Publicité
Publicité
Format du document : text/plain
Prévisualisation
Resultado do exame da Farbar Recovery Scan Tool (FRST) (x64) Versão: 05-03-2017
Executado por atendimento (administrador) em LAIS-PC (08-03-2017 09:14:13)
Executando a partir de C:\Users\atendimento\Desktop\frst
Perfis Carregados: atendimento (Perfis Disponíveis: atendimento)
Platform: Windows 7 Professional (X64) Idioma: Português (Brasil)
Internet Explorer Versão 8 (Navegador padrão: Chrome)
Modo da Inicialização: Normal
Tutorial da Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Processos (Whitelisted) =================
(Se uma entrada for incluída na fixlist, o processo será fechado. O arquivo não será movido.)
(GAS Tecnologia) C:\Program Files (x86)\GbPlugin\gbpsv.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Firebird Project) C:\Program Files (x86)\Firebird\Firebird_2_5\bin\fb_inet_server.exe
(Intel Corporation) C:\Windows\System32\IPROSetMonitor.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Microsoft) C:\Program Files\Softland\novaPDF 8\Server\novapdfs.exe
() C:\Program Files (x86)\WeatherTool\2.0.1.11073\WeatherService.exe
(GAS Tecnologia LTDA) C:\Program Files\Diebold\Warsaw\core.exe
(ShenZhen Enode Techology co,.Ltd) C:\Program Files (x86)\WeatherTool\2.0.1.11073\weather.exe
(GAS Tecnologia) C:\Program Files (x86)\GbPlugin\gbpsv.exe
(GAS Tecnologia LTDA) C:\Program Files\Diebold\Warsaw\core.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Hewlett-Packard Co.) C:\Program Files\HP\HP Officejet Pro X476dw MFP\Bin\ScanToPCActivationApp.exe
() C:\Program Files (x86)\Zoiper\Zoiper.exe
() C:\Program Files (x86)\BraZipCentral\BraZipCentral.exe
(Dropbox, Inc.) C:\Users\atendimento\AppData\Roaming\Dropbox\bin\Dropbox.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\avastui.exe
(Hewlett-Packard) C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
() C:\PRECISA\Centrun\Centrun.exe
(Microsoft Corporation) C:\Windows\SysWOW64\dllhost.exe
(DEVGURU Co., LTD.) C:\Program Files (x86)\Samsung\USB Drivers\27_ssconn\conn\ss_conn_service.exe
(Samsung Electronics Co., Ltd.) C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe
(Samsung Electronics Co., Ltd.) C:\Users\atendimento\Desktop\ROM + Odin S5360B\Odin\Odin3 v1.85.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
() C:\PRECISA\SOLUTION\Solution.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\splwow64.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\System32\cmd.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Hewlett-Packard Co.) C:\Program Files\HP\HP Officejet Pro X476dw MFP\Bin\HPNetworkCommunicatorCom.exe
==================== Registro (Whitelisted) ====================
(Se uma entrada for incluída na fixlist, o ítem no Registro será restaurado para o padrão ou removido. O arquivo não será movido.)
HKLM\...\Run: [Diebold - Warsaw] => C:\Program Files\Diebold\Warsaw\core.exe [927280 2016-11-11] (GAS Tecnologia LTDA)
HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [9080768 2016-11-15] (AVAST Software)
HKLM-x32\...\Run: [HP Software Update] => C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe [96056 2013-05-30] (Hewlett-Packard)
HKLM-x32\...\Run: [] => [X]
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [587288 2016-12-12] (Oracle Corporation)
HKLM-x32\...\Run: [KiesTrayAgent] => C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe [318128 2016-11-16] (Samsung Electronics Co., Ltd.)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
Winlogon\Notify\ GbPluginBb: C:\PROGRAM FILES (X86)\GBPLUGIN\gbieh.dll [2016-09-29] (Banco do Brasil)
Winlogon\Notify\ GbPluginCef: C:\Program Files (x86)\GbPlugin\gbiehCef.dll [2015-09-22] (Caixa Economica Federal)
HKU\S-1-5-21-417772167-308150910-200703222-1000\...\Run: [Dropbox Update] => C:\Users\atendimento\AppData\Local\Dropbox\Update\DropboxUpdate.exe [143144 2016-11-07] (Dropbox, Inc.)
HKU\S-1-5-21-417772167-308150910-200703222-1000\...\Run: [HP Officejet Pro X476dw MFP (NET)] => C:\Program Files\HP\HP Officejet Pro X476dw MFP\Bin\ScanToPCActivationApp.exe [3487240 2014-03-06] (Hewlett-Packard Co.)
HKU\S-1-5-21-417772167-308150910-200703222-1000\...\Run: [Zoiper] => C:\Program Files (x86)\Zoiper\Zoiper.exe [12548624 2015-07-14] ()
HKU\S-1-5-21-417772167-308150910-200703222-1000\...\Run: [Chromium] => c:\users\atendimento\appdata\local\chromium\application\chrome.exe [1068544 2016-03-18] (The Chromium Authors)
HKU\S-1-5-21-417772167-308150910-200703222-1000\...\Run: [KiesPDLR.exe] => C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe [1023664 2016-11-16] (Samsung)
HKU\S-1-5-21-417772167-308150910-200703222-1000\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [27545056 2017-02-14] (Skype Technologies S.A.)
HKU\S-1-5-21-417772167-308150910-200703222-1000\...\Run: [SideSync] => C:\Program Files (x86)\Samsung\SideSync4\SideSync.exe [11278512 2016-06-24] ()
HKU\S-1-5-21-417772167-308150910-200703222-1000\...\MountPoints2: {289d63e5-2740-11e6-8451-e06995881c34} - E:\LGAutoRun.exe
HKU\S-1-5-21-417772167-308150910-200703222-1000\...\MountPoints2: {b2340906-c0c8-11e4-9c99-e06995881c34} - E:\start.exe
HKU\S-1-5-21-417772167-308150910-200703222-1000\...\MountPoints2: {d5d0a92f-d650-11e6-a67c-005056c00008} - E:\Auto.exe
ShellExecuteHooks-x32: GbPluginObj Class - {E37CB5F0-51F5-4395-A808-5FA49E399003} - C:\Program Files (x86)\GbPlugin\gbiehcef.dll [1888480 2015-09-22] (Caixa Economica Federal)
ShellExecuteHooks-x32: GbPluginObj Class - {E37CB5F0-51F5-4395-A808-5FA49E399F83} - C:\PROGRAM FILES (X86)\GbPlugin\gbieh.dll [1947872 2016-09-29] (Banco do Brasil)
ShellIconOverlayIdentifiers: [ DropboxExt01] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\atendimento\AppData\Roaming\Dropbox\bin\DropboxExt64.14.0.dll [2017-02-21] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt02] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\atendimento\AppData\Roaming\Dropbox\bin\DropboxExt64.14.0.dll [2017-02-21] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt03] -> {FB314EE1-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\atendimento\AppData\Roaming\Dropbox\bin\DropboxExt64.14.0.dll [2017-02-21] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt04] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\atendimento\AppData\Roaming\Dropbox\bin\DropboxExt64.14.0.dll [2017-02-21] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt05] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\atendimento\AppData\Roaming\Dropbox\bin\DropboxExt64.14.0.dll [2017-02-21] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt06] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\atendimento\AppData\Roaming\Dropbox\bin\DropboxExt64.14.0.dll [2017-02-21] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt07] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\atendimento\AppData\Roaming\Dropbox\bin\DropboxExt64.14.0.dll [2017-02-21] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt08] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\atendimento\AppData\Roaming\Dropbox\bin\DropboxExt64.14.0.dll [2017-02-21] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt09] -> {FB314EE2-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\atendimento\AppData\Roaming\Dropbox\bin\DropboxExt64.14.0.dll [2017-02-21] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt10] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\atendimento\AppData\Roaming\Dropbox\bin\DropboxExt64.14.0.dll [2017-02-21] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2016-09-09] (AVAST Software)
ShellIconOverlayIdentifiers-x32: [ DropboxExt01] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\atendimento\AppData\Roaming\Dropbox\bin\DropboxExt.14.0.dll [2017-02-21] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt02] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\atendimento\AppData\Roaming\Dropbox\bin\DropboxExt.14.0.dll [2017-02-21] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt03] -> {FB314EE1-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\atendimento\AppData\Roaming\Dropbox\bin\DropboxExt.14.0.dll [2017-02-21] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt04] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\atendimento\AppData\Roaming\Dropbox\bin\DropboxExt.14.0.dll [2017-02-21] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt05] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\atendimento\AppData\Roaming\Dropbox\bin\DropboxExt.14.0.dll [2017-02-21] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt06] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\atendimento\AppData\Roaming\Dropbox\bin\DropboxExt.14.0.dll [2017-02-21] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt07] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\atendimento\AppData\Roaming\Dropbox\bin\DropboxExt.14.0.dll [2017-02-21] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt08] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\atendimento\AppData\Roaming\Dropbox\bin\DropboxExt.14.0.dll [2017-02-21] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt09] -> {FB314EE2-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\atendimento\AppData\Roaming\Dropbox\bin\DropboxExt.14.0.dll [2017-02-21] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt10] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\atendimento\AppData\Roaming\Dropbox\bin\DropboxExt.14.0.dll [2017-02-21] (Dropbox, Inc.)
Startup: C:\Users\atendimento\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\BraZipCentral.lnk [2015-06-17]
ShortcutTarget: BraZipCentral.lnk -> C:\Program Files (x86)\BraZipCentral\BraZipCentral.exe ()
Startup: C:\Users\atendimento\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk [2017-02-27]
ShortcutTarget: Dropbox.lnk -> C:\Users\atendimento\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
GroupPolicy: Restrição <======= ATENÇÃO
GroupPolicyScripts: Restrição <======= ATENÇÃO
CHR HKLM\SOFTWARE\Policies\Google: Restrição <======= ATENÇÃO
==================== Internet (Whitelisted) ====================
(Se um ítem for incluído na fixlist, sendo um ítem do Registro, será removido ou restaurado para o padrão.)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.50 8.8.8.8
Tcpip\..\Interfaces\{33C7FBAD-56DE-4469-A814-66512EBC9C79}: [DhcpNameServer] 192.168.1.50 8.8.8.8
Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxps://br.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wncy_adsafld_16_24¶m1=1¶m2=f%3D1%26b%3DIE%26cc%3Dbr%26pa%3DWincy%26cd%3D2XzuyEtN2Y1L1Qzu0EtDyCzyzyyDzzzztC0CtAyEtA0FtAzytN0D0Tzu0StCyCtByBtN1L2XzutAtFtBtBtFtAtFzztN1L1Czu1ByEtN1L1G1B1V1N2Y1L1Qzu2StAyBtB0DtA0Azy0CtGtCtC0AzytGtCyB0DtCtGtCyC0A0CtGzyzytAtByDtC0FyDyEzy0F0E2QtN1M1F1B2Z1V1N2Y1L1Qzu2Szyzzzz0FtAzzyEtDtG0C0DzytDtGyE0A0D0CtG0ByDzzzztGyCyC0D0Bzy0FtD0ByBzy0B0D2QtN0A0LzuyE%26cr%3D2035820834%26a%3Dwncy_adsafld_16_24%26os_ver%3D6.1%26os%3DWindows%2B7%2BProfessional
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxps://br.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wncy_adsafld_16_24¶m1=1¶m2=f%3D1%26b%3DIE%26cc%3Dbr%26pa%3DWincy%26cd%3D2XzuyEtN2Y1L1Qzu0EtDyCzyzyyDzzzztC0CtAyEtA0FtAzytN0D0Tzu0StCyCtByBtN1L2XzutAtFtBtBtFtAtFzztN1L1Czu1ByEtN1L1G1B1V1N2Y1L1Qzu2StAyBtB0DtA0Azy0CtGtCtC0AzytGtCyB0DtCtGtCyC0A0CtGzyzytAtByDtC0FyDyEzy0F0E2QtN1M1F1B2Z1V1N2Y1L1Qzu2Szyzzzz0FtAzzyEtDtG0C0DzytDtGyE0A0D0CtG0ByDzzzztGyCyC0D0Bzy0FtD0ByBzy0B0D2QtN0A0LzuyE%26cr%3D2035820834%26a%3Dwncy_adsafld_16_24%26os_ver%3D6.1%26os%3DWindows%2B7%2BProfessional
HKU\S-1-5-21-417772167-308150910-200703222-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxps://br.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wncy_adsafld_16_24¶m1=1¶m2=f%3D1%26b%3DIE%26cc%3Dbr%26pa%3DWincy%26cd%3D2XzuyEtN2Y1L1Qzu0EtDyCzyzyyDzzzztC0CtAyEtA0FtAzytN0D0Tzu0StCyCtByBtN1L2XzutAtFtBtBtFtAtFzztN1L1Czu1ByEtN1L1G1B1V1N2Y1L1Qzu2StAyBtB0DtA0Azy0CtGtCtC0AzytGtCyB0DtCtGtCyC0A0CtGzyzytAtByDtC0FyDyEzy0F0E2QtN1M1F1B2Z1V1N2Y1L1Qzu2Szyzzzz0FtAzzyEtDtG0C0DzytDtGyE0A0D0CtG0ByDzzzztGyCyC0D0Bzy0FtD0ByBzy0B0D2QtN0A0LzuyE%26cr%3D2035820834%26a%3Dwncy_adsafld_16_24%26os_ver%3D6.1%26os%3DWindows%2B7%2BProfessional
HKU\S-1-5-21-417772167-308150910-200703222-1000\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://www.msn.com/pt-br/?ocid=iehp
SearchScopes: HKLM -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxps://br.search.yahoo.com/yhs/search?hspart=iry&hsimp=yhs-fullyhosted_003&type=wncy_adsafld_16_24¶m1=1¶m2=f%3D4%26b%3DIE%26cc%3Dbr%26pa%3DWincy%26cd%3D2XzuyEtN2Y1L1Qzu0EtDyCzyzyyDzzzztC0CtAyEtA0FtAzytN0D0Tzu0StCyCtByBtN1L2XzutAtFtBtBtFtAtFzztN1L1Czu1ByEtN1L1G1B1V1N2Y1L1Qzu2StAyBtB0DtA0Azy0CtGtCtC0AzytGtCyB0DtCtGtCyC0A0CtGzyzytAtByDtC0FyDyEzy0F0E2QtN1M1F1B2Z1V1N2Y1L1Qzu2Szyzzzz0FtAzzyEtDtG0C0DzytDtGyE0A0D0CtG0ByDzzzztGyCyC0D0Bzy0FtD0ByBzy0B0D2QtN0A0LzuyE%26cr%3D2035820834%26a%3Dwncy_adsafld_16_24%26os_ver%3D6.1%26os%3DWindows%2B7%2BProfessional&p={searchTerms}
SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxps://br.search.yahoo.com/yhs/search?hspart=iry&hsimp=yhs-fullyhosted_003&type=wncy_adsafld_16_24¶m1=1¶m2=f%3D4%26b%3DIE%26cc%3Dbr%26pa%3DWincy%26cd%3D2XzuyEtN2Y1L1Qzu0EtDyCzyzyyDzzzztC0CtAyEtA0FtAzytN0D0Tzu0StCyCtByBtN1L2XzutAtFtBtBtFtAtFzztN1L1Czu1ByEtN1L1G1B1V1N2Y1L1Qzu2StAyBtB0DtA0Azy0CtGtCtC0AzytGtCyB0DtCtGtCyC0A0CtGzyzytAtByDtC0FyDyEzy0F0E2QtN1M1F1B2Z1V1N2Y1L1Qzu2Szyzzzz0FtAzzyEtDtG0C0DzytDtGyE0A0D0CtG0ByDzzzztGyCyC0D0Bzy0FtD0ByBzy0B0D2QtN0A0LzuyE%26cr%3D2035820834%26a%3Dwncy_adsafld_16_24%26os_ver%3D6.1%26os%3DWindows%2B7%2BProfessional&p={searchTerms}
SearchScopes: HKLM-x32 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxps://br.search.yahoo.com/yhs/search?hspart=iry&hsimp=yhs-fullyhosted_003&type=wncy_adsafld_16_24¶m1=1¶m2=f%3D4%26b%3DIE%26cc%3Dbr%26pa%3DWincy%26cd%3D2XzuyEtN2Y1L1Qzu0EtDyCzyzyyDzzzztC0CtAyEtA0FtAzytN0D0Tzu0StCyCtByBtN1L2XzutAtFtBtBtFtAtFzztN1L1Czu1ByEtN1L1G1B1V1N2Y1L1Qzu2StAyBtB0DtA0Azy0CtGtCtC0AzytGtCyB0DtCtGtCyC0A0CtGzyzytAtByDtC0FyDyEzy0F0E2QtN1M1F1B2Z1V1N2Y1L1Qzu2Szyzzzz0FtAzzyEtDtG0C0DzytDtGyE0A0D0CtG0ByDzzzztGyCyC0D0Bzy0FtD0ByBzy0B0D2QtN0A0LzuyE%26cr%3D2035820834%26a%3Dwncy_adsafld_16_24%26os_ver%3D6.1%26os%3DWindows%2B7%2BProfessional&p={searchTerms}
SearchScopes: HKLM-x32 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxps://br.search.yahoo.com/yhs/search?hspart=iry&hsimp=yhs-fullyhosted_003&type=wncy_adsafld_16_24¶m1=1¶m2=f%3D4%26b%3DIE%26cc%3Dbr%26pa%3DWincy%26cd%3D2XzuyEtN2Y1L1Qzu0EtDyCzyzyyDzzzztC0CtAyEtA0FtAzytN0D0Tzu0StCyCtByBtN1L2XzutAtFtBtBtFtAtFzztN1L1Czu1ByEtN1L1G1B1V1N2Y1L1Qzu2StAyBtB0DtA0Azy0CtGtCtC0AzytGtCyB0DtCtGtCyC0A0CtGzyzytAtByDtC0FyDyEzy0F0E2QtN1M1F1B2Z1V1N2Y1L1Qzu2Szyzzzz0FtAzzyEtDtG0C0DzytDtGyE0A0D0CtG0ByDzzzztGyCyC0D0Bzy0FtD0ByBzy0B0D2QtN0A0LzuyE%26cr%3D2035820834%26a%3Dwncy_adsafld_16_24%26os_ver%3D6.1%26os%3DWindows%2B7%2BProfessional&p={searchTerms}
SearchScopes: HKU\S-1-5-21-417772167-308150910-200703222-1000 -> DefaultScope {95B7759C-8C7F-4BF1-B163-73684A933233} URL = hxxps://br.search.yahoo.com/yhs/search?hspart=iry&hsimp=yhs-fullyhosted_003&type=wncy_adsafld_16_24¶m1=1¶m2=f%3D4%26b%3DIE%26cc%3Dbr%26pa%3DWincy%26cd%3D2XzuyEtN2Y1L1Qzu0EtDyCzyzyyDzzzztC0CtAyEtA0FtAzytN0D0Tzu0StCyCtByBtN1L2XzutAtFtBtBtFtAtFzztN1L1Czu1ByEtN1L1G1B1V1N2Y1L1Qzu2StAyBtB0DtA0Azy0CtGtCtC0AzytGtCyB0DtCtGtCyC0A0CtGzyzytAtByDtC0FyDyEzy0F0E2QtN1M1F1B2Z1V1N2Y1L1Qzu2Szyzzzz0FtAzzyEtDtG0C0DzytDtGyE0A0D0CtG0ByDzzzztGyCyC0D0Bzy0FtD0ByBzy0B0D2QtN0A0LzuyE%26cr%3D2035820834%26a%3Dwncy_adsafld_16_24%26os_ver%3D6.1%26os%3DWindows%2B7%2BProfessional&p={searchTerms}
SearchScopes: HKU\S-1-5-21-417772167-308150910-200703222-1000 -> {2f23ab71-4ac6-41f2-a955-ea576e553146} URL = hxxps://mysearch.avg.com/search?cid={638DBB5E-D182-407C-A4F3-6665079F76CB}&mid=0209458aef4d47cd9afc3120d36cf5c7-22edf4a915fcd0eb8f64700989ba5e4b87a95ed3&lang=pt-br&ds=AVG&coid=avgtbavg&cmpid=0316tb&pr=fr&d=2015-02-20 16:44:59&v=4.2.8.608&pid=wtu&sg=&sap=dsp&q={searchTerms}
SearchScopes: HKU\S-1-5-21-417772167-308150910-200703222-1000 -> {95B7759C-8C7F-4BF1-B163-73684A933233} URL = hxxps://br.search.yahoo.com/yhs/search?hspart=iry&hsimp=yhs-fullyhosted_003&type=wncy_adsafld_16_24¶m1=1¶m2=f%3D4%26b%3DIE%26cc%3Dbr%26pa%3DWincy%26cd%3D2XzuyEtN2Y1L1Qzu0EtDyCzyzyyDzzzztC0CtAyEtA0FtAzytN0D0Tzu0StCyCtByBtN1L2XzutAtFtBtBtFtAtFzztN1L1Czu1ByEtN1L1G1B1V1N2Y1L1Qzu2StAyBtB0DtA0Azy0CtGtCtC0AzytGtCyB0DtCtGtCyC0A0CtGzyzytAtByDtC0FyDyEzy0F0E2QtN1M1F1B2Z1V1N2Y1L1Qzu2Szyzzzz0FtAzzyEtDtG0C0DzytDtGyE0A0D0CtG0ByDzzzztGyCyC0D0Bzy0FtD0ByBzy0B0D2QtN0A0LzuyE%26cr%3D2035820834%26a%3Dwncy_adsafld_16_24%26os_ver%3D6.1%26os%3DWindows%2B7%2BProfessional&p={searchTerms}
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_121\bin\ssv.dll [2017-02-01] (Oracle Corporation)
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2016-10-24] (AVAST Software)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_121\bin\jp2ssv.dll [2017-02-01] (Oracle Corporation)
BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2016-10-24] (AVAST Software)
BHO-x32: Sem Nome -> {95B7759C-8C7F-4BF1-B163-73684A933233} -> Nenhum Arquivo
BHO-x32: GbIehObj Class -> {C41A1C0E-EA6C-11D4-B1B8-444553540000} -> C:\PROGRAM FILES (X86)\GBPLUGIN\gbieh.dll [2016-09-29] (Banco do Brasil)
BHO-x32: GbIehObj Class -> {C41A1C0E-EA6C-11D4-B1B8-444553540003} -> C:\Program Files (x86)\GbPlugin\gbiehcef.dll [2015-09-22] (Caixa Economica Federal)
Filter: deflate - {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\Windows\system32\urlmon.dll [2010-12-21] (Microsoft Corporation)
Filter-x32: deflate - {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\Windows\SysWOW64\urlmon.dll [2010-12-21] (Microsoft Corporation)
Filter: gzip - {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\Windows\system32\urlmon.dll [2010-12-21] (Microsoft Corporation)
Filter-x32: gzip - {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\Windows\SysWOW64\urlmon.dll [2010-12-21] (Microsoft Corporation)
StartMenuInternet: IEXPLORE.EXE - iexplore.exe
FireFox:
========
FF DefaultProfile: efqyvk4b.default
FF ProfilePath: C:\Users\atendimento\AppData\Roaming\Mozilla\Firefox\Profiles\efqyvk4b.default [2017-03-08]
FF NewTab: Mozilla\Firefox\Profiles\efqyvk4b.default -> about:newtab
FF DefaultSearchEngine: Mozilla\Firefox\Profiles\efqyvk4b.default -> Yahoo! Powered
FF SelectedSearchEngine: Mozilla\Firefox\Profiles\efqyvk4b.default -> Yahoo! Powered
FF Homepage: Mozilla\Firefox\Profiles\efqyvk4b.default -> hxxp://www.google.com.br/
FF Keyword.URL: Mozilla\Firefox\Profiles\efqyvk4b.default -> user_pref("keyword.URL", true);
FF Extension: (Video DownloadHelper) - C:\Users\atendimento\AppData\Roaming\Mozilla\Firefox\Profiles\efqyvk4b.default\Extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}.xpi [2016-12-30]
FF Extension: (SHA-1 deprecation staged rollout) - C:\Users\atendimento\AppData\Roaming\Mozilla\Firefox\Profiles\efqyvk4b.default\features\{ebb0175c-f40d-4cf7-b374-9b97e1785299}\disableSHA1rollout@mozilla.org.xpi [2017-03-03]
FF HKLM\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: (Avast Online Security) - C:\Program Files\AVAST Software\Avast\WebRep\FF [2016-09-09]
FF HKLM\...\Firefox\Extensions: [sp@avast.com] - C:\Program Files\AVAST Software\Avast\SafePrice\FF
FF Extension: (Avast SafePrice) - C:\Program Files\AVAST Software\Avast\SafePrice\FF [2016-09-09]
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF HKLM-x32\...\Firefox\Extensions: [sp@avast.com] - C:\Program Files\AVAST Software\Avast\SafePrice\FF
FF Plugin: @java.com/DTPlugin,version=11.121.2 -> C:\Program Files\Java\jre1.8.0_121\bin\dtplugin\npDeployJava1.dll [2017-02-01] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.121.2 -> C:\Program Files\Java\jre1.8.0_121\bin\plugin2\npjp2.dll [2017-02-01] (Oracle Corporation)
FF Plugin-x32: @avg.com/AVG SiteSafety plugin,version=11.0.0.1,application/x-avg-sitesafety-plugin -> C:\Program Files (x86)\Common Files\AVG Secure Search\SiteSafetyInstaller\40.2.9\\npsitesafety.dll [Nenhum Arquivo]
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.32.7\npGoogleUpdate3.dll [2016-12-16] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.32.7\npGoogleUpdate3.dll [2016-12-16] (Google Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2016-12-23] (Adobe Systems Inc.)
Chrome:
=======
CHR DefaultProfile: Default
CHR DefaultSearchURL: Default -> hxxp://srch.bar/{searchTerms}
CHR DefaultSuggestURL: Default -> hxxp://srch.bar/?s={searchTerms}
CHR Profile: C:\Users\atendimento\AppData\Local\Google\Chrome\User Data\Default [2017-03-08]
CHR Extension: (Google Apresentações) - C:\Users\atendimento\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-02-20]
CHR Extension: (Google Docs) - C:\Users\atendimento\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-02-20]
CHR Extension: (Google Drive) - C:\Users\atendimento\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-10-22]
CHR Extension: (YouTube) - C:\Users\atendimento\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-09-26]
CHR Extension: (Google Search) - C:\Users\atendimento\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-10-27]
CHR Extension: (Adobe Acrobat) - C:\Users\atendimento\AppData\Local\Google\Chrome\User Data\Default\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2017-03-06]
CHR Extension: (Avast SafePrice) - C:\Users\atendimento\AppData\Local\Google\Chrome\User Data\Default\Extensions\eofcbnmajmjmplflapaojjnihcjkigck [2016-11-18]
CHR Extension: (Planilhas do Google) - C:\Users\atendimento\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-02-20]
CHR Extension: (Documentos Google off-line) - C:\Users\atendimento\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-03-16]
CHR Extension: (Avast Online Security) - C:\Users\atendimento\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2017-03-06]
CHR Extension: (Pagamentos da Chrome Web Store) - C:\Users\atendimento\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2017-01-24]
CHR Extension: (TeamViewer) - C:\Users\atendimento\AppData\Local\Google\Chrome\User Data\Default\Extensions\oooiobdokpcfdlahlmcddobejikcmkfo [2017-02-09]
CHR Extension: (Gmail) - C:\Users\atendimento\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-03-31]
CHR Extension: (Chrome Media Router) - C:\Users\atendimento\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2017-02-07]
CHR HKLM\...\Chrome\Extension: [pilplloabdedfmialnfchjomjmpjcoej] - hxxps://clients2.google.com/service/update2/crx
CHR HKU\S-1-5-21-417772167-308150910-200703222-1000\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [pilplloabdedfmialnfchjomjmpjcoej] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [eofcbnmajmjmplflapaojjnihcjkigck] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChromeSp.crx [2015-05-21]
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2015-05-21]
CHR HKLM-x32\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [pilplloabdedfmialnfchjomjmpjcoej] - hxxps://clients2.google.com/service/update2/crx
==================== Serviços (Whitelisted) ====================
(Se uma entrada for incluída na fixlist, será removida do Registro. O arquivo não será movido, a menos que seja colocado separadamente.)
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [197128 2016-09-09] (AVAST Software)
R2 FirebirdServerDefaultInstance; C:\Program Files (x86)\Firebird\Firebird_2_5\bin\fb_inet_server.exe [3805184 2014-07-09] (Firebird Project) [Arquivo não assinado]
R2 GbpSv; C:\Program Files (x86)\GbPlugin\gbpsv.exe [631520 2016-09-29] (GAS Tecnologia)
R2 Net Driver HPZ12; C:\Windows\system32\HPZinw12.dll [50688 2013-05-16] (Hewlett-Packard) [Arquivo não assinado]
R2 NovaPdfServer; C:\Program Files\Softland\novaPDF 8\Server\novapdfs.exe [50600 2016-03-03] (Microsoft)
R2 Pml Driver HPZ12; C:\Windows\system32\HPZipm12.dll [66048 2013-05-16] (Hewlett-Packard) [Arquivo não assinado]
R2 ss_conn_service; C:\Program Files (x86)\Samsung\USB Drivers\27_ssconn\conn\ss_conn_service.exe [754784 2016-07-22] (DEVGURU Co., LTD.)
S2 svAvisos; C:\Windows\svAvisos.exe [14180597 2016-06-03] () [Arquivo não assinado]
R2 TheDesktopWeatherService; C:\Program Files (x86)\WeatherTool\2.0.1.11073\WeatherService.exe [152008 2015-11-23] ()
R2 Warsaw Technology; C:\Program Files\Diebold\Warsaw\core.exe [927280 2016-11-11] (GAS Tecnologia LTDA)
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2009-07-13] (Microsoft Corporation)
===================== Drivers (Whitelisted) ======================
(Se uma entrada for incluída na fixlist, será removida do Registro. O arquivo não será movido, a menos que seja colocado separadamente.)
S3 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [37656 2016-09-09] (AVAST Software)
R1 aswKbd; C:\Windows\system32\drivers\aswKbd.sys [37144 2016-09-09] (AVAST Software)
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [108816 2016-09-09] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [103064 2016-09-09] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [74544 2016-09-09] (AVAST Software)
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [969184 2016-09-13] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [513632 2016-09-22] (AVAST Software)
R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [163416 2016-09-09] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [293352 2016-10-13] (AVAST Software)
R3 GBPRCM; C:\Program Files (x86)\GbPlugin\gbprcm64.sys [29912 2015-12-08] (GAS Tecnologia)
R2 Sentinel64; C:\Windows\System32\Drivers\Sentinel64.sys [145448 2008-07-11] (SafeNet, Inc.)
S1 VBoxNetAdp; C:\Windows\System32\DRIVERS\VBoxNetAdp6.sys [121248 2016-08-16] (Oracle Corporation)
R3 Warsaw_PP; C:\Program Files (x86)\GbPlugin\wsftprp64.sys [24792 2015-12-08] (GAS Tecnologia LTDA)
S3 wdm_usb; C:\Windows\System32\DRIVERS\usb2ser.sys [155632 2015-08-06] (MBB)
S1 wsddfac; C:\Windows\System32\drivers\wsddfac.sys [28376 2017-02-08] (GAS Tecnologia)
R1 wsddntf; C:\Windows\System32\DRIVERS\wsddntf.sys [36984 2016-11-11] (GAS Tecnologia)
S1 wsddpp; C:\Windows\system32\drivers\wsddpp.sys [25184 2016-11-11] (GAS Tecnologia)
S3 wsddprm; C:\Windows\system32\drivers\wsddprm.sys [25184 2016-11-11] (GAS Tecnologia)
S3 andnetadb; System32\Drivers\lgandnetadb.sys [X]
S3 AndNetDiag; system32\DRIVERS\lgandnetdiag64.sys [X]
S3 ANDNetModem; system32\DRIVERS\lgandnetmodem64.sys [X]
S3 andnetndis; system32\DRIVERS\lgandnetndis64.sys [X]
S1 gbpddfac; system32\drivers\gbpddfac64.sys [X]
S0 gbpddreg; system32\drivers\gbpddreg64.sys [X]
S3 vmci; \SystemRoot\system32\DRIVERS\vmci.sys [X]
S3 VMnetAdapter; system32\DRIVERS\vmnetadapter.sys [X]
==================== NetSvcs (Whitelisted) ===================
(Se uma entrada for incluída na fixlist, será removida do Registro. O arquivo não será movido, a menos que seja colocado separadamente.)
==================== Um Mês Criados arquivos e pastas ========
(Se uma entrada for incluída na fixlist, o arquivo/pasta será movido.)
2017-03-08 09:12 - 2017-03-08 09:14 - 00000000 ____D C:\Users\atendimento\Desktop\frst
2017-03-08 09:08 - 2017-03-08 09:14 - 00000000 ___DC C:\FRST
2017-03-08 09:07 - 2017-03-08 09:07 - 02423808 _____ (Farbar) C:\Users\atendimento\Downloads\FRST64.exe
2017-03-08 09:04 - 2017-03-08 09:04 - 01034556 _____ C:\Users\atendimento\Downloads\Windows6.1-KB2999226-x64.msu
2017-03-08 08:57 - 2017-03-08 08:58 - 01055456 _____ (Microsoft Corporation) C:\Users\atendimento\Downloads\vbrun60.exe
2017-03-08 08:55 - 2017-03-08 08:53 - 00016224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-runtime-l1-1-0.dll
2017-03-08 08:54 - 2017-03-08 08:53 - 00016224 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-runtime-l1-1-0.dll
2017-03-08 08:53 - 2017-03-08 08:53 - 00016224 _____ (Microsoft Corporation) C:\Users\atendimento\Downloads\api-ms-win-crt-runtime-l1-1-0.dll
2017-03-08 08:03 - 2017-03-07 17:20 - 00000941 _____ C:\Users\atendimento\Desktop\treinamento.txt.bak
2017-03-07 17:20 - 2017-03-08 08:03 - 00001098 _____ C:\Users\atendimento\Desktop\treinamento.txt
2017-03-07 10:24 - 2017-03-07 10:53 - 00008491 _____ C:\Users\atendimento\Desktop\calc st.xlsx
2017-03-07 10:01 - 2011-08-25 01:43 - 00203320 _____ (DEVGURU Co., LTD.(www.devguru.co.kr)) C:\Windows\system32\Drivers\ssudmdm.sys
2017-03-07 10:01 - 2011-08-25 01:43 - 00095544 _____ (DEVGURU Co., LTD.(www.devguru.co.kr)) C:\Windows\system32\Drivers\ssudbus.sys
2017-03-07 09:56 - 2017-03-07 09:59 - 24111736 _____ (SAMSUNG Electronics Co., Ltd.) C:\Users\atendimento\Downloads\samsung_usb_driver_for_mobile_phones (1).exe
2017-03-07 09:45 - 2017-03-07 09:45 - 00000000 ____D C:\Users\atendimento\Documents\samsung
2017-03-07 09:44 - 2017-03-07 09:44 - 00001998 _____ C:\Users\Public\Desktop\Samsung Kies (Lite).lnk
2017-03-07 09:44 - 2017-03-07 09:44 - 00001988 _____ C:\Users\Public\Desktop\Samsung Kies.lnk
2017-03-07 09:36 - 2017-03-07 09:37 - 72022192 _____ (Samsung Electronics) C:\Users\atendimento\Downloads\KiesSetup (1).exe
2017-03-07 09:35 - 2017-03-07 17:19 - 00008992 _____ C:\Users\atendimento\Desktop\tABELA DE CST.xlsx
2017-03-06 11:16 - 2017-03-03 17:44 - 40253586 _____ (Precisa Fabrica de Software ) C:\Users\atendimento\Downloads\Upg Solution 5.0.2.42 Gdb_4813.exe
2017-03-06 11:15 - 2017-03-06 11:16 - 40247819 _____ C:\Users\atendimento\Downloads\Upg Solution 5.0.2.42 Gdb_4813.rar
2017-03-06 08:59 - 2017-03-06 09:01 - 24110600 _____ (SAMSUNG Electronics Co., Ltd.) C:\Users\atendimento\Downloads\samsung_android_usb_driver.exe
2017-03-06 08:24 - 2013-11-26 20:21 - 00000000 ____D C:\Users\atendimento\Desktop\ROM + Odin S5360B
2017-03-06 08:22 - 2017-03-06 08:23 - 122974012 _____ C:\Users\atendimento\Downloads\ROM + Odin S5360B.rar
2017-03-06 08:20 - 2017-03-06 08:21 - 24111736 _____ (SAMSUNG Electronics Co., Ltd.) C:\Users\atendimento\Downloads\samsung_usb_driver_for_mobile_phones.exe
2017-03-06 08:15 - 2016-12-19 14:10 - 01148949 _____ C:\Users\atendimento\Desktop\Odin3_v3.12.3.zip
2017-03-03 08:52 - 2017-03-03 08:51 - 00039025 _____ C:\Users\atendimento\Desktop\41170276639285000177550010007280751377282740.xml
2017-03-03 08:51 - 2017-03-03 08:51 - 00039025 _____ C:\Users\atendimento\Downloads\41170276639285000177550010007280751377282740.xml
2017-03-03 08:37 - 2017-03-03 08:37 - 00000000 ____H C:\Users\atendimento\Documents\Default.rdp
2017-03-02 10:24 - 2010-09-14 03:45 - 00367104 _____ (Microsoft Corporation) C:\Windows\system32\wcncsvc.dll
2017-03-02 10:24 - 2010-09-14 03:07 - 00276992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wcncsvc.dll
2017-03-02 10:10 - 2017-03-02 10:14 - 00000000 ____D C:\Windows\system32\MRT
2017-03-02 10:09 - 2017-03-02 10:09 - 138020592 ____C (Microsoft Corporation) C:\Windows\system32\MRT.exe
2017-03-02 09:46 - 2017-03-02 09:46 - 00000000 ____D C:\Windows\CheckSur
2017-03-02 09:35 - 2009-10-10 00:17 - 00014336 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\sffp_sd.sys
2017-03-02 09:05 - 2017-03-02 09:05 - 38117145 _____ (Precisa Fabrica de Software ) C:\Users\atendimento\Downloads\Upg Solution 4.0.16.49 Gdb_4220.exe
2017-03-02 08:50 - 2011-01-26 03:53 - 00982912 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys
2017-03-02 08:50 - 2011-01-26 03:31 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\cdd.dll
2017-03-02 08:50 - 2010-12-21 03:16 - 01197056 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2017-03-02 08:50 - 2010-12-21 03:16 - 00442880 _____ (Microsoft Corporation) C:\Windows\system32\winhttp.dll
2017-03-02 08:50 - 2010-12-21 03:16 - 00258048 _____ (Microsoft Corporation) C:\Windows\system32\WebClnt.dll
2017-03-02 08:50 - 2010-12-21 03:16 - 00097280 _____ (Microsoft Corporation) C:\Windows\system32\wscsvc.dll
2017-03-02 08:50 - 2010-12-21 03:16 - 00062976 _____ (Microsoft Corporation) C:\Windows\system32\wscapi.dll
2017-03-02 08:50 - 2010-12-21 03:15 - 01498112 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2017-03-02 08:50 - 2010-12-21 03:15 - 00264192 _____ (Microsoft Corporation) C:\Windows\system32\upnp.dll
2017-03-02 08:50 - 2010-12-21 03:15 - 00015360 _____ (Microsoft Corporation) C:\Windows\system32\slwga.dll
2017-03-02 08:50 - 2010-12-21 03:13 - 02003968 _____ (Microsoft Corporation) C:\Windows\system32\msxml6.dll
2017-03-02 08:50 - 2010-12-21 03:13 - 01880576 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
2017-03-02 08:50 - 2010-12-21 03:11 - 12369408 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2017-03-02 08:50 - 2010-12-21 03:10 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\davclnt.dll
2017-03-02 08:50 - 2010-12-21 02:38 - 01228288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2017-03-02 08:50 - 2010-12-21 02:38 - 00981504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2017-03-02 08:50 - 2010-12-21 02:38 - 00350720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winhttp.dll
2017-03-02 08:50 - 2010-12-21 02:38 - 00204800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WebClnt.dll
2017-03-02 08:50 - 2010-12-21 02:38 - 00204288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\upnp.dll
2017-03-02 08:50 - 2010-12-21 02:38 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wscapi.dll
2017-03-02 08:50 - 2010-12-21 02:38 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\slwga.dll
2017-03-02 08:50 - 2010-12-21 02:36 - 01389568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml6.dll
2017-03-02 08:50 - 2010-12-21 02:36 - 01236992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll
2017-03-02 08:50 - 2010-12-21 02:35 - 10989056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2017-03-02 08:50 - 2010-12-21 02:34 - 00080384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\davclnt.dll
2017-03-02 08:50 - 2010-11-04 03:31 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2017-03-02 08:50 - 2010-11-04 03:31 - 00064512 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2017-03-02 08:50 - 2010-11-04 02:48 - 00176640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2017-03-02 08:50 - 2010-11-04 02:48 - 00048128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2017-03-02 08:50 - 2010-11-02 02:18 - 00662528 _____ (Microsoft Corporation) C:\Windows\system32\XpsPrint.dll
2017-03-02 08:50 - 2010-11-02 02:18 - 00470016 _____ (Microsoft Corporation) C:\Windows\system32\XpsGdiConverter.dll
2017-03-02 08:50 - 2010-11-02 02:12 - 01837568 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll
2017-03-02 08:50 - 2010-11-02 02:12 - 01540608 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll
2017-03-02 08:50 - 2010-11-02 02:12 - 01133568 _____ (Microsoft Corporation) C:\Windows\system32\FntCache.dll
2017-03-02 08:50 - 2010-11-02 02:12 - 00902656 _____ (Microsoft Corporation) C:\Windows\system32\d2d1.dll
2017-03-02 08:50 - 2010-11-02 02:12 - 00320512 _____ (Microsoft Corporation) C:\Windows\system32\d3d10_1core.dll
2017-03-02 08:50 - 2010-11-02 01:41 - 00442880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XpsPrint.dll
2017-03-02 08:50 - 2010-11-02 01:41 - 00283648 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XpsGdiConverter.dll
2017-03-02 08:50 - 2010-11-02 01:35 - 01170944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10warp.dll
2017-03-02 08:50 - 2010-11-02 01:35 - 01074176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll
2017-03-02 08:50 - 2010-11-02 01:35 - 00739840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d2d1.dll
2017-03-02 08:50 - 2010-11-02 01:35 - 00218624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10_1core.dll
2017-03-02 08:50 - 2010-06-26 02:31 - 01863680 _____ (Microsoft Corporation) C:\Windows\system32\ExplorerFrame.dll
2017-03-02 08:50 - 2010-06-26 02:14 - 01495040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ExplorerFrame.dll
2017-03-02 08:50 - 2010-05-23 07:15 - 01619456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMVDECOD.DLL
2017-03-02 08:50 - 2010-05-23 07:11 - 03181568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mf.dll
2017-03-02 08:50 - 2010-05-23 07:11 - 00196608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfreadwrite.dll
2017-03-02 08:50 - 2010-05-23 05:37 - 01888256 _____ (Microsoft Corporation) C:\Windows\system32\WMVDECOD.DLL
2017-03-02 08:50 - 2010-05-23 05:35 - 04068864 _____ (Microsoft Corporation) C:\Windows\system32\mf.dll
2017-03-02 08:50 - 2010-05-23 05:35 - 00257024 _____ (Microsoft Corporation) C:\Windows\system32\mfreadwrite.dll
2017-03-02 08:50 - 2010-03-04 01:32 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ks.sys
2017-03-02 08:49 - 2015-03-19 00:07 - 05503416 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2017-03-02 08:49 - 2015-03-18 23:57 - 03963320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2017-03-02 08:49 - 2015-03-18 23:57 - 03908024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2017-03-02 08:49 - 2014-09-14 21:44 - 03195392 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2017-03-02 08:49 - 2013-03-19 02:54 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll
2017-03-02 08:49 - 2013-03-19 01:53 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll
2017-03-02 08:49 - 2013-03-19 00:19 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe
2017-03-02 08:49 - 2012-09-06 14:38 - 00295792 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\volsnap.sys
2017-03-02 08:49 - 2011-08-30 02:21 - 14164480 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2017-03-02 08:49 - 2011-08-30 01:28 - 12868096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2017-03-02 08:49 - 2011-04-09 03:58 - 00142336 _____ (Microsoft Corporation) C:\Windows\system32\poqexec.exe
2017-03-02 08:49 - 2011-04-09 02:56 - 00123904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\poqexec.exe
2017-03-02 08:49 - 2011-01-26 03:53 - 00265088 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgmms1.sys
2017-03-02 08:49 - 2010-11-02 02:18 - 00229888 _____ (Microsoft Corporation) C:\Windows\system32\XpsRasterService.dll
2017-03-02 08:49 - 2010-11-02 02:12 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\d3d10_1.dll
2017-03-02 08:49 - 2010-11-02 01:41 - 00135168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XpsRasterService.dll
2017-03-02 08:49 - 2010-11-02 01:35 - 00161792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10_1.dll
2017-03-02 08:49 - 2010-05-23 05:35 - 00206848 _____ (Microsoft Corporation) C:\Windows\system32\mfps.dll
2017-03-02 08:49 - 2010-03-24 03:59 - 01736608 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2017-03-02 08:49 - 2010-03-24 03:37 - 01289528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2017-03-02 08:49 - 2010-01-19 06:05 - 00424960 _____ (Microsoft Corporation) C:\Windows\system32\secproc.dll
2017-03-02 08:49 - 2010-01-19 06:05 - 00422912 _____ (Microsoft Corporation) C:\Windows\system32\secproc_isv.dll
2017-03-02 08:49 - 2010-01-19 06:05 - 00121856 _____ (Microsoft Corporation) C:\Windows\system32\secproc_ssp_isv.dll
2017-03-02 08:49 - 2010-01-19 06:05 - 00121856 _____ (Microsoft Corporation) C:\Windows\system32\secproc_ssp.dll
2017-03-02 08:49 - 2010-01-19 06:00 - 00357888 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_isv.exe
2017-03-02 08:49 - 2010-01-19 06:00 - 00356352 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate.exe
2017-03-02 08:49 - 2010-01-19 06:00 - 00306688 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_ssp.exe
2017-03-02 08:49 - 2010-01-19 06:00 - 00305152 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_ssp_isv.exe
2017-03-02 08:49 - 2010-01-18 20:29 - 00369152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc.dll
2017-03-02 08:49 - 2010-01-18 20:29 - 00365568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_isv.dll
2017-03-02 08:49 - 2010-01-18 20:29 - 00085504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_ssp_isv.dll
2017-03-02 08:49 - 2010-01-18 20:29 - 00085504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_ssp.dll
2017-03-02 08:49 - 2010-01-18 20:28 - 00324608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_isv.exe
2017-03-02 08:49 - 2010-01-18 20:28 - 00320512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate.exe
2017-03-02 08:49 - 2010-01-18 20:28 - 00280064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_ssp.exe
2017-03-02 08:49 - 2010-01-18 20:28 - 00277504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_ssp_isv.exe
2017-03-02 08:49 - 2009-10-31 03:34 - 02870272 _____ (Microsoft Corporation) C:\Windows\explorer.exe
2017-03-02 08:49 - 2009-10-31 02:45 - 02614272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\explorer.exe
2017-03-02 08:49 - 2009-10-28 03:24 - 00389632 _____ (Microsoft Corporation) C:\Windows\system32\winlogon.exe
2017-03-02 08:46 - 2016-06-25 13:03 - 00304128 _____ (Microsoft Corporation) C:\Windows\system32\EOSNotify.exe
2017-03-02 08:22 - 2017-03-02 08:22 - 14749120 _____ (Microsoft Corporation) C:\Users\atendimento\Downloads\vc_redist.x64.exe
2017-03-01 17:20 - 2017-03-01 17:20 - 00000000 ___RD C:\Program Files (x86)\Skype
2017-03-01 17:20 - 2017-03-01 17:20 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
2017-02-27 16:55 - 2017-02-27 16:55 - 00000000 ____D C:\Users\atendimento\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox
2017-02-25 08:09 - 2017-02-25 08:09 - 00000000 ____H C:\Windows\system32\Drivers\Msft_User_WUDFUsbccidDriver_01_09_00.Wdf
2017-02-25 08:04 - 2017-02-25 08:04 - 00000000 ____D C:\Users\atendimento\Desktop\Windows 7(x64)
2017-02-24 14:33 - 2017-02-24 14:33 - 31087975 _____ C:\Users\atendimento\Downloads\Upg Truck 5.0.2.8 Gdb_4752.rar
2017-02-24 14:33 - 2017-02-24 14:33 - 31087975 _____ C:\Users\atendimento\Desktop\Upg Truck 5.0.2.8 Gdb_4752.rar
2017-02-24 14:33 - 2017-02-20 17:12 - 31117222 _____ (Precisa Fabrica de Software ) C:\Users\atendimento\Desktop\Upg Truck 5.0.2.8 Gdb_4752.exe
2017-02-21 15:59 - 2017-02-21 15:59 - 00005378 _____ C:\Users\atendimento\Downloads\bARs2POB6GE&feature
2017-02-21 10:08 - 2017-02-21 10:07 - 00000144 _____ C:\Users\atendimento\Desktop\ATIVACAO FARAO.ATV
2017-02-20 08:56 - 2017-02-20 08:56 - 00000000 ____D C:\Users\atendimento\Documents\SideSync
2017-02-17 16:32 - 2017-02-17 16:32 - 02468792 _____ C:\Users\atendimento\Downloads\ShowMyPC3510 (1).exe
2017-02-17 16:32 - 2017-02-17 16:32 - 00001320 _____ C:\Users\atendimento\Desktop\ShowMyPC.lnk
2017-02-17 09:16 - 2017-02-17 09:16 - 00003144 _____ C:\Windows\System32\Tasks\{44504BBF-A235-4052-9A2D-1815A1282B77}
2017-02-11 10:08 - 2017-02-11 10:08 - 00000543 _____ C:\Users\atendimento\Downloads\twrp-3.0.2-0-m8.img.asc
2017-02-11 10:05 - 2017-02-11 10:20 - 1257586679 _____ (Google Inc.) C:\Users\atendimento\Downloads\Não confirmado 962332.crdownload
2017-02-11 09:32 - 2017-02-11 09:32 - 06357038 _____ C:\Users\atendimento\Downloads\CWM 6.0.3 Galaxy Core 2.rar
2017-02-09 08:06 - 2017-02-09 08:06 - 00000000 ____D C:\Users\atendimento\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Aplicativos do Google Chrome
2017-02-08 10:23 - 2017-02-08 10:23 - 00016081 _____ C:\Users\atendimento\Downloads\nota_lodo_050.pdf
==================== Um Mês Modificados arquivos e pastas ========
(Se uma entrada for incluída na fixlist, o arquivo/pasta será movido.)
2017-03-08 09:05 - 2016-06-15 14:05 - 00000000 ____D C:\Users\Todos os Usuários\{08D1CDB2-8293-4774-0455-D9369E1752F8}
2017-03-08 09:05 - 2016-06-15 14:05 - 00000000 ____D C:\ProgramData\{08D1CDB2-8293-4774-0455-D9369E1752F8}
2017-03-08 08:16 - 2015-06-19 09:35 - 00001054 _____ C:\Windows\Tasks\DropboxUpdateTaskUserS-1-5-21-417772167-308150910-200703222-1000UA.job
2017-03-08 07:57 - 2015-02-20 16:54 - 00000000 ____D C:\Users\Todos os Usuários\firebird
2017-03-08 07:57 - 2015-02-20 16:54 - 00000000 ____D C:\ProgramData\firebird
2017-03-08 07:56 - 2016-11-16 12:54 - 00000000 ____D C:\Users\atendimento\AppData\LocalLow\Mozilla
2017-03-08 06:11 - 2016-06-15 14:05 - 00000000 ____D C:\Users\atendimento\AppData\Roaming\WeatherTool
2017-03-07 18:16 - 2015-06-19 09:35 - 00001002 _____ C:\Windows\Tasks\DropboxUpdateTaskUserS-1-5-21-417772167-308150910-200703222-1000Core.job
2017-03-07 18:14 - 2016-04-06 09:21 - 00000000 ____D C:\Users\Todos os Usuários\GbPlugin
2017-03-07 18:14 - 2016-04-06 09:21 - 00000000 ____D C:\ProgramData\GbPlugin
2017-03-07 13:21 - 2009-07-14 01:45 - 00020512 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2017-03-07 13:21 - 2009-07-14 01:45 - 00020512 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2017-03-07 13:16 - 2015-02-20 16:28 - 00003758 _____ C:\Windows\System32\Tasks\AutoKMS
2017-03-07 10:05 - 2009-07-14 00:20 - 00000000 ____D C:\Windows\inf
2017-03-07 09:45 - 2016-09-16 14:02 - 00000000 ____D C:\Users\atendimento\AppData\Local\Samsung
2017-03-07 09:40 - 2016-12-19 13:14 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Samsung
2017-03-07 09:39 - 2016-09-16 11:13 - 00000000 ____D C:\Users\Todos os Usuários\Samsung
2017-03-07 09:39 - 2016-09-16 11:13 - 00000000 ____D C:\ProgramData\Samsung
2017-03-07 09:39 - 2016-09-16 11:13 - 00000000 ____D C:\Program Files (x86)\Samsung
2017-03-07 09:39 - 2015-03-02 14:07 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2017-03-06 13:20 - 2009-07-20 21:27 - 00703582 _____ C:\Windows\system32\prfh0416.dat
2017-03-06 13:20 - 2009-07-20 21:27 - 00146368 _____ C:\Windows\system32\prfc0416.dat
2017-03-06 13:20 - 2009-07-14 02:13 - 01629080 _____ C:\Windows\system32\PerfStringBackup.INI
2017-03-06 13:18 - 2015-02-20 17:07 - 00000000 ___RD C:\Users\atendimento\Dropbox
2017-03-06 13:16 - 2016-04-06 09:21 - 00000000 ____D C:\Program Files (x86)\GbPlugin
2017-03-06 13:15 - 2009-07-14 02:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2017-03-06 11:20 - 2015-02-20 16:50 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Solution
2017-03-06 08:25 - 2017-01-09 08:21 - 00000000 ____D C:\Program Files\Samsung
2017-03-02 15:17 - 2009-07-14 01:45 - 00501720 _____ C:\Windows\system32\FNTCACHE.DAT
2017-03-02 10:24 - 2015-02-20 16:22 - 01596832 _____ C:\Windows\SysWOW64\PerfStringBackup.INI
2017-03-02 09:40 - 2015-02-20 15:50 - 00000000 ____D C:\Program Files (x86)\Intel
2017-03-02 09:09 - 2015-02-20 16:54 - 00000000 ____D C:\TMP
2017-03-02 08:23 - 2016-05-13 16:24 - 00000000 ____D C:\Users\Todos os Usuários\Package Cache
2017-03-02 08:23 - 2016-05-13 16:24 - 00000000 ____D C:\ProgramData\Package Cache
2017-03-01 17:20 - 2015-02-23 08:11 - 00000000 ____D C:\Users\atendimento\AppData\Roaming\Skype
2017-03-01 17:20 - 2015-02-23 08:10 - 00000000 ____D C:\Users\Todos os Usuários\Skype
2017-03-01 17:20 - 2015-02-23 08:10 - 00000000 ____D C:\ProgramData\Skype
2017-03-01 14:32 - 2016-12-12 10:35 - 00000000 ____D C:\SOLUTION
2017-03-01 13:31 - 2015-10-21 10:38 - 00000000 ____D C:\Users\atendimento\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Centrun - Controle de chamados
2017-02-27 16:56 - 2015-02-20 16:32 - 00000000 ____D C:\Users\atendimento\AppData\Roaming\Dropbox
2017-02-24 14:34 - 2015-10-28 16:14 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Truck
2017-02-23 08:38 - 2015-11-19 07:10 - 00002441 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk
2017-02-17 09:12 - 2016-09-02 10:13 - 00000000 ____D C:\Users\Todos os Usuários\VMware
2017-02-17 09:12 - 2016-09-02 10:13 - 00000000 ____D C:\ProgramData\VMware
2017-02-17 09:11 - 2016-09-02 10:19 - 00000000 ____D C:\Users\atendimento\AppData\Roaming\VMware
2017-02-13 08:00 - 2016-09-16 11:17 - 00000000 ____D C:\Users\atendimento\AppData\Roaming\Samsung
2017-02-13 07:56 - 2016-05-31 13:29 - 00000000 ____D C:\Program Files (x86)\LG Electronics
2017-02-13 07:44 - 2015-05-21 09:26 - 00004180 _____ C:\Windows\System32\Tasks\avast! Emergency Update
2017-02-11 09:22 - 2017-02-01 08:04 - 00000000 ____D C:\Users\atendimento\.nbi
2017-02-11 08:29 - 2009-07-14 00:20 - 00000000 ____D C:\Windows\ModemLogs
2017-02-08 12:52 - 2017-01-02 13:25 - 00028376 _____ (GAS Tecnologia) C:\Windows\system32\Drivers\wsddfac.sys
2017-02-06 19:19 - 2015-02-20 16:18 - 00002193 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
==================== Arquivos na raiz de alguns diretórios =======
2016-12-21 14:35 - 2016-12-21 14:35 - 0000725 _____ () C:\Users\atendimento\AppData\Local\recently-used.xbel
2008-02-05 13:28 - 2008-02-05 13:28 - 0000051 _____ () C:\Users\atendimento\AppData\Local\setup.txt
2015-11-17 10:19 - 2015-11-17 10:19 - 0000057 _____ () C:\ProgramData\Ament.ini
Alguns arquivos em TEMP:
====================
2017-02-11 09:22 - 2017-02-11 09:22 - 0005120 _____ () C:\Users\atendimento\AppData\Local\Temp\nbi-cleaner4724490336596975868.exe
2012-10-01 21:44 - 2012-10-01 21:44 - 0178824 ____R (Microsoft Corporation) C:\Users\atendimento\AppData\Local\Temp\ose00000.exe
2006-05-24 14:10 - 2006-05-24 14:10 - 0455600 ____R (Macrovision Corporation) C:\Users\atendimento\AppData\Local\Temp\_is1700.exe
==================== Bamital & volsnap ======================
(Não há correção automática para arquivos que não passaram na verificação.)
C:\Windows\system32\winlogon.exe => O arquivo é assinado digitalmente
C:\Windows\system32\wininit.exe => O arquivo é assinado digitalmente
C:\Windows\SysWOW64\wininit.exe => O arquivo é assinado digitalmente
C:\Windows\explorer.exe => O arquivo é assinado digitalmente
C:\Windows\SysWOW64\explorer.exe => O arquivo é assinado digitalmente
C:\Windows\system32\svchost.exe => O arquivo é assinado digitalmente
C:\Windows\SysWOW64\svchost.exe => O arquivo é assinado digitalmente
C:\Windows\system32\services.exe => O arquivo é assinado digitalmente
C:\Windows\system32\User32.dll => O arquivo é assinado digitalmente
C:\Windows\SysWOW64\User32.dll => O arquivo é assinado digitalmente
C:\Windows\system32\userinit.exe => O arquivo é assinado digitalmente
C:\Windows\SysWOW64\userinit.exe => O arquivo é assinado digitalmente
C:\Windows\system32\rpcss.dll => O arquivo é assinado digitalmente
C:\Windows\system32\dnsapi.dll => O arquivo é assinado digitalmente
C:\Windows\SysWOW64\dnsapi.dll => O arquivo é assinado digitalmente
C:\Windows\system32\Drivers\volsnap.sys => O arquivo é assinado digitalmente
LastRegBack: 2017-03-06 12:19
==================== Fim de FRST.txt ============================
Executado por atendimento (administrador) em LAIS-PC (08-03-2017 09:14:13)
Executando a partir de C:\Users\atendimento\Desktop\frst
Perfis Carregados: atendimento (Perfis Disponíveis: atendimento)
Platform: Windows 7 Professional (X64) Idioma: Português (Brasil)
Internet Explorer Versão 8 (Navegador padrão: Chrome)
Modo da Inicialização: Normal
Tutorial da Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Processos (Whitelisted) =================
(Se uma entrada for incluída na fixlist, o processo será fechado. O arquivo não será movido.)
(GAS Tecnologia) C:\Program Files (x86)\GbPlugin\gbpsv.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Firebird Project) C:\Program Files (x86)\Firebird\Firebird_2_5\bin\fb_inet_server.exe
(Intel Corporation) C:\Windows\System32\IPROSetMonitor.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Microsoft) C:\Program Files\Softland\novaPDF 8\Server\novapdfs.exe
() C:\Program Files (x86)\WeatherTool\2.0.1.11073\WeatherService.exe
(GAS Tecnologia LTDA) C:\Program Files\Diebold\Warsaw\core.exe
(ShenZhen Enode Techology co,.Ltd) C:\Program Files (x86)\WeatherTool\2.0.1.11073\weather.exe
(GAS Tecnologia) C:\Program Files (x86)\GbPlugin\gbpsv.exe
(GAS Tecnologia LTDA) C:\Program Files\Diebold\Warsaw\core.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Hewlett-Packard Co.) C:\Program Files\HP\HP Officejet Pro X476dw MFP\Bin\ScanToPCActivationApp.exe
() C:\Program Files (x86)\Zoiper\Zoiper.exe
() C:\Program Files (x86)\BraZipCentral\BraZipCentral.exe
(Dropbox, Inc.) C:\Users\atendimento\AppData\Roaming\Dropbox\bin\Dropbox.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\avastui.exe
(Hewlett-Packard) C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
() C:\PRECISA\Centrun\Centrun.exe
(Microsoft Corporation) C:\Windows\SysWOW64\dllhost.exe
(DEVGURU Co., LTD.) C:\Program Files (x86)\Samsung\USB Drivers\27_ssconn\conn\ss_conn_service.exe
(Samsung Electronics Co., Ltd.) C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe
(Samsung Electronics Co., Ltd.) C:\Users\atendimento\Desktop\ROM + Odin S5360B\Odin\Odin3 v1.85.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
() C:\PRECISA\SOLUTION\Solution.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\splwow64.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\System32\cmd.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Hewlett-Packard Co.) C:\Program Files\HP\HP Officejet Pro X476dw MFP\Bin\HPNetworkCommunicatorCom.exe
==================== Registro (Whitelisted) ====================
(Se uma entrada for incluída na fixlist, o ítem no Registro será restaurado para o padrão ou removido. O arquivo não será movido.)
HKLM\...\Run: [Diebold - Warsaw] => C:\Program Files\Diebold\Warsaw\core.exe [927280 2016-11-11] (GAS Tecnologia LTDA)
HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [9080768 2016-11-15] (AVAST Software)
HKLM-x32\...\Run: [HP Software Update] => C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe [96056 2013-05-30] (Hewlett-Packard)
HKLM-x32\...\Run: [] => [X]
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [587288 2016-12-12] (Oracle Corporation)
HKLM-x32\...\Run: [KiesTrayAgent] => C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe [318128 2016-11-16] (Samsung Electronics Co., Ltd.)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
Winlogon\Notify\ GbPluginBb: C:\PROGRAM FILES (X86)\GBPLUGIN\gbieh.dll [2016-09-29] (Banco do Brasil)
Winlogon\Notify\ GbPluginCef: C:\Program Files (x86)\GbPlugin\gbiehCef.dll [2015-09-22] (Caixa Economica Federal)
HKU\S-1-5-21-417772167-308150910-200703222-1000\...\Run: [Dropbox Update] => C:\Users\atendimento\AppData\Local\Dropbox\Update\DropboxUpdate.exe [143144 2016-11-07] (Dropbox, Inc.)
HKU\S-1-5-21-417772167-308150910-200703222-1000\...\Run: [HP Officejet Pro X476dw MFP (NET)] => C:\Program Files\HP\HP Officejet Pro X476dw MFP\Bin\ScanToPCActivationApp.exe [3487240 2014-03-06] (Hewlett-Packard Co.)
HKU\S-1-5-21-417772167-308150910-200703222-1000\...\Run: [Zoiper] => C:\Program Files (x86)\Zoiper\Zoiper.exe [12548624 2015-07-14] ()
HKU\S-1-5-21-417772167-308150910-200703222-1000\...\Run: [Chromium] => c:\users\atendimento\appdata\local\chromium\application\chrome.exe [1068544 2016-03-18] (The Chromium Authors)
HKU\S-1-5-21-417772167-308150910-200703222-1000\...\Run: [KiesPDLR.exe] => C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe [1023664 2016-11-16] (Samsung)
HKU\S-1-5-21-417772167-308150910-200703222-1000\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [27545056 2017-02-14] (Skype Technologies S.A.)
HKU\S-1-5-21-417772167-308150910-200703222-1000\...\Run: [SideSync] => C:\Program Files (x86)\Samsung\SideSync4\SideSync.exe [11278512 2016-06-24] ()
HKU\S-1-5-21-417772167-308150910-200703222-1000\...\MountPoints2: {289d63e5-2740-11e6-8451-e06995881c34} - E:\LGAutoRun.exe
HKU\S-1-5-21-417772167-308150910-200703222-1000\...\MountPoints2: {b2340906-c0c8-11e4-9c99-e06995881c34} - E:\start.exe
HKU\S-1-5-21-417772167-308150910-200703222-1000\...\MountPoints2: {d5d0a92f-d650-11e6-a67c-005056c00008} - E:\Auto.exe
ShellExecuteHooks-x32: GbPluginObj Class - {E37CB5F0-51F5-4395-A808-5FA49E399003} - C:\Program Files (x86)\GbPlugin\gbiehcef.dll [1888480 2015-09-22] (Caixa Economica Federal)
ShellExecuteHooks-x32: GbPluginObj Class - {E37CB5F0-51F5-4395-A808-5FA49E399F83} - C:\PROGRAM FILES (X86)\GbPlugin\gbieh.dll [1947872 2016-09-29] (Banco do Brasil)
ShellIconOverlayIdentifiers: [ DropboxExt01] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\atendimento\AppData\Roaming\Dropbox\bin\DropboxExt64.14.0.dll [2017-02-21] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt02] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\atendimento\AppData\Roaming\Dropbox\bin\DropboxExt64.14.0.dll [2017-02-21] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt03] -> {FB314EE1-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\atendimento\AppData\Roaming\Dropbox\bin\DropboxExt64.14.0.dll [2017-02-21] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt04] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\atendimento\AppData\Roaming\Dropbox\bin\DropboxExt64.14.0.dll [2017-02-21] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt05] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\atendimento\AppData\Roaming\Dropbox\bin\DropboxExt64.14.0.dll [2017-02-21] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt06] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\atendimento\AppData\Roaming\Dropbox\bin\DropboxExt64.14.0.dll [2017-02-21] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt07] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\atendimento\AppData\Roaming\Dropbox\bin\DropboxExt64.14.0.dll [2017-02-21] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt08] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\atendimento\AppData\Roaming\Dropbox\bin\DropboxExt64.14.0.dll [2017-02-21] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt09] -> {FB314EE2-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\atendimento\AppData\Roaming\Dropbox\bin\DropboxExt64.14.0.dll [2017-02-21] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt10] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\atendimento\AppData\Roaming\Dropbox\bin\DropboxExt64.14.0.dll [2017-02-21] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2016-09-09] (AVAST Software)
ShellIconOverlayIdentifiers-x32: [ DropboxExt01] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\atendimento\AppData\Roaming\Dropbox\bin\DropboxExt.14.0.dll [2017-02-21] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt02] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\atendimento\AppData\Roaming\Dropbox\bin\DropboxExt.14.0.dll [2017-02-21] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt03] -> {FB314EE1-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\atendimento\AppData\Roaming\Dropbox\bin\DropboxExt.14.0.dll [2017-02-21] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt04] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\atendimento\AppData\Roaming\Dropbox\bin\DropboxExt.14.0.dll [2017-02-21] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt05] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\atendimento\AppData\Roaming\Dropbox\bin\DropboxExt.14.0.dll [2017-02-21] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt06] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\atendimento\AppData\Roaming\Dropbox\bin\DropboxExt.14.0.dll [2017-02-21] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt07] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\atendimento\AppData\Roaming\Dropbox\bin\DropboxExt.14.0.dll [2017-02-21] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt08] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\atendimento\AppData\Roaming\Dropbox\bin\DropboxExt.14.0.dll [2017-02-21] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt09] -> {FB314EE2-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\atendimento\AppData\Roaming\Dropbox\bin\DropboxExt.14.0.dll [2017-02-21] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt10] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\atendimento\AppData\Roaming\Dropbox\bin\DropboxExt.14.0.dll [2017-02-21] (Dropbox, Inc.)
Startup: C:\Users\atendimento\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\BraZipCentral.lnk [2015-06-17]
ShortcutTarget: BraZipCentral.lnk -> C:\Program Files (x86)\BraZipCentral\BraZipCentral.exe ()
Startup: C:\Users\atendimento\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk [2017-02-27]
ShortcutTarget: Dropbox.lnk -> C:\Users\atendimento\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
GroupPolicy: Restrição <======= ATENÇÃO
GroupPolicyScripts: Restrição <======= ATENÇÃO
CHR HKLM\SOFTWARE\Policies\Google: Restrição <======= ATENÇÃO
==================== Internet (Whitelisted) ====================
(Se um ítem for incluído na fixlist, sendo um ítem do Registro, será removido ou restaurado para o padrão.)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.50 8.8.8.8
Tcpip\..\Interfaces\{33C7FBAD-56DE-4469-A814-66512EBC9C79}: [DhcpNameServer] 192.168.1.50 8.8.8.8
Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxps://br.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wncy_adsafld_16_24¶m1=1¶m2=f%3D1%26b%3DIE%26cc%3Dbr%26pa%3DWincy%26cd%3D2XzuyEtN2Y1L1Qzu0EtDyCzyzyyDzzzztC0CtAyEtA0FtAzytN0D0Tzu0StCyCtByBtN1L2XzutAtFtBtBtFtAtFzztN1L1Czu1ByEtN1L1G1B1V1N2Y1L1Qzu2StAyBtB0DtA0Azy0CtGtCtC0AzytGtCyB0DtCtGtCyC0A0CtGzyzytAtByDtC0FyDyEzy0F0E2QtN1M1F1B2Z1V1N2Y1L1Qzu2Szyzzzz0FtAzzyEtDtG0C0DzytDtGyE0A0D0CtG0ByDzzzztGyCyC0D0Bzy0FtD0ByBzy0B0D2QtN0A0LzuyE%26cr%3D2035820834%26a%3Dwncy_adsafld_16_24%26os_ver%3D6.1%26os%3DWindows%2B7%2BProfessional
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxps://br.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wncy_adsafld_16_24¶m1=1¶m2=f%3D1%26b%3DIE%26cc%3Dbr%26pa%3DWincy%26cd%3D2XzuyEtN2Y1L1Qzu0EtDyCzyzyyDzzzztC0CtAyEtA0FtAzytN0D0Tzu0StCyCtByBtN1L2XzutAtFtBtBtFtAtFzztN1L1Czu1ByEtN1L1G1B1V1N2Y1L1Qzu2StAyBtB0DtA0Azy0CtGtCtC0AzytGtCyB0DtCtGtCyC0A0CtGzyzytAtByDtC0FyDyEzy0F0E2QtN1M1F1B2Z1V1N2Y1L1Qzu2Szyzzzz0FtAzzyEtDtG0C0DzytDtGyE0A0D0CtG0ByDzzzztGyCyC0D0Bzy0FtD0ByBzy0B0D2QtN0A0LzuyE%26cr%3D2035820834%26a%3Dwncy_adsafld_16_24%26os_ver%3D6.1%26os%3DWindows%2B7%2BProfessional
HKU\S-1-5-21-417772167-308150910-200703222-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxps://br.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wncy_adsafld_16_24¶m1=1¶m2=f%3D1%26b%3DIE%26cc%3Dbr%26pa%3DWincy%26cd%3D2XzuyEtN2Y1L1Qzu0EtDyCzyzyyDzzzztC0CtAyEtA0FtAzytN0D0Tzu0StCyCtByBtN1L2XzutAtFtBtBtFtAtFzztN1L1Czu1ByEtN1L1G1B1V1N2Y1L1Qzu2StAyBtB0DtA0Azy0CtGtCtC0AzytGtCyB0DtCtGtCyC0A0CtGzyzytAtByDtC0FyDyEzy0F0E2QtN1M1F1B2Z1V1N2Y1L1Qzu2Szyzzzz0FtAzzyEtDtG0C0DzytDtGyE0A0D0CtG0ByDzzzztGyCyC0D0Bzy0FtD0ByBzy0B0D2QtN0A0LzuyE%26cr%3D2035820834%26a%3Dwncy_adsafld_16_24%26os_ver%3D6.1%26os%3DWindows%2B7%2BProfessional
HKU\S-1-5-21-417772167-308150910-200703222-1000\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://www.msn.com/pt-br/?ocid=iehp
SearchScopes: HKLM -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxps://br.search.yahoo.com/yhs/search?hspart=iry&hsimp=yhs-fullyhosted_003&type=wncy_adsafld_16_24¶m1=1¶m2=f%3D4%26b%3DIE%26cc%3Dbr%26pa%3DWincy%26cd%3D2XzuyEtN2Y1L1Qzu0EtDyCzyzyyDzzzztC0CtAyEtA0FtAzytN0D0Tzu0StCyCtByBtN1L2XzutAtFtBtBtFtAtFzztN1L1Czu1ByEtN1L1G1B1V1N2Y1L1Qzu2StAyBtB0DtA0Azy0CtGtCtC0AzytGtCyB0DtCtGtCyC0A0CtGzyzytAtByDtC0FyDyEzy0F0E2QtN1M1F1B2Z1V1N2Y1L1Qzu2Szyzzzz0FtAzzyEtDtG0C0DzytDtGyE0A0D0CtG0ByDzzzztGyCyC0D0Bzy0FtD0ByBzy0B0D2QtN0A0LzuyE%26cr%3D2035820834%26a%3Dwncy_adsafld_16_24%26os_ver%3D6.1%26os%3DWindows%2B7%2BProfessional&p={searchTerms}
SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxps://br.search.yahoo.com/yhs/search?hspart=iry&hsimp=yhs-fullyhosted_003&type=wncy_adsafld_16_24¶m1=1¶m2=f%3D4%26b%3DIE%26cc%3Dbr%26pa%3DWincy%26cd%3D2XzuyEtN2Y1L1Qzu0EtDyCzyzyyDzzzztC0CtAyEtA0FtAzytN0D0Tzu0StCyCtByBtN1L2XzutAtFtBtBtFtAtFzztN1L1Czu1ByEtN1L1G1B1V1N2Y1L1Qzu2StAyBtB0DtA0Azy0CtGtCtC0AzytGtCyB0DtCtGtCyC0A0CtGzyzytAtByDtC0FyDyEzy0F0E2QtN1M1F1B2Z1V1N2Y1L1Qzu2Szyzzzz0FtAzzyEtDtG0C0DzytDtGyE0A0D0CtG0ByDzzzztGyCyC0D0Bzy0FtD0ByBzy0B0D2QtN0A0LzuyE%26cr%3D2035820834%26a%3Dwncy_adsafld_16_24%26os_ver%3D6.1%26os%3DWindows%2B7%2BProfessional&p={searchTerms}
SearchScopes: HKLM-x32 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxps://br.search.yahoo.com/yhs/search?hspart=iry&hsimp=yhs-fullyhosted_003&type=wncy_adsafld_16_24¶m1=1¶m2=f%3D4%26b%3DIE%26cc%3Dbr%26pa%3DWincy%26cd%3D2XzuyEtN2Y1L1Qzu0EtDyCzyzyyDzzzztC0CtAyEtA0FtAzytN0D0Tzu0StCyCtByBtN1L2XzutAtFtBtBtFtAtFzztN1L1Czu1ByEtN1L1G1B1V1N2Y1L1Qzu2StAyBtB0DtA0Azy0CtGtCtC0AzytGtCyB0DtCtGtCyC0A0CtGzyzytAtByDtC0FyDyEzy0F0E2QtN1M1F1B2Z1V1N2Y1L1Qzu2Szyzzzz0FtAzzyEtDtG0C0DzytDtGyE0A0D0CtG0ByDzzzztGyCyC0D0Bzy0FtD0ByBzy0B0D2QtN0A0LzuyE%26cr%3D2035820834%26a%3Dwncy_adsafld_16_24%26os_ver%3D6.1%26os%3DWindows%2B7%2BProfessional&p={searchTerms}
SearchScopes: HKLM-x32 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxps://br.search.yahoo.com/yhs/search?hspart=iry&hsimp=yhs-fullyhosted_003&type=wncy_adsafld_16_24¶m1=1¶m2=f%3D4%26b%3DIE%26cc%3Dbr%26pa%3DWincy%26cd%3D2XzuyEtN2Y1L1Qzu0EtDyCzyzyyDzzzztC0CtAyEtA0FtAzytN0D0Tzu0StCyCtByBtN1L2XzutAtFtBtBtFtAtFzztN1L1Czu1ByEtN1L1G1B1V1N2Y1L1Qzu2StAyBtB0DtA0Azy0CtGtCtC0AzytGtCyB0DtCtGtCyC0A0CtGzyzytAtByDtC0FyDyEzy0F0E2QtN1M1F1B2Z1V1N2Y1L1Qzu2Szyzzzz0FtAzzyEtDtG0C0DzytDtGyE0A0D0CtG0ByDzzzztGyCyC0D0Bzy0FtD0ByBzy0B0D2QtN0A0LzuyE%26cr%3D2035820834%26a%3Dwncy_adsafld_16_24%26os_ver%3D6.1%26os%3DWindows%2B7%2BProfessional&p={searchTerms}
SearchScopes: HKU\S-1-5-21-417772167-308150910-200703222-1000 -> DefaultScope {95B7759C-8C7F-4BF1-B163-73684A933233} URL = hxxps://br.search.yahoo.com/yhs/search?hspart=iry&hsimp=yhs-fullyhosted_003&type=wncy_adsafld_16_24¶m1=1¶m2=f%3D4%26b%3DIE%26cc%3Dbr%26pa%3DWincy%26cd%3D2XzuyEtN2Y1L1Qzu0EtDyCzyzyyDzzzztC0CtAyEtA0FtAzytN0D0Tzu0StCyCtByBtN1L2XzutAtFtBtBtFtAtFzztN1L1Czu1ByEtN1L1G1B1V1N2Y1L1Qzu2StAyBtB0DtA0Azy0CtGtCtC0AzytGtCyB0DtCtGtCyC0A0CtGzyzytAtByDtC0FyDyEzy0F0E2QtN1M1F1B2Z1V1N2Y1L1Qzu2Szyzzzz0FtAzzyEtDtG0C0DzytDtGyE0A0D0CtG0ByDzzzztGyCyC0D0Bzy0FtD0ByBzy0B0D2QtN0A0LzuyE%26cr%3D2035820834%26a%3Dwncy_adsafld_16_24%26os_ver%3D6.1%26os%3DWindows%2B7%2BProfessional&p={searchTerms}
SearchScopes: HKU\S-1-5-21-417772167-308150910-200703222-1000 -> {2f23ab71-4ac6-41f2-a955-ea576e553146} URL = hxxps://mysearch.avg.com/search?cid={638DBB5E-D182-407C-A4F3-6665079F76CB}&mid=0209458aef4d47cd9afc3120d36cf5c7-22edf4a915fcd0eb8f64700989ba5e4b87a95ed3&lang=pt-br&ds=AVG&coid=avgtbavg&cmpid=0316tb&pr=fr&d=2015-02-20 16:44:59&v=4.2.8.608&pid=wtu&sg=&sap=dsp&q={searchTerms}
SearchScopes: HKU\S-1-5-21-417772167-308150910-200703222-1000 -> {95B7759C-8C7F-4BF1-B163-73684A933233} URL = hxxps://br.search.yahoo.com/yhs/search?hspart=iry&hsimp=yhs-fullyhosted_003&type=wncy_adsafld_16_24¶m1=1¶m2=f%3D4%26b%3DIE%26cc%3Dbr%26pa%3DWincy%26cd%3D2XzuyEtN2Y1L1Qzu0EtDyCzyzyyDzzzztC0CtAyEtA0FtAzytN0D0Tzu0StCyCtByBtN1L2XzutAtFtBtBtFtAtFzztN1L1Czu1ByEtN1L1G1B1V1N2Y1L1Qzu2StAyBtB0DtA0Azy0CtGtCtC0AzytGtCyB0DtCtGtCyC0A0CtGzyzytAtByDtC0FyDyEzy0F0E2QtN1M1F1B2Z1V1N2Y1L1Qzu2Szyzzzz0FtAzzyEtDtG0C0DzytDtGyE0A0D0CtG0ByDzzzztGyCyC0D0Bzy0FtD0ByBzy0B0D2QtN0A0LzuyE%26cr%3D2035820834%26a%3Dwncy_adsafld_16_24%26os_ver%3D6.1%26os%3DWindows%2B7%2BProfessional&p={searchTerms}
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_121\bin\ssv.dll [2017-02-01] (Oracle Corporation)
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2016-10-24] (AVAST Software)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_121\bin\jp2ssv.dll [2017-02-01] (Oracle Corporation)
BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2016-10-24] (AVAST Software)
BHO-x32: Sem Nome -> {95B7759C-8C7F-4BF1-B163-73684A933233} -> Nenhum Arquivo
BHO-x32: GbIehObj Class -> {C41A1C0E-EA6C-11D4-B1B8-444553540000} -> C:\PROGRAM FILES (X86)\GBPLUGIN\gbieh.dll [2016-09-29] (Banco do Brasil)
BHO-x32: GbIehObj Class -> {C41A1C0E-EA6C-11D4-B1B8-444553540003} -> C:\Program Files (x86)\GbPlugin\gbiehcef.dll [2015-09-22] (Caixa Economica Federal)
Filter: deflate - {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\Windows\system32\urlmon.dll [2010-12-21] (Microsoft Corporation)
Filter-x32: deflate - {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\Windows\SysWOW64\urlmon.dll [2010-12-21] (Microsoft Corporation)
Filter: gzip - {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\Windows\system32\urlmon.dll [2010-12-21] (Microsoft Corporation)
Filter-x32: gzip - {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\Windows\SysWOW64\urlmon.dll [2010-12-21] (Microsoft Corporation)
StartMenuInternet: IEXPLORE.EXE - iexplore.exe
FireFox:
========
FF DefaultProfile: efqyvk4b.default
FF ProfilePath: C:\Users\atendimento\AppData\Roaming\Mozilla\Firefox\Profiles\efqyvk4b.default [2017-03-08]
FF NewTab: Mozilla\Firefox\Profiles\efqyvk4b.default -> about:newtab
FF DefaultSearchEngine: Mozilla\Firefox\Profiles\efqyvk4b.default -> Yahoo! Powered
FF SelectedSearchEngine: Mozilla\Firefox\Profiles\efqyvk4b.default -> Yahoo! Powered
FF Homepage: Mozilla\Firefox\Profiles\efqyvk4b.default -> hxxp://www.google.com.br/
FF Keyword.URL: Mozilla\Firefox\Profiles\efqyvk4b.default -> user_pref("keyword.URL", true);
FF Extension: (Video DownloadHelper) - C:\Users\atendimento\AppData\Roaming\Mozilla\Firefox\Profiles\efqyvk4b.default\Extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}.xpi [2016-12-30]
FF Extension: (SHA-1 deprecation staged rollout) - C:\Users\atendimento\AppData\Roaming\Mozilla\Firefox\Profiles\efqyvk4b.default\features\{ebb0175c-f40d-4cf7-b374-9b97e1785299}\disableSHA1rollout@mozilla.org.xpi [2017-03-03]
FF HKLM\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: (Avast Online Security) - C:\Program Files\AVAST Software\Avast\WebRep\FF [2016-09-09]
FF HKLM\...\Firefox\Extensions: [sp@avast.com] - C:\Program Files\AVAST Software\Avast\SafePrice\FF
FF Extension: (Avast SafePrice) - C:\Program Files\AVAST Software\Avast\SafePrice\FF [2016-09-09]
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF HKLM-x32\...\Firefox\Extensions: [sp@avast.com] - C:\Program Files\AVAST Software\Avast\SafePrice\FF
FF Plugin: @java.com/DTPlugin,version=11.121.2 -> C:\Program Files\Java\jre1.8.0_121\bin\dtplugin\npDeployJava1.dll [2017-02-01] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.121.2 -> C:\Program Files\Java\jre1.8.0_121\bin\plugin2\npjp2.dll [2017-02-01] (Oracle Corporation)
FF Plugin-x32: @avg.com/AVG SiteSafety plugin,version=11.0.0.1,application/x-avg-sitesafety-plugin -> C:\Program Files (x86)\Common Files\AVG Secure Search\SiteSafetyInstaller\40.2.9\\npsitesafety.dll [Nenhum Arquivo]
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.32.7\npGoogleUpdate3.dll [2016-12-16] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.32.7\npGoogleUpdate3.dll [2016-12-16] (Google Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2016-12-23] (Adobe Systems Inc.)
Chrome:
=======
CHR DefaultProfile: Default
CHR DefaultSearchURL: Default -> hxxp://srch.bar/{searchTerms}
CHR DefaultSuggestURL: Default -> hxxp://srch.bar/?s={searchTerms}
CHR Profile: C:\Users\atendimento\AppData\Local\Google\Chrome\User Data\Default [2017-03-08]
CHR Extension: (Google Apresentações) - C:\Users\atendimento\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-02-20]
CHR Extension: (Google Docs) - C:\Users\atendimento\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-02-20]
CHR Extension: (Google Drive) - C:\Users\atendimento\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-10-22]
CHR Extension: (YouTube) - C:\Users\atendimento\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-09-26]
CHR Extension: (Google Search) - C:\Users\atendimento\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-10-27]
CHR Extension: (Adobe Acrobat) - C:\Users\atendimento\AppData\Local\Google\Chrome\User Data\Default\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2017-03-06]
CHR Extension: (Avast SafePrice) - C:\Users\atendimento\AppData\Local\Google\Chrome\User Data\Default\Extensions\eofcbnmajmjmplflapaojjnihcjkigck [2016-11-18]
CHR Extension: (Planilhas do Google) - C:\Users\atendimento\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-02-20]
CHR Extension: (Documentos Google off-line) - C:\Users\atendimento\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-03-16]
CHR Extension: (Avast Online Security) - C:\Users\atendimento\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2017-03-06]
CHR Extension: (Pagamentos da Chrome Web Store) - C:\Users\atendimento\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2017-01-24]
CHR Extension: (TeamViewer) - C:\Users\atendimento\AppData\Local\Google\Chrome\User Data\Default\Extensions\oooiobdokpcfdlahlmcddobejikcmkfo [2017-02-09]
CHR Extension: (Gmail) - C:\Users\atendimento\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-03-31]
CHR Extension: (Chrome Media Router) - C:\Users\atendimento\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2017-02-07]
CHR HKLM\...\Chrome\Extension: [pilplloabdedfmialnfchjomjmpjcoej] - hxxps://clients2.google.com/service/update2/crx
CHR HKU\S-1-5-21-417772167-308150910-200703222-1000\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [pilplloabdedfmialnfchjomjmpjcoej] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [eofcbnmajmjmplflapaojjnihcjkigck] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChromeSp.crx [2015-05-21]
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2015-05-21]
CHR HKLM-x32\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [pilplloabdedfmialnfchjomjmpjcoej] - hxxps://clients2.google.com/service/update2/crx
==================== Serviços (Whitelisted) ====================
(Se uma entrada for incluída na fixlist, será removida do Registro. O arquivo não será movido, a menos que seja colocado separadamente.)
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [197128 2016-09-09] (AVAST Software)
R2 FirebirdServerDefaultInstance; C:\Program Files (x86)\Firebird\Firebird_2_5\bin\fb_inet_server.exe [3805184 2014-07-09] (Firebird Project) [Arquivo não assinado]
R2 GbpSv; C:\Program Files (x86)\GbPlugin\gbpsv.exe [631520 2016-09-29] (GAS Tecnologia)
R2 Net Driver HPZ12; C:\Windows\system32\HPZinw12.dll [50688 2013-05-16] (Hewlett-Packard) [Arquivo não assinado]
R2 NovaPdfServer; C:\Program Files\Softland\novaPDF 8\Server\novapdfs.exe [50600 2016-03-03] (Microsoft)
R2 Pml Driver HPZ12; C:\Windows\system32\HPZipm12.dll [66048 2013-05-16] (Hewlett-Packard) [Arquivo não assinado]
R2 ss_conn_service; C:\Program Files (x86)\Samsung\USB Drivers\27_ssconn\conn\ss_conn_service.exe [754784 2016-07-22] (DEVGURU Co., LTD.)
S2 svAvisos; C:\Windows\svAvisos.exe [14180597 2016-06-03] () [Arquivo não assinado]
R2 TheDesktopWeatherService; C:\Program Files (x86)\WeatherTool\2.0.1.11073\WeatherService.exe [152008 2015-11-23] ()
R2 Warsaw Technology; C:\Program Files\Diebold\Warsaw\core.exe [927280 2016-11-11] (GAS Tecnologia LTDA)
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2009-07-13] (Microsoft Corporation)
===================== Drivers (Whitelisted) ======================
(Se uma entrada for incluída na fixlist, será removida do Registro. O arquivo não será movido, a menos que seja colocado separadamente.)
S3 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [37656 2016-09-09] (AVAST Software)
R1 aswKbd; C:\Windows\system32\drivers\aswKbd.sys [37144 2016-09-09] (AVAST Software)
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [108816 2016-09-09] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [103064 2016-09-09] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [74544 2016-09-09] (AVAST Software)
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [969184 2016-09-13] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [513632 2016-09-22] (AVAST Software)
R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [163416 2016-09-09] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [293352 2016-10-13] (AVAST Software)
R3 GBPRCM; C:\Program Files (x86)\GbPlugin\gbprcm64.sys [29912 2015-12-08] (GAS Tecnologia)
R2 Sentinel64; C:\Windows\System32\Drivers\Sentinel64.sys [145448 2008-07-11] (SafeNet, Inc.)
S1 VBoxNetAdp; C:\Windows\System32\DRIVERS\VBoxNetAdp6.sys [121248 2016-08-16] (Oracle Corporation)
R3 Warsaw_PP; C:\Program Files (x86)\GbPlugin\wsftprp64.sys [24792 2015-12-08] (GAS Tecnologia LTDA)
S3 wdm_usb; C:\Windows\System32\DRIVERS\usb2ser.sys [155632 2015-08-06] (MBB)
S1 wsddfac; C:\Windows\System32\drivers\wsddfac.sys [28376 2017-02-08] (GAS Tecnologia)
R1 wsddntf; C:\Windows\System32\DRIVERS\wsddntf.sys [36984 2016-11-11] (GAS Tecnologia)
S1 wsddpp; C:\Windows\system32\drivers\wsddpp.sys [25184 2016-11-11] (GAS Tecnologia)
S3 wsddprm; C:\Windows\system32\drivers\wsddprm.sys [25184 2016-11-11] (GAS Tecnologia)
S3 andnetadb; System32\Drivers\lgandnetadb.sys [X]
S3 AndNetDiag; system32\DRIVERS\lgandnetdiag64.sys [X]
S3 ANDNetModem; system32\DRIVERS\lgandnetmodem64.sys [X]
S3 andnetndis; system32\DRIVERS\lgandnetndis64.sys [X]
S1 gbpddfac; system32\drivers\gbpddfac64.sys [X]
S0 gbpddreg; system32\drivers\gbpddreg64.sys [X]
S3 vmci; \SystemRoot\system32\DRIVERS\vmci.sys [X]
S3 VMnetAdapter; system32\DRIVERS\vmnetadapter.sys [X]
==================== NetSvcs (Whitelisted) ===================
(Se uma entrada for incluída na fixlist, será removida do Registro. O arquivo não será movido, a menos que seja colocado separadamente.)
==================== Um Mês Criados arquivos e pastas ========
(Se uma entrada for incluída na fixlist, o arquivo/pasta será movido.)
2017-03-08 09:12 - 2017-03-08 09:14 - 00000000 ____D C:\Users\atendimento\Desktop\frst
2017-03-08 09:08 - 2017-03-08 09:14 - 00000000 ___DC C:\FRST
2017-03-08 09:07 - 2017-03-08 09:07 - 02423808 _____ (Farbar) C:\Users\atendimento\Downloads\FRST64.exe
2017-03-08 09:04 - 2017-03-08 09:04 - 01034556 _____ C:\Users\atendimento\Downloads\Windows6.1-KB2999226-x64.msu
2017-03-08 08:57 - 2017-03-08 08:58 - 01055456 _____ (Microsoft Corporation) C:\Users\atendimento\Downloads\vbrun60.exe
2017-03-08 08:55 - 2017-03-08 08:53 - 00016224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-runtime-l1-1-0.dll
2017-03-08 08:54 - 2017-03-08 08:53 - 00016224 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-runtime-l1-1-0.dll
2017-03-08 08:53 - 2017-03-08 08:53 - 00016224 _____ (Microsoft Corporation) C:\Users\atendimento\Downloads\api-ms-win-crt-runtime-l1-1-0.dll
2017-03-08 08:03 - 2017-03-07 17:20 - 00000941 _____ C:\Users\atendimento\Desktop\treinamento.txt.bak
2017-03-07 17:20 - 2017-03-08 08:03 - 00001098 _____ C:\Users\atendimento\Desktop\treinamento.txt
2017-03-07 10:24 - 2017-03-07 10:53 - 00008491 _____ C:\Users\atendimento\Desktop\calc st.xlsx
2017-03-07 10:01 - 2011-08-25 01:43 - 00203320 _____ (DEVGURU Co., LTD.(www.devguru.co.kr)) C:\Windows\system32\Drivers\ssudmdm.sys
2017-03-07 10:01 - 2011-08-25 01:43 - 00095544 _____ (DEVGURU Co., LTD.(www.devguru.co.kr)) C:\Windows\system32\Drivers\ssudbus.sys
2017-03-07 09:56 - 2017-03-07 09:59 - 24111736 _____ (SAMSUNG Electronics Co., Ltd.) C:\Users\atendimento\Downloads\samsung_usb_driver_for_mobile_phones (1).exe
2017-03-07 09:45 - 2017-03-07 09:45 - 00000000 ____D C:\Users\atendimento\Documents\samsung
2017-03-07 09:44 - 2017-03-07 09:44 - 00001998 _____ C:\Users\Public\Desktop\Samsung Kies (Lite).lnk
2017-03-07 09:44 - 2017-03-07 09:44 - 00001988 _____ C:\Users\Public\Desktop\Samsung Kies.lnk
2017-03-07 09:36 - 2017-03-07 09:37 - 72022192 _____ (Samsung Electronics) C:\Users\atendimento\Downloads\KiesSetup (1).exe
2017-03-07 09:35 - 2017-03-07 17:19 - 00008992 _____ C:\Users\atendimento\Desktop\tABELA DE CST.xlsx
2017-03-06 11:16 - 2017-03-03 17:44 - 40253586 _____ (Precisa Fabrica de Software ) C:\Users\atendimento\Downloads\Upg Solution 5.0.2.42 Gdb_4813.exe
2017-03-06 11:15 - 2017-03-06 11:16 - 40247819 _____ C:\Users\atendimento\Downloads\Upg Solution 5.0.2.42 Gdb_4813.rar
2017-03-06 08:59 - 2017-03-06 09:01 - 24110600 _____ (SAMSUNG Electronics Co., Ltd.) C:\Users\atendimento\Downloads\samsung_android_usb_driver.exe
2017-03-06 08:24 - 2013-11-26 20:21 - 00000000 ____D C:\Users\atendimento\Desktop\ROM + Odin S5360B
2017-03-06 08:22 - 2017-03-06 08:23 - 122974012 _____ C:\Users\atendimento\Downloads\ROM + Odin S5360B.rar
2017-03-06 08:20 - 2017-03-06 08:21 - 24111736 _____ (SAMSUNG Electronics Co., Ltd.) C:\Users\atendimento\Downloads\samsung_usb_driver_for_mobile_phones.exe
2017-03-06 08:15 - 2016-12-19 14:10 - 01148949 _____ C:\Users\atendimento\Desktop\Odin3_v3.12.3.zip
2017-03-03 08:52 - 2017-03-03 08:51 - 00039025 _____ C:\Users\atendimento\Desktop\41170276639285000177550010007280751377282740.xml
2017-03-03 08:51 - 2017-03-03 08:51 - 00039025 _____ C:\Users\atendimento\Downloads\41170276639285000177550010007280751377282740.xml
2017-03-03 08:37 - 2017-03-03 08:37 - 00000000 ____H C:\Users\atendimento\Documents\Default.rdp
2017-03-02 10:24 - 2010-09-14 03:45 - 00367104 _____ (Microsoft Corporation) C:\Windows\system32\wcncsvc.dll
2017-03-02 10:24 - 2010-09-14 03:07 - 00276992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wcncsvc.dll
2017-03-02 10:10 - 2017-03-02 10:14 - 00000000 ____D C:\Windows\system32\MRT
2017-03-02 10:09 - 2017-03-02 10:09 - 138020592 ____C (Microsoft Corporation) C:\Windows\system32\MRT.exe
2017-03-02 09:46 - 2017-03-02 09:46 - 00000000 ____D C:\Windows\CheckSur
2017-03-02 09:35 - 2009-10-10 00:17 - 00014336 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\sffp_sd.sys
2017-03-02 09:05 - 2017-03-02 09:05 - 38117145 _____ (Precisa Fabrica de Software ) C:\Users\atendimento\Downloads\Upg Solution 4.0.16.49 Gdb_4220.exe
2017-03-02 08:50 - 2011-01-26 03:53 - 00982912 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys
2017-03-02 08:50 - 2011-01-26 03:31 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\cdd.dll
2017-03-02 08:50 - 2010-12-21 03:16 - 01197056 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2017-03-02 08:50 - 2010-12-21 03:16 - 00442880 _____ (Microsoft Corporation) C:\Windows\system32\winhttp.dll
2017-03-02 08:50 - 2010-12-21 03:16 - 00258048 _____ (Microsoft Corporation) C:\Windows\system32\WebClnt.dll
2017-03-02 08:50 - 2010-12-21 03:16 - 00097280 _____ (Microsoft Corporation) C:\Windows\system32\wscsvc.dll
2017-03-02 08:50 - 2010-12-21 03:16 - 00062976 _____ (Microsoft Corporation) C:\Windows\system32\wscapi.dll
2017-03-02 08:50 - 2010-12-21 03:15 - 01498112 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2017-03-02 08:50 - 2010-12-21 03:15 - 00264192 _____ (Microsoft Corporation) C:\Windows\system32\upnp.dll
2017-03-02 08:50 - 2010-12-21 03:15 - 00015360 _____ (Microsoft Corporation) C:\Windows\system32\slwga.dll
2017-03-02 08:50 - 2010-12-21 03:13 - 02003968 _____ (Microsoft Corporation) C:\Windows\system32\msxml6.dll
2017-03-02 08:50 - 2010-12-21 03:13 - 01880576 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
2017-03-02 08:50 - 2010-12-21 03:11 - 12369408 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2017-03-02 08:50 - 2010-12-21 03:10 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\davclnt.dll
2017-03-02 08:50 - 2010-12-21 02:38 - 01228288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2017-03-02 08:50 - 2010-12-21 02:38 - 00981504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2017-03-02 08:50 - 2010-12-21 02:38 - 00350720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winhttp.dll
2017-03-02 08:50 - 2010-12-21 02:38 - 00204800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WebClnt.dll
2017-03-02 08:50 - 2010-12-21 02:38 - 00204288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\upnp.dll
2017-03-02 08:50 - 2010-12-21 02:38 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wscapi.dll
2017-03-02 08:50 - 2010-12-21 02:38 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\slwga.dll
2017-03-02 08:50 - 2010-12-21 02:36 - 01389568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml6.dll
2017-03-02 08:50 - 2010-12-21 02:36 - 01236992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll
2017-03-02 08:50 - 2010-12-21 02:35 - 10989056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2017-03-02 08:50 - 2010-12-21 02:34 - 00080384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\davclnt.dll
2017-03-02 08:50 - 2010-11-04 03:31 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2017-03-02 08:50 - 2010-11-04 03:31 - 00064512 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2017-03-02 08:50 - 2010-11-04 02:48 - 00176640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2017-03-02 08:50 - 2010-11-04 02:48 - 00048128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2017-03-02 08:50 - 2010-11-02 02:18 - 00662528 _____ (Microsoft Corporation) C:\Windows\system32\XpsPrint.dll
2017-03-02 08:50 - 2010-11-02 02:18 - 00470016 _____ (Microsoft Corporation) C:\Windows\system32\XpsGdiConverter.dll
2017-03-02 08:50 - 2010-11-02 02:12 - 01837568 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll
2017-03-02 08:50 - 2010-11-02 02:12 - 01540608 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll
2017-03-02 08:50 - 2010-11-02 02:12 - 01133568 _____ (Microsoft Corporation) C:\Windows\system32\FntCache.dll
2017-03-02 08:50 - 2010-11-02 02:12 - 00902656 _____ (Microsoft Corporation) C:\Windows\system32\d2d1.dll
2017-03-02 08:50 - 2010-11-02 02:12 - 00320512 _____ (Microsoft Corporation) C:\Windows\system32\d3d10_1core.dll
2017-03-02 08:50 - 2010-11-02 01:41 - 00442880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XpsPrint.dll
2017-03-02 08:50 - 2010-11-02 01:41 - 00283648 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XpsGdiConverter.dll
2017-03-02 08:50 - 2010-11-02 01:35 - 01170944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10warp.dll
2017-03-02 08:50 - 2010-11-02 01:35 - 01074176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll
2017-03-02 08:50 - 2010-11-02 01:35 - 00739840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d2d1.dll
2017-03-02 08:50 - 2010-11-02 01:35 - 00218624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10_1core.dll
2017-03-02 08:50 - 2010-06-26 02:31 - 01863680 _____ (Microsoft Corporation) C:\Windows\system32\ExplorerFrame.dll
2017-03-02 08:50 - 2010-06-26 02:14 - 01495040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ExplorerFrame.dll
2017-03-02 08:50 - 2010-05-23 07:15 - 01619456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMVDECOD.DLL
2017-03-02 08:50 - 2010-05-23 07:11 - 03181568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mf.dll
2017-03-02 08:50 - 2010-05-23 07:11 - 00196608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfreadwrite.dll
2017-03-02 08:50 - 2010-05-23 05:37 - 01888256 _____ (Microsoft Corporation) C:\Windows\system32\WMVDECOD.DLL
2017-03-02 08:50 - 2010-05-23 05:35 - 04068864 _____ (Microsoft Corporation) C:\Windows\system32\mf.dll
2017-03-02 08:50 - 2010-05-23 05:35 - 00257024 _____ (Microsoft Corporation) C:\Windows\system32\mfreadwrite.dll
2017-03-02 08:50 - 2010-03-04 01:32 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ks.sys
2017-03-02 08:49 - 2015-03-19 00:07 - 05503416 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2017-03-02 08:49 - 2015-03-18 23:57 - 03963320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2017-03-02 08:49 - 2015-03-18 23:57 - 03908024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2017-03-02 08:49 - 2014-09-14 21:44 - 03195392 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2017-03-02 08:49 - 2013-03-19 02:54 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll
2017-03-02 08:49 - 2013-03-19 01:53 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll
2017-03-02 08:49 - 2013-03-19 00:19 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe
2017-03-02 08:49 - 2012-09-06 14:38 - 00295792 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\volsnap.sys
2017-03-02 08:49 - 2011-08-30 02:21 - 14164480 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2017-03-02 08:49 - 2011-08-30 01:28 - 12868096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2017-03-02 08:49 - 2011-04-09 03:58 - 00142336 _____ (Microsoft Corporation) C:\Windows\system32\poqexec.exe
2017-03-02 08:49 - 2011-04-09 02:56 - 00123904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\poqexec.exe
2017-03-02 08:49 - 2011-01-26 03:53 - 00265088 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgmms1.sys
2017-03-02 08:49 - 2010-11-02 02:18 - 00229888 _____ (Microsoft Corporation) C:\Windows\system32\XpsRasterService.dll
2017-03-02 08:49 - 2010-11-02 02:12 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\d3d10_1.dll
2017-03-02 08:49 - 2010-11-02 01:41 - 00135168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XpsRasterService.dll
2017-03-02 08:49 - 2010-11-02 01:35 - 00161792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10_1.dll
2017-03-02 08:49 - 2010-05-23 05:35 - 00206848 _____ (Microsoft Corporation) C:\Windows\system32\mfps.dll
2017-03-02 08:49 - 2010-03-24 03:59 - 01736608 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2017-03-02 08:49 - 2010-03-24 03:37 - 01289528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2017-03-02 08:49 - 2010-01-19 06:05 - 00424960 _____ (Microsoft Corporation) C:\Windows\system32\secproc.dll
2017-03-02 08:49 - 2010-01-19 06:05 - 00422912 _____ (Microsoft Corporation) C:\Windows\system32\secproc_isv.dll
2017-03-02 08:49 - 2010-01-19 06:05 - 00121856 _____ (Microsoft Corporation) C:\Windows\system32\secproc_ssp_isv.dll
2017-03-02 08:49 - 2010-01-19 06:05 - 00121856 _____ (Microsoft Corporation) C:\Windows\system32\secproc_ssp.dll
2017-03-02 08:49 - 2010-01-19 06:00 - 00357888 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_isv.exe
2017-03-02 08:49 - 2010-01-19 06:00 - 00356352 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate.exe
2017-03-02 08:49 - 2010-01-19 06:00 - 00306688 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_ssp.exe
2017-03-02 08:49 - 2010-01-19 06:00 - 00305152 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_ssp_isv.exe
2017-03-02 08:49 - 2010-01-18 20:29 - 00369152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc.dll
2017-03-02 08:49 - 2010-01-18 20:29 - 00365568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_isv.dll
2017-03-02 08:49 - 2010-01-18 20:29 - 00085504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_ssp_isv.dll
2017-03-02 08:49 - 2010-01-18 20:29 - 00085504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_ssp.dll
2017-03-02 08:49 - 2010-01-18 20:28 - 00324608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_isv.exe
2017-03-02 08:49 - 2010-01-18 20:28 - 00320512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate.exe
2017-03-02 08:49 - 2010-01-18 20:28 - 00280064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_ssp.exe
2017-03-02 08:49 - 2010-01-18 20:28 - 00277504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_ssp_isv.exe
2017-03-02 08:49 - 2009-10-31 03:34 - 02870272 _____ (Microsoft Corporation) C:\Windows\explorer.exe
2017-03-02 08:49 - 2009-10-31 02:45 - 02614272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\explorer.exe
2017-03-02 08:49 - 2009-10-28 03:24 - 00389632 _____ (Microsoft Corporation) C:\Windows\system32\winlogon.exe
2017-03-02 08:46 - 2016-06-25 13:03 - 00304128 _____ (Microsoft Corporation) C:\Windows\system32\EOSNotify.exe
2017-03-02 08:22 - 2017-03-02 08:22 - 14749120 _____ (Microsoft Corporation) C:\Users\atendimento\Downloads\vc_redist.x64.exe
2017-03-01 17:20 - 2017-03-01 17:20 - 00000000 ___RD C:\Program Files (x86)\Skype
2017-03-01 17:20 - 2017-03-01 17:20 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
2017-02-27 16:55 - 2017-02-27 16:55 - 00000000 ____D C:\Users\atendimento\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox
2017-02-25 08:09 - 2017-02-25 08:09 - 00000000 ____H C:\Windows\system32\Drivers\Msft_User_WUDFUsbccidDriver_01_09_00.Wdf
2017-02-25 08:04 - 2017-02-25 08:04 - 00000000 ____D C:\Users\atendimento\Desktop\Windows 7(x64)
2017-02-24 14:33 - 2017-02-24 14:33 - 31087975 _____ C:\Users\atendimento\Downloads\Upg Truck 5.0.2.8 Gdb_4752.rar
2017-02-24 14:33 - 2017-02-24 14:33 - 31087975 _____ C:\Users\atendimento\Desktop\Upg Truck 5.0.2.8 Gdb_4752.rar
2017-02-24 14:33 - 2017-02-20 17:12 - 31117222 _____ (Precisa Fabrica de Software ) C:\Users\atendimento\Desktop\Upg Truck 5.0.2.8 Gdb_4752.exe
2017-02-21 15:59 - 2017-02-21 15:59 - 00005378 _____ C:\Users\atendimento\Downloads\bARs2POB6GE&feature
2017-02-21 10:08 - 2017-02-21 10:07 - 00000144 _____ C:\Users\atendimento\Desktop\ATIVACAO FARAO.ATV
2017-02-20 08:56 - 2017-02-20 08:56 - 00000000 ____D C:\Users\atendimento\Documents\SideSync
2017-02-17 16:32 - 2017-02-17 16:32 - 02468792 _____ C:\Users\atendimento\Downloads\ShowMyPC3510 (1).exe
2017-02-17 16:32 - 2017-02-17 16:32 - 00001320 _____ C:\Users\atendimento\Desktop\ShowMyPC.lnk
2017-02-17 09:16 - 2017-02-17 09:16 - 00003144 _____ C:\Windows\System32\Tasks\{44504BBF-A235-4052-9A2D-1815A1282B77}
2017-02-11 10:08 - 2017-02-11 10:08 - 00000543 _____ C:\Users\atendimento\Downloads\twrp-3.0.2-0-m8.img.asc
2017-02-11 10:05 - 2017-02-11 10:20 - 1257586679 _____ (Google Inc.) C:\Users\atendimento\Downloads\Não confirmado 962332.crdownload
2017-02-11 09:32 - 2017-02-11 09:32 - 06357038 _____ C:\Users\atendimento\Downloads\CWM 6.0.3 Galaxy Core 2.rar
2017-02-09 08:06 - 2017-02-09 08:06 - 00000000 ____D C:\Users\atendimento\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Aplicativos do Google Chrome
2017-02-08 10:23 - 2017-02-08 10:23 - 00016081 _____ C:\Users\atendimento\Downloads\nota_lodo_050.pdf
==================== Um Mês Modificados arquivos e pastas ========
(Se uma entrada for incluída na fixlist, o arquivo/pasta será movido.)
2017-03-08 09:05 - 2016-06-15 14:05 - 00000000 ____D C:\Users\Todos os Usuários\{08D1CDB2-8293-4774-0455-D9369E1752F8}
2017-03-08 09:05 - 2016-06-15 14:05 - 00000000 ____D C:\ProgramData\{08D1CDB2-8293-4774-0455-D9369E1752F8}
2017-03-08 08:16 - 2015-06-19 09:35 - 00001054 _____ C:\Windows\Tasks\DropboxUpdateTaskUserS-1-5-21-417772167-308150910-200703222-1000UA.job
2017-03-08 07:57 - 2015-02-20 16:54 - 00000000 ____D C:\Users\Todos os Usuários\firebird
2017-03-08 07:57 - 2015-02-20 16:54 - 00000000 ____D C:\ProgramData\firebird
2017-03-08 07:56 - 2016-11-16 12:54 - 00000000 ____D C:\Users\atendimento\AppData\LocalLow\Mozilla
2017-03-08 06:11 - 2016-06-15 14:05 - 00000000 ____D C:\Users\atendimento\AppData\Roaming\WeatherTool
2017-03-07 18:16 - 2015-06-19 09:35 - 00001002 _____ C:\Windows\Tasks\DropboxUpdateTaskUserS-1-5-21-417772167-308150910-200703222-1000Core.job
2017-03-07 18:14 - 2016-04-06 09:21 - 00000000 ____D C:\Users\Todos os Usuários\GbPlugin
2017-03-07 18:14 - 2016-04-06 09:21 - 00000000 ____D C:\ProgramData\GbPlugin
2017-03-07 13:21 - 2009-07-14 01:45 - 00020512 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2017-03-07 13:21 - 2009-07-14 01:45 - 00020512 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2017-03-07 13:16 - 2015-02-20 16:28 - 00003758 _____ C:\Windows\System32\Tasks\AutoKMS
2017-03-07 10:05 - 2009-07-14 00:20 - 00000000 ____D C:\Windows\inf
2017-03-07 09:45 - 2016-09-16 14:02 - 00000000 ____D C:\Users\atendimento\AppData\Local\Samsung
2017-03-07 09:40 - 2016-12-19 13:14 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Samsung
2017-03-07 09:39 - 2016-09-16 11:13 - 00000000 ____D C:\Users\Todos os Usuários\Samsung
2017-03-07 09:39 - 2016-09-16 11:13 - 00000000 ____D C:\ProgramData\Samsung
2017-03-07 09:39 - 2016-09-16 11:13 - 00000000 ____D C:\Program Files (x86)\Samsung
2017-03-07 09:39 - 2015-03-02 14:07 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2017-03-06 13:20 - 2009-07-20 21:27 - 00703582 _____ C:\Windows\system32\prfh0416.dat
2017-03-06 13:20 - 2009-07-20 21:27 - 00146368 _____ C:\Windows\system32\prfc0416.dat
2017-03-06 13:20 - 2009-07-14 02:13 - 01629080 _____ C:\Windows\system32\PerfStringBackup.INI
2017-03-06 13:18 - 2015-02-20 17:07 - 00000000 ___RD C:\Users\atendimento\Dropbox
2017-03-06 13:16 - 2016-04-06 09:21 - 00000000 ____D C:\Program Files (x86)\GbPlugin
2017-03-06 13:15 - 2009-07-14 02:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2017-03-06 11:20 - 2015-02-20 16:50 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Solution
2017-03-06 08:25 - 2017-01-09 08:21 - 00000000 ____D C:\Program Files\Samsung
2017-03-02 15:17 - 2009-07-14 01:45 - 00501720 _____ C:\Windows\system32\FNTCACHE.DAT
2017-03-02 10:24 - 2015-02-20 16:22 - 01596832 _____ C:\Windows\SysWOW64\PerfStringBackup.INI
2017-03-02 09:40 - 2015-02-20 15:50 - 00000000 ____D C:\Program Files (x86)\Intel
2017-03-02 09:09 - 2015-02-20 16:54 - 00000000 ____D C:\TMP
2017-03-02 08:23 - 2016-05-13 16:24 - 00000000 ____D C:\Users\Todos os Usuários\Package Cache
2017-03-02 08:23 - 2016-05-13 16:24 - 00000000 ____D C:\ProgramData\Package Cache
2017-03-01 17:20 - 2015-02-23 08:11 - 00000000 ____D C:\Users\atendimento\AppData\Roaming\Skype
2017-03-01 17:20 - 2015-02-23 08:10 - 00000000 ____D C:\Users\Todos os Usuários\Skype
2017-03-01 17:20 - 2015-02-23 08:10 - 00000000 ____D C:\ProgramData\Skype
2017-03-01 14:32 - 2016-12-12 10:35 - 00000000 ____D C:\SOLUTION
2017-03-01 13:31 - 2015-10-21 10:38 - 00000000 ____D C:\Users\atendimento\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Centrun - Controle de chamados
2017-02-27 16:56 - 2015-02-20 16:32 - 00000000 ____D C:\Users\atendimento\AppData\Roaming\Dropbox
2017-02-24 14:34 - 2015-10-28 16:14 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Truck
2017-02-23 08:38 - 2015-11-19 07:10 - 00002441 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk
2017-02-17 09:12 - 2016-09-02 10:13 - 00000000 ____D C:\Users\Todos os Usuários\VMware
2017-02-17 09:12 - 2016-09-02 10:13 - 00000000 ____D C:\ProgramData\VMware
2017-02-17 09:11 - 2016-09-02 10:19 - 00000000 ____D C:\Users\atendimento\AppData\Roaming\VMware
2017-02-13 08:00 - 2016-09-16 11:17 - 00000000 ____D C:\Users\atendimento\AppData\Roaming\Samsung
2017-02-13 07:56 - 2016-05-31 13:29 - 00000000 ____D C:\Program Files (x86)\LG Electronics
2017-02-13 07:44 - 2015-05-21 09:26 - 00004180 _____ C:\Windows\System32\Tasks\avast! Emergency Update
2017-02-11 09:22 - 2017-02-01 08:04 - 00000000 ____D C:\Users\atendimento\.nbi
2017-02-11 08:29 - 2009-07-14 00:20 - 00000000 ____D C:\Windows\ModemLogs
2017-02-08 12:52 - 2017-01-02 13:25 - 00028376 _____ (GAS Tecnologia) C:\Windows\system32\Drivers\wsddfac.sys
2017-02-06 19:19 - 2015-02-20 16:18 - 00002193 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
==================== Arquivos na raiz de alguns diretórios =======
2016-12-21 14:35 - 2016-12-21 14:35 - 0000725 _____ () C:\Users\atendimento\AppData\Local\recently-used.xbel
2008-02-05 13:28 - 2008-02-05 13:28 - 0000051 _____ () C:\Users\atendimento\AppData\Local\setup.txt
2015-11-17 10:19 - 2015-11-17 10:19 - 0000057 _____ () C:\ProgramData\Ament.ini
Alguns arquivos em TEMP:
====================
2017-02-11 09:22 - 2017-02-11 09:22 - 0005120 _____ () C:\Users\atendimento\AppData\Local\Temp\nbi-cleaner4724490336596975868.exe
2012-10-01 21:44 - 2012-10-01 21:44 - 0178824 ____R (Microsoft Corporation) C:\Users\atendimento\AppData\Local\Temp\ose00000.exe
2006-05-24 14:10 - 2006-05-24 14:10 - 0455600 ____R (Macrovision Corporation) C:\Users\atendimento\AppData\Local\Temp\_is1700.exe
==================== Bamital & volsnap ======================
(Não há correção automática para arquivos que não passaram na verificação.)
C:\Windows\system32\winlogon.exe => O arquivo é assinado digitalmente
C:\Windows\system32\wininit.exe => O arquivo é assinado digitalmente
C:\Windows\SysWOW64\wininit.exe => O arquivo é assinado digitalmente
C:\Windows\explorer.exe => O arquivo é assinado digitalmente
C:\Windows\SysWOW64\explorer.exe => O arquivo é assinado digitalmente
C:\Windows\system32\svchost.exe => O arquivo é assinado digitalmente
C:\Windows\SysWOW64\svchost.exe => O arquivo é assinado digitalmente
C:\Windows\system32\services.exe => O arquivo é assinado digitalmente
C:\Windows\system32\User32.dll => O arquivo é assinado digitalmente
C:\Windows\SysWOW64\User32.dll => O arquivo é assinado digitalmente
C:\Windows\system32\userinit.exe => O arquivo é assinado digitalmente
C:\Windows\SysWOW64\userinit.exe => O arquivo é assinado digitalmente
C:\Windows\system32\rpcss.dll => O arquivo é assinado digitalmente
C:\Windows\system32\dnsapi.dll => O arquivo é assinado digitalmente
C:\Windows\SysWOW64\dnsapi.dll => O arquivo é assinado digitalmente
C:\Windows\system32\Drivers\volsnap.sys => O arquivo é assinado digitalmente
LastRegBack: 2017-03-06 12:19
==================== Fim de FRST.txt ============================