54 - 00000000 ____D C:\Users\Todos os Usuários\Baidu
2017-01-12 11:44 - 2016-09-29 15:54 - 00000000 ____D C:\ProgramData\Baidu
2017-01-12 11:41 - 2016-10-03 16:51 - 00000337 _____ C:\Windows\wininit.ini
2017-01-12 11:41 - 2016-10-03 16:49 - 00000000 ____D C:\Users\Dell\AppData\Roaming\Baidu
2017-01-12 11:38 - 2016-01-09 09:52 - 00004476 _____ C:\Windows\System32\Tasks\Adobe Acrobat Update Task
2017-01-10 10:44 - 2016-01-09 10:29 - 00004180 _____ C:\Windows\System32\Tasks\avast! Emergency Update
2017-01-10 10:41 - 2016-08-15 12:51 - 00000492 __RSH C:\Users\Todos os Usuários\ntuser.pol
2017-01-10 10:41 - 2016-08-15 12:51 - 00000492 __RSH C:\ProgramData\ntuser.pol
2017-01-09 10:53 - 2016-01-26 21:04 - 00000132 _____ C:\Users\Dell\AppData\Roaming\Preferências do Formato PNG CC da Adobe
2017-01-09 10:40 - 2016-01-08 16:23 - 00000000 ____D C:\Users\Dell
2016-12-28 00:03 - 2016-01-12 11:41 - 00000000 ____D C:\Users\Dell\AppData\Roaming\vlc
2016-12-25 00:39 - 2016-01-08 16:23 - 00000000 ____D C:\Users\Dell\AppData\LocalLow
2016-12-20 11:44 - 2009-07-14 01:20 - 00000000 ____D C:\Windows\system32\wdi
2016-12-19 15:51 - 2016-01-09 09:56 - 00003672 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-541809767-3259473088-422590649-1000UA
2016-12-19 15:51 - 2016-01-09 09:56 - 00003400 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-541809767-3259473088-422590649-1000Core
==================== Arquivos na raiz de alguns diretórios =======
2016-01-26 21:04 - 2017-01-09 10:53 - 0000132 _____ () C:\Users\Dell\AppData\Roaming\Preferências do Formato PNG CC da Adobe
2016-11-08 14:41 - 2016-11-16 12:48 - 0000000 _____ () C:\ProgramData\appVAVI.dt1
2016-11-08 14:41 - 2016-11-16 12:48 - 0000000 _____ () C:\ProgramData\appVAVI.dt2
2016-11-08 14:41 - 2016-11-16 12:48 - 0000000 _____ () C:\ProgramData\appVAVI.dt3
2017-01-12 11:42 - 2017-01-12 11:42 - 0000229 _____ () C:\ProgramData\nbc.ini
Alguns arquivos em TEMP:
====================
C:\Users\Dell\AppData\Local\Temp\AdobeApplicationManager.exe
C:\Users\Dell\AppData\Local\Temp\BingSvc.exe
C:\Users\Dell\AppData\Local\Temp\BSvcProcessor.exe
C:\Users\Dell\AppData\Local\Temp\BSvcUpdater.exe
C:\Users\Dell\AppData\Local\Temp\DefaultPack.EXE
C:\Users\Dell\AppData\Local\Temp\downloader_2.0.0.2_340br_90_20160106_1943_1452080636.exe
C:\Users\Dell\AppData\Local\Temp\GUR9441.exe
C:\Users\Dell\AppData\Local\Temp\GURFDCE.exe
C:\Users\Dell\AppData\Local\Temp\lvzhou_br_IBD_Bundle.exe
C:\Users\Dell\AppData\Local\Temp\spark_install.exe
C:\Users\Dell\AppData\Local\Temp\UPCleaner1.3.52.exe
C:\Users\Dell\AppData\Local\Temp\vlc-2.2.4-win32.exe
==================== Bamital & volsnap ======================
(Não há correção automática para arquivos que não passaram na verificação.)
C:\Windows\system32\winlogon.exe => O arquivo é assinado digitalmente
C:\Windows\system32\wininit.exe => O arquivo é assinado digitalmente
C:\Windows\SysWOW64\wininit.exe => O arquivo é assinado digitalmente
C:\Windows\explorer.exe => O arquivo é assinado digitalmente
C:\Windows\SysWOW64\explorer.exe => O arquivo é assinado digitalmente
C:\Windows\system32\svchost.exe => O arquivo é assinado digitalmente
C:\Windows\SysWOW64\svchost.exe => O arquivo é assinado digitalmente
C:\Windows\system32\services.exe => O arquivo é assinado digitalmente
C:\Windows\system32\User32.dll => O arquivo é assinado digitalmente
C:\Windows\SysWOW64\User32.dll => O arquivo é assinado digitalmente
C:\Windows\system32\userinit.exe => O arquivo é assinado digitalmente
C:\Windows\SysWOW64\userinit.exe => O arquivo é assinado digitalmente
C:\Windows\system32\rpcss.dll => O arquivo é assinado digitalmente
C:\Windows\system32\dnsapi.dll => O arquivo é assinado digitalmente
C:\Windows\SysWOW64\dnsapi.dll => O arquivo é assinado digitalmente
C:\Windows\system32\Drivers\volsnap.sys => O arquivo é assinado digitalmente
LastRegBack: 2017-01-17 13:17
==================== Fim de FRST.txt ============================
Executado por Dell (administrador) em DELL-PC (17-01-2017 14:26:46)
Executando a partir de C:\Users\Dell\Desktop
Perfis Carregados: Dell (Perfis Disponíveis: Dell)
Platform: Windows 7 Professional Service Pack 1 (X64) Idioma: Português (Brasil)
Internet Explorer Versão 11 (Navegador padrão: IE)
Modo da Inicialização: Normal
Tutorial da Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Processos (Whitelisted) =================
(Se uma entrada for incluída na fixlist, o processo será fechado. O arquivo não será movido.)
(GAS Tecnologia) C:\Program Files (x86)\GbPlugin\gbpsv.exe
(IDT, Inc.) C:\Program Files\IDT\WDM\stacsv64.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(GAS Tecnologia LTDA) C:\Program Files\Diebold\Warsaw\core.exe
(Apple Inc.) C:\Program Files\iTunes\iTunesHelper.exe
(BitTorrent Inc.) C:\Users\Dell\AppData\Roaming\uTorrent\uTorrent.exe
(© 2015 Microsoft Corporation) C:\Users\Dell\AppData\Local\Microsoft\BingSvc\BingSvc.exe
(Huawei Technologies Co., Ltd.) C:\Users\Dell\AppData\Roaming\VIVO INTERNET\ouc.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Google Inc.) C:\Users\Dell\AppData\Local\Google\Chrome\Application\chrome.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\avastui.exe
(BitTorrent Inc.) C:\Users\Dell\AppData\Roaming\uTorrent\updates\3.4.9_43085\utorrentie.exe
(BitTorrent Inc.) C:\Users\Dell\AppData\Roaming\uTorrent\updates\3.4.9_43085\utorrentie.exe
(Google Inc.) C:\Users\Dell\AppData\Local\Google\Chrome\Application\chrome.exe
(Andrea Electronics Corporation) C:\Program Files\IDT\WDM\AESTSr64.exe
(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
() C:\ProgramData\DatacardService\HWDeviceService64.exe
(Huawei Technologies Co., Ltd.) C:\ProgramData\DatacardService\DCSHelper.exe
(Google Inc.) C:\Users\Dell\AppData\Local\Google\Chrome\Application\chrome.exe
() C:\Program Files (x86)\LitePDFReader\1.0.0.8000113\LitePDFReaderServ.exe
(Spotify Ltd) C:\Users\Dell\AppData\Roaming\Spotify\Spotify.exe
() C:\Program Files (x86)\LitePDFReader\1.0.0.8000113\LitePDFReader.exe
(Google Inc.) C:\Users\Dell\AppData\Local\Google\Chrome\Application\chrome.exe
(Spotify Ltd) C:\Users\Dell\AppData\Roaming\Spotify\Spotify.exe
(Spotify Ltd) C:\Users\Dell\AppData\Roaming\Spotify\SpotifyWebHelper.exe
(Google Inc.) C:\Users\Dell\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Dell\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Dell\AppData\Local\Google\Chrome\Application\chrome.exe
(Spotify Ltd) C:\Users\Dell\AppData\Roaming\Spotify\Spotify.exe
(Baidu Inc.) C:\Program Files (x86)\baidu\Baidu Browser\sparkservice.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
(GAS Tecnologia LTDA) C:\Program Files\Diebold\Warsaw\core.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(GAS Tecnologia) C:\Program Files (x86)\GbPlugin\gbpsv.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE
(Google Inc.) C:\Users\Dell\AppData\Local\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
(Google Inc.) C:\Users\Dell\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Dell\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Dell\AppData\Local\Google\Chrome\Application\chrome.exe
==================== Registro (Whitelisted) ====================
(Se uma entrada for incluída na fixlist, o ítem no Registro será restaurado para o padrão ou removido. O arquivo não será movido.)
HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [472992 2013-03-21] (Adobe Systems Incorporated)
HKLM\...\Run: [Diebold - Warsaw] => C:\Program Files\Diebold\Warsaw\core.exe [927280 2016-11-11] (GAS Tecnologia LTDA)
HKLM\...\Run: [iTunesHelper] => C:\Program Files\iTunes\iTunesHelper.exe [170256 2015-12-17] (Apple Inc.)
HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [9080768 2016-11-16] (AVAST Software)
HKLM-x32\...\Run: [AdobeCEPServiceManager] => C:\Program Files (x86)\Common Files\Adobe\CEPServiceManager4\CEPServiceManager.exe [1039248 2013-03-13] (Adobe Systems Incorporated)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
Winlogon\Notify\ GbPluginBb: C:\Program Files (x86)\GbPlugin\gbieh.dll [2016-08-04] (Banco do Brasil)
HKU\S-1-5-21-541809767-3259473088-422590649-1000\...\Run: [uTorrent] => C:\Users\Dell\AppData\Roaming\uTorrent\uTorrent.exe [1979072 2016-12-20] (BitTorrent Inc.)
HKU\S-1-5-21-541809767-3259473088-422590649-1000\...\Run: [Google Update] => C:\Users\Dell\AppData\Local\Google\Update\1.3.32.7\GoogleUpdateCore.exe [601752 2016-12-19] (Google Inc.)
HKU\S-1-5-21-541809767-3259473088-422590649-1000\...\Run: [BingSvc] => C:\Users\Dell\AppData\Local\Microsoft\BingSvc\BingSvc.exe [144008 2016-02-12] (© 2015 Microsoft Corporation)
HKU\S-1-5-21-541809767-3259473088-422590649-1000\...\Run: [HW_OPENEYE_OUC_VIVO INTERNET] => C:\Program Files (x86)\VIVO INTERNET\UpdateDog\ouc.exe [110592 2009-07-27] (Huawei Technologies Co., Ltd.)
HKU\S-1-5-21-541809767-3259473088-422590649-1000\...\Run: [Spotify Web Helper] => C:\Users\Dell\AppData\Roaming\Spotify\SpotifyWebHelper.exe [1444976 2017-01-12] (Spotify Ltd)
HKU\S-1-5-21-541809767-3259473088-422590649-1000\...\Run: [Spotify] => C:\Users\Dell\AppData\Roaming\Spotify\Spotify.exe [7153264 2017-01-12] (Spotify Ltd)
HKU\S-1-5-21-541809767-3259473088-422590649-1000\...\Run: [GoogleChromeAutoLaunch_D622EF8A2681BC7366969A9522AD93CD] => C:\Users\Dell\AppData\Local\Google\Chrome\Application\chrome.exe [935768 2016-12-08] (Google Inc.)
HKU\S-1-5-21-541809767-3259473088-422590649-1000\...\MountPoints2: {46bfe7e2-3179-11e6-a86c-d067e5f6255d} - E:\AutoRun.exe
HKU\S-1-5-21-541809767-3259473088-422590649-1000\...\MountPoints2: {4f1e1d42-dfaa-11e5-a026-d067e5f6255d} - E:\AutoRun.exe
HKU\S-1-5-21-541809767-3259473088-422590649-1000\...\MountPoints2: {8475437e-62f7-11e6-9889-d067e5f6255d} - E:\AutoRun.exe
ShellExecuteHooks-x32: GbPluginObj Class - {E37CB5F0-51F5-4395-A808-5FA49E399F83} - C:\PROGRAM FILES (X86)\GbPlugin\gbieh.dll [1947872 2016-08-04] (Banco do Brasil)
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2016-09-09] (AVAST Software)
ShellIconOverlayIdentifiers: [BaiduAntivirusIconLock] -> {0A93904A-BB1E-4a0c-9753-B57B9AE272CC} => C:\Program Files (x86)\Baidu Security\Baidu Antivirus\5.4.3.133394.0\BavShx64.dll -> Nenhum Arquivo
GroupPolicy: Restrição - Chrome <======= ATENÇÃO
CHR HKLM\SOFTWARE\Policies\Google: Restrição <======= ATENÇÃO
==================== Internet (Whitelisted) ====================
(Se um ítem for incluído na fixlist, sendo um ítem do Registro, será removido ou restaurado para o padrão.)
Tcpip\Parameters: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{784B1A0D-CA35-4ABB-BBC9-01171D5BB598}: [NameServer] 8.8.8.8,8.8.4.4
Tcpip\..\Interfaces\{784B1A0D-CA35-4ABB-BBC9-01171D5BB598}: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{F2CAAA75-2A04-4FB3-AF44-B1CAE46AA2CF}: [DhcpNameServer] 172.20.10.1
Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://br.hao123.com/?tn=sdkr_inner_hp_09_hao123_br&guid=6931d7e3955ba491d230ad21e3862095
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://br.hao123.com/?tn=sdkr_inner_hp_09_hao123_br&guid=6931d7e3955ba491d230ad21e3862095
HKU\S-1-5-21-541809767-3259473088-422590649-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://br.hao123.com/?tn=sdkr_inner_hp_09_hao123_br&guid=6931d7e3955ba491d230ad21e3862095
BHO: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL [2010-03-25] (Microsoft Corporation)
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2016-10-24] (AVAST Software)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17] (Microsoft Corp.)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL [2010-02-28] (Microsoft Corporation)
BHO-x32: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL [2010-03-25] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_66\bin\ssv.dll [2016-01-09] (Oracle Corporation)
BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2016-10-24] (AVAST Software)
BHO-x32: Auxiliar de Conexão de Conta da Microsoft -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17] (Microsoft Corp.)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL [2010-02-28] (Microsoft Corporation)
BHO-x32: GbIehObj Class -> {C41A1C0E-EA6C-11D4-B1B8-444553540000} -> C:\PROGRAM FILES (X86)\GBPLUGIN\gbieh.dll [2016-08-04] (Banco do Brasil)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_66\bin\jp2ssv.dll [2016-01-09] (Oracle Corporation)
FireFox:
========
FF DefaultProfile: zx90lo99.default
FF ProfilePath: C:\Users\Dell\AppData\Roaming\Mozilla\Firefox\Profiles\zx90lo99.default [2016-12-14]
FF SearchEngineOrder.3: Mozilla\Firefox\Profiles\zx90lo99.default -> Bing
FF SelectedSearchEngine: Mozilla\Firefox\Profiles\zx90lo99.default -> Bing
FF Homepage: Mozilla\Firefox\Profiles\zx90lo99.default -> hxxp://www.msn.com/?pc=SL5M&ocid=SL5MDHP&osmkt=pt-br
FF Keyword.URL: Mozilla\Firefox\Profiles\zx90lo99.default -> hxxp://www.bing.com/search?FORM=SL5MDF&PC=SL5M&q=
FF Homepage: Mozilla\Firefox\Profiles\zx90lo99.default -> hxxp://br.hao123.com/?tn=sdkr_inner_hp_09_hao123_br&guid=6931d7e3955ba491d230ad21e3862095
FF Extension: (Bing Search) - C:\Users\Dell\AppData\Roaming\Mozilla\Firefox\Profiles\zx90lo99.default\Extensions\bingsearch.full@microsoft.com.xpi [2016-02-12]
FF Extension: (Firefox Hotfix) - C:\Users\Dell\AppData\Roaming\Mozilla\Firefox\Profiles\zx90lo99.default\Extensions\firefox-hotfix@mozilla.org.xpi [2016-08-30]
FF SearchPlugin: C:\Users\Dell\AppData\Roaming\Mozilla\Firefox\Profiles\zx90lo99.default\searchplugins\bing-.xml [2016-02-12]
FF HKLM\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: (Avast Online Security) - C:\Program Files\AVAST Software\Avast\WebRep\FF [2016-09-19]
FF HKLM\...\Firefox\Extensions: [sp@avast.com] - C:\Program Files\AVAST Software\Avast\SafePrice\FF
FF Extension: (Avast SafePrice) - C:\Program Files\AVAST Software\Avast\SafePrice\FF [2016-09-19]
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF HKLM-x32\...\Firefox\Extensions: [sp@avast.com] - C:\Program Files\AVAST Software\Avast\SafePrice\FF
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.41212.0\npctrl.dll [2015-12-11] ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~1\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect64.dll [2013-03-21] (Adobe Systems)
FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll [2015-10-14] ()
FF Plugin-x32: @java.com/DTPlugin,version=11.66.2 -> C:\Program Files (x86)\Java\jre1.8.0_66\bin\dtplugin\npDeployJava1.dll [2016-01-09] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.66.2 -> C:\Program Files (x86)\Java\jre1.8.0_66\bin\plugin2\npjp2.dll [2016-01-09] (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.41212.0\npctrl.dll [2015-12-11] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL [2010-03-24] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3528.0331 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2014-03-31] (Microsoft Corporation)
FF Plugin-x32: @videolan.org/vlc,version=2.2.1 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2016-12-23] (Adobe Systems Inc.)
FF Plugin-x32: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect32.dll [2013-03-21] (Adobe Systems)
FF Plugin HKU\S-1-5-21-541809767-3259473088-422590649-1000: @tools.google.com/Google Update;version=3 -> C:\Users\Dell\AppData\Local\Google\Update\1.3.32.7\npGoogleUpdate3.dll [2016-12-19] (Google Inc.)
FF Plugin HKU\S-1-5-21-541809767-3259473088-422590649-1000: @tools.google.com/Google Update;version=9 -> C:\Users\Dell\AppData\Local\Google\Update\1.3.32.7\npGoogleUpdate3.dll [2016-12-19] (Google Inc.)
Chrome:
=======
CHR HomePage: Default -> msn.com/?pc=__PARAM__&ocid=__PARAM__DHP&osmkt=pt-br
CHR StartupUrls: Default -> "hxxps://www.google.com.br/","hxxp://www.google.com.br/"
CHR Profile: C:\Users\Dell\AppData\Local\Google\Chrome\User Data\Default [2017-01-17]
CHR Extension: (Google Docs) - C:\Users\Dell\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2016-01-09]
CHR Extension: (Google Drive) - C:\Users\Dell\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2016-01-09]
CHR Extension: (YouTube) - C:\Users\Dell\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2016-01-09]
CHR Extension: (Google Cast) - C:\Users\Dell\AppData\Local\Google\Chrome\User Data\Default\Extensions\boadgeojelhgndaghljhdicfkmllpafd [2016-08-02]
CHR Extension: (Videostream for Google Chromecast™) - C:\Users\Dell\AppData\Local\Google\Chrome\User Data\Default\Extensions\cnciopoikihiagdjbjpnocolokfelagl [2016-11-28]
CHR Extension: (Google Search) - C:\Users\Dell\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2016-01-09]
CHR Extension: (Adobe Acrobat) - C:\Users\Dell\AppData\Local\Google\Chrome\User Data\Default\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2017-01-17]
CHR Extension: (Avast SafePrice) - C:\Users\Dell\AppData\Local\Google\Chrome\User Data\Default\Extensions\eofcbnmajmjmplflapaojjnihcjkigck [2016-11-21]
CHR Extension: (Documentos Google off-line) - C:\Users\Dell\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-03-21]
CHR Extension: (GBBD Guardião - Itaú 30 horas) - C:\Users\Dell\AppData\Local\Google\Chrome\User Data\Default\Extensions\kgmpojlddncminmkddkpoegdjhojjipg [2016-01-12]
CHR Extension: (NTabs) - C:\Users\Dell\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhinokolmgnfenkflfinnjkgjgpdamao [2017-01-10]
CHR Extension: (AVG Secure Search) - C:\Users\Dell\AppData\Local\Google\Chrome\User Data\Default\Extensions\ndibdjnfmopecpmkdieinmbadjfpblof [2016-01-12]
CHR Extension: (Pagamentos da Chrome Web Store) - C:\Users\Dell\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2016-04-04]
CHR Extension: (Gmail) - C:\Users\Dell\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2016-01-09]
CHR Extension: (Chrome Media Router) - C:\Users\Dell\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2016-12-16]
CHR HKU\S-1-5-21-541809767-3259473088-422590649-1000\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [fcfenmboojpjinhpgggodefccipikbpd] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [eofcbnmajmjmplflapaojjnihcjkigck] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChromeSp.crx
StartMenuInternet: Google Chrome.2HFLTDG7T36IFDD7XI2LU35AWY - C:\Users\Dell\AppData\Local\Google\Chrome\Application\chrome.exe
==================== Serviços (Whitelisted) ====================
(Se uma entrada for incluída na fixlist, será removida do Registro. O arquivo não será movido, a menos que seja colocado separadamente.)
R2 Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [77104 2015-10-07] (Apple Inc.)
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [197128 2016-09-09] (AVAST Software)
R2 GbpSv; C:\Program Files (x86)\GbPlugin\gbpsv.exe [631520 2016-08-04] (GAS Tecnologia)
R2 HWDeviceService64.exe; C:\ProgramData\DatacardService\HWDeviceService64.exe [339456 2010-11-16] () [Arquivo não assinado]
R2 LitePDFReaderService; C:\Program Files (x86)\LitePDFReader\1.0.0.8000113\LitePDFReaderServ.exe [154216 2016-12-29] ()
S2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [1135416 2015-10-05] (Malwarebytes)
S3 NMIndexingService; C:\Program Files (x86)\Common Files\Ahead\Lib\NMIndexingService.exe [279848 2007-06-27] (Nero AG)
R2 SparkSvc; C:\Program Files (x86)\baidu\Baidu Browser\sparkservice.exe [97080 2016-01-15] (Baidu Inc.)
S3 SparkUpdater; C:\Program Files (x86)\Baidu\SparkUpdate\Sparkupdate.exe [1372472 2016-01-15] (Baidu.com, Inc.)
R2 TeamViewer; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [5613328 2015-07-29] (TeamViewer GmbH)
S3 TermService; C:\Windows\System32\termsrv.dll [683520 2015-09-03] (Microsoft Corporation) [Arquivo não assinado]
R2 Warsaw Technology; C:\Program Files\Diebold\Warsaw\core.exe [927280 2016-11-11] (GAS Tecnologia LTDA)
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2015-09-03] (Microsoft Corporation)
===================== Drivers (Whitelisted) ======================
(Se uma entrada for incluída na fixlist, será removida do Registro. O arquivo não será movido, a menos que seja colocado separadamente.)
S3 aswHdsKe; C:\Windows\system32\drivers\aswHdsKe.sys [82936 2016-11-16] (AVAST Software)
S3 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [37656 2016-09-09] (AVAST Software)
R1 aswKbd; C:\Windows\system32\drivers\aswKbd.sys [37144 2016-09-09] (AVAST Software)
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [108816 2016-09-09] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [103064 2016-09-09] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [74544 2016-09-09] (AVAST Software)
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [969184 2016-09-19] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [513632 2016-09-22] (AVAST Software)
R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [163416 2016-09-09] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [293352 2016-10-18] (AVAST Software)
S3 EsgScanner; C:\Windows\System32\DRIVERS\EsgScanner.sys [22704 2016-01-11] ()
R1 gbpddfac; C:\Windows\System32\drivers\gbpddfac64.sys [28888 2017-01-17] (GAS Tecnologia)
R0 gbpddreg; C:\Windows\System32\drivers\gbpddreg64.sys [29816 2017-01-17] (GAS Tecnologia)
R3 GBPRCM; C:\Program Files (x86)\GbPlugin\gbprcm64.sys [29912 2015-09-22] (GAS Tecnologia)
R3 int0800; C:\Windows\System32\DRIVERS\flashud.sys [51712 2009-09-09] (Intel Corporation)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2015-10-05] (Malwarebytes)
S3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [63704 2015-10-05] (Malwarebytes Corporation)
R3 RTSUER; C:\Windows\System32\Drivers\RtsUer.sys [377560 2014-12-08] (Realsil Semiconductor Corporation)
R3 SmbDrvI; C:\Windows\System32\DRIVERS\Smb_driver_Intel.sys [33448 2015-03-20] (Synaptics Incorporated)
R3 Warsaw_PP; C:\Program Files (x86)\GbPlugin\wsftprp64.sys [24792 2015-09-22] (GAS Tecnologia LTDA)
R1 wsddfac; C:\Windows\System32\drivers\wsddfac.sys [28376 2017-01-12] (GAS Tecnologia)
R1 wsddntf; C:\Windows\System32\DRIVERS\wsddntf.sys [36984 2016-11-11] (GAS Tecnologia)
R1 wsddpp; C:\Windows\system32\drivers\wsddpp.sys [25184 2016-11-11] (GAS Tecnologia)
R3 wsddprm; C:\Windows\system32\drivers\wsddprm.sys [25184 2016-11-11] (GAS Tecnologia)
S3 cykbfltrService; system32\DRIVERS\cykbfltr.sys [X]
S3 cymfltrService; system32\DRIVERS\cymfltr.sys [X]
==================== NetSvcs (Whitelisted) ===================
(Se uma entrada for incluída na fixlist, será removida do Registro. O arquivo não será movido, a menos que seja colocado separadamente.)
==================== Três Meses Criados arquivos e pastas ========
(Se uma entrada for incluída na fixlist, o arquivo/pasta será movido.)
2017-01-17 14:26 - 2017-01-17 14:28 - 00022177 _____ C:\Users\Dell\Desktop\FRST.txt
2017-01-17 14:26 - 2017-01-17 14:26 - 00000000 ____D C:\FRST
2017-01-17 14:25 - 2017-01-17 14:25 - 02419200 _____ (Farbar) C:\Users\Dell\Desktop\FRST64.exe
2017-01-17 14:16 - 2017-01-17 14:13 - 00003060 _____ C:\Users\Public\Desktop\Corel CAPTURE X8 (64-Bit).lnk
2017-01-17 14:16 - 2017-01-17 14:13 - 00002343 _____ C:\Users\Public\Desktop\Corel CONNECT X8 (64-Bit).lnk
2017-01-17 14:16 - 2017-01-17 14:12 - 00003063 _____ C:\Users\Public\Desktop\Corel PHOTO-PAINT X8 (64-Bit).lnk
2017-01-17 14:16 - 2017-01-17 14:12 - 00003015 _____ C:\Users\Public\Desktop\CorelDRAW X8 (64-Bit).lnk
2017-01-17 14:16 - 2017-01-17 14:12 - 00002256 _____ C:\Users\Public\Desktop\Corel Font Manager X8 (64-Bit).lnk
2017-01-17 14:15 - 2017-01-17 14:16 - 00003312 _____ C:\Windows\System32\Tasks\CorelUpdateHelperTaskCore
2017-01-17 14:15 - 2017-01-17 14:15 - 00000000 ____D C:\Program Files (x86)\Corel
2017-01-17 14:13 - 2017-01-17 14:13 - 00000000 ____D C:\Users\Public\Documents\Corel
2017-01-17 14:12 - 2017-01-17 14:13 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CorelDRAW Graphics Suite X8 (64-bit)
2017-01-17 12:43 - 2017-01-17 12:43 - 06478939 _____ C:\Users\Dell\Desktop\SLIDE COACHING PARA MULHERES.pptx
2017-01-17 10:57 - 2017-01-17 10:57 - 00000165 ____H C:\Users\Dell\Desktop\~$696.xlsx
2017-01-17 10:56 - 2017-01-17 10:56 - 00021748 _____ C:\Users\Dell\Desktop\696.xlsx
2017-01-12 15:31 - 2017-01-12 15:31 - 17742949 _____ C:\Users\Dell\Desktop\Update_KB2670838_Win7.zip
2017-01-12 15:08 - 2017-01-17 14:15 - 00000000 ____D C:\Program Files\Corel
2017-01-12 14:23 - 2017-01-12 14:23 - 12215366 _____ C:\Users\Dell\Desktop\(VCTOTUROSHD) faltando api-ms-win-crt-runtime-l1-1-0.dll - 32 BISTS.rar
2017-01-12 14:11 - 2017-01-12 14:12 - 12505160 _____ (Corel Corporation) C:\Users\Dell\Desktop\cdgsx8seo (1).exe
2017-01-12 14:07 - 2017-01-12 14:07 - 12998216 _____ C:\Users\Dell\Desktop\(VCTOTUROSHD) faltando api-ms-win-crt-runtime-l1-1-0.dll - 64 BISTS.rar
2017-01-12 12:54 - 2017-01-12 12:55 - 14749120 _____ (Microsoft Corporation) C:\Users\Dell\Desktop\vc_redist.x64.exe
2017-01-12 12:44 - 2017-01-12 12:44 - 00000547 _____ C:\Users\Dell\Desktop\INFORMAÇÕES DL.txt
2017-01-12 12:42 - 2017-01-12 12:42 - 00000000 ____D C:\Users\Dell\AppData\Roaming\Corel
2017-01-12 12:41 - 2017-01-12 12:41 - 00000000 ____D C:\Program Files (x86)\gs
2017-01-12 12:39 - 2017-01-12 12:39 - 00000000 ____D C:\Users\Todos os Usuários\VsTelemetry
2017-01-12 12:39 - 2017-01-12 12:39 - 00000000 ____D C:\ProgramData\VsTelemetry
2017-01-12 12:37 - 2017-01-12 12:37 - 00000000 ____D C:\Program Files\Common Files\Corel
2017-01-12 12:28 - 2017-01-17 14:23 - 00000000 ____D C:\Users\Todos os Usuários\Corel
2017-01-12 12:28 - 2017-01-17 14:23 - 00000000 ____D C:\ProgramData\Corel
2017-01-12 11:43 - 2017-01-12 11:43 - 00003880 _____ C:\Windows\System32\Tasks\94A46359-5537-4201-BEFD-1EC63DFD0942
2017-01-12 11:42 - 2017-01-12 11:42 - 00000229 _____ C:\Users\Todos os Usuários\nbc.ini
2017-01-12 11:42 - 2017-01-12 11:42 - 00000229 _____ C:\ProgramData\nbc.ini
2017-01-12 11:40 - 2017-01-17 14:07 - 534612834 _____ C:\Users\Dell\Desktop\CorelDRAWGraphicsSuiteX8Installer_pt64Bit.zip
2017-01-12 11:39 - 2017-01-12 11:39 - 00000000 ____D C:\Users\Todos os Usuários\UniqueId
2017-01-12 11:39 - 2017-01-12 11:39 - 00000000 ____D C:\ProgramData\UniqueId
2017-01-12 11:37 - 2017-01-12 11:38 - 12505160 _____ (Corel Corporation) C:\Users\Dell\Desktop\cdgsx8seo.exe
2017-01-12 11:36 - 2017-01-12 11:36 - 14882731 _____ C:\Users\Dell\Desktop\CRACHÁS - DL 009.cdr
2017-01-09 10:44 - 2017-01-09 10:44 - 02151923 _____ C:\Users\Dell\Desktop\RAIKA CANETA 2.psd
2017-01-09 10:40 - 2017-01-09 10:40 - 00486293 _____ C:\Users\Dell\Desktop\CANETA.pdf
2017-01-09 10:40 - 2017-01-09 10:40 - 00001747 _____ C:\Users\Dell\.recently-used.xbel
2017-01-09 10:16 - 2017-01-09 10:16 - 00000000 ____D C:\Users\Dell\AppData\Roaming\inkscape
2017-01-09 10:05 - 2017-01-09 10:05 - 00001051 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Inkscape.lnk
2017-01-09 10:03 - 2017-01-09 10:03 - 00001007 _____ C:\Users\Public\Desktop\Inkscape.lnk
2017-01-09 09:53 - 2017-01-09 10:07 - 00000000 ____D C:\Program Files (x86)\Inkscape
2017-01-09 09:48 - 2017-01-09 09:52 - 34662316 _____ (inkscape.org) C:\Users\Dell\Desktop\Inkscape-0.48.0-1.exe
2017-01-06 16:02 - 2017-01-06 16:02 - 03070800 _____ C:\Users\Dell\Desktop\RAIKA CANETA 2.pdf
2017-01-06 15:57 - 2017-01-06 15:57 - 03072870 _____ C:\Users\Dell\Desktop\RAIKA CANETA.pdf
2017-01-06 09:49 - 2017-01-12 13:07 - 00028376 _____ (GAS Tecnologia) C:\Windows\system32\Drivers\wsddfac.sys
2017-01-06 09:49 - 2016-11-11 15:41 - 00036984 _____ (GAS Tecnologia) C:\Windows\system32\Drivers\wsddntf.sys
2017-01-06 09:49 - 2016-11-11 15:41 - 00025184 ____N (GAS Tecnologia) C:\Windows\system32\Drivers\wsddprm.sys
2017-01-06 09:49 - 2016-11-11 15:41 - 00025184 ____N (GAS Tecnologia) C:\Windows\system32\Drivers\wsddpp.sys
2017-01-06 09:49 - 2016-11-11 15:41 - 00008811 _____ C:\Windows\system32\Drivers\wsddntf.cat
2017-01-04 15:25 - 2017-01-04 15:25 - 00001260 _____ C:\Users\Dell\Desktop\4K Video Downloader.lnk
2017-01-04 15:25 - 2017-01-04 15:25 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\4K Download
2017-01-04 15:22 - 2017-01-17 10:34 - 00000000 ____D C:\Users\Dell\AppData\Roaming\LitePDFReader
2017-01-04 15:22 - 2017-01-04 15:23 - 00000000 ____D C:\Users\Todos os Usuários\tools
2017-01-04 15:22 - 2017-01-04 15:23 - 00000000 ____D C:\ProgramData\tools
2017-01-04 15:22 - 2017-01-04 15:22 - 00000000 ____D C:\Program Files (x86)\Tools
2017-01-04 15:22 - 2017-01-04 15:22 - 00000000 ____D C:\Program Files (x86)\LitePDFReader
2017-01-03 11:30 - 2017-01-03 11:30 - 00000000 ____D C:\Users\Dell\AppData\Local\4kdownload.com
2017-01-03 11:29 - 2017-01-03 11:29 - 00000000 ____D C:\Program Files (x86)\4KDownload
2016-12-25 00:39 - 2017-01-12 13:05 - 00000000 ____D C:\Users\Dell\AppData\LocalLow\uTorrent
2016-12-20 12:37 - 2016-12-20 12:37 - 00104210 _____ C:\Users\Dell\Desktop\696 CRISTHIANE PINTO RESENDE COSTA ARAUJO.pdf
2016-12-16 16:36 - 2016-12-16 16:36 - 00000000 ____D C:\Users\Dell\AppData\Roaming\Opera Software
2016-12-16 16:36 - 2016-12-16 16:36 - 00000000 ____D C:\Users\Dell\AppData\Local\Opera Software
2016-12-16 16:36 - 2016-12-16 16:36 - 00000000 ____D C:\Users\Dell\.MCTranscodingSDK
2016-12-15 17:47 - 2016-12-15 17:47 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Lightworks
2016-12-15 17:46 - 2016-12-15 17:46 - 00000000 ____D C:\Users\Todos os Usuários\Geevs
2016-12-15 17:46 - 2016-12-15 17:46 - 00000000 ____D C:\ProgramData\Geevs
2016-12-15 17:45 - 2016-12-16 16:35 - 00000000 ____D C:\Users\Public\Documents\Lightworks
2016-12-15 17:30 - 2017-01-12 14:27 - 00000000 ____D C:\Users\Todos os Usuários\Package Cache
2016-12-15 17:30 - 2017-01-12 14:27 - 00000000 ____D C:\ProgramData\Package Cache
2016-12-15 17:28 - 2016-12-16 16:36 - 00000000 ____D C:\Program Files (x86)\Lightworks
2016-12-15 17:20 - 2017-01-12 12:17 - 00000000 ____D C:\Program Files (x86)\Opera
2016-12-15 17:20 - 2017-01-12 12:16 - 00000000 ____D C:\Users\Dell\AppData\Roaming\opera_helper
2016-12-15 17:20 - 2016-12-15 17:20 - 00000000 ___HD C:\Users\Dell\AppData\Roaming\GoldenGate
2016-12-15 15:44 - 2016-12-15 15:44 - 00355838 _____ C:\Users\Dell\Desktop\rb.png
2016-12-13 16:56 - 2016-12-13 16:56 - 00000162 ____H C:\Users\Dell\Desktop\~$_inscaltercadastralempresa.doc
2016-12-13 16:17 - 2016-12-13 16:17 - 00002599 _____ C:\Users\Dell\Desktop\Emissor de Nota Fiscal Eletronica (NF-e) 3.10 - Versao de Teste.lnk
2016-12-13 16:17 - 2016-12-13 16:17 - 00000000 ____D C:\Users\Dell\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Programas Secretaria da Fazenda
2016-12-13 16:17 - 2016-12-13 16:17 - 00000000 ____D C:\log
2016-12-13 16:17 - 2016-12-13 16:17 - 00000000 ____D C:\database
2016-12-05 16:33 - 2017-01-17 14:05 - 00000000 ____D C:\Users\Dell\Desktop\Coaching Mulheres
2016-12-02 14:34 - 2016-12-02 14:34 - 00000165 ____H C:\Users\Dell\Desktop\~$Visitas.xlsx
2016-12-01 10:35 - 2016-12-01 10:35 - 04094085 _____ C:\Users\Dell\Desktop\Saudarei este dia com amor no coração!.png
2016-11-30 09:08 - 2016-11-30 09:08 - 00000162 ____H C:\Users\Dell\Desktop\~$ (Treinamento) - CRICA.docx
2016-11-28 14:46 - 2016-11-28 14:46 - 01881176 _____ C:\Users\Dell\Desktop\Catalogo_2015_Produtos_AVIVAR.pdf
2016-11-28 14:36 - 2016-11-28 14:36 - 00010988 _____ C:\Users\Dell\Desktop\Visitas.xlsx
2016-11-22 17:00 - 2016-11-22 17:00 - 00322304 _____ C:\Users\Dell\Desktop\Cristhiane Pinto Resende Costa Araújo.docx
2016-11-21 08:38 - 2016-11-16 17:39 - 00082936 _____ (AVAST Software) C:\Windows\system32\Drivers\aswHdsKe.sys
2016-11-16 17:15 - 2016-11-16 17:15 - 00000000 ____D C:\Users\Todos os Usuários\Hewlett-Packard
2016-11-16 17:15 - 2016-11-16 17:15 - 00000000 ____D C:\ProgramData\Hewlett-Packard
2016-11-16 10:06 - 2016-11-16 10:06 - 00000165 ____H C:\Users\Dell\Desktop\~$21 - Tabela MG - VRJ MTZ.xlsx
2016-11-08 17:35 - 2016-11-28 18:10 - 00000000 ___RD C:\Users\Dell\Desktop\AVIVAR
2016-11-08 14:41 - 2016-11-16 12:48 - 00000000 _____ C:\Users\Todos os Usuários\appVAVI.dt3
2016-11-08 14:41 - 2016-11-16 12:48 - 00000000 _____ C:\Users\Todos os Usuários\appVAVI.dt2
2016-11-08 14:41 - 2016-11-16 12:48 - 00000000 _____ C:\Users\Todos os Usuários\appVAVI.dt1
2016-11-08 14:41 - 2016-11-16 12:48 - 00000000 _____ C:\ProgramData\appVAVI.dt3
2016-11-08 14:41 - 2016-11-16 12:48 - 00000000 _____ C:\ProgramData\appVAVI.dt2
2016-11-08 14:41 - 2016-11-16 12:48 - 00000000 _____ C:\ProgramData\appVAVI.dt1
2016-10-27 17:10 - 2016-12-13 16:07 - 00000000 ____D C:\Users\Dell\Desktop\Documentos
2016-10-19 12:24 - 2016-10-19 12:24 - 00099536 _____ C:\Users\Dell\Desktop\13254863_10209349455354468_4543747328226759138_o (1).jpg
2016-10-19 12:14 - 2016-10-19 12:14 - 00052728 _____ C:\Users\Dell\Desktop\Assinatura.png
==================== Três Meses Modificados arquivos e pastas ========
(Se uma entrada for incluída na fixlist, o arquivo/pasta será movido.)
2017-01-17 14:28 - 2016-01-12 09:23 - 00028888 _____ (GAS Tecnologia) C:\Windows\system32\Drivers\gbpddfac64.sys
2017-01-17 14:25 - 2016-01-13 14:43 - 00000000 ____D C:\Users\Dell\AppData\Roaming\uTorrent
2017-01-17 14:19 - 2016-01-12 09:23 - 00029816 _____ (GAS Tecnologia) C:\Windows\system32\Drivers\gbpddreg64.sys
2017-01-17 14:19 - 2016-01-12 09:23 - 00000000 ____D C:\Program Files (x86)\GbPlugin
2017-01-17 13:59 - 2016-03-24 13:53 - 00000000 ___RD C:\Users\Dell\Desktop\ESPAÇO VIVENCIAR
2017-01-17 13:25 - 2016-01-14 14:53 - 00000000 ____D C:\Users\Dell\AppData\Local\ElevatedDiagnostics
2017-01-17 12:49 - 2016-10-10 18:15 - 00000000 ____D C:\Users\Dell\AppData\Roaming\Spotify
2017-01-17 12:07 - 2011-04-12 11:40 - 00708664 _____ C:\Windows\system32\prfh0416.dat
2017-01-17 12:07 - 2011-04-12 11:40 - 00148404 _____ C:\Windows\system32\prfc0416.dat
2017-01-17 12:07 - 2009-07-14 03:13 - 01642514 _____ C:\Windows\system32\PerfStringBackup.INI
2017-01-17 12:07 - 2009-07-14 01:20 - 00000000 ____D C:\Windows\inf
2017-01-17 10:47 - 2009-07-14 02:45 - 00021088 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2017-01-17 10:47 - 2009-07-14 02:45 - 00021088 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2017-01-17 10:42 - 2016-01-09 10:23 - 00003758 _____ C:\Windows\System32\Tasks\AutoKMS
2017-01-17 10:34 - 2016-10-10 18:19 - 00000000 ____D C:\Users\Dell\AppData\Local\Spotify
2017-01-12 14:35 - 2016-01-12 09:23 - 00000000 ____D C:\Users\Todos os Usuários\GbPlugin
2017-01-12 14:35 - 2016-01-12 09:23 - 00000000 ____D C:\ProgramData\GbPlugin
2017-01-12 13:05 - 2009-07-14 03:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2017-01-12 13:04 - 2009-07-14 02:45 - 05265056 _____ C:\Windows\system32\FNTCACHE.DAT
2017-01-12 12:46 - 2016-01-09 10:23 - 00183136 _____ C:\Users\Dell\AppData\Local\GDIPFONTCACHEV1.DAT
2017-01-12 12:40 - 2009-07-14 01:20 - 00000000 ____D C:\Program Files\Common Files\Microsoft Shared
2017-01-12 12:17 - 2016-01-08 16:23 - 00001389 _____ C:\Users\Dell\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2017-01-12 12:07 - 2016-01-09 09:51 - 00002441 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk
2017-01-12 11:44 - 2016-10-03 12:08 - 00000000 ____D C:\Users\Todos os Usuários\Baidu Security
2017-01-12 11:44 - 2016-10-03 12:08 - 00000000 ____D C:\ProgramData\Baidu Security
2017-01-12 11:44 - 2016-09-29 15:54 - 00000000 ____D C:\Users\Todos os Usuários\Baidu
2017-01-12 11:44 - 2016-09-29 15:54 - 00000000 ____D C:\ProgramData\Baidu
2017-01-12 11:41 - 2016-10-03 16:51 - 00000337 _____ C:\Windows\wininit.ini
2017-01-12 11:41 - 2016-10-03 16:49 - 00000000 ____D C:\Users\Dell\AppData\Roaming\Baidu
2017-01-12 11:38 - 2016-01-09 09:52 - 00004476 _____ C:\Windows\System32\Tasks\Adobe Acrobat Update Task
2017-01-10 10:44 - 2016-01-09 10:29 - 00004180 _____ C:\Windows\System32\Tasks\avast! Emergency Update
2017-01-10 10:41 - 2016-08-15 12:51 - 00000492 __RSH C:\Users\Todos os Usuários\ntuser.pol
2017-01-10 10:41 - 2016-08-15 12:51 - 00000492 __RSH C:\ProgramData\ntuser.pol
2017-01-09 10:53 - 2016-01-26 21:04 - 00000132 _____ C:\Users\Dell\AppData\Roaming\Preferências do Formato PNG CC da Adobe
2017-01-09 10:40 - 2016-01-08 16:23 - 00000000 ____D C:\Users\Dell
2016-12-28 00:03 - 2016-01-12 11:41 - 00000000 ____D C:\Users\Dell\AppData\Roaming\vlc
2016-12-25 00:39 - 2016-01-08 16:23 - 00000000 ____D C:\Users\Dell\AppData\LocalLow
2016-12-20 11:44 - 2009-07-14 01:20 - 00000000 ____D C:\Windows\system32\wdi
2016-12-19 15:51 - 2016-01-09 09:56 - 00003672 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-541809767-3259473088-422590649-1000UA
2016-12-19 15:51 - 2016-01-09 09:56 - 00003400 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-541809767-3259473088-422590649-1000Core
==================== Arquivos na raiz de alguns diretórios =======
2016-01-26 21:04 - 2017-01-09 10:53 - 0000132 _____ () C:\Users\Dell\AppData\Roaming\Preferências do Formato PNG CC da Adobe
2016-11-08 14:41 - 2016-11-16 12:48 - 0000000 _____ () C:\ProgramData\appVAVI.dt1
2016-11-08 14:41 - 2016-11-16 12:48 - 0000000 _____ () C:\ProgramData\appVAVI.dt2
2016-11-08 14:41 - 2016-11-16 12:48 - 0000000 _____ () C:\ProgramData\appVAVI.dt3
2017-01-12 11:42 - 2017-01-12 11:42 - 0000229 _____ () C:\ProgramData\nbc.ini
Alguns arquivos em TEMP:
====================
C:\Users\Dell\AppData\Local\Temp\AdobeApplicationManager.exe
C:\Users\Dell\AppData\Local\Temp\BingSvc.exe
C:\Users\Dell\AppData\Local\Temp\BSvcProcessor.exe
C:\Users\Dell\AppData\Local\Temp\BSvcUpdater.exe
C:\Users\Dell\AppData\Local\Temp\DefaultPack.EXE
C:\Users\Dell\AppData\Local\Temp\downloader_2.0.0.2_340br_90_20160106_1943_1452080636.exe
C:\Users\Dell\AppData\Local\Temp\GUR9441.exe
C:\Users\Dell\AppData\Local\Temp\GURFDCE.exe
C:\Users\Dell\AppData\Local\Temp\lvzhou_br_IBD_Bundle.exe
C:\Users\Dell\AppData\Local\Temp\spark_install.exe
C:\Users\Dell\AppData\Local\Temp\UPCleaner1.3.52.exe
C:\Users\Dell\AppData\Local\Temp\vlc-2.2.4-win32.exe
==================== Bamital & volsnap ======================
(Não há correção automática para arquivos que não passaram na verificação.)
C:\Windows\system32\winlogon.exe => O arquivo é assinado digitalmente
C:\Windows\system32\wininit.exe => O arquivo é assinado digitalmente
C:\Windows\SysWOW64\wininit.exe => O arquivo é assinado digitalmente
C:\Windows\explorer.exe => O arquivo é assinado digitalmente
C:\Windows\SysWOW64\explorer.exe => O arquivo é assinado digitalmente
C:\Windows\system32\svchost.exe => O arquivo é assinado digitalmente
C:\Windows\SysWOW64\svchost.exe => O arquivo é assinado digitalmente
C:\Windows\system32\services.exe => O arquivo é assinado digitalmente
C:\Windows\system32\User32.dll => O arquivo é assinado digitalmente
C:\Windows\SysWOW64\User32.dll => O arquivo é assinado digitalmente
C:\Windows\system32\userinit.exe => O arquivo é assinado digitalmente
C:\Windows\SysWOW64\userinit.exe => O arquivo é assinado digitalmente
C:\Windows\system32\rpcss.dll => O arquivo é assinado digitalmente
C:\Windows\system32\dnsapi.dll => O arquivo é assinado digitalmente
C:\Windows\SysWOW64\dnsapi.dll => O arquivo é assinado digitalmente
C:\Windows\system32\Drivers\volsnap.sys => O arquivo é assinado digitalmente
LastRegBack: 2017-01-17 13:17
==================== Fim de FRST.txt ============================