Publicité
Publicité
Format du document : text/plain
Prévisualisation
Resultado do exame da Farbar Recovery Scan Tool (FRST) (x64) Versão: 01-06-2019
Executado por Servidor (administrador) em SERVIDOR (PCWARE IPMH61R2) (01-06-2019 14:54:02)
Executando a partir de E:\
Perfis Carregados: Servidor & MSSQL$SQLEXPRESS & ReportServer$SQLEXPRESS & MSSQLFDLauncher$SQLEXPRESS (Perfis Disponíveis: Servidor & nomedeusuario & MSSQL$SQLEXPRESS & ReportServer$SQLEXPRESS & MSSQLFDLauncher$SQLEXPRESS & .NET v4.5 & DefaultAppPool & .NET v4.5 Classic)
Platform: Windows 10 Enterprise Versão 1803 17134.441 (X64) Idioma: Português (Brasil)
Navegador padrão: Chrome
Modo da Inicialização: Normal
Tutorial da Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Processos (Whitelisted) =================
(Se uma entrada for incluída na fixlist, o processo será fechado. O arquivo não será movido.)
() [Arquivo não assinado] C:\Program Files\WindowsApps\Microsoft.SkypeApp_14.33.41.0_x64__kzf8qxf38zg5c\SkypeBackgroundHost.exe
(Adobe Systems, Incorporated -> Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
(Hewlett-Packard Company -> Hewlett-Packard) C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe
(HP) [Arquivo não assinado] C:\Program Files (x86)\HP\HPLaserJetService\HPLaserJetService.exe
(Intel(R) pGFX -> Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel(R) pGFX -> Intel Corporation) C:\Windows\System32\igfxpers.exe
(Intel(R) pGFX -> Intel Corporation) C:\Windows\System32\igfxtray.exe
(Malwarebytes Corporation -> Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe
(Malwarebytes Corporation -> Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft SQL Server\90\Shared\sqlbrowser.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Microsoft SQL Server\MSRS12.SQLEXPRESS\Reporting Services\ReportServer\bin\ReportingServicesService.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Microsoft SQL Server\MSSQL12.SQLEXPRESS\MSSQL\Binn\fdhost.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Microsoft SQL Server\MSSQL12.SQLEXPRESS\MSSQL\Binn\fdlauncher.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Microsoft SQL Server\MSSQL12.SQLEXPRESS\MSSQL\Binn\sqlservr.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_17.10314.31700.1000_x64__8wekyb3d8bbwe\Office16\OfficeHubTaskHost.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
(Microsoft Corporation) [Arquivo não assinado] C:\Program Files\WindowsApps\Microsoft.SkypeApp_14.33.41.0_x64__kzf8qxf38zg5c\SkypeApp.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\inetsrv\inetinfo.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\mqsvc.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\OpenWith.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\OpenWith.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\OpenWith.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\SppExtComObj.Exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\SysWOW64\inetsrv\w3wp.exe
(Microsoft Windows Hardware Compatibility Publisher -> Motorola Inc.) C:\Program Files\Motorola\SMSERIAL\sm56hlpr.exe
(Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.1905.4-0\MsMpEng.exe
(Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.1905.4-0\NisSrv.exe
(Oracle America, Inc. -> Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Piriform Software Ltd -> Piriform Software Ltd) C:\Program Files\CCleaner\CCleaner64.exe
(Precisão Sistemas -> Precisão Sistemas) C:\InovaFarma\InovaFarmaAPI\InovaFarmaAPI.Service.exe
(SafeNet, Inc. -> SafeNet, Inc.) C:\Program Files\SafeNet\Authentication\SAC\x64\SACMonitor.exe
(SafeNet, Inc. -> SafeNet, Inc.) C:\Program Files\SafeNet\Authentication\SAC\x64\SACSrv.exe
(TeamViewer GmbH -> TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer.exe
(TeamViewer GmbH -> TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
(TeamViewer GmbH -> TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\tv_w32.exe
(TeamViewer GmbH -> TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\tv_x64.exe
==================== Registro (Whitelisted) ===========================
(Se uma entrada for incluída na fixlist, o ítem no Registro será restaurado para o padrão ou removido. O arquivo não será movido.)
HKLM\...\Run: [SecurityHealth] => C:\Program Files\Windows Defender\MSASCuiL.exe [638872 2018-04-11] (Microsoft Windows -> Microsoft Corporation)
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [16418560 2017-06-17] (Realtek Semiconductor Corp -> Realtek Semiconductor)
HKLM\...\Run: [SMSERIAL] => C:\Program Files\Motorola\SMSERIAL\sm56hlpr.exe [1702400 2018-02-21] (Microsoft Windows Hardware Compatibility Publisher -> Motorola Inc.)
HKLM\...\Run: [SACMonitor] => C:\Program Files\SafeNet\Authentication\SAC\x64\SACMonitor.exe [2183312 2012-04-16] (SafeNet, Inc. -> SafeNet, Inc.)
HKLM-x32\...\Run: [HP Software Update] => C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe [96056 2013-05-30] (Hewlett-Packard Company -> Hewlett-Packard)
HKLM-x32\...\Run: [StatusAlerts] => C:\Program Files (x86)\HP\StatusAlerts\bin\HPStatusAlerts.exe [330040 2014-02-12] (Hewlett-Packard Company -> Hewlett-Packard Company)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [645456 2019-04-01] (Oracle America, Inc. -> Oracle Corporation)
HKU\S-1-5-19\...\RunOnce: [WAB Migrate] => C:\Program Files\Windows Mail\wab.exe [518144 2018-04-11] (Microsoft Windows -> Microsoft Corporation)
HKU\S-1-5-20\...\RunOnce: [WAB Migrate] => C:\Program Files\Windows Mail\wab.exe [518144 2018-04-11] (Microsoft Windows -> Microsoft Corporation)
HKU\S-1-5-21-1469184627-3254592334-3046470981-1001\...\Run: [CCleaner Smart Cleaning] => C:\Program Files\CCleaner\CCleaner64.exe [22515488 2019-04-04] (Piriform Software Ltd -> Piriform Software Ltd)
HKU\S-1-5-21-1469184627-3254592334-3046470981-1001\...\Policies\Explorer: [NoAutoUpdate] 0
HKU\S-1-5-80-3880006512-4290199581-1648723128-3569869737-3631323133\...\RunOnce: [WAB Migrate] => C:\Program Files\Windows Mail\wab.exe [518144 2018-04-11] (Microsoft Windows -> Microsoft Corporation)
HKU\S-1-5-80-425977601-1203083412-1631309457-2457533047-3321749933\...\RunOnce: [WAB Migrate] => C:\Program Files\Windows Mail\wab.exe [518144 2018-04-11] (Microsoft Windows -> Microsoft Corporation)
HKU\S-1-5-80-997390408-2153310517-3119169589-2253446180-2226563786\...\RunOnce: [WAB Migrate] => C:\Program Files\Windows Mail\wab.exe [518144 2018-04-11] (Microsoft Windows -> Microsoft Corporation)
HKLM\...\Drivers32: [wave1] => C:\WINDOWS\system32\serwvdrv.dll [24064 2018-04-11] (Microsoft Windows -> Microsoft Corporation)
HKLM\...\Drivers32: [wave1] => C:\WINDOWS\SysWOW64\serwvdrv.dll [19968 2018-04-11] (Microsoft Windows -> Microsoft Corporation)
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files (x86)\Google\Chrome\Application\70.0.3538.102\Installer\chrmstp.exe [2018-11-13] (Google Inc -> Google Inc.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Client Connection.lnk [2017-06-17]
ShortcutTarget: Client Connection.lnk -> C:\Windows\Installer\{86F0E275-8AFA-4490-8A54-25A5E0BCE079}\_97756A09B6E02128E8236E.exe () [Arquivo não assinado]
Startup: C:\Users\Servidor\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\TeamViewer 10.lnk [2017-06-17]
ShortcutTarget: TeamViewer 10.lnk -> C:\Program Files (x86)\TeamViewer\TeamViewer.exe (TeamViewer GmbH -> TeamViewer GmbH)
GroupPolicy: Restrição ? <==== ATENÇÃO
GroupPolicy\User: Restrição ? <==== ATENÇÃO
FF HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restrição <==== ATENÇÃO
==================== Tarefas Agendadas (Whitelisted) =============
(Se uma entrada for incluída na fixlist, será removida do Registro. O arquivo não será movido, a menos que seja colocado separadamente.)
Task: {1787088E-3AE8-4E77-BA93-9F99777546F2} - System32\Tasks\CCleaner Update => C:\Program Files\CCleaner\CCUpdate.exe [619416 2019-04-04] (Piriform Software Ltd -> Piriform Software Ltd)
Task: {2318123C-B596-42E2-A756-49175FCB260D} - System32\Tasks\R@1n-KMS\Office15ProPlus => wmic path SoftwareLicensingProduct where (ID="b322da9c-a2e2-4058-9e4e-f59a6970bd69") call Activate
Task: {40750970-C9AF-4310-8654-CA6BBFC3B432} - System32\Tasks\R@1n-KMS\Windows64Professional => wmic path SoftwareLicensingProduct where (ID="2de67392-b7a7-462a-b1ca-108dd189f588") call Activate
Task: {6B5D6A12-075F-4FEC-833C-C581B4D0BCE4} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1905.4-0\MpCmdRun.exe [469960 2019-06-01] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {740B0910-9808-4DC1-8D3A-5FEE3BAE778D} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1905.4-0\MpCmdRun.exe [469960 2019-06-01] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {9FEC3983-382E-4D3F-B35B-E90A27C22BE9} - System32\Tasks\Update INOVAFARMA API => C:\InovaFarma\InovaFarmaAPI\InovaFarmaAPI.Updater.exe [582152 2019-04-29] (Precisão Sistemas -> Precisao Sistemas)
Task: {A80F006E-7714-42C5-8C76-C634B5A2808A} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1905.4-0\MpCmdRun.exe [469960 2019-06-01] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {BFD141A3-DA1C-4244-AE6D-C6F54834ADD5} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1905.4-0\MpCmdRun.exe [469960 2019-06-01] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {E5EFC1C8-82A2-4D78-AB9F-7067B957119E} - System32\Tasks\Avast Software\Overseer => C:\Program Files\Common Files\AVAST Software\Overseer\overseer.exe [2380088 2019-04-03] (AVAST Software s.r.o. -> AVAST Software)
Task: {EE195193-8071-451D-A44C-906A7F3C7776} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1195544 2018-12-16] (Adobe Systems, Incorporated -> Adobe Systems Incorporated)
Task: {EE28CD0B-9391-4517-8B7E-BBE6A1C31015} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [16509040 2019-04-04] (Piriform Software Ltd -> Piriform Software Ltd)
(Se uma entrada for incluída na fixlist, o arquivo da tarefa (.job) será movido. O arquivo que está sendo executado pela tarefa não será movido.)
==================== Internet (Whitelisted) ====================
(Se um ítem for incluído na fixlist, sendo um ítem do Registro, será removido ou restaurado para o padrão.)
HKLM\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings: [ProxySettingsPerUser] 0 <==== ATENÇÃO (Restrição - ProxySettings)
ProxyEnable: [HKLM] => Proxy está habilitado.
ProxyEnable: [HKLM-x32] => Proxy está habilitado.
ProxyServer: [HKLM] => http=127.0.0.1:8080;https=127.0.0.1:8080
ProxyServer: [HKLM-x32] => http=127.0.0.1:8080;https=127.0.0.1:8080
AutoConfigURL: [HKLM] => http=127.0.0.1:8080;https=127.0.0.1:8080
ProxyEnable: [S-1-5-21-1469184627-3254592334-3046470981-1001] => Proxy está habilitado.
ProxyServer: [S-1-5-21-1469184627-3254592334-3046470981-1001] => http=127.0.0.1:8080;https=127.0.0.1:8080
Tcpip\Parameters: [DhcpNameServer] 192.168.25.1
Tcpip\..\Interfaces\{d88d8e02-5733-4cab-b616-32b40d68cc5b}: [DhcpNameServer] 192.168.25.1
ManualProxies: 1http=127.0.0.1:8080;https=127.0.0.1:8080
Internet Explorer:
==================
HKU\S-1-5-21-1469184627-3254592334-3046470981-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.com.br/
BHO: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\Office15\OCHelper.dll [2018-02-15] (Microsoft Corporation -> Microsoft Corporation)
BHO: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office\Office15\GROOVEEX.DLL [2018-05-15] (Microsoft Corporation -> Microsoft Corporation)
BHO-x32: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll [2017-09-12] (Microsoft Corporation -> Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_211\bin\ssv.dll [2019-05-24] (Oracle America, Inc. -> Oracle Corporation)
BHO-x32: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\Office15\GROOVEEX.DLL [2018-05-15] (Microsoft Corporation -> Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_211\bin\jp2ssv.dll [2019-05-24] (Oracle America, Inc. -> Oracle Corporation)
Handler: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office\Office15\MSOSB.DLL [2017-08-15] (Microsoft Corporation -> Microsoft Corporation)
FireFox:
========
FF DefaultProfile: scfjhbxv.default
FF ProfilePath: C:\Users\Servidor\AppData\Roaming\Mozilla\Firefox\Profiles\scfjhbxv.default [2019-06-01]
FF Extension: (Avast Online Security) - C:\Users\Servidor\AppData\Roaming\Mozilla\Firefox\Profiles\scfjhbxv.default\Extensions\wrc@avast.com.xpi [2018-07-20]
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~1\MICROS~1\Office15\NPSPWRAP.DLL [2014-01-23] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=11.211.2 -> C:\Program Files (x86)\Java\jre1.8.0_211\bin\dtplugin\npDeployJava1.dll [2019-05-24] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.211.2 -> C:\Program Files (x86)\Java\jre1.8.0_211\bin\plugin2\npjp2.dll [2019-05-24] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files (x86)\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2017-09-12] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office15\NPSPWRAP.DLL [2014-01-22] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.33.17\npGoogleUpdate3.dll [2018-05-18] (Google Inc -> Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.33.17\npGoogleUpdate3.dll [2018-05-18] (Google Inc -> Google Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2019-05-02] (Adobe Inc. -> Adobe Systems Inc.)
Chrome:
=======
CHR Profile: C:\Users\Servidor\AppData\Local\Google\Chrome\User Data\Default [2019-06-01]
CHR Extension: (Apresentações) - C:\Users\Servidor\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2017-10-13]
CHR Extension: (Documentos) - C:\Users\Servidor\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2017-10-13]
CHR Extension: (Google Drive) - C:\Users\Servidor\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2017-06-17]
CHR Extension: (YouTube) - C:\Users\Servidor\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2017-06-17]
CHR Extension: (Adblock Plus - bloqueador de anúncios grátis) - C:\Users\Servidor\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2019-04-20]
CHR Extension: (Planilhas) - C:\Users\Servidor\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2017-10-13]
CHR Extension: (Documentos Google off-line) - C:\Users\Servidor\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2018-08-15]
CHR Extension: (Avast Online Security) - C:\Users\Servidor\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2019-04-29]
CHR Extension: (Pagamentos da Chrome Web Store) - C:\Users\Servidor\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2018-04-03]
CHR Extension: (Gmail) - C:\Users\Servidor\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2019-04-29]
CHR Extension: (Chrome Media Router) - C:\Users\Servidor\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2018-10-31]
CHR Profile: C:\Users\Servidor\AppData\Local\Google\Chrome\User Data\System Profile [2019-05-31]
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - hxxps://clients2.google.com/service/update2/crx
==================== Serviços (Whitelisted) ====================
(Se uma entrada for incluída na fixlist, será removida do Registro. O arquivo não será movido, a menos que seja colocado separadamente.)
R2 HP LaserJet Service; C:\Program Files (x86)\HP\HPLaserJetService\HPLaserJetService.exe [176128 2014-06-24] (HP) [Arquivo não assinado]
R2 IISADMIN; C:\WINDOWS\system32\inetsrv\inetinfo.exe [17408 2018-04-12] (Microsoft Windows -> Microsoft Corporation)
S3 InovaFarmaAPI Updater; C:\InovaFarma\InovaFarmaAPI\InovaFarmaAPI.Updater.exe [582152 2019-04-29] (Precisão Sistemas -> Precisao Sistemas)
R2 InovaFarmaAPI.Service; C:\InovaFarma\InovaFarmaAPI\InovaFarmaAPI.Service.exe [12131336 2019-04-29] (Precisão Sistemas -> Precisão Sistemas)
S2 KMS-R@1n; C:\Windows\KMS-R@1n.exe [26112 2017-06-17] () [Arquivo não assinado]
R2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe [6562472 2019-02-01] (Malwarebytes Corporation -> Malwarebytes)
R2 MSSQL$SQLEXPRESS; C:\Program Files\Microsoft SQL Server\MSSQL12.SQLEXPRESS\MSSQL\Binn\sqlservr.exe [370368 2015-06-10] (Microsoft Corporation -> Microsoft Corporation)
R3 MSSQLFDLauncher$SQLEXPRESS; C:\Program Files\Microsoft SQL Server\MSSQL12.SQLEXPRESS\MSSQL\Binn\fdlauncher.exe [50880 2014-02-21] (Microsoft Corporation -> Microsoft Corporation)
R2 ReportServer$SQLEXPRESS; C:\Program Files\Microsoft SQL Server\MSRS12.SQLEXPRESS\Reporting Services\ReportServer\bin\ReportingServicesService.exe [2450112 2014-02-21] (Microsoft Corporation -> Microsoft Corporation)
R2 SACSrv; C:\Program Files\SafeNet\Authentication\SAC\x64\SACSrv.exe [10384 2012-04-16] (SafeNet, Inc. -> SafeNet, Inc.)
S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [4737448 2018-07-14] (Microsoft Windows Publisher -> Microsoft Corporation)
S4 SQLAgent$SQLEXPRESS; C:\Program Files\Microsoft SQL Server\MSSQL12.SQLEXPRESS\MSSQL\Binn\SQLAGENT.EXE [613056 2015-06-10] (Microsoft Corporation -> Microsoft Corporation)
R2 TeamViewer; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [6634224 2018-02-02] (TeamViewer GmbH -> TeamViewer GmbH)
R3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1905.4-0\NisSrv.exe [2433136 2019-06-01] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1905.4-0\MsMpEng.exe [109896 2019-06-01] (Microsoft Windows Publisher -> Microsoft Corporation)
S3 WMSVC; C:\WINDOWS\system32\inetsrv\wmsvc.exe [11776 2018-04-12] (Microsoft Windows -> Microsoft Corporation)
===================== Drivers (Whitelisted) ======================
(Se uma entrada for incluída na fixlist, será removida do Registro. O arquivo não será movido, a menos que seja colocado separadamente.)
S3 aftap0901; C:\WINDOWS\System32\drivers\aftap0901.sys [48624 2018-03-06] (AnchorFree Inc -> The OpenVPN Project)
R3 AKSIFDH; C:\WINDOWS\System32\drivers\aksifdh.sys [62632 2017-08-03] (Aladdin Knowledge Systems Inc. -> Aladdin Knowledge Systems, Ltd.)
R3 AKSUP; C:\WINDOWS\system32\drivers\aksup.sys [44712 2017-08-03] (Aladdin Knowledge Systems Inc. -> Aladdin Knowledge Systems, Ltd.)
R1 ESProtectionDriver; C:\WINDOWS\system32\drivers\mbae64.sys [153328 2019-01-08] (Malwarebytes Corporation -> Malwarebytes)
R3 igfx; C:\WINDOWS\system32\DRIVERS\igdkmd64.sys [5382856 2017-06-26] (Microsoft Windows Hardware Compatibility Publisher -> Intel Corporation)
R3 iKeyEnum; C:\WINDOWS\System32\drivers\ikeyenum.sys [16160 2010-07-08] (SafeNet, Inc. -> SafeNet, Inc.)
R3 iKeyIFD; C:\WINDOWS\System32\drivers\ikeyifd.sys [22304 2010-07-08] (SafeNet, Inc. -> SafeNet, Inc.)
R2 MBAMChameleon; C:\WINDOWS\System32\Drivers\MbamChameleon.sys [199768 2019-06-01] (Malwarebytes Corporation -> Malwarebytes)
S0 MbamElam; C:\WINDOWS\System32\DRIVERS\MbamElam.sys [20936 2019-02-01] (Microsoft Windows Early Launch Anti-malware Publisher -> Malwarebytes)
R3 MBAMFarflt; C:\WINDOWS\System32\DRIVERS\farflt.sys [127136 2019-06-01] (Malwarebytes Corporation -> Malwarebytes)
R3 MBAMProtection; C:\WINDOWS\system32\DRIVERS\mbam.sys [73912 2019-06-01] (Malwarebytes Corporation -> Malwarebytes)
R3 MBAMSwissArmy; C:\WINDOWS\System32\Drivers\mbamswissarmy.sys [275232 2019-06-01] (Malwarebytes Corporation -> Malwarebytes)
R3 MBAMWebProtection; C:\WINDOWS\system32\DRIVERS\mwac.sys [117344 2019-06-01] (Malwarebytes Corporation -> Malwarebytes)
R3 MODEMCSA; C:\WINDOWS\system32\drivers\MODEMCSA.sys [26624 2018-04-11] (Microsoft Windows -> Microsoft Corporation)
R3 PciSPorts; C:\WINDOWS\system32\DRIVERS\PciSPorts.sys [121856 2013-06-28] (Microsoft Windows Hardware Compatibility Publisher -> ASIX Electronics Corp.)
U5 RnbToken; C:\Windows\System32\Drivers\RnbToken.sys [24352 2010-07-08] (SafeNet, Inc. -> SafeNet, Inc.)
S4 RsFx0300; C:\WINDOWS\System32\DRIVERS\RsFx0300.sys [247488 2014-02-21] (Microsoft Corporation -> Microsoft Corporation)
R3 rt640x64; C:\WINDOWS\System32\drivers\rt640x64.sys [604160 2018-04-11] (Microsoft Windows -> Realtek )
R3 smserial; C:\WINDOWS\system32\DRIVERS\smserial.sys [1202688 2018-02-21] (Microsoft Windows Hardware Compatibility Publisher -> Motorola Inc.)
S0 WdBoot; C:\WINDOWS\System32\drivers\wd\WdBoot.sys [47496 2019-06-01] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
R0 WdFilter; C:\WINDOWS\System32\drivers\wd\WdFilter.sys [337632 2019-06-01] (Microsoft Windows -> Microsoft Corporation)
R3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [53984 2019-06-01] (Microsoft Windows -> Microsoft Corporation)
==================== NetSvcs (Whitelisted) ===================
(Se uma entrada for incluída na fixlist, será removida do Registro. O arquivo não será movido, a menos que seja colocado separadamente.)
==================== Três meses (criados) ========
(Se uma entrada for incluída na fixlist, o arquivo/pasta será movido.)
2019-06-01 14:53 - 2019-06-01 14:54 - 000000000 ____D C:\FRST
2019-06-01 14:47 - 2019-06-01 14:46 - 000000852 _____ C:\WINDOWS\system32\Drivers\etc\hosts.txt
2019-06-01 14:44 - 2019-06-01 14:46 - 000000852 _____ C:\Users\Servidor\Desktop\hosts.txt
2019-06-01 14:40 - 2019-06-01 14:40 - 000000000 ____D C:\Users\Servidor\AppData\Local\ElevatedDiagnostics
2019-06-01 14:38 - 2019-06-01 14:38 - 000073912 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbam.sys
2019-06-01 14:37 - 2019-06-01 14:37 - 000127136 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\farflt.sys
2019-06-01 14:37 - 2019-06-01 14:37 - 000117344 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mwac.sys
2019-06-01 14:36 - 2019-06-01 14:36 - 000275232 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbamswissarmy.sys
2019-06-01 14:17 - 2019-06-01 14:17 - 000000716 _____ C:\Users\Servidor\Desktop\JRT.txt
2019-06-01 13:59 - 2019-06-01 13:59 - 000000000 ____D C:\Users\Servidor\AppData\Local\mbam
2019-06-01 13:58 - 2019-06-01 13:58 - 000199768 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MbamChameleon.sys
2019-06-01 13:58 - 2019-06-01 13:58 - 000000000 ____D C:\Users\Servidor\AppData\Local\mbamtray
2019-06-01 13:57 - 2019-06-01 13:57 - 000001912 _____ C:\Users\Public\Desktop\Malwarebytes.lnk
2019-06-01 13:57 - 2019-06-01 13:57 - 000000000 ____D C:\Users\Todos os Usuários\Malwarebytes
2019-06-01 13:57 - 2019-06-01 13:57 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes
2019-06-01 13:57 - 2019-06-01 13:57 - 000000000 ____D C:\ProgramData\Malwarebytes
2019-06-01 13:57 - 2019-06-01 13:57 - 000000000 ____D C:\Program Files\Malwarebytes
2019-06-01 13:57 - 2019-02-01 12:20 - 000020936 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MbamElam.sys
2019-06-01 13:57 - 2019-01-08 16:32 - 000153328 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbae64.sys
2019-06-01 13:50 - 2019-06-01 13:51 - 000000000 ____D C:\AdwCleaner
2019-05-29 19:01 - 2019-05-29 19:01 - 000103857 _____ C:\Users\Servidor\Desktop\rosee.html
2019-05-29 18:45 - 2019-05-29 18:45 - 000098109 _____ C:\Users\Servidor\Downloads\rose2.html
2019-05-28 15:35 - 2019-05-28 15:35 - 000341121 _____ C:\Users\Servidor\Downloads\engraça 44.pdf
2019-05-28 15:35 - 2019-05-28 15:35 - 000341121 _____ C:\Users\Servidor\Documents\engraça 44.pdf
2019-05-28 15:33 - 2019-05-28 15:33 - 000250571 _____ C:\Users\Servidor\Downloads\doc engraça 1.pdf
2019-05-28 15:33 - 2019-05-28 15:33 - 000240432 _____ C:\Users\Servidor\Downloads\doc engraça 33.pdf
2019-05-28 15:33 - 2019-05-28 15:33 - 000240432 _____ C:\Users\Servidor\Downloads\doc engraça 22.pdf
2019-05-28 15:33 - 2019-05-28 15:33 - 000165592 _____ C:\Users\Servidor\Downloads\doc engraça.pdf
2019-05-28 15:30 - 2019-05-28 15:30 - 000240432 _____ C:\Users\Servidor\Documents\doc engraça 33.pdf
2019-05-28 15:30 - 2019-05-28 15:30 - 000240432 _____ C:\Users\Servidor\Documents\doc engraça 22.pdf
2019-05-28 15:28 - 2019-05-28 15:29 - 000250571 _____ C:\Users\Servidor\Documents\doc engraça 1.pdf
2019-05-28 15:21 - 2019-05-28 15:21 - 000165592 _____ C:\Users\Servidor\Documents\doc engraça.pdf
2019-05-27 18:06 - 2019-05-27 18:06 - 000526272 _____ (Xlab d.o.o.) C:\Users\Servidor\Downloads\ISL Light Client 610184.exe
2019-05-27 18:06 - 2019-05-27 18:06 - 000000000 ____D C:\Users\Servidor\AppData\Local\ISL Online Cache
2019-05-24 12:42 - 2019-05-24 12:42 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SafeNet
2019-05-24 12:41 - 2019-05-24 12:41 - 000000000 ____D C:\Program Files\SafeNet
2019-05-24 12:37 - 2019-05-24 12:38 - 030321152 _____ C:\Users\Servidor\Downloads\Safenet_Authentication_Client_8.1SP2-x64 (1).msi
2019-05-24 12:37 - 2019-05-24 12:37 - 015434240 _____ C:\Users\Servidor\Downloads\certisign10.6-x64-10.6 (3).exe
2019-05-24 12:31 - 2019-05-24 12:31 - 000000000 ____D C:\Users\Servidor\AppData\Roaming\Sun
2019-05-24 12:31 - 2019-05-24 12:31 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2019-05-24 12:31 - 2019-05-24 12:30 - 000099192 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\WindowsAccessBridge-32.dll
2019-05-24 12:30 - 2019-05-24 12:30 - 000000000 ____D C:\Users\Todos os Usuários\Oracle
2019-05-24 12:30 - 2019-05-24 12:30 - 000000000 ____D C:\ProgramData\Oracle
2019-05-24 12:30 - 2019-05-24 12:30 - 000000000 ____D C:\Program Files (x86)\Java
2019-05-24 12:14 - 2019-05-24 12:14 - 000000875 _____ C:\Users\Servidor\Desktop\Instalar Kaspersky Anti-Virus versão 19.0.0.1088.lnk
2019-05-24 12:12 - 2019-05-24 12:12 - 000000000 ____D C:\Users\Todos os Usuários\Kaspersky Lab Setup Files
2019-05-24 12:12 - 2019-05-24 12:12 - 000000000 ____D C:\ProgramData\Kaspersky Lab Setup Files
2019-05-24 12:09 - 2019-05-24 12:10 - 002702208 _____ (Kaspersky Lab) C:\Users\Servidor\Downloads\startup_14794.exe
2019-05-24 11:05 - 2019-05-24 11:05 - 000000000 ____D C:\Program Files (x86)\Default Company Name
2019-05-23 19:03 - 2019-05-23 19:03 - 000000000 ____D C:\Users\nomedeusuario\AppData\Roaming\AVAST Software
2019-05-23 19:02 - 2019-05-23 19:03 - 015434240 _____ C:\Users\Servidor\Downloads\certisign10.6-x64-10.6 (2).exe
2019-05-23 19:00 - 2019-05-23 19:00 - 010391752 _____ (A.E.T. Europe B.V.) C:\Users\Servidor\Downloads\SafeSign_Identity_Client-Standard-3.0.87-general-x64-win-admin-std-vc8.exe
2019-05-23 18:57 - 2019-05-24 07:30 - 000002862 _____ C:\WINDOWS\System32\Tasks\OneDrive Standalone Update Task-S-1-5-21-1469184627-3254592334-3046470981-1004
2019-05-23 18:56 - 2019-05-23 18:57 - 000000000 ___RD C:\Users\nomedeusuario\OneDrive
2019-05-23 18:55 - 2019-05-23 18:56 - 000000000 ____D C:\Users\nomedeusuario\AppData\Local\PlaceholderTileLogoFolder
2019-05-23 18:55 - 2019-05-23 18:55 - 000001417 _____ C:\Users\nomedeusuario\Desktop\Microsoft Edge.lnk
2019-05-23 18:54 - 2019-05-23 18:54 - 000000000 ___RD C:\Users\nomedeusuario\3D Objects
2019-05-23 18:54 - 2019-05-23 18:54 - 000000000 ____D C:\Users\nomedeusuario\AppData\Local\VirtualStore
2019-05-23 18:54 - 2019-05-23 18:54 - 000000000 ____D C:\Users\nomedeusuario\AppData\Local\Publishers
2019-05-23 18:54 - 2019-05-23 18:54 - 000000000 ____D C:\Users\nomedeusuario\AppData\Local\Google
2019-05-23 18:53 - 2019-05-23 18:57 - 000002435 _____ C:\Users\nomedeusuario\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2019-05-23 18:53 - 2019-05-23 18:56 - 000000000 ____D C:\Users\nomedeusuario
2019-05-23 18:53 - 2019-05-23 18:55 - 000000000 ____D C:\Users\nomedeusuario\AppData\Local\Packages
2019-05-23 18:53 - 2019-05-23 18:54 - 000000000 ____D C:\Users\nomedeusuario\AppData\Local\ConnectedDevicesPlatform
2019-05-23 18:53 - 2019-05-23 18:53 - 000000606 __RSH C:\Users\nomedeusuario\ntuser.pol
2019-05-23 18:53 - 2019-05-23 18:53 - 000000020 ___SH C:\Users\nomedeusuario\ntuser.ini
2019-05-23 18:53 - 2019-05-23 18:53 - 000000000 _SHDL C:\Users\nomedeusuario\Modelos
2019-05-23 18:53 - 2019-05-23 18:53 - 000000000 _SHDL C:\Users\nomedeusuario\Meus Documentos
2019-05-23 18:53 - 2019-05-23 18:53 - 000000000 _SHDL C:\Users\nomedeusuario\Menu Iniciar
2019-05-23 18:53 - 2019-05-23 18:53 - 000000000 _SHDL C:\Users\nomedeusuario\Documents\Minhas Músicas
2019-05-23 18:53 - 2019-05-23 18:53 - 000000000 _SHDL C:\Users\nomedeusuario\Documents\Minhas Imagens
2019-05-23 18:53 - 2019-05-23 18:53 - 000000000 _SHDL C:\Users\nomedeusuario\Documents\Meus Vídeos
2019-05-23 18:53 - 2019-05-23 18:53 - 000000000 _SHDL C:\Users\nomedeusuario\Dados de Aplicativos
2019-05-23 18:53 - 2019-05-23 18:53 - 000000000 _SHDL C:\Users\nomedeusuario\Configurações Locais
2019-05-23 18:53 - 2019-05-23 18:53 - 000000000 _SHDL C:\Users\nomedeusuario\AppData\Roaming\Microsoft\Windows\Start Menu\Programas
2019-05-23 18:53 - 2019-05-23 18:53 - 000000000 _SHDL C:\Users\nomedeusuario\AppData\Local\Histórico
2019-05-23 18:53 - 2019-05-23 18:53 - 000000000 _SHDL C:\Users\nomedeusuario\AppData\Local\Dados de Aplicativos
2019-05-23 18:53 - 2019-05-23 18:53 - 000000000 _SHDL C:\Users\nomedeusuario\Ambiente de Rede
2019-05-23 18:53 - 2019-05-23 18:53 - 000000000 _SHDL C:\Users\nomedeusuario\Ambiente de Impressão
2019-05-23 18:53 - 2019-05-23 18:53 - 000000000 ____D C:\Users\nomedeusuario\AppData\Roaming\Adobe
2019-05-23 18:53 - 2017-06-26 07:44 - 000000000 ____D C:\Users\nomedeusuario\Documents\Visual Studio 2010
2019-05-23 18:53 - 2017-06-26 07:43 - 000000000 ____D C:\Users\nomedeusuario\AppData\Local\Microsoft Help
2019-05-23 18:48 - 2019-05-23 18:48 - 001534976 _____ (Certisign) C:\Users\Servidor\Downloads\InstaladorCadeiaV5.exe
2019-05-23 18:06 - 2019-05-23 18:08 - 030321152 _____ C:\Users\Servidor\Downloads\Safenet_Authentication_Client_8.1SP2-x64.msi
2019-05-23 17:52 - 2019-05-23 17:52 - 015434240 _____ C:\Users\Servidor\Downloads\certisign10.6-x64-10.6 (1).exe
2019-05-23 17:24 - 2019-05-23 17:24 - 000000000 ____D C:\WINDOWS\LastGood
2019-05-23 17:22 - 2019-05-23 17:23 - 015434240 _____ C:\Users\Servidor\Downloads\certisign10.6-x64-10.6.exe
2019-05-23 17:07 - 2019-05-24 10:59 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SafeSign Standard
2019-05-23 17:07 - 2019-05-23 17:07 - 000000000 ____D C:\Program Files\A.E.T. Europe B.V
2019-05-23 15:31 - 2019-05-23 15:31 - 000000000 ____D C:\WINDOWS\LastGood.Tmp
2019-05-23 15:31 - 2019-05-23 15:31 - 000000000 ____D C:\Users\Servidor\AppData\LocalLow\Sun
2019-05-23 14:52 - 2019-05-23 14:54 - 084933002 _____ (Certisign ) C:\Users\Servidor\Downloads\Setup_CertiInstaller (3).exe
2019-05-23 13:49 - 2019-05-23 13:52 - 084933002 _____ (Certisign ) C:\Users\Servidor\Downloads\Setup_CertiInstaller (2).exe
2019-05-23 12:59 - 2019-05-23 12:59 - 001260020 _____ C:\Users\Servidor\Downloads\Apostila de exercícios do Valdeci
2019-05-22 16:25 - 2019-05-22 16:25 - 000073594 _____ C:\Users\Servidor\Downloads\Receita Federal do Brasil(27)
2019-05-22 16:23 - 2019-05-22 16:23 - 000048531 _____ C:\Users\Servidor\Downloads\CCMEI-33694141000100 (1) (2)
2019-05-22 16:23 - 2019-05-22 16:23 - 000048531 _____ C:\Users\Servidor\Downloads\CCMEI-33694141000100 (1) (1)
2019-05-22 16:23 - 2019-05-22 16:23 - 000048531 _____ C:\Users\Servidor\Downloads\CCMEI-33694141000100 (1)
2019-05-21 09:40 - 2019-05-21 09:40 - 000012847 _____ C:\Users\Servidor\Downloads\boletoSKY_400654136276.pdf
2019-05-20 09:25 - 2019-05-20 09:25 - 000094253 _____ C:\Users\Servidor\Downloads\fatura (36).pdf
2019-05-17 15:20 - 2019-05-17 15:20 - 000025764 _____ C:\Users\Servidor\Downloads\boleto (2).html
2019-05-17 10:35 - 2019-05-17 10:35 - 000025783 _____ C:\Users\Servidor\Downloads\boleto (1).html
2019-05-16 13:27 - 2019-05-16 13:27 - 000010668 _____ C:\Users\Servidor\Downloads\DIFAL DROGARIA MG exibeDAREPdf.jsf.pdf
2019-05-15 18:34 - 2019-05-15 18:34 - 000130659 _____ C:\Users\Servidor\Downloads\LIVE_TIM_132413044_03_2019_3747719795.pdf
2019-05-15 17:21 - 2019-05-15 17:21 - 000014141 _____ C:\Users\Servidor\Downloads\LANÇAMENTOS DE VENDAS.xlsx
2019-05-15 17:21 - 2019-05-15 17:21 - 000000177 _____ C:\Users\Servidor\Downloads\LANÇAMENTOS DE VENDAS.csv
2019-05-15 12:12 - 2019-05-15 12:12 - 000156734 _____ C:\Users\Servidor\Downloads\10020855530 (4).pdf
2019-05-15 12:05 - 2019-05-15 12:05 - 000157216 _____ C:\Users\Servidor\Downloads\10020855530 (3).pdf
2019-05-15 07:58 - 2019-05-15 07:58 - 000134060 _____ C:\Users\Servidor\Desktop\Relatórios Fiscais-15-05-2019 075756.pdf
2019-05-15 07:55 - 2019-05-15 07:58 - 005258080 _____ C:\Users\Servidor\Desktop\Nova PASTA XML4.rar
2019-05-15 07:54 - 2019-05-15 07:58 - 000000000 ____D C:\Users\Servidor\Desktop\Nova PASTA XML4
2019-05-09 16:48 - 2019-05-09 16:48 - 000040098 _____ C:\Users\Servidor\Downloads\60115441 (1)
2019-05-09 16:48 - 2019-05-09 16:48 - 000040098 _____ C:\Users\Servidor\Downloads\60115441
2019-05-09 16:35 - 2019-05-09 16:35 - 000155057 _____ C:\Users\Servidor\Downloads\10004829601 (1).pdf
2019-05-08 11:33 - 2019-05-08 11:33 - 000016357 _____ C:\Users\Servidor\Downloads\Boleto0837039_14000110000026495.pdf
2019-05-07 15:05 - 2019-05-07 15:05 - 000025202 _____ C:\Users\Servidor\Downloads\boleto.html
2019-05-07 14:42 - 2019-05-07 14:42 - 000570085 _____ C:\Users\Servidor\Desktop\doc carol.pdf
2019-05-07 11:51 - 2019-05-07 11:51 - 002264622 _____ C:\Users\Servidor\Downloads\CONTRATO DE RENEGOCIAÇÃO.pdf
2019-05-07 09:18 - 2019-05-07 09:18 - 000000000 ____D C:\Users\Todos os Usuários\com.precisaosistemas.inovafarma
2019-05-07 09:18 - 2019-05-07 09:18 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Precisão Sistemas
2019-05-07 09:18 - 2019-05-07 09:18 - 000000000 ____D C:\ProgramData\com.precisaosistemas.inovafarma
2019-05-07 09:15 - 2019-05-07 09:16 - 029515904 _____ (Precisao Sistemas) C:\Users\Servidor\Downloads\inovafarma-1.64.2.exe
2019-05-06 13:46 - 2019-05-06 13:46 - 000156734 _____ C:\Users\Servidor\Downloads\10020855530 (2).pdf
2019-05-06 13:45 - 2019-05-06 13:45 - 000157216 _____ C:\Users\Servidor\Downloads\10020855530 (1).pdf
2019-05-04 07:17 - 2019-05-04 07:17 - 000096805 _____ C:\Users\Servidor\Downloads\DROGARIA ELSHADAY-171258.pdf
2019-05-03 11:07 - 2019-05-03 11:07 - 000197734 _____ C:\Users\Servidor\Documents\Scan-junior 2019.pdf
2019-04-26 18:31 - 2019-05-24 07:30 - 000003314 _____ C:\WINDOWS\System32\Tasks\Update INOVAFARMA API
2019-04-23 17:26 - 2019-04-23 17:26 - 000000329 _____ C:\Users\Servidor\Downloads\ATT00001 (3).htm
2019-04-22 10:10 - 2019-04-22 10:10 - 000329354 _____ C:\Users\Servidor\Downloads\Minha_Fatura_MASTERCARD_21-04-2019 (2).pdf
2019-04-22 10:08 - 2019-04-22 10:09 - 000329354 _____ C:\Users\Servidor\Downloads\Minha_Fatura_MASTERCARD_21-04-2019 (1).pdf
2019-04-22 10:08 - 2019-04-22 10:08 - 000329354 _____ C:\Users\Servidor\Downloads\Minha_Fatura_MASTERCARD_21-04-2019.pdf
2019-04-22 07:52 - 2019-04-22 07:52 - 000078989 _____ C:\Users\Servidor\Downloads\Serviço de Seleção do Pessoal da Marinha (1) (2).pdf
2019-04-22 07:51 - 2019-04-22 07:51 - 000010847 _____ C:\Users\Servidor\Downloads\exibeDAREPdf.jsf DROGARIA (1).pdf
2019-04-22 07:50 - 2019-04-22 07:50 - 000118310 _____ C:\Users\Servidor\Downloads\PGDASD-DAS-10643578201903001.pdf
2019-04-22 07:49 - 2019-04-22 07:49 - 000120298 _____ C:\Users\Servidor\Downloads\ExibirDAS-18042019_132344_04_2019.pdf
2019-04-22 07:48 - 2019-04-22 07:48 - 000131687 _____ C:\Users\Servidor\Downloads\GPS - Guia da Previdência Social DROGARIA.pdf
2019-04-20 09:33 - 2019-04-20 09:33 - 000000000 ____D C:\WINDOWS\System32\Tasks\S-1-5-21-1469184627-3254592334-3046470981-1001
2019-04-18 11:12 - 2019-04-18 11:12 - 000137500 _____ C:\Users\Servidor\Desktop\Relatórios Fiscais-18-04-2019 111209 3.pdf
2019-04-15 17:44 - 2019-04-15 17:44 - 000777221 _____ C:\Users\Servidor\Downloads\10643578000110 - COMPRA_GERAL - 01032019_31032019.zip
2019-04-15 17:44 - 2019-04-15 17:44 - 000777221 _____ C:\Users\Servidor\Downloads\10643578000110 - COMPRA_GERAL - 01032019_31032019 (1).zip
2019-04-15 17:43 - 2019-04-15 17:43 - 005407917 _____ C:\Users\Servidor\Downloads\xml03.rar
2019-04-13 18:46 - 2019-04-13 18:46 - 000078989 _____ C:\Users\Servidor\Downloads\Serviço de Seleção do Pessoal da Marinha (1) (1).pdf
2019-04-13 18:17 - 2019-04-13 18:17 - 000078989 _____ C:\Users\Servidor\Downloads\Serviço de Seleção do Pessoal da Marinha (1).pdf
2019-04-13 13:40 - 2019-04-13 13:40 - 000117404 _____ C:\Users\Servidor\Downloads\bancoItauBoleto.pdf
2019-04-12 16:01 - 2019-04-12 16:01 - 005407917 _____ C:\Users\Servidor\Desktop\xml03.rar
2019-04-12 15:57 - 2019-04-15 17:42 - 000000000 ____D C:\Users\Servidor\Desktop\xml03
2019-04-12 15:48 - 2019-04-25 15:31 - 000000077 _____ C:\WINDOWS\system32\Drivers\aswSP.sys.sum
2019-04-09 14:28 - 2019-04-09 14:28 - 000001365 _____ C:\Users\Public\Desktop\HP LaserJet Pro MFP M125-M126 - Centro de Ajuda e Aprendizado.lnk
2019-04-09 14:27 - 2019-04-09 14:27 - 000001322 _____ C:\Users\Public\Desktop\HP LJ M125126 Scan.lnk
2019-04-09 14:27 - 2019-04-09 14:27 - 000000000 ____D C:\Users\Servidor\Desktop\HP
2019-04-08 18:03 - 2019-04-09 07:25 - 000000000 ____D C:\WINDOWS\Minidump
2019-04-08 16:23 - 2019-04-08 16:23 - 000035560 _____ C:\Users\Servidor\Desktop\safra 2.pdf
2019-04-08 16:21 - 2019-04-08 16:21 - 000035614 _____ C:\Users\Servidor\Desktop\safra.pdf
2019-04-08 12:48 - 2019-04-08 12:48 - 000035560 _____ C:\Users\Servidor\Downloads\BOLETO PARA PAGAMENTO HOJE 04-04-19.pdf
2019-04-03 16:26 - 2019-04-03 16:26 - 000157710 _____ C:\Users\Servidor\Downloads\10020855530.pdf
2019-04-01 17:17 - 2019-04-01 17:17 - 000069468 _____ C:\Users\Servidor\Downloads\fatura (35).pdf
2019-04-01 17:17 - 2019-04-01 17:17 - 000069468 _____ C:\Users\Servidor\Downloads\fatura (34).pdf
2019-03-26 10:19 - 2019-03-26 10:19 - 000010754 _____ C:\Users\Servidor\Downloads\ticket-7115d75e-10c4-4162-bb6d-8c0fff0f6c93.pdf
2019-03-25 13:13 - 2019-03-25 13:13 - 000018099 _____ C:\Users\Servidor\Downloads\Notificacao_Extra_Judicial.pdf
2019-03-25 13:11 - 2019-03-25 13:12 - 000027106 _____ C:\Users\Servidor\Downloads\1990.pdf
2019-03-22 07:47 - 2019-03-22 07:47 - 000032092 _____ C:\Users\Servidor\Downloads\43190393896397001447550070002075221357410163.xml
2019-03-22 07:35 - 2019-03-22 07:35 - 000032092 _____ C:\Users\Servidor\Desktop\43190393896397001447550070002075221357410163.xml
2019-03-21 12:48 - 2019-03-21 12:48 - 000018697 _____ C:\Users\Servidor\Downloads\52190317715064000171550010001303331001303335.xml
2019-03-21 08:28 - 2019-03-21 08:28 - 000011183 _____ C:\Users\Servidor\Downloads\53140801206820000792550010011636931011636930-procNFe.xml
2019-03-20 11:52 - 2019-03-20 11:53 - 000012856 _____ C:\Users\Servidor\Downloads\boletoSKY_400613996739.pdf
2019-03-14 16:54 - 2019-03-14 16:54 - 001368245 _____ C:\Users\Servidor\Downloads\Fatura (33).pdf
2019-03-14 09:38 - 2019-03-14 10:28 - 000000000 ____D C:\Users\Servidor\Desktop\Nova pasta (2)
2019-03-12 11:16 - 2019-03-12 11:16 - 000093517 _____ C:\Users\Servidor\Downloads\fatura (32).pdf
2019-03-11 17:45 - 2019-03-11 17:45 - 000093517 _____ C:\Users\Servidor\Downloads\fatura (31).pdf
2019-03-07 17:01 - 2019-03-07 17:01 - 000328094 _____ C:\Users\Servidor\Downloads\000006694363515220190311.pdf
2019-03-07 09:52 - 2019-03-07 09:52 - 001358186 _____ C:\Users\Servidor\Downloads\fatura (30).pdf
2019-03-06 07:57 - 2019-03-06 07:57 - 000096803 _____ C:\Users\Servidor\Downloads\DROGARIA ELSHADAY-171256.pdf
2019-03-04 11:24 - 2019-03-04 11:24 - 000056577 _____ C:\Users\Servidor\Downloads\fatura (29).pdf
==================== Três meses (modificados) ========
(Se uma entrada for incluída na fixlist, o arquivo/pasta será movido.)
2019-06-01 14:47 - 2018-04-11 20:38 - 000000000 ____D C:\WINDOWS\system32\NDF
2019-06-01 14:46 - 2018-04-11 20:38 - 000000000 ____D C:\Users\Todos os Usuários\regid.1991-06.com.microsoft
2019-06-01 14:46 - 2018-04-11 20:38 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2019-06-01 14:38 - 2018-04-11 20:38 - 000000000 ____D C:\WINDOWS\system32\inetsrv
2019-06-01 14:36 - 2018-06-01 20:40 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2019-06-01 14:34 - 2018-04-11 18:04 - 000524288 _____ C:\WINDOWS\system32\config\BBI
2019-06-01 14:32 - 2017-06-17 19:27 - 000000000 ____D C:\ECF
2019-06-01 14:25 - 2017-06-17 17:59 - 000000000 ____D C:\InovaFarma
2019-06-01 14:18 - 2018-08-22 08:32 - 000000000 ____D C:\Program Files\CertiInstaller
2019-06-01 13:57 - 2018-04-11 20:38 - 000000000 ___HD C:\WINDOWS\ELAMBKUP
2019-06-01 13:50 - 2018-04-11 20:36 - 000000000 ____D C:\WINDOWS\INF
2019-06-01 09:21 - 2018-06-01 20:10 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2019-06-01 07:42 - 2018-03-14 07:35 - 000000000 ____D C:\WINDOWS\system32\Drivers\wd
2019-05-31 12:56 - 2018-07-20 19:27 - 000000000 ____D C:\Users\Servidor\AppData\Local\CrashDumps
2019-05-29 19:02 - 2017-06-17 19:45 - 000002785 _____ C:\WINDOWS\SOCKET.BIN
2019-05-28 15:21 - 2017-07-05 16:14 - 000000000 ____D C:\Users\Servidor\Documents\ENGRAÇA
2019-05-28 07:40 - 2017-06-17 16:29 - 000000000 ____D C:\Program Files (x86)\TeamViewer
2019-05-27 08:34 - 2017-06-17 17:56 - 000000000 ____D C:\UTL
2019-05-24 12:42 - 2018-06-01 20:16 - 000000000 ____D C:\Users\Servidor
2019-05-24 12:41 - 2018-04-11 20:38 - 000000000 ____D C:\WINDOWS\system32\setup
2019-05-24 11:53 - 2018-06-15 07:50 - 000000000 ____D C:\Users\Todos os Usuários\AVAST Software
2019-05-24 11:53 - 2018-06-15 07:50 - 000000000 ____D C:\ProgramData\AVAST Software
2019-05-24 11:05 - 2017-06-26 11:10 - 000000000 ____D C:\WINDOWS\system32\appmgmt
2019-05-24 11:03 - 2017-06-17 17:57 - 000000000 ____D C:\Program Files (x86)\Bematech
2019-05-24 10:58 - 2017-06-17 16:25 - 000000000 ____D C:\Program Files (x86)\Mozilla Firefox
2019-05-24 10:57 - 2017-06-19 09:28 - 000000000 ____D C:\Program Files (x86)\No-IP
2019-05-24 07:30 - 2018-12-03 07:12 - 000002988 _____ C:\WINDOWS\System32\Tasks\CCleaner Update
2019-05-24 07:30 - 2018-11-28 17:19 - 000003482 _____ C:\WINDOWS\System32\Tasks\Adobe Acrobat Update Task
2019-05-24 07:30 - 2018-11-05 08:04 - 000002220 _____ C:\WINDOWS\System32\Tasks\CCleanerSkipUAC
2019-05-24 07:30 - 2018-06-15 07:53 - 000000000 ____D C:\WINDOWS\System32\Tasks\Avast Software
2019-05-23 19:11 - 2018-07-27 16:57 - 000000000 ____D C:\Users\Servidor\AppData\Local\AVAST Software
2019-05-23 19:03 - 2018-04-11 20:38 - 000000000 ____D C:\WINDOWS\AppReadiness
2019-05-23 18:54 - 2017-06-17 16:19 - 000000000 __RHD C:\Users\Public\AccountPictures
2019-05-23 16:46 - 2018-06-01 20:16 - 000000000 ____D C:\Users\ReportServer$SQLEXPRESS
2019-05-23 16:45 - 2018-06-01 20:16 - 000000000 ____D C:\Users\MSSQLFDLauncher$SQLEXPRESS
2019-05-23 13:59 - 2017-06-17 19:19 - 000000000 ____D C:\Users\Servidor\Documents\SQL Server Management Studio
2019-05-22 16:23 - 2017-06-17 16:19 - 000000000 ____D C:\Users\Servidor\AppData\Local\Packages
2019-05-19 07:31 - 2018-04-11 20:38 - 000000000 ____D C:\WINDOWS\LiveKernelReports
2019-05-17 07:30 - 2018-06-01 20:16 - 000000000 ____D C:\Users\MSSQL$SQLEXPRESS
2019-05-16 16:02 - 2017-06-17 16:28 - 000002457 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk
2019-05-07 09:18 - 2018-09-17 13:56 - 000001347 _____ C:\Users\Public\Desktop\INOVAFARMA.lnk
2019-05-07 09:16 - 2018-03-12 16:30 - 000000000 ____D C:\Users\Servidor\AppData\Roaming\Precisao Sistemas
==================== SigCheck ===============================
(Não há correção automática para arquivos que não passaram na verificação.)
==================== Fim de FRST.txt ============================
Executado por Servidor (administrador) em SERVIDOR (PCWARE IPMH61R2) (01-06-2019 14:54:02)
Executando a partir de E:\
Perfis Carregados: Servidor & MSSQL$SQLEXPRESS & ReportServer$SQLEXPRESS & MSSQLFDLauncher$SQLEXPRESS (Perfis Disponíveis: Servidor & nomedeusuario & MSSQL$SQLEXPRESS & ReportServer$SQLEXPRESS & MSSQLFDLauncher$SQLEXPRESS & .NET v4.5 & DefaultAppPool & .NET v4.5 Classic)
Platform: Windows 10 Enterprise Versão 1803 17134.441 (X64) Idioma: Português (Brasil)
Navegador padrão: Chrome
Modo da Inicialização: Normal
Tutorial da Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Processos (Whitelisted) =================
(Se uma entrada for incluída na fixlist, o processo será fechado. O arquivo não será movido.)
() [Arquivo não assinado] C:\Program Files\WindowsApps\Microsoft.SkypeApp_14.33.41.0_x64__kzf8qxf38zg5c\SkypeBackgroundHost.exe
(Adobe Systems, Incorporated -> Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
(Hewlett-Packard Company -> Hewlett-Packard) C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe
(HP) [Arquivo não assinado] C:\Program Files (x86)\HP\HPLaserJetService\HPLaserJetService.exe
(Intel(R) pGFX -> Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel(R) pGFX -> Intel Corporation) C:\Windows\System32\igfxpers.exe
(Intel(R) pGFX -> Intel Corporation) C:\Windows\System32\igfxtray.exe
(Malwarebytes Corporation -> Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe
(Malwarebytes Corporation -> Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft SQL Server\90\Shared\sqlbrowser.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Microsoft SQL Server\MSRS12.SQLEXPRESS\Reporting Services\ReportServer\bin\ReportingServicesService.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Microsoft SQL Server\MSSQL12.SQLEXPRESS\MSSQL\Binn\fdhost.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Microsoft SQL Server\MSSQL12.SQLEXPRESS\MSSQL\Binn\fdlauncher.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Microsoft SQL Server\MSSQL12.SQLEXPRESS\MSSQL\Binn\sqlservr.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_17.10314.31700.1000_x64__8wekyb3d8bbwe\Office16\OfficeHubTaskHost.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
(Microsoft Corporation) [Arquivo não assinado] C:\Program Files\WindowsApps\Microsoft.SkypeApp_14.33.41.0_x64__kzf8qxf38zg5c\SkypeApp.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\inetsrv\inetinfo.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\mqsvc.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\OpenWith.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\OpenWith.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\OpenWith.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\SppExtComObj.Exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\SysWOW64\inetsrv\w3wp.exe
(Microsoft Windows Hardware Compatibility Publisher -> Motorola Inc.) C:\Program Files\Motorola\SMSERIAL\sm56hlpr.exe
(Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.1905.4-0\MsMpEng.exe
(Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.1905.4-0\NisSrv.exe
(Oracle America, Inc. -> Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Piriform Software Ltd -> Piriform Software Ltd) C:\Program Files\CCleaner\CCleaner64.exe
(Precisão Sistemas -> Precisão Sistemas) C:\InovaFarma\InovaFarmaAPI\InovaFarmaAPI.Service.exe
(SafeNet, Inc. -> SafeNet, Inc.) C:\Program Files\SafeNet\Authentication\SAC\x64\SACMonitor.exe
(SafeNet, Inc. -> SafeNet, Inc.) C:\Program Files\SafeNet\Authentication\SAC\x64\SACSrv.exe
(TeamViewer GmbH -> TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer.exe
(TeamViewer GmbH -> TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
(TeamViewer GmbH -> TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\tv_w32.exe
(TeamViewer GmbH -> TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\tv_x64.exe
==================== Registro (Whitelisted) ===========================
(Se uma entrada for incluída na fixlist, o ítem no Registro será restaurado para o padrão ou removido. O arquivo não será movido.)
HKLM\...\Run: [SecurityHealth] => C:\Program Files\Windows Defender\MSASCuiL.exe [638872 2018-04-11] (Microsoft Windows -> Microsoft Corporation)
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [16418560 2017-06-17] (Realtek Semiconductor Corp -> Realtek Semiconductor)
HKLM\...\Run: [SMSERIAL] => C:\Program Files\Motorola\SMSERIAL\sm56hlpr.exe [1702400 2018-02-21] (Microsoft Windows Hardware Compatibility Publisher -> Motorola Inc.)
HKLM\...\Run: [SACMonitor] => C:\Program Files\SafeNet\Authentication\SAC\x64\SACMonitor.exe [2183312 2012-04-16] (SafeNet, Inc. -> SafeNet, Inc.)
HKLM-x32\...\Run: [HP Software Update] => C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe [96056 2013-05-30] (Hewlett-Packard Company -> Hewlett-Packard)
HKLM-x32\...\Run: [StatusAlerts] => C:\Program Files (x86)\HP\StatusAlerts\bin\HPStatusAlerts.exe [330040 2014-02-12] (Hewlett-Packard Company -> Hewlett-Packard Company)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [645456 2019-04-01] (Oracle America, Inc. -> Oracle Corporation)
HKU\S-1-5-19\...\RunOnce: [WAB Migrate] => C:\Program Files\Windows Mail\wab.exe [518144 2018-04-11] (Microsoft Windows -> Microsoft Corporation)
HKU\S-1-5-20\...\RunOnce: [WAB Migrate] => C:\Program Files\Windows Mail\wab.exe [518144 2018-04-11] (Microsoft Windows -> Microsoft Corporation)
HKU\S-1-5-21-1469184627-3254592334-3046470981-1001\...\Run: [CCleaner Smart Cleaning] => C:\Program Files\CCleaner\CCleaner64.exe [22515488 2019-04-04] (Piriform Software Ltd -> Piriform Software Ltd)
HKU\S-1-5-21-1469184627-3254592334-3046470981-1001\...\Policies\Explorer: [NoAutoUpdate] 0
HKU\S-1-5-80-3880006512-4290199581-1648723128-3569869737-3631323133\...\RunOnce: [WAB Migrate] => C:\Program Files\Windows Mail\wab.exe [518144 2018-04-11] (Microsoft Windows -> Microsoft Corporation)
HKU\S-1-5-80-425977601-1203083412-1631309457-2457533047-3321749933\...\RunOnce: [WAB Migrate] => C:\Program Files\Windows Mail\wab.exe [518144 2018-04-11] (Microsoft Windows -> Microsoft Corporation)
HKU\S-1-5-80-997390408-2153310517-3119169589-2253446180-2226563786\...\RunOnce: [WAB Migrate] => C:\Program Files\Windows Mail\wab.exe [518144 2018-04-11] (Microsoft Windows -> Microsoft Corporation)
HKLM\...\Drivers32: [wave1] => C:\WINDOWS\system32\serwvdrv.dll [24064 2018-04-11] (Microsoft Windows -> Microsoft Corporation)
HKLM\...\Drivers32: [wave1] => C:\WINDOWS\SysWOW64\serwvdrv.dll [19968 2018-04-11] (Microsoft Windows -> Microsoft Corporation)
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files (x86)\Google\Chrome\Application\70.0.3538.102\Installer\chrmstp.exe [2018-11-13] (Google Inc -> Google Inc.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Client Connection.lnk [2017-06-17]
ShortcutTarget: Client Connection.lnk -> C:\Windows\Installer\{86F0E275-8AFA-4490-8A54-25A5E0BCE079}\_97756A09B6E02128E8236E.exe () [Arquivo não assinado]
Startup: C:\Users\Servidor\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\TeamViewer 10.lnk [2017-06-17]
ShortcutTarget: TeamViewer 10.lnk -> C:\Program Files (x86)\TeamViewer\TeamViewer.exe (TeamViewer GmbH -> TeamViewer GmbH)
GroupPolicy: Restrição ? <==== ATENÇÃO
GroupPolicy\User: Restrição ? <==== ATENÇÃO
FF HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restrição <==== ATENÇÃO
==================== Tarefas Agendadas (Whitelisted) =============
(Se uma entrada for incluída na fixlist, será removida do Registro. O arquivo não será movido, a menos que seja colocado separadamente.)
Task: {1787088E-3AE8-4E77-BA93-9F99777546F2} - System32\Tasks\CCleaner Update => C:\Program Files\CCleaner\CCUpdate.exe [619416 2019-04-04] (Piriform Software Ltd -> Piriform Software Ltd)
Task: {2318123C-B596-42E2-A756-49175FCB260D} - System32\Tasks\R@1n-KMS\Office15ProPlus => wmic path SoftwareLicensingProduct where (ID="b322da9c-a2e2-4058-9e4e-f59a6970bd69") call Activate
Task: {40750970-C9AF-4310-8654-CA6BBFC3B432} - System32\Tasks\R@1n-KMS\Windows64Professional => wmic path SoftwareLicensingProduct where (ID="2de67392-b7a7-462a-b1ca-108dd189f588") call Activate
Task: {6B5D6A12-075F-4FEC-833C-C581B4D0BCE4} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1905.4-0\MpCmdRun.exe [469960 2019-06-01] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {740B0910-9808-4DC1-8D3A-5FEE3BAE778D} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1905.4-0\MpCmdRun.exe [469960 2019-06-01] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {9FEC3983-382E-4D3F-B35B-E90A27C22BE9} - System32\Tasks\Update INOVAFARMA API => C:\InovaFarma\InovaFarmaAPI\InovaFarmaAPI.Updater.exe [582152 2019-04-29] (Precisão Sistemas -> Precisao Sistemas)
Task: {A80F006E-7714-42C5-8C76-C634B5A2808A} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1905.4-0\MpCmdRun.exe [469960 2019-06-01] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {BFD141A3-DA1C-4244-AE6D-C6F54834ADD5} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1905.4-0\MpCmdRun.exe [469960 2019-06-01] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {E5EFC1C8-82A2-4D78-AB9F-7067B957119E} - System32\Tasks\Avast Software\Overseer => C:\Program Files\Common Files\AVAST Software\Overseer\overseer.exe [2380088 2019-04-03] (AVAST Software s.r.o. -> AVAST Software)
Task: {EE195193-8071-451D-A44C-906A7F3C7776} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1195544 2018-12-16] (Adobe Systems, Incorporated -> Adobe Systems Incorporated)
Task: {EE28CD0B-9391-4517-8B7E-BBE6A1C31015} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [16509040 2019-04-04] (Piriform Software Ltd -> Piriform Software Ltd)
(Se uma entrada for incluída na fixlist, o arquivo da tarefa (.job) será movido. O arquivo que está sendo executado pela tarefa não será movido.)
==================== Internet (Whitelisted) ====================
(Se um ítem for incluído na fixlist, sendo um ítem do Registro, será removido ou restaurado para o padrão.)
HKLM\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings: [ProxySettingsPerUser] 0 <==== ATENÇÃO (Restrição - ProxySettings)
ProxyEnable: [HKLM] => Proxy está habilitado.
ProxyEnable: [HKLM-x32] => Proxy está habilitado.
ProxyServer: [HKLM] => http=127.0.0.1:8080;https=127.0.0.1:8080
ProxyServer: [HKLM-x32] => http=127.0.0.1:8080;https=127.0.0.1:8080
AutoConfigURL: [HKLM] => http=127.0.0.1:8080;https=127.0.0.1:8080
ProxyEnable: [S-1-5-21-1469184627-3254592334-3046470981-1001] => Proxy está habilitado.
ProxyServer: [S-1-5-21-1469184627-3254592334-3046470981-1001] => http=127.0.0.1:8080;https=127.0.0.1:8080
Tcpip\Parameters: [DhcpNameServer] 192.168.25.1
Tcpip\..\Interfaces\{d88d8e02-5733-4cab-b616-32b40d68cc5b}: [DhcpNameServer] 192.168.25.1
ManualProxies: 1http=127.0.0.1:8080;https=127.0.0.1:8080
Internet Explorer:
==================
HKU\S-1-5-21-1469184627-3254592334-3046470981-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.com.br/
BHO: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\Office15\OCHelper.dll [2018-02-15] (Microsoft Corporation -> Microsoft Corporation)
BHO: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office\Office15\GROOVEEX.DLL [2018-05-15] (Microsoft Corporation -> Microsoft Corporation)
BHO-x32: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll [2017-09-12] (Microsoft Corporation -> Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_211\bin\ssv.dll [2019-05-24] (Oracle America, Inc. -> Oracle Corporation)
BHO-x32: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\Office15\GROOVEEX.DLL [2018-05-15] (Microsoft Corporation -> Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_211\bin\jp2ssv.dll [2019-05-24] (Oracle America, Inc. -> Oracle Corporation)
Handler: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office\Office15\MSOSB.DLL [2017-08-15] (Microsoft Corporation -> Microsoft Corporation)
FireFox:
========
FF DefaultProfile: scfjhbxv.default
FF ProfilePath: C:\Users\Servidor\AppData\Roaming\Mozilla\Firefox\Profiles\scfjhbxv.default [2019-06-01]
FF Extension: (Avast Online Security) - C:\Users\Servidor\AppData\Roaming\Mozilla\Firefox\Profiles\scfjhbxv.default\Extensions\wrc@avast.com.xpi [2018-07-20]
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~1\MICROS~1\Office15\NPSPWRAP.DLL [2014-01-23] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=11.211.2 -> C:\Program Files (x86)\Java\jre1.8.0_211\bin\dtplugin\npDeployJava1.dll [2019-05-24] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.211.2 -> C:\Program Files (x86)\Java\jre1.8.0_211\bin\plugin2\npjp2.dll [2019-05-24] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files (x86)\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2017-09-12] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office15\NPSPWRAP.DLL [2014-01-22] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.33.17\npGoogleUpdate3.dll [2018-05-18] (Google Inc -> Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.33.17\npGoogleUpdate3.dll [2018-05-18] (Google Inc -> Google Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2019-05-02] (Adobe Inc. -> Adobe Systems Inc.)
Chrome:
=======
CHR Profile: C:\Users\Servidor\AppData\Local\Google\Chrome\User Data\Default [2019-06-01]
CHR Extension: (Apresentações) - C:\Users\Servidor\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2017-10-13]
CHR Extension: (Documentos) - C:\Users\Servidor\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2017-10-13]
CHR Extension: (Google Drive) - C:\Users\Servidor\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2017-06-17]
CHR Extension: (YouTube) - C:\Users\Servidor\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2017-06-17]
CHR Extension: (Adblock Plus - bloqueador de anúncios grátis) - C:\Users\Servidor\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2019-04-20]
CHR Extension: (Planilhas) - C:\Users\Servidor\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2017-10-13]
CHR Extension: (Documentos Google off-line) - C:\Users\Servidor\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2018-08-15]
CHR Extension: (Avast Online Security) - C:\Users\Servidor\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2019-04-29]
CHR Extension: (Pagamentos da Chrome Web Store) - C:\Users\Servidor\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2018-04-03]
CHR Extension: (Gmail) - C:\Users\Servidor\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2019-04-29]
CHR Extension: (Chrome Media Router) - C:\Users\Servidor\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2018-10-31]
CHR Profile: C:\Users\Servidor\AppData\Local\Google\Chrome\User Data\System Profile [2019-05-31]
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - hxxps://clients2.google.com/service/update2/crx
==================== Serviços (Whitelisted) ====================
(Se uma entrada for incluída na fixlist, será removida do Registro. O arquivo não será movido, a menos que seja colocado separadamente.)
R2 HP LaserJet Service; C:\Program Files (x86)\HP\HPLaserJetService\HPLaserJetService.exe [176128 2014-06-24] (HP) [Arquivo não assinado]
R2 IISADMIN; C:\WINDOWS\system32\inetsrv\inetinfo.exe [17408 2018-04-12] (Microsoft Windows -> Microsoft Corporation)
S3 InovaFarmaAPI Updater; C:\InovaFarma\InovaFarmaAPI\InovaFarmaAPI.Updater.exe [582152 2019-04-29] (Precisão Sistemas -> Precisao Sistemas)
R2 InovaFarmaAPI.Service; C:\InovaFarma\InovaFarmaAPI\InovaFarmaAPI.Service.exe [12131336 2019-04-29] (Precisão Sistemas -> Precisão Sistemas)
S2 KMS-R@1n; C:\Windows\KMS-R@1n.exe [26112 2017-06-17] () [Arquivo não assinado]
R2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe [6562472 2019-02-01] (Malwarebytes Corporation -> Malwarebytes)
R2 MSSQL$SQLEXPRESS; C:\Program Files\Microsoft SQL Server\MSSQL12.SQLEXPRESS\MSSQL\Binn\sqlservr.exe [370368 2015-06-10] (Microsoft Corporation -> Microsoft Corporation)
R3 MSSQLFDLauncher$SQLEXPRESS; C:\Program Files\Microsoft SQL Server\MSSQL12.SQLEXPRESS\MSSQL\Binn\fdlauncher.exe [50880 2014-02-21] (Microsoft Corporation -> Microsoft Corporation)
R2 ReportServer$SQLEXPRESS; C:\Program Files\Microsoft SQL Server\MSRS12.SQLEXPRESS\Reporting Services\ReportServer\bin\ReportingServicesService.exe [2450112 2014-02-21] (Microsoft Corporation -> Microsoft Corporation)
R2 SACSrv; C:\Program Files\SafeNet\Authentication\SAC\x64\SACSrv.exe [10384 2012-04-16] (SafeNet, Inc. -> SafeNet, Inc.)
S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [4737448 2018-07-14] (Microsoft Windows Publisher -> Microsoft Corporation)
S4 SQLAgent$SQLEXPRESS; C:\Program Files\Microsoft SQL Server\MSSQL12.SQLEXPRESS\MSSQL\Binn\SQLAGENT.EXE [613056 2015-06-10] (Microsoft Corporation -> Microsoft Corporation)
R2 TeamViewer; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [6634224 2018-02-02] (TeamViewer GmbH -> TeamViewer GmbH)
R3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1905.4-0\NisSrv.exe [2433136 2019-06-01] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1905.4-0\MsMpEng.exe [109896 2019-06-01] (Microsoft Windows Publisher -> Microsoft Corporation)
S3 WMSVC; C:\WINDOWS\system32\inetsrv\wmsvc.exe [11776 2018-04-12] (Microsoft Windows -> Microsoft Corporation)
===================== Drivers (Whitelisted) ======================
(Se uma entrada for incluída na fixlist, será removida do Registro. O arquivo não será movido, a menos que seja colocado separadamente.)
S3 aftap0901; C:\WINDOWS\System32\drivers\aftap0901.sys [48624 2018-03-06] (AnchorFree Inc -> The OpenVPN Project)
R3 AKSIFDH; C:\WINDOWS\System32\drivers\aksifdh.sys [62632 2017-08-03] (Aladdin Knowledge Systems Inc. -> Aladdin Knowledge Systems, Ltd.)
R3 AKSUP; C:\WINDOWS\system32\drivers\aksup.sys [44712 2017-08-03] (Aladdin Knowledge Systems Inc. -> Aladdin Knowledge Systems, Ltd.)
R1 ESProtectionDriver; C:\WINDOWS\system32\drivers\mbae64.sys [153328 2019-01-08] (Malwarebytes Corporation -> Malwarebytes)
R3 igfx; C:\WINDOWS\system32\DRIVERS\igdkmd64.sys [5382856 2017-06-26] (Microsoft Windows Hardware Compatibility Publisher -> Intel Corporation)
R3 iKeyEnum; C:\WINDOWS\System32\drivers\ikeyenum.sys [16160 2010-07-08] (SafeNet, Inc. -> SafeNet, Inc.)
R3 iKeyIFD; C:\WINDOWS\System32\drivers\ikeyifd.sys [22304 2010-07-08] (SafeNet, Inc. -> SafeNet, Inc.)
R2 MBAMChameleon; C:\WINDOWS\System32\Drivers\MbamChameleon.sys [199768 2019-06-01] (Malwarebytes Corporation -> Malwarebytes)
S0 MbamElam; C:\WINDOWS\System32\DRIVERS\MbamElam.sys [20936 2019-02-01] (Microsoft Windows Early Launch Anti-malware Publisher -> Malwarebytes)
R3 MBAMFarflt; C:\WINDOWS\System32\DRIVERS\farflt.sys [127136 2019-06-01] (Malwarebytes Corporation -> Malwarebytes)
R3 MBAMProtection; C:\WINDOWS\system32\DRIVERS\mbam.sys [73912 2019-06-01] (Malwarebytes Corporation -> Malwarebytes)
R3 MBAMSwissArmy; C:\WINDOWS\System32\Drivers\mbamswissarmy.sys [275232 2019-06-01] (Malwarebytes Corporation -> Malwarebytes)
R3 MBAMWebProtection; C:\WINDOWS\system32\DRIVERS\mwac.sys [117344 2019-06-01] (Malwarebytes Corporation -> Malwarebytes)
R3 MODEMCSA; C:\WINDOWS\system32\drivers\MODEMCSA.sys [26624 2018-04-11] (Microsoft Windows -> Microsoft Corporation)
R3 PciSPorts; C:\WINDOWS\system32\DRIVERS\PciSPorts.sys [121856 2013-06-28] (Microsoft Windows Hardware Compatibility Publisher -> ASIX Electronics Corp.)
U5 RnbToken; C:\Windows\System32\Drivers\RnbToken.sys [24352 2010-07-08] (SafeNet, Inc. -> SafeNet, Inc.)
S4 RsFx0300; C:\WINDOWS\System32\DRIVERS\RsFx0300.sys [247488 2014-02-21] (Microsoft Corporation -> Microsoft Corporation)
R3 rt640x64; C:\WINDOWS\System32\drivers\rt640x64.sys [604160 2018-04-11] (Microsoft Windows -> Realtek )
R3 smserial; C:\WINDOWS\system32\DRIVERS\smserial.sys [1202688 2018-02-21] (Microsoft Windows Hardware Compatibility Publisher -> Motorola Inc.)
S0 WdBoot; C:\WINDOWS\System32\drivers\wd\WdBoot.sys [47496 2019-06-01] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
R0 WdFilter; C:\WINDOWS\System32\drivers\wd\WdFilter.sys [337632 2019-06-01] (Microsoft Windows -> Microsoft Corporation)
R3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [53984 2019-06-01] (Microsoft Windows -> Microsoft Corporation)
==================== NetSvcs (Whitelisted) ===================
(Se uma entrada for incluída na fixlist, será removida do Registro. O arquivo não será movido, a menos que seja colocado separadamente.)
==================== Três meses (criados) ========
(Se uma entrada for incluída na fixlist, o arquivo/pasta será movido.)
2019-06-01 14:53 - 2019-06-01 14:54 - 000000000 ____D C:\FRST
2019-06-01 14:47 - 2019-06-01 14:46 - 000000852 _____ C:\WINDOWS\system32\Drivers\etc\hosts.txt
2019-06-01 14:44 - 2019-06-01 14:46 - 000000852 _____ C:\Users\Servidor\Desktop\hosts.txt
2019-06-01 14:40 - 2019-06-01 14:40 - 000000000 ____D C:\Users\Servidor\AppData\Local\ElevatedDiagnostics
2019-06-01 14:38 - 2019-06-01 14:38 - 000073912 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbam.sys
2019-06-01 14:37 - 2019-06-01 14:37 - 000127136 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\farflt.sys
2019-06-01 14:37 - 2019-06-01 14:37 - 000117344 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mwac.sys
2019-06-01 14:36 - 2019-06-01 14:36 - 000275232 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbamswissarmy.sys
2019-06-01 14:17 - 2019-06-01 14:17 - 000000716 _____ C:\Users\Servidor\Desktop\JRT.txt
2019-06-01 13:59 - 2019-06-01 13:59 - 000000000 ____D C:\Users\Servidor\AppData\Local\mbam
2019-06-01 13:58 - 2019-06-01 13:58 - 000199768 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MbamChameleon.sys
2019-06-01 13:58 - 2019-06-01 13:58 - 000000000 ____D C:\Users\Servidor\AppData\Local\mbamtray
2019-06-01 13:57 - 2019-06-01 13:57 - 000001912 _____ C:\Users\Public\Desktop\Malwarebytes.lnk
2019-06-01 13:57 - 2019-06-01 13:57 - 000000000 ____D C:\Users\Todos os Usuários\Malwarebytes
2019-06-01 13:57 - 2019-06-01 13:57 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes
2019-06-01 13:57 - 2019-06-01 13:57 - 000000000 ____D C:\ProgramData\Malwarebytes
2019-06-01 13:57 - 2019-06-01 13:57 - 000000000 ____D C:\Program Files\Malwarebytes
2019-06-01 13:57 - 2019-02-01 12:20 - 000020936 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MbamElam.sys
2019-06-01 13:57 - 2019-01-08 16:32 - 000153328 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbae64.sys
2019-06-01 13:50 - 2019-06-01 13:51 - 000000000 ____D C:\AdwCleaner
2019-05-29 19:01 - 2019-05-29 19:01 - 000103857 _____ C:\Users\Servidor\Desktop\rosee.html
2019-05-29 18:45 - 2019-05-29 18:45 - 000098109 _____ C:\Users\Servidor\Downloads\rose2.html
2019-05-28 15:35 - 2019-05-28 15:35 - 000341121 _____ C:\Users\Servidor\Downloads\engraça 44.pdf
2019-05-28 15:35 - 2019-05-28 15:35 - 000341121 _____ C:\Users\Servidor\Documents\engraça 44.pdf
2019-05-28 15:33 - 2019-05-28 15:33 - 000250571 _____ C:\Users\Servidor\Downloads\doc engraça 1.pdf
2019-05-28 15:33 - 2019-05-28 15:33 - 000240432 _____ C:\Users\Servidor\Downloads\doc engraça 33.pdf
2019-05-28 15:33 - 2019-05-28 15:33 - 000240432 _____ C:\Users\Servidor\Downloads\doc engraça 22.pdf
2019-05-28 15:33 - 2019-05-28 15:33 - 000165592 _____ C:\Users\Servidor\Downloads\doc engraça.pdf
2019-05-28 15:30 - 2019-05-28 15:30 - 000240432 _____ C:\Users\Servidor\Documents\doc engraça 33.pdf
2019-05-28 15:30 - 2019-05-28 15:30 - 000240432 _____ C:\Users\Servidor\Documents\doc engraça 22.pdf
2019-05-28 15:28 - 2019-05-28 15:29 - 000250571 _____ C:\Users\Servidor\Documents\doc engraça 1.pdf
2019-05-28 15:21 - 2019-05-28 15:21 - 000165592 _____ C:\Users\Servidor\Documents\doc engraça.pdf
2019-05-27 18:06 - 2019-05-27 18:06 - 000526272 _____ (Xlab d.o.o.) C:\Users\Servidor\Downloads\ISL Light Client 610184.exe
2019-05-27 18:06 - 2019-05-27 18:06 - 000000000 ____D C:\Users\Servidor\AppData\Local\ISL Online Cache
2019-05-24 12:42 - 2019-05-24 12:42 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SafeNet
2019-05-24 12:41 - 2019-05-24 12:41 - 000000000 ____D C:\Program Files\SafeNet
2019-05-24 12:37 - 2019-05-24 12:38 - 030321152 _____ C:\Users\Servidor\Downloads\Safenet_Authentication_Client_8.1SP2-x64 (1).msi
2019-05-24 12:37 - 2019-05-24 12:37 - 015434240 _____ C:\Users\Servidor\Downloads\certisign10.6-x64-10.6 (3).exe
2019-05-24 12:31 - 2019-05-24 12:31 - 000000000 ____D C:\Users\Servidor\AppData\Roaming\Sun
2019-05-24 12:31 - 2019-05-24 12:31 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2019-05-24 12:31 - 2019-05-24 12:30 - 000099192 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\WindowsAccessBridge-32.dll
2019-05-24 12:30 - 2019-05-24 12:30 - 000000000 ____D C:\Users\Todos os Usuários\Oracle
2019-05-24 12:30 - 2019-05-24 12:30 - 000000000 ____D C:\ProgramData\Oracle
2019-05-24 12:30 - 2019-05-24 12:30 - 000000000 ____D C:\Program Files (x86)\Java
2019-05-24 12:14 - 2019-05-24 12:14 - 000000875 _____ C:\Users\Servidor\Desktop\Instalar Kaspersky Anti-Virus versão 19.0.0.1088.lnk
2019-05-24 12:12 - 2019-05-24 12:12 - 000000000 ____D C:\Users\Todos os Usuários\Kaspersky Lab Setup Files
2019-05-24 12:12 - 2019-05-24 12:12 - 000000000 ____D C:\ProgramData\Kaspersky Lab Setup Files
2019-05-24 12:09 - 2019-05-24 12:10 - 002702208 _____ (Kaspersky Lab) C:\Users\Servidor\Downloads\startup_14794.exe
2019-05-24 11:05 - 2019-05-24 11:05 - 000000000 ____D C:\Program Files (x86)\Default Company Name
2019-05-23 19:03 - 2019-05-23 19:03 - 000000000 ____D C:\Users\nomedeusuario\AppData\Roaming\AVAST Software
2019-05-23 19:02 - 2019-05-23 19:03 - 015434240 _____ C:\Users\Servidor\Downloads\certisign10.6-x64-10.6 (2).exe
2019-05-23 19:00 - 2019-05-23 19:00 - 010391752 _____ (A.E.T. Europe B.V.) C:\Users\Servidor\Downloads\SafeSign_Identity_Client-Standard-3.0.87-general-x64-win-admin-std-vc8.exe
2019-05-23 18:57 - 2019-05-24 07:30 - 000002862 _____ C:\WINDOWS\System32\Tasks\OneDrive Standalone Update Task-S-1-5-21-1469184627-3254592334-3046470981-1004
2019-05-23 18:56 - 2019-05-23 18:57 - 000000000 ___RD C:\Users\nomedeusuario\OneDrive
2019-05-23 18:55 - 2019-05-23 18:56 - 000000000 ____D C:\Users\nomedeusuario\AppData\Local\PlaceholderTileLogoFolder
2019-05-23 18:55 - 2019-05-23 18:55 - 000001417 _____ C:\Users\nomedeusuario\Desktop\Microsoft Edge.lnk
2019-05-23 18:54 - 2019-05-23 18:54 - 000000000 ___RD C:\Users\nomedeusuario\3D Objects
2019-05-23 18:54 - 2019-05-23 18:54 - 000000000 ____D C:\Users\nomedeusuario\AppData\Local\VirtualStore
2019-05-23 18:54 - 2019-05-23 18:54 - 000000000 ____D C:\Users\nomedeusuario\AppData\Local\Publishers
2019-05-23 18:54 - 2019-05-23 18:54 - 000000000 ____D C:\Users\nomedeusuario\AppData\Local\Google
2019-05-23 18:53 - 2019-05-23 18:57 - 000002435 _____ C:\Users\nomedeusuario\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2019-05-23 18:53 - 2019-05-23 18:56 - 000000000 ____D C:\Users\nomedeusuario
2019-05-23 18:53 - 2019-05-23 18:55 - 000000000 ____D C:\Users\nomedeusuario\AppData\Local\Packages
2019-05-23 18:53 - 2019-05-23 18:54 - 000000000 ____D C:\Users\nomedeusuario\AppData\Local\ConnectedDevicesPlatform
2019-05-23 18:53 - 2019-05-23 18:53 - 000000606 __RSH C:\Users\nomedeusuario\ntuser.pol
2019-05-23 18:53 - 2019-05-23 18:53 - 000000020 ___SH C:\Users\nomedeusuario\ntuser.ini
2019-05-23 18:53 - 2019-05-23 18:53 - 000000000 _SHDL C:\Users\nomedeusuario\Modelos
2019-05-23 18:53 - 2019-05-23 18:53 - 000000000 _SHDL C:\Users\nomedeusuario\Meus Documentos
2019-05-23 18:53 - 2019-05-23 18:53 - 000000000 _SHDL C:\Users\nomedeusuario\Menu Iniciar
2019-05-23 18:53 - 2019-05-23 18:53 - 000000000 _SHDL C:\Users\nomedeusuario\Documents\Minhas Músicas
2019-05-23 18:53 - 2019-05-23 18:53 - 000000000 _SHDL C:\Users\nomedeusuario\Documents\Minhas Imagens
2019-05-23 18:53 - 2019-05-23 18:53 - 000000000 _SHDL C:\Users\nomedeusuario\Documents\Meus Vídeos
2019-05-23 18:53 - 2019-05-23 18:53 - 000000000 _SHDL C:\Users\nomedeusuario\Dados de Aplicativos
2019-05-23 18:53 - 2019-05-23 18:53 - 000000000 _SHDL C:\Users\nomedeusuario\Configurações Locais
2019-05-23 18:53 - 2019-05-23 18:53 - 000000000 _SHDL C:\Users\nomedeusuario\AppData\Roaming\Microsoft\Windows\Start Menu\Programas
2019-05-23 18:53 - 2019-05-23 18:53 - 000000000 _SHDL C:\Users\nomedeusuario\AppData\Local\Histórico
2019-05-23 18:53 - 2019-05-23 18:53 - 000000000 _SHDL C:\Users\nomedeusuario\AppData\Local\Dados de Aplicativos
2019-05-23 18:53 - 2019-05-23 18:53 - 000000000 _SHDL C:\Users\nomedeusuario\Ambiente de Rede
2019-05-23 18:53 - 2019-05-23 18:53 - 000000000 _SHDL C:\Users\nomedeusuario\Ambiente de Impressão
2019-05-23 18:53 - 2019-05-23 18:53 - 000000000 ____D C:\Users\nomedeusuario\AppData\Roaming\Adobe
2019-05-23 18:53 - 2017-06-26 07:44 - 000000000 ____D C:\Users\nomedeusuario\Documents\Visual Studio 2010
2019-05-23 18:53 - 2017-06-26 07:43 - 000000000 ____D C:\Users\nomedeusuario\AppData\Local\Microsoft Help
2019-05-23 18:48 - 2019-05-23 18:48 - 001534976 _____ (Certisign) C:\Users\Servidor\Downloads\InstaladorCadeiaV5.exe
2019-05-23 18:06 - 2019-05-23 18:08 - 030321152 _____ C:\Users\Servidor\Downloads\Safenet_Authentication_Client_8.1SP2-x64.msi
2019-05-23 17:52 - 2019-05-23 17:52 - 015434240 _____ C:\Users\Servidor\Downloads\certisign10.6-x64-10.6 (1).exe
2019-05-23 17:24 - 2019-05-23 17:24 - 000000000 ____D C:\WINDOWS\LastGood
2019-05-23 17:22 - 2019-05-23 17:23 - 015434240 _____ C:\Users\Servidor\Downloads\certisign10.6-x64-10.6.exe
2019-05-23 17:07 - 2019-05-24 10:59 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SafeSign Standard
2019-05-23 17:07 - 2019-05-23 17:07 - 000000000 ____D C:\Program Files\A.E.T. Europe B.V
2019-05-23 15:31 - 2019-05-23 15:31 - 000000000 ____D C:\WINDOWS\LastGood.Tmp
2019-05-23 15:31 - 2019-05-23 15:31 - 000000000 ____D C:\Users\Servidor\AppData\LocalLow\Sun
2019-05-23 14:52 - 2019-05-23 14:54 - 084933002 _____ (Certisign ) C:\Users\Servidor\Downloads\Setup_CertiInstaller (3).exe
2019-05-23 13:49 - 2019-05-23 13:52 - 084933002 _____ (Certisign ) C:\Users\Servidor\Downloads\Setup_CertiInstaller (2).exe
2019-05-23 12:59 - 2019-05-23 12:59 - 001260020 _____ C:\Users\Servidor\Downloads\Apostila de exercícios do Valdeci
2019-05-22 16:25 - 2019-05-22 16:25 - 000073594 _____ C:\Users\Servidor\Downloads\Receita Federal do Brasil(27)
2019-05-22 16:23 - 2019-05-22 16:23 - 000048531 _____ C:\Users\Servidor\Downloads\CCMEI-33694141000100 (1) (2)
2019-05-22 16:23 - 2019-05-22 16:23 - 000048531 _____ C:\Users\Servidor\Downloads\CCMEI-33694141000100 (1) (1)
2019-05-22 16:23 - 2019-05-22 16:23 - 000048531 _____ C:\Users\Servidor\Downloads\CCMEI-33694141000100 (1)
2019-05-21 09:40 - 2019-05-21 09:40 - 000012847 _____ C:\Users\Servidor\Downloads\boletoSKY_400654136276.pdf
2019-05-20 09:25 - 2019-05-20 09:25 - 000094253 _____ C:\Users\Servidor\Downloads\fatura (36).pdf
2019-05-17 15:20 - 2019-05-17 15:20 - 000025764 _____ C:\Users\Servidor\Downloads\boleto (2).html
2019-05-17 10:35 - 2019-05-17 10:35 - 000025783 _____ C:\Users\Servidor\Downloads\boleto (1).html
2019-05-16 13:27 - 2019-05-16 13:27 - 000010668 _____ C:\Users\Servidor\Downloads\DIFAL DROGARIA MG exibeDAREPdf.jsf.pdf
2019-05-15 18:34 - 2019-05-15 18:34 - 000130659 _____ C:\Users\Servidor\Downloads\LIVE_TIM_132413044_03_2019_3747719795.pdf
2019-05-15 17:21 - 2019-05-15 17:21 - 000014141 _____ C:\Users\Servidor\Downloads\LANÇAMENTOS DE VENDAS.xlsx
2019-05-15 17:21 - 2019-05-15 17:21 - 000000177 _____ C:\Users\Servidor\Downloads\LANÇAMENTOS DE VENDAS.csv
2019-05-15 12:12 - 2019-05-15 12:12 - 000156734 _____ C:\Users\Servidor\Downloads\10020855530 (4).pdf
2019-05-15 12:05 - 2019-05-15 12:05 - 000157216 _____ C:\Users\Servidor\Downloads\10020855530 (3).pdf
2019-05-15 07:58 - 2019-05-15 07:58 - 000134060 _____ C:\Users\Servidor\Desktop\Relatórios Fiscais-15-05-2019 075756.pdf
2019-05-15 07:55 - 2019-05-15 07:58 - 005258080 _____ C:\Users\Servidor\Desktop\Nova PASTA XML4.rar
2019-05-15 07:54 - 2019-05-15 07:58 - 000000000 ____D C:\Users\Servidor\Desktop\Nova PASTA XML4
2019-05-09 16:48 - 2019-05-09 16:48 - 000040098 _____ C:\Users\Servidor\Downloads\60115441 (1)
2019-05-09 16:48 - 2019-05-09 16:48 - 000040098 _____ C:\Users\Servidor\Downloads\60115441
2019-05-09 16:35 - 2019-05-09 16:35 - 000155057 _____ C:\Users\Servidor\Downloads\10004829601 (1).pdf
2019-05-08 11:33 - 2019-05-08 11:33 - 000016357 _____ C:\Users\Servidor\Downloads\Boleto0837039_14000110000026495.pdf
2019-05-07 15:05 - 2019-05-07 15:05 - 000025202 _____ C:\Users\Servidor\Downloads\boleto.html
2019-05-07 14:42 - 2019-05-07 14:42 - 000570085 _____ C:\Users\Servidor\Desktop\doc carol.pdf
2019-05-07 11:51 - 2019-05-07 11:51 - 002264622 _____ C:\Users\Servidor\Downloads\CONTRATO DE RENEGOCIAÇÃO.pdf
2019-05-07 09:18 - 2019-05-07 09:18 - 000000000 ____D C:\Users\Todos os Usuários\com.precisaosistemas.inovafarma
2019-05-07 09:18 - 2019-05-07 09:18 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Precisão Sistemas
2019-05-07 09:18 - 2019-05-07 09:18 - 000000000 ____D C:\ProgramData\com.precisaosistemas.inovafarma
2019-05-07 09:15 - 2019-05-07 09:16 - 029515904 _____ (Precisao Sistemas) C:\Users\Servidor\Downloads\inovafarma-1.64.2.exe
2019-05-06 13:46 - 2019-05-06 13:46 - 000156734 _____ C:\Users\Servidor\Downloads\10020855530 (2).pdf
2019-05-06 13:45 - 2019-05-06 13:45 - 000157216 _____ C:\Users\Servidor\Downloads\10020855530 (1).pdf
2019-05-04 07:17 - 2019-05-04 07:17 - 000096805 _____ C:\Users\Servidor\Downloads\DROGARIA ELSHADAY-171258.pdf
2019-05-03 11:07 - 2019-05-03 11:07 - 000197734 _____ C:\Users\Servidor\Documents\Scan-junior 2019.pdf
2019-04-26 18:31 - 2019-05-24 07:30 - 000003314 _____ C:\WINDOWS\System32\Tasks\Update INOVAFARMA API
2019-04-23 17:26 - 2019-04-23 17:26 - 000000329 _____ C:\Users\Servidor\Downloads\ATT00001 (3).htm
2019-04-22 10:10 - 2019-04-22 10:10 - 000329354 _____ C:\Users\Servidor\Downloads\Minha_Fatura_MASTERCARD_21-04-2019 (2).pdf
2019-04-22 10:08 - 2019-04-22 10:09 - 000329354 _____ C:\Users\Servidor\Downloads\Minha_Fatura_MASTERCARD_21-04-2019 (1).pdf
2019-04-22 10:08 - 2019-04-22 10:08 - 000329354 _____ C:\Users\Servidor\Downloads\Minha_Fatura_MASTERCARD_21-04-2019.pdf
2019-04-22 07:52 - 2019-04-22 07:52 - 000078989 _____ C:\Users\Servidor\Downloads\Serviço de Seleção do Pessoal da Marinha (1) (2).pdf
2019-04-22 07:51 - 2019-04-22 07:51 - 000010847 _____ C:\Users\Servidor\Downloads\exibeDAREPdf.jsf DROGARIA (1).pdf
2019-04-22 07:50 - 2019-04-22 07:50 - 000118310 _____ C:\Users\Servidor\Downloads\PGDASD-DAS-10643578201903001.pdf
2019-04-22 07:49 - 2019-04-22 07:49 - 000120298 _____ C:\Users\Servidor\Downloads\ExibirDAS-18042019_132344_04_2019.pdf
2019-04-22 07:48 - 2019-04-22 07:48 - 000131687 _____ C:\Users\Servidor\Downloads\GPS - Guia da Previdência Social DROGARIA.pdf
2019-04-20 09:33 - 2019-04-20 09:33 - 000000000 ____D C:\WINDOWS\System32\Tasks\S-1-5-21-1469184627-3254592334-3046470981-1001
2019-04-18 11:12 - 2019-04-18 11:12 - 000137500 _____ C:\Users\Servidor\Desktop\Relatórios Fiscais-18-04-2019 111209 3.pdf
2019-04-15 17:44 - 2019-04-15 17:44 - 000777221 _____ C:\Users\Servidor\Downloads\10643578000110 - COMPRA_GERAL - 01032019_31032019.zip
2019-04-15 17:44 - 2019-04-15 17:44 - 000777221 _____ C:\Users\Servidor\Downloads\10643578000110 - COMPRA_GERAL - 01032019_31032019 (1).zip
2019-04-15 17:43 - 2019-04-15 17:43 - 005407917 _____ C:\Users\Servidor\Downloads\xml03.rar
2019-04-13 18:46 - 2019-04-13 18:46 - 000078989 _____ C:\Users\Servidor\Downloads\Serviço de Seleção do Pessoal da Marinha (1) (1).pdf
2019-04-13 18:17 - 2019-04-13 18:17 - 000078989 _____ C:\Users\Servidor\Downloads\Serviço de Seleção do Pessoal da Marinha (1).pdf
2019-04-13 13:40 - 2019-04-13 13:40 - 000117404 _____ C:\Users\Servidor\Downloads\bancoItauBoleto.pdf
2019-04-12 16:01 - 2019-04-12 16:01 - 005407917 _____ C:\Users\Servidor\Desktop\xml03.rar
2019-04-12 15:57 - 2019-04-15 17:42 - 000000000 ____D C:\Users\Servidor\Desktop\xml03
2019-04-12 15:48 - 2019-04-25 15:31 - 000000077 _____ C:\WINDOWS\system32\Drivers\aswSP.sys.sum
2019-04-09 14:28 - 2019-04-09 14:28 - 000001365 _____ C:\Users\Public\Desktop\HP LaserJet Pro MFP M125-M126 - Centro de Ajuda e Aprendizado.lnk
2019-04-09 14:27 - 2019-04-09 14:27 - 000001322 _____ C:\Users\Public\Desktop\HP LJ M125126 Scan.lnk
2019-04-09 14:27 - 2019-04-09 14:27 - 000000000 ____D C:\Users\Servidor\Desktop\HP
2019-04-08 18:03 - 2019-04-09 07:25 - 000000000 ____D C:\WINDOWS\Minidump
2019-04-08 16:23 - 2019-04-08 16:23 - 000035560 _____ C:\Users\Servidor\Desktop\safra 2.pdf
2019-04-08 16:21 - 2019-04-08 16:21 - 000035614 _____ C:\Users\Servidor\Desktop\safra.pdf
2019-04-08 12:48 - 2019-04-08 12:48 - 000035560 _____ C:\Users\Servidor\Downloads\BOLETO PARA PAGAMENTO HOJE 04-04-19.pdf
2019-04-03 16:26 - 2019-04-03 16:26 - 000157710 _____ C:\Users\Servidor\Downloads\10020855530.pdf
2019-04-01 17:17 - 2019-04-01 17:17 - 000069468 _____ C:\Users\Servidor\Downloads\fatura (35).pdf
2019-04-01 17:17 - 2019-04-01 17:17 - 000069468 _____ C:\Users\Servidor\Downloads\fatura (34).pdf
2019-03-26 10:19 - 2019-03-26 10:19 - 000010754 _____ C:\Users\Servidor\Downloads\ticket-7115d75e-10c4-4162-bb6d-8c0fff0f6c93.pdf
2019-03-25 13:13 - 2019-03-25 13:13 - 000018099 _____ C:\Users\Servidor\Downloads\Notificacao_Extra_Judicial.pdf
2019-03-25 13:11 - 2019-03-25 13:12 - 000027106 _____ C:\Users\Servidor\Downloads\1990.pdf
2019-03-22 07:47 - 2019-03-22 07:47 - 000032092 _____ C:\Users\Servidor\Downloads\43190393896397001447550070002075221357410163.xml
2019-03-22 07:35 - 2019-03-22 07:35 - 000032092 _____ C:\Users\Servidor\Desktop\43190393896397001447550070002075221357410163.xml
2019-03-21 12:48 - 2019-03-21 12:48 - 000018697 _____ C:\Users\Servidor\Downloads\52190317715064000171550010001303331001303335.xml
2019-03-21 08:28 - 2019-03-21 08:28 - 000011183 _____ C:\Users\Servidor\Downloads\53140801206820000792550010011636931011636930-procNFe.xml
2019-03-20 11:52 - 2019-03-20 11:53 - 000012856 _____ C:\Users\Servidor\Downloads\boletoSKY_400613996739.pdf
2019-03-14 16:54 - 2019-03-14 16:54 - 001368245 _____ C:\Users\Servidor\Downloads\Fatura (33).pdf
2019-03-14 09:38 - 2019-03-14 10:28 - 000000000 ____D C:\Users\Servidor\Desktop\Nova pasta (2)
2019-03-12 11:16 - 2019-03-12 11:16 - 000093517 _____ C:\Users\Servidor\Downloads\fatura (32).pdf
2019-03-11 17:45 - 2019-03-11 17:45 - 000093517 _____ C:\Users\Servidor\Downloads\fatura (31).pdf
2019-03-07 17:01 - 2019-03-07 17:01 - 000328094 _____ C:\Users\Servidor\Downloads\000006694363515220190311.pdf
2019-03-07 09:52 - 2019-03-07 09:52 - 001358186 _____ C:\Users\Servidor\Downloads\fatura (30).pdf
2019-03-06 07:57 - 2019-03-06 07:57 - 000096803 _____ C:\Users\Servidor\Downloads\DROGARIA ELSHADAY-171256.pdf
2019-03-04 11:24 - 2019-03-04 11:24 - 000056577 _____ C:\Users\Servidor\Downloads\fatura (29).pdf
==================== Três meses (modificados) ========
(Se uma entrada for incluída na fixlist, o arquivo/pasta será movido.)
2019-06-01 14:47 - 2018-04-11 20:38 - 000000000 ____D C:\WINDOWS\system32\NDF
2019-06-01 14:46 - 2018-04-11 20:38 - 000000000 ____D C:\Users\Todos os Usuários\regid.1991-06.com.microsoft
2019-06-01 14:46 - 2018-04-11 20:38 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2019-06-01 14:38 - 2018-04-11 20:38 - 000000000 ____D C:\WINDOWS\system32\inetsrv
2019-06-01 14:36 - 2018-06-01 20:40 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2019-06-01 14:34 - 2018-04-11 18:04 - 000524288 _____ C:\WINDOWS\system32\config\BBI
2019-06-01 14:32 - 2017-06-17 19:27 - 000000000 ____D C:\ECF
2019-06-01 14:25 - 2017-06-17 17:59 - 000000000 ____D C:\InovaFarma
2019-06-01 14:18 - 2018-08-22 08:32 - 000000000 ____D C:\Program Files\CertiInstaller
2019-06-01 13:57 - 2018-04-11 20:38 - 000000000 ___HD C:\WINDOWS\ELAMBKUP
2019-06-01 13:50 - 2018-04-11 20:36 - 000000000 ____D C:\WINDOWS\INF
2019-06-01 09:21 - 2018-06-01 20:10 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2019-06-01 07:42 - 2018-03-14 07:35 - 000000000 ____D C:\WINDOWS\system32\Drivers\wd
2019-05-31 12:56 - 2018-07-20 19:27 - 000000000 ____D C:\Users\Servidor\AppData\Local\CrashDumps
2019-05-29 19:02 - 2017-06-17 19:45 - 000002785 _____ C:\WINDOWS\SOCKET.BIN
2019-05-28 15:21 - 2017-07-05 16:14 - 000000000 ____D C:\Users\Servidor\Documents\ENGRAÇA
2019-05-28 07:40 - 2017-06-17 16:29 - 000000000 ____D C:\Program Files (x86)\TeamViewer
2019-05-27 08:34 - 2017-06-17 17:56 - 000000000 ____D C:\UTL
2019-05-24 12:42 - 2018-06-01 20:16 - 000000000 ____D C:\Users\Servidor
2019-05-24 12:41 - 2018-04-11 20:38 - 000000000 ____D C:\WINDOWS\system32\setup
2019-05-24 11:53 - 2018-06-15 07:50 - 000000000 ____D C:\Users\Todos os Usuários\AVAST Software
2019-05-24 11:53 - 2018-06-15 07:50 - 000000000 ____D C:\ProgramData\AVAST Software
2019-05-24 11:05 - 2017-06-26 11:10 - 000000000 ____D C:\WINDOWS\system32\appmgmt
2019-05-24 11:03 - 2017-06-17 17:57 - 000000000 ____D C:\Program Files (x86)\Bematech
2019-05-24 10:58 - 2017-06-17 16:25 - 000000000 ____D C:\Program Files (x86)\Mozilla Firefox
2019-05-24 10:57 - 2017-06-19 09:28 - 000000000 ____D C:\Program Files (x86)\No-IP
2019-05-24 07:30 - 2018-12-03 07:12 - 000002988 _____ C:\WINDOWS\System32\Tasks\CCleaner Update
2019-05-24 07:30 - 2018-11-28 17:19 - 000003482 _____ C:\WINDOWS\System32\Tasks\Adobe Acrobat Update Task
2019-05-24 07:30 - 2018-11-05 08:04 - 000002220 _____ C:\WINDOWS\System32\Tasks\CCleanerSkipUAC
2019-05-24 07:30 - 2018-06-15 07:53 - 000000000 ____D C:\WINDOWS\System32\Tasks\Avast Software
2019-05-23 19:11 - 2018-07-27 16:57 - 000000000 ____D C:\Users\Servidor\AppData\Local\AVAST Software
2019-05-23 19:03 - 2018-04-11 20:38 - 000000000 ____D C:\WINDOWS\AppReadiness
2019-05-23 18:54 - 2017-06-17 16:19 - 000000000 __RHD C:\Users\Public\AccountPictures
2019-05-23 16:46 - 2018-06-01 20:16 - 000000000 ____D C:\Users\ReportServer$SQLEXPRESS
2019-05-23 16:45 - 2018-06-01 20:16 - 000000000 ____D C:\Users\MSSQLFDLauncher$SQLEXPRESS
2019-05-23 13:59 - 2017-06-17 19:19 - 000000000 ____D C:\Users\Servidor\Documents\SQL Server Management Studio
2019-05-22 16:23 - 2017-06-17 16:19 - 000000000 ____D C:\Users\Servidor\AppData\Local\Packages
2019-05-19 07:31 - 2018-04-11 20:38 - 000000000 ____D C:\WINDOWS\LiveKernelReports
2019-05-17 07:30 - 2018-06-01 20:16 - 000000000 ____D C:\Users\MSSQL$SQLEXPRESS
2019-05-16 16:02 - 2017-06-17 16:28 - 000002457 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk
2019-05-07 09:18 - 2018-09-17 13:56 - 000001347 _____ C:\Users\Public\Desktop\INOVAFARMA.lnk
2019-05-07 09:16 - 2018-03-12 16:30 - 000000000 ____D C:\Users\Servidor\AppData\Roaming\Precisao Sistemas
==================== SigCheck ===============================
(Não há correção automática para arquivos que não passaram na verificação.)
==================== Fim de FRST.txt ============================