Resultado do exame da Farbar Recovery Scan Tool (FRST) (x64) Versão: 26-06-2019
Executado por Gerson M. Costa (administrador) em BENEPLACITO (Acer Aspire E1-571) (30-06-2019 09:35:47)
Executando a partir de C:\Users\Gerson M. Costa\Downloads
Perfis Carregados: Gerson M. Costa & MSSQL$SRVCRBD01 (Perfis Disponíveis: Gerson M. Costa & NeroMediaHomeUser.4 & JacuíII & MSSQL$SRVCRBD01)
Platform: Windows 10 Home Single Language Versão 1803 17134.829 (X64) Idioma: Português (Brasil)
Navegador padrão: Chrome
Modo da Inicialização: Normal
Tutorial da Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processos (Whitelisted) =================

(Se uma entrada for incluída na fixlist, o processo será fechado. O arquivo não será movido.)

() [Arquivo não assinado] C:\Program Files\WindowsApps\Microsoft.SkypeApp_14.46.60.0_x64__kzf8qxf38zg5c\SkypeBackgroundHost.exe
() [Arquivo não assinado] C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.19031.11411.0_x64__8wekyb3d8bbwe\Video.UI.exe
(Acronis International GmbH -> ) C:\Program Files (x86)\Common Files\Acronis\CDP\afcdpsrv.exe
(Acronis International GmbH -> ) C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedhlp.exe
(Acronis International GmbH -> ) C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedul2.exe
(Acronis International GmbH -> ) C:\Program Files (x86)\Common Files\Acronis\SyncAgent\syncagentsrv.exe
(Acronis International GmbH -> Acronis International GmbH) C:\Program Files (x86)\Common Files\Acronis\ActiveProtection\anti_ransomware_service.exe
(Acronis International GmbH -> Acronis International GmbH) C:\Program Files (x86)\Common Files\Acronis\Infrastructure\mms_mini.exe
(Adobe Systems, Incorporated -> Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
(Apple Inc. -> Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(AVG Netherlands B.V. -> TuneUp Software) C:\Program Files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesApp64.exe
(AVG Netherlands B.V. -> TuneUp Software) C:\Program Files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesService64.exe
(ELAN Microelectronics Corporation -> ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrl.exe
(ELAN Microelectronics Corporation -> ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrlHelper.exe
(ELAN Microelectronics Corporation -> ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDService.exe
(Google Inc -> Google LLC) C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
(Intel(R) Biometric and Context Agent -> Intel(R) Corporation) C:\Program Files\Intel\BCA\pabeSvc64.exe
(Intel(R) pGFX -> Intel Corporation) C:\Windows\System32\igfxCUIService.exe
(Intel(R) pGFX -> Intel Corporation) C:\Windows\System32\igfxEM.exe
(Intel(R) pGFX -> Intel Corporation) C:\Windows\System32\igfxHK.exe
(Intel(R) pGFX -> Intel Corporation) C:\Windows\System32\igfxTray.exe
(McAfee, Inc. -> McAfee, Inc.) C:\Program Files\TrueKey\McAfee.TrueKey.Service.exe
(McAfee, Inc. -> McAfee, Inc.) C:\Program Files\TrueKey\McTkSchedulerService.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Microsoft SQL Server\MSSQL12.SRVCRBD01\MSSQL\Binn\sqlservr.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Microsoft Corporation) [Arquivo não assinado] C:\Program Files\WindowsApps\Microsoft.SkypeApp_14.46.60.0_x64__kzf8qxf38zg5c\SkypeApp.exe
(Microsoft Corporation) [Arquivo não assinado] C:\Program Files\WindowsApps\Microsoft.SkypeApp_14.46.60.0_x64__kzf8qxf38zg5c\SkypeBridge\SkypeBridge.exe
(Microsoft Windows -> Microsoft Corporation) C:\Program Files\Windows Defender\MSASCuiL.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\Speech_OneCore\common\SpeechRuntime.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\RemindersServer.exe
(Mozilla Corporation -> Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
(Mozilla Corporation -> Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
(Mozilla Corporation -> Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
(Mozilla Corporation -> Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
(Mozilla Corporation -> Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
(TeamViewer GmbH -> TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe

==================== Registro (Whitelisted) ===========================

(Se uma entrada for incluída na fixlist, o ítem no Registro será restaurado para o padrão ou removido. O arquivo não será movido.)

HKLM\...\Run: [SecurityHealth] => C:\Program Files\Windows Defender\MSASCuiL.exe [638872 2018-04-11] (Microsoft Windows -> Microsoft Corporation)
HKLM\...\Run: [ETDCtrl] => C:\Program Files\Elantech\ETDCtrl.exe [3242696 2016-03-14] (ELAN Microelectronics Corporation -> ELAN Microelectronics Corp.)
HKLM\...\Run: [Acronis Scheduler2 Service] => C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedhlp.exe [752168 2019-03-25] (Acronis International GmbH -> )
HKLM Group Policy restriction on software: %systemroot%\system32\mrt.exe <==== ATENÇÃO
HKLM\SOFTWARE\Policies\Microsoft\Windows Defender: Restrição <==== ATENÇÃO
HKU\S-1-5-19\...\RunOnce: [WAB Migrate] => C:\Program Files\Windows Mail\wab.exe [518144 2018-04-11] (Microsoft Windows -> Microsoft Corporation)
HKU\S-1-5-20\...\RunOnce: [WAB Migrate] => C:\Program Files\Windows Mail\wab.exe [518144 2018-04-11] (Microsoft Windows -> Microsoft Corporation)
HKU\S-1-5-80-254692716-3798679861-1845837179-1675217483-2354768293\...\RunOnce: [WAB Migrate] => C:\Program Files\Windows Mail\wab.exe [518144 2018-04-11] (Microsoft Windows -> Microsoft Corporation)
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files (x86)\Google\Chrome\Application\74.0.3729.169\Installer\chrmstp.exe [2019-05-22] (Google LLC -> Google Inc.)
HKLM\Software\...\Authentication\Credential Providers: [{B7724AE5-1135-4889-8A5F-CA98BE6CA1ED}] -> C:\Program Files\TrueKey\McAfee.TrueKey.CredentialProvider.dll [2016-07-22] (McAfee, Inc. -> McAfee, Inc.)
Lsa: [Notification Packages] scecli C:\Program Files\TrueKey\McAfeeTrueKeyPasswordFilter
GroupPolicy: Restrição - Chrome <==== ATENÇÃO
FF HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restrição <==== ATENÇÃO

==================== Tarefas Agendadas (Whitelisted) =============

(Se uma entrada for incluída na fixlist, será removida do Registro. O arquivo não será movido, a menos que seja colocado separadamente.)

Task: {0A9E5DCC-B14F-426F-9BEB-5E372A3E1D45} - System32\Tasks\dQrdGBVvC => C:\WINDOWS\system32\rundll32.exe "C:\Program Files (x86)\dQrdGBVvC\dQrdGBVvC.dll",dQrdGBVvC <==== ATENÇÃO
Task: {0DF06FF2-A89C-4AA8-929F-3C9727FAE811} - System32\Tasks\Java Update Scheduler => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [645456 2019-04-01] (Oracle America, Inc. -> Oracle Corporation)
Task: {179470A5-83AD-49D8-8596-B4DB7BCCFB3E} - System32\Tasks\Avast Software\Overseer => C:\Program Files\Common Files\Avast Software\Overseer\overseer.exe [2281944 2019-06-04] (AVAST Software s.r.o. -> AVAST Software)
Task: {33567159-55E6-4E7F-A6E4-5022B2F63421} - System32\Tasks\Microsoft\Office\OfficeBackgroundTaskHandlerRegistration => C:\Program Files\Microsoft Office\root\Office16\officebackgroundtaskhandler.exe [2208400 2019-06-24] (Microsoft Corporation -> Microsoft Corporation)
Task: {3C82C7FF-3E9C-4127-8713-246D5E64D2D0} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [156456 2019-06-07] (Google Inc -> Google LLC)
Task: {56BF3EC1-03E5-48B9-9322-6B681AA20254} - System32\Tasks\avast! Windows 10 Start Menu helper => c:\program files\avast software\avast\asww10mon.exe
Task: {5BAC7604-1AE3-4A0C-9C98-4C4D87605FC7} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn2016 => C:\Program Files\Microsoft Office\root\Office16\msoia.exe [6440520 2019-06-24] (Microsoft Corporation -> Microsoft Corporation)
Task: {75B41582-53F9-403E-A461-2AAE18AE48F5} - System32\Tasks\Microsoft\Office\OfficeBackgroundTaskHandlerLogon => C:\Program Files\Microsoft Office\root\Office16\officebackgroundtaskhandler.exe [2208400 2019-06-24] (Microsoft Corporation -> Microsoft Corporation)
Task: {7CE85729-8B71-45BC-8637-943748459C3E} - System32\Tasks\Microsoft\Office\Office Feature Updates Logon => C:\Program Files\Microsoft Office\root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\sdxhelper.exe [152112 2019-06-24] (Microsoft Corporation -> Microsoft Corporation)
Task: {952552F1-A42B-4E88-B47C-0F4EEFF43003} - \Microsoft\Windows\UNP\RunCampaignManager -> Nenhum Arquivo <==== ATENÇÃO
Task: {9E1796F0-20E1-4390-AA78-F626DACEE8FD} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack2016 => C:\Program Files\Microsoft Office\root\Office16\msoia.exe [6440520 2019-06-24] (Microsoft Corporation -> Microsoft Corporation)
Task: {AA7FEC50-B571-46B5-BE03-8023CD536A89} - System32\Tasks\Opera scheduled Autoupdate 1559766507 => C:\Users\Gerson M. Costa\AppData\Local\Programs\Opera\launcher.exe [1493592 2019-06-14] (Opera Software AS -> Opera Software)
Task: {B61B5760-F062-4FCA-84AB-B95B49C614A1} - System32\Tasks\TuneUpUtilities_Task_BkGndMaintenance2013 => C:\Program Files (x86)\TuneUp Utilities 2014\OneClick.exe [460088 2015-06-25] (AVG Netherlands B.V. -> TuneUp Software)
Task: {B6D929A4-74C6-47B1-ACAD-C3F9F6809A99} - System32\Tasks\Scheduled Updater - {f912895a-b6f4-4acc-8821-2eee3acfad6c} => C:\ProgramData\{F912895A-B6F4-4ACC-8821-2EEE3ACFAD6C}\asww10mon.exe
Task: {D8E0F2AE-AF23-4394-87DB-4D41EAFFB394} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1195544 2018-12-16] (Adobe Systems, Incorporated -> Adobe Systems Incorporated)
Task: {E6F3CC69-C06A-4C0E-8AD0-A0B18F58D3E3} - System32\Tasks\AVAST Software\Avast settings backup => C:\Program Files\Common Files\AV\avast! Antivirus\backup.exe
Task: {F1B48399-38ED-45C2-BA68-0C111BD89A82} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [156456 2019-06-07] (Google Inc -> Google LLC)
Task: {F796FDB4-0503-4226-9C7F-D488BDC6F6B2} - System32\Tasks\Microsoft\Office\Office Feature Updates => C:\Program Files\Microsoft Office\root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\sdxhelper.exe [152112 2019-06-24] (Microsoft Corporation -> Microsoft Corporation)

(Se uma entrada for incluída na fixlist, o arquivo da tarefa (.job) será movido. O arquivo que está sendo executado pela tarefa não será movido.)


==================== Internet (Whitelisted) ====================

(Se um ítem for incluído na fixlist, sendo um ítem do Registro, será removido ou restaurado para o padrão.)

Hosts: Há mais de uma entrada no Hosts. Veja a seção Hosts do Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{af66ded7-459f-44a2-8f84-b08c9af2a9b4}: [NameServer] 185.4.64.13,185.162.128.148,95.216.188.196,116.203.6.218
Tcpip\..\Interfaces\{ffebac61-2870-47cc-aee9-4006bace2446}: [NameServer] 185.4.64.13,185.162.128.148,95.216.188.196,116.203.6.218
Tcpip\..\Interfaces\{ffebac61-2870-47cc-aee9-4006bace2446}: [DhcpNameServer] 192.168.1.1

Internet Explorer:
==================
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = hxxp://minilua.com/
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://minilua.com/
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://minilua.com/
HKU\S-1-5-21-3482869830-628851189-821680398-1001\Software\Microsoft\Internet Explorer\Main,Search Page = hxxps://%66%65%65%64.%73%6F%6E%69%63-%73%65%61%72%63%68.%63%6F%6D/?p=mKO_AwFzXIpYRaHdGKBD8Dduob2dCzlFTW4O2lnFnp5mTx6_vO08SDNoHxHWlXliFfwvAUfVgUsgLgDcokTAlZd4WyzVRv0bM6UVqrfGc9_hlFsyVnJYLnG_xKYkobZcGJiwtYZj1Vn5_cwlTfyOw5IocoaAF4jF_BgE933NHHgIoDK-xDf2WEDc_8ZMzWfR&q={searchTerms}
HKU\S-1-5-21-3482869830-628851189-821680398-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://securedsearch.lavasoft.com/?pr=vmn&id=webcompa&ent=hp_WCYID10440__190604
HKU\S-1-5-21-3482869830-628851189-821680398-1001\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://minilua.com/
HKU\S-1-5-80-254692716-3798679861-1845837179-1675217483-2354768293\Software\Microsoft\Internet Explorer\Main,Search Page = hxxps://%66%65%65%64.%73%6F%6E%69%63-%73%65%61%72%63%68.%63%6F%6D/?p=mKO_AwFzXIpYRaHdGKBD8Dduob2dCzlFTW4O2lnFnp5mTx6_vO08SDNoHxHWlXliFfwvAUfVgUsgLgDcokTAlZd4WyzVRv0bM6UVqrfGc9_hlFsyVnJYLnG_xKYkobZcGJiwtYZj1Vn5_cwlTfyOw5IocoaAF4jF_BgE933NHHgIoDK-xDf2WEDc_8ZMzWfR&q={searchTerms}
HKU\S-1-5-80-254692716-3798679861-1845837179-1675217483-2354768293\Software\Microsoft\Internet Explorer\Main,Start Page = hxxps://%66%65%65%64.%68%65%6C%70%65%72%62%61%72.%63%6F%6D/?p=mKO_AwFzXIpYRaHdGKBD8Dduob2dCzlFTW4O2lnFnp5mTx6_vO08SDNoHxHWlXliFfwvAUfVgUsgLgDcokTAlZd4WyzVRv0bM6UVqrfGf-BPQd5WJqtX6RJosdinkNQovJw00oAzgSdap6saalMyD6EZX7mVo9fg21gKjO1RB-x3tvHtyu1ulRCUQME8fhrF
SearchScopes: HKLM-x32 -> DefaultScope {ielnksrch} URL =
SearchScopes: HKLM-x32 -> ielnksrch URL = hxxps://%66%65%65%64.%73%6F%6E%69%63-%73%65%61%72%63%68.%63%6F%6D/?p=mKO_AwFzXIpYRaHdGKBD8Dduob2dCzlFTW4O2lnFnp5mTx6_vO08SDNoHxHWlXliFfwvAUfVgUsgLgDcokTAlZd4WyzVRv0bM6UVqrfGc9_hlFsyVnJYLnG_xKYkobZcGJiwtYZj1Vn5_cwlTfyOw5IocoaAF4jF_BgE933NHHgIoDK-xDf2WEDc_8ZMzWfR&q={searchTerms}
SearchScopes: HKU\S-1-5-21-3482869830-628851189-821680398-1001 -> DefaultScope {ielnksrch} URL = hxxps://%66%65%65%64.%73%6F%6E%69%63-%73%65%61%72%63%68.%63%6F%6D/?p=mKO_AwFzXIpYRaHdGKBD8Dduob2dCzlFTW4O2lnFnp5mTx6_vO08SDNoHxHWlXliFfwvAUfVgUsgLgDcokTAlZd4WyzVRv0bM6UVqrfGc9_hlFsyVnJYLnG_xKYkobZcGJiwtYZj1Vn5_cwlTfyOw5IocoaAF4jF_BgE933NHHgIoDK-xDf2WEDc_8ZMzWfR&q={searchTerms}
SearchScopes: HKU\S-1-5-21-3482869830-628851189-821680398-1001 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxps://br.search.yahoo.com/yhs/search?hspart=iry&hsimp=yhs-fullyhosted_003&type=wnf_adwrldint_16_36¶m1=1¶m2=f%3D4%26b%3DIE%26cc%3Dbr%26pa%3DWincy%26cd%3D2XzuyEtN2Y1L1QzutByE0F0DyDtBtDyByCyB0E0DyC0E0C0BtN0D0Tzu0StCyBtDyCtN1L2XzutAtFtByEtFyCtFzytN1L1Czu1ByEtN1L1G1B1V1N2Y1L1Qzu2StDyB0AtBtAyEyE0CtGyEyDyByDtGtAtA0D0AtGyD0A0DyEtG0CyC0CtByE0E0CtD0A0F0DtC2QtN1M1F1B2Z1V1N2Y1L1Qzu2StA0DyEtD0A0DtC0FtGyC0F0A0CtGyEyDtDyEtGzz0CyBtCtGyEzy0B0AtC0FyCyCtCyDyDyC2QtN0A0LzutB%26cr%3D1427415063%26a%3Dwnf_adwrldint_16_36%26os_ver%3D10.0%26os%3DWindows%2B10%2BHome%2BSingle%2BLanguage&p={searchTerms}
SearchScopes: HKU\S-1-5-21-3482869830-628851189-821680398-1001 -> {3BD44F0E-0596-4008-AEE0-45D47E3A8F0E} URL = hxxps://br.search.yahoo.com/yhs/search?hspart=visicom&type=yext&hsimp=yhs-burnaware&p=&campaignID=9941&q={searchterms}
SearchScopes: HKU\S-1-5-21-3482869830-628851189-821680398-1001 -> {993F5746-4C15-42BC-99C1-064A1764271B} URL = hxxps://securesearch.org?q={searchTerms}
SearchScopes: HKU\S-1-5-21-3482869830-628851189-821680398-1001 -> {ielnksrch} URL = hxxps://%66%65%65%64.%73%6F%6E%69%63-%73%65%61%72%63%68.%63%6F%6D/?p=mKO_AwFzXIpYRaHdGKBD8Dduob2dCzlFTW4O2lnFnp5mTx6_vO08SDNoHxHWlXliFfwvAUfVgUsgLgDcokTAlZd4WyzVRv0bM6UVqrfGc9_hlFsyVnJYLnG_xKYkobZcGJiwtYZj1Vn5_cwlTfyOw5IocoaAF4jF_BgE933NHHgIoDK-xDf2WEDc_8ZMzWfR&q={searchTerms}
SearchScopes: HKU\S-1-5-80-254692716-3798679861-1845837179-1675217483-2354768293 -> DefaultScope {ielnksrch} URL = hxxps://%66%65%65%64.%73%6F%6E%69%63-%73%65%61%72%63%68.%63%6F%6D/?p=mKO_AwFzXIpYRaHdGKBD8Dduob2dCzlFTW4O2lnFnp5mTx6_vO08SDNoHxHWlXliFfwvAUfVgUsgLgDcokTAlZd4WyzVRv0bM6UVqrfGc9_hlFsyVnJYLnG_xKYkobZcGJiwtYZj1Vn5_cwlTfyOw5IocoaAF4jF_BgE933NHHgIoDK-xDf2WEDc_8ZMzWfR&q={searchTerms}
SearchScopes: HKU\S-1-5-80-254692716-3798679861-1845837179-1675217483-2354768293 -> {ielnksrch} URL = hxxps://%66%65%65%64.%73%6F%6E%69%63-%73%65%61%72%63%68.%63%6F%6D/?p=mKO_AwFzXIpYRaHdGKBD8Dduob2dCzlFTW4O2lnFnp5mTx6_vO08SDNoHxHWlXliFfwvAUfVgUsgLgDcokTAlZd4WyzVRv0bM6UVqrfGc9_hlFsyVnJYLnG_xKYkobZcGJiwtYZj1Vn5_cwlTfyOw5IocoaAF4jF_BgE933NHHgIoDK-xDf2WEDc_8ZMzWfR&q={searchTerms}
BHO: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\root\Office16\OCHelper.dll [2019-06-13] (Microsoft Corporation -> Microsoft Corporation)
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_211\bin\ssv.dll [2019-05-21] (Oracle America, Inc. -> Oracle Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_211\bin\jp2ssv.dll [2019-05-21] (Oracle America, Inc. -> Oracle Corporation)
BHO-x32: True Key Helper -> {0F4B8786-5502-4803-8EBC-F652A1153BB6} -> C:\Program Files\Intel Security\True Key\MSIE\truekey_ie.dll [2016-07-15] (Intel(R) Security True Key -> Intel Security)
BHO-x32: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\OCHelper.dll [2019-03-24] (Microsoft Corporation -> Microsoft Corporation)
Toolbar: HKLM-x32 - True Key - {4BAAC1B8-0800-42C9-8FA6-08B211F356B8} - C:\Program Files\Intel Security\True Key\MSIE\truekey_ie.dll [2016-07-15] (Intel(R) Security True Key -> Intel Security)
Handler: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2019-06-13] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2019-06-21] (Microsoft Corporation -> Microsoft Corporation)
Handler: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2019-06-13] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2019-06-21] (Microsoft Corporation -> Microsoft Corporation)
Handler: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2019-06-13] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2019-06-21] (Microsoft Corporation -> Microsoft Corporation)
Handler: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2019-06-13] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2019-06-21] (Microsoft Corporation -> Microsoft Corporation)

FireFox:
========
FF DefaultProfile: nuov2n3o.default-1559765384667
FF ProfilePath: C:\Users\Gerson M. Costa\AppData\Roaming\Pencil\Profiles\jxa0lrid.default [2016-11-27]
FF ProfilePath: C:\Users\Gerson M. Costa\AppData\Roaming\Mozilla\Firefox\Profiles\nuov2n3o.default-1559765384667 [2019-06-30]
FF Homepage: Mozilla\Firefox\Profiles\nuov2n3o.default-1559765384667 -> www.google.com.br
FF Extension: (Avast Passwords) - C:\Users\Gerson M. Costa\AppData\Roaming\Mozilla\Firefox\Profiles\nuov2n3o.default-1559765384667\Extensions\jid1-r1tDuNiNb4SEww@jetpack.xpi [2019-06-05] [UpdateUrl:hxxps://pamcdn.avast.com/pamcdn/extensions/firefox/update.json]
FF Extension: (ColorfulTabs) - C:\Users\Gerson M. Costa\AppData\Roaming\Mozilla\Firefox\Profiles\nuov2n3o.default-1559765384667\Extensions\{0545b830-f0aa-4d7e-8820-50a4629a56fe}.xpi [2019-06-30]
FF Plugin: @java.com/DTPlugin,version=11.211.2 -> C:\Program Files\Java\jre1.8.0_211\bin\dtplugin\npDeployJava1.dll [2019-05-21] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.211.2 -> C:\Program Files\Java\jre1.8.0_211\bin\plugin2\npjp2.dll [2019-05-21] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\Office16\NPSPWRAP.DLL [2019-06-13] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.xdp -> C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll [Nenhum Arquivo]
FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.xfdf -> C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll [Nenhum Arquivo]
FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2019-03-24] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\NPSPWRAP.DLL [2019-03-24] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.34.7\npGoogleUpdate3.dll [2019-06-07] (Google Inc -> Google LLC)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.34.7\npGoogleUpdate3.dll [2019-06-07] (Google Inc -> Google LLC)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2019-05-02] (Adobe Inc. -> Adobe Systems Inc.)

Chrome:
=======
CHR DefaultProfile: Default
CHR HomePage: Default -> hxxp://www.google.com.br/
CHR StartupUrls: Default -> "hxxp://www.google.com.br/","hxxp://google.com.br/"
CHR DefaultSearchURL: Default -> hxxps://spiralstab.com/search?q={searchTerms}
CHR DefaultSearchKeyword: Default -> SpiralsTab
CHR DefaultSuggestURL: Default -> hxxps://spiralstab.com/suggestions.php?q={searchTerms}
CHR Profile: C:\Users\Gerson M. Costa\AppData\Local\Google\Chrome\User Data\Default [2019-06-30]
CHR Extension: (Apresentações) - C:\Users\Gerson M. Costa\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2019-06-04]
CHR Extension: (Documentos) - C:\Users\Gerson M. Costa\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2017-11-02]
CHR Extension: (Google Drive) - C:\Users\Gerson M. Costa\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2016-03-15]
CHR Extension: (YouTube) - C:\Users\Gerson M. Costa\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2016-03-15]
CHR Extension: (Save Tabs) - C:\Users\Gerson M. Costa\AppData\Local\Google\Chrome\User Data\Default\Extensions\dgjepfldodmdfmdidhhgamnklbdibndi [2017-11-14]
CHR Extension: (Adobe Acrobat) - C:\Users\Gerson M. Costa\AppData\Local\Google\Chrome\User Data\Default\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2019-06-12]
CHR Extension: (Planilhas) - C:\Users\Gerson M. Costa\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2017-11-02]
CHR Extension: (Documentos Google off-line) - C:\Users\Gerson M. Costa\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2018-08-13]
CHR Extension: (Bazz Search) - C:\Users\Gerson M. Costa\AppData\Local\Google\Chrome\User Data\Default\Extensions\inafjghmmkmiobijhbgkfekenbfbklhb [2019-06-04]
CHR Extension: (TV Hero) - C:\Users\Gerson M. Costa\AppData\Local\Google\Chrome\User Data\Default\Extensions\jlpafecglkplnaijkglfdmgilmnajeoc [2019-02-27]
CHR Extension: (Pagamentos da Chrome Web Store) - C:\Users\Gerson M. Costa\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2018-04-09]
CHR Extension: (Gmail) - C:\Users\Gerson M. Costa\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2019-04-30]
CHR Extension: (Chrome Media Router) - C:\Users\Gerson M. Costa\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2019-05-24]
CHR Profile: C:\Users\Gerson M. Costa\AppData\Local\Google\Chrome\User Data\Guest Profile [2019-06-04]
CHR Profile: C:\Users\Gerson M. Costa\AppData\Local\Google\Chrome\User Data\System Profile [2019-06-05]
CHR HKU\S-1-5-21-3482869830-628851189-821680398-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [pilplloabdedfmialnfchjomjmpjcoej] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [daanglpcpkjjlkhcbladppjphglbigam] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx
CHR HKLM-x32\...\Chrome\Extension: [ikaooahnheaoeceaipjcmnamnoleeblk] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [mllnfjhfinceglckeppcnpciaghpkbfg] - hxxps://clients2.google.com/service/update2/crx

Opera:
=======
OPR StartupUrls: "hxxp://www.google.com.br/"

==================== Serviços (Whitelisted) ====================

(Se uma entrada for incluída na fixlist, será removida do Registro. O arquivo não será movido, a menos que seja colocado separadamente.)

R2 AcronisActiveProtectionService; C:\Program Files (x86)\Common Files\Acronis\ActiveProtection\anti_ransomware_service.exe [4383760 2019-03-25] (Acronis International GmbH -> Acronis International GmbH)
R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [11409504 2019-06-20] (Microsoft Corporation -> Microsoft Corporation)
R2 ETDService; C:\Program Files\Elantech\ETDService.exe [144072 2016-03-14] (ELAN Microelectronics Corporation -> ELAN Microelectronics Corp.)
R2 igfxCUIService1.0.0.0; C:\WINDOWS\system32\igfxCUIService.exe [337888 2016-06-19] (Intel(R) pGFX -> Intel Corporation)
R2 IntelBCAsvc; C:\Program Files\Intel\BCA\pabeSvc64.exe [3026584 2016-05-06] (Intel(R) Biometric and Context Agent -> Intel(R) Corporation)
R2 mmsminisrv; C:\Program Files (x86)\Common Files\Acronis\Infrastructure\mms_mini.exe [4808088 2019-03-25] (Acronis International GmbH -> Acronis International GmbH)
S3 mobile_backup_server; C:\Program Files (x86)\Common Files\Acronis\MobileBackupServer\mobile_backup_server.exe [3004128 2019-03-25] (Acronis International GmbH -> Acronis International GmbH)
S3 mobile_backup_status_server; C:\Program Files (x86)\Acronis\TrueImageHome\mobile_backup_status_server.exe [1774784 2019-03-25] (Acronis International GmbH -> )
R2 MSSQL$SRVCRBD01; C:\Program Files\Microsoft SQL Server\MSSQL12.SRVCRBD01\MSSQL\Binn\sqlservr.exe [370368 2015-06-10] (Microsoft Corporation -> Microsoft Corporation)
S4 SQLAgent$SRVCRBD01; C:\Program Files\Microsoft SQL Server\MSSQL12.SRVCRBD01\MSSQL\Binn\SQLAGENT.EXE [613056 2015-06-10] (Microsoft Corporation -> Microsoft Corporation)
R2 TeamViewer; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [11795800 2019-04-15] (TeamViewer GmbH -> TeamViewer GmbH)
S3 Tib Mounter Service; C:\Program Files (x86)\Common Files\Acronis\TibMounter64\tib_mounter_service.exe [7099408 2019-03-25] (Acronis International GmbH -> Acronis International GmbH)
R2 TrueKey; C:\Program Files\TrueKey\McAfee.TrueKey.Service.exe [908256 2016-07-22] (McAfee, Inc. -> McAfee, Inc.)
R2 TrueKeyScheduler; C:\Program Files\TrueKey\McTkSchedulerService.exe [15736 2016-07-22] (McAfee, Inc. -> McAfee, Inc.)
S3 TrueKeyServiceHelper; C:\Program Files\TrueKey\McAfee.TrueKey.ServiceHelper.exe [86864 2016-07-22] (McAfee, Inc. -> McAfee, Inc.)
R2 TuneUp.UtilitiesSvc; C:\Program Files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesService64.exe [2145080 2015-06-25] (AVG Netherlands B.V. -> TuneUp Software)
S2 UxTuneUp; C:\WINDOWS\System32\uxtuneup.dll [43320 2015-06-25] (AVG Netherlands B.V. -> TuneUp Software)
S2 UxTuneUp; C:\WINDOWS\SysWOW64\uxtuneup.dll [36152 2015-06-25] (AVG Netherlands B.V. -> TuneUp Software)
S3 wampapache; c:\wamp\bin\apache\apache2.4.9\bin\httpd.exe [22016 2014-05-01] (Apache Software Foundation) [Arquivo não assinado]
S3 wampmysqld; c:\wamp\bin\mysql\mysql5.6.17\bin\mysqld.exe [10959360 2014-05-01] () [Arquivo não assinado]
S2 Warsaw Technology; C:\Program Files\Diebold\Warsaw\core.exe [1068376 2017-10-26] (Gas Informatica Ltda -> GAS Tecnologia LTDA)
S3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\platform\4.16.17656.18052-0\NisSrv.exe [4682552 2018-06-15] (Microsoft Corporation -> Microsoft Corporation)
S3 WinDefend; C:\ProgramData\Microsoft\Windows Defender\platform\4.16.17656.18052-0\MsMpEng.exe [101096 2018-06-15] (Microsoft Corporation -> Microsoft Corporation)

===================== Drivers (Whitelisted) ======================

(Se uma entrada for incluída na fixlist, será removida do Registro. O arquivo não será movido, a menos que seja colocado separadamente.)

S3 AndnetBus; C:\WINDOWS\System32\drivers\lgandnetbus64.sys [20992 2014-05-27] (Microsoft Windows Hardware Compatibility Publisher -> LG Electronics Inc.)
S3 AndNetDiag2; C:\WINDOWS\System32\drivers\lgandnetdiag264.sys [29696 2014-05-27] (Microsoft Windows Hardware Compatibility Publisher -> LG Electronics Inc.)
S3 AndNetGps; C:\WINDOWS\System32\drivers\lgandnetgps64.sys [28672 2014-05-27] (Microsoft Windows Hardware Compatibility Publisher -> LG Electronics Inc.)
S3 AthDfu; C:\WINDOWS\System32\Drivers\AthDfu.sys [55448 2013-01-28] (Atheros Communications Inc. -> Windows (R) Win 7 DDK provider)
R3 athr; C:\WINDOWS\System32\drivers\athw8x.sys [4233728 2018-04-11] (Microsoft Windows -> Qualcomm Atheros Communications, Inc.)
S3 dg_ssudbus; C:\WINDOWS\system32\DRIVERS\ssudbus.sys [130688 2016-07-22] (Samsung Electronics CO., LTD. -> Samsung Electronics Co., Ltd.)
R2 file_protector; C:\WINDOWS\System32\DRIVERS\file_protector.sys [667144 2019-06-05] (Acronis International GmbH -> Acronis International GmbH)
R0 file_tracker; C:\WINDOWS\System32\DRIVERS\file_tracker.sys [390592 2019-06-05] (ACRONIS INTERNATIONAL GMBH -> Acronis International GmbH)
R2 npf; C:\WINDOWS\System32\drivers\npf.sys [47632 2010-01-26] (CACE Technologies, Inc. -> CACE Technologies, Inc.)
R3 Ps2Kb2Hid; C:\WINDOWS\System32\drivers\aPs2Kb2Hid.sys [26736 2013-07-11] (Dritek System Inc. -> Dritek System Inc.)
S4 RsFx0300; C:\WINDOWS\System32\DRIVERS\RsFx0300.sys [247488 2014-02-21] (Microsoft Corporation -> Microsoft Corporation)
S3 ssudcdf; C:\WINDOWS\System32\drivers\ssudcdf.sys [36608 2014-01-22] (DEVGURU CO LTD -> DEVGURU Co., LTD.(www.devguru.co.kr))
S3 ssuddmgr; C:\WINDOWS\System32\drivers\ssuddmgr.sys [206080 2014-01-22] (DEVGURU CO LTD -> DEVGURU Co., LTD.(www.devguru.co.kr))
S3 ssudmdm; C:\WINDOWS\system32\DRIVERS\ssudmdm.sys [164992 2016-07-22] (Samsung Electronics CO., LTD. -> Samsung Electronics Co., Ltd.)
S3 ssudobex; C:\WINDOWS\System32\drivers\ssudobex.sys [206080 2014-01-22] (DEVGURU CO LTD -> DEVGURU Co., LTD.(www.devguru.co.kr))
S3 ssudrmnet; C:\WINDOWS\System32\drivers\ssudrmnet.sys [70400 2014-01-22] (DEVGURU CO LTD -> DEVGURU Co., LTD.)
S3 ssudserd; C:\WINDOWS\System32\drivers\ssudserd.sys [206080 2014-01-22] (DEVGURU CO LTD -> DEVGURU Co., LTD.(www.devguru.co.kr))
S3 ss_conn_usb_driver; C:\WINDOWS\System32\Drivers\ss_conn_usb_driver.sys [26368 2014-01-22] (DEVGURU CO LTD -> DEVGURU Co., LTD.)
S3 tib; C:\WINDOWS\system32\DRIVERS\tib.sys [885880 2019-06-05] (Acronis International GmbH -> Acronis International GmbH)
R2 tib_mounter; C:\WINDOWS\system32\DRIVERS\tib_mounter.sys [171976 2019-06-05] (Acronis International GmbH -> Acronis International GmbH)
S3 tnd; C:\WINDOWS\system32\DRIVERS\tnd.sys [693768 2019-06-05] (Acronis International GmbH -> Acronis International GmbH)
R3 TuneUpUtilitiesDrv; C:\Program Files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesDriver64.sys [31144 2015-06-04] (AVG Technologies CZ, s.r.o. -> TuneUp Software)
S3 usbbus; C:\WINDOWS\System32\drivers\lgx64bus.sys [17920 2014-05-27] (Microsoft Windows Hardware Compatibility Publisher -> LG Electronics Inc.)
S3 UsbDiag; C:\WINDOWS\System32\drivers\lgx64diag.sys [28160 2014-05-27] (Microsoft Windows Hardware Compatibility Publisher -> LG Electronics Inc.)
S3 UsbGps; C:\WINDOWS\System32\drivers\lgx64gps.sys [27136 2014-05-27] (Microsoft Windows Hardware Compatibility Publisher -> LG Electronics Inc.)
R1 VBoxNetLwf; C:\WINDOWS\system32\DRIVERS\VBoxNetLwf.sys [206416 2016-10-18] (Oracle Corporation -> Oracle Corporation)
R2 virtual_file; C:\WINDOWS\System32\DRIVERS\virtual_file.sys [331976 2019-06-05] (ACRONIS INTERNATIONAL GMBH -> Acronis International GmbH)
R0 volume_tracker; C:\WINDOWS\System32\DRIVERS\volume_tracker.sys [243472 2019-06-05] (ACRONIS INTERNATIONAL GMBH -> Acronis International GmbH)
S3 WdBoot; C:\WINDOWS\system32\drivers\wd\WdBoot.sys [46072 2018-06-15] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
S3 WdFilter; C:\WINDOWS\system32\drivers\wd\WdFilter.sys [313384 2018-06-15] (Microsoft Windows -> Microsoft Corporation)
S3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [61992 2018-06-15] (Microsoft Windows -> Microsoft Corporation)
S1 wsddfac; C:\WINDOWS\System32\drivers\wsddfac.sys [28376 2018-02-14] (GAS INFORMATICA LTDA -> GAS Tecnologia)
R1 wsddntf; C:\WINDOWS\system32\DRIVERS\wsddntf.sys [47176 2016-06-21] (GAS Informatica Ltda -> GAS Tecnologia)
S1 wsddpp; C:\WINDOWS\system32\drivers\wsddpp.sys [44624 2017-12-14] (Gas Informatica Ltda -> GAS Tecnologia)
S3 wsddprm; C:\WINDOWS\system32\drivers\wsddprm.sys [43608 2017-12-14] (Gas Informatica Ltda -> GAS Tecnologia)

==================== NetSvcs (Whitelisted) ===================

(Se uma entrada for incluída na fixlist, será removida do Registro. O arquivo não será movido, a menos que seja colocado separadamente.)


==================== Três meses (criados) ========

(Se uma entrada for incluída na fixlist, o arquivo/pasta será movido.)

2019-06-30 09:35 - 2019-06-30 09:38 - 000034817 _____ C:\Users\Gerson M. Costa\Downloads\FRST.txt
2019-06-30 09:35 - 2019-06-30 09:35 - 000000000 ____D C:\FRST
2019-06-30 09:33 - 2019-06-30 09:33 - 002418688 _____ (Farbar) C:\Users\Gerson M. Costa\Downloads\FRST64.exe
2019-06-30 08:59 - 2019-06-30 09:27 - 000000000 ____D C:\Program Files\Mozilla Firefox
2019-06-30 07:46 - 2019-06-30 07:46 - 000000000 ____D C:\Users\Todos os Usuários\TrueKey
2019-06-30 07:46 - 2019-06-30 07:46 - 000000000 ____D C:\ProgramData\TrueKey
2019-06-30 06:43 - 2019-06-30 06:43 - 000000000 ____D C:\Users\Todos os Usuários\SecuritySuite
2019-06-30 06:43 - 2019-06-30 06:43 - 000000000 ____D C:\Users\Gerson M. Costa\Documents\TotalAV
2019-06-30 06:43 - 2019-06-30 06:43 - 000000000 ____D C:\ProgramData\SecuritySuite
2019-06-30 06:41 - 2019-06-30 06:41 - 014211928 _____ C:\Users\Gerson M. Costa\Downloads\TotalAV_Setup.exe
2019-06-29 21:28 - 2019-06-29 21:30 - 000000000 ____D C:\Users\Gerson M. Costa\Documents\ROTEIRO CURSO GT
2019-06-29 21:25 - 2019-06-29 21:25 - 000439738 _____ C:\Users\Gerson M. Costa\Downloads\Conteudo_Programatico_ITIL.pdf
2019-06-29 21:08 - 2019-06-29 21:08 - 000433641 _____ C:\Users\Gerson M. Costa\Downloads\Conteudo_Programatico_FGT (1).pdf
2019-06-23 11:45 - 2019-06-23 11:45 - 000433641 _____ C:\Users\Gerson M. Costa\Downloads\Conteudo_Programatico_FGT.pdf
2019-06-12 19:14 - 2019-06-07 08:04 - 021388752 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll
2019-06-12 19:14 - 2019-06-07 07:45 - 012756480 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2019-06-12 19:14 - 2019-06-07 07:42 - 003613696 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys
2019-06-12 19:14 - 2019-06-07 07:19 - 020383832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll
2019-06-12 19:14 - 2019-06-07 07:07 - 011942400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2019-06-12 19:14 - 2019-06-07 07:04 - 002881536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32kfull.sys
2019-06-12 19:14 - 2019-06-07 02:57 - 007519896 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Protection.PlayReady.dll
2019-06-12 19:14 - 2019-06-07 02:57 - 007436536 _____ (Microsoft Corporation) C:\WINDOWS\system32\windows.storage.dll
2019-06-12 19:14 - 2019-06-07 02:57 - 000148280 _____ (Microsoft Corporation) C:\WINDOWS\system32\userenv.dll
2019-06-12 19:14 - 2019-06-07 02:56 - 009084216 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2019-06-12 19:14 - 2019-06-07 02:46 - 006569344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Protection.PlayReady.dll
2019-06-12 19:14 - 2019-06-07 02:46 - 006043496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\windows.storage.dll
2019-06-12 19:14 - 2019-06-07 02:38 - 025857536 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll
2019-06-12 19:14 - 2019-06-07 02:37 - 022019584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll
2019-06-12 19:14 - 2019-06-07 02:31 - 019372544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2019-06-12 19:14 - 2019-06-07 02:27 - 022718976 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2019-06-12 19:14 - 2019-06-07 02:24 - 005784064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakra.dll
2019-06-12 19:14 - 2019-06-07 02:21 - 007588864 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll
2019-06-12 19:14 - 2019-06-07 02:21 - 004866048 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2019-06-12 19:14 - 2019-05-17 09:27 - 006586880 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll
2019-06-12 19:14 - 2019-05-17 09:25 - 004718080 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.pcshell.dll
2019-06-12 19:14 - 2019-05-17 03:42 - 005625160 _____ (Microsoft Corporation) C:\WINDOWS\system32\StartTileData.dll
2019-06-12 19:14 - 2019-05-17 03:19 - 004515840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
2019-06-12 19:14 - 2019-05-17 02:44 - 016597504 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll
2019-06-12 19:14 - 2019-05-17 02:38 - 004709376 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdp.dll
2019-06-12 19:14 - 2019-05-17 02:37 - 004385280 _____ (Microsoft Corporation) C:\WINDOWS\system32\EdgeContent.dll
2019-06-12 19:14 - 2019-05-17 02:31 - 004937216 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2019-06-12 19:13 - 2019-06-07 08:04 - 001633136 _____ (Microsoft Corporation) C:\WINDOWS\system32\gdi32full.dll
2019-06-12 19:13 - 2019-06-07 07:48 - 000064000 _____ (Microsoft Corporation) C:\WINDOWS\system32\iemigplugin.dll
2019-06-12 19:13 - 2019-06-07 07:47 - 000059904 _____ (Microsoft Corporation) C:\WINDOWS\system32\mf3216.dll
2019-06-12 19:13 - 2019-06-07 07:41 - 004055552 _____ (Microsoft Corporation) C:\WINDOWS\system32\msi.dll
2019-06-12 19:13 - 2019-06-07 07:40 - 001663488 _____ (Microsoft Corporation) C:\WINDOWS\system32\GdiPlus.dll
2019-06-12 19:13 - 2019-06-07 07:40 - 001364992 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcastdvruserservice.dll
2019-06-12 19:13 - 2019-06-07 07:23 - 001453920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gdi32full.dll
2019-06-12 19:13 - 2019-06-07 07:10 - 000046080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mf3216.dll
2019-06-12 19:13 - 2019-06-07 07:04 - 004056064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msi.dll
2019-06-12 19:13 - 2019-06-07 07:04 - 001471488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\GdiPlus.dll
2019-06-12 19:13 - 2019-06-07 03:07 - 000707384 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vhdmp.sys
2019-06-12 19:13 - 2019-06-07 03:01 - 001035040 _____ (Microsoft Corporation) C:\WINDOWS\system32\ApplyTrustOffline.exe
2019-06-12 19:13 - 2019-06-07 02:58 - 001220112 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvix64.exe
2019-06-12 19:13 - 2019-06-07 02:58 - 001027384 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvax64.exe
2019-06-12 19:13 - 2019-06-07 02:58 - 000568320 _____ (Microsoft Corporation) C:\WINDOWS\system32\tcblaunch.exe
2019-06-12 19:13 - 2019-06-07 02:58 - 000422416 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmicmiplugin.dll
2019-06-12 19:13 - 2019-06-07 02:58 - 000135176 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvloader.dll
2019-06-12 19:13 - 2019-06-07 02:58 - 000076304 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hvservice.sys
2019-06-12 19:13 - 2019-06-07 02:57 - 002811192 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys
2019-06-12 19:13 - 2019-06-07 02:57 - 002719032 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpip.sys
2019-06-12 19:13 - 2019-06-07 02:57 - 001934808 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEng.dll
2019-06-12 19:13 - 2019-06-07 02:57 - 001209696 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioSes.dll
2019-06-12 19:13 - 2019-06-07 02:57 - 000792888 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms2.sys
2019-06-12 19:13 - 2019-06-07 02:57 - 000709728 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cng.sys
2019-06-12 19:13 - 2019-06-07 02:57 - 000594024 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiodg.exe
2019-06-12 19:13 - 2019-06-07 02:57 - 000494304 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcryptprimitives.dll
2019-06-12 19:13 - 2019-06-07 02:57 - 000435000 _____ (Microsoft Corporation) C:\WINDOWS\system32\msv1_0.dll
2019-06-12 19:13 - 2019-06-07 02:57 - 000413720 _____ (Microsoft Corporation) C:\WINDOWS\system32\AUDIOKSE.dll
2019-06-12 19:13 - 2019-06-07 02:57 - 000412984 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms1.sys
2019-06-12 19:13 - 2019-06-07 02:57 - 000383504 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\clfs.sys
2019-06-12 19:13 - 2019-06-07 02:57 - 000170296 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ksecpkg.sys
2019-06-12 19:13 - 2019-06-07 02:57 - 000137448 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcrypt.dll
2019-06-12 19:13 - 2019-06-07 02:56 - 000713272 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSVideoDSP.dll
2019-06-12 19:13 - 2019-06-07 02:47 - 000380432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msv1_0.dll
2019-06-12 19:13 - 2019-06-07 02:47 - 000097272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\bcrypt.dll
2019-06-12 19:13 - 2019-06-07 02:46 - 001805656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioEng.dll
2019-06-12 19:13 - 2019-06-07 02:46 - 001011872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioSes.dll
2019-06-12 19:13 - 2019-06-07 02:46 - 000581048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSVideoDSP.dll
2019-06-12 19:13 - 2019-06-07 02:46 - 000357072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\bcryptprimitives.dll
2019-06-12 19:13 - 2019-06-07 02:46 - 000128792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\userenv.dll
2019-06-12 19:13 - 2019-06-07 02:24 - 003400704 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll
2019-06-12 19:13 - 2019-06-07 02:24 - 001361408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSPhotography.dll
2019-06-12 19:13 - 2019-06-07 02:23 - 000608768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\EdgeManager.dll
2019-06-12 19:13 - 2019-06-07 02:23 - 000561152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9diag.dll
2019-06-12 19:13 - 2019-06-07 02:23 - 000209408 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXApplicabilityBlob.dll
2019-06-12 19:13 - 2019-06-07 02:22 - 005307392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d2d1.dll
2019-06-12 19:13 - 2019-06-07 02:22 - 003710976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2019-06-12 19:13 - 2019-06-07 02:22 - 000578560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\webplatstorageserver.dll
2019-06-12 19:13 - 2019-06-07 02:22 - 000233984 _____ (Microsoft Corporation) C:\WINDOWS\system32\pku2u.dll
2019-06-12 19:13 - 2019-06-07 02:22 - 000216064 _____ (Microsoft Corporation) C:\WINDOWS\system32\wdigest.dll
2019-06-12 19:13 - 2019-06-07 02:21 - 001778688 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll
2019-06-12 19:13 - 2019-06-07 02:21 - 000808448 _____ (Microsoft Corporation) C:\WINDOWS\system32\EdgeManager.dll
2019-06-12 19:13 - 2019-06-07 02:21 - 000473600 _____ (Microsoft Corporation) C:\WINDOWS\system32\schannel.dll
2019-06-12 19:13 - 2019-06-07 02:21 - 000154112 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakradiag.dll
2019-06-12 19:13 - 2019-06-07 02:20 - 002610688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DWrite.dll
2019-06-12 19:13 - 2019-06-07 02:20 - 001708544 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSPhotography.dll
2019-06-12 19:13 - 2019-06-07 02:20 - 000894464 _____ (Microsoft Corporation) C:\WINDOWS\system32\webplatstorageserver.dll
2019-06-12 19:13 - 2019-06-07 02:20 - 000726528 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9diag.dll
2019-06-12 19:13 - 2019-06-07 02:19 - 003212288 _____ (Microsoft Corporation) C:\WINDOWS\system32\DWrite.dll
2019-06-12 19:13 - 2019-06-07 02:19 - 002175488 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.onecore.dll
2019-06-12 19:13 - 2019-06-07 02:19 - 001560576 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.desktop.dll
2019-06-12 19:13 - 2019-06-07 02:19 - 001549824 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll
2019-06-12 19:13 - 2019-06-07 02:19 - 000778240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kerberos.dll
2019-06-12 19:13 - 2019-06-07 02:19 - 000369664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\taskcomp.dll
2019-06-12 19:13 - 2019-06-07 02:18 - 002166784 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys
2019-06-12 19:13 - 2019-06-07 02:18 - 000686592 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEndpointBuilder.dll
2019-06-12 19:13 - 2019-06-07 02:18 - 000531968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll
2019-06-12 19:13 - 2019-06-07 02:17 - 001920000 _____ (Microsoft Corporation) C:\WINDOWS\system32\FntCache.dll
2019-06-12 19:13 - 2019-06-07 02:17 - 000961024 _____ (Microsoft Corporation) C:\WINDOWS\system32\StorSvc.dll
2019-06-12 19:13 - 2019-06-07 02:17 - 000889344 _____ (Microsoft Corporation) C:\WINDOWS\system32\schedsvc.dll
2019-06-12 19:13 - 2019-06-07 02:16 - 000900096 _____ (Microsoft Corporation) C:\WINDOWS\system32\kerberos.dll
2019-06-12 19:13 - 2019-06-07 02:16 - 000544768 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll
2019-06-12 19:13 - 2019-06-07 02:16 - 000478720 _____ (Microsoft Corporation) C:\WINDOWS\system32\taskcomp.dll
2019-06-12 19:13 - 2019-06-07 01:00 - 000001308 _____ C:\WINDOWS\system32\tcbres.wim
2019-06-12 19:13 - 2019-05-18 19:12 - 001311744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msjet40.dll
2019-06-12 19:13 - 2019-05-18 19:12 - 000353280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msrd3x40.dll
2019-06-12 19:13 - 2019-05-18 19:12 - 000341504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msexcl40.dll
2019-06-12 19:13 - 2019-05-18 19:12 - 000241152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msltus40.dll
2019-06-12 19:13 - 2019-05-17 09:44 - 000348160 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotifyIcon.exe
2019-06-12 19:13 - 2019-05-17 09:40 - 002394960 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMVCORE.DLL
2019-06-12 19:13 - 2019-05-17 09:40 - 000280888 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\msiscsi.sys
2019-06-12 19:13 - 2019-05-17 09:26 - 004393984 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_nt.dll
2019-06-12 19:13 - 2019-05-17 09:25 - 004491264 _____ (Microsoft Corporation) C:\WINDOWS\system32\xpsrchvw.exe
2019-06-12 19:13 - 2019-05-17 09:25 - 000039424 _____ (Microsoft Corporation) C:\WINDOWS\system32\WindowsUpdateElevatedInstaller.exe
2019-06-12 19:13 - 2019-05-17 09:24 - 000122368 _____ (Microsoft Corporation) C:\WINDOWS\system32\musdialoghandlers.dll
2019-06-12 19:13 - 2019-05-17 09:23 - 000110080 _____ (Microsoft Corporation) C:\WINDOWS\system32\AxInstSv.dll
2019-06-12 19:13 - 2019-05-17 09:22 - 000392192 _____ (Microsoft Corporation) C:\WINDOWS\system32\iedkcs32.dll
2019-06-12 19:13 - 2019-05-17 09:22 - 000182784 _____ (Microsoft Corporation) C:\WINDOWS\system32\LanguageComponentsInstaller.dll
2019-06-12 19:13 - 2019-05-17 09:21 - 001180672 _____ (Microsoft Corporation) C:\WINDOWS\system32\localspl.dll
2019-06-12 19:13 - 2019-05-17 09:21 - 001121792 _____ (Microsoft Corporation) C:\WINDOWS\system32\TSWorkspace.dll
2019-06-12 19:13 - 2019-05-17 09:21 - 000878592 _____ (Microsoft Corporation) C:\WINDOWS\system32\CPFilters.dll
2019-06-12 19:13 - 2019-05-17 09:21 - 000274944 _____ (Microsoft Corporation) C:\WINDOWS\system32\dot3gpui.dll
2019-06-12 19:13 - 2019-05-17 09:21 - 000221184 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe
2019-06-12 19:13 - 2019-05-17 09:20 - 002084864 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl
2019-06-12 19:13 - 2019-05-17 09:19 - 000757248 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll
2019-06-12 19:13 - 2019-05-17 09:07 - 002206424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMVCORE.DLL
2019-06-12 19:13 - 2019-05-17 09:00 - 005658112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll
2019-06-12 19:13 - 2019-05-17 08:58 - 003397632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xpsrchvw.exe
2019-06-12 19:13 - 2019-05-17 08:56 - 000344576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iedkcs32.dll
2019-06-12 19:13 - 2019-05-17 08:56 - 000240640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dot3gpui.dll
2019-06-12 19:13 - 2019-05-17 08:55 - 000704000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CPFilters.dll
2019-06-12 19:13 - 2019-05-17 08:55 - 000668160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll
2019-06-12 19:13 - 2019-05-17 08:55 - 000470528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AcSpecfc.dll
2019-06-12 19:13 - 2019-05-17 08:54 - 002016768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl
2019-06-12 19:13 - 2019-05-17 08:54 - 000908288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TSWorkspace.dll
2019-06-12 19:13 - 2019-05-17 06:33 - 001008640 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.MixedRealityCapture.dll
2019-06-12 19:13 - 2019-05-17 05:52 - 000868864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.MixedRealityCapture.dll
2019-06-12 19:13 - 2019-05-17 04:07 - 000105272 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\stornvme.sys
2019-06-12 19:13 - 2019-05-17 03:44 - 000829960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WWAHost.exe
2019-06-12 19:13 - 2019-05-17 03:44 - 000550520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mf.dll
2019-06-12 19:13 - 2019-05-17 03:43 - 000297688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wevtapi.dll
2019-06-12 19:13 - 2019-05-17 03:42 - 004789944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfcore.dll
2019-06-12 19:13 - 2019-05-17 03:42 - 002256560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2019-06-12 19:13 - 2019-05-17 03:42 - 001989552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml6.dll
2019-06-12 19:13 - 2019-05-17 03:42 - 001980256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KernelBase.dll
2019-06-12 19:13 - 2019-05-17 03:42 - 001620264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntdll.dll
2019-06-12 19:13 - 2019-05-17 03:42 - 001380096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfasfsrcsnk.dll
2019-06-12 19:13 - 2019-05-17 03:42 - 001130568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msvproc.dll
2019-06-12 19:13 - 2019-05-17 03:42 - 000129088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfps.dll
2019-06-12 19:13 - 2019-05-17 03:42 - 000125504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KerbClientShared.dll
2019-06-12 19:13 - 2019-05-17 03:30 - 013878784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.dll
2019-06-12 19:13 - 2019-05-17 03:26 - 002969600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cdp.dll
2019-06-12 19:13 - 2019-05-17 03:23 - 000074240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dtdump.exe
2019-06-12 19:13 - 2019-05-17 03:23 - 000068096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\usoapi.dll
2019-06-12 19:13 - 2019-05-17 03:23 - 000002560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tzres.dll
2019-06-12 19:13 - 2019-05-17 03:22 - 000142848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InstallServiceTasks.dll
2019-06-12 19:13 - 2019-05-17 03:22 - 000031232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wups.dll
2019-06-12 19:13 - 2019-05-17 03:21 - 000333824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgeIso.dll
2019-06-12 19:13 - 2019-05-17 03:21 - 000326144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\esentutl.exe
2019-06-12 19:13 - 2019-05-17 03:21 - 000224768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\credprovhost.dll
2019-06-12 19:13 - 2019-05-17 03:20 - 000366080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieproxy.dll
2019-06-12 19:13 - 2019-05-17 03:20 - 000118272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\updatepolicy.dll
2019-06-12 19:13 - 2019-05-17 03:19 - 001630720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2019-06-12 19:13 - 2019-05-17 03:19 - 001110528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InstallService.dll
2019-06-12 19:13 - 2019-05-17 03:19 - 001073664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdpcore.dll
2019-06-12 19:13 - 2019-05-17 03:19 - 000873472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Streaming.dll
2019-06-12 19:13 - 2019-05-17 03:19 - 000835584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapi.dll
2019-06-12 19:13 - 2019-05-17 03:18 - 002796032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\esent.dll
2019-06-12 19:13 - 2019-05-17 03:18 - 001006592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wpnapps.dll
2019-06-12 19:13 - 2019-05-17 03:18 - 000251904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msIso.dll
2019-06-12 19:13 - 2019-05-17 03:08 - 001063224 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecConfig.efi
2019-06-12 19:13 - 2019-05-17 03:08 - 000723432 _____ (Microsoft Corporation) C:\WINDOWS\system32\ci.dll
2019-06-12 19:13 - 2019-05-17 03:08 - 000491200 _____ (Microsoft Corporation) C:\WINDOWS\system32\mf.dll
2019-06-12 19:13 - 2019-05-17 03:08 - 000401328 _____ (Microsoft Corporation) C:\WINDOWS\system32\wevtapi.dll
2019-06-12 19:13 - 2019-05-17 03:07 - 004404720 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfcore.dll
2019-06-12 19:13 - 2019-05-17 03:07 - 002768960 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2019-06-12 19:13 - 2019-05-17 03:07 - 002571640 _____ (Microsoft Corporation) C:\WINDOWS\system32\KernelBase.dll
2019-06-12 19:13 - 2019-05-17 03:07 - 002467320 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml6.dll
2019-06-12 19:13 - 2019-05-17 03:07 - 001459120 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.efi
2019-06-12 19:13 - 2019-05-17 03:07 - 001288712 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmpeg2srcsnk.dll
2019-06-12 19:13 - 2019-05-17 03:07 - 001260272 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.exe
2019-06-12 19:13 - 2019-05-17 03:07 - 000930616 _____ (Microsoft Corporation) C:\WINDOWS\system32\WWAHost.exe
2019-06-12 19:13 - 2019-05-17 03:07 - 000275768 _____ (Microsoft Corporation) C:\WINDOWS\system32\browserbroker.dll
2019-06-12 19:13 - 2019-05-17 03:07 - 000260800 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfps.dll
2019-06-12 19:13 - 2019-05-17 03:06 - 001943136 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntdll.dll
2019-06-12 19:13 - 2019-05-17 03:06 - 001784696 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfasfsrcsnk.dll
2019-06-12 19:13 - 2019-05-17 03:06 - 001307648 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSVPXENC.dll
2019-06-12 19:13 - 2019-05-17 03:06 - 001140992 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.efi
2019-06-12 19:13 - 2019-05-17 03:06 - 001098056 _____ (Microsoft Corporation) C:\WINDOWS\system32\msvproc.dll
2019-06-12 19:13 - 2019-05-17 03:06 - 000983424 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.exe
2019-06-12 19:13 - 2019-05-17 03:06 - 000151888 _____ (Microsoft Corporation) C:\WINDOWS\system32\KerbClientShared.dll
2019-06-12 19:13 - 2019-05-17 03:04 - 001826816 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.CloudStore.dll
2019-06-12 19:13 - 2019-05-17 03:00 - 001295360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSVPXENC.dll
2019-06-12 19:13 - 2019-05-17 02:37 - 000185344 _____ (Microsoft Corporation) C:\WINDOWS\system32\InstallServiceTasks.dll
2019-06-12 19:13 - 2019-05-17 02:37 - 000108544 _____ (Microsoft Corporation) C:\WINDOWS\system32\DuCsps.dll
2019-06-12 19:13 - 2019-05-17 02:36 - 000228864 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\winnat.sys
2019-06-12 19:13 - 2019-05-17 02:36 - 000115200 _____ (Microsoft Corporation) C:\WINDOWS\system32\updatecsp.dll
2019-06-12 19:13 - 2019-05-17 02:36 - 000096768 _____ (Microsoft Corporation) C:\WINDOWS\system32\usoapi.dll
2019-06-12 19:13 - 2019-05-17 02:36 - 000067584 _____ (Microsoft Corporation) C:\WINDOWS\system32\wups.dll
2019-06-12 19:13 - 2019-05-17 02:36 - 000040960 _____ (Microsoft Corporation) C:\WINDOWS\system32\UsoClient.exe
2019-06-12 19:13 - 2019-05-17 02:36 - 000034816 _____ (Microsoft Corporation) C:\WINDOWS\system32\wups2.dll
2019-06-12 19:13 - 2019-05-17 02:36 - 000002560 _____ (Microsoft Corporation) C:\WINDOWS\system32\tzres.dll
2019-06-12 19:13 - 2019-05-17 02:35 - 000433152 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotification.exe
2019-06-12 19:13 - 2019-05-17 02:35 - 000362496 _____ (Microsoft Corporation) C:\WINDOWS\system32\esentutl.exe
2019-06-12 19:13 - 2019-05-17 02:35 - 000322560 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotificationUx.exe
2019-06-12 19:13 - 2019-05-17 02:34 - 001804288 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpncore.dll
2019-06-12 19:13 - 2019-05-17 02:34 - 000916480 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusUpdateHandlers.dll
2019-06-12 19:13 - 2019-05-17 02:34 - 000671744 _____ (Microsoft Corporation) C:\WINDOWS\system32\aadcloudap.dll
2019-06-12 19:13 - 2019-05-17 02:34 - 000275456 _____ (Microsoft Corporation) C:\WINDOWS\system32\SIHClient.exe
2019-06-12 19:13 - 2019-05-17 02:34 - 000270336 _____ (Microsoft Corporation) C:\WINDOWS\system32\credprovhost.dll
2019-06-12 19:13 - 2019-05-17 02:34 - 000175104 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuuhosdeployment.dll
2019-06-12 19:13 - 2019-05-17 02:34 - 000141312 _____ (Microsoft Corporation) C:\WINDOWS\system32\updatepolicy.dll
2019-06-12 19:13 - 2019-05-17 02:34 - 000047616 _____ (Microsoft Corporation) C:\WINDOWS\system32\sscore.dll
2019-06-12 19:13 - 2019-05-17 02:33 - 003091456 _____ (Microsoft Corporation) C:\WINDOWS\system32\diagtrack.dll
2019-06-12 19:13 - 2019-05-17 02:33 - 002912256 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll
2019-06-12 19:13 - 2019-05-17 02:33 - 002370560 _____ (Microsoft Corporation) C:\WINDOWS\system32\WebRuntimeManager.dll
2019-06-12 19:13 - 2019-05-17 02:33 - 001487360 _____ (Microsoft Corporation) C:\WINDOWS\system32\InstallService.dll
2019-06-12 19:13 - 2019-05-17 02:33 - 001214464 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpcore.dll
2019-06-12 19:13 - 2019-05-17 02:33 - 000787968 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdiWiFi.sys
2019-06-12 19:13 - 2019-05-17 02:33 - 000270336 _____ (Microsoft Corporation) C:\WINDOWS\system32\storewuauth.dll
2019-06-12 19:13 - 2019-05-17 02:32 - 001070080 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Streaming.dll
2019-06-12 19:13 - 2019-05-17 02:32 - 000815104 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieproxy.dll
2019-06-12 19:13 - 2019-05-17 02:31 - 003376640 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetworkMobileSettings.dll
2019-06-12 19:13 - 2019-05-17 02:31 - 003293184 _____ (Microsoft Corporation) C:\WINDOWS\system32\esent.dll
2019-06-12 19:13 - 2019-05-17 02:31 - 001854976 _____ (Microsoft Corporation) C:\WINDOWS\system32\wevtsvc.dll
2019-06-12 19:13 - 2019-05-17 02:31 - 001805312 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2019-06-12 19:13 - 2019-05-17 02:31 - 001383424 _____ (Microsoft Corporation) C:\WINDOWS\system32\usocore.dll
2019-06-12 19:13 - 2019-05-17 02:31 - 001215488 _____ (Microsoft Corporation) C:\WINDOWS\system32\NotificationController.dll
2019-06-12 19:13 - 2019-05-17 02:31 - 001211904 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpnapps.dll
2019-06-12 19:13 - 2019-05-17 02:31 - 001027584 _____ (Microsoft Corporation) C:\WINDOWS\system32\usermgr.dll
2019-06-12 19:13 - 2019-05-17 02:31 - 000620032 _____ (Microsoft Corporation) C:\WINDOWS\system32\updatehandlers.dll
2019-06-12 19:13 - 2019-05-17 02:31 - 000466432 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuuhext.dll
2019-06-12 19:13 - 2019-05-17 02:30 - 000917504 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapi.dll
2019-06-12 19:13 - 2019-05-17 02:30 - 000507392 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgeIso.dll
2019-06-12 19:13 - 2019-05-17 02:30 - 000276992 _____ (Microsoft Corporation) C:\WINDOWS\system32\srvsvc.dll
2019-06-09 16:14 - 2019-06-09 16:14 - 000000000 ____D C:\Users\Gerson M. Costa\Downloads\Format USB
2019-06-09 16:12 - 2019-06-09 16:12 - 000374719 _____ C:\Users\Gerson M. Costa\Downloads\Format USB.rar
2019-06-07 22:30 - 2019-06-07 22:30 - 000000000 ____D C:\Program Files\Samsung
2019-06-07 17:39 - 2019-06-07 17:39 - 000531290 _____ C:\Users\Gerson M. Costa\Downloads\di524.pdf
2019-06-07 17:28 - 2019-06-16 14:28 - 000003514 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA
2019-06-07 17:28 - 2019-06-16 14:28 - 000003290 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore
2019-06-05 20:53 - 2019-06-05 20:53 - 000000000 ____D C:\Users\Gerson M. Costa\AppData\Roaming\Acronis
2019-06-05 19:04 - 2019-06-05 19:04 - 000000000 ____D C:\Users\Todos os Usuários\Apple
2019-06-05 19:04 - 2019-06-05 19:04 - 000000000 ____D C:\ProgramData\Apple
2019-06-05 19:04 - 2019-06-05 19:04 - 000000000 ____D C:\Program Files\Bonjour
2019-06-05 19:04 - 2019-06-05 19:04 - 000000000 ____D C:\Program Files (x86)\Bonjour
2019-06-05 18:58 - 2019-06-05 18:58 - 000667144 _____ (Acronis International GmbH) C:\WINDOWS\system32\Drivers\file_protector.sys
2019-06-05 18:58 - 2019-06-05 18:58 - 000390592 _____ (Acronis International GmbH) C:\WINDOWS\system32\Drivers\file_tracker.sys
2019-06-05 18:58 - 2019-06-05 18:58 - 000000000 ____D C:\Users\Todos os Usuários\Acronis Mobile Backup Data
2019-06-05 18:58 - 2019-06-05 18:58 - 000000000 ____D C:\ProgramData\Acronis Mobile Backup Data
2019-06-05 18:56 - 2019-06-05 18:56 - 000885880 _____ (Acronis International GmbH) C:\WINDOWS\system32\Drivers\tib.sys
2019-06-05 18:56 - 2019-06-05 18:56 - 000693768 _____ (Acronis International GmbH) C:\WINDOWS\system32\Drivers\tnd.sys
2019-06-05 18:56 - 2019-06-05 18:56 - 000371848 _____ (Acronis International GmbH) C:\WINDOWS\system32\Drivers\snapman.sys
2019-06-05 18:56 - 2019-06-05 18:56 - 000331976 _____ (Acronis International GmbH) C:\WINDOWS\system32\Drivers\virtual_file.sys
2019-06-05 18:56 - 2019-06-05 18:56 - 000243472 _____ (Acronis International GmbH) C:\WINDOWS\system32\Drivers\volume_tracker.sys
2019-06-05 18:56 - 2019-06-05 18:56 - 000182832 _____ (Acronis International GmbH) C:\WINDOWS\system32\Drivers\fltsrv.sys
2019-06-05 18:56 - 2019-06-05 18:56 - 000171976 _____ (Acronis International GmbH) C:\WINDOWS\system32\Drivers\tib_mounter.sys
2019-06-05 18:56 - 2019-06-05 18:56 - 000001290 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acronis True Image.lnk
2019-06-05 18:56 - 2019-06-05 18:56 - 000001278 _____ C:\Users\Public\Desktop\Acronis True Image.lnk
2019-06-05 18:56 - 2019-06-05 18:56 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acronis
2019-06-05 18:54 - 2019-06-05 18:54 - 000000000 ____D C:\Program Files (x86)\Acronis
2019-06-05 18:50 - 2019-06-09 22:10 - 000000000 ____D C:\Users\Todos os Usuários\Acronis
2019-06-05 18:50 - 2019-06-09 22:10 - 000000000 ____D C:\ProgramData\Acronis
2019-06-05 18:35 - 2019-06-05 18:47 - 597911536 _____ C:\Users\Gerson M. Costa\Downloads\AcronisTrueImage2019.exe
2019-06-05 17:28 - 2019-06-17 17:29 - 000004268 _____ C:\WINDOWS\System32\Tasks\Opera scheduled Autoupdate 1559766507
2019-06-05 17:28 - 2019-06-17 17:29 - 000001552 _____ C:\Users\Gerson M. Costa\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Navegador Opera.lnk
2019-06-05 17:28 - 2019-06-05 17:28 - 000001546 _____ C:\Users\Gerson M. Costa\Desktop\Navegador Opera.lnk
2019-06-05 17:28 - 2019-06-05 17:28 - 000000000 ____D C:\Users\Gerson M. Costa\AppData\Local\Opera Software
2019-06-05 17:26 - 2019-06-05 17:26 - 000000000 ____D C:\Users\Gerson M. Costa\AppData\Roaming\Opera Software
2019-06-05 17:24 - 2019-06-05 17:24 - 002241496 _____ (Opera Software) C:\Users\Gerson M. Costa\Downloads\OperaSetup.exe
2019-06-05 17:09 - 2019-06-30 09:27 - 000001009 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox.lnk
2019-06-05 17:09 - 2019-06-30 09:27 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2019-06-05 17:09 - 2019-06-05 17:09 - 000000997 _____ C:\Users\Public\Desktop\Firefox.lnk
2019-06-05 17:09 - 2019-06-05 17:09 - 000000000 ____D C:\Users\Gerson M. Costa\Desktop\Dados antigos do Firefox
2019-06-05 15:50 - 2019-06-05 15:50 - 000000000 ____D C:\Users\Todos os Usuários\Mozilla
2019-06-05 15:50 - 2019-06-05 15:50 - 000000000 ____D C:\ProgramData\Mozilla
2019-06-05 15:43 - 2019-06-05 15:43 - 000000000 ____D C:\Users\Gerson M. Costa\AppData\LocalLow\MAL
2019-06-04 19:03 - 2019-06-12 19:44 - 000000000 _____ C:\WINDOWS\system32\last.dump
2019-06-04 18:53 - 2019-06-04 18:53 - 000000000 ____D C:\Users\Gerson M. Costa\AppData\Roaming\lighteningplayer
2019-06-04 18:52 - 2019-06-21 19:07 - 000014460 _____ C:\WINDOWS\System32\Tasks\dQrdGBVvC
2019-06-04 18:52 - 2019-06-21 13:06 - 000000000 ____D C:\Users\Gerson M. Costa\AppData\Local\prunld3473
2019-06-04 18:52 - 2019-06-12 19:20 - 000000000 ____D C:\Program Files (x86)\dQrdGBVvC
2019-06-04 18:47 - 2019-06-04 18:48 - 000015594 _____ C:\WINDOWS\SysWOW64\findit.xml
2019-06-04 18:47 - 2019-06-04 18:47 - 000000000 ____D C:\Users\Gerson M. Costa\AppData\Local\BitTorrentHelper
2019-06-04 18:46 - 2019-06-07 17:28 - 000000000 ____D C:\Users\Todos os Usuários\Logic Cramble
2019-06-04 18:46 - 2019-06-07 17:28 - 000000000 ____D C:\ProgramData\Logic Cramble
2019-06-04 18:46 - 2019-06-04 18:47 - 000000000 ____D C:\Users\Todos os Usuários\Tolnixs
2019-06-04 18:46 - 2019-06-04 18:47 - 000000000 ____D C:\ProgramData\Tolnixs
2019-06-04 18:45 - 2019-06-16 14:28 - 000002650 _____ C:\WINDOWS\System32\Tasks\Scheduled Updater - {f912895a-b6f4-4acc-8821-2eee3acfad6c}
2019-06-04 18:45 - 2019-06-07 17:28 - 000000000 ____D C:\Users\Todos os Usuários\Tolnix
2019-06-04 18:45 - 2019-06-07 17:28 - 000000000 ____D C:\ProgramData\Tolnix
2019-06-04 18:45 - 2019-06-05 14:09 - 000000000 ____D C:\Users\Todos os Usuários\CloudPrinter
2019-06-04 18:45 - 2019-06-05 14:09 - 000000000 ____D C:\ProgramData\CloudPrinter
2019-06-04 18:45 - 2019-06-05 14:09 - 000000000 ____D C:\Program Files (x86)\MostRaba
2019-06-04 18:45 - 2019-06-04 19:07 - 000000000 __SHD C:\Users\Todos os Usuários\{F912895A-B6F4-4ACC-8821-2EEE3ACFAD6C}
2019-06-04 18:45 - 2019-06-04 19:07 - 000000000 __SHD C:\ProgramData\{F912895A-B6F4-4ACC-8821-2EEE3ACFAD6C}
2019-06-04 18:45 - 2019-06-04 18:51 - 000000000 __SHD C:\Users\Todos os Usuários\{69349554-6934-6934-693495542037}
2019-06-04 18:45 - 2019-06-04 18:51 - 000000000 __SHD C:\ProgramData\{69349554-6934-6934-693495542037}
2019-06-04 18:45 - 2019-06-04 18:45 - 007942656 _____ C:\Users\Gerson M. Costa\AppData\Local\agent.dat
2019-06-04 18:45 - 2019-06-04 18:45 - 002039183 _____ C:\Users\Gerson M. Costa\AppData\Local\Overfax.tst
2019-06-04 18:45 - 2019-06-04 18:45 - 001895382 _____ C:\Users\Gerson M. Costa\AppData\Local\Zenhome.bin
2019-06-04 18:45 - 2019-06-04 18:45 - 000126464 _____ C:\Users\Gerson M. Costa\AppData\Local\noah.dat
2019-06-04 18:45 - 2019-06-04 18:45 - 000126464 _____ C:\Users\Gerson M. Costa\AppData\Local\lobby.dat
2019-06-04 18:45 - 2019-06-04 18:45 - 000072787 _____ C:\Users\Gerson M. Costa\AppData\Local\Finis.tst
2019-06-04 18:45 - 2019-06-04 18:45 - 000070992 _____ C:\Users\Gerson M. Costa\AppData\Local\Config.xml
2019-06-04 18:45 - 2019-06-04 18:45 - 000054272 _____ C:\Users\Gerson M. Costa\AppData\Local\ApplicationHosting.dat
2019-06-04 18:45 - 2019-06-04 18:45 - 000018432 _____ C:\Users\Gerson M. Costa\AppData\Local\Main.dat
2019-06-04 18:45 - 2019-06-04 18:45 - 000005568 _____ C:\Users\Gerson M. Costa\AppData\Local\md.xml
2019-06-04 18:45 - 2019-06-04 18:44 - 001630720 _____ (TODO: ) C:\Users\Gerson M. Costa\AppData\Local\Overfax.exe
2019-06-04 18:45 - 2019-06-04 18:44 - 001630720 _____ (TODO: ) C:\Users\Gerson M. Costa\AppData\Local\Finis.exe
2019-06-04 18:44 - 2019-06-04 18:45 - 000018336 _____ C:\Users\Gerson M. Costa\AppData\Local\InstallationConfiguration.xml
2019-06-04 18:44 - 2019-06-04 18:44 - 000722944 _____ C:\Users\Gerson M. Costa\AppData\Local\sha.db
2019-06-04 18:44 - 2019-06-04 18:44 - 000140800 _____ C:\Users\Gerson M. Costa\AppData\Local\installer.dat
2019-06-04 18:44 - 2019-06-04 18:44 - 000000000 ____D C:\Users\Todos os Usuários\fb
2019-06-04 18:44 - 2019-06-04 18:44 - 000000000 ____D C:\ProgramData\fb
2019-05-25 09:43 - 2019-02-13 02:47 - 001909560 _____ (Microsoft Corporation) C:\WINDOWS\system32\mcupdate_GenuineIntel.dll
2019-05-21 17:06 - 2019-05-21 17:08 - 000000000 ____D C:\Users\Gerson M. Costa\Documents\APRESENTACOES CELULAR
2019-05-21 17:03 - 2019-05-21 17:05 - 000000000 ____D C:\Users\Gerson M. Costa\Documents\PDF CELULAR
2019-05-21 16:00 - 2019-05-21 16:00 - 000000000 ____D C:\Users\Gerson M. Costa\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Aplicativo Itaú
2019-05-14 23:35 - 2019-05-03 03:00 - 000120832 _____ (Microsoft Corporation) C:\WINDOWS\system32\microsoft-windows-kernel-processor-power-events.dll
2019-05-14 23:34 - 2019-05-03 03:01 - 008189440 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Data.Pdf.dll
2019-05-14 23:34 - 2019-05-03 03:00 - 006661632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Data.Pdf.dll
2019-05-14 23:34 - 2019-04-19 01:35 - 001458688 _____ (Microsoft Corporation) C:\WINDOWS\system32\dosvc.dll
2019-05-14 23:34 - 2019-04-19 01:35 - 001175552 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncCore.dll
2019-05-14 23:33 - 2019-05-03 09:14 - 000790208 _____ (Microsoft Corporation) C:\WINDOWS\system32\fontdrvhost.exe
2019-05-14 23:33 - 2019-05-03 09:13 - 001376472 _____ (Microsoft Corporation) C:\WINDOWS\system32\ole32.dll
2019-05-14 23:33 - 2019-05-03 09:13 - 000396088 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\atmfd.dll
2019-05-14 23:33 - 2019-05-03 08:55 - 000123392 _____ (Microsoft Corporation) C:\WINDOWS\system32\fontsub.dll
2019-05-14 23:33 - 2019-05-03 08:54 - 000177664 _____ (Microsoft Corporation) C:\WINDOWS\system32\t2embed.dll
2019-05-14 23:33 - 2019-05-03 08:52 - 000119808 _____ (Microsoft Corporation) C:\WINDOWS\system32\wercplsupport.dll
2019-05-14 23:33 - 2019-05-03 08:49 - 001288704 _____ (Microsoft Corporation) C:\WINDOWS\system32\werconcpl.dll
2019-05-14 23:33 - 2019-05-03 08:49 - 000488448 _____ (Microsoft Corporation) C:\WINDOWS\system32\werui.dll
2019-05-14 23:33 - 2019-05-03 08:49 - 000210944 _____ (Microsoft Corporation) C:\WINDOWS\system32\DWWIN.EXE
2019-05-14 23:33 - 2019-05-03 08:43 - 001027008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ole32.dll
2019-05-14 23:33 - 2019-05-03 08:43 - 000662328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fontdrvhost.exe
2019-05-14 23:33 - 2019-05-03 08:30 - 000138752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\t2embed.dll
2019-05-14 23:33 - 2019-05-03 08:30 - 000098304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fontsub.dll
2019-05-14 23:33 - 2019-05-03 08:28 - 000089600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\olepro32.dll
2019-05-14 23:33 - 2019-05-03 08:27 - 000176640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DWWIN.EXE
2019-05-14 23:33 - 2019-05-03 08:26 - 000425472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\werui.dll
2019-05-14 23:33 - 2019-05-03 03:43 - 000177128 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\intelpep.sys
2019-05-14 23:33 - 2019-05-03 03:34 - 000159864 _____ (Microsoft Corporation) C:\WINDOWS\system32\WerFaultSecure.exe
2019-05-14 23:33 - 2019-05-03 03:33 - 000063072 _____ (Microsoft Corporation) C:\WINDOWS\system32\cryptdll.dll
2019-05-14 23:33 - 2019-05-03 03:32 - 000776784 _____ (Microsoft Corporation) C:\WINDOWS\system32\wer.dll
2019-05-14 23:33 - 2019-05-03 03:32 - 000493880 _____ (Microsoft Corporation) C:\WINDOWS\system32\WerFault.exe
2019-05-14 23:33 - 2019-05-03 03:32 - 000438984 _____ (Microsoft Corporation) C:\WINDOWS\system32\Faultrep.dll
2019-05-14 23:33 - 2019-05-03 03:32 - 000209208 _____ (Microsoft Corporation) C:\WINDOWS\system32\wermgr.exe
2019-05-14 23:33 - 2019-05-03 03:32 - 000164664 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wfplwfs.sys
2019-05-14 23:33 - 2019-05-03 03:31 - 000545808 _____ (Microsoft Corporation) C:\WINDOWS\system32\hal.dll
2019-05-14 23:33 - 2019-05-03 03:31 - 000115728 _____ (Microsoft Corporation) C:\WINDOWS\system32\kdnet.dll
2019-05-14 23:33 - 2019-05-03 03:20 - 000434704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WerFault.exe
2019-05-14 23:33 - 2019-05-03 03:20 - 000384976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Faultrep.dll
2019-05-14 23:33 - 2019-05-03 03:20 - 000192016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wermgr.exe
2019-05-14 23:33 - 2019-05-03 03:20 - 000146920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WerFaultSecure.exe
2019-05-14 23:33 - 2019-05-03 03:19 - 000665224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wer.dll
2019-05-14 23:33 - 2019-05-03 03:19 - 000056288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cryptdll.dll
2019-05-14 23:33 - 2019-05-03 03:00 - 000099328 _____ (Microsoft Corporation) C:\WINDOWS\system32\utcutil.dll
2019-05-14 23:33 - 2019-05-03 02:59 - 000514560 _____ (Microsoft Corporation) C:\WINDOWS\system32\nltest.exe
2019-05-14 23:33 - 2019-05-03 02:59 - 000204288 _____ (Microsoft Corporation) C:\WINDOWS\system32\wersvc.dll
2019-05-14 23:33 - 2019-05-03 02:58 - 000462336 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcdedit.exe
2019-05-14 23:33 - 2019-05-03 02:56 - 000773632 _____ (Microsoft Corporation) C:\WINDOWS\system32\netlogon.dll
2019-05-14 23:33 - 2019-05-03 02:55 - 000659968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\netlogon.dll
2019-05-14 23:33 - 2019-05-03 02:54 - 000845824 _____ (Microsoft Corporation) C:\WINDOWS\system32\fveapi.dll
2019-05-14 23:33 - 2019-05-03 02:54 - 000778752 _____ (Microsoft Corporation) C:\WINDOWS\system32\BFE.DLL
2019-05-14 23:33 - 2019-05-03 02:54 - 000776192 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript.dll
2019-05-14 23:33 - 2019-05-03 02:54 - 000669184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript.dll
2019-05-14 23:33 - 2019-05-03 02:54 - 000667136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fveapi.dll
2019-05-14 23:33 - 2019-05-03 02:53 - 000204800 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\intelppm.sys
2019-05-14 23:33 - 2019-05-03 02:53 - 000186880 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\amdk8.sys
2019-05-14 23:33 - 2019-05-03 02:53 - 000184320 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\amdppm.sys
2019-05-14 23:33 - 2019-05-03 02:53 - 000181760 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\processr.sys
2019-05-14 23:33 - 2019-04-19 07:54 - 000720200 _____ (Microsoft Corporation) C:\WINDOWS\system32\kernel32.dll
2019-05-14 23:33 - 2019-04-19 07:38 - 000058368 _____ (Microsoft Corporation) C:\WINDOWS\system32\RDSPnf.exe
2019-05-14 23:33 - 2019-04-19 07:38 - 000040960 _____ (Microsoft Corporation) C:\WINDOWS\system32\perfproc.dll
2019-05-14 23:33 - 2019-04-19 07:36 - 000346112 _____ (Microsoft Corporation) C:\WINDOWS\system32\AcGenral.dll
2019-05-14 23:33 - 2019-04-19 07:34 - 000522240 _____ (Microsoft Corporation) C:\WINDOWS\system32\winspool.drv
2019-05-14 23:33 - 2019-04-19 06:37 - 000607960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kernel32.dll
2019-05-14 23:33 - 2019-04-19 06:30 - 000036864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\perfproc.dll
2019-05-14 23:33 - 2019-04-19 06:26 - 002405888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AcGenral.dll
2019-05-14 23:33 - 2019-04-19 06:25 - 000423936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winspool.drv
2019-05-14 23:33 - 2019-04-19 02:07 - 000985400 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncHost.exe
2019-05-14 23:33 - 2019-04-19 02:06 - 000798520 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupEngine.dll
2019-05-14 23:33 - 2019-04-19 02:02 - 000831800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSyncHost.exe
2019-05-14 23:33 - 2019-04-19 02:01 - 000576016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NetSetupEngine.dll
2019-05-14 23:33 - 2019-04-19 01:43 - 000150016 _____ (Microsoft Corporation) C:\WINDOWS\system32\fcon.dll
2019-05-14 23:33 - 2019-04-19 01:41 - 000140288 _____ (Microsoft Corporation) C:\WINDOWS\system32\mdmmigrator.dll
2019-05-14 23:33 - 2019-04-19 01:41 - 000095232 _____ (Microsoft Corporation) C:\WINDOWS\system32\EduPrintProv.exe
2019-05-14 23:33 - 2019-04-19 01:40 - 000342528 _____ (Microsoft Corporation) C:\WINDOWS\system32\browserexport.exe
2019-05-14 23:33 - 2019-04-19 01:40 - 000243712 _____ (Microsoft Corporation) C:\WINDOWS\system32\JpnServiceDS.dll
2019-05-14 23:33 - 2019-04-19 01:40 - 000172544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\enrollmentapi.dll
2019-05-14 23:33 - 2019-04-19 01:40 - 000167936 _____ (Microsoft Corporation) C:\WINDOWS\system32\FilterDS.dll
2019-05-14 23:33 - 2019-04-19 01:40 - 000081408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NetDriverInstall.dll
2019-05-14 23:33 - 2019-04-19 01:39 - 000567296 _____ (Microsoft Corporation) C:\WINDOWS\system32\daxexec.dll
2019-05-14 23:33 - 2019-04-19 01:39 - 000425472 _____ (Microsoft Corporation) C:\WINDOWS\system32\SDDS.dll
2019-05-14 23:33 - 2019-04-19 01:39 - 000374784 _____ (Microsoft Corporation) C:\WINDOWS\system32\BingASDS.dll
2019-05-14 23:33 - 2019-04-19 01:39 - 000361472 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceEnroller.exe
2019-05-14 23:33 - 2019-04-19 01:39 - 000204288 _____ (Microsoft Corporation) C:\WINDOWS\system32\enrollmentapi.dll
2019-05-14 23:33 - 2019-04-19 01:38 - 000593408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Internal.Management.dll
2019-05-14 23:33 - 2019-04-19 01:38 - 000391680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\daxexec.dll
2019-05-14 23:33 - 2019-04-19 01:38 - 000304128 _____ (Microsoft Corporation) C:\WINDOWS\system32\domgmt.dll
2019-05-14 23:33 - 2019-04-19 01:38 - 000300544 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmenterprisediagnostics.dll
2019-05-14 23:33 - 2019-04-19 01:37 - 000953856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSyncCore.dll
2019-05-14 23:33 - 2019-04-19 01:37 - 000445952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dmenrollengine.dll
2019-05-14 23:33 - 2019-04-19 01:37 - 000397312 _____ (Microsoft Corporation) C:\WINDOWS\system32\profsvc.dll
2019-05-14 23:33 - 2019-04-19 01:37 - 000381952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\FirewallAPI.dll
2019-05-14 23:33 - 2019-04-19 01:37 - 000221184 _____ (Microsoft Corporation) C:\WINDOWS\system32\mdmregistration.dll
2019-05-14 23:33 - 2019-04-19 01:36 - 001300992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AzureSettingSyncProvider.dll
2019-05-14 23:33 - 2019-04-19 01:36 - 000827392 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.Management.dll
2019-05-14 23:33 - 2019-04-19 01:36 - 000546816 _____ (Microsoft Corporation) C:\WINDOWS\system32\FirewallAPI.dll
2019-05-14 23:33 - 2019-04-19 01:36 - 000357888 _____ (Microsoft Corporation) C:\WINDOWS\system32\fveapibase.dll
2019-05-14 23:33 - 2019-04-19 01:36 - 000186368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mdmregistration.dll
2019-05-14 23:33 - 2019-04-19 01:35 - 001938944 _____ (Microsoft Corporation) C:\WINDOWS\system32\AzureSettingSyncProvider.dll
2019-05-14 23:33 - 2019-04-19 01:35 - 001156608 _____ (Microsoft Corporation) C:\WINDOWS\system32\rpcss.dll
2019-05-14 23:33 - 2019-04-19 01:35 - 000784896 _____ (Microsoft Corporation) C:\WINDOWS\system32\ngcsvc.dll
2019-05-14 23:33 - 2019-04-19 01:35 - 000535040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\OneDriveSettingSyncProvider.dll
2019-05-14 23:33 - 2019-04-19 01:35 - 000523776 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmenrollengine.dll
2019-05-14 23:33 - 2019-04-19 01:35 - 000312320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fveapibase.dll
2019-05-14 23:33 - 2019-04-19 01:34 - 000935936 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasmans.dll
2019-05-14 23:33 - 2019-04-19 01:34 - 000885760 _____ (Microsoft Corporation) C:\WINDOWS\system32\MPSSVC.dll
2019-05-14 23:33 - 2019-04-19 01:34 - 000653312 _____ (Microsoft Corporation) C:\WINDOWS\system32\OneDriveSettingSyncProvider.dll
2019-05-14 23:33 - 2019-04-19 00:18 - 000806360 _____ C:\WINDOWS\SysWOW64\locale.nls
2019-05-14 23:33 - 2019-04-19 00:18 - 000806360 _____ C:\WINDOWS\system32\locale.nls
2019-05-14 23:33 - 2019-04-08 22:48 - 000376320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mspbde40.dll
2019-05-14 23:13 - 2019-05-14 23:13 - 000000000 ____D C:\Users\Gerson M. Costa\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinGrub
2019-05-14 23:13 - 2019-05-14 23:13 - 000000000 ____D C:\Program Files (x86)\WinGrub
2019-05-14 23:12 - 2019-05-14 23:12 - 001016245 _____ C:\Users\Gerson M. Costa\Downloads\WINGRB0206.EXE
2019-05-14 22:57 - 2019-06-28 20:25 - 000002444 _____ C:\Users\Gerson M. Costa\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2019-05-14 22:48 - 2019-05-14 22:48 - 000000000 ____D C:\Users\Gerson M. Costa\Documents\Windows XPBT Professional SP3 PTBR-AllUpdates10-03-2015
2019-04-30 18:49 - 2019-04-30 18:49 - 000000000 ___HD C:\$AV_ASW
2019-04-30 10:17 - 2019-04-30 10:17 - 000001116 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamViewer 14.lnk
2019-04-30 10:16 - 2019-04-30 10:16 - 022796808 _____ (TeamViewer GmbH) C:\Users\Gerson M. Costa\Downloads\TeamViewer_Setup (1).exe
2019-04-23 20:26 - 2019-04-23 20:26 - 000000762 _____ C:\Users\JacuíII\Desktop\Estudo sobre Adventistas do 7º Dia - Atalho.lnk
2019-04-20 09:33 - 2019-04-20 09:33 - 000021961 _____ C:\Users\Gerson M. Costa\Downloads\boletoClaro_219257740.pdf
2019-04-18 13:55 - 2019-04-02 04:48 - 000310272 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\netbt.sys
2019-04-18 13:55 - 2019-03-14 11:34 - 000127488 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppxSysprep.dll
2019-04-18 13:55 - 2019-03-14 05:15 - 000102400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\negoexts.dll
2019-04-18 13:55 - 2019-03-14 04:54 - 000118784 _____ (Microsoft Corporation) C:\WINDOWS\system32\negoexts.dll
2019-04-18 13:54 - 2019-04-02 04:45 - 000323584 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppxAllUserStore.dll
2019-04-18 13:54 - 2019-04-02 01:41 - 000230912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppxAllUserStore.dll
2019-04-18 13:54 - 2019-03-14 11:51 - 000157192 _____ (Microsoft Corporation) C:\WINDOWS\system32\consent.exe
2019-04-18 13:54 - 2019-03-14 11:35 - 000011776 _____ (Microsoft Corporation) C:\WINDOWS\system32\appinfoext.dll
2019-04-18 13:54 - 2019-03-14 11:30 - 000440832 _____ (Microsoft Corporation) C:\WINDOWS\system32\LockAppBroker.dll
2019-04-18 13:54 - 2019-03-14 10:53 - 000375808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LockAppBroker.dll
2019-04-18 13:54 - 2019-03-14 05:18 - 000095744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserDataTimeUtil.dll
2019-04-18 13:54 - 2019-03-14 05:18 - 000035840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\credui.dll
2019-04-18 13:54 - 2019-03-14 04:57 - 000106496 _____ (Microsoft Corporation) C:\WINDOWS\system32\NotificationControllerPS.dll
2019-04-18 13:54 - 2019-03-14 04:56 - 000120320 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserDataTimeUtil.dll
2019-04-18 13:54 - 2019-03-14 04:56 - 000055296 _____ (Microsoft Corporation) C:\WINDOWS\system32\msscntrs.dll
2019-04-18 13:54 - 2019-03-14 04:55 - 000099328 _____ (Microsoft Corporation) C:\WINDOWS\system32\ActiveSyncCsp.dll
2019-04-18 13:54 - 2019-03-14 04:55 - 000062976 _____ (Microsoft Corporation) C:\WINDOWS\system32\EASPolicyManagerBrokerHost.exe
2019-04-18 13:54 - 2019-03-14 04:55 - 000048640 _____ (Microsoft Corporation) C:\WINDOWS\system32\credui.dll
2019-04-18 13:54 - 2019-03-14 04:50 - 000176640 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssph.dll
2019-04-18 13:53 - 2019-03-14 11:33 - 000182784 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rdpdr.sys
2019-04-18 13:53 - 2019-03-14 05:28 - 000152072 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wcifs.sys
2019-04-18 13:53 - 2019-03-14 05:13 - 000145408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mssph.dll
2019-04-18 13:53 - 2019-03-14 04:55 - 000528896 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\nwifi.sys
2019-04-18 13:53 - 2019-03-14 04:55 - 000141312 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppointmentActivation.dll
2019-04-18 13:53 - 2019-03-14 04:51 - 000226304 _____ (Microsoft Corporation) C:\WINDOWS\system32\TetheringMgr.dll
2019-04-18 13:52 - 2019-04-02 09:38 - 000094008 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpudd.dll
2019-04-18 13:52 - 2019-04-02 09:15 - 000140800 _____ (Microsoft Corporation) C:\WINDOWS\system32\oleprn.dll
2019-04-18 13:52 - 2019-04-02 09:10 - 000130048 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\luafv.sys
2019-04-18 13:52 - 2019-04-02 09:10 - 000033280 _____ (Microsoft Corporation) C:\WINDOWS\system32\sxssrv.dll
2019-04-18 13:52 - 2019-04-02 06:10 - 000117760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\oleprn.dll
2019-04-18 13:52 - 2019-04-02 05:19 - 000786080 _____ (Microsoft Corporation) C:\WINDOWS\system32\oleaut32.dll
2019-04-18 13:52 - 2019-04-02 02:04 - 000604008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\oleaut32.dll
2019-04-18 13:52 - 2019-04-02 02:04 - 000560600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppXDeploymentClient.dll
2019-04-18 13:52 - 2019-03-14 11:33 - 000030208 _____ (Microsoft Corporation) C:\WINDOWS\system32\RpcPing.exe
2019-04-18 13:52 - 2019-03-14 10:55 - 000026624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\RpcPing.exe
2019-04-18 13:52 - 2019-03-14 05:38 - 000090360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mpr.dll
2019-04-18 13:52 - 2019-03-14 05:27 - 000097600 _____ (Microsoft Corporation) C:\WINDOWS\system32\mpr.dll
2019-04-18 13:52 - 2019-03-14 05:17 - 000057344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntlanman.dll
2019-04-18 13:52 - 2019-03-14 05:13 - 001468416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieapfltr.dll
2019-04-18 13:52 - 2019-03-14 04:55 - 000458752 _____ (Microsoft Corporation) C:\WINDOWS\system32\cloudAP.dll
2019-04-18 13:52 - 2019-03-14 04:55 - 000414720 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cldflt.sys
2019-04-18 13:52 - 2019-03-14 04:55 - 000069120 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntlanman.dll
2019-04-18 13:52 - 2019-03-14 04:50 - 001587712 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieapfltr.dll
2019-04-18 13:51 - 2019-04-02 05:21 - 000735680 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentClient.dll
2019-04-18 13:51 - 2019-03-14 11:33 - 000082432 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\storqosflt.sys
2019-04-18 13:51 - 2019-03-14 05:57 - 000611640 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\spaceport.sys
2019-04-18 13:51 - 2019-03-14 05:56 - 000375096 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\pci.sys
2019-04-18 13:51 - 2019-03-14 05:26 - 000175416 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\spacedump.sys
2019-04-18 13:51 - 2019-03-14 05:17 - 000261632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dhcpcore6.dll
2019-04-18 13:51 - 2019-03-14 05:15 - 000415744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\schannel.dll
2019-04-18 13:51 - 2019-03-14 05:15 - 000318464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dhcpcore.dll
2019-04-18 13:51 - 2019-03-14 04:56 - 000144384 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssprxy.dll
2019-04-18 13:51 - 2019-03-14 04:54 - 000354304 _____ (Microsoft Corporation) C:\WINDOWS\system32\dhcpcore.dll
2019-04-18 13:51 - 2019-03-14 04:54 - 000279552 _____ (Microsoft Corporation) C:\WINDOWS\system32\dhcpcore6.dll
2019-04-18 13:51 - 2019-03-14 04:54 - 000273408 _____ (Microsoft Corporation) C:\WINDOWS\system32\ubpm.dll
2019-04-18 13:51 - 2019-03-14 04:53 - 000456192 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Graphics.Printing.Workflow.dll
2019-04-18 13:51 - 2019-03-14 04:50 - 000847360 _____ (Microsoft Corporation) C:\WINDOWS\system32\bisrv.dll
2019-04-18 13:50 - 2019-04-02 09:11 - 001857536 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml3.dll
2019-04-18 13:50 - 2019-04-02 06:07 - 001586688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml3.dll
2019-04-18 13:50 - 2019-03-14 11:31 - 000198656 _____ (Microsoft Corporation) C:\WINDOWS\system32\wincredui.dll
2019-04-18 13:50 - 2019-03-14 10:56 - 000160768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wincredui.dll
2019-04-18 13:50 - 2019-03-14 05:17 - 000288768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Search.ProtocolHandler.MAPI2.dll
2019-04-18 13:50 - 2019-03-14 05:17 - 000105472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wcmapi.dll
2019-04-18 13:50 - 2019-03-14 05:14 - 001070080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\aadtb.dll
2019-04-18 13:50 - 2019-03-14 05:14 - 000138240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\smartscreenps.dll
2019-04-18 13:50 - 2019-03-14 04:55 - 000134656 _____ (Microsoft Corporation) C:\WINDOWS\system32\wcmapi.dll
2019-04-18 13:50 - 2019-03-14 04:54 - 000395776 _____ (Microsoft Corporation) C:\WINDOWS\system32\Search.ProtocolHandler.MAPI2.dll
2019-04-18 13:50 - 2019-03-14 04:54 - 000231936 _____ (Microsoft Corporation) C:\WINDOWS\system32\wcmcsp.dll
2019-04-18 13:50 - 2019-03-14 04:54 - 000110592 _____ (Microsoft Corporation) C:\WINDOWS\system32\ngcpopkeysrv.dll
2019-04-18 13:50 - 2019-03-14 04:52 - 000201728 _____ (Microsoft Corporation) C:\WINDOWS\system32\smartscreenps.dll
2019-04-18 13:50 - 2019-03-14 04:50 - 001410560 _____ (Microsoft Corporation) C:\WINDOWS\system32\aadtb.dll
2019-04-18 13:50 - 2019-03-14 04:50 - 000947200 _____ (Microsoft Corporation) C:\WINDOWS\system32\wcmsvc.dll
2019-04-18 13:49 - 2019-04-02 09:16 - 001030144 _____ (Microsoft Corporation) C:\WINDOWS\system32\termsrv.dll
2019-04-18 13:49 - 2019-04-02 09:13 - 001605632 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpcorets.dll
2019-04-18 13:49 - 2019-03-14 11:30 - 000675328 _____ (Microsoft Corporation) C:\WINDOWS\system32\objsel.dll
2019-04-18 13:49 - 2019-03-14 10:53 - 000559104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\objsel.dll
2019-04-18 13:49 - 2019-03-14 05:37 - 001171568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ucrtbase.dll
2019-04-18 13:49 - 2019-03-14 05:26 - 002421048 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ntfs.sys
2019-04-18 13:49 - 2019-03-14 05:26 - 001014344 _____ (Microsoft Corporation) C:\WINDOWS\system32\ucrtbase.dll
2019-04-18 13:49 - 2019-03-14 05:26 - 000481048 _____ (Microsoft Corporation) C:\WINDOWS\system32\ucrtbase_enclave.dll
2019-04-18 13:49 - 2019-03-14 05:14 - 000735744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mssvp.dll
2019-04-18 13:49 - 2019-03-14 05:14 - 000330752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Graphics.Printing.Workflow.dll
2019-04-18 13:49 - 2019-03-14 04:52 - 000532992 _____ (Microsoft Corporation) C:\WINDOWS\system32\QuietHours.dll
2019-04-18 13:49 - 2019-03-14 04:50 - 000796672 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssvp.dll
2019-04-18 13:49 - 2019-03-13 22:57 - 000475648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxbde40.dll
2019-04-18 13:48 - 2019-04-02 04:44 - 001724416 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpserverbase.dll
2019-04-18 13:48 - 2019-04-02 04:44 - 001421312 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpbase.dll
2019-04-18 13:48 - 2019-04-02 01:41 - 001540096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdpserverbase.dll
2019-04-18 13:48 - 2019-04-02 01:41 - 001235968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdpbase.dll
2019-04-18 13:48 - 2019-03-14 11:29 - 000882688 _____ (Microsoft Corporation) C:\WINDOWS\system32\SmartcardCredentialProvider.dll
2019-04-18 13:48 - 2019-03-14 10:53 - 000625664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SmartcardCredentialProvider.dll
2019-04-18 13:48 - 2019-03-14 05:22 - 002700288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tquery.dll
2019-04-18 13:48 - 2019-03-14 05:17 - 002258944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mssrch.dll
2019-04-18 13:48 - 2019-03-14 05:15 - 000195072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ShellCommonCommonProxyStub.dll
2019-04-18 13:48 - 2019-03-14 05:14 - 000856576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchIndexer.exe
2019-04-18 13:48 - 2019-03-14 05:14 - 000345088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchProtocolHost.exe
2019-04-18 13:48 - 2019-03-14 04:56 - 003392000 _____ (Microsoft Corporation) C:\WINDOWS\system32\tquery.dll
2019-04-18 13:48 - 2019-03-14 04:55 - 003601920 _____ (Microsoft Corporation) C:\WINDOWS\system32\Microsoft.Bluetooth.Service.dll
2019-04-18 13:48 - 2019-03-14 04:55 - 002739200 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssrch.dll
2019-04-18 13:48 - 2019-03-14 04:54 - 000227328 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchFilterHost.exe
2019-04-18 13:48 - 2019-03-14 04:52 - 000404480 _____ (Microsoft Corporation) C:\WINDOWS\system32\ShellCommonCommonProxyStub.dll
2019-04-18 13:48 - 2019-03-14 04:51 - 001058304 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchIndexer.exe
2019-04-18 13:48 - 2019-03-14 04:50 - 000406528 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchProtocolHost.exe
2019-04-18 13:47 - 2019-03-14 11:52 - 003933296 _____ (Microsoft Corporation) C:\WINDOWS\explorer.exe
2019-04-18 13:47 - 2019-03-14 11:28 - 000560640 _____ (Microsoft Corporation) C:\WINDOWS\system32\dsound.dll
2019-04-18 13:47 - 2019-03-14 11:08 - 003611264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\explorer.exe
2019-04-18 13:47 - 2019-03-14 10:52 - 000502784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dsound.dll
2019-04-18 13:47 - 2019-03-14 04:58 - 002509824 _____ (Microsoft Corporation) C:\WINDOWS\system32\smartscreen.exe
2019-04-17 22:44 - 2019-04-24 14:06 - 000000000 ____D C:\Users\Gerson M. Costa\Documents\IRPF2019 terceiros
2019-04-17 21:18 - 2019-04-17 22:43 - 000000000 ____D C:\Users\Gerson M. Costa\.rfb
2019-04-17 21:12 - 2019-04-17 21:12 - 000001769 _____ C:\Users\Public\Desktop\IRPF2019 - Declaração de Ajuste Anual, Final de Espólio e Saída Definitiva do País.lnk
2019-04-17 21:12 - 2019-04-17 21:12 - 000000000 ___HD C:\Program Files (x86)\InstallJammer Registry
2019-04-17 21:12 - 2019-04-17 21:12 - 000000000 ____D C:\Users\Gerson M. Costa\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Programas RFB2019
2019-04-17 21:12 - 2019-04-17 21:12 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Programas RFB2019
2019-04-17 21:11 - 2019-04-17 21:11 - 000000077 _____ C:\WINDOWS\system32\Drivers\aswSP.sys.sum
2019-04-17 21:04 - 2019-04-17 21:05 - 046267152 _____ (Receita Federal do Brasil) C:\Users\Gerson M. Costa\Downloads\IRPF2019Win32v1.5.exe
2019-04-07 22:45 - 2019-04-07 22:48 - 282183736 _____ (Acronis) C:\Users\Gerson M. Costa\Downloads\ATIH2014_trial_en-US.exe
2019-04-07 14:32 - 2019-04-07 14:32 - 125497040 _____ C:\Users\Gerson M. Costa\Downloads\NGH150_AllWin_EnglishTryBuy30.exe

==================== Três meses (modificados) ========

(Se uma entrada for incluída na fixlist, o arquivo/pasta será movido.)

2019-06-30 09:33 - 2018-04-11 20:38 - 000000000 ____D C:\Users\Todos os Usuários\regid.1991-06.com.microsoft
2019-06-30 09:33 - 2018-04-11 20:38 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2019-06-30 09:27 - 2018-08-29 16:43 - 000000000 ____D C:\Users\Gerson M. Costa\AppData\LocalLow\Mozilla
2019-06-30 09:21 - 2018-04-11 20:38 - 000000000 ___HD C:\Program Files\WindowsApps
2019-06-30 09:21 - 2018-04-11 20:38 - 000000000 ____D C:\WINDOWS\AppReadiness
2019-06-30 09:07 - 2018-04-11 20:38 - 000000000 ____D C:\WINDOWS\system32\NDF
2019-06-30 08:54 - 2018-06-02 23:07 - 000004192 _____ C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{6886DDEA-AF67-4A71-8890-5BF9674341E2}
2019-06-30 08:52 - 2016-03-15 14:17 - 000000144 _____ C:\WINDOWS\system32\{A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat
2019-06-30 08:52 - 2015-08-19 05:41 - 000000000 __SHD C:\Users\Gerson M. Costa\IntelGraphicsProfiles
2019-06-30 08:51 - 2018-06-02 22:11 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2019-06-30 08:08 - 2018-06-02 23:07 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2019-06-30 08:08 - 2018-05-20 14:15 - 000000000 ____D C:\Program Files (x86)\TeamViewer
2019-06-30 08:07 - 2018-04-11 18:04 - 001048576 _____ C:\WINDOWS\system32\config\BBI
2019-06-30 07:58 - 2016-03-15 00:40 - 000000000 ____D C:\Users\Todos os Usuários\AVAST Software
2019-06-30 07:58 - 2016-03-15 00:40 - 000000000 ____D C:\ProgramData\AVAST Software
2019-06-30 07:51 - 2017-11-02 17:36 - 000000000 ____D C:\Users\Gerson M. Costa\AppData\Local\AVAST Software
2019-06-30 07:45 - 2018-06-02 22:17 - 000000000 ____D C:\Users\MSSQL$SRVCRBD01
2019-06-30 07:38 - 2016-03-27 08:29 - 000000000 ____D C:\Users\Todos os Usuários\BibliaHabil
2019-06-30 07:38 - 2016-03-27 08:29 - 000000000 ____D C:\ProgramData\BibliaHabil
2019-06-29 12:35 - 2014-06-15 16:47 - 000000000 ____D C:\Users\Gerson M. Costa\Documents\CVs cartas apresentacao
2019-06-28 20:25 - 2015-01-01 20:18 - 000000000 ___RD C:\Users\Gerson M. Costa\OneDrive
2019-06-24 14:20 - 2018-03-17 21:32 - 000000000 ___RD C:\Users\Gerson M. Costa\Documents\Emails Backup
2019-06-24 14:20 - 2016-05-20 08:09 - 000000000 ____D C:\Users\Gerson M. Costa\Documents\Arquivos do Outlook
2019-06-24 05:21 - 2016-03-15 17:29 - 000000000 ____D C:\Program Files\Microsoft Office
2019-06-20 19:57 - 2018-11-19 08:17 - 000000000 ____D C:\Program Files\rempl
2019-06-18 12:56 - 2017-07-02 13:41 - 000000000 ____D C:\Program Files\UNP
2019-06-17 22:33 - 2016-05-17 19:15 - 000002457 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk
2019-06-16 14:28 - 2018-06-02 23:07 - 000003078 _____ C:\WINDOWS\System32\Tasks\Java Update Scheduler
2019-06-16 14:28 - 2018-06-02 23:07 - 000002854 _____ C:\WINDOWS\System32\Tasks\OneDrive Standalone Update Task-S-1-5-21-3482869830-628851189-821680398-1009
2019-06-16 14:28 - 2018-06-02 23:07 - 000002064 _____ C:\WINDOWS\System32\Tasks\TuneUpUtilities_Task_BkGndMaintenance2013
2019-06-16 14:28 - 2018-06-02 23:07 - 000000000 ____D C:\WINDOWS\System32\Tasks\AVAST Software
2019-06-12 19:46 - 2018-04-11 20:36 - 000000000 ____D C:\WINDOWS\INF
2019-06-12 19:45 - 2018-06-02 22:36 - 001737606 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2019-06-12 19:45 - 2018-04-12 13:41 - 000750960 _____ C:\WINDOWS\system32\prfh0416.dat
2019-06-12 19:45 - 2018-04-12 13:41 - 000148294 _____ C:\WINDOWS\system32\prfc0416.dat
2019-06-12 19:43 - 2018-01-05 04:37 - 000000000 ___RD C:\Users\Gerson M. Costa\3D Objects
2019-06-12 19:43 - 2016-04-27 08:22 - 000000000 __RHD C:\Users\Public\AccountPictures
2019-06-12 19:39 - 2018-08-07 03:38 - 000403840 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2019-06-12 19:35 - 2018-04-11 20:38 - 000000000 ____D C:\WINDOWS\TextInput
2019-06-12 19:35 - 2018-04-11 20:38 - 000000000 ____D C:\WINDOWS\ShellExperiences
2019-06-12 19:35 - 2018-04-11 20:38 - 000000000 ____D C:\WINDOWS\Provisioning
2019-06-12 19:35 - 2018-04-11 20:38 - 000000000 ____D C:\WINDOWS\bcastdvr
2019-06-12 19:32 - 2018-04-11 20:30 - 000000000 ____D C:\WINDOWS\CbsTemp
2019-06-12 19:12 - 2016-03-15 00:03 - 000000000 ____D C:\WINDOWS\system32\MRT
2019-06-12 19:08 - 2016-03-15 00:03 - 135349160 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2019-06-09 15:28 - 2017-11-14 18:51 - 000000286 __RSH C:\Users\Todos os Usuários\ntuser.pol
2019-06-09 15:28 - 2017-11-14 18:51 - 000000286 __RSH C:\ProgramData\ntuser.pol
2019-06-07 17:33 - 2018-08-13 21:34 - 000000000 ____D C:\Users\Gerson M. Costa\AppData\Local\CrashDumps
2019-06-05 13:40 - 2018-06-02 23:07 - 000003542 _____ C:\WINDOWS\System32\Tasks\Adobe Acrobat Update Task
2019-06-04 19:54 - 2018-04-11 20:38 - 000000000 ____D C:\WINDOWS\LiveKernelReports
2019-06-04 18:48 - 2016-03-15 00:44 - 000002315 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2019-06-04 18:45 - 2016-05-17 19:26 - 000000000 ____D C:\Program Files\Intel Security
2019-05-31 10:21 - 2017-05-15 20:25 - 000000000 ____D C:\Users\Gerson M. Costa\Documents\APOSENTADORIA

==================== Arquivos na raiz de alguns diretórios ================

2016-05-25 15:32 - 2016-11-02 20:04 - 000021866 _____ () C:\Users\Gerson M. Costa\AppData\Roaming\Valores Separados por Vírgula.EML
2019-06-04 18:45 - 2019-06-04 18:45 - 007942656 _____ () C:\Users\Gerson M. Costa\AppData\Local\agent.dat
2019-06-04 18:45 - 2019-06-04 18:45 - 000054272 _____ () C:\Users\Gerson M. Costa\AppData\Local\ApplicationHosting.dat
2019-06-04 18:45 - 2019-06-04 18:45 - 000070992 _____ () C:\Users\Gerson M. Costa\AppData\Local\Config.xml
2016-07-30 12:34 - 2016-07-30 12:35 - 000010752 _____ () C:\Users\Gerson M. Costa\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2019-06-04 18:45 - 2019-06-04 18:44 - 001630720 _____ (TODO: ) C:\Users\Gerson M. Costa\AppData\Local\Finis.exe
2019-06-04 18:45 - 2019-06-04 18:45 - 000072787 _____ () C:\Users\Gerson M. Costa\AppData\Local\Finis.tst
2019-06-04 18:44 - 2019-06-04 18:45 - 000018336 _____ () C:\Users\Gerson M. Costa\AppData\Local\InstallationConfiguration.xml
2019-06-04 18:44 - 2019-06-04 18:44 - 000140800 _____ () C:\Users\Gerson M. Costa\AppData\Local\installer.dat
2019-06-04 18:45 - 2019-06-04 18:45 - 000126464 _____ () C:\Users\Gerson M. Costa\AppData\Local\lobby.dat
2019-06-04 18:45 - 2019-06-04 18:45 - 000018432 _____ () C:\Users\Gerson M. Costa\AppData\Local\Main.dat
2019-06-04 18:45 - 2019-06-04 18:45 - 000005568 _____ () C:\Users\Gerson M. Costa\AppData\Local\md.xml
2019-06-04 18:45 - 2019-06-04 18:45 - 000126464 _____ () C:\Users\Gerson M. Costa\AppData\Local\noah.dat
2019-06-04 18:45 - 2019-06-04 18:44 - 001630720 _____ (TODO: ) C:\Users\Gerson M. Costa\AppData\Local\Overfax.exe
2019-06-04 18:45 - 2019-06-04 18:45 - 002039183 _____ () C:\Users\Gerson M. Costa\AppData\Local\Overfax.tst
2019-06-04 18:44 - 2019-06-04 18:44 - 000722944 _____ () C:\Users\Gerson M. Costa\AppData\Local\sha.db
2019-06-04 18:48 - 2019-06-04 18:48 - 000032038 _____ () C:\Users\Gerson M. Costa\AppData\Local\uninstall_temp.ico
2019-06-04 18:45 - 2019-06-04 18:45 - 001895382 _____ () C:\Users\Gerson M. Costa\AppData\Local\Zenhome.bin
2016-05-11 18:35 - 2016-05-11 18:35 - 000000000 _____ () C:\Users\Gerson M. Costa\AppData\Local\{EA79608B-3CC4-47CE-940E-766A8942C33A}

==================== FLock ================

2019-06-04 19:07 C:\ProgramData\{F912895A-B6F4-4ACC-8821-2EEE3ACFAD6C}
2019-06-04 19:07 C:\Users\Todos os Usuários\{F912895A-B6F4-4ACC-8821-2EEE3ACFAD6C}

==================== SigCheck ===============================

(Não há correção automática para arquivos que não passaram na verificação.)

==================== Fim de FRST.txt ============================