Resultado do exame da Farbar Recovery Scan Tool (FRST) (x64) Versão: 01-03-2017
Executado por Leticia (administrador) em PEDRO-VICTHOR (02-03-2017 13:36:39)
Executando a partir de D:\Meus Documentos\Downloads
Perfis Carregados: Leticia (Perfis Disponíveis: Leticia & Convidado)
Platform: Windows 7 Ultimate (X64) Idioma: Português (Brasil)
Internet Explorer Versão 8 (Navegador padrão: Chrome)
Modo da Inicialização: Normal
Tutorial da Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processos (Whitelisted) =================

(Se uma entrada for incluída na fixlist, o processo será fechado. O arquivo não será movido.)

(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(HP) C:\Windows\System32\HPSIsvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe
() C:\Program Files (x86)\AppBrad\NetExpressUpdater.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Office\Office14\MSOSYNC.EXE
(Microsoft Corporation) C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe
(The Chromium Authors) C:\Users\Leticia\AppData\Local\Chromium\Application\chrome.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(The Chromium Authors) C:\Users\Leticia\AppData\Local\Chromium\Application\chrome.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(RealNetworks, Inc.) C:\Program Files (x86)\Real\RealPlayer\Update\realsched.exe
(Scopus Soluções em TI Ltda) C:\Program Files (x86)\scpbrad\scpbradserv.exe
(Scopus Soluções em TI Ltda) C:\Program Files (x86)\scpbrad\scpbradguard.exe
(Filseclab Corporation Limited) C:\Program Files (x86)\ScreenShot\SSSvc.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe
(The Chromium Authors) C:\Users\Leticia\AppData\Local\Chromium\Application\chrome.exe
(The Chromium Authors) C:\Users\Leticia\AppData\Local\Chromium\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Realsil Microelectronics Inc.) C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\System32\msiexec.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

==================== Registro (Whitelisted) ====================

(Se uma entrada for incluída na fixlist, o ítem no Registro será restaurado para o padrão ou removido. O arquivo não será movido.)

HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2885904 2012-04-04] (Synaptics Incorporated)
HKLM-x32\...\Run: [IAStorIcon] => C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [284440 2011-11-29] (Intel Corporation)
HKLM-x32\...\Run: [USB3MON] => C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [291608 2012-04-03] (Intel Corporation)
HKLM-x32\...\Run: [avast] => C:\Program Files\AVAST Software\Avast\avastUI.exe [4297136 2012-10-30] (AVAST Software)
HKLM-x32\...\Run: [BCSSync] => C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe [91520 2010-03-13] (Microsoft Corporation)
HKLM-x32\...\Run: [TkBellExe] => C:\Program Files (x86)\Real\RealPlayer\update\realsched.exe [295512 2013-07-03] (RealNetworks, Inc.)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKU\S-1-5-21-1485443574-3413710975-1461891065-1000\...\Run: [OfficeSyncProcess] => C:\Program Files (x86)\Microsoft Office\Office14\MSOSYNC.EXE [718208 2010-03-16] (Microsoft Corporation)
HKU\S-1-5-21-1485443574-3413710975-1461891065-1000\...\Run: [msnmsgr] => C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe [4240760 2010-11-10] (Microsoft Corporation)
HKU\S-1-5-21-1485443574-3413710975-1461891065-1000\...\Run: [Chromium] => c:\users\leticia\appdata\local\chromium\application\chrome.exe [1068544 2016-03-18] (The Chromium Authors)
HKU\S-1-5-21-1485443574-3413710975-1461891065-1000\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [27545056 2017-02-14] (Skype Technologies S.A.)
HKU\S-1-5-21-1485443574-3413710975-1461891065-1000\...\MountPoints2: {dbba7ab9-c719-11e6-94bb-f4b7e2d49c8c} - F:\SISetup.exe
AppInit_DLLs: C:\PROGRA~2\SearchProtect\SearchProtect\bin\SPVC64Loader.dll => Nenhum Arquivo
AppInit_DLLs: c:\progra~3\bitguard\271769~1.27\{c16c1~1\loader.dll => Nenhum Arquivo
AppInit_DLLs-x32: C:\PROGRA~2\SEARCH~1\SEARCH~1\bin\SPVC32~1.DLL => Nenhum Arquivo
AppInit_DLLs-x32: c:\progra~3\bitguard\271832~1.68\{c16c1~1\bitguard.dll => Nenhum Arquivo
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2012-10-30] (AVAST Software)
GroupPolicy: Restrição <======= ATENÇÃO
CHR HKLM\SOFTWARE\Policies\Google: Restrição <======= ATENÇÃO

==================== Internet (Whitelisted) ====================

(Se um ítem for incluído na fixlist, sendo um ítem do Registro, será removido ou restaurado para o padrão.)

ProxyEnable: [.DEFAULT] => Proxy está habilitado.
ProxyServer: [.DEFAULT] => http=127.0.0.1:55642;https=127.0.0.1:55642;
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1 192.168.2.1
Tcpip\..\Interfaces\{51D34A15-3897-4BF6-BB71-70872A831403}: [DhcpNameServer] 192.168.2.1
Tcpip\..\Interfaces\{DBF4F06A-4398-4D11-902A-3A165AB8D19F}: [DhcpNameServer] 192.168.2.1 192.168.2.1

Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxps://br.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wbf_bxinw_17_02¶m1=1¶m2=f%3D1%26b%3DIE%26cc%3Dbr%26pa%3Dwincy%26cd%3D2XzuyEtN2Y1L1Qzu0FyE0ByB0EtB0DyEzy0Czz0CyByC0EyDtN0D0Tzu0StCzztAzztN1L2XzutAtFtByDtFtCtFtCtDyDtN1L1Czu1ByEtN1L1G1B1V1N2Y1L1Qzu2StAtCtCzy0E0Czz0EtGyEyCtDzytG0FtD0DyBtGyEtD0E0EtGzytA0DyCtC0Fzy0B0B0FtAtA2QtN1M1F1B2Z1V1N2Y1L1Qzu2SyEyE0EyDyC0EtCyEtGtB0D0E0EtGyE0FyC0CtG0B0CyBtAtGtCtByEyCyE0C0E0DzzyE0EtC2QtN0A0LzuyEtN1B2Z1V1T1S1NzutCtCyDyBtC%26cr%3D834904643%26a%3Dwbf_bxinw_17_02%26os_ver%3D6.1%26os%3DWindows%2B7%2BUltimate
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxps://br.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wbf_bxinw_17_02¶m1=1¶m2=f%3D1%26b%3DIE%26cc%3Dbr%26pa%3Dwincy%26cd%3D2XzuyEtN2Y1L1Qzu0FyE0ByB0EtB0DyEzy0Czz0CyByC0EyDtN0D0Tzu0StCzztAzztN1L2XzutAtFtByDtFtCtFtCtDyDtN1L1Czu1ByEtN1L1G1B1V1N2Y1L1Qzu2StAtCtCzy0E0Czz0EtGyEyCtDzytG0FtD0DyBtGyEtD0E0EtGzytA0DyCtC0Fzy0B0B0FtAtA2QtN1M1F1B2Z1V1N2Y1L1Qzu2SyEyE0EyDyC0EtCyEtGtB0D0E0EtGyE0FyC0CtG0B0CyBtAtGtCtByEyCyE0C0E0DzzyE0EtC2QtN0A0LzuyEtN1B2Z1V1T1S1NzutCtCyDyBtC%26cr%3D834904643%26a%3Dwbf_bxinw_17_02%26os_ver%3D6.1%26os%3DWindows%2B7%2BUltimate
HKU\S-1-5-21-1485443574-3413710975-1461891065-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxps://br.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wbf_bxinw_17_02¶m1=1¶m2=f%3D1%26b%3DIE%26cc%3Dbr%26pa%3Dwincy%26cd%3D2XzuyEtN2Y1L1Qzu0FyE0ByB0EtB0DyEzy0Czz0CyByC0EyDtN0D0Tzu0StCzztAzztN1L2XzutAtFtByDtFtCtFtCtDyDtN1L1Czu1ByEtN1L1G1B1V1N2Y1L1Qzu2StAtCtCzy0E0Czz0EtGyEyCtDzytG0FtD0DyBtGyEtD0E0EtGzytA0DyCtC0Fzy0B0B0FtAtA2QtN1M1F1B2Z1V1N2Y1L1Qzu2SyEyE0EyDyC0EtCyEtGtB0D0E0EtGyE0FyC0CtG0B0CyBtAtGtCtByEyCyE0C0E0DzzyE0EtC2QtN0A0LzuyEtN1B2Z1V1T1S1NzutCtCyDyBtC%26cr%3D834904643%26a%3Dwbf_bxinw_17_02%26os_ver%3D6.1%26os%3DWindows%2B7%2BUltimate
HKU\S-1-5-21-1485443574-3413710975-1461891065-1000\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://br.msn.com/?ocid=iehp
HKU\S-1-5-21-1485443574-3413710975-1461891065-1000\Software\Microsoft\Internet Explorer\Main,bProtector Start Page = hxxp://www.delta-search.com/?affID=119352&tl=kwdg59gqxsux&tt=gc_&babsrc=HP_ss&mntrId=6626F4B7E2D49C8B
SearchScopes: HKLM -> DefaultScope {86c83f9e-48a4-4cd2-a763-64fea5df35f7} URL = hxxps://br.search.yahoo.com/yhs/search?hspart=iry&hsimp=yhs-fullyhosted_003&type=wbf_bxinw_17_02¶m1=1¶m2=f%3D4%26b%3DIE%26cc%3Dbr%26pa%3Dwincy%26cd%3D2XzuyEtN2Y1L1Qzu0FyE0ByB0EtB0DyEzy0Czz0CyByC0EyDtN0D0Tzu0StCzztAzztN1L2XzutAtFtByDtFtCtFtCtDyDtN1L1Czu1ByEtN1L1G1B1V1N2Y1L1Qzu2StAtCtCzy0E0Czz0EtGyEyCtDzytG0FtD0DyBtGyEtD0E0EtGzytA0DyCtC0Fzy0B0B0FtAtA2QtN1M1F1B2Z1V1N2Y1L1Qzu2SyEyE0EyDyC0EtCyEtGtB0D0E0EtGyE0FyC0CtG0B0CyBtAtGtCtByEyCyE0C0E0DzzyE0EtC2QtN0A0LzuyEtN1B2Z1V1T1S1NzutCtCyDyBtC%26cr%3D834904643%26a%3Dwbf_bxinw_17_02%26os_ver%3D6.1%26os%3DWindows%2B7%2BUltimate&p={searchTerms}
SearchScopes: HKLM -> {1b31c9d2-7135-442b-bb93-7c002172adc6} URL = hxxp://br.yhs4.search.yahoo.com/yhs/search?hspart=baixaki&hsimp=yhs-baixaki_br_installcore_01&type=p&p={searchTerms}
SearchScopes: HKLM -> {2211d4a5-48d0-47f5-a7cd-81e861470f7f} URL = hxxps://br.search.yahoo.com/yhs/search?hspart=elm&hsimp=yhs-001&type=hdr_s_16_26_orgnl¶m1=1¶m2=f%3D4%26b%3DIE%26cc%3Dbr%26pa%3DHodor%26cd%3D2XzuyEtN2Y1L1Qzu0FyE0ByB0EtB0DyEzy0Czz0CyByC0EyDtN0D0Tzu0StCyCyEtDtN1L2XzutAtFtBtBtFtAtFtDtN1L1Czu1M1Q1CtByEtFtCtFtDtN1L1G1B1V1N2Y1L1Qzu2SyDyD0A0DyBtA0FtBtGyE0E0ByBtGtCzyyBtBtGyCyB0DzytGyC0CyB0ByCyBtD0FtD0EyC0B2QtN1M1F1B2Z1V1N2Y1L1Qzu2SyEyE0EyDyC0EtCyEtGtB0D0E0EtGyE0FyC0CtG0B0CyBtAtGtCtByEyCyE0C0E0DzzyE0EtC2QtN0A0LzuyE%26cr%3D1951442399%26a%3Dhdr_s_16_26_orgnl%26os_ver%3D6.1%26os%3DWindows%2B7%2BUltimate&p={searchTerms}
SearchScopes: HKLM -> {86c83f9e-48a4-4cd2-a763-64fea5df35f7} URL = hxxps://br.search.yahoo.com/yhs/search?hspart=iry&hsimp=yhs-fullyhosted_003&type=wbf_bxinw_17_02¶m1=1¶m2=f%3D4%26b%3DIE%26cc%3Dbr%26pa%3Dwincy%26cd%3D2XzuyEtN2Y1L1Qzu0FyE0ByB0EtB0DyEzy0Czz0CyByC0EyDtN0D0Tzu0StCzztAzztN1L2XzutAtFtByDtFtCtFtCtDyDtN1L1Czu1ByEtN1L1G1B1V1N2Y1L1Qzu2StAtCtCzy0E0Czz0EtGyEyCtDzytG0FtD0DyBtGyEtD0E0EtGzytA0DyCtC0Fzy0B0B0FtAtA2QtN1M1F1B2Z1V1N2Y1L1Qzu2SyEyE0EyDyC0EtCyEtGtB0D0E0EtGyE0FyC0CtG0B0CyBtAtGtCtByEyCyE0C0E0DzzyE0EtC2QtN0A0LzuyEtN1B2Z1V1T1S1NzutCtCyDyBtC%26cr%3D834904643%26a%3Dwbf_bxinw_17_02%26os_ver%3D6.1%26os%3DWindows%2B7%2BUltimate&p={searchTerms}
SearchScopes: HKLM-x32 -> DefaultScope {86c83f9e-48a4-4cd2-a763-64fea5df35f7} URL = hxxps://br.search.yahoo.com/yhs/search?hspart=iry&hsimp=yhs-fullyhosted_003&type=wbf_bxinw_17_02¶m1=1¶m2=f%3D4%26b%3DIE%26cc%3Dbr%26pa%3Dwincy%26cd%3D2XzuyEtN2Y1L1Qzu0FyE0ByB0EtB0DyEzy0Czz0CyByC0EyDtN0D0Tzu0StCzztAzztN1L2XzutAtFtByDtFtCtFtCtDyDtN1L1Czu1ByEtN1L1G1B1V1N2Y1L1Qzu2StAtCtCzy0E0Czz0EtGyEyCtDzytG0FtD0DyBtGyEtD0E0EtGzytA0DyCtC0Fzy0B0B0FtAtA2QtN1M1F1B2Z1V1N2Y1L1Qzu2SyEyE0EyDyC0EtCyEtGtB0D0E0EtGyE0FyC0CtG0B0CyBtAtGtCtByEyCyE0C0E0DzzyE0EtC2QtN0A0LzuyEtN1B2Z1V1T1S1NzutCtCyDyBtC%26cr%3D834904643%26a%3Dwbf_bxinw_17_02%26os_ver%3D6.1%26os%3DWindows%2B7%2BUltimate&p={searchTerms}
SearchScopes: HKLM-x32 -> {1b31c9d2-7135-442b-bb93-7c002172adc6} URL = hxxp://br.yhs4.search.yahoo.com/yhs/search?hspart=baixaki&hsimp=yhs-baixaki_br_installcore_01&type=p&p={searchTerms}
SearchScopes: HKLM-x32 -> {2211d4a5-48d0-47f5-a7cd-81e861470f7f} URL = hxxps://br.search.yahoo.com/yhs/search?hspart=elm&hsimp=yhs-001&type=hdr_s_16_26_orgnl¶m1=1¶m2=f%3D4%26b%3DIE%26cc%3Dbr%26pa%3DHodor%26cd%3D2XzuyEtN2Y1L1Qzu0FyE0ByB0EtB0DyEzy0Czz0CyByC0EyDtN0D0Tzu0StCyCyEtDtN1L2XzutAtFtBtBtFtAtFtDtN1L1Czu1M1Q1CtByEtFtCtFtDtN1L1G1B1V1N2Y1L1Qzu2SyDyD0A0DyBtA0FtBtGyE0E0ByBtGtCzyyBtBtGyCyB0DzytGyC0CyB0ByCyBtD0FtD0EyC0B2QtN1M1F1B2Z1V1N2Y1L1Qzu2SyEyE0EyDyC0EtCyEtGtB0D0E0EtGyE0FyC0CtG0B0CyBtAtGtCtByEyCyE0C0E0DzzyE0EtC2QtN0A0LzuyE%26cr%3D1951442399%26a%3Dhdr_s_16_26_orgnl%26os_ver%3D6.1%26os%3DWindows%2B7%2BUltimate&p={searchTerms}
SearchScopes: HKLM-x32 -> {86c83f9e-48a4-4cd2-a763-64fea5df35f7} URL = hxxps://br.search.yahoo.com/yhs/search?hspart=iry&hsimp=yhs-fullyhosted_003&type=wbf_bxinw_17_02¶m1=1¶m2=f%3D4%26b%3DIE%26cc%3Dbr%26pa%3Dwincy%26cd%3D2XzuyEtN2Y1L1Qzu0FyE0ByB0EtB0DyEzy0Czz0CyByC0EyDtN0D0Tzu0StCzztAzztN1L2XzutAtFtByDtFtCtFtCtDyDtN1L1Czu1ByEtN1L1G1B1V1N2Y1L1Qzu2StAtCtCzy0E0Czz0EtGyEyCtDzytG0FtD0DyBtGyEtD0E0EtGzytA0DyCtC0Fzy0B0B0FtAtA2QtN1M1F1B2Z1V1N2Y1L1Qzu2SyEyE0EyDyC0EtCyEtGtB0D0E0EtGyE0FyC0CtG0B0CyBtAtGtCtByEyCyE0C0E0DzzyE0EtC2QtN0A0LzuyEtN1B2Z1V1T1S1NzutCtCyDyBtC%26cr%3D834904643%26a%3Dwbf_bxinw_17_02%26os_ver%3D6.1%26os%3DWindows%2B7%2BUltimate&p={searchTerms}
SearchScopes: HKU\.DEFAULT -> {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL =
SearchScopes: HKU\S-1-5-21-1485443574-3413710975-1461891065-1000 -> DefaultScope {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL = hxxps://br.search.yahoo.com/yhs/search?hspart=iry&hsimp=yhs-fullyhosted_003&type=wbf_bxinw_17_02¶m1=1¶m2=f%3D4%26b%3DIE%26cc%3Dbr%26pa%3Dwincy%26cd%3D2XzuyEtN2Y1L1Qzu0FyE0ByB0EtB0DyEzy0Czz0CyByC0EyDtN0D0Tzu0StCzztAzztN1L2XzutAtFtByDtFtCtFtCtDyDtN1L1Czu1ByEtN1L1G1B1V1N2Y1L1Qzu2StAtCtCzy0E0Czz0EtGyEyCtDzytG0FtD0DyBtGyEtD0E0EtGzytA0DyCtC0Fzy0B0B0FtAtA2QtN1M1F1B2Z1V1N2Y1L1Qzu2SyEyE0EyDyC0EtCyEtGtB0D0E0EtGyE0FyC0CtG0B0CyBtAtGtCtByEyCyE0C0E0DzzyE0EtC2QtN0A0LzuyEtN1B2Z1V1T1S1NzutCtCyDyBtC%26cr%3D834904643%26a%3Dwbf_bxinw_17_02%26os_ver%3D6.1%26os%3DWindows%2B7%2BUltimate&p={searchTerms}
SearchScopes: HKU\S-1-5-21-1485443574-3413710975-1461891065-1000 -> bProtectorDefaultScope {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}
SearchScopes: HKU\S-1-5-21-1485443574-3413710975-1461891065-1000 -> Web URL = hxxp://br.yhs4.search.yahoo.com/yhs/search?hspart=baixaki&hsimp=yhs-baixaki_br_solimba_01&p={searchTerms}
SearchScopes: HKU\S-1-5-21-1485443574-3413710975-1461891065-1000 -> {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL = hxxps://br.search.yahoo.com/yhs/search?hspart=iry&hsimp=yhs-fullyhosted_003&type=wbf_bxinw_17_02¶m1=1¶m2=f%3D4%26b%3DIE%26cc%3Dbr%26pa%3Dwincy%26cd%3D2XzuyEtN2Y1L1Qzu0FyE0ByB0EtB0DyEzy0Czz0CyByC0EyDtN0D0Tzu0StCzztAzztN1L2XzutAtFtByDtFtCtFtCtDyDtN1L1Czu1ByEtN1L1G1B1V1N2Y1L1Qzu2StAtCtCzy0E0Czz0EtGyEyCtDzytG0FtD0DyBtGyEtD0E0EtGzytA0DyCtC0Fzy0B0B0FtAtA2QtN1M1F1B2Z1V1N2Y1L1Qzu2SyEyE0EyDyC0EtCyEtGtB0D0E0EtGyE0FyC0CtG0B0CyBtAtGtCtByEyCyE0C0E0DzzyE0EtC2QtN0A0LzuyEtN1B2Z1V1T1S1NzutCtCyDyBtC%26cr%3D834904643%26a%3Dwbf_bxinw_17_02%26os_ver%3D6.1%26os%3DWindows%2B7%2BUltimate&p={searchTerms}
SearchScopes: HKU\S-1-5-21-1485443574-3413710975-1461891065-1000 -> {1b31c9d2-7135-442b-bb93-7c002172adc6} URL = hxxp://search.babylon.com/?q={searchTerms}&affID=119352&tl=kwdg59gqxsux&tt=gc_&babsrc=SP_ss_din2g&mntrId=6626F4B7E2D49C8B
SearchScopes: HKU\S-1-5-21-1485443574-3413710975-1461891065-1000 -> {2211d4a5-48d0-47f5-a7cd-81e861470f7f} URL = hxxps://br.search.yahoo.com/yhs/search?hspart=elm&hsimp=yhs-001&type=hdr_s_16_26_orgnl¶m1=1¶m2=f%3D4%26b%3DIE%26cc%3Dbr%26pa%3DHodor%26cd%3D2XzuyEtN2Y1L1Qzu0FyE0ByB0EtB0DyEzy0Czz0CyByC0EyDtN0D0Tzu0StCyCyEtDtN1L2XzutAtFtBtBtFtAtFtDtN1L1Czu1M1Q1CtByEtFtCtFtDtN1L1G1B1V1N2Y1L1Qzu2SyDyD0A0DyBtA0FtBtGyE0E0ByBtGtCzyyBtBtGyCyB0DzytGyC0CyB0ByCyBtD0FtD0EyC0B2QtN1M1F1B2Z1V1N2Y1L1Qzu2SyEyE0EyDyC0EtCyEtGtB0D0E0EtGyE0FyC0CtG0B0CyBtAtGtCtByEyCyE0C0E0DzzyE0EtC2QtN0A0LzuyE%26cr%3D1951442399%26a%3Dhdr_s_16_26_orgnl%26os_ver%3D6.1%26os%3DWindows%2B7%2BUltimate&p={searchTerms}
SearchScopes: HKU\S-1-5-21-1485443574-3413710975-1461891065-1000 -> {86c83f9e-48a4-4cd2-a763-64fea5df35f7} URL = hxxp://br.yhs4.search.yahoo.com/yhs/search?hspart=baixaki&hsimp=yhs-baixaki_br_installcore_01&type=p&p={searchTerms}
BHO: avast! WebRep -> {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2012-10-30] (AVAST Software)
BHO: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL [2010-03-25] (Microsoft Corporation)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-09-21] (Microsoft Corp.)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL [2010-02-28] (Microsoft Corporation)
BHO-x32: Browser Companion Helper -> {00cbb66b-1d3b-46d3-9577-323a336acb50} -> C:\Program Files (x86)\BrowserCompanion\jsloader.dll [2012-02-19] ( )
BHO-x32: Adobe PDF Link Helper -> {18DF081C-E8AD-4283-A596-FA578C2EBDC3} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2012-09-23] (Adobe Systems Incorporated)
BHO-x32: RealNetworks Download and Record Plugin for Internet Explorer -> {3049C3E9-B461-4BC5-8870-4C09146192CA} -> C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\IE\rndlbrowserrecordplugin.dll [2013-04-16] (RealDownloader)
BHO-x32: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL [2010-03-25] (Microsoft Corporation)
BHO-x32: avast! WebRep -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2012-10-30] (AVAST Software)
BHO-x32: Auxiliar de Conexão do Windows Live ID -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-09-21] (Microsoft Corp.)
BHO-x32: Sem Nome -> {95B7759C-8C7F-4BF1-B163-73684A933233} -> Nenhum Arquivo
BHO-x32: Browser Companion Helper Verifier -> {963B125B-8B21-49A2-A3A8-E37092276531} -> C:\Program Files (x86)\BrowserCompanion\updatebhoWin32.dll [2012-02-19] ( )
BHO-x32: DealPly Shopping -> {ae48ed75-5a56-4c5f-bbce-6f1ac3875f66} -> C:\Program Files (x86)\DealPly\DealPlyIE.dll [2013-06-04] (DealPly)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL [2010-02-28] (Microsoft Corporation)
BHO-x32: delta Helper Object -> {C1AF5FA5-852C-4C90-812E-A7F75E011D87} -> C:\Program Files (x86)\Delta\delta\1.8.21.5\bh\delta.dll => Nenhum Arquivo
Toolbar: HKLM - avast! WebRep - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2012-10-30] (AVAST Software)
Toolbar: HKLM-x32 - avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2012-10-30] (AVAST Software)
Toolbar: HKLM-x32 - Delta Toolbar - {82E1477C-B154-48D3-9891-33D83C26BCD3} - C:\Program Files (x86)\Delta\delta\1.8.21.5\deltaTlbr.dll Nenhum Arquivo
Handler-x32: base64 - {5ACE96C0-C70A-4A4D-AF14-2E7B869345E1} - C:\Program Files (x86)\BrowserCompanion\tdataprotocol.dll [2012-02-19] (Blabbers Communications Ltd)
Handler-x32: chrome - {5ACE96C0-C70A-4A4D-AF14-2E7B869345E1} - C:\Program Files (x86)\BrowserCompanion\tdataprotocol.dll [2012-02-19] (Blabbers Communications Ltd)
Handler-x32: prox - {5ACE96C0-C70A-4A4D-AF14-2E7B869345E1} - C:\Program Files (x86)\BrowserCompanion\tdataprotocol.dll [2012-02-19] (Blabbers Communications Ltd)
Filter: deflate - {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\Windows\system32\urlmon.dll [2009-07-13] (Microsoft Corporation)
Filter-x32: deflate - {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\Windows\SysWOW64\urlmon.dll [2009-07-13] (Microsoft Corporation)
Filter: gzip - {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\Windows\system32\urlmon.dll [2009-07-13] (Microsoft Corporation)
Filter-x32: gzip - {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\Windows\SysWOW64\urlmon.dll [2009-07-13] (Microsoft Corporation)
StartMenuInternet: IEXPLORE.EXE - iexplore.exe

FireFox:
========
FF DefaultProfile: az5zs9ae.default-1439071693050
FF ProfilePath: C:\Users\Leticia\AppData\Roaming\Mozilla\Firefox\Profiles\az5zs9ae.default-1439071693050 [2017-03-02]
FF NewTab: Mozilla\Firefox\Profiles\az5zs9ae.default-1439071693050 -> about:newtab
FF DefaultSearchEngine: Mozilla\Firefox\Profiles\az5zs9ae.default-1439071693050 -> Yahoo! Powered
FF SelectedSearchEngine: Mozilla\Firefox\Profiles\az5zs9ae.default-1439071693050 -> Yahoo! Powered
FF Homepage: Mozilla\Firefox\Profiles\az5zs9ae.default-1439071693050 -> hxxps://br.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wbf_bxinw_17_02¶m1=1¶m2=f%3D1%26b%3DFirefox%26cc%3Dbr%26pa%3Dwincy%26cd%3D2XzuyEtN2Y1L1Qzu0FyE0ByB0EtB0DyEzy0Czz0CyByC0EyDtN0D0Tzu0StCzztAzztN1L2XzutAtFtByDtFtCtFtCtDyDtN1L1Czu1ByEtN1L1G1B1V1N2Y1L1Qzu2StAtCtCzy0E0Czz0EtGyEyCtDzytG0FtD0DyBtGyEtD0E0EtGzytA0DyCtC0Fzy0B0B0FtAtA2QtN1M1F1B2Z1V1N2Y1L1Qzu2SyEyE0EyDyC0EtCyEtGtB0D0E0EtGyE0FyC0CtG0B0CyBtAtGtCtByEyCyE0C0E0DzzyE0EtC2QtN0A0LzuyEtN1B2Z1V1T1S1NzutCtCyDyBtC%26cr%3D834904643%26a%3Dwbf_bxinw_17_02%26os_ver%3D6.1%26os%3DWindows%2B7%2BUltimate
FF Keyword.URL: Mozilla\Firefox\Profiles\az5zs9ae.default-1439071693050 -> user_pref("keyword.URL", true);
FF SearchPlugin: C:\Users\Leticia\AppData\Roaming\Mozilla\Firefox\Profiles\az5zs9ae.default-1439071693050\searchplugins\yahoo! powered.xml [2017-01-12]
FF SearchPlugin: C:\Users\Leticia\AppData\Roaming\Mozilla\Firefox\Profiles\az5zs9ae.default-1439071693050\searchplugins\yhs.xml [2016-06-28]
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: (avast! WebRep) - C:\Program Files\AVAST Software\Avast\WebRep\FF [2013-04-29] [não assinado]
FF HKLM-x32\...\Firefox\Extensions: [{FCE04E1F-9378-4f39-96F6-5689A9159E45}] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext
FF Extension: (RealDownloader) - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext [2013-07-03] [não assinado]
FF HKU\S-1-5-21-1485443574-3413710975-1461891065-1000\...\Firefox\Extensions: [lyricson@lyricson.net] - C:\Program Files (x86)\LyricsOn\FF
FF Extension: (Lyrics On) - C:\Program Files (x86)\LyricsOn\FF [2013-06-29] [não assinado]
FF HKU\S-1-5-21-1485443574-3413710975-1461891065-1000\...\Firefox\Extensions: [{87F8774F-B485-47E2-A755-A40A8A5E8871}] - C:\Users\Leticia\AppData\Local\GAS Tecnologia\GBBD\scd\xpi => não encontrado (a)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\safeguard-secure-search.xml [2016-05-09]
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\search_the_web.xml [2014-05-16]
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\Windows\SysWOW64\Adobe\Director\np32dsw_1168638.dll [2012-10-04] (Adobe Systems, Inc.)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.0.59 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2012-04-03] (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2012-04-03] (Intel Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=10.21.2 -> C:\Windows\SysWOW64\npDeployJava1.dll [2013-04-29] (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\4.0.60310.0\npctrl.dll [2011-03-09] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL [2010-03-24] (Microsoft Corporation)
FF Plugin-x32: @real.com/nppl3260;version=16.0.2.32 -> c:\program files (x86)\real\realplayer\Netscape6\nppl3260.dll [2013-07-03] (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprndlchromebrowserrecordext;version=1.3.2 -> C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlchromebrowserrecordext.dll [2013-04-16] (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprndlhtml5videoshim;version=1.3.2 -> C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlhtml5videoshim.dll [2013-04-16] (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprndlpepperflashvideoshim;version=1.3.2 -> C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlpepperflashvideoshim.dll [2013-04-16] (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprpplugin;version=16.0.2.32 -> c:\program files (x86)\real\realplayer\Netscape6\nprpplugin.dll [2013-07-03] (RealPlayer)
FF Plugin-x32: @realnetworks.com/npdlplugin;version=1 -> C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\npdlplugin.dll [2013-04-16] (RealDownloader)
FF Plugin-x32: @tools.dpliveupdate.com/DealPlyLive Update;version=3 -> C:\Program Files (x86)\DealPlyLive\Update\1.3.23.0\npGoogleUpdate3.dll [2013-06-29] (DealPly Technologies Ltd)
FF Plugin-x32: @tools.dpliveupdate.com/DealPlyLive Update;version=9 -> C:\Program Files (x86)\DealPlyLive\Update\1.3.23.0\npGoogleUpdate3.dll [2013-06-29] (DealPly Technologies Ltd)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.32.7\npGoogleUpdate3.dll [2016-12-20] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.32.7\npGoogleUpdate3.dll [2016-12-20] (Google Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2012-09-23] (Adobe Systems Inc.)
FF Plugin HKU\S-1-5-21-1485443574-3413710975-1461891065-1000: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\Leticia\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll [2014-05-02] (Unity Technologies ApS)

Chrome:
=======
CHR DefaultProfile: Default
CHR HomePage: Default -> hxxp://www.baixaki.com.br/portal/?utm_source=sol&utm_medium=ppi&utm_campaign=portal
CHR StartupUrls: Default -> "hxxp://www.baixaki.com.br/portal/?utm_source=sol&utm_medium=ppi&utm_campaign=portal","hxxp://www.google.com/"
CHR DefaultSearchURL: Default -> hxxp://srch.bar/{searchTerms}
CHR DefaultSuggestURL: Default -> hxxp://srch.bar/?s={searchTerms}
CHR Plugin: (Shockwave Flash) - C:\Program Files (x86)\Google\Chrome\Application\56.0.2924.87\PepperFlash\pepflashplayer.dll => Nenhum Arquivo
CHR Plugin: (Native Client) - C:\Program Files (x86)\Google\Chrome\Application\56.0.2924.87\ppGoogleNaClPluginChrome.dll => Nenhum Arquivo
CHR Plugin: (Chrome PDF Viewer) - C:\Program Files (x86)\Google\Chrome\Application\56.0.2924.87\pdf.dll => Nenhum Arquivo
CHR Plugin: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\Browser\nppdf32.dll (Adobe Systems Inc.)
CHR Plugin: (Microsoft Office 2010) - C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)
CHR Plugin: (Microsoft Office 2010) - C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)
CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.21.135\npGoogleUpdate3.dll => Nenhum Arquivo
CHR Plugin: (Intel00AE Identity Protection Technology) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
CHR Plugin: (Intel00AE Identity Protection Technology) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
CHR Plugin: (Java(TM) Platform SE 7 U21) - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll => Nenhum Arquivo
CHR Plugin: (Silverlight Plug-In) - C:\Program Files (x86)\Microsoft Silverlight\4.0.50917.0\npctrl.dll => Nenhum Arquivo
CHR Plugin: (RealPlayer(tm) G2 LiveConnect-Enabled Plug-In (32-bit) ) - C:\Program Files (x86)\Real\RealPlayer\Netscape6\nppl3260.dll (RealNetworks, Inc.)
CHR Plugin: (RealJukebox NS Plugin) - C:\Program Files (x86)\Real\RealPlayer\Netscape6\nprjplug.dll => Nenhum Arquivo
CHR Plugin: (RealPlayer Version Plugin) - C:\Program Files (x86)\Real\RealPlayer\Netscape6\nprpjplug.dll => Nenhum Arquivo
CHR Plugin: (RealNetworks(tm) RealPlayer Chrome Background Extension Plug-In (32-bit) ) - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprpchromebrowserrecordext.dll => Nenhum Arquivo
CHR Plugin: (RealPlayer(tm) HTML5VideoShim Plug-In (32-bit) ) - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprphtml5videoshim.dll => Nenhum Arquivo
CHR Plugin: (Shockwave Flash) - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_7_700_170.dll => Nenhum Arquivo
CHR Plugin: (Java Deployment Toolkit 7.0.210.11) - C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
CHR Plugin: (Shockwave for Director) - C:\Windows\system32\Adobe\Director\np32dsw.dll => Nenhum Arquivo
CHR Profile: C:\Users\Leticia\AppData\Local\Google\Chrome\User Data\Default [2017-03-02]
CHR Extension: (YouTube) - C:\Users\Leticia\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2016-05-06]
CHR Extension: (Google Search) - C:\Users\Leticia\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-09-01]
CHR Extension: (Pagamentos da Chrome Web Store) - C:\Users\Leticia\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2017-01-19]
CHR Extension: (Search Manager) - C:\Users\Leticia\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej [2017-01-20]
CHR Extension: (Gmail) - C:\Users\Leticia\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-09-01]
CHR Extension: (Chrome Media Router) - C:\Users\Leticia\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2017-02-09]
CHR Extension: (Extutil) - C:\Users\Leticia\AppData\Local\Temp\D7ADFCCA-EE7E-442C-9999-C4D14FEF360B [2014-05-17]
CHR Extension: (Managera) - C:\Users\Leticia\AppData\Local\Temp\38fdaae5-8e0e-493c-88ec-e05c3be06e42 [2014-05-17]
CHR HKLM\...\Chrome\Extension: [pilplloabdedfmialnfchjomjmpjcoej] - hxxps://clients2.google.com/service/update2/crx
CHR HKU\S-1-5-21-1485443574-3413710975-1461891065-1000\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [pilplloabdedfmialnfchjomjmpjcoej] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [bodddioamolcibagionmmobehnbhiakf] - C:\Program Files (x86)\BrowserCompanion\blabbers-ch.crx [2012-02-19]
CHR HKLM-x32\...\Chrome\Extension: [icmlaeflemplmjndnaapfdbbnpncnbda] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2013-04-29]
CHR HKLM-x32\...\Chrome\Extension: [idhngdhcfkoamngbedgpaokgjbnpdiji] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Chrome\Ext\realdownloader.crx [2013-04-16]
CHR HKLM-x32\...\Chrome\Extension: [pilplloabdedfmialnfchjomjmpjcoej] - hxxps://clients2.google.com/service/update2/crx

==================== Serviços (Whitelisted) ====================

(Se uma entrada for incluída na fixlist, será removida do Registro. O arquivo não será movido, a menos que seja colocado separadamente.)

S4 ACDaemon; C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACService.exe [113152 2010-03-18] (ArcSoft Inc.)
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [44808 2012-10-30] (AVAST Software)
S4 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [128280 2012-04-03] ()
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [161560 2012-04-03] (Intel Corporation)
R2 Net Driver HPZ12; C:\Windows\system32\HPZinw12.dll [71680 2009-05-14] (Hewlett-Packard) [Arquivo não assinado]
R2 NetExpress Updater; C:\Program Files (x86)\AppBrad\NetExpressUpdater.exe [20424 2016-10-13] ()
S4 NMIndexingService; C:\Program Files (x86)\Common Files\Ahead\Lib\NMIndexingService.exe [275752 2008-01-22] (Nero AG)
S4 PLFlash DeviceIoControl Service; C:\Windows\SysWOW64\IoctlSvc.exe [81920 2006-12-19] (Prolific Technology Inc.) [Arquivo não assinado]
R2 Pml Driver HPZ12; C:\Windows\system32\HPZipm12.dll [89600 2009-05-14] (Hewlett-Packard) [Arquivo não assinado]
S4 RealNetworks Downloader Resolver Service; C:\Program Files (x86)\RealNetworks\RealDownloader\rndlresolversvc.exe [39056 2013-04-16] ()
R2 scpbradserv; C:\Program Files (x86)\scpbrad\scpbradserv.exe [1926672 2017-01-09] (Scopus Soluções em TI Ltda)
R2 SSSvc; C:\Program Files (x86)\ScreenShot\SSSvc.exe [139744 2016-11-02] (Filseclab Corporation Limited)
R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2009-07-13] (Microsoft Corporation)
S2 Intel(R) Capability Licensing Service Interface; "C:\Program Files\Intel\iCLS Client\HeciServer.exe" [X]
S2 KMService; C:\Windows\system32\srvany.exe [X]
S2 WebCake Desktop Updater; C:\Program Files (x86)\Betcat\WBDesktop.Updater.1.0.0.16.exe [X]

===================== Drivers (Whitelisted) ======================

(Se uma entrada for incluída na fixlist, será removida do Registro. O arquivo não será movido, a menos que seja colocado separadamente.)

R2 aswFsBlk; C:\Windows\System32\Drivers\aswFsBlk.sys [25232 2012-10-30] (AVAST Software)
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [71600 2012-10-30] (AVAST Software)
R1 aswRdr; C:\Windows\System32\Drivers\aswrdr2.sys [54072 2012-10-15] (AVAST Software)
R1 aswSnx; C:\Windows\System32\Drivers\aswSnx.sys [984144 2012-10-30] (AVAST Software)
R1 aswSP; C:\Windows\System32\Drivers\aswSP.sys [370288 2012-10-30] (AVAST Software)
R1 aswTdi; C:\Windows\System32\Drivers\aswTdi.sys [59728 2012-10-30] (AVAST Software)
S3 mvusbews; C:\Windows\System32\Drivers\mvusbews.sys [20480 2011-04-04] (Marvell Semiconductor, Inc.)
R2 {1BA31E5A-C098-42d8-8F88-3C9F78A2FDDC}; C:\Program Files (x86)\CyberLink\PowerDVD10\NavFilter\000.fcl [146928 2010-03-13] (CyberLink Corp.)
S3 BdApiUtil; \??\C:\Program Files (x86)\Baidu Security\Baidu Antivirus\BdApiUtil64.sys [X]
S3 BdCameraProtect; \??\C:\Program Files (x86)\Baidu Security\Baidu Antivirus\BdCameraProtect64.sys [X]
S1 Bfilter; \??\C:\Windows\System32\drivers\Bfilter.sys [X]
S1 Bfmon; \??\C:\Windows\System32\drivers\Bfmon.sys [X]
S1 Bnbase; System32\drivers\bnbasex64.sys [X]
S1 Bndef; \??\C:\Windows\System32\drivers\bndef64.sys [X]
S1 Bprotect; \??\C:\Windows\System32\drivers\Bprotect.sys [X]

==================== NetSvcs (Whitelisted) ===================

(Se uma entrada for incluída na fixlist, será removida do Registro. O arquivo não será movido, a menos que seja colocado separadamente.)


==================== Três Meses Criados arquivos e pastas ========

(Se uma entrada for incluída na fixlist, o arquivo/pasta será movido.)

2017-03-02 13:30 - 2017-03-02 13:36 - 00000000 ____D C:\FRST
2017-03-02 13:25 - 2017-03-02 13:29 - 00000000 ____D C:\Users\Todos os Usuários\~0
2017-03-02 13:25 - 2017-03-02 13:29 - 00000000 ____D C:\ProgramData\~0
2017-03-02 13:25 - 2017-03-02 13:28 - 00000000 ____D C:\Users\Leticia\AppData\Local\IIIQF
2017-03-02 10:03 - 2017-03-02 10:03 - 00000000 ___RD C:\Program Files (x86)\Skype
2017-03-02 10:03 - 2017-03-02 10:03 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
2017-03-02 09:14 - 2017-03-02 09:14 - 00003100 _____ C:\Windows\System32\Tasks\{A43D4A5B-8C32-4183-B5AF-F86D42BDD399}
2017-03-02 08:55 - 2017-03-02 08:55 - 00003160 _____ C:\Windows\System32\Tasks\{CECEB727-498F-42BD-A151-740DC77908E4}
2017-03-02 08:27 - 2017-03-02 10:16 - 00000000 ____D C:\Users\Todos os Usuários\Package Cache
2017-03-02 08:27 - 2017-03-02 10:16 - 00000000 ____D C:\ProgramData\Package Cache
2017-03-02 08:03 - 2017-03-02 08:03 - 00000000 ____D C:\Users\Leticia\AppData\Local\{7DCC2298-7530-4282-8AE4-B2B4F4234AD7}
2017-03-01 12:25 - 2017-03-01 12:25 - 00000000 ____D C:\Users\Leticia\AppData\Local\{F6DD382C-6DE1-4C5E-9A76-5FE675E2AA8B}
2017-02-27 08:09 - 2017-02-27 08:10 - 00000000 ____D C:\Users\Leticia\AppData\Local\{E51005A4-C6B3-497D-B4E5-E0ED0EEA109C}
2017-02-24 07:57 - 2017-02-24 07:57 - 00000000 ____D C:\Users\Leticia\AppData\Local\{BCC634DD-FBCF-4052-A533-974258EA5A32}
2017-02-22 10:27 - 2017-02-23 08:03 - 00000000 ____D C:\Users\Leticia\AppData\Local\{A46071A4-6232-4E0E-A836-99A968E18098}
2017-02-22 08:18 - 2017-02-22 08:18 - 00000000 ____D C:\Users\Leticia\AppData\Local\{63B73197-9B02-4E70-8454-6799A795573F}
2017-02-20 09:13 - 2017-02-21 08:07 - 00000000 ____D C:\Users\Leticia\AppData\Local\{FD33C10E-CF9B-48EC-976B-458E3C3FD9A3}
2017-02-17 08:36 - 2017-02-17 08:36 - 00000000 ____D C:\Users\Leticia\AppData\Local\{A0EF4D36-EB3B-456A-9E00-DEB41F3D8F7B}
2017-02-16 08:14 - 2017-02-16 08:14 - 00000000 ____D C:\Users\Leticia\AppData\Local\{008C8EEB-FFAC-4F1C-8FF7-286A9B5761C3}
2017-02-15 08:05 - 2017-02-15 08:05 - 00000000 ____D C:\Users\Leticia\AppData\Local\{DA2F878D-42C9-4F9B-8E17-B3C1F51D1D4B}
2017-02-14 07:54 - 2017-02-14 07:54 - 00000000 ____D C:\Users\Leticia\AppData\Local\{B6FC38B5-385F-4BB0-A152-14561949EE42}
2017-02-13 09:10 - 2017-02-13 09:10 - 00000000 ____D C:\Users\Leticia\AppData\Local\{76454BC4-2D64-426E-A538-856AB281C4CA}
2017-02-10 07:16 - 2017-02-10 07:16 - 00000000 ____D C:\Users\Leticia\AppData\Local\{7DA22418-2D52-4311-92E8-B9DF5FCA5EF7}
2017-02-09 09:17 - 2017-02-09 09:17 - 00000000 ____D C:\Users\Leticia\AppData\Roaming\MPC-HC
2017-02-09 07:03 - 2017-02-09 07:03 - 00000000 ____D C:\Users\Leticia\AppData\Local\{D2A467E4-5BF6-4C1A-B30A-382ADAA07CAF}
2017-02-08 07:06 - 2017-02-08 07:06 - 00000000 ____D C:\Users\Leticia\AppData\Local\{A3E8BEA9-0CBB-4823-B8B5-892BDB3E85DF}
2017-02-07 06:55 - 2017-02-07 06:56 - 00000000 ____D C:\Users\Leticia\AppData\Local\{27DE20A5-4077-40D7-BFFF-F2621397A096}
2017-02-06 07:04 - 2017-02-06 07:04 - 00000000 ____D C:\Users\Leticia\AppData\Local\{3BAD9885-F55F-49CE-A96C-4D3387BF6D86}
2017-02-03 07:16 - 2017-02-03 07:17 - 00000000 ____D C:\Users\Leticia\AppData\Local\{53413E3A-C0D5-4A1D-8008-8968365E251C}
2017-02-02 07:11 - 2017-02-02 07:12 - 00000000 ____D C:\Users\Leticia\AppData\Local\{35824410-4724-4B8C-B784-E5F1476CD9E3}
2017-02-01 15:52 - 2017-02-01 15:53 - 00000000 ____D C:\Users\Leticia\AppData\Local\{29839084-43B6-4B7F-B177-E57246965144}
2017-01-31 07:14 - 2017-01-31 07:14 - 00000000 ____D C:\Users\Leticia\AppData\Local\{6A45F287-A19F-49D9-A544-775AD146ED2E}
2017-01-30 08:37 - 2017-01-30 08:37 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MPC-HC x64
2017-01-30 08:37 - 2017-01-30 08:37 - 00000000 ____D C:\Program Files\MPC-HC
2017-01-30 07:11 - 2017-01-30 07:11 - 00000000 ____D C:\Users\Leticia\AppData\Local\{2CFE240C-6EDE-44B0-929C-F6D699CED90F}
2017-01-27 07:11 - 2017-01-27 07:11 - 00000000 ____D C:\Users\Leticia\AppData\Local\{3EEFFF87-D71F-4EF0-9EAD-72143BE74F80}
2017-01-26 12:28 - 2017-01-26 12:28 - 00007406 _____ C:\Windows\srtpoq.xml
2017-01-26 07:25 - 2017-01-26 07:25 - 00000000 ____D C:\Users\Leticia\AppData\Local\{3152D1B6-7ECB-4994-AB4C-B7296BA9B944}
2017-01-25 12:23 - 2017-01-25 12:23 - 00000000 ____D C:\Windows\System32\Tasks\AVAST Software
2017-01-25 12:23 - 2017-01-25 12:23 - 00000000 ____D C:\Program Files\Common Files\AV
2017-01-25 07:14 - 2017-01-25 07:14 - 00000000 ____D C:\Users\Leticia\AppData\Local\{554A3C63-7B29-4D5A-8D12-FFBDF632BE8C}
2017-01-24 08:19 - 2017-01-24 08:19 - 00000000 ____D C:\Users\Leticia\AppData\Roaming\Memphis
2017-01-24 08:19 - 2017-01-24 08:19 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CR Trabalhista
2017-01-24 08:19 - 2017-01-24 08:19 - 00000000 ____D C:\Program Files (x86)\Memphis
2017-01-24 07:12 - 2017-01-24 07:13 - 00000000 ____D C:\Users\Leticia\AppData\Local\{837D35FB-28C1-46FA-AD3E-24EE71AE9075}
2017-01-23 07:41 - 2017-01-23 09:01 - 00000000 ____D C:\Thaila PC
2017-01-23 07:28 - 2017-01-23 07:28 - 00000000 ____D C:\Users\Leticia\AppData\Local\{FCEB91C0-BBD8-4F66-8F5F-8FA54544B5AA}
2017-01-21 09:28 - 2017-01-21 09:28 - 00000000 ____D C:\Users\Leticia\AppData\Local\{7E11AD40-EF28-4639-AB0D-DAC4DBEB21A5}
2017-01-21 09:03 - 2017-01-21 09:39 - 00000000 ____D C:\PROGRAMAS
2017-01-21 09:03 - 2017-01-21 09:39 - 00000000 ____D C:\Nex
2017-01-21 09:03 - 2017-01-21 09:39 - 00000000 ____D C:\MySQL
2017-01-21 09:03 - 2017-01-21 09:39 - 00000000 ____D C:\Editora Contemplar
2017-01-20 07:11 - 2017-01-20 07:11 - 00000000 ____D C:\Users\Leticia\AppData\Local\{672B08ED-EE88-4744-9777-A798467044B4}
2017-01-19 15:40 - 2017-03-02 10:35 - 00000000 ____D C:\Users\Leticia\AppData\LocalLow\Mozilla
2017-01-19 07:18 - 2017-01-19 07:19 - 00000000 ____D C:\Users\Leticia\AppData\Local\{3CBAF91F-D6E1-424C-BED1-F4B651792923}
2017-01-18 07:05 - 2017-01-18 07:06 - 00000000 ____D C:\Users\Leticia\AppData\Local\{95297A95-B51C-4498-BEB1-7E5A7D53F153}
2017-01-17 07:12 - 2017-01-17 07:15 - 00000000 ____D C:\Users\Leticia\AppData\Local\{67BB1081-B346-41A9-BC97-DB560DF97751}
2017-01-16 07:38 - 2017-01-16 07:38 - 00000000 ____D C:\Users\Leticia\AppData\Local\{1395A51C-D09D-42C5-88BA-F0491724F946}
2017-01-14 16:37 - 2017-01-14 16:37 - 00000000 ____D C:\Users\Leticia\AppData\Local\{0751ECA7-C96B-4035-8AA4-E459B0E0BFCF}
2017-01-13 07:08 - 2017-01-13 07:08 - 00000000 ____D C:\Users\Leticia\AppData\Local\{DA8CBAA9-B6FB-4A28-B99B-982935AE5731}
2017-01-12 13:32 - 2017-01-12 13:32 - 00000000 ____D C:\Users\Leticia\AppData\Roaming\PlutoTV
2017-01-12 13:26 - 2017-01-12 13:26 - 00004016 _____ C:\Windows\System32\Tasks\Yahoo! Powered fatel
2017-01-12 13:25 - 2017-03-02 13:25 - 00000982 _____ C:\Windows\Tasks\Yahoo! Powered fatel.job
2017-01-12 13:25 - 2017-03-02 13:25 - 00000000 ____D C:\Users\Todos os Usuários\{410D846E-CB4F-0EA8-4D89-90EAD7CB1B24}
2017-01-12 13:25 - 2017-03-02 13:25 - 00000000 ____D C:\ProgramData\{410D846E-CB4F-0EA8-4D89-90EAD7CB1B24}
2017-01-12 13:24 - 2017-01-13 07:05 - 00000000 ____D C:\Users\Leticia\AppData\Roaming\ScreenShot
2017-01-12 13:24 - 2017-01-12 13:24 - 00001868 _____ C:\ProgramData\Microsoft\Windows\Start Menu\ScreenShot.lnk
2017-01-12 13:24 - 2017-01-12 13:24 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ScreenShot
2017-01-12 13:24 - 2017-01-12 13:24 - 00000000 ____D C:\Program Files (x86)\ScreenShot
2017-01-12 07:11 - 2017-01-12 07:11 - 00000000 ____D C:\Users\Leticia\AppData\Local\{F8595115-61D3-4706-8FA0-6C2FD0BDFDFB}
2017-01-11 17:46 - 2017-01-11 17:46 - 00000000 ____D C:\Users\Leticia\AppData\Local\{51952DB5-1B38-4766-A712-46C11EF9738D}
2017-01-09 09:17 - 2017-01-09 09:17 - 00000000 ____D C:\Users\Todos os Usuários\scpbrad
2017-01-09 09:17 - 2017-01-09 09:17 - 00000000 ____D C:\Users\Leticia\AppData\Local\Geckofx
2017-01-09 09:17 - 2017-01-09 09:17 - 00000000 ____D C:\ProgramData\scpbrad
2017-01-09 09:17 - 2017-01-09 09:17 - 00000000 ____D C:\Program Files (x86)\scpbrad
2017-01-09 09:11 - 2017-01-09 09:11 - 00000000 ____D C:\Windows\Sun
2017-01-09 09:10 - 2017-01-09 09:10 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Navegador Exclusivo Bradesco
2017-01-09 09:09 - 2017-01-21 09:29 - 00000000 ____D C:\Users\Leticia\AppData\Roaming\NetExpress50
2017-01-09 09:09 - 2017-01-09 09:10 - 00000000 ____D C:\Program Files (x86)\AppBrad
2017-01-09 08:31 - 2017-01-09 08:31 - 00000000 ____D C:\Users\Leticia\AppData\Local\{413193C4-2426-4AE7-9B18-F4C0F425BD5C}
2017-01-06 18:02 - 2017-01-06 18:03 - 00006256 _____ C:\Windows\SysWOW64\PerfStringBackup.INI
2017-01-06 17:53 - 2009-11-25 16:47 - 01942856 _____ (Microsoft Corporation) C:\Windows\system32\dfshim.dll
2017-01-06 17:53 - 2009-11-25 16:47 - 01130824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dfshim.dll
2017-01-06 17:53 - 2009-11-25 16:47 - 00444752 _____ (Microsoft Corporation) C:\Windows\system32\mscoree.dll
2017-01-06 17:53 - 2009-11-25 16:47 - 00320352 _____ (Microsoft Corporation) C:\Windows\system32\PresentationHost.exe
2017-01-06 17:53 - 2009-11-25 16:47 - 00297808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mscoree.dll
2017-01-06 17:53 - 2009-11-25 16:47 - 00295264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PresentationHost.exe
2017-01-06 17:53 - 2009-11-25 16:47 - 00109912 _____ (Microsoft Corporation) C:\Windows\system32\PresentationHostProxy.dll
2017-01-06 17:53 - 2009-11-25 16:47 - 00099176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PresentationHostProxy.dll
2017-01-06 17:53 - 2009-11-25 16:47 - 00049472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netfxperf.dll
2017-01-06 17:53 - 2009-11-25 16:47 - 00048960 _____ (Microsoft Corporation) C:\Windows\system32\netfxperf.dll
2017-01-06 17:19 - 2017-01-06 17:20 - 00000000 ____D C:\Users\Leticia\AppData\Local\{D7436B72-251A-4DB3-B233-09A5CC2E4269}
2017-01-05 17:01 - 2017-01-05 17:02 - 00000000 ____D C:\Users\Leticia\AppData\Local\{A0C4044D-D0DE-4E70-975B-FF177FA85C4D}
2017-01-04 16:26 - 2017-01-04 16:26 - 00000000 ____D C:\Users\Leticia\AppData\Local\{31567A65-D39D-4F06-AC3A-3B3685F98BAD}
2017-01-03 08:36 - 2017-01-03 08:37 - 00000000 ____D C:\Users\Leticia\AppData\Local\{16D932C5-857E-4E09-89C4-B180729A11F4}
2016-12-30 19:16 - 2016-12-30 19:17 - 00000000 ____D C:\Users\Leticia\AppData\Local\{C3383703-236C-40EB-91BD-6BB3DAAB2CD6}
2016-12-30 16:25 - 2016-12-30 16:25 - 00000000 ____D C:\Users\Leticia\AppData\Local\{FFCA63D0-2FFD-4A20-9B98-A28C027E83A6}
2016-12-29 22:20 - 2016-12-29 22:21 - 00000000 ____D C:\Users\Leticia\AppData\Local\{AE1DB98A-3DBD-4042-A596-DF58108AA469}
2016-12-29 16:56 - 2016-12-29 16:56 - 00000000 ____D C:\Users\Leticia\AppData\Local\{BE6F9802-536D-4CBB-BC7F-5348A9D97FEC}
2016-12-29 16:30 - 2016-12-29 16:30 - 00000000 ____D C:\Users\Leticia\AppData\Local\{2B939C8D-A004-4D50-B2A8-52D37B47E9A7}
2016-12-28 16:31 - 2016-12-28 16:31 - 00000000 ____D C:\Users\Leticia\AppData\Local\{88A02241-9E2F-4A1E-A5D6-336C888B15F8}
2016-12-27 16:11 - 2016-12-27 16:11 - 00000000 ____D C:\Users\Leticia\AppData\Local\{85841739-EAC6-4BA7-BAE5-E74537080C53}
2016-12-23 16:48 - 2016-12-23 16:48 - 00000000 ____D C:\Users\Leticia\AppData\Local\{CB8BD821-8BDB-412F-BC23-45E08C724B5D}
2016-12-22 19:00 - 2016-12-22 19:00 - 00000000 ____D C:\Users\Leticia\AppData\Local\{8EB974FD-0F20-4C09-93DC-E366B1BE9485}
2016-12-22 18:37 - 2016-12-22 18:37 - 00000000 ____D C:\Users\Leticia\AppData\Local\{589C1A36-5E56-4186-8049-8F8C70A7CB7F}
2016-12-21 16:53 - 2016-12-21 16:53 - 00000000 ____D C:\Users\Leticia\AppData\Local\{00C113FD-8A11-42B8-8D46-051CD94C8998}
2016-12-20 22:32 - 2016-12-20 22:32 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_mvusbews_01007.Wdf
2016-12-20 22:30 - 2016-12-20 22:30 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HP
2016-12-20 22:30 - 2011-05-11 08:24 - 00126520 _____ (HP) C:\Windows\system32\HPSIsvc.exe
2016-12-20 22:30 - 2011-04-02 15:05 - 01696256 _____ C:\Windows\system32\HP1100SM.EXE
2016-12-20 22:30 - 2011-04-02 15:05 - 00290304 _____ C:\Windows\system32\HP1100LM.DLL
2016-12-20 22:27 - 2011-04-04 11:25 - 01490656 _____ (Microsoft Corporation) C:\Windows\system32\WdfCoInstaller01007.dll
2016-12-20 22:27 - 2011-04-04 11:25 - 00082944 _____ C:\Windows\system32\mvusbews.dll
2016-12-20 22:27 - 2011-04-04 11:25 - 00052736 _____ C:\Windows\system32\HP1100SMs.dll
2016-12-20 22:27 - 2011-04-04 11:25 - 00020480 _____ (Marvell Semiconductor, Inc.) C:\Windows\system32\Drivers\mvusbews.sys
2016-12-20 22:27 - 2011-04-02 19:12 - 00350720 _____ C:\Windows\system32\mvhlewsi.DLL
2016-12-20 19:45 - 2016-12-20 19:45 - 00000000 ____D C:\Users\Leticia\AppData\Local\{40DBFC53-9F0A-4F91-9B04-532AB6C015F5}
2016-12-20 16:09 - 2016-12-20 16:09 - 00000000 ____D C:\Users\Leticia\AppData\Local\{A0B12F1B-F576-48A5-8080-72ABE8F02022}
2016-12-19 12:11 - 2016-12-19 12:11 - 00000000 ____D C:\Users\Leticia\AppData\Local\{171FC24F-6AA0-44AB-9D3A-96C7F8FAE2C0}

==================== Três Meses Modificados arquivos e pastas ========

(Se uma entrada for incluída na fixlist, o arquivo/pasta será movido.)

2017-03-02 13:34 - 2009-07-29 13:08 - 01200556 _____ C:\Windows\system32\prfh0416.dat
2017-03-02 13:34 - 2009-07-29 13:08 - 00593902 _____ C:\Windows\system32\prfc0416.dat
2017-03-02 13:34 - 2009-07-14 02:13 - 00006274 _____ C:\Windows\system32\PerfStringBackup.INI
2017-03-02 13:20 - 2009-07-14 01:45 - 00014016 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2017-03-02 13:20 - 2009-07-14 01:45 - 00014016 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2017-03-02 13:12 - 2013-06-29 14:39 - 00000000 ____D C:\Users\Leticia\Tracing
2017-03-02 13:12 - 2009-07-14 02:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2017-03-02 10:03 - 2013-04-29 12:38 - 00000000 ____D C:\Users\Todos os Usuários\Skype
2017-03-02 10:03 - 2013-04-29 12:38 - 00000000 ____D C:\ProgramData\Skype
2017-03-02 09:51 - 2013-04-29 12:23 - 00004182 _____ C:\Windows\System32\Tasks\avast! Emergency Update
2017-03-02 08:27 - 2013-04-29 12:38 - 00000000 ____D C:\Users\Leticia\AppData\Roaming\Skype
2017-03-01 12:43 - 2014-01-21 20:17 - 00000000 ____D C:\Program Files (x86)\Mobogenie
2017-02-23 08:41 - 2014-01-09 12:53 - 00000119 _____ C:\Users\Leticia\AppData\default.pls
2017-02-22 13:19 - 2013-07-03 20:37 - 00003354 _____ C:\Windows\System32\Tasks\RealPlayerRealUpgradeScheduledTaskS-1-5-21-1485443574-3413710975-1461891065-1000
2017-02-22 13:19 - 2013-07-03 20:37 - 00003224 _____ C:\Windows\System32\Tasks\RealPlayerRealUpgradeLogonTaskS-1-5-21-1485443574-3413710975-1461891065-1000
2017-02-07 12:23 - 2013-04-29 12:36 - 00002202 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk

==================== Arquivos na raiz de alguns diretórios =======

2016-05-30 11:21 - 2016-05-30 11:21 - 0000000 _____ () C:\Users\Leticia\AppData\Roaming\FileShred.log
2016-06-17 14:49 - 2016-06-17 14:49 - 0532920 _____ () C:\Users\Leticia\AppData\Roaming\trz6900.tmp
2013-08-06 19:49 - 2016-08-03 08:49 - 0000334 _____ () C:\Users\Leticia\AppData\Roaming\WB.CFG
2013-06-21 11:47 - 2013-06-22 09:35 - 0000005 _____ () C:\Users\Leticia\AppData\Roaming\WBPU-TTL.DAT
2014-03-17 20:04 - 2014-03-17 20:04 - 0000000 _____ () C:\Users\Leticia\AppData\Local\{ADE8020F-E5B0-4C24-8AD2-8CD7AE1AB685}
2014-03-17 20:04 - 2014-03-17 20:04 - 0000000 _____ () C:\Users\Leticia\AppData\Local\{DB4CC306-E4A9-4EB0-93BF-BF053336939B}
2013-11-22 08:40 - 2013-11-22 08:40 - 0170344 _____ (Baidu, Inc.) C:\ProgramData\FileSplitUpLoad.dll
2016-06-08 14:40 - 2016-06-08 14:55 - 0001228 _____ () C:\ProgramData\hpzinstall.log

Arquivos para serem movidos ou deletados:
====================
C:\ProgramData\FileSplitUpLoad.dll
C:\Users\Todos os Usuários\FileSplitUpLoad.dll


Alguns arquivos em TEMP:
====================
2014-05-17 11:21 - 2014-05-17 11:21 - 0073848 _____ () C:\Users\Leticia\AppData\Local\Temp\1381228536_Cloud_Backup_Setup.exe
2014-05-18 11:44 - 2014-05-18 11:44 - 0073848 _____ () C:\Users\Leticia\AppData\Local\Temp\1381228536_Cloud_Backup_Setup{1}.exe
2014-05-18 11:44 - 2014-05-18 11:45 - 0852576 _____ () C:\Users\Leticia\AppData\Local\Temp\1392373196_WindowShopper_mzqnzmz.exe
2014-05-17 11:04 - 2014-05-17 11:04 - 0061632 _____ () C:\Users\Leticia\AppData\Local\Temp\1397543112_wajam_download.exe
2013-06-10 13:14 - 2013-06-10 13:24 - 5661760 _____ () C:\Users\Leticia\AppData\Local\Temp\AresCatcher.exe
2012-05-16 13:32 - 2012-05-16 13:32 - 0053376 _____ () C:\Users\Leticia\AppData\Local\Temp\babtool.exe
2014-05-18 11:44 - 2014-05-18 11:45 - 10372136 _____ () C:\Users\Leticia\AppData\Local\Temp\BackupSetup.exe
2013-06-10 13:20 - 2013-06-10 13:22 - 1078456 _____ () C:\Users\Leticia\AppData\Local\Temp\coupish_2581290.exe
2012-05-16 13:32 - 2012-05-16 13:32 - 0053136 _____ () C:\Users\Leticia\AppData\Local\Temp\couptool.exe
2013-04-29 12:14 - 2010-06-20 23:42 - 0046456 _____ (Sony Electronics, Inc) C:\Users\Leticia\AppData\Local\Temp\GLF101B.EXE
2013-04-29 12:14 - 2003-05-02 16:13 - 0151552 _____ () C:\Users\Leticia\AppData\Local\Temp\GLF1106.EXE
2013-04-29 12:21 - 2010-06-20 22:42 - 0046456 _____ (Sony Electronics, Inc) C:\Users\Leticia\AppData\Local\Temp\GLF1DD1.EXE
2013-04-29 12:21 - 2003-05-02 15:13 - 0151552 _____ () C:\Users\Leticia\AppData\Local\Temp\GLF1FB6.EXE
2013-04-29 12:16 - 2010-06-20 23:42 - 0046456 _____ (Sony Electronics, Inc) C:\Users\Leticia\AppData\Local\Temp\GLF369E.EXE
2013-04-29 12:16 - 2003-05-02 16:13 - 0151552 _____ () C:\Users\Leticia\AppData\Local\Temp\GLF3799.EXE
2013-04-29 12:15 - 2010-06-20 23:42 - 0046456 _____ (Sony Electronics, Inc) C:\Users\Leticia\AppData\Local\Temp\GLF51CC.EXE
2013-04-29 12:15 - 2003-05-02 16:13 - 0151552 _____ () C:\Users\Leticia\AppData\Local\Temp\GLF5305.EXE
2013-04-29 12:12 - 2010-06-20 23:42 - 0046456 _____ (Sony Electronics, Inc) C:\Users\Leticia\AppData\Local\Temp\GLF5786.EXE
2013-04-29 12:12 - 2003-05-02 16:13 - 0151552 _____ () C:\Users\Leticia\AppData\Local\Temp\GLF5BBC.EXE
2013-04-29 12:18 - 2010-06-20 23:42 - 0046456 _____ (Sony Electronics, Inc) C:\Users\Leticia\AppData\Local\Temp\GLF6A3C.EXE
2013-04-29 12:18 - 2003-05-02 16:13 - 0151552 _____ () C:\Users\Leticia\AppData\Local\Temp\GLF6C9D.EXE
2013-04-29 12:17 - 2010-06-20 22:42 - 0046456 _____ (Sony Electronics, Inc) C:\Users\Leticia\AppData\Local\Temp\GLFA50A.EXE
2013-04-29 12:17 - 2003-05-02 15:13 - 0151552 _____ () C:\Users\Leticia\AppData\Local\Temp\GLFA97E.EXE
2013-04-29 12:14 - 2010-06-20 23:42 - 0046456 _____ (Sony Electronics, Inc) C:\Users\Leticia\AppData\Local\Temp\GLFB37B.EXE
2013-04-29 12:14 - 2003-05-02 16:13 - 0151552 _____ () C:\Users\Leticia\AppData\Local\Temp\GLFB495.EXE
2013-04-29 12:16 - 2010-06-20 23:42 - 0046456 _____ (Sony Electronics, Inc) C:\Users\Leticia\AppData\Local\Temp\GLFC797.EXE
2013-04-29 12:16 - 2003-05-02 16:13 - 0151552 _____ () C:\Users\Leticia\AppData\Local\Temp\GLFC94D.EXE
2013-04-29 12:13 - 2010-06-20 23:42 - 0046456 _____ (Sony Electronics, Inc) C:\Users\Leticia\AppData\Local\Temp\GLFCCB5.EXE
2013-04-29 12:13 - 2003-05-02 16:13 - 0151552 _____ () C:\Users\Leticia\AppData\Local\Temp\GLFCDB0.EXE
2013-04-29 12:16 - 2010-06-20 23:42 - 0046456 _____ (Sony Electronics, Inc) C:\Users\Leticia\AppData\Local\Temp\GLFEF04.EXE
2013-04-29 12:16 - 2003-05-02 16:13 - 0151552 _____ () C:\Users\Leticia\AppData\Local\Temp\GLFF00F.EXE
2013-04-29 12:13 - 2010-06-20 23:42 - 0046456 _____ (Sony Electronics, Inc) C:\Users\Leticia\AppData\Local\Temp\GLFF626.EXE
2013-04-29 12:13 - 2003-05-02 16:13 - 0151552 _____ () C:\Users\Leticia\AppData\Local\Temp\GLFF720.EXE
2013-04-29 12:17 - 2010-06-20 23:42 - 0046456 _____ (Sony Electronics, Inc) C:\Users\Leticia\AppData\Local\Temp\GLFFEEC.EXE
2013-04-29 12:17 - 2003-05-02 16:13 - 0151552 _____ () C:\Users\Leticia\AppData\Local\Temp\GLFFFE7.EXE
2014-07-14 21:27 - 2014-07-14 21:27 - 0628104 _____ () C:\Users\Leticia\AppData\Local\Temp\ICReinstall_aptuner-308-32-bits.exe
2013-07-02 13:11 - 2013-07-02 13:11 - 0659320 _____ () C:\Users\Leticia\AppData\Local\Temp\ICReinstall_ares-galaxy-224-32-bits(1).exe
2013-06-03 16:49 - 2013-06-03 16:49 - 0774080 _____ () C:\Users\Leticia\AppData\Local\Temp\ICReinstall_CodecPack.exe
2013-06-03 16:46 - 2013-11-25 22:48 - 0636280 _____ () C:\Users\Leticia\AppData\Local\Temp\ICReinstall_grand-theft-auto-san-andreas-patch-101-baixaki-32-bits (1).exe
2013-11-04 16:29 - 2013-11-04 16:29 - 0636280 _____ () C:\Users\Leticia\AppData\Local\Temp\ICReinstall_grand-theft-auto-san-andreas-patch-101-baixaki-32-bits.exe
2014-05-14 17:02 - 2014-05-14 17:02 - 0156061 _____ (Client Connect LTD) C:\Users\Leticia\AppData\Local\Temp\nst241B.exe
2014-05-14 17:02 - 2014-05-14 17:02 - 0156061 _____ (Client Connect LTD) C:\Users\Leticia\AppData\Local\Temp\nsyCE4C.exe
2014-05-22 20:57 - 2014-05-22 20:57 - 6407704 _____ (AVG Technologies) C:\Users\Leticia\AppData\Local\Temp\oi_{FB55B4A0-BB44-43C0-8A56-A23591B473E0}.exe
2014-05-22 20:54 - 2014-05-22 20:54 - 5484016 _____ (Speedchecker Limited ) C:\Users\Leticia\AppData\Local\Temp\pcspeedup.exe
2014-05-17 11:04 - 2014-05-17 11:04 - 1154336 _____ (Price Meter) C:\Users\Leticia\AppData\Local\Temp\pm.exe
2014-05-22 20:54 - 2014-05-22 20:57 - 2940496 _____ () C:\Users\Leticia\AppData\Local\Temp\safeguard.exe
2013-07-03 20:34 - 2013-07-03 20:37 - 0142013 _____ (Symantec Corporation) C:\Users\Leticia\AppData\Local\Temp\SCC.dll
2016-12-20 22:26 - 2011-05-11 08:22 - 0607800 ____R (HP) C:\Users\Leticia\AppData\Local\Temp\siinst.exe
2014-05-17 11:04 - 2014-05-17 11:04 - 0066368 _____ (Conduit) C:\Users\Leticia\AppData\Local\Temp\sp_downloader.exe
2016-12-20 22:26 - 2011-05-04 19:49 - 0270336 ____R (HP) C:\Users\Leticia\AppData\Local\Temp\strings.dll
2013-07-03 20:34 - 2013-05-01 14:30 - 0090624 _____ (RealNetworks, Inc.) C:\Users\Leticia\AppData\Local\Temp\stubhelper.dll
2013-06-10 13:14 - 2013-06-10 13:15 - 0887448 _____ (Babylon Ltd.) C:\Users\Leticia\AppData\Local\Temp\toolbar_2581278.exe
2013-06-10 13:20 - 2013-06-10 13:22 - 0887448 _____ (Babylon Ltd.) C:\Users\Leticia\AppData\Local\Temp\toolbar_2581290.exe
2014-05-18 14:14 - 2013-06-16 05:40 - 0389632 _____ (Babylon Ltd.) C:\Users\Leticia\AppData\Local\Temp\uninst1.exe
2015-06-28 16:34 - 2015-06-29 16:43 - 0000000 _____ () C:\Users\Leticia\AppData\Local\Temp\{479873F2-94F0-4AA4-9EAE-41E9A0EC3742}-GoogleUpdateSetup.exe

==================== Bamital & volsnap ======================

(Não há correção automática para arquivos que não passaram na verificação.)

C:\Windows\system32\winlogon.exe => O arquivo é assinado digitalmente
C:\Windows\system32\wininit.exe => O arquivo é assinado digitalmente
C:\Windows\SysWOW64\wininit.exe => O arquivo é assinado digitalmente
C:\Windows\explorer.exe => O arquivo é assinado digitalmente
C:\Windows\SysWOW64\explorer.exe => O arquivo é assinado digitalmente
C:\Windows\system32\svchost.exe => O arquivo é assinado digitalmente
C:\Windows\SysWOW64\svchost.exe => O arquivo é assinado digitalmente
C:\Windows\system32\services.exe => O arquivo é assinado digitalmente
C:\Windows\system32\User32.dll => O arquivo é assinado digitalmente
C:\Windows\SysWOW64\User32.dll => O arquivo é assinado digitalmente
C:\Windows\system32\userinit.exe => O arquivo é assinado digitalmente
C:\Windows\SysWOW64\userinit.exe => O arquivo é assinado digitalmente
C:\Windows\system32\rpcss.dll => O arquivo é assinado digitalmente
C:\Windows\system32\dnsapi.dll => O arquivo é assinado digitalmente
C:\Windows\SysWOW64\dnsapi.dll => O arquivo é assinado digitalmente
C:\Windows\system32\Drivers\volsnap.sys => O arquivo é assinado digitalmente

LastRegBack: 2017-02-22 11:18

==================== Fim de FRST.txt ============================