Resultado do exame da Farbar Recovery Scan Tool (FRST) (x64) Versão: 15-03-2017
Executado por Eduardo Araujo (administrador) em EDUARDO (18-03-2017 19:34:48)
Executando a partir de C:\Users\Eduardo Araujo\Desktop
Perfis Carregados: Eduardo Araujo (Perfis Disponíveis: Eduardo Araujo)
Platform: Windows 10 Home Single Language Versão 1607 (X64) Idioma: Português (Brasil)
Internet Explorer Versão 11 (Navegador padrão: FF)
Modo da Inicialização: Normal
Tutorial da Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processos (Whitelisted) =================

(Se uma entrada for incluída na fixlist, o processo será fechado. O arquivo não será movido.)

(Intel Corporation) C:\Windows\System32\igfxCUIService.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Antivirus\AVGSvc.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Framework\Common\avgsvca.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
() C:\Program Files (x86)\Real\UpdateService\RealPlayerUpdateSvc.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(TP Microelectronic) C:\Program Files\TPCtrl\TPCtrl.exe
(Intel Corporation) C:\Windows\System32\igfxEM.exe
(Intel Corporation) C:\Windows\System32\igfxHK.exe
(Intel Corporation) C:\Windows\System32\igfxTray.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Framework\Common\avguix.exe
(RealNetworks, Inc.) C:\Program Files (x86)\Real\RealPlayer\Update\realsched.exe
() C:\Program Files (x86)\RealNetworks\RealDownloader\downloader2.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Antivirus\avgui.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(Realsil Microelectronics Inc.) C:\Program Files (x86)\Realtek\Realtek USB 2.0 Card Reader\RIconMan.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Microsoft Corporation) C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\RemindersServer.exe
() C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.12.112.0_x64__kzf8qxf38zg5c\SkypeHost.exe
() C:\Program Files\WindowsApps\Microsoft.XboxApp_24.27.17008.0_x64__8wekyb3d8bbwe\XboxApp.exe
(Microsoft Corporation) C:\Windows\ImmersiveControlPanel\SystemSettings.exe
() C:\Program Files\DriverSetupUtility\FUB\LiveUpdateChecker.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
(Microsoft® Windows® Operating System) C:\Windows\System32\Taskmgr.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Disc Soft Ltd) C:\Program Files\DAEMON Tools Lite\DiscSoftBusService.exe
(Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe

==================== Registro (Whitelisted) ====================

(Se uma entrada for incluída na fixlist, o ítem no Registro será restaurado para o padrão ou removido. O arquivo não será movido.)

HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13885696 2015-06-24] (Realtek Semiconductor)
HKLM\...\Run: [TPCtrl] => C:\Program Files\TPCtrl\TPCtrl.exe [513024 2013-02-21] (TP Microelectronic)
HKLM\...\Run: [AvgUi] => C:\Program Files (x86)\AVG\Framework\Common\avguirna.exe [239672 2017-02-27] (AVG Technologies CZ, s.r.o.)
HKLM-x32\...\Run: [IAStorIcon] => C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [285240 2012-09-01] (Intel Corporation)
HKLM-x32\...\Run: [mobilegeni daemon] => C:\Program Files (x86)\Mobogenie\DaemonProcess.exe**仞☀耀漀扵敬癟污敵*********仞✀耀潰楳楴敶楟瑮癟污敵*******仞⠀耀攀桴摯灏楴湯s********仞⤀耀�ʎ**********
HKLM-x32\...\Run: [TkBellExe] => C:\Program Files (x86)\Real\RealPlayer\update\realsched.exe [286984 2015-09-21] (RealNetworks, Inc.)
HKLM-x32\...\Run: [Baidu Antivirus] => "C:\Program Files (x86)\Baidu Security\Baidu Antivirus\BavTray.exe" -auto
HKLM-x32\...\Run: [RealDownloader] => C:\Program Files (x86)\RealNetworks\RealDownloader\downloader2.exe [714992 2016-07-05] ()
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [587288 2016-12-12] (Oracle Corporation)
HKLM-x32\...\Run: [AVGUI.exe] => C:\Program Files (x86)\AVG\Antivirus\AvLaunch.exe [254776 2017-03-08] (AVG Technologies CZ, s.r.o.)
HKU\S-1-5-21-1148400818-420560846-2234732976-1001\...\Run: [DAEMON Tools Lite Automount] => C:\Program Files\DAEMON Tools Lite\DTAgent.exe [4468056 2015-06-18] (Disc Soft Ltd)
HKU\S-1-5-21-1148400818-420560846-2234732976-1001\...\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] => "C:\Program Files (x86)\Common Files\Ahead\Lib\NMBgMonitor.exe"
HKU\S-1-5-21-1148400818-420560846-2234732976-1001\...\RunOnce: [Uninstall C:\Users\Eduardo Araujo\AppData\Local\Microsoft\OneDrive\17.3.6390.0509_1\amd64] => C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Eduardo Araujo\AppData\Local\Microsoft\OneDrive\17.3.6390.0509_1\amd64"
HKU\S-1-5-21-1148400818-420560846-2234732976-1001\...\RunOnce: [Uninstall C:\Users\Eduardo Araujo\AppData\Local\Microsoft\OneDrive\17.3.6390.0509_1] => C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Eduardo Araujo\AppData\Local\Microsoft\OneDrive\17.3.6390.0509_1"
HKU\S-1-5-21-1148400818-420560846-2234732976-1001\...\RunOnce: [Uninstall C:\Users\Eduardo Araujo\AppData\Local\Microsoft\OneDrive\17.3.6390.0509\amd64] => C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Eduardo Araujo\AppData\Local\Microsoft\OneDrive\17.3.6390.0509\amd64"
HKU\S-1-5-21-1148400818-420560846-2234732976-1001\...\RunOnce: [Uninstall C:\Users\Eduardo Araujo\AppData\Local\Microsoft\OneDrive\17.3.6390.0509] => C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Eduardo Araujo\AppData\Local\Microsoft\OneDrive\17.3.6390.0509"
HKU\S-1-5-21-1148400818-420560846-2234732976-1001\...\Policies\Explorer: [NoLowDiskSpaceChecks] 1
HKU\S-1-5-21-1148400818-420560846-2234732976-1001\...\Policies\Explorer: [HideClock] 0
HKU\S-1-5-21-1148400818-420560846-2234732976-1001\...\Policies\Explorer: [NoFind] 0
HKU\S-1-5-21-1148400818-420560846-2234732976-1001\...\Policies\Explorer: [NoViewContextMenu] 0
HKU\S-1-5-21-1148400818-420560846-2234732976-1001\...\MountPoints2: {bfeb9805-6217-11e5-bf2b-00e04cce1347} - "E:\setup.exe"
ShellIconOverlayIdentifiers: [ SkyDrive1] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => C:\Users\Eduardo Araujo\AppData\Local\Microsoft\OneDrive\17.3.6798.0207\amd64\FileSyncShell64.dll [2017-02-26] (Microsoft Corporation)
ShellIconOverlayIdentifiers: [ SkyDrive2] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => C:\Users\Eduardo Araujo\AppData\Local\Microsoft\OneDrive\17.3.6798.0207\amd64\FileSyncShell64.dll [2017-02-26] (Microsoft Corporation)
ShellIconOverlayIdentifiers: [ SkyDrive3] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => C:\Users\Eduardo Araujo\AppData\Local\Microsoft\OneDrive\17.3.6798.0207\amd64\FileSyncShell64.dll [2017-02-26] (Microsoft Corporation)
ShellIconOverlayIdentifiers: [###MegaShellExtPending] -> {056D528D-CE28-4194-9BA3-BA2E9197FF8C} => C:\Users\Eduardo Araujo\AppData\Local\MEGAsync\ShellExtX64.dll -> Nenhum Arquivo
ShellIconOverlayIdentifiers: [###MegaShellExtSynced] -> {05B38830-F4E9-4329-978B-1DD28605D202} => C:\Users\Eduardo Araujo\AppData\Local\MEGAsync\ShellExtX64.dll -> Nenhum Arquivo
ShellIconOverlayIdentifiers: [###MegaShellExtSyncing] -> {0596C850-7BDD-4C9D-AFDF-873BE6890637} => C:\Users\Eduardo Araujo\AppData\Local\MEGAsync\ShellExtX64.dll -> Nenhum Arquivo
ShellIconOverlayIdentifiers: [00avg] -> {472083B0-C522-11CF-8763-00608CC02F24} => -> Nenhum Arquivo
ShellIconOverlayIdentifiers: [BaiduAntivirusIconLock] -> {0A93904A-BB1E-4a0c-9753-B57B9AE272CC} => C:\Program Files (x86)\Baidu Security\Baidu Antivirus\BavShx64.dll -> Nenhum Arquivo
ShellIconOverlayIdentifiers-x32: [ SkyDrive1] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => C:\Users\Eduardo Araujo\AppData\Local\Microsoft\OneDrive\17.3.6798.0207\FileSyncShell.dll [2017-02-26] (Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ SkyDrive2] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => C:\Users\Eduardo Araujo\AppData\Local\Microsoft\OneDrive\17.3.6798.0207\FileSyncShell.dll [2017-02-26] (Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ SkyDrive3] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => C:\Users\Eduardo Araujo\AppData\Local\Microsoft\OneDrive\17.3.6798.0207\FileSyncShell.dll [2017-02-26] (Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [###MegaShellExtPending] -> {056D528D-CE28-4194-9BA3-BA2E9197FF8C} => C:\Users\Eduardo Araujo\AppData\Local\MEGAsync\ShellExtX32.dll -> Nenhum Arquivo
ShellIconOverlayIdentifiers-x32: [###MegaShellExtSynced] -> {05B38830-F4E9-4329-978B-1DD28605D202} => C:\Users\Eduardo Araujo\AppData\Local\MEGAsync\ShellExtX32.dll -> Nenhum Arquivo
ShellIconOverlayIdentifiers-x32: [###MegaShellExtSyncing] -> {0596C850-7BDD-4C9D-AFDF-873BE6890637} => C:\Users\Eduardo Araujo\AppData\Local\MEGAsync\ShellExtX32.dll -> Nenhum Arquivo
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\RealTimes.lnk [2015-09-21]
ShortcutTarget: RealTimes.lnk -> C:\Program Files (x86)\Real\RealPlayer\RPDS\Bin\rpsystray.exe (RealNetworks, Inc.)
Startup: C:\Users\Eduardo Araujo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\IMVU.lnk [2017-03-18]
ShortcutTarget: IMVU.lnk -> C:\Users\Eduardo Araujo\AppData\Roaming\IMVUClient\IMVUQualityAgent.exe ()
GroupPolicy: Restrição - Chrome <======= ATENÇÃO
CHR HKLM\SOFTWARE\Policies\Google: Restrição <======= ATENÇÃO

==================== Internet (Whitelisted) ====================

(Se um ítem for incluído na fixlist, sendo um ítem do Registro, será removido ou restaurado para o padrão.)

Hosts: Há mais de uma entrada no Hosts. Veja a seção Hosts do Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{856dea38-ff0e-44b0-8307-bf6a538afe5c}: [DhcpNameServer] 192.168.0.1

Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://go.microsoft.com/fwlink/?LinkID=617910&ResetID=131093725594653352&GUID=944E879A-D64D-A39F-B236-8B8519224E38
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxps://safesearch.avira.com/#web/result?source=art&q=
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxps://safesearch.avira.com/#web/result?source=art&q=
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxps://safesearch.avira.com/#web/result?source=art&q=
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.msn.com/?pc=MSE1
HKU\S-1-5-21-1148400818-420560846-2234732976-1001\Software\Microsoft\Internet Explorer\Main,Search Page = hxxps://safesearch.avira.com/#web/result?source=art&q=
HKU\S-1-5-21-1148400818-420560846-2234732976-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxps://safesearch.avira.com/#web/result?source=art&q=
HKU\S-1-5-21-1148400818-420560846-2234732976-1001\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxps://safesearch.avira.com/#web/result?source=art&q=
HKU\S-1-5-21-1148400818-420560846-2234732976-1001\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = hxxp://www.cceinfo.com.br
URLSearchHook: HKU\S-1-5-21-1148400818-420560846-2234732976-1001 - (Sem Nome) - {84FF7BD6-B47F-46F8-9130-01B2696B36CB} - Nenhum Arquivo
SearchScopes: HKLM -> {23D58481-F713-CB53-A948-316164771CE1} URL =
SearchScopes: HKLM -> {2E00D31D-D171-423D-836D-1A4D7EA7F1A9} URL =
SearchScopes: HKLM -> {9BB47C17-9C68-4BB3-B188-DD9AF0FD2492} URL = hxxp://www.default-search.net/search?sid=492&aid=312&itype=a&ver=15005&tm=594&src=ds&p={searchTerms}
SearchScopes: HKLM-x32 -> {9BB47C17-9C68-4BB3-B188-DD9AF0FD2492} URL = hxxp://www.default-search.net/search?sid=492&aid=312&itype=a&ver=15005&tm=594&src=ds&p={searchTerms}
SearchScopes: HKU\S-1-5-21-1148400818-420560846-2234732976-1001 -> {19B2DD3D-4489-4A2A-A41F-660816336FBA} URL = hxxp://www.istartsurf.com/web/?utm_source=b&utm_medium=cornl&utm_campaign=install_ie&utm_content=ds&from=cornl&uid=WDCXWD5000LPVT-00FMCT0_WD-WX71E23RXS91RXS91&ts=1437942169&type=default&q={searchTerms}
SearchScopes: HKU\S-1-5-21-1148400818-420560846-2234732976-1001 -> {2023ECEC-E06A-4372-A1C7-0B49F9E0FFF0} URL = hxxp://www.istartsurf.com/web/?utm_source=b&utm_medium=cornl&utm_campaign=install_ie&utm_content=ds&from=cornl&uid=WDCXWD5000LPVT-00FMCT0_WD-WX71E23RXS91RXS91&ts=1437942169&type=default&q={searchTerms}
SearchScopes: HKU\S-1-5-21-1148400818-420560846-2234732976-1001 -> {2E00D31D-D171-423D-836D-1A4D7EA7F1A9} URL = hxxp://www.istartsurf.com/web/?utm_source=b&utm_medium=cornl&utm_campaign=install_ie&utm_content=ds&from=cornl&uid=WDCXWD5000LPVT-00FMCT0_WD-WX71E23RXS91RXS91&ts=1437942169&type=default&q={searchTerms}
SearchScopes: HKU\S-1-5-21-1148400818-420560846-2234732976-1001 -> {3590B1FD-4F14-D855-3530-7ECD196BCCF9} URL = hxxp://www.istartsurf.com/web/?utm_source=b&utm_medium=cornl&utm_campaign=install_ie&utm_content=ds&from=cornl&uid=WDCXWD5000LPVT-00FMCT0_WD-WX71E23RXS91RXS91&ts=1437942169&type=default&q={searchTerms}
SearchScopes: HKU\S-1-5-21-1148400818-420560846-2234732976-1001 -> {95B7759C-8C7F-4BF1-B163-73684A933233} URL = hxxp://www.istartsurf.com/web/?utm_source=b&utm_medium=cornl&utm_campaign=install_ie&utm_content=ds&from=cornl&uid=WDCXWD5000LPVT-00FMCT0_WD-WX71E23RXS91RXS91&ts=1437942169&type=default&q={searchTerms}
SearchScopes: HKU\S-1-5-21-1148400818-420560846-2234732976-1001 -> {9BB47C17-9C68-4BB3-B188-DD9AF0FD2492} URL = hxxp://www.istartsurf.com/web/?utm_source=b&utm_medium=cornl&utm_campaign=install_ie&utm_content=ds&from=cornl&uid=WDCXWD5000LPVT-00FMCT0_WD-WX71E23RXS91RXS91&ts=1437942169&type=default&q={searchTerms}
SearchScopes: HKU\S-1-5-21-1148400818-420560846-2234732976-1001 -> {E733165D-CBCF-4FDA-883E-ADEF965B476C} URL = hxxp://www.istartsurf.com/web/?utm_source=b&utm_medium=cornl&utm_campaign=install_ie&utm_content=ds&from=cornl&uid=WDCXWD5000LPVT-00FMCT0_WD-WX71E23RXS91RXS91&ts=1437942169&type=default&q={searchTerms}
BHO: Sem Nome -> {11111111-1111-1111-1111-110311961176} -> Nenhum Arquivo
BHO: RealNetworks Download and Record Plugin for Internet Explorer -> {3049C3E9-B461-4BC5-8870-4C09146192CA} -> C:\Program Files (x86)\RealNetworks\RealDownloader\BrowserPlugins\IE\rndlbrowserrecordplugin64.dll [2015-09-16] (RealDownloader)
BHO-x32: Sem Nome -> {11111111-1111-1111-1111-110311961176} -> Nenhum Arquivo
BHO-x32: GoodTab Class -> {1F91A9A1-01BA-4c81-863D-3BA0751E1419} -> C:\Program Files (x86)\MiuiTab\SupTab.dll => Nenhum Arquivo
BHO-x32: RealNetworks Download and Record Plugin for Internet Explorer -> {3049C3E9-B461-4BC5-8870-4C09146192CA} -> C:\Program Files (x86)\RealNetworks\RealDownloader\BrowserPlugins\IE\rndlbrowserrecordplugin.dll [2015-09-16] (RealDownloader)
BHO-x32: Sem Nome -> {71e129ff-6c2a-4984-818c-7e2c998b8d99} -> Nenhum Arquivo
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_121\bin\ssv.dll [2017-02-28] (Oracle Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_121\bin\jp2ssv.dll [2017-02-28] (Oracle Corporation)

FireFox:
========
FF DefaultProfile: 3f8nuj0m.default
FF ProfilePath: C:\Users\Eduardo Araujo\AppData\Roaming\Mozilla\Firefox\Profiles\3f8nuj0m.default [2017-03-18]
FF SelectedSearchEngine: Mozilla\Firefox\Profiles\3f8nuj0m.default -> istartsurf
FF Homepage: Mozilla\Firefox\Profiles\3f8nuj0m.default -> hxxps://www.google.com.br/
FF Extension: (BlackFox V2) - C:\Users\Eduardo Araujo\AppData\Roaming\Mozilla\Firefox\Profiles\3f8nuj0m.default\Extensions\zigboom@hotmail.com [2017-03-14]
FF Extension: (Video DownloadHelper) - C:\Users\Eduardo Araujo\AppData\Roaming\Mozilla\Firefox\Profiles\3f8nuj0m.default\Extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}.xpi [2017-02-20]
FF ProfilePath: C:\Users\Eduardo Araujo\AppData\Roaming\Mozilla\Firefox\Profiles\zu8zlgmu.default-1469102095491 [2016-07-21]
FF Homepage: Mozilla\Firefox\Profiles\zu8zlgmu.default-1469102095491 -> hxxps://www.google.com.br/
FF HKLM-x32\...\Firefox\Extensions: [{ABDE892B-13A8-4d1b-88E6-365A6E755758}] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext => não encontrado (a)
FF HKLM-x32\...\Firefox\Extensions: [faststartff@gmail.com] - C:\Users\Eduardo Araujo\AppData\Roaming\Mozilla\Firefox\Profiles\3f8nuj0m.default\extensions\faststartff@gmail.com => não encontrado (a)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\default-search.xml [2015-01-16]
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\safeguard-secure-search.xml [2014-09-28]
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\webssearches.xml [2014-06-20]
FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_25_0_0_127.dll [2017-03-14] ()
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWoW64\Macromed\Flash\NPSWF32_25_0_0_127.dll [2017-03-14] ()
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.1.42 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2012-06-06] (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2012-06-06] (Intel Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=11.121.2 -> C:\Program Files (x86)\Java\jre1.8.0_121\bin\dtplugin\npDeployJava1.dll [2017-02-28] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.121.2 -> C:\Program Files (x86)\Java\jre1.8.0_121\bin\plugin2\npjp2.dll [2017-02-28] (Oracle Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3505.0912 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2012-09-12] (Microsoft Corporation)
FF Plugin-x32: @real.com/nppl3260;version=18.1.0.1236 -> c:\program files (x86)\real\realplayer\Netscape6\nppl3260.dll [2015-09-21] (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprpplugin;version=18.1.0.1236 -> c:\program files (x86)\real\realplayer\Netscape6\nprpplugin.dll [2015-09-21] (RealTimes)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.32.7\npGoogleUpdate3.dll [2016-12-17] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.32.7\npGoogleUpdate3.dll [2016-12-17] (Google Inc.)
FF Plugin-x32: @tools.updaterss.com/SaveSenseLive Update;version=3 -> C:\Program Files (x86)\SaveSenseLive\Update\1.3.23.0\npGoogleUpdate3.dll [Nenhum Arquivo]
FF Plugin-x32: @tools.updaterss.com/SaveSenseLive Update;version=9 -> C:\Program Files (x86)\SaveSenseLive\Update\1.3.23.0\npGoogleUpdate3.dll [Nenhum Arquivo]
FF Plugin HKU\S-1-5-21-1148400818-420560846-2234732976-1001: @g2.com/iggweb3dupdater -> C:\Users\Eduardo Araujo\AppData\Roaming\IGG\Web3D\1.0.0.38\NPIGGWeb3DUpdater.dll [2012-04-19] (IGG)
FF Plugin HKU\S-1-5-21-1148400818-420560846-2234732976-1001: @g2.com/joyconnectshell -> C:\Users\Eduardo Araujo\AppData\Roaming\IGG\Web3D\1.0.0.38\NPJoyConnectShell.dll [2012-04-19] (IGG)
FF Plugin HKU\S-1-5-21-1148400818-420560846-2234732976-1001: @Skype Limited.com/Facebook Video Calling Plugin -> C:\Users\Eduardo Araujo\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll [2014-07-24] (Skype Limited)
FF Plugin HKU\S-1-5-21-1148400818-420560846-2234732976-1001: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\Eduardo Araujo\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll [2014-06-10] (Unity Technologies ApS)

Chrome:
=======
CHR DefaultProfile: ChromeDefaultData
CHR HomePage: ChromeDefaultData -> hxxp://www.youndoo.com/?z=90de7e5914ee51c5573cc6cg6zaq6qdg4z0o4wfoeb&from=pmr&uid=WDCXWD5000LPVT-00FMCT0_WD-WX71E23RXS91RXS91&type=hp
CHR StartupUrls: ChromeDefaultData -> "hxxp://www.youndoo.com/?z=90de7e5914ee51c5573cc6cg6zaq6qdg4z0o4wfoeb&from=pmr&uid=WDCXWD5000LPVT-00FMCT0_WD-WX71E23RXS91RXS91&type=hp"
CHR NewTab: ChromeDefaultData -> Active:"chrome-extension://fgbcffenncokfocljomejddmgcpppjom/newtab.html"
CHR DefaultSearchURL: ChromeDefaultData -> hxxp://www.youndoo.com/search/?q={searchTerms}&z=90de7e5914ee51c5573cc6cg6zaq6qdg4z0o4wfoeb&from=pmr&uid=WDCXWD5000LPVT-00FMCT0_WD-WX71E23RXS91RXS91&type=sp
CHR DefaultSearchKeyword: ChromeDefaultData -> youndoo
CHR Profile: C:\Users\Eduardo Araujo\AppData\Local\Google\Chrome\User Data\ChromeDefaultData [2017-03-05] <==== ATENÇÃO
CHR Extension: (Google Docs) - C:\Users\Eduardo Araujo\AppData\Local\Google\Chrome\User Data\ChromeDefaultData\Extensions\aohghmighlieiainnegkcijnfilokake [2015-09-18]
CHR Extension: (Google Drive) - C:\Users\Eduardo Araujo\AppData\Local\Google\Chrome\User Data\ChromeDefaultData\Extensions\apdfllckaahabafndbhieahigkjlhalf [2016-11-05]
CHR Extension: (YouTube) - C:\Users\Eduardo Araujo\AppData\Local\Google\Chrome\User Data\ChromeDefaultData\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2016-11-05]
CHR Extension: (Google Search) - C:\Users\Eduardo Araujo\AppData\Local\Google\Chrome\User Data\ChromeDefaultData\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2016-11-05]
CHR Extension: (Plus-HD-4.4) - C:\Users\Eduardo Araujo\AppData\Local\Google\Chrome\User Data\ChromeDefaultData\Extensions\fdcmldniciaadnhphngjgajcaiddomka [2014-07-19]
CHR Extension: (Default-Search) - C:\Users\Eduardo Araujo\AppData\Local\Google\Chrome\User Data\ChromeDefaultData\Extensions\fgbcffenncokfocljomejddmgcpppjom [2016-11-05]
CHR Extension: (Segurança do navegador Avira) - C:\Users\Eduardo Araujo\AppData\Local\Google\Chrome\User Data\ChromeDefaultData\Extensions\flliilndjeohchalpbbcdekjklbdgfkk [2016-11-24]
CHR Extension: (Documentos Google off-line) - C:\Users\Eduardo Araujo\AppData\Local\Google\Chrome\User Data\ChromeDefaultData\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-11-24]
CHR Extension: (Pagamentos da Chrome Web Store) - C:\Users\Eduardo Araujo\AppData\Local\Google\Chrome\User Data\ChromeDefaultData\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2017-01-25]
CHR Extension: (Gmail) - C:\Users\Eduardo Araujo\AppData\Local\Google\Chrome\User Data\ChromeDefaultData\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-09-21]
CHR Extension: (Chrome Media Router) - C:\Users\Eduardo Araujo\AppData\Local\Google\Chrome\User Data\ChromeDefaultData\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2017-03-05]
CHR HKLM\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM\...\Chrome\Extension: [pfkfdlcdbajamklbneflfbcmfgddmpae] - hxxps://clients2.google.com/service/update2/crx
CHR HKU\S-1-5-21-1148400818-420560846-2234732976-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [pfkfdlcdbajamklbneflfbcmfgddmpae] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [bjnoabhohmcgjpakhiichcffnomibdhp] - C:\Program Files (x86)\kasimos\bjnoabhohmcgjpakhiichcffnomibdhp.crx
CHR HKLM-x32\...\Chrome\Extension: [fgbcffenncokfocljomejddmgcpppjom] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [giacfgjdclhnmkacnfbaljbmpnelflol] - C:\Program Files (x86)\iVIDI.org plugin\ividiplg.crx [2012-11-05]
CHR HKLM-x32\...\Chrome\Extension: [pelmeidfhdlhlbjimpabfcbnnojbboma] - C:\Users\Eduardo Araujo\AppData\Local\Google\Chrome\User Data\Default\Extensions\newtabv3.crx
CHR HKLM-x32\...\Chrome\Extension: [pfkfdlcdbajamklbneflfbcmfgddmpae] - hxxps://clients2.google.com/service/update2/crx

==================== Serviços (Whitelisted) ====================

(Se uma entrada for incluída na fixlist, será removida do Registro. O arquivo não será movido, a menos que seja colocado separadamente.)

R2 AVG Antivirus; C:\Program Files (x86)\AVG\Antivirus\AVGSvc.exe [263720 2017-03-08] (AVG Technologies CZ, s.r.o.)
S3 avgbIDSAgent; C:\Program Files (x86)\AVG\Antivirus\x64\aswidsagenta.exe [7197976 2017-03-08] (AVG Technologies CZ, s.r.o.)
R2 avgsvc; C:\Program Files (x86)\AVG\Framework\Common\avgsvca.exe [1257384 2017-02-27] (AVG Technologies CZ, s.r.o.)
S4 COMLiveService; C:\Program Files (x86)\Viva\viva.exe [346624 2015-10-05] () [Arquivo não assinado]
R3 Disc Soft Lite Bus Service; C:\Program Files\DAEMON Tools Lite\DiscSoftBusService.exe [1268568 2015-06-18] (Disc Soft Ltd)
R2 IconMan_R; C:\Program Files (x86)\Realtek\Realtek USB 2.0 Card Reader\RIconMan.exe [2457232 2012-07-24] (Realsil Microelectronics Inc.)
R2 igfxCUIService1.0.0.0; C:\WINDOWS\system32\igfxCUIService.exe [337888 2016-05-03] (Intel Corporation)
R2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [129856 2012-06-27] (Intel Corporation)
S4 iumsvc; C:\Program Files (x86)\Intel\Intel(R) Update Manager\bin\iumsvc.exe [178312 2015-09-25] (Intel Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [166720 2012-06-25] (Intel Corporation)
R2 PnkBstrA; C:\WINDOWS\SysWOW64\PnkBstrA.exe [75136 2017-02-24] ()
S4 RealPlayer Cloud Service; c:\program files (x86)\real\realplayer\RPDS\Bin\rpdsvc.exe [1103656 2015-09-21] (RealNetworks, Inc.)
R2 RealPlayerUpdateSvc; C:\Program Files (x86)\Real\UpdateService\RealPlayerUpdateSvc.exe [33088 2015-09-16] ()
S4 RealTimes Desktop Service; c:\program files (x86)\real\realplayer\RPDS\Bin\rpdsvc.exe [1103656 2015-09-21] (RealNetworks, Inc.)
S2 TuneUp.UtilitiesSvc; C:\Program Files (x86)\AVG\AVG PC TuneUp\TuneUpUtilitiesService64.exe [5906704 2017-02-21] (AVG Technologies CZ, s.r.o.)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [347328 2016-07-16] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [103720 2016-07-16] (Microsoft Corporation)
S3 NMIndexingService; "C:\Program Files (x86)\Common Files\Ahead\Lib\NMIndexingService.exe" [X]

===================== Drivers (Whitelisted) ======================

(Se uma entrada for incluída na fixlist, será removida do Registro. O arquivo não será movido, a menos que seja colocado separadamente.)

R1 avgbdisk; C:\WINDOWS\system32\drivers\avgbdiska.sys [166136 2017-03-08] (AVG Technologies CZ, s.r.o.)
R1 avgbidsdriver; C:\WINDOWS\system32\drivers\avgbidsdrivera.sys [311592 2017-03-08] (AVG Technologies CZ, s.r.o.)
R0 avgbidsh; C:\WINDOWS\system32\drivers\avgbidsha.sys [192096 2017-03-08] (AVG Technologies CZ, s.r.o.)
R0 avgblog; C:\WINDOWS\system32\drivers\avgbloga.sys [336920 2017-03-08] (AVG Technologies CZ, s.r.o.)
R0 avgbuniv; C:\WINDOWS\system32\drivers\avgbuniva.sys [50848 2017-03-08] (AVG Technologies CZ, s.r.o.)
S3 avgHwid; C:\WINDOWS\system32\drivers\avgHwid.sys [39288 2017-03-08] (AVG Technologies CZ, s.r.o.)
R2 avgMonFlt; C:\WINDOWS\system32\drivers\avgMonFlt.sys [127584 2017-03-08] (AVG Technologies CZ, s.r.o.)
R1 avgRdr; C:\WINDOWS\system32\drivers\avgRdr2.sys [101624 2017-03-08] (AVG Technologies CZ, s.r.o.)
R0 avgRvrt; C:\WINDOWS\system32\drivers\avgRvrt.sys [76688 2017-03-08] (AVG Technologies CZ, s.r.o.)
R1 avgSnx; C:\WINDOWS\system32\drivers\avgSnx.sys [994592 2017-03-08] (AVG Technologies CZ, s.r.o.)
R1 avgSP; C:\WINDOWS\system32\drivers\avgSP.sys [549912 2017-03-10] (AVG Technologies CZ, s.r.o.)
S2 avgStm; C:\WINDOWS\system32\drivers\avgStm.sys [163512 2017-03-08] (AVG Technologies CZ, s.r.o.)
R0 avgVmm; C:\WINDOWS\system32\drivers\avgVmm.sys [338576 2017-03-14] (AVG Technologies CZ, s.r.o.)
S3 dg_ssudbus; C:\WINDOWS\system32\DRIVERS\ssudbus.sys [131712 2016-09-05] (Samsung Electronics Co., Ltd.)
R3 dtlitescsibus; C:\WINDOWS\System32\drivers\dtlitescsibus.sys [30264 2015-09-25] (Disc Soft Ltd)
S3 NetAdapterCx; C:\WINDOWS\System32\drivers\NetAdapterCx.sys [90624 2016-07-16] ()
R2 npf; C:\WINDOWS\System32\drivers\npf.sys [35344 2012-06-13] (CACE Technologies, Inc.)
R3 rt640x64; C:\WINDOWS\System32\drivers\rt640x64.sys [886528 1999-12-31] (Realtek )
R3 rtwlane_13; C:\WINDOWS\System32\drivers\rtwlane_13.sys [3717120 2016-07-16] (Realtek Semiconductor Corporation )
R3 SmbDrvI; C:\WINDOWS\system32\DRIVERS\Smb_driver_Intel.sys [33960 1999-12-31] (Synaptics Incorporated)
S3 ssudmdm; C:\WINDOWS\system32\DRIVERS\ssudmdm.sys [165504 2016-09-05] (Samsung Electronics Co., Ltd.)
S3 ssudserd; C:\WINDOWS\system32\DRIVERS\ssudserd.sys [206080 2014-01-22] (DEVGURU Co., LTD.(www.devguru.co.kr))
S3 SWDUMon; C:\WINDOWS\system32\DRIVERS\SWDUMon.sys [16056 2017-02-09] (SlimWare Utilities, Inc.)
R3 tpfilter; C:\WINDOWS\System32\drivers\tpfilter.sys [25928 2015-10-30] (TP Microelectronic)
R3 TuneUpUtilitiesDrv; C:\Program Files (x86)\AVG\AVG PC TuneUp\TuneUpUtilitiesDriver64.sys [32304 2017-02-21] (AVG Netherlands B.V.)
S3 USBAAPL64; C:\WINDOWS\System32\Drivers\usbaapl64.sys [54784 2014-08-15] (Apple, Inc.) [Arquivo não assinado]
R1 VBoxUSBMon; C:\WINDOWS\system32\DRIVERS\VBoxUSBMon.sys [127432 2015-09-16] (BigNox Corporation)
R1 vivadrv; C:\WINDOWS\System32\drivers\vivadrv.sys [59136 2015-09-17] (Windows (R) Win 7 DDK provider)
S3 WdBoot; C:\WINDOWS\system32\drivers\WdBoot.sys [44056 2016-07-16] (Microsoft Corporation)
S3 WdFilter; C:\WINDOWS\system32\drivers\WdFilter.sys [290144 2016-07-16] (Microsoft Corporation)
S3 WdNisDrv; C:\WINDOWS\System32\Drivers\WdNisDrv.sys [123232 2016-07-16] (Microsoft Corporation)
S3 WinRing0_1_2_0; C:\Program Files (x86)\IObit\Game Booster 3\Driver\WinRing0x64.sys [14544 2010-11-01] (OpenLibSys.org)
S3 X6va031; \??\C:\WINDOWS\SysWOW64\Drivers\X6va031 [X]
S3 X6va062; \??\C:\WINDOWS\SysWoW64\Drivers\X6va062 [X]
S3 X6va063; \??\C:\WINDOWS\SysWoW64\Drivers\X6va063 [X]

==================== NetSvcs (Whitelisted) ===================

(Se uma entrada for incluída na fixlist, será removida do Registro. O arquivo não será movido, a menos que seja colocado separadamente.)


==================== Três Meses Criados arquivos e pastas ========

(Se uma entrada for incluída na fixlist, o arquivo/pasta será movido.)

2017-03-18 19:34 - 2017-03-18 19:38 - 00031063 _____ C:\Users\Eduardo Araujo\Desktop\FRST.txt
2017-03-18 19:19 - 2017-03-18 19:34 - 00000000 ____D C:\FRST
2017-03-18 19:18 - 2017-03-18 19:18 - 02424832 _____ (Farbar) C:\Users\Eduardo Araujo\Desktop\FRST64.exe
2017-03-18 11:55 - 2017-03-18 11:55 - 00000000 ____D C:\Users\Eduardo Araujo\Desktop\The Last Guardian PC Installer
2017-03-18 11:04 - 2017-03-18 11:05 - 05745152 _____ C:\Users\Eduardo Araujo\Downloads\archpr_setup_en.msi
2017-03-17 17:31 - 2017-03-17 17:31 - 00000000 ____D C:\Users\Eduardo Araujo\Documents\Sra. Hani - COMPLETO
2017-03-17 12:48 - 2017-03-17 12:48 - 00011961 _____ C:\Users\Eduardo Araujo\Downloads\The.Last.Guardian.PC.torrent
2017-03-16 15:30 - 2017-03-16 15:31 - 01795056 _____ (Fast ) C:\Users\Eduardo Araujo\Downloads\Baixaki_slim-drivers.exe
2017-03-16 01:17 - 2017-03-16 01:17 - 00003808 _____ C:\WINDOWS\System32\Tasks\RNUpgradeHelperResumePrompt_Eduardo Araujo
2017-03-16 01:17 - 2017-03-16 01:17 - 00003408 _____ C:\WINDOWS\System32\Tasks\RNUpgradeHelperLogonPrompt_Eduardo Araujo
2017-03-15 23:07 - 2017-03-18 01:18 - 00003666 _____ C:\WINDOWS\System32\Tasks\ReclaimerUpdateXML_Eduardo Araujo
2017-03-15 23:07 - 2017-03-18 00:19 - 00003676 _____ C:\WINDOWS\System32\Tasks\ReclaimerUpdateFiles_Eduardo Araujo
2017-03-15 10:23 - 2017-03-15 10:24 - 06560464 _____ C:\Users\Eduardo Araujo\Desktop\16843212_1311841645525828_6069588838576029696_n.mp4
2017-03-15 09:34 - 2017-03-13 14:25 - 00044433 _____ C:\Users\Eduardo Araujo\Desktop\Assassins.Creed.2016.DVDRip.XviD.AC3-EVO.srt
2017-03-15 09:34 - 2017-03-13 14:25 - 00044433 _____ C:\Users\Eduardo Araujo\Desktop\Assassins.Creed.2016.BRRip.XviD.AC3-EVO.srt
2017-03-15 09:34 - 2017-03-13 14:25 - 00044433 _____ C:\Users\Eduardo Araujo\Desktop\Assassins.Creed.2016.BDRip.x264-SPARKS.srt
2017-03-15 09:34 - 2017-03-13 14:25 - 00044433 _____ C:\Users\Eduardo Araujo\Desktop\Assassins.Creed.2016.720p.BRRip.X264.AC3-EVO.srt
2017-03-15 09:34 - 2017-03-13 14:25 - 00044433 _____ C:\Users\Eduardo Araujo\Desktop\Assassins.Creed.2016.720p.BluRay.x264-SPARKS.srt
2017-03-15 09:34 - 2017-03-13 14:25 - 00044433 _____ C:\Users\Eduardo Araujo\Desktop\Assassins.Creed.2016.1080p.BluRay.x264-SPARKS.srt
2017-03-15 08:54 - 2017-03-17 17:51 - 00000000 ____D C:\Users\Eduardo Araujo\Desktop\Nova pasta
2017-03-13 21:10 - 2017-03-18 17:50 - 00000000 ____D C:\Users\Eduardo Araujo\AppData\Roaming\IMVU
2017-03-13 21:10 - 2017-03-13 21:10 - 00001965 _____ C:\Users\Eduardo Araujo\Desktop\IMVU.lnk
2017-03-13 21:10 - 2017-03-13 21:10 - 00000000 ____D C:\Users\Eduardo Araujo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\IMVU
2017-03-13 21:09 - 2017-03-13 21:10 - 00000000 ____D C:\Users\Eduardo Araujo\AppData\Roaming\IMVUClient
2017-03-13 20:53 - 2017-03-13 20:53 - 00244304 _____ C:\Users\Eduardo Araujo\Downloads\InstallIMVU_530.0_st.exe
2017-03-13 20:44 - 2017-03-13 20:44 - 00023294 _____ C:\Users\Eduardo Araujo\Downloads\Sinta a ira dos céus..ogx
2017-03-13 20:42 - 2017-03-13 20:43 - 00026119 _____ C:\Users\Eduardo Araujo\Downloads\Preciso mesmo de uma apresentação.ogx
2017-03-13 20:42 - 2017-03-13 20:42 - 00018062 _____ C:\Users\Eduardo Araujo\Downloads\Zeus.ogx
2017-03-13 20:40 - 2017-03-13 20:40 - 00024668 _____ C:\Users\Eduardo Araujo\Downloads\sou o deus dos deuses.ogx
2017-03-08 20:14 - 2017-03-08 20:14 - 00399392 _____ (AVG Technologies CZ, s.r.o.) C:\WINDOWS\system32\avgBoot.exe
2017-03-06 17:56 - 2017-03-06 17:56 - 00000000 ____D C:\Users\Eduardo Araujo\.fontconfig
2017-03-06 17:54 - 2017-03-06 17:55 - 00000000 ____D C:\Users\Eduardo Araujo\AppData\Local\Movavi
2017-03-06 17:54 - 2017-03-06 17:54 - 00000000 ____D C:\Users\Eduardo Araujo\AppData\Local\converter
2017-03-06 17:50 - 2017-03-06 17:50 - 00005054 _____ C:\Users\Todos os Usuários\mudtcpaz.vzs
2017-03-06 17:50 - 2017-03-06 17:50 - 00005054 _____ C:\ProgramData\mudtcpaz.vzs
2017-03-06 17:50 - 2017-03-06 17:50 - 00000016 _____ C:\Users\Todos os Usuários\mntemp
2017-03-06 17:50 - 2017-03-06 17:50 - 00000016 _____ C:\ProgramData\mntemp
2017-03-06 17:50 - 2017-03-06 17:50 - 00000000 ____D C:\Users\Todos os Usuários\Movavi Video Converter 17
2017-03-06 17:50 - 2017-03-06 17:50 - 00000000 ____D C:\Users\Todos os Usuários\Movavi
2017-03-06 17:50 - 2017-03-06 17:50 - 00000000 ____D C:\ProgramData\Movavi Video Converter 17
2017-03-06 17:50 - 2017-03-06 17:50 - 00000000 ____D C:\ProgramData\Movavi
2017-03-06 17:44 - 2017-03-06 17:44 - 00000023 _____ C:\Common.ini
2017-03-04 09:49 - 2017-03-04 09:49 - 00000801 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NARUTO SHIPPUDEN Ultimate Ninja STORM 3 Full Burst.lnk
2017-03-04 09:49 - 2017-03-04 09:49 - 00000789 _____ C:\Users\Public\Desktop\NARUTO SHIPPUDEN Ultimate Ninja STORM 3 Full Burst.lnk
2017-03-03 00:35 - 2017-03-04 00:45 - 00000000 ____D C:\Users\Eduardo Araujo\Downloads\rld-nashulni
2017-02-28 13:14 - 2017-03-14 22:58 - 00004458 _____ C:\WINDOWS\System32\Tasks\Adobe Flash Player Updater
2017-02-25 21:21 - 2017-02-25 21:21 - 00000000 ____D C:\Program Files\Common Files\m
2017-02-25 08:49 - 2017-02-25 08:49 - 00002904 _____ C:\WINDOWS\System32\Tasks\AVGPCTuneUp_Task_BkGndMaintenance
2017-02-24 12:00 - 2017-02-21 09:29 - 00053008 _____ (AVG Technologies CZ, s.r.o.) C:\WINDOWS\system32\TURegOpt.exe
2017-02-24 11:59 - 2017-02-24 11:59 - 00002584 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVG PC TuneUp.lnk
2017-02-24 11:10 - 2017-02-24 11:10 - 00000000 ____D C:\Users\Eduardo Araujo\AppData\Roaming\AVG
2017-02-24 11:07 - 2017-03-14 08:15 - 00338576 _____ (AVG Technologies CZ, s.r.o.) C:\WINDOWS\system32\Drivers\avgvmm.sys
2017-02-24 11:07 - 2017-03-10 10:23 - 00549912 _____ (AVG Technologies CZ, s.r.o.) C:\WINDOWS\system32\Drivers\avgsp.sys
2017-02-24 11:07 - 2017-03-08 20:14 - 00163512 _____ (AVG Technologies CZ, s.r.o.) C:\WINDOWS\system32\Drivers\avgStm.sys
2017-02-24 11:07 - 2017-03-08 20:14 - 00127584 _____ (AVG Technologies CZ, s.r.o.) C:\WINDOWS\system32\Drivers\avgMonFlt.sys
2017-02-24 11:07 - 2017-03-08 20:14 - 00101624 _____ (AVG Technologies CZ, s.r.o.) C:\WINDOWS\system32\Drivers\avgRdr2.sys
2017-02-24 11:07 - 2017-03-08 20:14 - 00076688 _____ (AVG Technologies CZ, s.r.o.) C:\WINDOWS\system32\Drivers\avgRvrt.sys
2017-02-24 11:07 - 2017-03-08 20:14 - 00039288 _____ (AVG Technologies CZ, s.r.o.) C:\WINDOWS\system32\Drivers\avgHwid.sys
2017-02-24 11:07 - 2017-03-08 20:14 - 00004008 _____ C:\WINDOWS\System32\Tasks\Antivirus Emergency Update
2017-02-24 11:07 - 2017-03-08 20:13 - 00994592 _____ (AVG Technologies CZ, s.r.o.) C:\WINDOWS\system32\Drivers\avgSnx.sys
2017-02-24 11:07 - 2017-03-08 20:13 - 00336920 _____ (AVG Technologies CZ, s.r.o.) C:\WINDOWS\system32\Drivers\avgbloga.sys
2017-02-24 11:07 - 2017-03-08 20:13 - 00311592 _____ (AVG Technologies CZ, s.r.o.) C:\WINDOWS\system32\Drivers\avgbidsdrivera.sys
2017-02-24 11:07 - 2017-03-08 20:13 - 00192096 _____ (AVG Technologies CZ, s.r.o.) C:\WINDOWS\system32\Drivers\avgbidsha.sys
2017-02-24 11:07 - 2017-03-08 20:13 - 00166136 _____ (AVG Technologies CZ, s.r.o.) C:\WINDOWS\system32\Drivers\avgbdiska.sys
2017-02-24 11:07 - 2017-03-08 20:13 - 00050848 _____ (AVG Technologies CZ, s.r.o.) C:\WINDOWS\system32\Drivers\avgbuniva.sys
2017-02-24 10:49 - 2017-03-08 12:37 - 00000955 _____ C:\Users\Public\Desktop\AVG.lnk
2017-02-24 10:49 - 2017-03-08 12:37 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVG
2017-02-24 10:42 - 2017-03-18 02:53 - 00003668 _____ C:\WINDOWS\System32\Tasks\AVG EUpdate Task
2017-02-24 10:42 - 2017-02-24 11:58 - 00000000 ____D C:\Program Files (x86)\AVG
2017-02-24 10:36 - 2017-02-24 13:13 - 00000000 ____D C:\Users\Todos os Usuários\Avg
2017-02-24 10:36 - 2017-02-24 13:13 - 00000000 ____D C:\ProgramData\Avg
2017-02-24 10:36 - 2017-02-24 11:59 - 00000000 ____D C:\Users\Eduardo Araujo\AppData\Local\Avg
2017-02-24 10:36 - 2017-02-24 11:58 - 00000000 ____D C:\Users\Eduardo Araujo\AppData\Local\AvgSetupLog
2017-02-24 10:35 - 2017-02-24 10:35 - 03449296 _____ (AVG Technologies CZ, s.r.o.) C:\Users\Eduardo Araujo\Downloads\Antivirus_Free_1892.exe
2017-02-24 09:46 - 2012-11-21 10:10 - 03123272 _____ C:\WINDOWS\SysWOW64\pbsvc.exe
2017-02-20 18:49 - 2017-02-20 22:54 - 00000000 ____D C:\Users\Eduardo Araujo\dwhelper
2017-02-20 10:59 - 2017-03-16 23:31 - 00029016 _____ C:\WINDOWS\SysWOW64\Drivers\X6va063_2017.03.17.15.02.09
2017-02-15 20:29 - 2017-02-15 20:29 - 00418787 _____ C:\Users\Eduardo Araujo\Documents\Curriculo.pdf
2017-02-12 21:22 - 2017-02-12 22:33 - 00000000 ____D C:\Users\Eduardo Araujo\Desktop\Wallpaper.Engine.Build.1.0.517
2017-02-12 09:42 - 2017-02-12 09:53 - 00000000 ____D C:\Users\Eduardo Araujo\AppData\Local\SniperV2
2017-02-12 09:41 - 2017-02-12 09:41 - 00000000 ____D C:\Users\Eduardo Araujo\AppData\Local\SKIDROW
2017-02-10 22:07 - 2017-02-10 22:07 - 00000000 ___HD C:\Users\Eduardo Araujo\AppData\Roaming\.ssg
2017-02-10 22:01 - 2017-02-10 23:07 - 00000000 ____D C:\Users\Eduardo Araujo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Game Launcher
2017-02-10 22:00 - 2017-02-10 22:00 - 00000000 ____D C:\Users\Eduardo Araujo\AppData\Roaming\Splitscreen Studios
2017-02-10 18:06 - 2017-02-12 00:15 - 00000000 ____D C:\Users\Eduardo Araujo\Downloads\Sniper.Elite.V2-SKIDROW
2017-02-09 11:29 - 2017-02-09 11:29 - 00000000 ____H C:\WINDOWS\system32\Drivers\Msft_Kernel_Smb_driver_Intel_01011.Wdf
2017-02-09 11:29 - 2017-02-09 11:29 - 00000000 ____D C:\Program Files\Synaptics
2017-02-09 11:26 - 1999-12-31 21:00 - 01795952 _____ (Microsoft Corporation) C:\WINDOWS\system32\WdfCoInstaller01011.dll
2017-02-09 11:26 - 1999-12-31 21:00 - 00033960 _____ (Synaptics Incorporated) C:\WINDOWS\system32\Drivers\Smb_driver_Intel.sys
2017-02-09 11:22 - 2017-02-09 11:22 - 00000000 ____D C:\Users\Todos os Usuários\updater2
2017-02-09 11:22 - 2017-02-09 11:22 - 00000000 ____D C:\ProgramData\updater2
2017-02-09 11:22 - 2017-02-09 11:22 - 00000000 ____D C:\oem
2017-02-09 11:09 - 2017-02-09 11:32 - 00000384 _____ C:\WINDOWS\Tasks\SlimCleaner Plus (Scheduled Scan - Eduardo Araujo).job
2017-02-09 11:09 - 2017-02-09 11:09 - 00003180 _____ C:\WINDOWS\System32\Tasks\SlimCleaner Plus (Scheduled Scan - Eduardo Araujo)
2017-02-09 11:08 - 2017-02-09 11:08 - 00000000 ____D C:\WINDOWS\oem
2017-02-09 11:05 - 2017-02-09 11:05 - 00003756 _____ C:\WINDOWS\System32\Tasks\ACC
2017-02-09 11:05 - 2017-02-09 11:05 - 00000000 ____D C:\Users\Todos os Usuários\DriverSetupUtility
2017-02-09 11:05 - 2017-02-09 11:05 - 00000000 ____D C:\ProgramData\DriverSetupUtility
2017-02-09 11:05 - 2017-02-09 11:05 - 00000000 ____D C:\Program Files\DriverSetupUtility
2017-02-09 11:01 - 1999-12-31 21:00 - 00886528 _____ (Realtek ) C:\WINDOWS\system32\Drivers\rt640x64.sys
2017-02-09 11:01 - 1999-12-31 21:00 - 00082544 _____ (Realtek Semiconductor Corporation) C:\WINDOWS\system32\RtNicProp64.dll
2017-02-09 11:00 - 2017-02-09 11:00 - 00000000 ____D C:\Users\Todos os Usuários\SlimWare Utilities, Inc
2017-02-09 11:00 - 2017-02-09 11:00 - 00000000 ____D C:\ProgramData\SlimWare Utilities, Inc
2017-02-09 10:55 - 2017-02-10 11:16 - 00000000 ____D C:\Users\Eduardo Araujo\AppData\Local\SlimWare Utilities Inc
2017-02-09 10:55 - 2017-02-09 12:57 - 00016056 _____ (SlimWare Utilities, Inc.) C:\WINDOWS\system32\Drivers\SWDUMon.sys
2017-02-09 10:53 - 2017-02-09 10:53 - 00000000 ____D C:\Users\Public\Documents\Downloaded Installers
2017-02-09 01:56 - 2017-02-24 09:47 - 00189248 _____ C:\WINDOWS\SysWOW64\PnkBstrB.exe
2017-01-27 16:59 - 2017-02-26 17:36 - 00003292 _____ C:\WINDOWS\System32\Tasks\OneDrive Standalone Update Task v2
2017-01-26 14:22 - 2016-12-21 04:08 - 00142848 _____ (Microsoft Corporation) C:\WINDOWS\system32\poqexec.exe
2017-01-26 14:22 - 2016-12-21 01:44 - 00120320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\poqexec.exe
2017-01-25 20:07 - 2017-01-25 20:07 - 00000000 ____D C:\Users\Eduardo Araujo\AppData\Roaming\Steam
2017-01-25 09:17 - 2017-02-19 18:20 - 00001289 _____ C:\Users\Eduardo Araujo\Desktop\Google Chrome.lnk
2017-01-19 07:45 - 2017-01-23 11:56 - 00029016 _____ C:\WINDOWS\SysWOW64\Drivers\X6va063_2017.01.24.11.34.55
2017-01-16 11:14 - 2011-12-12 15:28 - 00000219 _____ C:\WINDOWS\system.ini
2017-01-11 08:53 - 2016-12-21 05:08 - 00245600 _____ (Microsoft Corporation) C:\WINDOWS\system32\offlinesam.dll
2017-01-11 08:53 - 2016-12-21 05:08 - 00136032 _____ (Microsoft Corporation) C:\WINDOWS\system32\ImplatSetup.dll
2017-01-11 08:53 - 2016-12-21 04:49 - 00328008 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Storage.ApplicationData.dll
2017-01-11 08:53 - 2016-12-21 04:46 - 00624048 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cng.sys
2017-01-11 08:53 - 2016-12-21 04:43 - 04130440 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfcore.dll
2017-01-11 08:53 - 2016-12-21 04:43 - 01454504 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfnetsrc.dll
2017-01-11 08:53 - 2016-12-21 04:43 - 01071736 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfnetcore.dll
2017-01-11 08:53 - 2016-12-21 04:42 - 22224480 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll
2017-01-11 08:53 - 2016-12-21 04:42 - 01988560 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmp4srcsnk.dll
2017-01-11 08:53 - 2016-12-21 04:42 - 01702392 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfasfsrcsnk.dll
2017-01-11 08:53 - 2016-12-21 04:42 - 01300600 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmpeg2srcsnk.dll
2017-01-11 08:53 - 2016-12-21 04:41 - 01600632 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppobjs.dll
2017-01-11 08:53 - 2016-12-21 04:15 - 22563840 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll
2017-01-11 08:53 - 2016-12-21 04:14 - 00043008 _____ (Microsoft Corporation) C:\WINDOWS\system32\LaunchWinApp.exe
2017-01-11 08:53 - 2016-12-21 04:08 - 00360448 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpencom.dll
2017-01-11 08:53 - 2016-12-21 04:06 - 06285312 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.dll
2017-01-11 08:53 - 2016-12-21 04:05 - 00425984 _____ (Microsoft Corporation) C:\WINDOWS\system32\aadcloudap.dll
2017-01-11 08:53 - 2016-12-21 04:05 - 00261632 _____ (Microsoft Corporation) C:\WINDOWS\system32\indexeddbserver.dll
2017-01-11 08:53 - 2016-12-21 04:01 - 09131008 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll
2017-01-11 08:53 - 2016-12-21 03:59 - 01908224 _____ (Microsoft Corporation) C:\WINDOWS\system32\AzureSettingSyncProvider.dll
2017-01-11 08:53 - 2016-12-21 03:59 - 00883712 _____ (Microsoft Corporation) C:\WINDOWS\system32\samsrv.dll
2017-01-11 08:53 - 2016-12-21 03:58 - 23678464 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2017-01-11 08:53 - 2016-12-21 03:56 - 00947712 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSVP9DEC.dll
2017-01-11 08:53 - 2016-12-21 03:56 - 00936960 _____ (Microsoft Corporation) C:\WINDOWS\system32\MCRecvSrc.dll
2017-01-11 08:53 - 2016-12-21 03:55 - 08129536 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll
2017-01-11 08:53 - 2016-12-21 03:55 - 04749312 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_nt.dll
2017-01-11 08:53 - 2016-12-21 03:53 - 06664192 _____ (Microsoft Corporation) C:\WINDOWS\system32\mspaint.exe
2017-01-11 08:53 - 2016-12-21 03:53 - 04474368 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_47.dll
2017-01-11 08:53 - 2016-12-21 03:51 - 08075776 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstscax.dll
2017-01-11 08:53 - 2016-12-21 03:51 - 05611008 _____ (Microsoft Corporation) C:\WINDOWS\system32\d2d1.dll
2017-01-11 08:53 - 2016-12-21 03:50 - 01490432 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll
2017-01-11 08:53 - 2016-12-21 03:49 - 04149248 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpcorets.dll
2017-01-11 08:53 - 2016-12-21 03:47 - 01121280 _____ (Microsoft Corporation) C:\WINDOWS\system32\aadtb.dll
2017-01-11 08:53 - 2016-12-21 02:59 - 00218976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\offlinesam.dll
2017-01-11 08:53 - 2016-12-21 02:09 - 00263472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Storage.ApplicationData.dll
2017-01-11 08:53 - 2016-12-21 02:01 - 20969928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll
2017-01-11 08:53 - 2016-12-21 01:46 - 00034304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LaunchWinApp.exe
2017-01-11 08:53 - 2016-12-21 01:43 - 00285184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.BlockedShutdown.dll
2017-01-11 08:53 - 2016-12-21 01:41 - 00253952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.BioFeedback.dll
2017-01-11 08:53 - 2016-12-21 01:41 - 00231936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.LockScreen.dll
2017-01-11 08:53 - 2016-12-21 01:40 - 00557568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\StoreAgent.dll
2017-01-11 08:53 - 2016-12-21 01:40 - 00180224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InstallAgent.exe
2017-01-11 08:53 - 2016-12-21 01:39 - 00223232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InstallAgentUserBroker.exe
2017-01-11 08:53 - 2016-12-21 01:38 - 00866816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Cred.dll
2017-01-11 08:53 - 2016-12-21 01:35 - 00198656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\indexeddbserver.dll
2017-01-11 08:53 - 2016-12-21 01:34 - 07626752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll
2017-01-11 08:53 - 2016-12-21 01:33 - 19413504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll
2017-01-11 08:53 - 2016-12-21 01:32 - 19417600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2017-01-11 08:53 - 2016-12-21 01:30 - 05398016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\aclui.dll
2017-01-11 08:53 - 2016-12-21 01:30 - 01255936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AzureSettingSyncProvider.dll
2017-01-11 08:53 - 2016-12-21 01:26 - 01155072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSVP9DEC.dll
2017-01-11 08:53 - 2016-12-21 01:25 - 06474752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mspaint.exe
2017-01-11 08:53 - 2016-12-21 01:24 - 06044160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakra.dll
2017-01-11 08:53 - 2016-12-21 01:22 - 01883648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Logon.dll
2017-01-11 08:53 - 2016-12-14 02:41 - 01235296 _____ (Microsoft Corporation) C:\WINDOWS\system32\aeinv.dll
2017-01-11 08:53 - 2016-12-14 02:34 - 02482280 _____ (Microsoft Corporation) C:\WINDOWS\system32\msmpeg2vdec.dll
2017-01-11 08:53 - 2016-12-14 02:23 - 00404832 _____ (Microsoft Corporation) C:\WINDOWS\system32\msv1_0.dll
2017-01-11 08:53 - 2016-12-14 02:21 - 02206496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msmpeg2vdec.dll
2017-01-11 08:53 - 2016-12-14 02:17 - 00319288 _____ (Microsoft Corporation) C:\WINDOWS\system32\wow64.dll
2017-01-11 08:53 - 2016-12-14 02:14 - 01694712 _____ (Microsoft Corporation) C:\WINDOWS\system32\winmde.dll
2017-01-11 08:53 - 2016-12-14 02:01 - 01557808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winmde.dll
2017-01-11 08:53 - 2016-12-14 02:01 - 00382784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AUDIOKSE.dll
2017-01-11 08:53 - 2016-12-14 02:01 - 00076984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\remoteaudioendpoint.dll
2017-01-11 08:53 - 2016-12-14 01:48 - 01631232 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.Resources.dll
2017-01-11 08:53 - 2016-12-14 01:46 - 01631232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.Resources.dll
2017-01-11 08:53 - 2016-12-14 01:43 - 00201728 _____ (Microsoft Corporation) C:\WINDOWS\system32\ScDeviceEnum.dll
2017-01-11 08:53 - 2016-12-14 01:42 - 00236544 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinSCard.dll
2017-01-11 08:53 - 2016-12-14 01:42 - 00208896 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.UI.Logon.ProxyStub.dll
2017-01-11 08:53 - 2016-12-14 01:42 - 00167424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WinSCard.dll
2017-01-11 08:53 - 2016-12-14 01:40 - 00193536 _____ (Microsoft Corporation) C:\WINDOWS\system32\certprop.dll
2017-01-11 08:53 - 2016-12-14 01:39 - 00290816 _____ (Microsoft Corporation) C:\WINDOWS\system32\updatehandlers.dll
2017-01-11 08:53 - 2016-12-14 01:38 - 17188864 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll
2017-01-11 08:53 - 2016-12-14 01:38 - 13869056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.dll
2017-01-11 08:53 - 2016-12-14 01:38 - 00213504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.CredDialogController.dll
2017-01-11 08:53 - 2016-12-14 01:37 - 00090112 _____ (Microsoft Corporation) C:\WINDOWS\system32\updatepolicy.dll
2017-01-11 08:53 - 2016-12-14 01:36 - 00539648 _____ (Microsoft Corporation) C:\WINDOWS\system32\usocore.dll
2017-01-11 08:53 - 2016-12-14 01:36 - 00074752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\updatepolicy.dll
2017-01-11 08:53 - 2016-12-14 01:35 - 00755712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kerberos.dll
2017-01-11 08:53 - 2016-12-14 01:35 - 00600576 _____ (Microsoft Corporation) C:\WINDOWS\system32\cryptui.dll
2017-01-11 08:53 - 2016-12-14 01:35 - 00553984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cryptui.dll
2017-01-11 08:53 - 2016-12-14 01:26 - 00932864 _____ (Microsoft Corporation) C:\WINDOWS\system32\kerberos.dll
2017-01-11 08:53 - 2016-12-14 01:26 - 00869888 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapi.dll
2017-01-11 08:53 - 2016-12-14 01:24 - 01005568 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3D12.dll
2017-01-11 08:53 - 2016-12-14 01:24 - 00673792 _____ (Microsoft Corporation) C:\WINDOWS\system32\winlogon.exe
2017-01-11 08:53 - 2016-12-14 01:23 - 03134976 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpcore.dll
2017-01-11 08:53 - 2016-12-14 01:22 - 02748416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdpcore.dll
2017-01-11 08:53 - 2016-12-14 01:22 - 02317824 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll
2017-01-11 08:53 - 2016-12-14 01:22 - 01513472 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys
2017-01-11 08:53 - 2016-12-14 01:22 - 00391168 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuuhext.dll
2017-01-11 08:53 - 2016-11-02 09:01 - 00484584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioSes.dll
2017-01-11 08:53 - 2016-11-02 07:28 - 00324608 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.LockScreen.dll
2017-01-11 08:53 - 2016-08-02 01:30 - 00822784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakradiag.dll
2017-01-11 08:52 - 2016-12-21 05:04 - 07816032 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2017-01-11 08:52 - 2016-12-21 04:43 - 00092512 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpudd.dll
2017-01-11 08:52 - 2016-12-21 04:42 - 00241504 _____ (Microsoft Corporation) C:\WINDOWS\system32\CloudExperienceHost.dll
2017-01-11 08:52 - 2016-12-21 04:37 - 00455520 _____ (Microsoft Corporation) C:\WINDOWS\system32\securekernel.exe
2017-01-11 08:52 - 2016-12-21 04:13 - 00119808 _____ (Microsoft Corporation) C:\WINDOWS\system32\KnobsCsp.dll
2017-01-11 08:52 - 2016-12-21 04:12 - 00083968 _____ (Microsoft Corporation) C:\WINDOWS\system32\ProvPluginEng.dll
2017-01-11 08:52 - 2016-12-21 04:10 - 00234496 _____ (Microsoft Corporation) C:\WINDOWS\system32\KnobsCore.dll
2017-01-11 08:52 - 2016-12-21 04:09 - 00368640 _____ (Microsoft Corporation) C:\WINDOWS\system32\OneBackupHandler.dll
2017-01-11 08:52 - 2016-12-21 04:09 - 00363520 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.BioFeedback.dll
2017-01-11 08:52 - 2016-12-21 04:08 - 01292288 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSVPXENC.dll
2017-01-11 08:52 - 2016-12-21 04:08 - 00418304 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.BlockedShutdown.dll
2017-01-11 08:52 - 2016-12-21 04:08 - 00349184 _____ (Microsoft Corporation) C:\WINDOWS\system32\provengine.dll
2017-01-11 08:52 - 2016-12-21 04:08 - 00289792 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeveloperOptionsSettingsHandlers.dll
2017-01-11 08:52 - 2016-12-21 04:08 - 00211968 _____ (Microsoft Corporation) C:\WINDOWS\system32\InstallAgent.exe
2017-01-11 08:52 - 2016-12-21 04:07 - 00748544 _____ (Microsoft Corporation) C:\WINDOWS\system32\StoreAgent.dll
2017-01-11 08:52 - 2016-12-21 04:06 - 00310784 _____ (Microsoft Corporation) C:\WINDOWS\system32\SyncSettings.dll
2017-01-11 08:52 - 2016-12-21 04:06 - 00260608 _____ (Microsoft Corporation) C:\WINDOWS\system32\InstallAgentUserBroker.exe
2017-01-11 08:52 - 2016-12-21 04:06 - 00147456 _____ (Microsoft Corporation) C:\WINDOWS\system32\winsrv.dll
2017-01-11 08:52 - 2016-12-21 04:05 - 00049152 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Shell.dll
2017-01-11 08:52 - 2016-12-21 04:00 - 00440320 _____ (Microsoft Corporation) C:\WINDOWS\system32\fhcfg.dll
2017-01-11 08:52 - 2016-12-21 03:57 - 00462336 _____ (Microsoft Corporation) C:\WINDOWS\system32\fhsettingsprovider.dll
2017-01-11 08:52 - 2016-12-21 03:54 - 05511680 _____ (Microsoft Corporation) C:\WINDOWS\system32\aclui.dll
2017-01-11 08:52 - 2016-12-21 03:53 - 01692672 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.onecore.dll
2017-01-11 08:52 - 2016-12-21 03:51 - 02275840 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll
2017-01-11 08:52 - 2016-12-21 03:49 - 02691072 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Logon.dll
2017-01-11 08:52 - 2016-12-21 03:49 - 01062912 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncCore.dll
2017-01-11 08:52 - 2016-12-21 02:02 - 03892864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfcore.dll
2017-01-11 08:52 - 2016-12-21 02:02 - 01852720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmp4srcsnk.dll
2017-01-11 08:52 - 2016-12-21 02:02 - 01360464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfnetsrc.dll
2017-01-11 08:52 - 2016-12-21 02:02 - 01277344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfasfsrcsnk.dll
2017-01-11 08:52 - 2016-12-21 02:02 - 01201872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmpeg2srcsnk.dll
2017-01-11 08:52 - 2016-12-21 02:02 - 00980832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfnetcore.dll
2017-01-11 08:52 - 2016-12-21 01:40 - 00318976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdpencom.dll
2017-01-11 08:52 - 2016-12-21 01:40 - 00237056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SyncSettings.dll
2017-01-11 08:52 - 2016-12-21 01:39 - 01300480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSVPXENC.dll
2017-01-11 08:52 - 2016-12-21 01:35 - 04612608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.dll
2017-01-11 08:52 - 2016-12-21 01:27 - 00640000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MCRecvSrc.dll
2017-01-11 08:52 - 2016-12-21 01:25 - 07469056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mstscax.dll
2017-01-11 08:52 - 2016-12-21 01:24 - 05061120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d2d1.dll
2017-01-11 08:52 - 2016-12-21 01:24 - 03733504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_47.dll
2017-01-11 08:52 - 2016-12-21 01:24 - 00886272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\aadtb.dll
2017-01-11 08:52 - 2016-12-21 01:22 - 00860672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSyncCore.dll
2017-01-11 08:52 - 2016-12-14 02:41 - 00590960 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioSes.dll
2017-01-11 08:52 - 2016-12-14 02:33 - 01356864 _____ (Microsoft Corporation) C:\WINDOWS\system32\ClipUp.exe
2017-01-11 08:52 - 2016-12-14 02:19 - 00584544 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncHost.exe
2017-01-11 08:52 - 2016-12-14 02:18 - 00715104 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vhdmp.sys
2017-01-11 08:52 - 2016-12-14 02:18 - 00335712 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\pci.sys
2017-01-11 08:52 - 2016-12-14 02:14 - 00418952 _____ (Microsoft Corporation) C:\WINDOWS\system32\AUDIOKSE.dll
2017-01-11 08:52 - 2016-12-14 02:14 - 00089416 _____ (Microsoft Corporation) C:\WINDOWS\system32\remoteaudioendpoint.dll
2017-01-11 08:52 - 2016-12-14 02:08 - 00341344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msv1_0.dll
2017-01-11 08:52 - 2016-12-14 02:06 - 00509792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSyncHost.exe
2017-01-11 08:52 - 2016-12-14 01:46 - 00206848 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys
2017-01-11 08:52 - 2016-12-14 01:45 - 00147968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32k.sys
2017-01-11 08:52 - 2016-12-14 01:42 - 00352768 _____ (Microsoft Corporation) C:\WINDOWS\system32\cloudAP.dll
2017-01-11 08:52 - 2016-12-14 01:41 - 00223744 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe
2017-01-11 08:52 - 2016-12-14 01:40 - 00324096 _____ (Microsoft Corporation) C:\WINDOWS\system32\domgmt.dll
2017-01-11 08:52 - 2016-12-14 01:40 - 00266752 _____ (Microsoft Corporation) C:\WINDOWS\system32\ConsoleLogon.dll
2017-01-11 08:52 - 2016-12-14 01:40 - 00231424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CloudBackupSettings.dll
2017-01-11 08:52 - 2016-12-14 01:40 - 00104448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Internal.UI.Logon.ProxyStub.dll
2017-01-11 08:52 - 2016-12-14 01:39 - 00837632 _____ (Microsoft Corporation) C:\WINDOWS\system32\wbiosrvc.dll
2017-01-11 08:52 - 2016-12-14 01:39 - 00257024 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.CredDialogController.dll
2017-01-11 08:52 - 2016-12-14 01:38 - 00295424 _____ (Microsoft Corporation) C:\WINDOWS\system32\CloudBackupSettings.dll
2017-01-11 08:52 - 2016-12-14 01:36 - 01002496 _____ (Microsoft Corporation) C:\WINDOWS\system32\SRH.dll
2017-01-11 08:52 - 2016-12-14 01:35 - 00712192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapi.dll
2017-01-11 08:52 - 2016-12-14 01:32 - 00806400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3D12.dll
2017-01-11 08:52 - 2016-12-14 01:32 - 00497152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LogonController.dll
2017-01-11 08:52 - 2016-12-14 01:25 - 02009600 _____ (Microsoft Corporation) C:\WINDOWS\system32\SRHInproc.dll
2017-01-11 08:52 - 2016-12-14 01:23 - 01231872 _____ (Microsoft Corporation) C:\WINDOWS\system32\dosvc.dll
2017-01-11 08:52 - 2016-12-14 01:22 - 02998272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32kfull.sys
2017-01-11 08:52 - 2016-12-14 01:22 - 00707584 _____ (Microsoft Corporation) C:\WINDOWS\system32\LogonController.dll
2017-01-11 08:52 - 2016-12-14 01:21 - 03616768 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys
2017-01-11 08:52 - 2016-11-02 08:00 - 00534096 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEng.dll
2017-01-11 08:52 - 2016-11-02 07:22 - 00337920 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEndpointBuilder.dll
2017-01-11 08:52 - 2016-11-02 07:21 - 00942080 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll
2017-01-10 07:31 - 2017-01-10 07:31 - 00029016 _____ C:\WINDOWS\SysWOW64\Drivers\X6va063_2017.01.10.10.39.34
2017-01-10 07:28 - 2017-03-18 10:22 - 00000000 ____D C:\Users\Eduardo Araujo\AppData\LocalLow\Mozilla
2017-01-09 16:50 - 2017-01-09 16:50 - 00029016 _____ C:\WINDOWS\SysWOW64\Drivers\X6va063_2017.01.09.21.09.34
2017-01-09 13:50 - 2017-02-11 09:28 - 00000000 ____D C:\Users\Eduardo Araujo\Ferramentas
2017-01-08 09:13 - 2017-01-08 09:13 - 00029016 _____ C:\WINDOWS\SysWOW64\Drivers\X6va063_2017.01.08.13.03.49
2017-01-02 20:52 - 2017-01-02 20:52 - 00029016 _____ C:\WINDOWS\SysWOW64\Drivers\X6va063_2017.01.03.10.51.32
2016-12-31 08:31 - 2016-12-31 08:31 - 00029016 _____ C:\WINDOWS\SysWOW64\Drivers\X6va063_2016.12.31.18.29.31
2016-12-26 13:26 - 2016-12-26 13:26 - 00029016 _____ C:\WINDOWS\SysWOW64\Drivers\X6va063_2016.12.26.20.29.36
2016-12-23 19:55 - 2016-12-23 19:55 - 00029016 _____ C:\WINDOWS\SysWOW64\Drivers\X6va063_2016.12.24.01.09.25
2016-12-23 09:29 - 2016-12-23 09:29 - 00029016 _____ C:\WINDOWS\SysWOW64\Drivers\X6va063_2016.12.23.14.08.38
2016-12-21 16:01 - 2016-12-21 16:01 - 00422557 _____ C:\Users\Eduardo Araujo\15683175_1387849384559925_2146006645_n.png
2016-12-21 13:55 - 2016-12-21 13:55 - 01800938 _____ C:\Users\Eduardo Araujo\Semlo.png
2016-12-21 11:27 - 2016-12-21 11:27 - 02355554 _____ C:\Users\Eduardo Araujo\dsdstítulo.png
2016-12-19 17:17 - 2016-12-19 17:17 - 00504254 _____ C:\Users\Eduardo Araujo\15592279_1385328674811996_736912905_n.png
2016-12-19 17:17 - 2016-12-19 17:17 - 00465906 _____ C:\Users\Eduardo Araujo\15592480_1385328668145330_1371063264_n.png
2016-12-19 13:43 - 2017-03-16 15:19 - 00000000 ____D C:\Users\Eduardo Araujo\AppData\Roaming\TS3Client
2016-12-19 13:43 - 2016-12-19 13:43 - 00001231 _____ C:\Users\Public\Desktop\TeamSpeak 3.lnk
2016-12-19 13:43 - 2016-12-19 13:43 - 00001193 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamSpeak 3 Client.lnk
2016-12-19 13:43 - 2016-12-19 13:43 - 00000000 ____D C:\Program Files (x86)\TeamSpeak 3 Client
2016-12-19 13:21 - 2016-12-19 13:21 - 00037164 _____ C:\Users\Eduardo Araujo\937a175be460fe31cbd1b923ed40bed6.jpg
2016-12-19 07:35 - 2016-12-19 07:35 - 00029016 _____ C:\WINDOWS\SysWOW64\Drivers\X6va063_2016.12.19.12.53.22

==================== Três Meses Modificados arquivos e pastas ========

(Se uma entrada for incluída na fixlist, o arquivo/pasta será movido.)

2017-03-18 18:39 - 2016-08-11 11:43 - 00000000 ____D C:\WINDOWS\system32\SleepStudy
2017-03-18 18:27 - 2016-07-16 08:36 - 00000000 ____D C:\WINDOWS\CbsTemp
2017-03-18 15:40 - 2016-03-23 03:59 - 00000000 ____D C:\Users\Eduardo Araujo\AppData\Roaming\uTorrent
2017-03-18 10:05 - 2016-08-28 11:38 - 00000000 ____D C:\Users\Eduardo Araujo\AppData\Roaming\vlc
2017-03-18 02:51 - 2016-08-11 12:10 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT
2017-03-18 02:51 - 2015-08-07 09:59 - 00000000 __SHD C:\Users\Eduardo Araujo\IntelGraphicsProfiles
2017-03-18 02:35 - 2016-07-16 08:47 - 00000000 ____D C:\WINDOWS\AppReadiness
2017-03-18 00:24 - 2016-08-04 18:21 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2017-03-17 23:18 - 2016-07-16 08:47 - 00000000 ___HD C:\Program Files\WindowsApps
2017-03-16 23:18 - 2016-10-25 17:13 - 00000000 ____D C:\Program Files (x86)\Priston Tale 2
2017-03-16 20:46 - 2016-07-16 20:04 - 01979524 _____ C:\WINDOWS\system32\prfh0416.dat
2017-03-16 20:46 - 2016-07-16 20:04 - 01580450 _____ C:\WINDOWS\system32\prfc0416.dat
2017-03-16 20:46 - 2015-08-07 09:38 - 00005664 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2017-03-16 19:37 - 2013-11-02 02:33 - 00000000 ____D C:\WINDOWS\system32\MRT
2017-03-16 17:49 - 2013-11-02 02:33 - 138634176 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2017-03-14 22:56 - 2016-07-16 08:47 - 00000000 ____D C:\WINDOWS\SysWOW64\Macromed
2017-03-14 22:56 - 2016-07-16 08:47 - 00000000 ____D C:\WINDOWS\system32\Macromed
2017-03-10 02:17 - 2016-07-16 08:49 - 00835576 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2017-03-10 02:17 - 2016-07-16 08:49 - 00177656 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl
2017-03-08 20:21 - 2016-07-16 08:45 - 00000000 ____D C:\WINDOWS\INF
2017-03-08 20:03 - 2014-04-08 04:12 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2017-03-08 19:55 - 2016-07-16 08:47 - 00000000 ____D C:\WINDOWS\system32\NDF
2017-03-06 17:56 - 2016-08-11 11:51 - 00000000 ____D C:\Users\Eduardo Araujo
2017-03-04 09:39 - 2014-04-13 17:06 - 00000000 ____D C:\Games
2017-03-04 09:31 - 2013-05-13 13:43 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2017-02-28 13:17 - 2016-08-07 19:46 - 00000000 ____D C:\Users\Eduardo Araujo\AppData\Local\Adobe
2017-02-28 13:02 - 2013-11-04 00:26 - 00000000 ____D C:\Users\Todos os Usuários\Oracle
2017-02-28 13:02 - 2013-11-04 00:26 - 00000000 ____D C:\ProgramData\Oracle
2017-02-28 13:00 - 2016-02-04 02:07 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2017-02-28 13:00 - 2013-11-04 00:26 - 00000000 ____D C:\Program Files (x86)\Java
2017-02-28 12:58 - 2016-02-04 02:07 - 00097856 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\WindowsAccessBridge-32.dll
2017-02-26 17:36 - 2015-12-11 23:50 - 00000000 ___RD C:\Users\Eduardo Araujo\OneDrive
2017-02-26 17:36 - 2015-08-08 00:47 - 00002396 _____ C:\Users\Eduardo Araujo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2017-02-24 17:48 - 2016-07-16 03:04 - 00786432 _____ C:\WINDOWS\system32\config\BBI
2017-02-24 17:19 - 2014-01-03 19:16 - 00001976 _____ C:\WINDOWS\Tasks\Plus-HD-4.4-chromeinstaller.job
2017-02-24 12:27 - 2016-07-16 08:47 - 00000000 ____D C:\WINDOWS\LiveKernelReports
2017-02-24 12:17 - 2016-08-11 12:10 - 00004444 _____ C:\WINDOWS\System32\Tasks\Plus-HD-4.4-chromeinstaller
2017-02-24 09:47 - 2016-12-01 10:47 - 00075136 _____ C:\WINDOWS\SysWOW64\PnkBstrA.exe
2017-02-20 11:13 - 2014-08-20 02:26 - 00000000 ____D C:\Users\Eduardo Araujo\AppData\Local\ElevatedDiagnostics
2017-02-19 18:20 - 2016-06-17 02:48 - 00000000 ____D C:\Program Files (x86)\Phakichreenash
2017-02-18 07:55 - 2016-07-18 00:47 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mirillis

==================== Arquivos na raiz de alguns diretórios =======

2016-06-28 01:12 - 2016-11-09 10:50 - 0000132 _____ () C:\Users\Eduardo Araujo\AppData\Roaming\Adobe GIF Format CS6 Prefs
2016-11-26 12:50 - 2016-11-26 12:52 - 0000132 _____ () C:\Users\Eduardo Araujo\AppData\Roaming\Adobe PNG Format CS6 Prefs
2014-08-20 02:10 - 2014-08-20 02:10 - 0000000 _____ () C:\Users\Eduardo Araujo\AppData\Roaming\aps.uninstall.scan.results
2014-08-20 06:04 - 2014-08-20 06:04 - 0000000 _____ () C:\Users\Eduardo Araujo\AppData\Roaming\FB01.tmp
2014-07-22 00:15 - 2014-07-22 00:15 - 0000112 _____ () C:\Users\Eduardo Araujo\AppData\Roaming\JP2K CS6 Prefs
2016-02-12 13:42 - 2016-02-12 17:09 - 0007859 _____ () C:\Users\Eduardo Araujo\AppData\Roaming\pcouffin.cat
2016-02-12 13:42 - 2016-02-12 17:09 - 0001167 _____ () C:\Users\Eduardo Araujo\AppData\Roaming\pcouffin.inf
2016-02-12 13:42 - 2016-02-12 17:09 - 0000055 _____ () C:\Users\Eduardo Araujo\AppData\Roaming\pcouffin.log
2014-01-03 20:05 - 2014-10-21 23:05 - 0000127 _____ () C:\Users\Eduardo Araujo\AppData\Roaming\WB.CFG
2014-02-03 21:46 - 2014-02-03 21:47 - 0005120 _____ () C:\Users\Eduardo Araujo\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2014-01-03 19:05 - 2014-01-03 19:04 - 0351124 _____ () C:\Users\Eduardo Araujo\AppData\Local\mysearchdial-speeddial.crx
2014-03-30 19:37 - 2014-03-30 19:37 - 0007617 _____ () C:\Users\Eduardo Araujo\AppData\Local\Resmon.ResmonCfg
2016-08-11 11:47 - 2016-08-11 11:47 - 0000000 ____H () C:\ProgramData\DP45977C.lfl
2013-11-22 08:40 - 2013-11-22 08:40 - 0170344 _____ (Baidu, Inc.) C:\ProgramData\FileSplitUpLoad.dll
2017-03-06 17:50 - 2017-03-06 17:50 - 0000016 _____ () C:\ProgramData\mntemp
2017-03-06 17:50 - 2017-03-06 17:50 - 0005054 _____ () C:\ProgramData\mudtcpaz.vzs

Arquivos para serem movidos ou deletados:
====================
C:\ProgramData\FileSplitUpLoad.dll
C:\Users\Todos os Usuários\FileSplitUpLoad.dll


Alguns arquivos em TEMP:
====================
2016-10-09 12:08 - 2015-08-18 02:39 - 0634616 _____ () C:\Users\Eduardo Araujo\AppData\Local\Temp\1476025726.exe
2016-11-08 22:14 - 2016-11-08 22:14 - 5147136 _____ () C:\Users\Eduardo Araujo\AppData\Local\Temp\637925325.exe
2017-02-04 21:07 - 2017-02-04 21:07 - 0065536 _____ (Sony DADC Austria AG) C:\Users\Eduardo Araujo\AppData\Local\Temp\drm_dialogs.dll
2017-02-04 21:06 - 2017-02-04 21:06 - 0204800 _____ (Sony DADC Austria AG) C:\Users\Eduardo Araujo\AppData\Local\Temp\drm_dyndata_7380012.dll
2017-01-22 09:16 - 2017-03-13 21:04 - 37179352 _____ () C:\Users\Eduardo Araujo\AppData\Local\Temp\InstallIMVU_530.0.exe
2016-09-25 17:21 - 2016-11-13 07:57 - 0186280 _____ (RealNetworks, Inc.) C:\Users\Eduardo Araujo\AppData\Local\Temp\lowproc.exe
2017-03-06 17:44 - 2017-03-06 17:50 - 41246248 _____ (Movavi) C:\Users\Eduardo Araujo\AppData\Local\Temp\MovaviVideoConverterSetup.exe
2016-09-25 17:20 - 2016-09-25 17:21 - 1190832 _____ (RealNetworks, Inc.) C:\Users\Eduardo Araujo\AppData\Local\Temp\rnsetup0.exe
2016-12-01 22:59 - 2016-12-01 22:59 - 1191856 _____ (RealNetworks, Inc.) C:\Users\Eduardo Araujo\AppData\Local\Temp\rnsetup1.exe
2016-12-02 18:41 - 2016-12-02 18:42 - 1191856 _____ (RealNetworks, Inc.) C:\Users\Eduardo Araujo\AppData\Local\Temp\rnsetup2.exe
2017-02-09 10:53 - 2017-02-09 10:53 - 0225472 _____ (SlimWare Utilities, Inc.) C:\Users\Eduardo Araujo\AppData\Local\Temp\scp54AB.tmp.exe
2016-09-25 17:21 - 2016-11-13 07:58 - 0096496 _____ (RealNetworks, Inc.) C:\Users\Eduardo Araujo\AppData\Local\Temp\stubhelper.dll

==================== Bamital & volsnap ======================

(Não há correção automática para arquivos que não passaram na verificação.)

C:\WINDOWS\system32\winlogon.exe => O arquivo é assinado digitalmente
C:\WINDOWS\system32\wininit.exe => O arquivo é assinado digitalmente
C:\WINDOWS\explorer.exe => O arquivo é assinado digitalmente
C:\WINDOWS\SysWOW64\explorer.exe => O arquivo é assinado digitalmente
C:\WINDOWS\system32\svchost.exe => O arquivo é assinado digitalmente
C:\WINDOWS\SysWOW64\svchost.exe => O arquivo é assinado digitalmente
C:\WINDOWS\system32\services.exe => O arquivo é assinado digitalmente
C:\WINDOWS\system32\User32.dll => O arquivo é assinado digitalmente
C:\WINDOWS\SysWOW64\User32.dll => O arquivo é assinado digitalmente
C:\WINDOWS\system32\userinit.exe => O arquivo é assinado digitalmente
C:\WINDOWS\SysWOW64\userinit.exe => O arquivo é assinado digitalmente
C:\WINDOWS\system32\rpcss.dll => O arquivo é assinado digitalmente
C:\WINDOWS\system32\dnsapi.dll => O arquivo é assinado digitalmente
C:\WINDOWS\SysWOW64\dnsapi.dll => O arquivo é assinado digitalmente
C:\WINDOWS\system32\Drivers\volsnap.sys => O arquivo é assinado digitalmente

LastRegBack: 2017-03-09 12:46

==================== Fim de FRST.txt ============================