Resultado do exame da Farbar Recovery Scan Tool (FRST) (x64) Versão: 15-03-2017
Executado por Amaral (administrador) em AMARAL-PC (17-03-2017 08:45:03)
Executando a partir de C:\Users\Amaral\Desktop
Perfis Carregados: Amaral (Perfis Disponíveis: Amaral)
Platform: Windows 7 Professional (X64) Idioma: Português (Brasil)
Internet Explorer Versão 8 (Navegador padrão: Chrome)
Modo da Inicialização: Normal
Tutorial da Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processos (Whitelisted) =================

(Se uma entrada for incluída na fixlist, o processo será fechado. O arquivo não será movido.)

(Lenovo.) C:\Windows\System32\ibmpmsvc.exe
(GAS Tecnologia) C:\Program Files (x86)\GbPlugin\GbpSv.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe
(Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
(GAS Tecnologia LTDA) C:\Program Files\Diebold\Warsaw\core.exe
(Microsoft Corporation) C:\Windows\System32\LogonUI.exe
(GAS Tecnologia) C:\Program Files (x86)\GbPlugin\GbpSv.exe
(SlimWare Utilities, Inc.) C:\Program Files (x86)\SlimDrivers\SlimDrivers.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Apple Inc.) C:\Program Files\iTunes\iTunesHelper.exe
(GAS Tecnologia LTDA) C:\Program Files\Diebold\Warsaw\core.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudPhotos.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(BitTorrent Inc.) C:\Users\Amaral\AppData\Roaming\uTorrent\uTorrent.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe
(BitTorrent Inc.) C:\Users\Amaral\AppData\Roaming\uTorrent\updates\3.4.9_43388\utorrentie.exe
(BitTorrent Inc.) C:\Users\Amaral\AppData\Roaming\uTorrent\updates\3.4.9_43388\utorrentie.exe
(Apple, Inc.) C:\Program Files (x86)\Common Files\Apple\Apple Application Support\secd.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IMSS\PrivacyIconClient.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

==================== Registro (Whitelisted) ====================

(Se uma entrada for incluída na fixlist, o ítem no Registro será restaurado para o padrão ou removido. O arquivo não será movido.)

HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2874984 2016-06-17] (Synaptics Incorporated)
HKLM\...\Run: [SmartAudio] => C:\Program Files\CONEXANT\SAII\SAIICpl.exe [307768 2009-11-15] ()
HKLM\...\Run: [iTunesHelper] => C:\Program Files\iTunes\iTunesHelper.exe [176440 2017-01-19] (Apple Inc.)
HKLM\...\Run: [Diebold - Warsaw] => C:\Program Files\Diebold\Warsaw\core.exe [925744 2016-06-23] (GAS Tecnologia LTDA)
HKLM-x32\...\Run: [IMSS] => C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IMSS\PIconStartup.exe [111928 2013-05-03] (Intel Corporation)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [587288 2016-12-12] (Oracle Corporation)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
Winlogon\Notify\ GbPluginCef: C:\Program Files (x86)\GbPlugin\gbiehCef.dll [2016-08-10] (Caixa Economica Federal)
Winlogon\Notify\ScCertProp-x32: wlnotify.dll [X]
HKU\S-1-5-21-824986391-3307490114-3587615551-1000\...\Run: [iCloudServices] => C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe [67384 2017-01-17] (Apple Inc.)
HKU\S-1-5-21-824986391-3307490114-3587615551-1000\...\Run: [iCloudPhotos] => C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudPhotos.exe [356664 2017-01-17] (Apple Inc.)
HKU\S-1-5-21-824986391-3307490114-3587615551-1000\...\Run: [uTorrent] => C:\Users\Amaral\AppData\Roaming\uTorrent\uTorrent.exe [2405056 2017-03-16] (BitTorrent Inc.)
ShellExecuteHooks-x32: GbPluginObj Class - {E37CB5F0-51F5-4395-A808-5FA49E399003} - C:\Program Files (x86)\GbPlugin\gbiehcef.dll [1903328 2016-08-10] (Caixa Economica Federal)
GroupPolicy\User: Restrição <======= ATENÇÃO

==================== Internet (Whitelisted) ====================

(Se um ítem for incluído na fixlist, sendo um ítem do Registro, será removido ou restaurado para o padrão.)

Tcpip\Parameters: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{AADB3781-A7F1-4B34-A81A-738CCA8CCAA0}: [DhcpNameServer] 192.168.0.1

Internet Explorer:
==================
HKU\S-1-5-21-824986391-3307490114-3587615551-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.com.br/
HKU\S-1-5-21-824986391-3307490114-3587615551-1000\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://www.msn.com/pt-br/?ocid=iehp
BHO: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\Office15\OCHelper.dll [2012-10-01] (Microsoft Corporation)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office15\URLREDIR.DLL [2012-10-01] (Microsoft Corporation)
BHO: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office\Office15\GROOVEEX.DLL [2012-10-01] (Microsoft Corporation)
BHO-x32: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll [2012-10-01] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_121\bin\ssv.dll [2017-02-20] (Oracle Corporation)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office15\URLREDIR.DLL [2012-10-01] (Microsoft Corporation)
BHO-x32: GbIehObj Class -> {C41A1C0E-EA6C-11D4-B1B8-444553540003} -> C:\Program Files (x86)\GbPlugin\gbiehcef.dll [2016-08-10] (Caixa Economica Federal)
BHO-x32: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\Office15\GROOVEEX.DLL [2012-10-01] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_121\bin\jp2ssv.dll [2017-02-20] (Oracle Corporation)
Handler: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office\Office15\MSOSB.DLL [2012-10-01] (Microsoft Corporation)
Filter: deflate - {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\Windows\system32\urlmon.dll [2009-07-13] (Microsoft Corporation)
Filter-x32: deflate - {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\Windows\SysWOW64\urlmon.dll [2009-07-13] (Microsoft Corporation)
Filter: gzip - {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\Windows\system32\urlmon.dll [2009-07-13] (Microsoft Corporation)
Filter-x32: gzip - {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\Windows\SysWOW64\urlmon.dll [2009-07-13] (Microsoft Corporation)

FireFox:
========
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~1\MICROS~1\Office15\NPSPWRAP.DLL [2012-10-01] (Microsoft Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=10.4.0 -> C:\Windows\SysWOW64\npDeployJava1.dll [2017-02-20] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.121.2 -> C:\Program Files (x86)\Java\jre1.8.0_121\bin\plugin2\npjp2.dll [2017-02-20] (Oracle Corporation)
FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files (x86)\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2012-10-01] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office15\NPSPWRAP.DLL [2012-10-01] (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.32.7\npGoogleUpdate3.dll [2017-02-20] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.32.7\npGoogleUpdate3.dll [2017-02-20] (Google Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2017-01-17] (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npMeetingJoinPluginOC.dll [2012-10-01] (Microsoft Corporation)

Chrome:
=======
CHR HomePage: Default -> hxxp://www.google.com.br/
CHR StartupUrls: Default -> "hxxp://www.google.com.br/"
CHR Profile: C:\Users\Amaral\AppData\Local\Google\Chrome\User Data\Default [2017-03-17]
CHR Extension: (Google Apresentações) - C:\Users\Amaral\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2017-02-20]
CHR Extension: (Google Docs) - C:\Users\Amaral\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2017-02-20]
CHR Extension: (Google Drive) - C:\Users\Amaral\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2017-02-20]
CHR Extension: (YouTube) - C:\Users\Amaral\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2017-02-20]
CHR Extension: (Planilhas do Google) - C:\Users\Amaral\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2017-02-20]
CHR Extension: (Documentos Google off-line) - C:\Users\Amaral\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2017-02-20]
CHR Extension: (Pagamentos da Chrome Web Store) - C:\Users\Amaral\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2017-03-10]
CHR Extension: (Gmail) - C:\Users\Amaral\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2017-02-20]
CHR Extension: (Chrome Media Router) - C:\Users\Amaral\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2017-02-20]
CHR HKLM-x32\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj] - hxxps://clients2.google.com/service/update2/crx

==================== Serviços (Whitelisted) ====================

(Se uma entrada for incluída na fixlist, será removida do Registro. O arquivo não será movido, a menos que seja colocado separadamente.)

R2 Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [83768 2016-09-22] (Apple Inc.)
R2 GbpSv; C:\Program Files (x86)\GbPlugin\GbpSv.exe [631520 2016-08-10] (GAS Tecnologia)
R2 Warsaw Technology; C:\Program Files\Diebold\Warsaw\core.exe [925744 2016-06-23] (GAS Tecnologia LTDA)
R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2009-07-13] (Microsoft Corporation)

===================== Drivers (Whitelisted) ======================

(Se uma entrada for incluída na fixlist, será removida do Registro. O arquivo não será movido, a menos que seja colocado separadamente.)

R3 GBPRCM; C:\Program Files (x86)\GbPlugin\gbprcm64.sys [29912 2016-08-10] (GAS Tecnologia)
R3 SmbDrvI; C:\Windows\System32\DRIVERS\Smb_driver_Intel.sys [41576 2016-06-17] (Synaptics Incorporated)
S3 SWDUMon; C:\Windows\System32\DRIVERS\SWDUMon.sys [16056 2017-03-16] (SlimWare Utilities, Inc.)
R3 Warsaw_PP; C:\Program Files (x86)\GbPlugin\wsftprp64.sys [24792 2016-08-10] (GAS Tecnologia LTDA)
R1 wsddfac; C:\Windows\System32\drivers\wsddfac.sys [101080 2017-03-16] (GAS Tecnologia)
R1 wsddntf; C:\Windows\System32\DRIVERS\wsddntf.sys [36984 2016-06-16] (GAS Tecnologia)
R1 wsddpp; C:\Windows\system32\drivers\wsddpp.sys [97376 2016-06-08] (GAS Tecnologia)
S1 gbpddfac; system32\drivers\gbpddfac64.sys [X]
S0 gbpddreg; system32\drivers\gbpddreg64.sys [X]

==================== NetSvcs (Whitelisted) ===================

(Se uma entrada for incluída na fixlist, será removida do Registro. O arquivo não será movido, a menos que seja colocado separadamente.)


==================== Três Meses Criados arquivos e pastas ========

(Se uma entrada for incluída na fixlist, o arquivo/pasta será movido.)

2017-03-17 08:45 - 2017-03-17 08:45 - 00013218 _____ C:\Users\Amaral\Desktop\FRST.txt
2017-03-17 08:43 - 2017-03-17 08:45 - 00000000 ____D C:\FRST
2017-03-17 08:41 - 2017-03-17 08:41 - 02424832 _____ (Farbar) C:\Users\Amaral\Desktop\FRST64.exe
2017-03-17 08:31 - 2017-03-17 08:34 - 00000000 ____D C:\Windows\system32\MRT
2017-03-17 08:30 - 2017-03-17 08:30 - 138020592 ____C (Microsoft Corporation) C:\Windows\system32\MRT.exe
2017-03-17 08:29 - 2017-03-17 08:29 - 00000000 ____D C:\Windows\system32\SPReview
2017-03-17 08:28 - 2017-03-17 08:28 - 00000000 ____D C:\Windows\system32\EventProviders
2017-03-17 07:42 - 2017-03-17 07:42 - 00059216 _____ C:\Users\Amaral\Desktop\radiador.webp
2017-03-17 01:33 - 2017-03-17 03:06 - 766524370 ____R C:\Users\Amaral\Downloads\HTGAWM.S03E11.720p.WEB-RMZ.DUAL.DUBLASERIES.TV.mkv
2017-03-17 00:29 - 2017-03-17 02:09 - 770501015 ____R C:\Users\Amaral\Downloads\HTGAWM.S03E10.720p.WEB-RMZ.DUAL.DUBLASERIES.TV.mkv
2017-03-17 00:18 - 2017-03-17 00:18 - 00000000 ____D C:\Users\Amaral\Downloads\HTGAWM.S03E09.TORRENTDOSFILMES.COM
2017-03-16 22:54 - 2017-03-16 22:54 - 00000000 ____D C:\Users\Amaral\Downloads\HTGAWM.S03E08.TORRENTDOSFILMES.COM
2017-03-16 22:34 - 2016-06-25 13:03 - 00304128 _____ (Microsoft Corporation) C:\Windows\system32\EOSNotify.exe
2017-03-16 22:34 - 2011-04-09 03:58 - 00142336 _____ (Microsoft Corporation) C:\Windows\system32\poqexec.exe
2017-03-16 22:34 - 2011-04-09 03:45 - 05509504 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2017-03-16 22:34 - 2011-04-09 03:13 - 03957632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2017-03-16 22:34 - 2011-04-09 03:13 - 03901824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2017-03-16 22:34 - 2011-04-09 02:56 - 00123904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\poqexec.exe
2017-03-16 22:13 - 2017-03-16 22:14 - 00000000 ____D C:\Users\Amaral\Downloads\HTGAWM.E03a05.WWW.TORRENTDOSFILMES.COM
2017-03-16 22:13 - 2017-03-16 22:14 - 00000000 ____D C:\Users\Amaral\Downloads\How.To.Get.Away.With.Murder.S03.E01.02.TORRENTDOSFILMES.COM
2017-03-16 22:13 - 2017-03-16 22:13 - 00000000 ____D C:\Users\Amaral\Downloads\HTGAWM.S03E07.TORRENTDOSFILMES
2017-03-16 22:13 - 2017-03-16 22:13 - 00000000 ____D C:\Users\Amaral\Downloads\HTGAWM.S03E06.TORRENTDOSFILMES.COM
2017-03-16 21:48 - 2017-03-16 21:50 - 14749120 _____ (Microsoft Corporation) C:\Users\Amaral\Desktop\vc_redist.x64.exe
2017-03-16 21:26 - 2017-03-17 08:34 - 00000000 ____D C:\Users\Todos os Usuários\Package Cache
2017-03-16 21:26 - 2017-03-17 08:34 - 00000000 ____D C:\ProgramData\Package Cache
2017-03-16 21:24 - 2017-03-17 08:38 - 00000000 ____D C:\Program Files (x86)\Kodi
2017-03-16 20:52 - 2017-03-16 21:17 - 83846743 _____ (XBMC-Foundation) C:\Users\Amaral\Desktop\kodi-17.1-Krypton_rc1.exe
2017-03-16 19:58 - 2017-03-16 20:44 - 00000000 ____D C:\Users\Amaral\Downloads\Game.of.Thrones.S06E09.HDTV.x264-KILLERS[rarbg]
2017-03-16 19:32 - 2017-03-16 19:32 - 00000000 ____D C:\Users\Amaral\Downloads\Game.of.Thrones.S06E08.HDTV.x264-AVS.Dual.ComandoFilmes
2017-03-16 19:16 - 2017-03-16 19:16 - 00000000 ____D C:\Users\Amaral\Downloads\Game.of.Thrones.S06E07.HDTV.x264-.Dual.ComandoFilmes
2017-03-16 19:08 - 2017-03-16 19:08 - 00000000 ____D C:\Users\Amaral\Downloads\Game of Thrones S06E06 HDTV x264 - ComandoFilmes -Dual Audio
2017-03-16 18:57 - 2017-03-16 18:57 - 00000000 ____D C:\Users\Amaral\Downloads\Game.of.thrones.S06E05.HDTV.XviD.Dual.Audio
2017-03-16 17:21 - 2017-03-16 17:21 - 00000000 ____D C:\Users\Amaral\Downloads\Game.of.Thrones.S06E10.HDTV.x264-AVS.Dual.ComandoFilmes
2017-03-16 17:20 - 2017-03-16 17:20 - 00000000 ____D C:\Users\Amaral\Downloads\Game of Thrones S06E04 HDTV x264 - ComandoFilmes - Dublado
2017-03-16 17:20 - 2017-03-16 17:20 - 00000000 ____D C:\Users\Amaral\Downloads\Game of Thrones S06E03 HDTV ComandoFilmes Dublado
2017-03-16 17:20 - 2017-03-16 17:20 - 00000000 ____D C:\Users\Amaral\Downloads\Game of Thrones S06E02 480p HDTV x264 - ComandoFilmes - Dublado
2017-03-16 17:20 - 2017-03-16 17:20 - 00000000 ____D C:\Users\Amaral\Downloads\Game of Thrones S06E01 480p HDTV Dublado ComandoFilmes
2017-03-16 17:14 - 2017-03-16 22:09 - 00000000 ____D C:\Users\Amaral\Downloads\Game.Of.Thrones.S05.2015.720p.Dual-WOLVERDONFILMES.COM
2017-03-16 17:10 - 2017-03-16 22:38 - 00000000 ____D C:\Users\Amaral\AppData\LocalLow\uTorrent
2017-03-16 17:10 - 2017-03-16 17:10 - 00002606 _____ C:\Users\Amaral\Desktop\µTorrent.lnk
2017-03-16 17:09 - 2017-03-17 08:45 - 00000000 ____D C:\Users\Amaral\AppData\Roaming\uTorrent
2017-03-16 08:13 - 2017-03-16 08:13 - 00107820 _____ C:\Users\Amaral\Downloads\SELECT - Car List.pdf
2017-03-15 18:48 - 2017-03-15 18:48 - 00063669 _____ C:\Users\Amaral\Desktop\Pagamento serviço Vidraçaria.pdf
2017-03-14 21:25 - 2017-03-14 21:25 - 00133676 _____ C:\Users\Amaral\Desktop\Apartamento 04-17.pdf
2017-03-14 21:23 - 2017-03-14 21:23 - 00077345 _____ C:\Users\Amaral\Desktop\Fatura Visa 03-17.pdf
2017-03-14 21:23 - 2017-03-14 21:23 - 00062816 _____ C:\Users\Amaral\Desktop\Pagamento Visa 03-17.pdf
2017-03-14 16:17 - 2017-03-14 16:17 - 00040232 _____ C:\Users\Amaral\Downloads\fernando-amaral-da-silva-b2c3d6f6de290f8e674769eae080187b1489519026758.pdf
2017-03-14 09:01 - 2017-03-14 09:17 - 00000000 ____D C:\Users\Amaral\Desktop\Concurso Correios
2017-03-13 15:52 - 2017-03-13 15:52 - 00064072 _____ C:\Users\Amaral\Desktop\Quitação Calibra.pdf
2017-03-10 20:42 - 2017-03-10 20:42 - 00561609 _____ C:\Users\Amaral\Desktop\EDITAL SENAC.pdf
2017-03-08 12:11 - 2017-03-08 12:11 - 00074756 _____ C:\Users\Amaral\Desktop\Informe Rendimento Apartamento.pdf
2017-03-06 18:58 - 2017-03-06 18:58 - 00003444 _____ C:\Users\Amaral\Desktop\BOLETO FACULDADE 10 03.html
2017-03-06 18:58 - 2017-03-06 18:58 - 00000000 ____D C:\Users\Amaral\Desktop\BOLETO FACULDADE 10 03_files
2017-03-06 18:57 - 2017-03-06 18:57 - 00003484 _____ C:\Users\Amaral\Downloads\comprovante.html
2017-03-06 11:10 - 2017-03-06 12:13 - 00000000 ____D C:\Users\Amaral\Desktop\Nova pasta
2017-03-06 09:29 - 2017-03-06 12:28 - 00084219 ____N C:\Users\Amaral\Desktop\Carta de Apresentação Fernando Amaral.pdf
2017-03-06 09:29 - 2017-03-06 12:28 - 00054874 ____N C:\Users\Amaral\Desktop\Curriculo Fernando Amaral.pdf
2017-02-24 11:09 - 2016-10-26 17:29 - 00485032 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
2017-02-22 23:58 - 2017-02-22 23:58 - 00066773 _____ C:\Users\Amaral\Downloads\nfe_1098942_72.pdf
2017-02-22 23:39 - 2017-02-22 23:47 - 00445440 _____ C:\Users\Amaral\Desktop\FOLHA DE PAGAMENTO - FECHAMENTO FEVEREIRO 2017.xls
2017-02-22 23:38 - 2017-02-22 23:38 - 00446464 _____ C:\Users\Amaral\Downloads\FOLHA DE PAGAMENTO - FECHAMENTO JANEIRO 2017.xls
2017-02-22 23:24 - 2017-02-22 23:24 - 00063187 _____ C:\Users\Amaral\Desktop\RELATORIO VALE TRANSPORTE.pdf
2017-02-22 23:24 - 2017-02-22 23:24 - 00020320 _____ C:\Users\Amaral\Desktop\BOLETO VALE TRANSPORTE.pdf
2017-02-22 22:18 - 2017-02-22 22:20 - 00022143 _____ C:\Users\Amaral\Desktop\TICKETS - RH MARÇO.xlsx
2017-02-22 22:17 - 2017-02-22 22:17 - 00000000 ____D C:\Users\Amaral\Documents\Modelos Personalizados do Office
2017-02-22 22:03 - 2017-02-22 22:03 - 00021854 _____ C:\Users\Amaral\Downloads\TICKETS - RH.xlsx
2017-02-22 21:59 - 2017-02-22 21:59 - 00021918 _____ C:\Users\Amaral\Downloads\Tiquetes Contauto - Serra - Taciane JANEIRO 2017.xls
2017-02-22 14:49 - 2017-03-16 22:37 - 00101080 _____ (GAS Tecnologia) C:\Windows\system32\Drivers\wsddfac.sys
2017-02-22 14:49 - 2017-02-22 14:49 - 00001024 _____ C:\.rnd
2017-02-22 14:49 - 2017-02-22 14:49 - 00000000 ___HD C:\Program Files (x86)\GAS Tecnologia
2017-02-22 14:49 - 2017-02-22 14:49 - 00000000 ___HD C:\Program Files (x86)\Diebold
2017-02-22 14:49 - 2017-02-22 14:49 - 00000000 ____D C:\Program Files\Diebold
2017-02-22 14:49 - 2016-06-16 18:43 - 00036984 _____ (GAS Tecnologia) C:\Windows\system32\Drivers\wsddntf.sys
2017-02-22 14:49 - 2016-06-16 18:43 - 00008811 _____ C:\Windows\system32\Drivers\wsddntf.cat
2017-02-22 14:49 - 2016-06-08 18:43 - 00097376 ____N (GAS Tecnologia) C:\Windows\system32\Drivers\wsddpp.sys
2017-02-22 14:48 - 2017-02-22 14:48 - 00000000 ____D C:\Users\Todos os Usuários\GAS Tecnologia
2017-02-22 14:48 - 2017-02-22 14:48 - 00000000 ____D C:\ProgramData\GAS Tecnologia
2017-02-22 14:47 - 2017-03-16 22:37 - 00000000 ____D C:\Users\Todos os Usuários\GbPlugin
2017-02-22 14:47 - 2017-03-16 22:37 - 00000000 ____D C:\ProgramData\GbPlugin
2017-02-22 14:47 - 2017-03-16 22:37 - 00000000 ____D C:\Program Files (x86)\GbPlugin
2017-02-22 10:45 - 2017-03-10 14:50 - 00000000 ____D C:\Users\Amaral\Desktop\Processo Caixa
2017-02-21 14:47 - 2017-02-21 14:47 - 00105816 _____ C:\Users\Amaral\Downloads\Formulário de Garantia Oakley (1).xlsx
2017-02-21 13:28 - 2017-02-21 14:12 - 00000000 ____D C:\Users\Amaral\Desktop\Fotos e videos Iphone 21.02.17
2017-02-21 13:17 - 2017-02-21 15:10 - 00000000 ____D C:\Users\Amaral\AppData\Local\Apple Inc
2017-02-21 13:16 - 2017-03-10 14:51 - 00000000 ____D C:\Users\Amaral\Documents\Arquivos do Outlook
2017-02-21 13:16 - 2017-03-10 14:50 - 00000000 ____D C:\Users\Amaral\AppData\Local\059606DD-8F8A-45AE-8502-78AE0042E703.aplzod
2017-02-21 13:16 - 2017-03-10 10:49 - 00003424 _____ C:\Windows\System32\Tasks\Apple Diagnostics
2017-02-21 13:15 - 2017-02-21 13:15 - 00000000 ____H C:\Windows\system32\Drivers\Msft_User_WpdMtpDr_01_09_00.Wdf
2017-02-21 13:13 - 2017-02-21 13:13 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iCloud
2017-02-21 09:50 - 2017-02-21 09:50 - 04924180 _____ C:\Users\Amaral\Downloads\ebook-encontrar-barganhas-bolsa.pdf
2017-02-20 18:20 - 2017-02-21 13:27 - 00000000 ____D C:\Users\Amaral\AppData\Roaming\Apple Computer
2017-02-20 18:20 - 2017-02-21 13:21 - 00000000 ____D C:\Users\Amaral\AppData\Local\Apple Computer
2017-02-20 18:20 - 2017-02-20 18:20 - 00001753 _____ C:\Users\Public\Desktop\iTunes.lnk
2017-02-20 18:20 - 2017-02-20 18:20 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes
2017-02-20 18:19 - 2017-02-21 15:10 - 00000000 ____D C:\Users\Amaral\AppData\Local\Apple
2017-02-20 18:19 - 2017-02-20 18:20 - 00000000 ____D C:\Program Files\iTunes
2017-02-20 18:19 - 2017-02-20 18:19 - 00002519 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Apple Software Update.lnk
2017-02-20 18:19 - 2017-02-20 18:19 - 00000000 ____D C:\Windows\System32\Tasks\Apple
2017-02-20 18:19 - 2017-02-20 18:19 - 00000000 ____D C:\Users\Todos os Usuários\Apple Computer
2017-02-20 18:19 - 2017-02-20 18:19 - 00000000 ____D C:\ProgramData\Apple Computer
2017-02-20 18:19 - 2017-02-20 18:19 - 00000000 ____D C:\Program Files\iPod
2017-02-20 18:19 - 2017-02-20 18:19 - 00000000 ____D C:\Program Files\Bonjour
2017-02-20 18:19 - 2017-02-20 18:19 - 00000000 ____D C:\Program Files (x86)\Bonjour
2017-02-20 18:19 - 2017-02-20 18:19 - 00000000 ____D C:\Program Files (x86)\Apple Software Update
2017-02-20 18:18 - 2017-02-21 13:13 - 00000000 ____D C:\Program Files\Common Files\Apple
2017-02-20 18:18 - 2017-02-20 18:19 - 00000000 ____D C:\Users\Todos os Usuários\Apple
2017-02-20 18:18 - 2017-02-20 18:19 - 00000000 ____D C:\ProgramData\Apple
2017-02-20 17:48 - 2017-02-20 17:48 - 00097856 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2017-02-20 17:48 - 2017-02-20 17:48 - 00000000 ____D C:\Users\Amaral\AppData\Roaming\Sun
2017-02-20 17:48 - 2017-02-20 17:48 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2017-02-20 17:47 - 2017-02-20 17:54 - 00000000 ____D C:\Users\Todos os Usuários\Oracle
2017-02-20 17:47 - 2017-02-20 17:54 - 00000000 ____D C:\ProgramData\Oracle
2017-02-20 17:35 - 2017-02-20 13:43 - 00000000 ____D C:\Windows\Panther
2017-02-20 15:31 - 2017-02-20 15:31 - 00000000 ____D C:\Windows\System32\Tasks\OfficeSoftwareProtectionPlatform
2017-02-20 15:31 - 2017-02-20 14:39 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2013
2017-02-20 15:30 - 2017-02-20 15:30 - 00000000 ____D C:\Program Files\Common Files\DESIGNER
2017-02-20 15:30 - 2017-02-20 15:30 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2017-02-20 15:30 - 2017-02-20 15:30 - 00000000 ____D C:\Program Files (x86)\Microsoft SQL Server
2017-02-20 15:30 - 2017-02-20 14:39 - 00000000 ____D C:\Users\Todos os Usuários\regid.1991-06.com.microsoft
2017-02-20 15:30 - 2017-02-20 14:39 - 00000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2017-02-20 15:29 - 2017-02-20 15:30 - 00000000 ____D C:\Program Files\Microsoft SQL Server
2017-02-20 15:29 - 2017-02-20 15:29 - 00000000 ____D C:\Windows\PCHEALTH
2017-02-20 15:28 - 2017-02-20 15:29 - 00000000 ____D C:\Program Files\Microsoft Office
2017-02-20 15:28 - 2017-02-20 15:28 - 00000000 ____D C:\Users\Amaral\AppData\Local\Microsoft Help
2017-02-20 15:28 - 2017-02-20 15:28 - 00000000 ____D C:\Program Files\Microsoft Analysis Services
2017-02-20 15:28 - 2017-02-20 15:28 - 00000000 ____D C:\Program Files (x86)\Microsoft Office
2017-02-20 15:28 - 2017-02-20 15:28 - 00000000 ____D C:\Program Files (x86)\Microsoft Analysis Services
2017-02-20 15:28 - 2017-02-20 14:39 - 00000000 ____D C:\Users\Todos os Usuários\Microsoft Help
2017-02-20 15:27 - 2017-02-20 15:27 - 00000000 __RHD C:\MSOCache
2017-02-20 15:23 - 2017-02-20 15:23 - 01566362 _____ C:\Windows\SysWOW64\PerfStringBackup.INI
2017-02-20 15:22 - 2009-11-25 11:47 - 01942856 _____ (Microsoft Corporation) C:\Windows\system32\dfshim.dll
2017-02-20 15:22 - 2009-11-25 11:47 - 01130824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dfshim.dll
2017-02-20 15:22 - 2009-11-25 11:47 - 00444752 _____ (Microsoft Corporation) C:\Windows\system32\mscoree.dll
2017-02-20 15:22 - 2009-11-25 11:47 - 00320352 _____ (Microsoft Corporation) C:\Windows\system32\PresentationHost.exe
2017-02-20 15:22 - 2009-11-25 11:47 - 00297808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mscoree.dll
2017-02-20 15:22 - 2009-11-25 11:47 - 00295264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PresentationHost.exe
2017-02-20 15:22 - 2009-11-25 11:47 - 00109912 _____ (Microsoft Corporation) C:\Windows\system32\PresentationHostProxy.dll
2017-02-20 15:22 - 2009-11-25 11:47 - 00099176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PresentationHostProxy.dll
2017-02-20 15:22 - 2009-11-25 11:47 - 00049472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netfxperf.dll
2017-02-20 15:22 - 2009-11-25 11:47 - 00048960 _____ (Microsoft Corporation) C:\Windows\system32\netfxperf.dll
2017-02-20 15:14 - 2015-08-24 06:06 - 00156912 _____ (Lenovo.) C:\Windows\system32\ibmpmsvc.exe
2017-02-20 15:14 - 2015-08-24 06:06 - 00082664 _____ (Lenovo.) C:\Windows\system32\ibmpmctl.exe
2017-02-20 15:14 - 2015-08-24 06:06 - 00074432 _____ (Lenovo.) C:\Windows\system32\Drivers\ibmpmdrv.sys
2017-02-20 15:14 - 2015-08-24 06:06 - 00050928 _____ (Lenovo.) C:\Windows\system32\tpinspm.dll
2017-02-20 15:09 - 2017-02-20 15:09 - 00000000 ____H C:\Windows\system32\Drivers\Msft_User_tcwbf_01_09_00.Wdf
2017-02-20 15:09 - 2017-02-20 15:09 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_WinUSB_01009.Wdf
2017-02-20 15:09 - 2017-02-20 15:09 - 00000000 ____D C:\Program Files\AuthenTec
2017-02-20 15:08 - 2013-02-27 07:12 - 02152176 _____ (Microsoft Corporation) C:\Windows\system32\WudfUpdate_01009.dll
2017-02-20 15:08 - 2013-02-27 07:12 - 01002728 _____ (Microsoft Corporation) C:\Windows\system32\WinUsbCoinstaller2.dll
2017-02-20 15:08 - 2013-02-27 07:12 - 00020440 _____ (AuthenTec) C:\Windows\system32\tccoinst.dll
2017-02-20 15:07 - 2017-02-20 15:07 - 00000000 ____D C:\Users\Amaral\AppData\Roaming\WinRAR
2017-02-20 15:07 - 2017-02-20 15:07 - 00000000 ____D C:\Users\Amaral\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
2017-02-20 15:07 - 2017-02-20 15:07 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
2017-02-20 15:07 - 2017-02-20 15:07 - 00000000 ____D C:\Program Files\WinRAR
2017-02-20 15:02 - 2017-02-20 15:02 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\K-Lite Codec Pack
2017-02-20 15:02 - 2013-03-17 13:21 - 03649536 _____ (x264vfw project) C:\Windows\SysWOW64\x264vfw.dll
2017-02-20 15:02 - 2012-06-09 14:21 - 00178688 _____ C:\Windows\SysWOW64\unrar.dll
2017-02-20 15:02 - 2011-12-21 14:14 - 00151552 _____ (fccHandler) C:\Windows\SysWOW64\ac3acm.acm
2017-02-20 15:02 - 2011-12-07 14:32 - 00216064 _____ ( ) C:\Windows\SysWOW64\lagarith.dll
2017-02-20 15:02 - 2011-06-24 11:44 - 00243200 _____ C:\Windows\SysWOW64\xvidvfw.dll
2017-02-20 15:02 - 2011-06-24 11:28 - 00650752 _____ C:\Windows\SysWOW64\xvidcore.dll
2017-02-20 15:01 - 2017-02-20 15:10 - 00000000 ____D C:\Users\Amaral\AppData\Local\Google
2017-02-20 15:01 - 2017-02-20 15:01 - 00002265 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2017-02-20 15:01 - 2017-02-20 15:01 - 00000000 ____D C:\Program Files (x86)\K-Lite Codec Pack
2017-02-20 15:01 - 2013-04-29 15:00 - 00112640 _____ C:\Windows\SysWOW64\ff_vfw.dll
2017-02-20 14:59 - 2017-02-20 17:48 - 00268864 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2017-02-20 14:59 - 2017-02-20 15:01 - 00000000 ____D C:\Program Files (x86)\Google
2017-02-20 14:59 - 2017-02-20 15:00 - 00000000 ____D C:\Program Files (x86)\PDFCreator
2017-02-20 14:59 - 2017-02-20 14:59 - 00003500 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2017-02-20 14:59 - 2017-02-20 14:59 - 00003372 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2017-02-20 14:59 - 2017-02-20 14:59 - 00000000 ____D C:\Users\Todos os Usuários\Sun
2017-02-20 14:59 - 2017-02-20 14:59 - 00000000 ____D C:\Users\Amaral\AppData\Roaming\pdfforge
2017-02-20 14:59 - 2017-02-20 14:59 - 00000000 ____D C:\ProgramData\Sun
2017-02-20 14:59 - 2017-02-20 14:59 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PDFCreator
2017-02-20 14:59 - 2017-02-20 14:58 - 00772552 _____ (Oracle Corporation) C:\Windows\SysWOW64\npDeployJava1.dll
2017-02-20 14:59 - 2017-02-20 14:58 - 00687560 _____ (Oracle Corporation) C:\Windows\SysWOW64\deployJava1.dll
2017-02-20 14:59 - 2013-04-09 15:13 - 00110264 _____ (pdfforge GmbH) C:\Windows\system32\pdfcmon.dll
2017-02-20 14:59 - 2013-01-09 15:52 - 01070152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MSCOMCTL.OCX
2017-02-20 14:59 - 2012-05-05 11:54 - 00137000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MSMAPI32.OCX
2017-02-20 14:59 - 2012-05-05 11:54 - 00023552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MSMPIDE.DLL
2017-02-20 14:58 - 2017-02-20 17:48 - 00000000 ____D C:\Program Files (x86)\Java
2017-02-20 14:57 - 2017-02-20 17:30 - 00004476 _____ C:\Windows\System32\Tasks\Adobe Acrobat Update Task
2017-02-20 14:57 - 2017-02-20 14:59 - 00000000 ____D C:\Users\Amaral\AppData\Local\Deployment
2017-02-20 14:57 - 2017-02-20 14:57 - 00000000 ____D C:\Users\Amaral\AppData\Roaming\Adobe
2017-02-20 14:57 - 2017-02-20 14:57 - 00000000 ____D C:\Users\Amaral\AppData\LocalLow\Sun
2017-02-20 14:57 - 2017-02-20 14:57 - 00000000 ____D C:\Users\Amaral\AppData\LocalLow\Adobe
2017-02-20 14:57 - 2017-02-20 14:57 - 00000000 ____D C:\Users\Amaral\AppData\Local\CEF
2017-02-20 14:57 - 2017-02-20 14:57 - 00000000 ____D C:\Users\Amaral\AppData\Local\Apps\2.0
2017-02-20 14:56 - 2017-02-24 09:44 - 00002441 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk
2017-02-20 14:56 - 2017-02-20 17:30 - 00000000 ____D C:\Users\Todos os Usuários\Adobe
2017-02-20 14:56 - 2017-02-20 17:30 - 00000000 ____D C:\ProgramData\Adobe
2017-02-20 14:56 - 2017-02-20 14:56 - 00000000 ____D C:\Program Files (x86)\Adobe
2017-02-20 14:54 - 2017-02-20 14:57 - 00000000 ____D C:\Users\Amaral\AppData\Local\Adobe
2017-02-20 14:53 - 2017-02-20 14:53 - 00000000 ____D C:\Program Files\CONEXANT
2017-02-20 14:53 - 2010-10-20 01:52 - 01830016 _____ (Conexant Systems Inc.) C:\Windows\system32\CX64AQ17.dll
2017-02-20 14:53 - 2010-08-25 10:46 - 00682624 _____ (Conexant Systems Inc.) C:\Windows\system32\Drivers\CHDRT64.sys
2017-02-20 14:53 - 2010-03-09 07:27 - 00000661 _____ C:\Windows\system32\VoipUpdate.ini
2017-02-20 14:53 - 2010-01-18 22:33 - 00426040 _____ (Conexant Systems, Inc.) C:\Windows\system32\UCI64A52.dll
2017-02-20 14:52 - 2017-02-20 14:52 - 00000000 ____D C:\Program Files (x86)\Ricoh
2017-02-20 14:52 - 2011-04-25 20:13 - 00073216 _____ (REDC) C:\Windows\system32\Drivers\rimspe64.sys
2017-02-20 14:49 - 2017-02-20 14:49 - 00001980 _____ C:\ProgramData\Microsoft\Windows\Start Menu\ScreenHunter 4.0 Free.lnk
2017-02-20 14:49 - 2017-02-20 14:49 - 00000000 ____D C:\Users\Amaral\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Wisdom-soft ScreenHunter Free
2017-02-20 14:49 - 2017-02-20 14:49 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Wisdom-soft ScreenHunter Free
2017-02-20 14:49 - 2017-02-20 14:49 - 00000000 ____D C:\Program Files (x86)\Wisdom-soft ScreenHunter Free
2017-02-20 14:40 - 2017-02-20 14:40 - 00000000 _RSHD C:\Office Activation Technologies
2017-02-20 14:33 - 2017-02-20 14:52 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2017-02-20 14:33 - 2017-02-20 14:52 - 00000000 ____D C:\Windows\SysWOW64\sda
2017-02-20 14:33 - 2010-05-07 17:18 - 00080384 _____ (REDC) C:\Windows\system32\Drivers\risdpe64.sys
2017-02-20 14:33 - 2009-05-28 18:24 - 00196608 _____ (RICOH) C:\Windows\system32\RiSDIcon.dll
2017-02-20 14:33 - 2009-05-28 18:24 - 00188416 _____ (RICOH) C:\Windows\system32\RiMMCIcon.dll
2017-02-20 14:33 - 2004-09-04 03:00 - 00090112 _____ (Sony Corporation) C:\Windows\system32\snymsico.dll
2017-02-20 14:30 - 2017-02-20 14:30 - 00000000 ___HD C:\Windows\system32\WLANProfiles
2017-02-20 14:26 - 2017-02-20 14:26 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel
2017-02-20 14:26 - 2013-02-19 12:59 - 00057848 _____ (Intel Corporation) C:\Windows\system32\Drivers\HECIx64.sys
2017-02-20 14:25 - 2017-02-20 14:25 - 00000000 ____D C:\Program Files\DIFX
2017-02-20 14:25 - 2017-02-20 14:25 - 00000000 ____D C:\Program Files (x86)\Athena
2017-02-20 14:21 - 2017-02-20 14:21 - 00000000 ____H C:\Windows\system32\Drivers\MsftWdf_Kernel_01011_Coinstaller_Critical.Wdf
2017-02-20 14:21 - 2017-02-20 14:21 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_SynTP_01011.Wdf
2017-02-20 14:21 - 2017-02-20 14:21 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_Smb_driver_Intel_01011.Wdf
2017-02-20 14:20 - 2017-02-20 14:20 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_Smb_driver_Intel_01009.Wdf
2017-02-20 14:20 - 2017-02-20 14:20 - 00000000 ____D C:\Program Files\Synaptics
2017-02-20 14:20 - 2012-07-26 01:55 - 00785512 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Wdf01000.sys
2017-02-20 14:20 - 2012-07-26 01:55 - 00054376 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdfLdr.sys
2017-02-20 14:20 - 2012-07-25 23:36 - 00009728 _____ (Microsoft Corporation) C:\Windows\system32\Wdfres.dll
2017-02-20 14:20 - 2012-06-02 11:35 - 00000003 _____ C:\Windows\system32\Drivers\MsftWdf_Kernel_01011_Inbox_Critical.Wdf
2017-02-20 14:19 - 2016-06-17 14:38 - 00216680 _____ (Synaptics Incorporated) C:\Windows\system32\SynTPCo20.dll
2017-02-20 14:19 - 2014-01-30 18:17 - 01795952 _____ (Microsoft Corporation) C:\Windows\system32\WdfCoInstaller01011.dll
2017-02-20 14:12 - 2013-08-01 11:33 - 00053248 _____ (Windows XP Bundled build C-Centric Single User) C:\Windows\SysWOW64\CSVer.dll
2017-02-20 14:09 - 2017-02-20 14:09 - 00016216 _____ C:\Windows\system32\results.xml
2017-02-20 14:06 - 2017-02-20 14:06 - 00000000 ____D C:\Users\Todos os Usuários\SlimWare Utilities, Inc
2017-02-20 14:06 - 2017-02-20 14:06 - 00000000 ____D C:\ProgramData\SlimWare Utilities, Inc
2017-02-20 14:06 - 1999-12-31 21:00 - 18664960 _____ (Intel Corporation) C:\Windows\system32\ig4icd64.dll
2017-02-20 14:06 - 1999-12-31 21:00 - 13913600 _____ C:\Windows\SysWOW64\ig4icd32.dll
2017-02-20 14:06 - 1999-12-31 21:00 - 12312928 _____ (Intel Corporation) C:\Windows\system32\Drivers\igdkmd64.sys
2017-02-20 14:06 - 1999-12-31 21:00 - 09528832 _____ (Intel Corporation) C:\Windows\system32\igd10umd64.dll
2017-02-20 14:06 - 1999-12-31 21:00 - 09014784 _____ (Intel Corporation) C:\Windows\system32\igfxress.dll
2017-02-20 14:06 - 1999-12-31 21:00 - 08314368 _____ (Intel Corporation) C:\Windows\system32\igdumd64.dll
2017-02-20 14:06 - 1999-12-31 21:00 - 07988224 _____ (Intel Corporation) C:\Windows\SysWOW64\igd10umd32.dll
2017-02-20 14:06 - 1999-12-31 21:00 - 06324224 _____ (Intel Corporation) C:\Windows\SysWOW64\igdumd32.dll
2017-02-20 14:06 - 1999-12-31 21:00 - 04380144 _____ (Intel Corporation) C:\Windows\system32\GfxUI.exe
2017-02-20 14:06 - 1999-12-31 21:00 - 02780160 _____ (Intel Corporation) C:\Windows\system32\igfxcmjit64.dll
2017-02-20 14:06 - 1999-12-31 21:00 - 02191872 _____ (Intel Corporation) C:\Windows\SysWOW64\igfxcmjit32.dll
2017-02-20 14:06 - 1999-12-31 21:00 - 00581120 _____ (Intel Corporation) C:\Windows\SysWOW64\igdumdx32.dll
2017-02-20 14:06 - 1999-12-31 21:00 - 00510960 _____ (Intel Corporation) C:\Windows\system32\igfxsrvc.exe
2017-02-20 14:06 - 1999-12-31 21:00 - 00418800 _____ (Intel Corporation) C:\Windows\system32\igfxpers.exe
2017-02-20 14:06 - 1999-12-31 21:00 - 00394224 _____ (Intel Corporation) C:\Windows\system32\hkcmd.exe
2017-02-20 14:06 - 1999-12-31 21:00 - 00390144 _____ (Intel Corporation) C:\Windows\system32\igfxdev.dll
2017-02-20 14:06 - 1999-12-31 21:00 - 00378368 _____ (Intel Corporation) C:\Windows\system32\igfxTMM.dll
2017-02-20 14:06 - 1999-12-31 21:00 - 00317440 _____ (Intel(R) Corporation) C:\Windows\system32\Drivers\IntcDAud.sys
2017-02-20 14:06 - 1999-12-31 21:00 - 00293888 _____ (Intel Corporation) C:\Windows\SysWOW64\igfxdv32.dll
2017-02-20 14:06 - 1999-12-31 21:00 - 00287232 _____ (Intel Corporation) C:\Windows\system32\igfxrfra.lrc
2017-02-20 14:06 - 1999-12-31 21:00 - 00287232 _____ (Intel Corporation) C:\Windows\system32\igfxresn.lrc
2017-02-20 14:06 - 1999-12-31 21:00 - 00287232 _____ (Intel Corporation) C:\Windows\system32\igfxrell.lrc
2017-02-20 14:06 - 1999-12-31 21:00 - 00286720 _____ (Intel Corporation) C:\Windows\system32\igfxrsky.lrc
2017-02-20 14:06 - 1999-12-31 21:00 - 00286720 _____ (Intel Corporation) C:\Windows\system32\igfxrrus.lrc
2017-02-20 14:06 - 1999-12-31 21:00 - 00286720 _____ (Intel Corporation) C:\Windows\system32\igfxrrom.lrc
2017-02-20 14:06 - 1999-12-31 21:00 - 00286720 _____ (Intel Corporation) C:\Windows\system32\igfxrptg.lrc
2017-02-20 14:06 - 1999-12-31 21:00 - 00286720 _____ (Intel Corporation) C:\Windows\system32\igfxrplk.lrc
2017-02-20 14:06 - 1999-12-31 21:00 - 00286720 _____ (Intel Corporation) C:\Windows\system32\igfxrnld.lrc
2017-02-20 14:06 - 1999-12-31 21:00 - 00286720 _____ (Intel Corporation) C:\Windows\system32\igfxrita.lrc
2017-02-20 14:06 - 1999-12-31 21:00 - 00286720 _____ (Intel Corporation) C:\Windows\system32\igfxrhrv.lrc
2017-02-20 14:06 - 1999-12-31 21:00 - 00286720 _____ (Intel Corporation) C:\Windows\system32\igfxrdeu.lrc
2017-02-20 14:06 - 1999-12-31 21:00 - 00286720 _____ (Intel Corporation) C:\Windows\system32\igfxrcsy.lrc
2017-02-20 14:06 - 1999-12-31 21:00 - 00286208 _____ (Intel Corporation) C:\Windows\system32\igfxrtrk.lrc
2017-02-20 14:06 - 1999-12-31 21:00 - 00286208 _____ (Intel Corporation) C:\Windows\system32\igfxrsve.lrc
2017-02-20 14:06 - 1999-12-31 21:00 - 00286208 _____ (Intel Corporation) C:\Windows\system32\igfxrslv.lrc
2017-02-20 14:06 - 1999-12-31 21:00 - 00286208 _____ (Intel Corporation) C:\Windows\system32\igfxrptb.lrc
2017-02-20 14:06 - 1999-12-31 21:00 - 00286208 _____ (Intel Corporation) C:\Windows\system32\igfxrnor.lrc
2017-02-20 14:06 - 1999-12-31 21:00 - 00286208 _____ (Intel Corporation) C:\Windows\system32\igfxrhun.lrc
2017-02-20 14:06 - 1999-12-31 21:00 - 00286208 _____ (Intel Corporation) C:\Windows\system32\igfxrfin.lrc
2017-02-20 14:06 - 1999-12-31 21:00 - 00285696 _____ (Intel Corporation) C:\Windows\system32\igfxrtha.lrc
2017-02-20 14:06 - 1999-12-31 21:00 - 00285696 _____ (Intel Corporation) C:\Windows\system32\igfxrenu.lrc
2017-02-20 14:06 - 1999-12-31 21:00 - 00285696 _____ (Intel Corporation) C:\Windows\system32\igfxrdan.lrc
2017-02-20 14:06 - 1999-12-31 21:00 - 00285184 _____ (Intel Corporation) C:\Windows\system32\igfxrheb.lrc
2017-02-20 14:06 - 1999-12-31 21:00 - 00285184 _____ (Intel Corporation) C:\Windows\system32\igfxrara.lrc
2017-02-20 14:06 - 1999-12-31 21:00 - 00283648 _____ (Intel Corporation) C:\Windows\system32\igfxrjpn.lrc
2017-02-20 14:06 - 1999-12-31 21:00 - 00283136 _____ (Intel Corporation) C:\Windows\system32\igfxrkor.lrc
2017-02-20 14:06 - 1999-12-31 21:00 - 00282624 _____ (Intel Corporation) C:\Windows\system32\igfxrcht.lrc
2017-02-20 14:06 - 1999-12-31 21:00 - 00282624 _____ (Intel Corporation) C:\Windows\system32\igfxrchs.lrc
2017-02-20 14:06 - 1999-12-31 21:00 - 00246784 _____ (Intel Corporation) C:\Windows\SysWOW64\igfxcmrt32.dll
2017-02-20 14:06 - 1999-12-31 21:00 - 00241136 _____ (Intel Corporation) C:\Windows\system32\igfxext.exe
2017-02-20 14:06 - 1999-12-31 21:00 - 00219136 _____ (Intel Corporation) C:\Windows\system32\igfxcmrt64.dll
2017-02-20 14:06 - 1999-12-31 21:00 - 00185840 _____ (Intel Corporation) C:\Windows\system32\difx64.exe
2017-02-20 14:06 - 1999-12-31 21:00 - 00168944 _____ (Intel Corporation) C:\Windows\system32\igfxtray.exe
2017-02-20 14:06 - 1999-12-31 21:00 - 00158976 _____ (Intel Corporation) C:\Windows\system32\Drivers\Impcd.sys
2017-02-20 14:06 - 1999-12-31 21:00 - 00146432 _____ (Intel Corporation) C:\Windows\system32\gfxSrvc.dll
2017-02-20 14:06 - 1999-12-31 21:00 - 00142336 _____ (Intel Corporation) C:\Windows\system32\igfxdo.dll
2017-02-20 14:06 - 1999-12-31 21:00 - 00126976 _____ (Intel Corporation) C:\Windows\system32\igfxcpl.cpl
2017-02-20 14:06 - 1999-12-31 21:00 - 00124052 _____ C:\Windows\system32\Gfxres.en-US.resources
2017-02-20 14:06 - 1999-12-31 21:00 - 00090112 _____ (Intel Corporation) C:\Windows\system32\igfxCoIn_v2993.dll
2017-02-20 14:06 - 1999-12-31 21:00 - 00028672 _____ (Intel Corporation) C:\Windows\system32\igfxexps.dll
2017-02-20 14:06 - 1999-12-31 21:00 - 00024576 _____ (Intel Corporation) C:\Windows\SysWOW64\igfxexps32.dll
2017-02-20 14:06 - 1999-12-31 21:00 - 00017444 _____ C:\Windows\system32\iglhxs64.vp
2017-02-20 14:06 - 1999-12-31 21:00 - 00014848 _____ (Intel(R) Corporation) C:\Windows\system32\IntcDAuC.dll
2017-02-20 14:06 - 1999-12-31 21:00 - 00004096 _____ ( ) C:\Windows\system32\IGFXDEVLib.dll
2017-02-20 14:06 - 1999-12-31 21:00 - 00000146 _____ C:\Windows\system32\GfxUI.exe.config
2017-02-20 14:05 - 2017-03-16 22:38 - 00002840 _____ C:\Windows\System32\Tasks\SlimDrivers Startup
2017-02-20 14:05 - 2017-03-16 22:38 - 00000412 _____ C:\Windows\Tasks\SlimDrivers Startup.job
2017-02-20 14:05 - 2017-03-16 22:37 - 00016056 _____ (SlimWare Utilities, Inc.) C:\Windows\system32\Drivers\SWDUMon.sys
2017-02-20 14:05 - 2017-02-20 14:05 - 00000000 ____D C:\Users\Public\Documents\Downloaded Installers
2017-02-20 14:05 - 2017-02-20 14:05 - 00000000 ____D C:\Users\Amaral\AppData\Local\SlimWare Utilities Inc
2017-02-20 14:05 - 2017-02-20 14:05 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SlimDrivers
2017-02-20 14:05 - 2017-02-20 14:05 - 00000000 ____D C:\Program Files (x86)\SlimDrivers
2017-02-20 14:02 - 2017-02-20 14:02 - 00000000 ____H C:\Windows\system32\Drivers\Msft_User_WpdFs_01_09_00.Wdf
2017-02-20 14:00 - 2017-02-20 14:00 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TN33 PCSC Driver
2017-02-20 14:00 - 2017-02-20 14:00 - 00000000 ____D C:\Program Files\TN33PCSCDriver
2017-02-20 14:00 - 2017-02-20 14:00 - 00000000 ____D C:\DRIVER
2017-02-20 13:59 - 2017-02-20 14:26 - 00000000 ____D C:\Program Files (x86)\Intel
2017-02-20 13:59 - 2017-02-20 14:06 - 00000000 ____D C:\Intel
2017-02-20 13:59 - 2016-06-17 14:38 - 00754792 _____ (Synaptics Incorporated) C:\Windows\system32\SynCOM.dll
2017-02-20 13:59 - 2016-06-17 14:38 - 00414312 _____ (Synaptics Incorporated) C:\Windows\SysWOW64\SynCom.dll
2017-02-20 13:59 - 2016-06-17 14:38 - 00263272 _____ (Synaptics Incorporated) C:\Windows\system32\SynTPAPI.dll
2017-02-20 13:59 - 2016-06-17 14:37 - 00576104 _____ (Synaptics Incorporated) C:\Windows\system32\Drivers\SynTP.sys
2017-02-20 13:59 - 2013-11-15 15:39 - 01721576 _____ (Microsoft Corporation) C:\Windows\system32\WdfCoInstaller01009.dll
2017-02-20 13:58 - 2016-06-17 14:37 - 00041576 _____ (Synaptics Incorporated) C:\Windows\system32\Drivers\Smb_driver_Intel.sys
2017-02-20 13:57 - 2017-02-20 13:57 - 00000000 ____D C:\SWTOOLS
2017-02-20 13:55 - 2012-06-02 19:19 - 02428952 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2017-02-20 13:55 - 2012-06-02 19:19 - 00057880 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2017-02-20 13:55 - 2012-06-02 19:19 - 00044056 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
2017-02-20 13:55 - 2012-06-02 19:15 - 02622464 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2017-02-20 13:55 - 2011-10-14 13:16 - 00337608 _____ (Intel Corporation) C:\Windows\system32\PROUnstl.exe
2017-02-20 13:55 - 2006-01-12 15:52 - 00001904 ____N C:\Windows\system32\SetupBD.din
2017-02-20 13:54 - 2012-06-02 19:19 - 00701976 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2017-02-20 13:54 - 2012-06-02 19:19 - 00038424 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
2017-02-20 13:54 - 2012-06-02 19:15 - 00099840 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
2017-02-20 13:54 - 2012-06-02 15:19 - 00186752 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
2017-02-20 13:54 - 2012-06-02 15:15 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
2017-02-20 13:53 - 2011-07-20 09:58 - 00342704 _____ (Intel Corporation) C:\Windows\system32\Drivers\e1k62x64.sys
2017-02-20 13:53 - 2011-06-30 00:56 - 00068264 _____ (Intel Corporation) C:\Windows\system32\e1kmsg.dll
2017-02-20 13:53 - 2011-06-16 01:14 - 00098496 _____ (Intel Corporation) C:\Windows\system32\NicInstK.dll
2017-02-20 13:53 - 2009-10-09 11:43 - 00003143 _____ C:\Windows\system32\e1k62x64.din
2017-02-20 13:53 - 2009-05-26 10:05 - 00036472 _____ (Intel Corporation) C:\Windows\system32\NicCo36.dll
2017-02-20 13:51 - 2017-02-20 13:51 - 00000000 ____D C:\Users\Amaral\AppData\Roaming\Intel
2017-02-20 13:50 - 2017-02-20 14:28 - 00000000 ____D C:\Users\Todos os Usuários\Intel
2017-02-20 13:50 - 2017-02-20 14:28 - 00000000 ____D C:\ProgramData\Intel
2017-02-20 13:50 - 2017-02-20 14:07 - 00000000 ____D C:\Program Files\Common Files\Intel
2017-02-20 13:50 - 2017-02-20 13:50 - 00000000 ____D C:\Program Files\Intel
2017-02-20 13:50 - 2017-02-20 13:50 - 00000000 ____D C:\Program Files (x86)\Cisco
2017-02-20 13:46 - 2017-02-22 15:06 - 00112312 _____ C:\Users\Amaral\AppData\Local\GDIPFONTCACHEV1.DAT
2017-02-20 13:46 - 2017-02-20 13:46 - 00000468 __RSH C:\Users\Amaral\ntuser.pol
2017-02-20 13:44 - 2017-02-20 13:44 - 00001419 _____ C:\Users\Amaral\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2017-02-20 13:44 - 2017-02-20 13:44 - 00001385 _____ C:\Users\Amaral\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer (64-bit).lnk
2017-02-20 13:43 - 2017-02-21 15:10 - 00000000 ____D C:\Users\Amaral
2017-02-20 13:43 - 2017-02-20 13:43 - 00000020 ___SH C:\Users\Amaral\ntuser.ini
2017-02-20 13:43 - 2017-02-20 13:43 - 00000000 _SHDL C:\Users\Usuário Padrão\Documents\Minhas músicas
2017-02-20 13:43 - 2017-02-20 13:43 - 00000000 _SHDL C:\Users\Usuário Padrão\Documents\Minhas imagens
2017-02-20 13:43 - 2017-02-20 13:43 - 00000000 _SHDL C:\Users\Usuário Padrão\Documents\Meus vídeos
2017-02-20 13:43 - 2017-02-20 13:43 - 00000000 _SHDL C:\Users\Usuário Padrão\AppData\Roaming\Microsoft\Windows\Start Menu\Programas
2017-02-20 13:43 - 2017-02-20 13:43 - 00000000 _SHDL C:\Users\Usuário Padrão\AppData\Local\Histórico
2017-02-20 13:43 - 2017-02-20 13:43 - 00000000 _SHDL C:\Users\Usuário Padrão\AppData\Local\Dados de aplicativos
2017-02-20 13:43 - 2017-02-20 13:43 - 00000000 _SHDL C:\Users\Usuário Padrão
2017-02-20 13:43 - 2017-02-20 13:43 - 00000000 _SHDL C:\Users\Todos os Usuários\Modelos
2017-02-20 13:43 - 2017-02-20 13:43 - 00000000 _SHDL C:\Users\Todos os Usuários\Menu Iniciar
2017-02-20 13:43 - 2017-02-20 13:43 - 00000000 _SHDL C:\Users\Todos os Usuários\Favoritos
2017-02-20 13:43 - 2017-02-20 13:43 - 00000000 _SHDL C:\Users\Todos os Usuários\Documentos
2017-02-20 13:43 - 2017-02-20 13:43 - 00000000 _SHDL C:\Users\Todos os Usuários\Dados de aplicativos
2017-02-20 13:43 - 2017-02-20 13:43 - 00000000 _SHDL C:\Users\Todos os Usuários
2017-02-20 13:43 - 2017-02-20 13:43 - 00000000 _SHDL C:\Users\Public\Documents\Minhas músicas
2017-02-20 13:43 - 2017-02-20 13:43 - 00000000 _SHDL C:\Users\Public\Documents\Minhas imagens
2017-02-20 13:43 - 2017-02-20 13:43 - 00000000 _SHDL C:\Users\Public\Documents\Meus vídeos
2017-02-20 13:43 - 2017-02-20 13:43 - 00000000 _SHDL C:\Users\Default\Modelos
2017-02-20 13:43 - 2017-02-20 13:43 - 00000000 _SHDL C:\Users\Default\Meus documentos
2017-02-20 13:43 - 2017-02-20 13:43 - 00000000 _SHDL C:\Users\Default\Menu Iniciar
2017-02-20 13:43 - 2017-02-20 13:43 - 00000000 _SHDL C:\Users\Default\Documents\Minhas músicas
2017-02-20 13:43 - 2017-02-20 13:43 - 00000000 _SHDL C:\Users\Default\Documents\Minhas imagens
2017-02-20 13:43 - 2017-02-20 13:43 - 00000000 _SHDL C:\Users\Default\Documents\Meus vídeos
2017-02-20 13:43 - 2017-02-20 13:43 - 00000000 _SHDL C:\Users\Default\Dados de aplicativos
2017-02-20 13:43 - 2017-02-20 13:43 - 00000000 _SHDL C:\Users\Default\Configurações locais
2017-02-20 13:43 - 2017-02-20 13:43 - 00000000 _SHDL C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programas
2017-02-20 13:43 - 2017-02-20 13:43 - 00000000 _SHDL C:\Users\Default\AppData\Local\Histórico
2017-02-20 13:43 - 2017-02-20 13:43 - 00000000 _SHDL C:\Users\Default\AppData\Local\Dados de aplicativos
2017-02-20 13:43 - 2017-02-20 13:43 - 00000000 _SHDL C:\Users\Default\Ambiente de rede
2017-02-20 13:43 - 2017-02-20 13:43 - 00000000 _SHDL C:\Users\Default\Ambiente de impressão
2017-02-20 13:43 - 2017-02-20 13:43 - 00000000 _SHDL C:\Users\Default User\Documents\Minhas músicas
2017-02-20 13:43 - 2017-02-20 13:43 - 00000000 _SHDL C:\Users\Default User\Documents\Minhas imagens
2017-02-20 13:43 - 2017-02-20 13:43 - 00000000 _SHDL C:\Users\Default User\Documents\Meus vídeos
2017-02-20 13:43 - 2017-02-20 13:43 - 00000000 _SHDL C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programas
2017-02-20 13:43 - 2017-02-20 13:43 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Histórico
2017-02-20 13:43 - 2017-02-20 13:43 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Dados de aplicativos
2017-02-20 13:43 - 2017-02-20 13:43 - 00000000 _SHDL C:\Users\Amaral\Modelos
2017-02-20 13:43 - 2017-02-20 13:43 - 00000000 _SHDL C:\Users\Amaral\Meus documentos
2017-02-20 13:43 - 2017-02-20 13:43 - 00000000 _SHDL C:\Users\Amaral\Menu Iniciar
2017-02-20 13:43 - 2017-02-20 13:43 - 00000000 _SHDL C:\Users\Amaral\Documents\Minhas músicas
2017-02-20 13:43 - 2017-02-20 13:43 - 00000000 _SHDL C:\Users\Amaral\Documents\Minhas imagens
2017-02-20 13:43 - 2017-02-20 13:43 - 00000000 _SHDL C:\Users\Amaral\Documents\Meus vídeos
2017-02-20 13:43 - 2017-02-20 13:43 - 00000000 _SHDL C:\Users\Amaral\Dados de aplicativos
2017-02-20 13:43 - 2017-02-20 13:43 - 00000000 _SHDL C:\Users\Amaral\Configurações locais
2017-02-20 13:43 - 2017-02-20 13:43 - 00000000 _SHDL C:\Users\Amaral\AppData\Roaming\Microsoft\Windows\Start Menu\Programas
2017-02-20 13:43 - 2017-02-20 13:43 - 00000000 _SHDL C:\Users\Amaral\AppData\Local\Histórico
2017-02-20 13:43 - 2017-02-20 13:43 - 00000000 _SHDL C:\Users\Amaral\AppData\Local\Dados de aplicativos
2017-02-20 13:43 - 2017-02-20 13:43 - 00000000 _SHDL C:\Users\Amaral\Ambiente de rede
2017-02-20 13:43 - 2017-02-20 13:43 - 00000000 _SHDL C:\Users\Amaral\Ambiente de impressão
2017-02-20 13:43 - 2017-02-20 13:43 - 00000000 _SHDL C:\ProgramData\Modelos
2017-02-20 13:43 - 2017-02-20 13:43 - 00000000 _SHDL C:\ProgramData\Microsoft\Windows\Start Menu\Programas
2017-02-20 13:43 - 2017-02-20 13:43 - 00000000 _SHDL C:\ProgramData\Menu Iniciar
2017-02-20 13:43 - 2017-02-20 13:43 - 00000000 _SHDL C:\ProgramData\Favoritos
2017-02-20 13:43 - 2017-02-20 13:43 - 00000000 _SHDL C:\ProgramData\Documentos
2017-02-20 13:43 - 2017-02-20 13:43 - 00000000 _SHDL C:\ProgramData\Dados de aplicativos
2017-02-20 13:43 - 2017-02-20 13:43 - 00000000 _SHDL C:\Program Files\Common Files\Sistema
2017-02-20 13:43 - 2017-02-20 13:43 - 00000000 _SHDL C:\Program Files\Arquivos Comuns
2017-02-20 13:43 - 2017-02-20 13:43 - 00000000 _SHDL C:\Arquivos de Programas
2017-02-20 13:43 - 2017-02-20 13:43 - 00000000 ____D C:\Users\Amaral\AppData\Local\VirtualStore
2017-02-20 13:43 - 2009-07-14 04:45 - 00000000 ____D C:\Users\Amaral\AppData\Roaming\Media Center Programs
2017-02-20 12:41 - 2017-02-20 12:41 - 00001345 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Media Center.lnk
2017-02-20 12:41 - 2017-02-20 12:41 - 00001326 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows DVD Maker.lnk
2017-02-07 08:47 - 2017-03-10 14:47 - 02185216 _____ C:\Users\Amaral\Desktop\PLANILHA ORÇAMENTO PESSOAL 2015.xls
2017-01-18 13:21 - 2017-03-10 14:17 - 00016127 _____ C:\Users\Amaral\Desktop\Controle de despesas com carros de leilão.xlsx

==================== Três Meses Modificados arquivos e pastas ========

(Se uma entrada for incluída na fixlist, o arquivo/pasta será movido.)

2017-03-17 08:19 - 2009-07-14 01:45 - 00020512 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2017-03-17 08:19 - 2009-07-14 01:45 - 00020512 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2017-03-16 22:37 - 2009-07-14 02:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2017-03-16 08:31 - 2009-07-29 12:58 - 00707672 _____ C:\Windows\system32\prfh0416.dat
2017-03-16 08:31 - 2009-07-29 12:58 - 00147064 _____ C:\Windows\system32\prfc0416.dat
2017-03-16 08:31 - 2009-07-14 02:13 - 01639974 _____ C:\Windows\system32\PerfStringBackup.INI
2017-03-16 08:31 - 2009-07-14 00:20 - 00000000 ____D C:\Windows\inf
2017-02-22 20:35 - 2009-07-14 01:45 - 00443288 _____ C:\Windows\system32\FNTCACHE.DAT
2017-02-22 07:53 - 2009-07-14 00:20 - 00000000 ____D C:\Windows\rescache
2017-02-21 23:25 - 2009-07-14 04:47 - 00000000 ____D C:\Program Files\Windows Journal
2017-02-21 23:25 - 2009-07-14 02:37 - 00000000 ____D C:\Windows\SysWOW64\winrm
2017-02-21 23:25 - 2009-07-14 02:37 - 00000000 ____D C:\Windows\SysWOW64\slmgr
2017-02-21 23:25 - 2009-07-14 02:32 - 00000000 ____D C:\Program Files\Windows Sidebar
2017-02-21 23:25 - 2009-07-14 02:32 - 00000000 ____D C:\Program Files\Windows Photo Viewer
2017-02-21 23:25 - 2009-07-14 02:32 - 00000000 ____D C:\Program Files\Windows Defender
2017-02-21 23:25 - 2009-07-14 02:32 - 00000000 ____D C:\Program Files\DVD Maker
2017-02-21 23:25 - 2009-07-14 02:32 - 00000000 ____D C:\Program Files (x86)\Windows Sidebar
2017-02-21 23:25 - 2009-07-14 02:32 - 00000000 ____D C:\Program Files (x86)\Windows Photo Viewer
2017-02-21 23:25 - 2009-07-14 02:32 - 00000000 ____D C:\Program Files (x86)\Windows Defender
2017-02-21 23:25 - 2009-07-14 00:20 - 00000000 ____D C:\Windows\SysWOW64\migwiz
2017-02-21 23:24 - 2009-07-14 02:37 - 00000000 ____D C:\Windows\SysWOW64\WCN
2017-02-21 23:24 - 2009-07-14 02:37 - 00000000 ____D C:\Windows\SysWOW64\Printing_Admin_Scripts
2017-02-21 23:24 - 2009-07-14 02:37 - 00000000 ____D C:\Windows\system32\winrm
2017-02-21 23:24 - 2009-07-14 02:37 - 00000000 ____D C:\Windows\system32\WCN
2017-02-21 23:24 - 2009-07-14 02:37 - 00000000 ____D C:\Windows\system32\slmgr
2017-02-21 23:24 - 2009-07-14 02:37 - 00000000 ____D C:\Windows\system32\Printing_Admin_Scripts
2017-02-21 23:24 - 2009-07-14 00:20 - 00000000 ____D C:\Windows\SysWOW64\Dism
2017-02-21 23:24 - 2009-07-14 00:20 - 00000000 ____D C:\Windows\system32\migwiz
2017-02-21 23:24 - 2009-07-14 00:20 - 00000000 ____D C:\Windows\system32\Dism
2017-02-21 12:05 - 2009-07-14 01:57 - 00001547 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk
2017-02-20 17:35 - 2009-07-14 02:32 - 00028672 _____ C:\Windows\system32\config\BCD-Template
2017-02-20 15:35 - 2009-07-14 04:46 - 00000000 ____D C:\Windows\ShellNew
2017-02-20 15:29 - 2009-07-14 00:20 - 00000000 ____D C:\Program Files\Common Files\System
2017-02-20 15:29 - 2009-07-13 23:34 - 00000478 _____ C:\Windows\win.ini
2017-02-20 15:09 - 2009-07-14 02:32 - 00000000 ____D C:\Windows\system32\WinBioPlugIns
2017-02-20 14:39 - 2009-07-14 00:20 - 00000000 ____D C:\Program Files\Common Files\Microsoft Shared
2017-02-20 13:46 - 2009-07-14 00:20 - 00000000 ___HD C:\Windows\system32\GroupPolicy
2017-02-20 13:43 - 2009-07-14 00:20 - 00000000 ____D C:\Program Files\Windows NT
2017-02-20 12:41 - 2009-07-14 00:20 - 00000000 ____D C:\Windows\system32\sysprep
2017-02-20 12:38 - 2009-07-14 04:46 - 00000000 ____D C:\Windows\CSC

Alguns arquivos em TEMP:
====================
2016-12-14 15:04 - 2016-12-14 15:04 - 0739904 _____ (Oracle Corporation) C:\Users\Amaral\AppData\Local\Temp\jre-8u121-windows-au.exe

==================== Bamital & volsnap ======================

(Não há correção automática para arquivos que não passaram na verificação.)

C:\Windows\system32\winlogon.exe => O arquivo é assinado digitalmente
C:\Windows\system32\wininit.exe => O arquivo é assinado digitalmente
C:\Windows\SysWOW64\wininit.exe => O arquivo é assinado digitalmente
C:\Windows\explorer.exe => O arquivo é assinado digitalmente
C:\Windows\SysWOW64\explorer.exe => O arquivo é assinado digitalmente
C:\Windows\system32\svchost.exe => O arquivo é assinado digitalmente
C:\Windows\SysWOW64\svchost.exe => O arquivo é assinado digitalmente
C:\Windows\system32\services.exe => O arquivo é assinado digitalmente
C:\Windows\system32\User32.dll => O arquivo é assinado digitalmente
C:\Windows\SysWOW64\User32.dll => O arquivo é assinado digitalmente
C:\Windows\system32\userinit.exe => O arquivo é assinado digitalmente
C:\Windows\SysWOW64\userinit.exe => O arquivo é assinado digitalmente
C:\Windows\system32\rpcss.dll => O arquivo é assinado digitalmente
C:\Windows\system32\dnsapi.dll => O arquivo é assinado digitalmente
C:\Windows\SysWOW64\dnsapi.dll => O arquivo é assinado digitalmente
C:\Windows\system32\Drivers\volsnap.sys => O arquivo é assinado digitalmente

LastRegBack: 2017-03-14 11:54

==================== Fim de FRST.txt ============================