Resultado do exame da Farbar Recovery Scan Tool (FRST) (x64) Versão: 05-02-2017
Executado por casa (administrador) em HOME (08-02-2017 15:56:32)
Executando a partir de C:\Users\casa\Desktop
Perfis Carregados: casa (Perfis Disponíveis: casa)
Platform: Windows 7 Ultimate Service Pack 1 (X64) Idioma: Português (Brasil)
Internet Explorer Versão 8 (Navegador padrão: Chrome)
Modo da Inicialização: Normal
Tutorial da Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processos (Whitelisted) =================

(Se uma entrada for incluída na fixlist, o processo será fechado. O arquivo não será movido.)

(GAS Tecnologia) C:\Program Files (x86)\GbPlugin\GbpSv.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrl.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(McAfee, Inc.) C:\Program Files\McAfee Security Scan\3.11.500\SSScheduler.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\avastui.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Piriform Ltd) C:\Program Files\CCleaner\CCleaner64.exe
(Microsoft Corporation) C:\Windows\System32\mqsvc.exe
() C:\Program Files\ByteFence\rtop\bin\rtop_svc.exe
(Microsoft Corporation) C:\Windows\System32\TCPSVCS.EXE
() C:\Program Files\ByteFence\rtop\bin\rtop_bg.exe
(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
(Microsoft Corporation) C:\Windows\System32\nfsclnt.exe
(GAS Tecnologia) C:\Program Files (x86)\GbPlugin\GbpSv.exe
(Mega Limited) C:\Users\casa\AppData\Local\MEGAsync\MEGAsync.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\HEX\Adobe CEF Helper.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\IPC\AdobeIPCBroker.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ADS\Adobe Desktop Service.exe
() C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSync\CoreSync.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CCXProcess\CCXProcess.exe
(Node.js) C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CCXProcess\libs\node.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CCLibrary\CCLibrary.exe
(Node.js) C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CCLibrary\libs\node.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
(BlueStack Systems, Inc.) C:\ProgramData\BlueStacksGameManager\BlueStacks_old.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Byte Technologies LLC) C:\Program Files\ByteFence\ByteFence.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(DLL-files.com) C:\Program Files (x86)\DLL-Files.com Client\DLLFilesClient.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

==================== Registro (Whitelisted) ====================

(Se uma entrada for incluída na fixlist, o ítem no Registro será restaurado para o padrão ou removido. O arquivo não será movido.)

HKLM\...\Run: [ETDCtrl] => C:\Program Files\Elantech\ETDCtrl.exe [3274056 2013-11-25] (ELAN Microelectronics Corp.)
HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [508128 2016-07-01] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [BCSSync] => C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe [91520 2010-03-13] (Microsoft Corporation)
HKLM-x32\...\Run: [Adobe Reader Speed Launcher] => C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe [35696 2009-10-03] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [935288 2009-09-04] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [9080768 2016-11-16] (AVAST Software)
HKLM-x32\...\Run: [Adobe Creative Cloud] => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe [2383040 2016-10-25] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [587288 2016-12-12] (Oracle Corporation)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
Winlogon\Notify\ GbPluginUni: C:\Program Files (x86)\GbPlugin\gbiehUni.dll [2015-09-04] (Banco Itaú Unibanco)
HKU\S-1-5-21-982951881-3382106902-33063772-1000\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [8944344 2016-09-28] (Piriform Ltd)
HKU\S-1-5-21-982951881-3382106902-33063772-1000\...\MountPoints2: {2911c700-58a0-11e4-8305-e8039a494af0} - F:\AutoRun.exe
HKU\S-1-5-21-982951881-3382106902-33063772-1000\...\MountPoints2: {2de36a35-976f-11e4-8a40-e8039a494af0} - F:\AutoRun.exe
HKU\S-1-5-21-982951881-3382106902-33063772-1000\...\MountPoints2: {8540aa08-a8d7-11e4-8347-e8039a494af0} - F:\AutoRun.exe
HKU\S-1-5-21-982951881-3382106902-33063772-1000\...\MountPoints2: {b530432a-4767-11e4-b98b-e8039a494af0} - F:\Startme.exe
HKU\S-1-5-21-982951881-3382106902-33063772-1000\...\MountPoints2: {e3a145f1-4715-11e4-987f-806e6f6e6963} - E:\DriverPackSolution.exe
HKU\S-1-5-21-982951881-3382106902-33063772-1000\...\MountPoints2: {f224cf08-9858-11e4-be21-e8039a494af0} - F:\AutoRun.exe
HKU\S-1-5-18\...\RunOnce: [SPReview] => C:\Windows\System32\SPReview\SPReview.exe [301568 2016-11-06] (Microsoft Corporation)
ShellExecuteHooks-x32: GbPluginObj Class - {E37CB5F0-51F5-4395-A808-5FA49E399008} - C:\Program Files (x86)\GbPlugin\gbiehuni.dll [1896696 2015-09-04] (Banco Itaú Unibanco)
ShellIconOverlayIdentifiers: [
MEGA (Pending)] -> {056D528D-CE28-4194-9BA3-BA2E9197FF8C} => C:\Users\casa\AppData\Local\MEGAsync\ShellExtX64.dll [2017-01-24] ()
ShellIconOverlayIdentifiers: [
MEGA (Synced)] -> {05B38830-F4E9-4329-978B-1DD28605D202} => C:\Users\casa\AppData\Local\MEGAsync\ShellExtX64.dll [2017-01-24] ()
ShellIconOverlayIdentifiers: [
MEGA (Syncing)] -> {0596C850-7BDD-4C9D-AFDF-873BE6890637} => C:\Users\casa\AppData\Local\MEGAsync\ShellExtX64.dll [2017-01-24] ()
ShellIconOverlayIdentifiers: [ AccExtIco1] -> {AB9CF9F8-8A96-4F9D-BF21-CE85714C3A47} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll [2016-10-25] ()
ShellIconOverlayIdentifiers: [ AccExtIco2] -> {853B7E05-C47D-4985-909A-D0DC5C6D7303} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll [2016-10-25] ()
ShellIconOverlayIdentifiers: [ AccExtIco3] -> {42D38F2E-98E9-4382-B546-E24E4D6D04BB} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll [2016-10-25] ()
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2016-10-18] (AVAST Software)
ShellIconOverlayIdentifiers-x32: [
MEGA (Pending)] -> {056D528D-CE28-4194-9BA3-BA2E9197FF8C} => C:\Users\casa\AppData\Local\MEGAsync\ShellExtX32.dll [2017-01-24] ()
ShellIconOverlayIdentifiers-x32: [
MEGA (Synced)] -> {05B38830-F4E9-4329-978B-1DD28605D202} => C:\Users\casa\AppData\Local\MEGAsync\ShellExtX32.dll [2017-01-24] ()
ShellIconOverlayIdentifiers-x32: [
MEGA (Syncing)] -> {0596C850-7BDD-4C9D-AFDF-873BE6890637} => C:\Users\casa\AppData\Local\MEGAsync\ShellExtX32.dll [2017-01-24] ()
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\McAfee Security Scan Plus.lnk [2017-02-06]
ShortcutTarget: McAfee Security Scan Plus.lnk -> C:\Program Files\McAfee Security Scan\3.11.500\SSScheduler.exe (McAfee, Inc.)
Startup: C:\Users\casa\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MEGAsync.lnk [2017-01-24]
ShortcutTarget: MEGAsync.lnk -> C:\Users\casa\AppData\Local\MEGAsync\MEGAsync.exe (Mega Limited)
GroupPolicy: Restrição <======= ATENÇÃO
CHR HKLM\SOFTWARE\Policies\Google: Restrição <======= ATENÇÃO

==================== Internet (Whitelisted) ====================

(Se um ítem for incluído na fixlist, sendo um ítem do Registro, será removido ou restaurado para o padrão.)

Hosts: Há mais de uma entrada no Hosts. Veja a seção Hosts do Addition.txt
Tcpip\Parameters: [DhcpNameServer] 138.121.74.21 138.121.74.25
Tcpip\..\Interfaces\{15515C52-6179-46E0-A6FD-0732A7AFF46A}: [DhcpNameServer] 138.121.74.21 138.121.74.25
Tcpip\..\Interfaces\{75F8254C-39DB-4076-8204-CB3783EFEC29}: [NameServer] 77.234.40.79
Tcpip\..\Interfaces\{900DF21F-4B28-4E3B-89E0-6E5A4591D443}: [DhcpNameServer] 168.121.177.3 8.8.4.4

Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxps://br.search.yahoo.com/yhs/web?hspart=elm&hsimp=yhs-001&type=hdr_s_17_03_wbf_bxinw_17_02¶m1=1¶m2=f%3D1%26b%3DIE%26cc%3Dbr%26pa%3Dhodor%26cd%3D2XzuyEtN2Y1L1Qzu0EzztCtCtAtB0BtD0A0Czy0E0FyDtD0FtN0D0Tzu0StCzzyEyDtN1L2XzutAtFtByDtFtCtFyDtBtN1L1Czu1M1Q1CtAtCtFtCyEtFtDtN1L1G1B1V1N2Y1L1Qzu2SyDyDzy0Fzz0FtB0CtGtByCtC0DtGtDzyzz0FtGyDzytCtAtGtByD0CzztCtAtBtAyCtD0E0D2QtN1M1F1B2Z1V1N2Y1L1Qzu2StDtD0C0EtD0C0C0DtGtC0C0E0AtGyEtCtC0CtGzy0EtDyBtGtCyBzy0DyC0ByCyD0E0B0EtC2QtN0A0LzuyEtN1B2Z1V1T1S1NzutCtCyCzzyB%26cr%3D88049995%26a%3Dhdr_s_17_03_wbf_bxinw_17_02%26os_ver%3D6.1%26os%3DWindows%2B7%2BUltimate
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxps://br.search.yahoo.com/yhs/web?hspart=elm&hsimp=yhs-001&type=hdr_s_17_03_wbf_bxinw_17_02¶m1=1¶m2=f%3D1%26b%3DIE%26cc%3Dbr%26pa%3Dhodor%26cd%3D2XzuyEtN2Y1L1Qzu0EzztCtCtAtB0BtD0A0Czy0E0FyDtD0FtN0D0Tzu0StCzzyEyDtN1L2XzutAtFtByDtFtCtFyDtBtN1L1Czu1M1Q1CtAtCtFtCyEtFtDtN1L1G1B1V1N2Y1L1Qzu2SyDyDzy0Fzz0FtB0CtGtByCtC0DtGtDzyzz0FtGyDzytCtAtGtByD0CzztCtAtBtAyCtD0E0D2QtN1M1F1B2Z1V1N2Y1L1Qzu2StDtD0C0EtD0C0C0DtGtC0C0E0AtGyEtCtC0CtGzy0EtDyBtGtCyBzy0DyC0ByCyD0E0B0EtC2QtN0A0LzuyEtN1B2Z1V1T1S1NzutCtCyCzzyB%26cr%3D88049995%26a%3Dhdr_s_17_03_wbf_bxinw_17_02%26os_ver%3D6.1%26os%3DWindows%2B7%2BUltimate
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://isearch.omiga-plus.com/web/?type=ds&ts=1421537129&from=tugs&uid=ST500LM012XHN-M500MBB_S2RSJ9CC411983&q={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = hxxps://www.google.com/search?trackid=sp-006&q={searchTerms}
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://isearch.
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL =
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://isearch.omiga-plus.com/web/?type=ds&ts=1421537129&from=tugs&uid=ST500LM012XHN-M500MBB_S2RSJ9CC411983&q={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL =
HKU\S-1-5-21-982951881-3382106902-33063772-1000\Software\Microsoft\Internet Explorer\Main,Search Page = hxxps://www.google.com/search?trackid=sp-006&q={searchTerms}
HKU\S-1-5-21-982951881-3382106902-33063772-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxps://br.search.yahoo.com/yhs/web?hspart=elm&hsimp=yhs-001&type=hdr_s_17_03_wbf_bxinw_17_02¶m1=1¶m2=f%3D1%26b%3DIE%26cc%3Dbr%26pa%3Dhodor%26cd%3D2XzuyEtN2Y1L1Qzu0EzztCtCtAtB0BtD0A0Czy0E0FyDtD0FtN0D0Tzu0StCzzyEyDtN1L2XzutAtFtByDtFtCtFyDtBtN1L1Czu1M1Q1CtAtCtFtCyEtFtDtN1L1G1B1V1N2Y1L1Qzu2SyDyDzy0Fzz0FtB0CtGtByCtC0DtGtDzyzz0FtGyDzytCtAtGtByD0CzztCtAtBtAyCtD0E0D2QtN1M1F1B2Z1V1N2Y1L1Qzu2StDtD0C0EtD0C0C0DtGtC0C0E0AtGyEtCtC0CtGzy0EtDyBtGtCyBzy0DyC0ByCyD0E0B0EtC2QtN0A0LzuyEtN1B2Z1V1T1S1NzutCtCyCzzyB%26cr%3D88049995%26a%3Dhdr_s_17_03_wbf_bxinw_17_02%26os_ver%3D6.1%26os%3DWindows%2B7%2BUltimate
HKU\S-1-5-21-982951881-3382106902-33063772-1000\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://www.msn.com/pt-br/?ocid=iehp
SearchScopes: HKLM -> DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxps://br.search.yahoo.com/yhs/search?hspart=iry&hsimp=yhs-fullyhosted_003&type=wbf_bxinw_17_02¶m1=1¶m2=f%3D4%26b%3DIE%26cc%3Dbr%26pa%3Dwincy%26cd%3D2XzuyEtN2Y1L1Qzu0EzztCtCtAtB0BtD0A0Czy0E0FyDtD0FtN0D0Tzu0StCzzyEtCtN1L2XzutAtFtByDtFtCtFtCtDyDtN1L1Czu1ByEtN1L1G1B1V1N2Y1L1Qzu2StCyCtCtD0D0Fzz0EtGyDzyyEzytGtDtA0BtDtGyB0ByEtAtGtD0C0FyBtBtB0B0FtBtD0Dzz2QtN1M1F1B2Z1V1N2Y1L1Qzu2StDtD0C0EtD0C0C0DtGtC0C0E0AtGyEtCtC0CtGzy0EtDyBtGtCyBzy0DyC0ByCyD0E0B0EtC2QtN0A0LzuyE%26cr%3D1446174192%26a%3Dwbf_bxinw_17_02%26os_ver%3D6.1%26os%3DWindows%2B7%2BUltimate&p={searchTerms}
SearchScopes: HKLM -> {2211d4a5-48d0-47f5-a7cd-81e861470f7f} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSERBM&pc=MSERT1
SearchScopes: HKLM -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxps://br.search.yahoo.com/yhs/search?hspart=iry&hsimp=yhs-fullyhosted_003&type=wbf_bxinw_17_02¶m1=1¶m2=f%3D4%26b%3DIE%26cc%3Dbr%26pa%3Dwincy%26cd%3D2XzuyEtN2Y1L1Qzu0EzztCtCtAtB0BtD0A0Czy0E0FyDtD0FtN0D0Tzu0StCzzyEtCtN1L2XzutAtFtByDtFtCtFtCtDyDtN1L1Czu1ByEtN1L1G1B1V1N2Y1L1Qzu2StCyCtCtD0D0Fzz0EtGyDzyyEzytGtDtA0BtDtGyB0ByEtAtGtD0C0FyBtBtB0B0FtBtD0Dzz2QtN1M1F1B2Z1V1N2Y1L1Qzu2StDtD0C0EtD0C0C0DtGtC0C0E0AtGyEtCtC0CtGzy0EtDyBtGtCyBzy0DyC0ByCyD0E0B0EtC2QtN0A0LzuyE%26cr%3D1446174192%26a%3Dwbf_bxinw_17_02%26os_ver%3D6.1%26os%3DWindows%2B7%2BUltimate&p={searchTerms}
SearchScopes: HKLM-x32 -> DefaultScope {E9410C70-B6AE-41FF-AB71-32F4B279EA5F} URL = hxxps://br.search.yahoo.com/yhs/search?hspart=iry&hsimp=yhs-fullyhosted_003&type=wbf_bxinw_17_02¶m1=1¶m2=f%3D4%26b%3DIE%26cc%3Dbr%26pa%3Dwincy%26cd%3D2XzuyEtN2Y1L1Qzu0EzztCtCtAtB0BtD0A0Czy0E0FyDtD0FtN0D0Tzu0StCzzyEtCtN1L2XzutAtFtByDtFtCtFtCtDyDtN1L1Czu1ByEtN1L1G1B1V1N2Y1L1Qzu2StCyCtCtD0D0Fzz0EtGyDzyyEzytGtDtA0BtDtGyB0ByEtAtGtD0C0FyBtBtB0B0FtBtD0Dzz2QtN1M1F1B2Z1V1N2Y1L1Qzu2StDtD0C0EtD0C0C0DtGtC0C0E0AtGyEtCtC0CtGzy0EtDyBtGtCyBzy0DyC0ByCyD0E0B0EtC2QtN0A0LzuyE%26cr%3D1446174192%26a%3Dwbf_bxinw_17_02%26os_ver%3D6.1%26os%3DWindows%2B7%2BUltimate&p={searchTerms}
SearchScopes: HKLM-x32 -> {2211d4a5-48d0-47f5-a7cd-81e861470f7f} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSERBM&pc=MSERT1
SearchScopes: HKLM-x32 -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://isearch.omiga-plus.com/web/?type=ds&ts=1421537129&from=tugs&uid=ST500LM012XHN-M500MBB_S2RSJ9CC411983&q={searchTerms}
SearchScopes: HKLM-x32 -> {E9410C70-B6AE-41FF-AB71-32F4B279EA5F} URL = hxxps://br.search.yahoo.com/yhs/search?hspart=iry&hsimp=yhs-fullyhosted_003&type=wbf_bxinw_17_02¶m1=1¶m2=f%3D4%26b%3DIE%26cc%3Dbr%26pa%3Dwincy%26cd%3D2XzuyEtN2Y1L1Qzu0EzztCtCtAtB0BtD0A0Czy0E0FyDtD0FtN0D0Tzu0StCzzyEtCtN1L2XzutAtFtByDtFtCtFtCtDyDtN1L1Czu1ByEtN1L1G1B1V1N2Y1L1Qzu2StCyCtCtD0D0Fzz0EtGyDzyyEzytGtDtA0BtDtGyB0ByEtAtGtD0C0FyBtBtB0B0FtBtD0Dzz2QtN1M1F1B2Z1V1N2Y1L1Qzu2StDtD0C0EtD0C0C0DtGtC0C0E0AtGyEtCtC0CtGzy0EtDyBtGtCyBzy0DyC0ByCyD0E0B0EtC2QtN0A0LzuyE%26cr%3D1446174192%26a%3Dwbf_bxinw_17_02%26os_ver%3D6.1%26os%3DWindows%2B7%2BUltimate&p={searchTerms}
SearchScopes: HKU\S-1-5-21-982951881-3382106902-33063772-1000 -> DefaultScope {E9410C70-B6AE-41FF-AB71-32F4B279EA5F} URL = hxxps://br.search.yahoo.com/yhs/search?hspart=iry&hsimp=yhs-fullyhosted_003&type=wbf_bxinw_17_02¶m1=1¶m2=f%3D4%26b%3DIE%26cc%3Dbr%26pa%3Dwincy%26cd%3D2XzuyEtN2Y1L1Qzu0EzztCtCtAtB0BtD0A0Czy0E0FyDtD0FtN0D0Tzu0StCzzyEtCtN1L2XzutAtFtByDtFtCtFtCtDyDtN1L1Czu1ByEtN1L1G1B1V1N2Y1L1Qzu2StCyCtCtD0D0Fzz0EtGyDzyyEzytGtDtA0BtDtGyB0ByEtAtGtD0C0FyBtBtB0B0FtBtD0Dzz2QtN1M1F1B2Z1V1N2Y1L1Qzu2StDtD0C0EtD0C0C0DtGtC0C0E0AtGyEtCtC0CtGzy0EtDyBtGtCyBzy0DyC0ByCyD0E0B0EtC2QtN0A0LzuyE%26cr%3D1446174192%26a%3Dwbf_bxinw_17_02%26os_ver%3D6.1%26os%3DWindows%2B7%2BUltimate&p={searchTerms}
SearchScopes: HKU\S-1-5-21-982951881-3382106902-33063772-1000 -> {014DB5FA-EAFB-4592-A95B-F44D3EE87FA9} URL = hxxp://www.trovi.com/Results.aspx?gd=&ctid=CT3330117&octid=EB_ORIGINAL_CTID&ISID=ME67AB44C-6633-4ED2-9E50-162DF848606A&SearchSource=58&CUI=&UM=8&UP=SP0E4D92FB-3537-4FFF-85D6-72F042E31A76&q={searchTerms}&SSPV=
SearchScopes: HKU\S-1-5-21-982951881-3382106902-33063772-1000 -> {2211d4a5-48d0-47f5-a7cd-81e861470f7f} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSERBM&pc=MSERT1
SearchScopes: HKU\S-1-5-21-982951881-3382106902-33063772-1000 -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://isearch.
SearchScopes: HKU\S-1-5-21-982951881-3382106902-33063772-1000 -> {97252940-6A0C-48FD-8AFE-AFA7BFCAC4CF} URL = hxxps://www.google.com/search?q={searchTerms}
SearchScopes: HKU\S-1-5-21-982951881-3382106902-33063772-1000 -> {E9410C70-B6AE-41FF-AB71-32F4B279EA5F} URL = hxxps://br.search.yahoo.com/yhs/search?hspart=iry&hsimp=yhs-fullyhosted_003&type=wbf_bxinw_17_02¶m1=1¶m2=f%3D4%26b%3DIE%26cc%3Dbr%26pa%3Dwincy%26cd%3D2XzuyEtN2Y1L1Qzu0EzztCtCtAtB0BtD0A0Czy0E0FyDtD0FtN0D0Tzu0StCzzyEtCtN1L2XzutAtFtByDtFtCtFtCtDyDtN1L1Czu1ByEtN1L1G1B1V1N2Y1L1Qzu2StCyCtCtD0D0Fzz0EtGyDzyyEzytGtDtA0BtDtGyB0ByEtAtGtD0C0FyBtBtB0B0FtBtD0Dzz2QtN1M1F1B2Z1V1N2Y1L1Qzu2StDtD0C0EtD0C0C0DtGtC0C0E0AtGyEtCtC0CtGzy0EtDyBtGtCyBzy0DyC0ByCyD0E0B0EtC2QtN0A0LzuyE%26cr%3D1446174192%26a%3Dwbf_bxinw_17_02%26os_ver%3D6.1%26os%3DWindows%2B7%2BUltimate&p={searchTerms}
BHO: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL [2010-03-25] (Microsoft Corporation)
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2016-10-24] (AVAST Software)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL [2010-02-28] (Microsoft Corporation)
BHO-x32: Adobe PDF Link Helper -> {18DF081C-E8AD-4283-A596-FA578C2EBDC3} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2009-02-27] (Adobe Systems Incorporated)
BHO-x32: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL [2010-03-25] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_121\bin\ssv.dll [2017-01-31] (Oracle Corporation)
BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2016-10-24] (AVAST Software)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL [2010-02-28] (Microsoft Corporation)
BHO-x32: Sem Nome -> {b608cc98-54de-4775-96c9-097de398500c} -> Nenhum Arquivo
BHO-x32: GbIehObj Class -> {C41A1C0E-EA6C-11D4-B1B8-444553540008} -> C:\Program Files (x86)\GbPlugin\gbiehuni.dll [2015-09-04] (Banco Itaú Unibanco)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_121\bin\jp2ssv.dll [2017-01-31] (Oracle Corporation)
Filter: deflate - {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\Windows\system32\urlmon.dll [2010-11-20] (Microsoft Corporation)
Filter-x32: deflate - {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\Windows\SysWOW64\urlmon.dll [2010-11-20] (Microsoft Corporation)
Filter: gzip - {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\Windows\system32\urlmon.dll [2010-11-20] (Microsoft Corporation)
Filter-x32: gzip - {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\Windows\SysWOW64\urlmon.dll [2010-11-20] (Microsoft Corporation)
StartMenuInternet: IEXPLORE.EXE - iexplore.exe

FireFox:
========
FF HKLM\...\Firefox\Extensions: [sp@avast.com] - C:\Program Files\AVAST Software\Avast\SafePrice\FF
FF Extension: (Avast SafePrice) - C:\Program Files\AVAST Software\Avast\SafePrice\FF [2016-10-18]
FF HKLM\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: (Avast Online Security) - C:\Program Files\AVAST Software\Avast\WebRep\FF [2016-10-18]
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF HKLM-x32\...\Firefox\Extensions: [sp@avast.com] - C:\Program Files\AVAST Software\Avast\SafePrice\FF
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_24_0_0_194.dll [2017-01-10] ()
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect64.dll [2016-10-25] (Adobe Systems)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_24_0_0_194.dll [2017-01-10] ()
FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\Windows\SysWOW64\Adobe\Director\np32dsw_1225195.dll [2016-09-20] (Adobe Systems, Inc.)
FF Plugin-x32: @java.com/DTPlugin,version=11.121.2 -> C:\Program Files (x86)\Java\jre1.8.0_121\bin\dtplugin\npDeployJava1.dll [2017-01-31] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.121.2 -> C:\Program Files (x86)\Java\jre1.8.0_121\bin\plugin2\npjp2.dll [2017-01-31] (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\4.0.50917.0\npctrl.dll [2010-09-16] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL [2010-03-24] (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.32.7\npGoogleUpdate3.dll [2016-12-17] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.32.7\npGoogleUpdate3.dll [2016-12-17] (Google Inc.)
FF Plugin-x32: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect32.dll [2016-10-25] (Adobe Systems)

Chrome:
=======
CHR HomePage: Default -> hxxps://www.google.com.br/
CHR StartupUrls: Default -> "hxxps://www.google.com.br/","hxxps://br.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wbf_fs_16_38¶m1=1¶m2=f%3D7%26b%3Dchmm%26cc%3Dbr%26pa%3DWincy%26cd%3D2XzuyEtN2Y1L1Qzu0CtDtAzzzyyCyD0C0EtD0D0A0B0AtByDtN0D0Tzu0StCyBtCzytN1L2XzutAtFtByEtFyCtFzytN1L1Czu1ByEtN1L1G1B1V1N2Y1L1Qzu2StB0A0EyDtAyCzy0DtGtDzz0DtBtG0CtBtAyDtGyE0C0ByBtGzzyByDzytB0CtAtDtD0C0CtB2QtN1M1F1B2Z1V1N2Y1L1Qzu2StC0FyD0FyD0A0AzytGyB0C0CyDtGyEtAyEzztG0ByDzzyDtGtByCyCzzyC0D0F0C0FyE0DyE2QtN0A0LzuyE%26cr%3D368842672%26a%3Dwbf_fs_16_38%26os_ver%3D6.1%26os%3DWindows%2B7%2BUltimate","hxxps://www.google.com/"
CHR Session Restore: Default -> está habilitado.
CHR Profile: C:\Users\casa\AppData\Local\Google\Chrome\User Data\Default [2017-02-08]
CHR Extension: (Google Apresentações) - C:\Users\casa\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2016-12-09]
CHR Extension: (Sports Addict) - C:\Users\casa\AppData\Local\Google\Chrome\User Data\Default\Extensions\amcejhhbhpkfjbjmkdihpiiioglncjol [2017-01-23]
CHR Extension: (Google Docs) - C:\Users\casa\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2016-12-09]
CHR Extension: (Google Drive) - C:\Users\casa\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2016-12-09]
CHR Extension: (YouTube) - C:\Users\casa\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2016-12-09]
CHR Extension: () - C:\Users\casa\AppData\Local\Google\Chrome\User Data\Default\Extensions\boadgeojelhgndaghljhdicfkmllpafd [2017-02-08]
CHR Extension: (Aba Rascunho Rapido) - C:\Users\casa\AppData\Local\Google\Chrome\User Data\Default\Extensions\ccdndganopcglpemiionihfmlhjkdkge [2016-12-13]
CHR Extension: (Adblock Plus) - C:\Users\casa\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2017-02-02]
CHR Extension: (Tampermonkey) - C:\Users\casa\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo [2017-02-02]
CHR Extension: (MySearch) - C:\Users\casa\AppData\Local\Google\Chrome\User Data\Default\Extensions\eedobnmifkdgejjfpomjhgbhclfmokdf [2017-01-23]
CHR Extension: (Hermes Tab) - C:\Users\casa\AppData\Local\Google\Chrome\User Data\Default\Extensions\ehlceeijggpdgfcefmipcmdelickjgfg [2017-02-01]
CHR Extension: (Avast SafePrice) - C:\Users\casa\AppData\Local\Google\Chrome\User Data\Default\Extensions\eofcbnmajmjmplflapaojjnihcjkigck [2016-11-15]
CHR Extension: (Planilhas do Google) - C:\Users\casa\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2016-12-09]
CHR Extension: (Documentos Google off-line) - C:\Users\casa\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-12-09]
CHR Extension: (AdBlock) - C:\Users\casa\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2017-02-02]
CHR Extension: (Avast Online Security) - C:\Users\casa\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2016-12-18]
CHR Extension: (NewtabTV) - C:\Users\casa\AppData\Local\Google\Chrome\User Data\Default\Extensions\hpnbmmmdclhakfhgapalpedkdljfmbgh [2017-01-24]
CHR Extension: (NewtabTV) - C:\Users\casa\AppData\Local\Google\Chrome\User Data\Default\Extensions\ifpmncopljejldklbpebbheglgllcgdc [2017-01-24]
CHR Extension: (whos.amung.us Users Online Counter) - C:\Users\casa\AppData\Local\Google\Chrome\User Data\Default\Extensions\jkcbiekaonbmiomkbhhfdpllnjgicble [2017-02-02]
CHR Extension: (Devtools Terminal) - C:\Users\casa\AppData\Local\Google\Chrome\User Data\Default\Extensions\leakmhneaibbdapdoienlkifomjceknl [2017-02-02]
CHR Extension: (Search Page Button) - C:\Users\casa\AppData\Local\Google\Chrome\User Data\Default\Extensions\lhikenddlbmfgeecklocefgnoleeafjk [2017-01-23]
CHR Extension: (EasyDocMerge) - C:\Users\casa\AppData\Local\Google\Chrome\User Data\Default\Extensions\mabloidgodmbnmnhoenmhlcjkfelomgp [2017-02-07]
CHR Extension: (Pagamentos da Chrome Web Store) - C:\Users\casa\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2017-01-19]
CHR Extension: (Chrome Apps & Extensions Developer Tool) - C:\Users\casa\AppData\Local\Google\Chrome\User Data\Default\Extensions\ohmmkhmmmpcnpikjeljgnaoabkaalbgc [2017-02-02]
CHR Extension: (Google Publisher Toolbar) - C:\Users\casa\AppData\Local\Google\Chrome\User Data\Default\Extensions\omioeahgfecgfpfldejlnideemfidnkc [2017-02-02]
CHR Extension: (Search Manager) - C:\Users\casa\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej [2017-01-21]
CHR Extension: (Gmail) - C:\Users\casa\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2016-12-09]
CHR Extension: (Chrome Media Router) - C:\Users\casa\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2017-02-07]
CHR Extension: (Chrome Dev Editor) - C:\Users\casa\AppData\Local\Google\Chrome\User Data\Default\Extensions\pnoffddplpippgcfjdhbmhkofpnaalpg [2017-02-02]
CHR HKLM\...\Chrome\Extension: [ehlceeijggpdgfcefmipcmdelickjgfg] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM\...\Chrome\Extension: [pilplloabdedfmialnfchjomjmpjcoej] - hxxps://clients2.google.com/service/update2/crx
CHR HKU\S-1-5-21-982951881-3382106902-33063772-1000\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [ehlceeijggpdgfcefmipcmdelickjgfg] - hxxps://clients2.google.com/service/update2/crx
CHR HKU\S-1-5-21-982951881-3382106902-33063772-1000\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [pilplloabdedfmialnfchjomjmpjcoej] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [ehlceeijggpdgfcefmipcmdelickjgfg] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [eofcbnmajmjmplflapaojjnihcjkigck] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChromeSp.crx
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx
CHR HKLM-x32\...\Chrome\Extension: [pilplloabdedfmialnfchjomjmpjcoej] - hxxps://clients2.google.com/service/update2/crx

==================== Serviços (Whitelisted) ====================

(Se uma entrada for incluída na fixlist, será removida do Registro. O arquivo não será movido, a menos que seja colocado separadamente.)

S4 AdobeUpdateService; C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ElevationManager\AdobeUpdateService.exe [744640 2016-10-25] (Adobe Systems Incorporated)
S4 AGSService; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe [2207960 2016-09-26] (Adobe Systems, Incorporated)
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [197128 2016-10-18] (AVAST Software)
S4 ByteFenceService; C:\Program Files\ByteFence\ByteFenceService.exe [146400 2016-12-18] (Byte Technologies LLC)
S4 DigitalWave.Update.Service; C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\app_updater.exe [437224 2016-12-08] (Digital Wave Ltd.)
R2 GbpSv; C:\Program Files (x86)\GbPlugin\GbpSv.exe [587576 2015-08-12] (GAS Tecnologia)
S2 IpOverUsbSvc; C:\Program Files (x86)\Common Files\Microsoft Shared\Phone Tools\CoreCon\11.0\bin\IpOverUsbSvc.exe [21184 2016-03-29] (Microsoft Corporation)
S3 McComponentHostService; C:\Program Files\McAfee Security Scan\3.11.500\McCHSvc.exe [329480 2017-01-19] (McAfee, Inc.)
R2 NfsClnt; C:\Windows\system32\nfsclnt.exe [65536 2010-11-20] (Microsoft Corporation)
R2 rtop; C:\Program Files\ByteFence\rtop\bin\rtop_svc.exe [304456 2017-02-02] ()
S4 SSSvc; C:\Program Files (x86)\ScreenShot\SSSvc.exe [139744 2016-11-02] (Filseclab Corporation Limited)
S3 Te.Service; C:\Program Files (x86)\Windows Kits\10\Testing\Runtimes\TAEF\Wex.Services.exe [137216 2016-03-29] (Microsoft Corporation) [Arquivo não assinado]
S4 TheCalendarService; C:\Program Files (x86)\CalendarTool\2.0.0.1000040\CalendarServ.exe [154224 2016-09-03] ()
S4 TlntSvr; C:\Windows\System32\tlntsvr.exe [81920 2009-07-13] (Microsoft Corporation)
S3 VSStandardCollectorService150; C:\Program Files (x86)\Microsoft Visual Studio\Shared\Common\DiagnosticsHub.Collection.Service\StandardCollector.Service.exe [128232 2016-12-04] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2009-07-13] (Microsoft Corporation)

===================== Drivers (Whitelisted) ======================

(Se uma entrada for incluída na fixlist, será removida do Registro. O arquivo não será movido, a menos que seja colocado separadamente.)

S3 aswHdsKe; C:\Windows\system32\drivers\aswHdsKe.sys [82936 2016-11-02] (AVAST Software)
S3 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [37656 2016-10-18] (AVAST Software)
R1 aswKbd; C:\Windows\system32\drivers\aswKbd.sys [37144 2016-10-18] (AVAST Software)
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [108816 2016-10-18] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [103064 2016-10-18] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [74544 2016-10-18] (AVAST Software)
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [969184 2016-10-18] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [513632 2016-10-18] (AVAST Software)
R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [163416 2016-10-18] (AVAST Software)
S3 aswTap; C:\Windows\System32\DRIVERS\aswTap.sys [44640 2015-01-19] (The OpenVPN Project)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [293352 2016-10-18] (AVAST Software)
R1 gbpddfac; C:\Windows\System32\drivers\gbpddfac64.sys [28888 2017-02-08] (GAS Tecnologia)
R3 GBPRCM; C:\Program Files (x86)\GbPlugin\gbprcm64.sys [29912 2015-09-04] (GAS Tecnologia)
R0 iaStorF; C:\Windows\System32\DRIVERS\iaStorF.sys [28008 2013-11-16] (Intel Corporation)
R3 NfsRdr; C:\Windows\System32\drivers\nfsrdr.sys [246272 2010-11-20] (Microsoft Corporation)
S3 PsxDrv; C:\Windows\System32\drivers\psxdrv.sys [10240 2009-07-13] (Microsoft Corporation)
R3 RpcXdr; C:\Windows\System32\drivers\rpcxdr.sys [104960 2010-11-20] (Microsoft Corporation)
R3 Warsaw_PP; C:\Program Files (x86)\GbPlugin\wsftprp64.sys [24792 2015-09-04] (GAS Tecnologia LTDA)
S3 ew_hwusbdev; system32\DRIVERS\ew_hwusbdev.sys [X]
S3 ew_usbenumfilter; system32\DRIVERS\ew_usbenumfilter.sys [X]
S3 huawei_cdcacm; system32\DRIVERS\ew_jucdcacm.sys [X]
S3 huawei_enumerator; system32\DRIVERS\ew_jubusenum.sys [X]
S3 huawei_ext_ctrl; system32\DRIVERS\ew_juextctrl.sys [X]
S3 huawei_wwanecm; system32\DRIVERS\ew_juwwanecm.sys [X]
S3 IntcAzAudAddService; system32\drivers\RTKVHD64.sys [X]
S1 itdrvr_vt_1_10_0_25; system32\drivers\itdrvr_vt_1_10_0_25.sys [X]
S3 Synth3dVsc; System32\drivers\synth3dvsc.sys [X]
S3 tsusbhub; system32\drivers\tsusbhub.sys [X]
S3 VGPU; System32\drivers\rdvgkmd.sys [X]
S1 wpnfd_1_10_0_6; system32\drivers\wpnfd_1_10_0_6.sys [X]

==================== NetSvcs (Whitelisted) ===================

(Se uma entrada for incluída na fixlist, será removida do Registro. O arquivo não será movido, a menos que seja colocado separadamente.)


==================== Três Meses Criados arquivos e pastas ========

(Se uma entrada for incluída na fixlist, o arquivo/pasta será movido.)

2017-02-08 15:56 - 2017-02-08 15:59 - 00034734 _____ C:\Users\casa\Desktop\FRST.txt
2017-02-08 15:32 - 2017-02-08 15:56 - 00000000 ____D C:\FRST
2017-02-08 15:30 - 2017-02-08 15:30 - 02421248 _____ (Farbar) C:\Users\casa\Desktop\FRST64.exe
2017-02-08 14:51 - 2017-02-08 14:51 - 00000000 ____D C:\Users\casa\AppData\Roaming\DLL-files.com
2017-02-08 05:32 - 2017-02-08 05:32 - 00000000 ____D C:\Windows\system32\appmgmt
2017-02-08 05:29 - 2017-02-08 05:29 - 00000000 ____D C:\Users\casa\AppData\Local\BlueStacks
2017-02-08 04:13 - 2017-02-08 04:13 - 00001382 _____ C:\Users\casa\Desktop\CODES2.css
2017-02-08 04:12 - 2017-02-08 04:12 - 00086055 _____ C:\Users\casa\Desktop\Twenty Seventeen.txt
2017-02-08 02:51 - 2017-02-08 02:51 - 00001382 _____ C:\Users\casa\Desktop\CODES.html
2017-02-08 02:51 - 2017-02-08 02:51 - 00001382 _____ C:\Users\casa\Desktop\CODES.css
2017-02-08 02:50 - 2017-02-08 02:50 - 00001382 _____ C:\Users\casa\Desktop\CODES.txt
2017-02-08 02:42 - 2017-02-08 02:44 - 00001386 _____ C:\Users\casa\Desktop\Secret.txt
2017-02-06 19:12 - 2017-02-06 19:12 - 00001964 _____ C:\Users\Public\Desktop\McAfee Security Scan Plus.lnk
2017-02-06 19:12 - 2017-02-06 19:12 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\McAfee Security Scan Plus
2017-02-06 19:11 - 2017-02-06 19:12 - 00000000 ____D C:\Program Files\McAfee Security Scan
2017-02-06 18:32 - 2017-02-06 18:32 - 00000000 ____D C:\Users\Todos os Usuários\McAfee Security Scan
2017-02-06 18:32 - 2017-02-06 18:32 - 00000000 ____D C:\ProgramData\McAfee Security Scan
2017-02-06 18:31 - 2017-02-07 09:17 - 00000964 _____ C:\Windows\Tasks\Adobe Flash Player PPAPI Notifier.job
2017-02-06 18:31 - 2017-02-06 18:31 - 00003948 _____ C:\Windows\System32\Tasks\Adobe Flash Player PPAPI Notifier
2017-02-06 18:03 - 2017-02-06 18:03 - 00001026 _____ C:\Users\casa\Desktop\XAMPP Control Panel.lnk
2017-02-04 04:46 - 2017-02-04 05:07 - 523514320 _____ (Microsoft Corporation) C:\Users\casa\Desktop\windows6.1-KB976932-X64.exe
2017-02-03 00:17 - 2017-02-03 00:43 - 00003069 _____ C:\Users\casa\wp-config-php.php
2017-02-02 23:33 - 2017-02-02 23:33 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\XAMPP
2017-02-02 23:14 - 2017-02-02 23:35 - 00000000 ____D C:\Program Files\Nova pasta (2)
2017-02-02 23:09 - 2017-02-02 23:10 - 17934991 _____ C:\Users\casa\Desktop\Steve Jobs PSD.psd
2017-02-02 22:52 - 2017-02-02 22:52 - 00483824 _____ (IBM Corp.) C:\Users\casa\Desktop\RapportSetup.exe
2017-02-02 22:44 - 2017-02-07 17:04 - 00000000 ____D C:\xampp
2017-02-02 22:39 - 2017-01-26 20:26 - 00000000 ____D C:\Users\casa\Desktop\wordpress
2017-02-02 22:36 - 2017-02-02 22:38 - 00000000 ____D C:\Users\casa\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Aplicativos do Google Chrome
2017-02-02 22:33 - 2017-02-02 22:33 - 09195694 _____ C:\Users\casa\Desktop\wordpress-4.7.2-pt_BR.zip
2017-02-02 22:22 - 2017-02-08 15:27 - 00000266 _____ C:\Windows\Tasks\{D570CA53-BEE3-40B7-B798-7DB54159F843}.job
2017-02-02 22:22 - 2017-02-02 22:22 - 00003196 _____ C:\Windows\System32\Tasks\{D570CA53-BEE3-40B7-B798-7DB54159F843}
2017-02-02 22:15 - 2017-02-02 22:20 - 114827840 _____ (Bitnami) C:\Users\casa\Desktop\xampp-win32-5.6.30-0-VC11-installer.exe
2017-02-01 01:49 - 2017-02-01 01:49 - 00000000 ____D C:\b4b7945322219cf7cdc24cb00e
2017-02-01 01:48 - 2017-02-01 01:49 - 21070475 _____ C:\Users\casa\Desktop\IE11-Windows6.1-KB2957689-x86.msu
2017-02-01 01:10 - 2015-06-15 21:36 - 00000000 ____D C:\Users\casa\Desktop\mockup-poster
2017-02-01 01:10 - 2015-06-15 21:36 - 00000000 ____D C:\Users\casa\Desktop\__MACOSX
2017-02-01 01:07 - 2017-02-01 01:08 - 01646805 _____ C:\Users\casa\Desktop\popup_slider.zip
2017-02-01 01:02 - 2017-02-01 01:04 - 19731081 _____ C:\Users\casa\Desktop\poster_mockup_MD.psd.zip
2017-02-01 00:55 - 2017-02-01 00:59 - 58130858 _____ C:\Users\casa\Desktop\Free Poster Mock Up.zip
2017-02-01 00:48 - 2017-02-01 00:48 - 04115863 _____ C:\Users\casa\Desktop\PSD-Poster-Mockup-Templates-Free.rar
2017-02-01 00:48 - 2017-02-01 00:48 - 03694726 _____ C:\Users\casa\Desktop\Poster-Mockup-Free-Download.rar
2017-02-01 00:43 - 2017-02-01 00:43 - 08404465 _____ C:\Users\casa\Desktop\mockup-poster.zip
2017-02-01 00:28 - 2017-02-01 00:28 - 00001254 _____ C:\Users\casa\Desktop\Adobe Photoshop CC 2015 (32 Bit).lnk
2017-01-29 09:18 - 2017-01-29 09:18 - 00001025 _____ C:\Users\Public\Desktop\WinRAR.lnk
2017-01-28 06:02 - 2017-01-28 06:02 - 00001108 _____ C:\Users\casa\Desktop\Peça teatral.txt
2017-01-28 04:29 - 2017-01-28 04:29 - 00001078 _____ C:\Users\casa\Desktop\regedit - Atalho.lnk
2017-01-26 06:15 - 2017-01-26 06:15 - 00003466 _____ C:\Windows\System32\Tasks\ByteFence Scan
2017-01-26 06:15 - 2017-01-26 06:15 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ByteFence Anti-Malware
2017-01-26 01:17 - 2017-01-26 01:17 - 15302984 _____ (Microsoft Corporation) C:\Users\casa\Desktop\vc_redist.x64.exe
2017-01-23 15:11 - 2017-01-23 15:16 - 82060096 _____ C:\Users\casa\Downloads\PUNCH_Dragon_Ball_Super_-_010.mp4
2017-01-23 13:59 - 2017-01-23 14:06 - 93347575 _____ C:\Users\casa\Downloads\Dragon_Ball_Super_-_002.mp4
2017-01-23 12:43 - 2016-05-29 15:41 - 00000000 ____D C:\Users\casa\Desktop\DLL-Files FIXER CRACKEADO 2016 [CANAL Rootz Gamer]
2017-01-23 12:42 - 2017-01-23 12:43 - 04997131 _____ C:\Users\casa\Downloads\DLL-Files FIXER CRACKEADO 2016 [CANAL 4k].rar
2017-01-23 12:41 - 2017-01-23 12:43 - 03342040 _____ C:\Users\casa\Downloads\wrar531br.exe
2017-01-23 12:34 - 2017-01-23 12:34 - 00000033 _____ C:\Users\casa\Desktop\DLL.txt
2017-01-23 12:02 - 2014-06-10 12:27 - 00019392 _____ (Dll-Files.com) C:\Windows\system32\roboot64.exe
2017-01-23 12:01 - 2017-01-23 12:01 - 06621906 _____ C:\Users\casa\Downloads\DL_ManoFalkesBr.rar
2017-01-23 11:53 - 2017-01-23 11:53 - 00000195 _____ C:\Users\casa\Desktop\2- Serial 64bit DLL-Files Fixer.reg
2017-01-23 11:23 - 2017-01-23 11:23 - 00000000 ____D C:\Users\Todos os Usuários\TEMP
2017-01-23 11:23 - 2017-01-23 11:23 - 00000000 ____D C:\ProgramData\TEMP
2017-01-23 11:21 - 2016-12-10 16:51 - 00000000 ____D C:\Users\casa\Desktop\DLL Files Fixes + Crack - By LacerdaTutors V2.0
2017-01-23 11:19 - 2017-01-23 11:21 - 05038610 _____ C:\Users\casa\Downloads\DLL Files Fixes + Crack - By LacerdaTutors V2.0.rar
2017-01-23 11:01 - 2017-01-23 11:01 - 00031622 _____ C:\Users\casa\Downloads\DLL Files Fixer Activator.rar
2017-01-23 10:56 - 2017-01-23 12:49 - 00000000 ____D C:\Program Files (x86)\DLL-Files.com Client
2017-01-23 10:56 - 2017-01-23 12:34 - 00000000 ____D C:\Users\casa\AppData\Roaming\DFXCT
2017-01-23 10:56 - 2017-01-23 10:56 - 00001081 _____ C:\Users\Public\Desktop\DLL-Files.com Client.lnk
2017-01-23 10:56 - 2017-01-23 10:56 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DLL-Files.com Client
2017-01-23 10:55 - 2017-01-23 10:55 - 02729024 _____ (DLL-Files.com Client ) C:\Users\casa\Downloads\clientsetup_d-0.exe
2017-01-23 10:34 - 2017-01-23 10:34 - 00000000 ____D C:\Users\casa\AppData\Local\UnrealEngineLauncher
2017-01-23 10:33 - 2017-01-23 10:33 - 00000000 ____D C:\Users\casa\AppData\Local\UnrealEngine
2017-01-23 10:33 - 2017-01-23 10:33 - 00000000 ____D C:\Users\casa\AppData\Local\EpicGamesLauncher
2017-01-23 09:14 - 2017-01-23 09:14 - 00000000 ____D C:\Users\casa\AppData\LocalLow\DefaultCompany
2017-01-23 09:08 - 2017-01-23 10:27 - 00000000 ____D C:\Users\casa\Documents\New Unity Project
2017-01-23 08:56 - 2017-01-23 09:14 - 00000000 ____D C:\Users\casa\AppData\LocalLow\Unity
2017-01-23 08:56 - 2017-01-23 09:11 - 00000000 ____D C:\Users\Todos os Usuários\Unity
2017-01-23 08:56 - 2017-01-23 09:11 - 00000000 ____D C:\ProgramData\Unity
2017-01-23 08:56 - 2017-01-23 08:56 - 00000000 ____D C:\Users\casa\AppData\Local\Unity
2017-01-23 08:55 - 2017-01-23 09:14 - 00000000 ____D C:\Users\casa\AppData\Roaming\Unity
2017-01-23 08:44 - 2017-01-23 08:44 - 00001242 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Epic Games Launcher.lnk
2017-01-23 08:44 - 2017-01-23 08:44 - 00001230 _____ C:\Users\Public\Desktop\Epic Games Launcher.lnk
2017-01-23 08:43 - 2017-01-23 08:43 - 00000000 ____D C:\Users\Todos os Usuários\Epic
2017-01-23 08:43 - 2017-01-23 08:43 - 00000000 ____D C:\ProgramData\Epic
2017-01-23 08:43 - 2017-01-23 08:43 - 00000000 ____D C:\Program Files (x86)\Epic Games
2017-01-23 08:34 - 2017-01-23 08:34 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Android SDK Tools
2017-01-23 08:33 - 2017-01-31 06:06 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java Development Kit
2017-01-23 08:33 - 2017-01-23 08:33 - 00000000 ____D C:\Program Files (x86)\Android
2017-01-23 08:29 - 2017-01-23 08:29 - 00000000 ____D C:\Users\casa\AppData\LocalLow\Oracle
2017-01-23 08:02 - 2017-01-24 04:10 - 00000000 ____D C:\Users\Todos os Usuários\Windows App Certification Kit
2017-01-23 08:02 - 2017-01-24 04:10 - 00000000 ____D C:\ProgramData\Windows App Certification Kit
2017-01-23 07:58 - 2017-01-23 08:16 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Kits
2017-01-23 07:57 - 2017-01-24 04:14 - 00000000 ____D C:\Program Files\Application Verifier
2017-01-23 07:57 - 2017-01-24 04:14 - 00000000 ____D C:\Program Files (x86)\Application Verifier
2017-01-23 07:13 - 2017-01-23 07:13 - 00000000 ____D C:\Program Files (x86)\GtkSharp
2017-01-23 07:09 - 2017-01-23 07:09 - 00000883 _____ C:\Users\Public\Desktop\Unity 5.4.0f3 (64-bit).lnk
2017-01-23 07:09 - 2017-01-23 07:09 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Unity 5.4.0f3 (64-bit)
2017-01-23 07:04 - 2017-01-23 07:10 - 00000000 ____D C:\Program Files\Unity
2017-01-23 06:53 - 2017-01-23 06:53 - 00000000 ____D C:\Users\casa\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Microsoft Visual Studio 2017 Tools for Unity
2017-01-23 06:53 - 2017-01-23 06:53 - 00000000 ____D C:\Program Files (x86)\Microsoft Visual Studio Tools for Unity
2017-01-23 06:03 - 2017-02-06 13:48 - 00000000 ____D C:\Program Files (x86)\NuGet
2017-01-23 06:03 - 2017-01-23 06:03 - 00000000 ____D C:\Program Files (x86)\Microsoft ASP.NET Core 1.0.1 Local Feed - Visual Studio 15.0
2017-01-23 05:57 - 2017-01-23 05:58 - 08388608 _____ C:\Users\casa\AzureStorageEmulatorDb45_log.ldf
2017-01-23 05:57 - 2017-01-23 05:58 - 08388608 _____ C:\Users\casa\AzureStorageEmulatorDb45.mdf
2017-01-23 05:55 - 2017-01-23 05:57 - 00000000 ____D C:\Users\casa\AppData\Local\AzureStorageEmulator
2017-01-23 05:54 - 2017-01-23 05:58 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Azure
2017-01-23 05:54 - 2017-01-23 05:55 - 00000000 ____D C:\Users\Todos os Usuários\dftmp
2017-01-23 05:54 - 2017-01-23 05:55 - 00000000 ____D C:\ProgramData\dftmp
2017-01-23 05:47 - 2017-01-23 07:57 - 00000000 ____D C:\Program Files\Windows Kits
2017-01-23 05:47 - 2017-01-23 05:47 - 00000000 ____D C:\Program Files\VS2012Schemas
2017-01-23 05:47 - 2017-01-23 05:47 - 00000000 ____D C:\Program Files\VS2010Schemas
2017-01-23 05:47 - 2017-01-23 05:47 - 00000000 ____D C:\Program Files\Microsoft SDKs
2017-01-23 03:24 - 2017-01-23 03:24 - 00003492 _____ C:\Windows\System32\Tasks\AdobeAAMUpdater-1.0-HOME-casa
2017-01-23 03:15 - 2017-01-23 03:15 - 00000000 ____D C:\Users\casa\Documents\Adobe
2017-01-23 03:14 - 2017-01-23 03:14 - 00001254 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Photoshop CC 2015 (32 Bit).lnk
2017-01-22 18:05 - 2017-01-22 18:05 - 00000000 ____D C:\Users\Todos os Usuários\Microsoft DNX
2017-01-22 18:05 - 2017-01-22 18:05 - 00000000 ____D C:\ProgramData\Microsoft DNX
2017-01-22 18:05 - 2017-01-22 18:05 - 00000000 ____D C:\Program Files\Microsoft DNX
2017-01-22 00:11 - 2017-01-22 00:35 - 734003200 _____ C:\Users\casa\Downloads\Adobe.Photoshop.CC.2017.v18.0.1.x86.part1.rar
2017-01-21 16:23 - 2017-01-21 16:31 - 00000000 ____D C:\Users\casa\AppData\Local\.IdentityService
2017-01-21 16:22 - 2017-01-21 16:34 - 00000000 ____D C:\Users\casa\Documents\Visual Studio 2017
2017-01-21 16:03 - 2017-01-21 16:03 - 00000000 ____D C:\Program Files\IIS
2017-01-21 16:03 - 2017-01-21 16:03 - 00000000 ____D C:\Program Files (x86)\IIS
2017-01-21 16:02 - 2017-01-21 16:11 - 00000000 ____D C:\Program Files\IIS Express
2017-01-21 16:02 - 2017-01-21 16:11 - 00000000 ____D C:\Program Files (x86)\IIS Express
2017-01-21 16:01 - 2017-01-21 16:01 - 00000000 ____D C:\Program Files (x86)\Entity Framework Tools
2017-01-21 15:58 - 2017-01-21 15:59 - 00000000 ____D C:\Program Files\dotnet
2017-01-21 15:15 - 2017-01-21 15:15 - 00000000 ____D C:\Program Files (x86)\Windows Phone Kits
2017-01-21 14:05 - 2017-01-21 14:05 - 00000000 ____D C:\Users\casa\AppData\Local\CEF
2017-01-21 07:08 - 2017-01-21 07:08 - 05549504 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2017-01-21 07:08 - 2017-01-21 07:08 - 01732032 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2017-01-21 07:08 - 2017-01-21 07:08 - 01161216 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
2017-01-21 07:08 - 2017-01-21 07:08 - 00878080 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll
2017-01-21 07:08 - 2017-01-21 07:08 - 00859648 _____ (Microsoft Corporation) C:\Windows\system32\tdh.dll
2017-01-21 07:08 - 2017-01-21 07:08 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2017-01-21 07:08 - 2017-01-21 07:08 - 00362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll
2017-01-21 07:08 - 2017-01-21 07:08 - 00338432 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe
2017-01-21 07:08 - 2017-01-21 07:08 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
2017-01-21 07:08 - 2017-01-21 07:08 - 00215040 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll
2017-01-21 07:08 - 2017-01-21 07:08 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe
2017-01-21 07:08 - 2017-01-21 07:08 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll
2017-01-21 07:08 - 2017-01-21 07:08 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll
2017-01-21 07:08 - 2017-01-21 07:08 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll
2017-01-21 07:08 - 2017-01-21 07:08 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll
2017-01-21 07:07 - 2017-01-21 07:07 - 03969472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2017-01-21 07:07 - 2017-01-21 07:07 - 03914176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2017-01-21 07:07 - 2017-01-21 07:07 - 01292192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2017-01-21 07:07 - 2017-01-21 07:07 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll
2017-01-21 07:07 - 2017-01-21 07:07 - 00640512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\advapi32.dll
2017-01-21 07:07 - 2017-01-21 07:07 - 00619520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdh.dll
2017-01-21 07:07 - 2017-01-21 07:07 - 00274944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2017-01-21 07:07 - 2017-01-21 07:07 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2017-01-21 07:07 - 2017-01-21 07:07 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2017-01-21 07:07 - 2017-01-21 07:07 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
2017-01-21 07:07 - 2017-01-21 07:07 - 00006144 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll
2017-01-21 07:07 - 2017-01-21 07:07 - 00005120 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll
2017-01-21 07:07 - 2017-01-21 07:07 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2017-01-21 07:07 - 2017-01-21 07:07 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2017-01-21 07:07 - 2017-01-21 07:07 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2017-01-21 07:07 - 2017-01-21 07:07 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2017-01-21 07:07 - 2017-01-21 07:07 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll
2017-01-21 07:07 - 2017-01-21 07:07 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll
2017-01-21 07:07 - 2017-01-21 07:07 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2017-01-21 07:07 - 2017-01-21 07:07 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll
2017-01-21 07:07 - 2017-01-21 07:07 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2017-01-21 07:07 - 2017-01-21 07:07 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2017-01-21 07:07 - 2017-01-21 07:07 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2017-01-21 07:07 - 2017-01-21 07:07 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll
2017-01-21 07:07 - 2017-01-21 07:07 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2017-01-21 07:07 - 2017-01-21 07:07 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2017-01-21 07:07 - 2017-01-21 07:07 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll
2017-01-21 07:07 - 2017-01-21 07:07 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2017-01-21 07:07 - 2017-01-21 07:07 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2017-01-21 07:07 - 2017-01-21 07:07 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll
2017-01-21 07:07 - 2017-01-21 07:07 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2017-01-21 07:07 - 2017-01-21 07:07 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2017-01-21 07:07 - 2017-01-21 07:07 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll
2017-01-21 07:07 - 2017-01-21 07:07 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll
2017-01-21 07:07 - 2017-01-21 07:07 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2017-01-21 07:07 - 2017-01-21 07:07 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll
2017-01-21 07:07 - 2017-01-21 07:07 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll
2017-01-21 07:07 - 2017-01-21 07:07 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll
2017-01-21 07:07 - 2017-01-21 07:07 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll
2017-01-21 07:07 - 2017-01-21 07:07 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2017-01-21 07:07 - 2017-01-21 07:07 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll
2017-01-21 07:07 - 2017-01-21 07:07 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll
2017-01-21 07:07 - 2017-01-21 07:07 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll
2017-01-21 07:07 - 2017-01-21 07:07 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll
2017-01-21 07:07 - 2017-01-21 07:07 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2017-01-21 07:07 - 2017-01-21 07:07 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2017-01-21 07:07 - 2017-01-21 07:07 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
2017-01-21 07:06 - 2017-01-21 07:06 - 00006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2017-01-21 07:06 - 2017-01-21 07:06 - 00005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2017-01-21 07:06 - 2017-01-21 07:06 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2017-01-21 07:06 - 2017-01-21 07:06 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2017-01-21 07:06 - 2017-01-21 07:06 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2017-01-21 07:06 - 2017-01-21 07:06 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2017-01-21 07:06 - 2017-01-21 07:06 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2017-01-21 07:06 - 2017-01-21 07:06 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2017-01-21 07:06 - 2017-01-21 07:06 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2017-01-21 07:06 - 2017-01-21 07:06 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2017-01-21 07:06 - 2017-01-21 07:06 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2017-01-21 07:06 - 2017-01-21 07:06 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2017-01-21 07:06 - 2017-01-21 07:06 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2017-01-21 07:06 - 2017-01-21 07:06 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2017-01-21 07:06 - 2017-01-21 07:06 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2017-01-21 07:06 - 2017-01-21 07:06 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2017-01-21 07:06 - 2017-01-21 07:06 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2017-01-21 07:06 - 2017-01-21 07:06 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2017-01-21 07:06 - 2017-01-21 07:06 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2017-01-21 07:06 - 2017-01-21 07:06 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2017-01-21 07:06 - 2017-01-21 07:06 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2017-01-21 06:40 - 2017-01-22 18:00 - 00000000 ____D C:\Program Files (x86)\Microsoft Web Tools
2017-01-21 06:04 - 2017-01-21 16:12 - 00000000 ____D C:\Windows\SysWOW64\1046
2017-01-21 06:04 - 2017-01-21 16:12 - 00000000 ____D C:\Windows\system32\1046
2017-01-21 06:04 - 2017-01-21 15:55 - 00000000 ____D C:\Windows\SysWOW64\3082
2017-01-21 06:04 - 2017-01-21 15:55 - 00000000 ____D C:\Windows\SysWOW64\2052
2017-01-21 06:04 - 2017-01-21 15:55 - 00000000 ____D C:\Windows\SysWOW64\1055
2017-01-21 06:04 - 2017-01-21 15:55 - 00000000 ____D C:\Windows\SysWOW64\1049
2017-01-21 06:04 - 2017-01-21 15:55 - 00000000 ____D C:\Windows\SysWOW64\1045
2017-01-21 06:04 - 2017-01-21 15:55 - 00000000 ____D C:\Windows\SysWOW64\1042
2017-01-21 06:04 - 2017-01-21 15:55 - 00000000 ____D C:\Windows\SysWOW64\1041
2017-01-21 06:04 - 2017-01-21 15:55 - 00000000 ____D C:\Windows\SysWOW64\1040
2017-01-21 06:04 - 2017-01-21 15:55 - 00000000 ____D C:\Windows\SysWOW64\1036
2017-01-21 06:04 - 2017-01-21 15:55 - 00000000 ____D C:\Windows\SysWOW64\1031
2017-01-21 06:04 - 2017-01-21 15:55 - 00000000 ____D C:\Windows\SysWOW64\1029
2017-01-21 06:04 - 2017-01-21 15:55 - 00000000 ____D C:\Windows\SysWOW64\1028
2017-01-21 06:04 - 2017-01-21 15:55 - 00000000 ____D C:\Windows\system32\3082
2017-01-21 06:04 - 2017-01-21 15:55 - 00000000 ____D C:\Windows\system32\2052
2017-01-21 06:04 - 2017-01-21 15:55 - 00000000 ____D C:\Windows\system32\1055
2017-01-21 06:04 - 2017-01-21 15:55 - 00000000 ____D C:\Windows\system32\1049
2017-01-21 06:04 - 2017-01-21 15:55 - 00000000 ____D C:\Windows\system32\1045
2017-01-21 06:04 - 2017-01-21 15:55 - 00000000 ____D C:\Windows\system32\1042
2017-01-21 06:04 - 2017-01-21 15:55 - 00000000 ____D C:\Windows\system32\1041
2017-01-21 06:04 - 2017-01-21 15:55 - 00000000 ____D C:\Windows\system32\1040
2017-01-21 06:04 - 2017-01-21 15:55 - 00000000 ____D C:\Windows\system32\1036
2017-01-21 06:04 - 2017-01-21 15:55 - 00000000 ____D C:\Windows\system32\1031
2017-01-21 06:04 - 2017-01-21 15:55 - 00000000 ____D C:\Windows\system32\1029
2017-01-21 06:04 - 2017-01-21 15:55 - 00000000 ____D C:\Windows\system32\1028
2017-01-21 06:02 - 2017-01-23 06:10 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Visual Studio 2017 RC
2017-01-21 06:02 - 2017-01-21 06:02 - 00001596 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Blend for Visual Studio 2017 RC.lnk
2017-01-21 05:54 - 2017-01-21 05:54 - 00001469 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Visual Studio 2017 RC.lnk
2017-01-21 05:44 - 2017-01-24 04:42 - 00000000 ____D C:\Users\casa\AppData\Roaming\Visual Studio Setup
2017-01-21 05:44 - 2017-01-24 02:47 - 00002174 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Visual Studio Installer.lnk
2017-01-21 05:44 - 2017-01-21 05:44 - 00000000 ____D C:\Users\casa\AppData\Roaming\vstelemetry
2017-01-21 05:44 - 2017-01-21 05:44 - 00000000 ____D C:\Users\casa\AppData\Local\ServiceHub
2017-01-21 05:43 - 2017-01-21 14:52 - 00000000 ____D C:\Program Files (x86)\Microsoft Visual Studio
2017-01-21 05:39 - 2017-01-21 05:40 - 00862512 _____ (Microsoft Corporation) C:\Users\casa\Desktop\vs_Community.exe
2017-01-21 05:30 - 2017-01-21 05:34 - 103502958 _____ C:\Users\casa\Downloads\Ashampoo.Burning.Studio.18.0.1.11.Portable.rar
2017-01-21 05:29 - 2017-01-21 05:33 - 117574175 _____ C:\Users\casa\Downloads\Ashampoo.Burning.Studio.18.0.1.11.rar
2017-01-21 05:26 - 2017-01-21 05:27 - 29768204 _____ C:\Users\casa\Downloads\TeamViewer.Corporate.12.0.72365.rar
2017-01-21 05:24 - 2017-01-21 05:25 - 07707958 _____ C:\Users\casa\Downloads\Internet.Download.Manager.6.27.Build.2.Final.Retail.rar
2017-01-21 05:24 - 2017-01-21 05:24 - 15583274 _____ C:\Users\casa\Downloads\Internet.Download.Manager.6.26.Build.10.Final.Retail.Portable.rar
2017-01-21 02:01 - 2017-01-21 07:29 - 1681397654 _____ C:\Users\casa\Desktop\Não confirmado 516367.crdownload
2017-01-21 01:36 - 2017-01-21 01:40 - 125613845 _____ C:\Users\casa\Downloads\Cinema 4D R14 Portable ZikaMerMoO.rar
2017-01-21 01:13 - 2017-01-21 01:46 - 00000000 ____D C:\Users\casa\AppData\Roaming\MAXON
2017-01-21 01:09 - 2017-01-21 01:29 - 00000000 ____D C:\Users\casa\Desktop\Cinema 4D R14 Portable TUTOHELP ´-´
2017-01-21 01:06 - 2017-01-21 01:08 - 110844812 _____ C:\Users\casa\Downloads\Cinema 4D R14 Portable TUTOHELP.rar
2017-01-21 00:43 - 2017-02-08 04:50 - 00000000 ____D C:\Users\Todos os Usuários\Adobe
2017-01-21 00:43 - 2017-02-08 04:50 - 00000000 ____D C:\ProgramData\Adobe
2017-01-21 00:35 - 2017-01-21 00:38 - 00000000 ____D C:\Users\Todos os Usuários\Adobe-BackupByPhotoshopX64Portable
2017-01-21 00:35 - 2017-01-21 00:38 - 00000000 ____D C:\ProgramData\Adobe-BackupByPhotoshopX64Portable
2017-01-21 00:24 - 2017-01-21 00:54 - 744724940 _____ C:\Users\casa\Downloads\Adobe.Illustrator.CC.2017.v21.0.1.239.x64.Portable.rar
2017-01-21 00:22 - 2016-12-13 07:49 - 00000000 ____D C:\Users\casa\Desktop\Universal Adobe Patcher 2.0 - PainteR
2017-01-21 00:21 - 2017-01-21 00:22 - 00619015 _____ C:\Users\casa\Downloads\Universal.Adobe.Patcher.2.0-PainteR.rar
2017-01-20 23:59 - 2017-01-21 00:16 - 518202402 _____ C:\Users\casa\Downloads\Adobe.Photoshop.CC.2017.v18.0.1.29.x64.Portable.part2.rar
2017-01-20 23:35 - 2017-01-20 23:35 - 01133841 _____ C:\Users\casa\Downloads\CRACK Adobe Muse CC 2015 v2015.0.0.597 (64-Bit).zip
2017-01-20 23:32 - 2017-01-20 23:59 - 734003200 _____ C:\Users\casa\Downloads\Adobe.Photoshop.CC.2017.v18.0.1.29.x64.Portable.part1.rar
2017-01-20 23:28 - 2017-01-20 23:31 - 220794157 _____ C:\Users\casa\Downloads\Adobe Muse CC 2015 v2015.0.0.597 (64-Bit) + Crack.zip
2017-01-20 23:04 - 2017-01-20 23:13 - 301364800 _____ C:\Users\casa\Downloads\C4D R15 64Bits TH.rar
2017-01-20 22:00 - 2017-01-20 22:09 - 745074508 _____ C:\Users\casa\Downloads\AdobePhotoshop2014-32bit-mul.zip
2017-01-19 21:22 - 2017-01-19 21:23 - 00000000 ____D C:\Users\casa\AppData\Local\{D566E33A-F1CE-8F82-9C56-AA6AB83E56F2}
2017-01-18 23:47 - 2017-01-18 23:47 - 00000000 ____D C:\Program Files (x86)\AppInsights
2017-01-18 23:38 - 2017-01-18 23:38 - 00000000 ____D C:\Program Files\Microsoft Visual Studio 12.0
2017-01-18 23:38 - 2017-01-18 23:38 - 00000000 ____D C:\Program Files (x86)\Microsoft Visual Studio 12.0
2017-01-18 23:19 - 2017-01-18 23:19 - 00000000 ____D C:\Windows\symbols
2017-01-18 23:19 - 2017-01-18 23:19 - 00000000 ____D C:\Program Files (x86)\Microsoft Help Viewer
2017-01-15 17:02 - 2017-01-15 17:02 - 01909270 _____ C:\Users\casa\Desktop\html5-web.pdf
2017-01-15 08:24 - 2017-01-15 08:25 - 01861392 _____ (Installer ) C:\Users\casa\Desktop\Baixaki_internet-explorer-10.exe
2017-01-15 08:21 - 2017-01-15 08:21 - 00000000 ____D C:\Users\Todos os Usuários\ByteFence
2017-01-15 08:21 - 2017-01-15 08:21 - 00000000 ____D C:\ProgramData\ByteFence
2017-01-15 08:11 - 2017-02-02 22:21 - 00000000 ____D C:\Users\casa\AppData\Local\6f17d0fffe7dea634df606e456868e8d
2017-01-15 08:10 - 2017-02-07 22:10 - 00000000 ____D C:\Users\Todos os Usuários\{C2E70784-48A5-8D42-CE63-1300542198CE}
2017-01-15 08:10 - 2017-02-07 22:10 - 00000000 ____D C:\ProgramData\{C2E70784-48A5-8D42-CE63-1300542198CE}
2017-01-15 08:10 - 2017-01-19 21:23 - 00001471 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HowToRemove.html.lnk
2017-01-15 08:10 - 2017-01-15 08:10 - 00004330 _____ C:\Windows\System32\Tasks\Yahoo! Powered nilin
2017-01-15 08:07 - 2017-01-19 21:22 - 00000372 __RSH C:\Users\Todos os Usuários\ntuser.pol
2017-01-15 08:07 - 2017-01-19 21:22 - 00000372 __RSH C:\ProgramData\ntuser.pol
2017-01-15 08:07 - 2017-01-15 08:12 - 00000000 ____D C:\Users\casa\AppData\Local\{ABA59DF9-8F0D-F141-E295-D4A9C6FD2831}
2017-01-15 08:04 - 2017-01-15 08:04 - 00003352 _____ C:\Windows\System32\Tasks\ByteFence
2017-01-15 08:03 - 2017-02-08 06:38 - 00000000 ____D C:\Program Files\ByteFence
2017-01-09 14:31 - 2017-01-09 14:32 - 00000000 ____D C:\db455bbe6423cb7a1474e366
2017-01-09 14:20 - 2017-01-09 14:20 - 00000000 ____D C:\f852780881b5e3e729
2017-01-09 13:17 - 2017-01-09 13:17 - 00000000 ____H C:\Users\casa\AppData\Local\BIT2E33.tmp
2017-01-09 13:16 - 2017-01-09 13:16 - 00000000 _____ C:\Users\casa\AppData\Local\{69F24028-C9F0-489C-93D1-DB1D5716C47A}
2017-01-06 05:47 - 2017-01-06 05:48 - 01270955 _____ C:\Users\casa\Downloads\piadas_a_z.zip
2017-01-04 06:11 - 2017-01-04 06:11 - 00001811 _____ C:\ProgramData\Microsoft\Windows\Start Menu\ScreenShot.lnk
2017-01-04 06:11 - 2017-01-04 06:11 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ScreenShot
2017-01-04 06:11 - 2017-01-04 06:11 - 00000000 ____D C:\Program Files (x86)\ScreenShot
2017-01-04 06:10 - 2017-01-07 17:36 - 00000000 ____D C:\Users\casa\AppData\Roaming\ScreenShot
2017-01-04 06:02 - 2017-01-04 06:03 - 01824688 _____ ( ) C:\Users\casa\Downloads\Baixaki_internet-explorer-11-para-windows-7.exe
2017-01-04 05:42 - 2017-01-04 05:42 - 00000173 _____ C:\Users\casa\AppData\Roaming\r.cmd
2017-01-04 05:30 - 2017-01-04 05:30 - 00000000 ____D C:\Users\casa\AppData\Local\FreeNetflixDownloader
2017-01-04 05:29 - 2017-01-04 05:29 - 00000000 ____D C:\Users\casa\.QtWebEngineProcess
2017-01-04 05:29 - 2017-01-04 05:29 - 00000000 ____D C:\Users\casa\.FreeNetflixDownloader
2017-01-03 18:55 - 2017-01-03 18:55 - 00001292 _____ C:\Users\Public\Desktop\Free Netflix Downloader.lnk
2017-01-03 18:55 - 2017-01-03 18:55 - 00001287 _____ C:\Users\Public\Desktop\DVDVideoSoft Free Studio.lnk
2017-01-03 18:55 - 2017-01-03 18:55 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DVDVideoSoft
2017-01-03 17:01 - 2017-01-03 17:01 - 00000000 ____D C:\Program Files (x86)\FreeCodecPack
2017-01-03 16:59 - 2017-01-03 18:36 - 00000000 ____D C:\Program Files (x86)\DVDVideoSoft
2017-01-03 16:18 - 2017-01-05 06:03 - 00000000 ____D C:\Users\casa\AppData\Roaming\DVDVideoSoft
2017-01-03 16:13 - 2017-01-03 16:15 - 01449392 _____ (Digital Wave Ltd ) C:\Users\casa\Downloads\FreeNetflixDownloader_1.0.6.1206_d.exe
2017-01-03 06:14 - 2017-01-31 05:47 - 00097856 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2017-01-03 06:09 - 2017-01-03 06:09 - 00000000 ____D C:\Users\casa\AppData\Roaming\Sun
2017-01-02 06:02 - 2017-01-02 06:02 - 00000046 _____ C:\Users\casa\Desktop\00.txt
2017-01-02 05:41 - 2016-10-30 12:11 - 00000000 ____D C:\Users\casa\Downloads\adobe-illustrator-cc-2017-0-v21-0-0-174-portable-x64
2017-01-02 05:32 - 2017-01-02 05:37 - 538268591 _____ C:\Users\casa\Downloads\adobe-illustrator-cc-2017-0-v21-0-0-174-portable-x64.zip
2017-01-02 05:25 - 2017-01-02 05:26 - 90181792 _____ (Bitnami) C:\Users\casa\Downloads\bitnami-joomla-3.6.5-0-windows-installer.exe
2017-01-02 05:20 - 2017-01-02 05:23 - 278787080 _____ (Bitnami) C:\Users\casa\Downloads\bitnami-drupal-8.2.4-0-windows-installer.exe
2017-01-02 05:05 - 2017-01-02 05:14 - 278787080 _____ (Bitnami) C:\Users\casa\Downloads\Não confirmado 594241.crdownload
2017-01-02 05:03 - 2017-01-02 05:24 - 90181792 _____ (Bitnami) C:\Users\casa\Downloads\Não confirmado 435107.crdownload
2017-01-02 04:46 - 2017-01-02 04:47 - 114404584 _____ (Bitnami) C:\Users\casa\Downloads\xampp-win32-5.6.28-1-VC11-installer.exe
2017-01-02 04:44 - 2017-01-02 04:44 - 06890128 _____ (Tim Kosse) C:\Users\casa\Downloads\FileZilla_3.23.0.2_win64-setup_bundled2.exe
2017-01-02 04:44 - 2017-01-02 04:44 - 02238848 _____ (FileZilla Project) C:\Users\casa\Downloads\FileZilla_Server-0_9_59.exe
2017-01-02 04:43 - 2017-01-02 04:43 - 02238848 _____ (FileZilla Project) C:\Users\casa\Downloads\Não confirmado 528039.crdownload
2017-01-02 04:40 - 2017-01-02 04:41 - 00540140 _____ (PortableAppZ.blogspot.com) C:\Users\casa\Downloads\Não confirmado 385058.crdownload
2017-01-02 04:35 - 2017-01-02 04:35 - 08207360 _____ C:\Users\casa\Downloads\04estudocasosuvinil-130110082607-phpapp02.ppt
2017-01-02 04:22 - 2017-01-02 04:23 - 35222090 _____ C:\Users\casa\Downloads\designparaquemnodesigner-robinwilliams-130414211032-phpapp01.pdf
2017-01-02 04:11 - 2017-01-02 04:11 - 00000000 ____D C:\becca5efc1aac63545916b6c7c8dc6
2016-12-31 17:15 - 2016-12-31 17:15 - 00000000 ____D C:\c1459b17b109a255c833
2016-12-31 17:13 - 2016-12-31 17:14 - 21070475 _____ C:\Users\casa\Downloads\IE11-Windows6.1-KB2957689-x86.msu
2016-12-31 17:09 - 2016-12-31 17:09 - 00000000 ____D C:\965546c639744f3ffc3c1d715d2a60
2016-12-31 17:08 - 2016-12-31 17:09 - 32414642 _____ C:\Users\casa\Downloads\IE10-Windows6.1-KB2859903-x64.msu
2016-12-30 05:38 - 2016-12-30 05:53 - 00000347 _____ C:\Users\casa\Desktop\SEO-Títulos.html
2016-12-29 05:25 - 2016-12-30 05:36 - 00000328 _____ C:\Users\casa\Desktop\Meu arquivo HTML AULA 01.html
2016-12-29 04:30 - 2016-12-30 04:11 - 00000293 _____ C:\Users\casa\Desktop\Meu arquivo HTML AULA 01.txt
2016-12-28 04:51 - 2017-01-23 03:04 - 00000000 ____D C:\Windows\system32\catroot2
2016-12-26 18:01 - 2016-12-26 18:02 - 00000026 _____ C:\Users\casa\Desktop\Primeira.html
2016-12-26 17:51 - 2016-12-26 17:51 - 00000000 ____D C:\Users\casa\Downloads\Windows Kits
2016-12-25 10:39 - 2016-12-25 10:39 - 00000000 ____D C:\Program Files (x86)\Microsoft WCF Data Services
2016-12-25 10:38 - 2016-12-25 10:38 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Expression
2016-12-25 10:36 - 2017-01-18 23:42 - 00001494 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Blend for Visual Studio 2015.lnk
2016-12-25 10:30 - 2017-01-18 23:37 - 00000000 ____D C:\Program Files (x86)\HTML Help Workshop
2016-12-25 10:18 - 2017-01-21 16:12 - 00000000 ____D C:\Windows\SysWOW64\1033
2016-12-25 10:11 - 2016-12-25 10:11 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Visual Studio 2015
2016-12-25 09:58 - 2017-01-21 16:13 - 00000000 ____D C:\Program Files\Microsoft SQL Server
2016-12-25 09:58 - 2017-01-21 16:13 - 00000000 ____D C:\Program Files (x86)\Microsoft SQL Server
2016-12-25 09:58 - 2017-01-18 23:11 - 00001495 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Visual Studio 2015.lnk
2016-12-25 09:46 - 2017-02-06 13:49 - 00000000 ____D C:\Program Files (x86)\Microsoft Visual Studio 14.0
2016-12-25 09:46 - 2017-01-21 16:12 - 00000000 ____D C:\Windows\system32\1033
2016-12-25 09:14 - 2016-12-25 09:14 - 00000000 ____D C:\Users\Todos os Usuários\regid.1991-06.com.microsoft
2016-12-25 09:14 - 2016-12-25 09:14 - 00000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2016-12-25 09:09 - 2016-12-25 09:09 - 00215152 _____ (Microsoft Corporation) C:\Users\casa\Downloads\VSToolsForWindows1C.exe
2016-12-25 08:32 - 2016-12-25 08:32 - 00000000 ____D C:\9ee7d8fe5224f6314cdffd7723fb9c
2016-12-25 07:13 - 2016-12-25 07:13 - 00000000 ____D C:\97da11ed73cb7451bc884581c645a7d4
2016-12-25 06:16 - 2016-11-01 23:30 - 00000822 ____N C:\Windows\system32\Drivers\etc\hosts_bkup
2016-12-22 16:15 - 2017-01-20 21:55 - 00000000 ____D C:\Users\casa\Downloads\opera autoupdate
2016-12-22 16:13 - 2016-12-22 16:13 - 00000000 ____D C:\Users\casa\Downloads\Archives 01
2016-12-22 16:13 - 2016-11-21 19:02 - 00227828 _____ C:\Users\casa\Downloads\termo-adesao-criador-de-sites (Conflicted copy from HOME on 2016-11-21).pdf
2016-12-22 16:13 - 2016-11-21 19:02 - 00000581 _____ C:\Users\casa\Downloads\Creative Cloud Files.lnk
2016-12-22 16:13 - 2016-11-21 19:01 - 00227828 _____ C:\Users\casa\Downloads\termo-adesao-criador-de-sites.pdf
2016-12-22 16:13 - 2016-11-03 18:36 - 00965087 _____ C:\Users\casa\Downloads\Fenix.ai
2016-12-22 16:13 - 2016-10-23 16:32 - 00000000 ____D C:\Users\casa\Downloads\Archives 00
2016-12-22 16:13 - 2016-04-27 07:43 - 02724076 _____ C:\Users\casa\Downloads\Outlook.com.zip
2016-12-22 16:13 - 2016-04-27 03:50 - 00122360 _____ C:\Users\casa\Downloads\Cartão de visita Kazuya Designer.rar
2016-12-22 16:13 - 2016-04-27 03:48 - 00052581 _____ C:\Users\casa\Downloads\Cartão de visita Estratégia.rar
2016-12-22 16:13 - 2016-04-27 03:43 - 02723920 _____ C:\Users\casa\Downloads\Cartão de Visita Pattern.rar
2016-12-22 16:13 - 2012-11-22 07:45 - 00000578 _____ C:\Users\casa\Downloads\Leia-me.txt
2016-12-22 16:13 - 2012-11-22 07:34 - 08740099 _____ C:\Users\casa\Downloads\Cartão de visita Pattern.psd
2016-12-22 16:13 - 2012-08-23 14:09 - 00000443 _____ C:\Users\casa\Downloads\Cartão de visitas xadrez.txt
2016-12-22 16:13 - 2012-08-23 14:04 - 02695404 _____ C:\Users\casa\Downloads\Cartão de visita Xadrez.psd
2016-12-22 16:13 - 2012-08-06 12:59 - 00000413 _____ C:\Users\casa\Downloads\Cartão de visita Kazuya Designer.txt
2016-12-22 16:13 - 2012-08-06 12:46 - 00083385 _____ C:\Users\casa\Downloads\Kazuya-Designer-Cartão-de-visita-VERSO.jpg
2016-12-22 16:13 - 2012-08-06 12:46 - 00057929 _____ C:\Users\casa\Downloads\Kazuya-Designer-Cartão-de-visita-FRENTE.jpg
2016-12-21 13:30 - 2016-12-21 13:30 - 00034011 _____ C:\Users\casa\Downloads\orca_share_media1482334189926.opus
2016-12-21 13:30 - 2016-12-21 13:30 - 00034011 _____ C:\Users\casa\Downloads\orca_share_media1482334189926 (1).opus
2016-12-20 23:12 - 2016-12-20 23:12 - 00000000 ____D C:\Users\casa\Downloads\Space_Mono
2016-12-20 23:12 - 2016-12-20 23:12 - 00000000 ____D C:\Users\casa\Downloads\Open_Sans
2016-12-20 23:11 - 2016-12-20 23:11 - 01334685 _____ C:\Users\casa\Downloads\fonts.zip
2016-12-20 23:05 - 2016-12-20 23:05 - 00190066 _____ C:\Users\casa\Downloads\Space_Mono.zip
2016-12-20 22:04 - 2016-12-20 22:04 - 00000007 _____ C:\Users\casa\Desktop\STIME.txt
2016-12-17 18:59 - 2016-12-17 18:59 - 00263646 _____ C:\Users\casa\Downloads\15540282_664040463770446_1990507809_o.jpg
2016-12-17 18:58 - 2016-12-17 18:59 - 00298398 _____ C:\Users\casa\Downloads\15417844_664040290437130_538472740_o.jpg
2016-12-16 00:34 - 2016-12-16 00:34 - 00036231 _____ C:\Users\casa\Downloads\HD Video Player_ Baixe 100% gratuito.html
2016-12-16 00:34 - 2016-12-16 00:34 - 00000000 ____D C:\Users\casa\Downloads\HD Video Player_ Baixe 100% gratuito_files
2016-12-15 06:35 - 2017-01-25 22:10 - 00000000 ____D C:\Users\casa\AppData\Roaming\CalendarTool
2016-12-15 06:35 - 2016-12-18 09:48 - 00000000 ____D C:\Windows\system32\SSL
2016-12-15 06:35 - 2016-12-15 06:35 - 00000000 ____D C:\Users\Public\Documents\Tools
2016-12-15 06:35 - 2016-12-15 06:35 - 00000000 ____D C:\Program Files (x86)\CalendarTool
2016-12-15 06:29 - 2016-12-15 11:22 - 04597952 _____ (Soft company) C:\Users\casa\Downloads\TRIAL_RESET_retire_o_tempo_dos_programas_pagos.exe
2016-12-15 06:24 - 2016-12-15 06:25 - 04598061 _____ C:\Users\casa\Downloads\TRIAL_RESET_retire_o_tempo_dos_programas_pagos.rar
2016-12-15 06:12 - 2016-12-15 06:12 - 07323240 _____ (Adobe System Incorporated.) C:\Users\casa\Downloads\Não confirmado 57590.crdownload
2016-12-15 06:09 - 2016-12-15 06:10 - 07323240 _____ (Adobe System Incorporated.) C:\Users\casa\Downloads\AdobeCreativeCloudCleanerTool.exe
2016-12-14 17:45 - 2016-12-14 17:45 - 01800886 _____ C:\Windows\a301b07f29822fd027aa7f04ae82a53e.exe
2016-12-13 01:09 - 2017-01-04 05:53 - 00001003 _____ C:\Users\casa\Desktop\Listas.HTML
2016-12-13 00:56 - 2016-12-13 00:56 - 00003544 ____N C:\bootsqm.dat
2016-12-13 00:55 - 2016-12-13 00:55 - 00000000 __SHD C:\found.002
2016-12-13 00:43 - 2016-12-26 17:49 - 00000918 _____ C:\Users\casa\Desktop\Sublime Text 3.lnk
2016-12-13 00:42 - 2016-12-13 00:43 - 00000000 ____D C:\Users\casa\AppData\Roaming\Notepad++
2016-12-13 00:42 - 2016-12-13 00:42 - 00000824 _____ C:\Users\Public\Desktop\Notepad++.lnk
2016-12-13 00:42 - 2016-12-13 00:42 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Notepad++
2016-12-13 00:42 - 2016-12-13 00:42 - 00000000 ____D C:\Program Files\Notepad++
2016-12-13 00:26 - 2016-12-13 00:26 - 00000000 _____ C:\Users\casa\Downloads\npp.7.2.2.Installer.x64.exe
2016-12-13 00:24 - 2016-12-13 00:24 - 00000886 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sublime Text 3.lnk
2016-12-13 00:24 - 2016-12-13 00:24 - 00000000 ____D C:\Users\casa\AppData\Roaming\Sublime Text 3
2016-12-13 00:24 - 2016-12-13 00:24 - 00000000 ____D C:\Users\casa\AppData\Local\Sublime Text 3
2016-12-13 00:24 - 2016-12-13 00:24 - 00000000 ____D C:\Program Files\Sublime Text 3
2016-12-13 00:22 - 2016-12-13 00:23 - 08460792 _____ (Sublime HQ Pty Ltd ) C:\Users\casa\Downloads\Sublime Text Build 3126 x64 Setup.exe
2016-12-13 00:00 - 2016-12-13 00:39 - 00000324 _____ C:\Users\casa\Desktop\Primeiro.htmL
2016-12-04 20:05 - 2016-12-04 20:05 - 01824968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\VsGraphicsHelper.dll
2016-12-04 20:05 - 2016-12-04 20:05 - 00223912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\VSPerf150.dll
2016-12-04 20:05 - 2016-12-04 20:05 - 00181424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\VSCover150.dll
2016-12-04 19:33 - 2016-12-04 19:33 - 03180744 _____ (Microsoft Corporation) C:\Windows\system32\VsGraphicsHelper.dll
2016-12-04 19:33 - 2016-12-04 19:33 - 00277160 _____ (Microsoft Corporation) C:\Windows\system32\VSPerf150.dll
2016-12-04 19:33 - 2016-12-04 19:33 - 00214184 _____ (Microsoft Corporation) C:\Windows\system32\vscover150.dll
2016-11-29 23:24 - 2016-11-29 23:24 - 00013101 _____ C:\Users\casa\Downloads\13177468_1764048280495657_1570305947639137141_n.jpg
2016-11-28 15:25 - 2016-11-28 15:25 - 00000071 _____ C:\Users\casa\Desktop\BOLETO.txt
2016-11-28 09:19 - 2016-11-28 09:19 - 00016145 _____ C:\Users\casa\Downloads\hipsterlogogenerator_1480331912880.png
2016-11-27 22:43 - 2016-11-27 22:43 - 11463336 _____ (Microsoft Corporation) C:\Windows\system32\mfc140ud.dll
2016-11-27 22:43 - 2016-11-27 22:43 - 11391136 _____ (Microsoft Corporation) C:\Windows\system32\mfc140d.dll
2016-11-27 22:43 - 2016-11-27 22:43 - 08634016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfc140ud.dll
2016-11-27 22:43 - 2016-11-27 22:43 - 08562848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfc140d.dll
2016-11-27 22:43 - 2016-11-27 22:43 - 06060704 _____ (Microsoft Corporation) C:\Windows\system32\mfc140u.dll
2016-11-27 22:43 - 2016-11-27 22:43 - 06031520 _____ (Microsoft Corporation) C:\Windows\system32\mfc140.dll
2016-11-27 22:43 - 2016-11-27 22:43 - 04775584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfc140u.dll
2016-11-27 22:43 - 2016-11-27 22:43 - 04705440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfc140.dll
2016-11-27 22:43 - 2016-11-27 22:43 - 01322152 _____ (Microsoft Corporation) C:\Windows\system32\vcamp140d.dll
2016-11-27 22:43 - 2016-11-27 22:43 - 01188024 _____ (Microsoft Corporation) C:\Windows\system32\vccorlib140d.dll
2016-11-27 22:43 - 2016-11-27 22:43 - 01002152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vcamp140d.dll
2016-11-27 22:43 - 2016-11-27 22:43 - 00983720 _____ (Microsoft Corporation) C:\Windows\system32\msvcp140d.dll
2016-11-27 22:43 - 2016-11-27 22:43 - 00938680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vccorlib140d.dll
2016-11-27 22:43 - 2016-11-27 22:43 - 00781488 _____ (Microsoft Corporation) C:\Windows\system32\concrt140d.dll
2016-11-27 22:43 - 2016-11-27 22:43 - 00742728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvcp140d.dll
2016-11-27 22:43 - 2016-11-27 22:43 - 00628392 _____ (Microsoft Corporation) C:\Windows\system32\msvcp140.dll
2016-11-27 22:43 - 2016-11-27 22:43 - 00591176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\concrt140d.dll
2016-11-27 22:43 - 2016-11-27 22:43 - 00538792 _____ (Microsoft Corporation) C:\Windows\system32\vcamp140.dll
2016-11-27 22:43 - 2016-11-27 22:43 - 00438592 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvcp140.dll
2016-11-27 22:43 - 2016-11-27 22:43 - 00396456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vcamp140.dll
2016-11-27 22:43 - 2016-11-27 22:43 - 00391344 _____ (Microsoft Corporation) C:\Windows\system32\vccorlib140.dll
2016-11-27 22:43 - 2016-11-27 22:43 - 00332456 _____ (Microsoft Corporation) C:\Windows\system32\concrt140.dll
2016-11-27 22:43 - 2016-11-27 22:43 - 00264368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vccorlib140.dll
2016-11-27 22:43 - 2016-11-27 22:43 - 00243016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\concrt140.dll
2016-11-27 22:43 - 2016-11-27 22:43 - 00211624 _____ (Microsoft Corporation) C:\Windows\system32\vcomp140d.dll
2016-11-27 22:43 - 2016-11-27 22:43 - 00183976 _____ (Microsoft Corporation) C:\Windows\system32\vcomp140.dll
2016-11-27 22:43 - 2016-11-27 22:43 - 00161448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vcomp140d.dll
2016-11-27 22:43 - 2016-11-27 22:43 - 00137896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vcomp140.dll
2016-11-27 22:43 - 2016-11-27 22:43 - 00135336 _____ (Microsoft Corporation) C:\Windows\system32\mfcm140d.dll
2016-11-27 22:43 - 2016-11-27 22:43 - 00134312 _____ (Microsoft Corporation) C:\Windows\system32\mfcm140ud.dll
2016-11-27 22:43 - 2016-11-27 22:43 - 00129208 _____ (Microsoft Corporation) C:\Windows\system32\vcruntime140d.dll
2016-11-27 22:43 - 2016-11-27 22:43 - 00121000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfcm140d.dll
2016-11-27 22:43 - 2016-11-27 22:43 - 00120488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfcm140ud.dll
2016-11-27 22:43 - 2016-11-27 22:43 - 00109912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vcruntime140d.dll
2016-11-27 22:43 - 2016-11-27 22:43 - 00105632 _____ (Microsoft Corporation) C:\Windows\system32\mfcm140u.dll
2016-11-27 22:43 - 2016-11-27 22:43 - 00105120 _____ (Microsoft Corporation) C:\Windows\system32\mfcm140.dll
2016-11-27 22:43 - 2016-11-27 22:43 - 00094880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfcm140u.dll
2016-11-27 22:43 - 2016-11-27 22:43 - 00094368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfcm140.dll
2016-11-27 22:43 - 2016-11-27 22:43 - 00087224 _____ (Microsoft Corporation) C:\Windows\system32\vcruntime140.dll
2016-11-27 22:43 - 2016-11-27 22:43 - 00083792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vcruntime140.dll
2016-11-27 22:43 - 2016-11-27 22:43 - 00075432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfc140fra.dll
2016-11-27 22:43 - 2016-11-27 22:43 - 00075432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfc140deu.dll
2016-11-27 22:43 - 2016-11-27 22:43 - 00075432 _____ (Microsoft Corporation) C:\Windows\system32\mfc140fra.dll
2016-11-27 22:43 - 2016-11-27 22:43 - 00075432 _____ (Microsoft Corporation) C:\Windows\system32\mfc140deu.dll
2016-11-27 22:43 - 2016-11-27 22:43 - 00074408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfc140esn.dll
2016-11-27 22:43 - 2016-11-27 22:43 - 00074408 _____ (Microsoft Corporation) C:\Windows\system32\mfc140esn.dll
2016-11-27 22:43 - 2016-11-27 22:43 - 00073384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfc140ita.dll
2016-11-27 22:43 - 2016-11-27 22:43 - 00073384 _____ (Microsoft Corporation) C:\Windows\system32\mfc140ita.dll
2016-11-27 22:43 - 2016-11-27 22:43 - 00071336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfc140rus.dll
2016-11-27 22:43 - 2016-11-27 22:43 - 00071336 _____ (Microsoft Corporation) C:\Windows\system32\mfc140rus.dll
2016-11-27 22:43 - 2016-11-27 22:43 - 00065704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfc140enu.dll
2016-11-27 22:43 - 2016-11-27 22:43 - 00065704 _____ (Microsoft Corporation) C:\Windows\system32\mfc140enu.dll
2016-11-27 22:43 - 2016-11-27 22:43 - 00054952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfc140jpn.dll
2016-11-27 22:43 - 2016-11-27 22:43 - 00054952 _____ (Microsoft Corporation) C:\Windows\system32\mfc140jpn.dll
2016-11-27 22:43 - 2016-11-27 22:43 - 00053928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfc140kor.dll
2016-11-27 22:43 - 2016-11-27 22:43 - 00053928 _____ (Microsoft Corporation) C:\Windows\system32\mfc140kor.dll
2016-11-27 22:43 - 2016-11-27 22:43 - 00046760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfc140cht.dll
2016-11-27 22:43 - 2016-11-27 22:43 - 00046760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfc140chs.dll
2016-11-27 22:43 - 2016-11-27 22:43 - 00046760 _____ (Microsoft Corporation) C:\Windows\system32\mfc140cht.dll
2016-11-27 22:43 - 2016-11-27 22:43 - 00046760 _____ (Microsoft Corporation) C:\Windows\system32\mfc140chs.dll
2016-11-25 01:28 - 2016-12-20 23:25 - 00001832 _____ C:\Users\casa\Desktop\DACOTA.svgz
2016-11-24 22:56 - 2016-11-24 22:57 - 13728500 _____ C:\Users\casa\Downloads\Battery_Life_Extender_WXP_1.0.0.11.ZIP
2016-11-24 22:54 - 2016-11-24 22:56 - 130088408 _____ C:\Users\casa\Downloads\Easy_Settings_1.1.1.4.ZIP
2016-11-17 18:13 - 2016-11-17 18:13 - 00000000 ____D C:\Users\casa\AppData\Local\Chromium
2016-11-17 18:08 - 2016-11-17 18:10 - 99287693 _____ C:\Users\casa\Downloads\chrome-win32.zip
2016-11-17 18:02 - 2016-11-17 18:05 - 00000236 _____ C:\Users\casa\Desktop\Dispesas do mês.txt
2016-11-17 17:26 - 2016-11-17 17:26 - 00000000 ____D C:\3d1d61329efea9fa374add24f10d
2016-11-16 15:28 - 2016-11-16 15:28 - 00175065 _____ C:\Users\casa\Downloads\15129457_1855372801363204_1865355113934280789_o.jpg
2016-11-15 22:43 - 2016-11-15 22:44 - 01065376 _____ (Google Inc.) C:\Users\casa\Downloads\googlewebdesigner_win.exe
2016-11-15 18:19 - 2016-11-15 18:19 - 00000016 _____ C:\Users\casa\Desktop\PASSÁROS FERIDOS.txt

==================== Três Meses Modificados arquivos e pastas ========

(Se uma entrada for incluída na fixlist, o arquivo/pasta será movido.)

2018-06-14 23:47 - 2014-10-01 09:41 - 00000000 ____D C:\Users\casa\AppData\Local\Microsoft Games
2017-02-08 05:43 - 2009-07-14 02:45 - 00014016 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2017-02-08 05:43 - 2009-07-14 02:45 - 00014016 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2017-02-08 05:30 - 2016-05-15 01:23 - 00000000 ____D C:\Users\Todos os Usuários\BlueStacksGameManager
2017-02-08 05:30 - 2016-05-15 01:23 - 00000000 ____D C:\ProgramData\BlueStacksGameManager
2017-02-08 05:29 - 2016-05-15 01:21 - 00000000 ____D C:\Users\Todos os Usuários\BlueStacks
2017-02-08 05:29 - 2016-05-15 01:21 - 00000000 ____D C:\ProgramData\BlueStacks
2017-02-08 05:29 - 2009-07-14 01:20 - 00000000 __RHD C:\Users\Public\Libraries
2017-02-08 04:49 - 2016-11-06 12:37 - 00000000 ___HD C:\adobeTemp
2017-02-08 04:48 - 2016-10-23 16:31 - 00000000 ___RD C:\Users\casa\Creative Cloud Files
2017-02-08 04:48 - 2016-10-23 16:31 - 00000000 ____D C:\Users\Todos os Usuários\boost_interprocess
2017-02-08 04:48 - 2016-10-23 16:31 - 00000000 ____D C:\ProgramData\boost_interprocess
2017-02-08 04:48 - 2014-09-28 13:39 - 00000000 ____D C:\Users\casa\AppData\Local\Adobe
2017-02-08 04:47 - 2016-10-24 21:40 - 00000000 ____D C:\Users\Public\Documents\AdobeGC
2017-02-08 04:42 - 2016-10-18 18:13 - 00000000 ____D C:\Users\casa\AppData\Local\MEGAsync
2017-02-08 04:41 - 2015-09-20 13:59 - 00028888 _____ (GAS Tecnologia) C:\Windows\system32\Drivers\gbpddfac64.sys
2017-02-08 04:41 - 2015-09-20 13:59 - 00000000 ____D C:\Program Files (x86)\GbPlugin
2017-02-08 04:38 - 2009-07-14 03:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2017-02-06 20:54 - 2015-02-02 21:57 - 00002183 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2017-02-06 18:31 - 2014-09-28 13:44 - 00802904 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2017-02-06 18:31 - 2014-09-28 13:44 - 00144472 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2017-02-06 18:30 - 2014-09-28 13:44 - 00000000 ____D C:\Windows\SysWOW64\Macromed
2017-02-06 18:30 - 2014-09-28 13:44 - 00000000 ____D C:\Windows\system32\Macromed
2017-02-06 10:44 - 2009-07-14 01:20 - 00000000 ____D C:\Windows\inf
2017-02-06 07:46 - 2014-09-28 12:49 - 00004180 _____ C:\Windows\System32\Tasks\avast! Emergency Update
2017-02-03 00:17 - 2014-09-28 12:00 - 00000000 ____D C:\Users\casa
2017-02-02 21:30 - 2016-11-06 15:36 - 00000000 _____ C:\Windows\SysWOW64\last.dump
2017-02-02 06:14 - 2016-10-18 18:00 - 00000000 ____D C:\Users\casa\AppData\Roaming\uTorrent
2017-02-02 06:14 - 2016-05-15 01:19 - 00000000 ____D C:\Users\Todos os Usuários\BlueStacksSetup
2017-02-02 06:14 - 2016-05-15 01:19 - 00000000 ____D C:\ProgramData\BlueStacksSetup
2017-02-02 06:13 - 2015-02-17 21:12 - 00000000 ____D C:\Windows\Minidump
2017-02-02 06:13 - 2014-09-28 16:38 - 00000000 ____D C:\Windows\Panther
2017-01-31 06:12 - 2014-09-28 13:41 - 00000000 ____D C:\Users\Todos os Usuários\Oracle
2017-01-31 06:12 - 2014-09-28 13:41 - 00000000 ____D C:\ProgramData\Oracle
2017-01-31 06:08 - 2014-09-28 13:56 - 00000000 ____D C:\Program Files (x86)\Java
2017-01-31 06:06 - 2014-09-28 13:57 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2017-01-29 09:18 - 2014-09-28 13:10 - 00001216 _____ C:\ProgramData\Microsoft\Windows\Start Menu\WinRAR.lnk
2017-01-29 09:18 - 2014-09-28 13:10 - 00000000 ____D C:\Users\casa\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
2017-01-29 09:18 - 2014-09-28 13:10 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
2017-01-29 09:18 - 2014-09-28 13:09 - 00000000 ____D C:\Program Files\WinRAR
2017-01-29 09:16 - 2016-11-06 16:36 - 00000000 ____D C:\Windows\SysWOW64\Adobe
2017-01-28 05:01 - 2015-08-20 14:33 - 00004028 _____ C:\Windows\System32\Tasks\Opera scheduled Autoupdate 1440088406
2017-01-26 01:04 - 2015-01-18 21:25 - 00000299 _____ C:\Users\casa\AppData\Roaming\WB.CFG
2017-01-24 04:02 - 2016-10-23 09:42 - 00000000 ____D C:\Users\Todos os Usuários\Package Cache
2017-01-24 04:02 - 2016-10-23 09:42 - 00000000 ____D C:\ProgramData\Package Cache
2017-01-24 03:35 - 2016-11-06 10:03 - 00000000 ____D C:\Program Files (x86)\Microsoft SDKs
2017-01-23 13:52 - 2009-07-29 14:08 - 00768320 _____ C:\Windows\system32\prfh0416.dat
2017-01-23 13:52 - 2009-07-29 14:08 - 00168412 _____ C:\Windows\system32\prfc0416.dat
2017-01-23 13:52 - 2009-07-14 03:13 - 01798296 _____ C:\Windows\system32\PerfStringBackup.INI
2017-01-23 08:42 - 2016-11-04 05:13 - 00000000 ____D C:\Users\casa\.android
2017-01-23 03:15 - 2016-10-23 10:09 - 00000000 ____D C:\Users\Todos os Usuários\regid.1986-12.com.adobe
2017-01-23 03:15 - 2016-10-23 10:09 - 00000000 ____D C:\ProgramData\regid.1986-12.com.adobe
2017-01-23 03:14 - 2014-09-28 13:44 - 00000000 ____D C:\Users\casa\AppData\Roaming\Adobe
2017-01-23 02:43 - 2014-09-28 13:28 - 00000000 ____D C:\Program Files (x86)\Adobe
2017-01-21 16:13 - 2009-07-14 01:20 - 00000000 ____D C:\Program Files\Common Files\Microsoft Shared
2017-01-21 06:20 - 2009-07-14 03:32 - 00000000 ____D C:\Program Files (x86)\MSBuild
2017-01-21 06:05 - 2016-11-06 10:01 - 00000000 ____D C:\Program Files (x86)\Windows Kits
2017-01-21 05:52 - 2016-11-04 22:49 - 01762918 _____ C:\Windows\SysWOW64\PerfStringBackup.INI
2017-01-15 08:07 - 2009-07-14 01:20 - 00000000 ___HD C:\Windows\system32\GroupPolicy
2017-01-15 08:07 - 2009-07-14 01:20 - 00000000 ____D C:\Windows\SysWOW64\GroupPolicy

==================== Arquivos na raiz de alguns diretórios =======

2016-10-23 10:25 - 2016-12-20 23:15 - 0000034 _____ () C:\Users\casa\AppData\Roaming\AdobeWLCMCache.dat
2017-01-04 05:42 - 2017-01-04 05:42 - 0000173 _____ () C:\Users\casa\AppData\Roaming\r.cmd
2015-01-18 21:25 - 2017-01-26 01:04 - 0000299 _____ () C:\Users\casa\AppData\Roaming\WB.CFG
2017-01-09 13:17 - 2017-01-09 13:17 - 0000000 ____H () C:\Users\casa\AppData\Local\BIT2E33.tmp
2015-01-10 18:46 - 2015-01-10 18:46 - 0003584 _____ () C:\Users\casa\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2016-11-04 05:37 - 2016-11-04 05:37 - 0000337 _____ () C:\Users\casa\AppData\Local\Perfmon.PerfmonCfg
2014-11-20 11:46 - 2014-11-20 11:46 - 0007601 _____ () C:\Users\casa\AppData\Local\Resmon.ResmonCfg
2017-01-09 13:16 - 2017-01-09 13:16 - 0000000 _____ () C:\Users\casa\AppData\Local\{69F24028-C9F0-489C-93D1-DB1D5716C47A}
2015-12-07 00:34 - 2015-12-07 00:34 - 0000000 _____ () C:\Users\casa\AppData\Local\{EAAF0C0B-F047-4DA4-905C-9F9432B39441}
2014-09-28 12:12 - 2014-09-28 12:12 - 0000000 ____H () C:\ProgramData\DP45977C.lfl

Arquivos para serem movidos ou deletados:
====================
C:\Windows\Tasks\{D570CA53-BEE3-40B7-B798-7DB54159F843}.job


Alguns arquivos em TEMP:
====================
2017-02-04 05:57 - 2016-04-26 16:37 - 0246808 _____ (BlueStack Systems) C:\Users\casa\AppData\Local\Temp\HD-Logger-Native.dll
2017-02-04 05:57 - 2016-04-26 16:39 - 0798232 _____ (BlueStack Systems, Inc.) C:\Users\casa\AppData\Local\Temp\HD-RunAppTemp.exe
2017-02-08 05:29 - 2016-04-26 16:39 - 0128536 _____ (BlueStack Systems) C:\Users\casa\AppData\Local\Temp\HD-ShortcutHandler.dll
2017-02-06 13:42 - 2017-02-06 13:42 - 0010240 _____ () C:\Users\casa\AppData\Local\Temp\omf6v267.dll
2017-02-07 13:41 - 2017-02-07 13:41 - 1486336 _____ (Opera Software) C:\Users\casa\AppData\Local\Temp\Opera_installer_2017274154855.dll
2017-02-08 05:29 - 2016-04-26 08:11 - 0552472 _____ (BlueStack Systems, Inc.) C:\Users\casa\AppData\Local\Temp\uninstall.exe

==================== Bamital & volsnap ======================

(Não há correção automática para arquivos que não passaram na verificação.)

C:\Windows\system32\winlogon.exe => O arquivo é assinado digitalmente
C:\Windows\system32\wininit.exe => O arquivo é assinado digitalmente
C:\Windows\SysWOW64\wininit.exe => O arquivo é assinado digitalmente
C:\Windows\explorer.exe => O arquivo é assinado digitalmente
C:\Windows\SysWOW64\explorer.exe => O arquivo é assinado digitalmente
C:\Windows\system32\svchost.exe => O arquivo é assinado digitalmente
C:\Windows\SysWOW64\svchost.exe => O arquivo é assinado digitalmente
C:\Windows\system32\services.exe => O arquivo é assinado digitalmente
C:\Windows\system32\User32.dll => O arquivo é assinado digitalmente
C:\Windows\SysWOW64\User32.dll => O arquivo é assinado digitalmente
C:\Windows\system32\userinit.exe => O arquivo é assinado digitalmente
C:\Windows\SysWOW64\userinit.exe => O arquivo é assinado digitalmente
C:\Windows\system32\rpcss.dll => O arquivo é assinado digitalmente
C:\Windows\system32\dnsapi.dll => O arquivo é assinado digitalmente
C:\Windows\SysWOW64\dnsapi.dll => O arquivo é assinado digitalmente
C:\Windows\system32\Drivers\volsnap.sys => O arquivo é assinado digitalmente

LastRegBack: 2016-10-23 11:21

==================== Fim de FRST.txt ============================