Resultado do exame da Farbar Recovery Scan Tool (FRST) (x64) Versão: 01-01-2017
Executado por Projetista (administrador) em VANIA-PC (03-01-2017 19:08:24)
Executando a partir de C:\Users\Projetista\Desktop
Perfis Carregados: Projetista (Perfis Disponíveis: Vania & Érica & Projetista)
Platform: Windows 7 Home Premium (X64) Idioma: Português (Brasil)
Internet Explorer Versão 8 (Navegador padrão não detectado!)
Modo da Inicialização: Normal
Tutorial da Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processos (Whitelisted) =================

(Se uma entrada for incluída na fixlist, o processo será fechado. O arquivo não será movido.)

(GAS Tecnologia) C:\Program Files (x86)\GbPlugin\gbpsv.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe
(FirebirdSQL Project) C:\Program Files (x86)\Firebird\Firebird_2_0\bin\fbguard.exe
(Microsoft Corporation) C:\Windows\SysWOW64\svchost.exe
(Microsoft Corporation) C:\Program Files (x86)\Common Files\microsoft shared\VS7DEBUG\MDM.EXE
(@ByELDI) C:\Program Files\KMSpico\Service_KMS.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
(VIA Technologies, Inc.) C:\Windows\System32\ViakaraokeSrv.exe
(FirebirdSQL Project) C:\Program Files (x86)\Firebird\Firebird_2_0\bin\fbserver.exe
(GAS Tecnologia) C:\Program Files (x86)\GbPlugin\gbpsv.exe
(VIA) C:\Program Files (x86)\VIA\VIAudioi\VDeck\VDeck.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\avastui.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\ClickToRun\AppVShNotify.exe
(Promob) C:\Program Files\Promob\Promob Downloader\Program\bin\PromobDownloader.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office\root\Office16\OUTLOOK.EXE

==================== Registro (Whitelisted) ====================

(Se uma entrada for incluída na fixlist, o ítem no Registro será restaurado para o padrão ou removido. O arquivo não será movido.)

HKLM-x32\...\Run: [HDAudDeck] => C:\Program Files (x86)\VIA\VIAudioi\VDeck\VDeck.exe [5015040 2012-02-09] (VIA)
HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [9080768 2016-11-16] (AVAST Software)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
Winlogon\Notify\ GbPluginBb-x32: C:\Program Files (x86)\GbPlugin\gbieh.dll [X]
Winlogon\Notify\ GbPluginCef: C:\Program Files (x86)\GbPlugin\gbiehCef.dll [2015-09-01] (Caixa Economica Federal)
HKU\S-1-5-21-2617628462-4178555043-3089760133-2063\...\Policies\system: [LogonHoursAction] 2
HKU\S-1-5-21-2617628462-4178555043-3089760133-2063\...\Policies\system: [DontDisplayLogonHoursWarnings] 1
ShellExecuteHooks-x32: GbPluginObj Class - {E37CB5F0-51F5-4395-A808-5FA49E399F83} - C:\Program Files (x86)\GbPlugin\gbieh.dll -> Nenhum Arquivo
ShellExecuteHooks-x32: GbPluginObj Class - {E37CB5F0-51F5-4395-A808-5FA49E399003} - C:\Program Files (x86)\GbPlugin\gbiehcef.dll [1867432 2015-09-01] (Caixa Economica Federal)
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2016-09-10] (AVAST Software)
ShellIconOverlayIdentifiers: [AutoCAD Digital Signatures Icon Overlay Handler] -> {36A21736-36C2-4C11-8ACB-D4136F2B57BD} => C:\Windows\system32\AcSignIcon.dll [2015-02-06] (Autodesk, Inc.)
ShellIconOverlayIdentifiers: [BaiduAntivirusIconLock] -> {0A93904A-BB1E-4a0c-9753-B57B9AE272CC} => C:\Program Files (x86)\Baidu Security\Baidu Antivirus\BavShx64.dll -> Nenhum Arquivo
ShellIconOverlayIdentifiers-x32: ["DropboxExt1"] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} =>  -> Nenhum Arquivo
ShellIconOverlayIdentifiers-x32: ["DropboxExt2"] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} =>  -> Nenhum Arquivo
ShellIconOverlayIdentifiers-x32: ["DropboxExt3"] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} =>  -> Nenhum Arquivo
ShellIconOverlayIdentifiers-x32: ["DropboxExt4"] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} =>  -> Nenhum Arquivo
ShellIconOverlayIdentifiers-x32: ["DropboxExt5"] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} =>  -> Nenhum Arquivo
ShellIconOverlayIdentifiers-x32: ["DropboxExt6"] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} =>  -> Nenhum Arquivo
ShellIconOverlayIdentifiers-x32: ["DropboxExt7"] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} =>  -> Nenhum Arquivo
ShellIconOverlayIdentifiers-x32: ["DropboxExt8"] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} =>  -> Nenhum Arquivo
Startup: C:\Users\Érica\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Enviar para o OneNote.lnk [2016-12-13]
ShortcutTarget: Enviar para o OneNote.lnk -> C:\Program Files\Microsoft Office\root\Office16\ONENOTEM.EXE (Microsoft Corporation)
GroupPolicy\User: Restrição <======= ATENÇÃO
GroupPolicyUsers\S-1-5-21-2617628462-4178555043-3089760133-2063\User: Restrição <======= ATENÇÃO
CHR HKLM\SOFTWARE\Policies\Google: Restrição <======= ATENÇÃO

==================== Internet (Whitelisted) ====================

(Se um ítem for incluído na fixlist, sendo um ítem do Registro, será removido ou restaurado para o padrão.)

Tcpip\Parameters: [DhcpNameServer] 8.8.8.8 8.8.4.4 8.8.8.8
Tcpip\..\Interfaces\{43876039-6A34-482D-A5C4-00A3AE974F42}: [DhcpNameServer] 8.8.8.8 8.8.4.4 8.8.8.8
Tcpip\..\Interfaces\{6C256F92-3134-4528-B435-9ADC47845BF0}: [DhcpNameServer] 8.8.8.8 8.8.4.4 8.8.8.8
Tcpip\..\Interfaces\{ACAA4882-1C69-409F-AC55-1269B5F65F73}: [DhcpNameServer] 8.8.8.8 8.8.4.4 8.8.8.8

Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://br.hao123.com/?tn=incore_pay_hp_ex01_hao123_br
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://br.hao123.com/?tn=sdkw_inner_hp_01_hao123_br
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.sweet-page.com/web/?type=ds&ts=1394671242&from=cor&uid=ST500DM002-1BD142_S2A1R2BCXXXXS2A1R2BC&q={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.sweet-page.com/web/?type=ds&ts=1394671242&from=cor&uid=ST500DM002-1BD142_S2A1R2BCXXXXS2A1R2BC&q={searchTerms}
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.sweet-page.com/?type=hp&ts=1394671242&from=cor&uid=ST500DM002-1BD142_S2A1R2BCXXXXS2A1R2BC
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.sweet-page.com/?type=hp&ts=1394671242&from=cor&uid=ST500DM002-1BD142_S2A1R2BCXXXXS2A1R2BC
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.sweet-page.com/web/?type=ds&ts=1394671242&from=cor&uid=ST500DM002-1BD142_S2A1R2BCXXXXS2A1R2BC&q={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.sweet-page.com/web/?type=ds&ts=1394671242&from=cor&uid=ST500DM002-1BD142_S2A1R2BCXXXXS2A1R2BC&q={searchTerms}
SearchScopes: HKLM -> DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.sweet-page.com/web/?type=ds&ts=1394671242&from=cor&uid=ST500DM002-1BD142_S2A1R2BCXXXXS2A1R2BC&q={searchTerms}
SearchScopes: HKLM -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.sweet-page.com/web/?type=ds&ts=1394671242&from=cor&uid=ST500DM002-1BD142_S2A1R2BCXXXXS2A1R2BC&q={searchTerms}
SearchScopes: HKLM -> {460C3D19-B3D4-4964-A550-77D263B0CCCB} URL = hxxp://vosteran.com/results.php?f=4&q={searchTerms}&a=vst_bxi01_15_03_ch&cd=2XzuyEtN2Y1L1QzutDzzyCtDyC0EyDyE0C0C0DyC0EtCtC0CtN0D0Tzu0StCtCtDyBtN1L2XzutAtFyBtFtCtFtBtN1L1CzutCyEtBzytDyD1V1ByEtN1L1G1B1V1N2Y1L1Qzu2SyB0D0DyC0CyC0A0DtG0B0AtB0EtGzztA0CtBtG0ByEtC0BtGyCtDyCyDzzyEyDtAtDtC0ByC2QtN1M1F1B2Z1V1N2Y1L1Qzu2SyE0Bzz0DyCyC0DzytGtC0EzzyCtGyEtCtD0AtGzz0DtC0FtGyByC0C0D0FtDyBtCtB0CyD0A2Q&cr=1262532027&ir=
SearchScopes: HKLM-x32 -> DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.sweet-page.com/web/?type=ds&ts=1394671242&from=cor&uid=ST500DM002-1BD142_S2A1R2BCXXXXS2A1R2BC&q={searchTerms}
SearchScopes: HKLM-x32 -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.sweet-page.com/web/?type=ds&ts=1394671242&from=cor&uid=ST500DM002-1BD142_S2A1R2BCXXXXS2A1R2BC&q={searchTerms}
SearchScopes: HKLM-x32 -> {BFFED5CA-8BDF-47CC-AED0-23F4E6D77732} URL = hxxp://search.iminent.com/?appId=8A7E0D37-411B-4F61-BA56-6E2BF7608CFA&ref=toolbox&q={searchTerms}
BHO: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\root\Office16\OCHelper.dll [2017-01-03] (Microsoft Corporation)
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2016-10-24] (AVAST Software)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\root\Office16\URLREDIR.DLL [2017-01-03] (Microsoft Corporation)
BHO: Microsoft OneDrive for Business Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office\root\Office16\GROOVEEX.DLL [2017-01-03] (Microsoft Corporation)
BHO-x32: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\OCHelper.dll [2017-01-03] (Microsoft Corporation)
BHO-x32: Sem Nome -> {84FF7BD6-B47F-46F8-9130-01B2696B36CB} -> Nenhum Arquivo
BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2016-10-24] (AVAST Software)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\URLREDIR.DLL [2017-01-03] (Microsoft Corporation)
BHO-x32: GbIehObj Class -> {C41A1C0E-EA6C-11D4-B1B8-444553540000} -> C:\Program Files (x86)\GbPlugin\gbieh.dll => Nenhum Arquivo
BHO-x32: GbIehObj Class -> {C41A1C0E-EA6C-11D4-B1B8-444553540003} -> C:\Program Files (x86)\GbPlugin\gbiehcef.dll [2015-09-01] (Caixa Economica Federal)
BHO-x32: Microsoft OneDrive for Business Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\GROOVEEX.DLL [2017-01-03] (Microsoft Corporation)
Toolbar: HKLM - Sem Nome - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} -  Nenhum Arquivo
Handler: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2017-01-03] (Microsoft Corporation)
Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2017-01-03] (Microsoft Corporation)
Handler: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2017-01-03] (Microsoft Corporation)
Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2017-01-03] (Microsoft Corporation)
Handler: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2017-01-03] (Microsoft Corporation)
Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2017-01-03] (Microsoft Corporation)
Handler: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2017-01-03] (Microsoft Corporation)
Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2017-01-03] (Microsoft Corporation)
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} -  Nenhum Arquivo
Filter: deflate - {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\Windows\system32\urlmon.dll [2009-07-13] (Microsoft Corporation)
Filter-x32: deflate - {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\Windows\SysWOW64\urlmon.dll [2009-07-13] (Microsoft Corporation)
Filter: gzip - {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\Windows\system32\urlmon.dll [2009-07-13] (Microsoft Corporation)
Filter-x32: gzip - {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\Windows\SysWOW64\urlmon.dll [2009-07-13] (Microsoft Corporation)
StartMenuInternet: IEXPLORE.EXE - iexplore.exe

FireFox:
========
FF HKLM\...\Firefox\Extensions: [{21EAF666-26B3-4a3c-ABD0-CA2F5A326744}] - C:\Program Files\V-bates\Firefox => não encontrado (a)
FF HKLM\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: (Avast Online Security) - C:\Program Files\AVAST Software\Avast\WebRep\FF [2016-09-10]
FF HKLM\...\Firefox\Extensions: [sp@avast.com] - C:\Program Files\AVAST Software\Avast\SafePrice\FF
FF Extension: (Avast SafePrice) - C:\Program Files\AVAST Software\Avast\SafePrice\FF [2016-09-10]
FF HKLM-x32\...\Firefox\Extensions: [speedanalysis04@SpeedAnalysis.com] - C:\Users\Vania\AppData\Roaming\Mozilla\Extensions\speedanalysis04@SpeedAnalysis.com
FF Extension: (Speed Analysis 4) - C:\Users\Vania\AppData\Roaming\Mozilla\Extensions\speedanalysis04@SpeedAnalysis.com [2013-10-05] [não assinado]
FF HKLM-x32\...\Firefox\Extensions: [{21EAF666-26B3-4a3c-ABD0-CA2F5A326744}] - C:\Program Files\V-bates\Firefox => não encontrado (a)
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF HKLM-x32\...\Firefox\Extensions: [sp@avast.com] - C:\Program Files\AVAST Software\Avast\SafePrice\FF
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\Office16\NPSPWRAP.DLL [2017-01-03] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2017-01-03] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\NPSPWRAP.DLL [2017-01-03] (Microsoft Corporation)
FF Plugin-x32: @staging.google.com/globalUpdate Update;version=10 -> C:\Program Files (x86)\globalUpdate\Update\1.3.25.0\npglobalupdateUpdate4.dll [Nenhum Arquivo]
FF Plugin-x32: @staging.google.com/globalUpdate Update;version=4 -> C:\Program Files (x86)\globalUpdate\Update\1.3.25.0\npglobalupdateUpdate4.dll [Nenhum Arquivo]
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.32.7\npGoogleUpdate3.dll [2016-12-19] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.32.7\npGoogleUpdate3.dll [2016-12-19] (Google Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2016-09-30] (Adobe Systems Inc.)

Chrome: 
=======
CHR HKLM\...\Chrome\Extension: [dmibjfmphcpfoacbchialfobiohmhged] - C:\Users\Vania\AppData\Roaming\PRINTA~1\printatreeChrome.crx <não encontrado (a)>
CHR HKLM\...\Chrome\Extension: [oilkkkefbalmbfppgjmgjoefbclebkce] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [dmibjfmphcpfoacbchialfobiohmhged] - C:\Users\Vania\AppData\Roaming\PRINTA~1\printatreeChrome.crx <não encontrado (a)>
CHR HKLM-x32\...\Chrome\Extension: [eofcbnmajmjmplflapaojjnihcjkigck] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx <não encontrado (a)>
CHR HKLM-x32\...\Chrome\Extension: [ifohbjbgfchkkfhphahclmkpgejiplfo] - C:\Users\Vania\AppData\Local\Google\Chrome\User Data\Default\Extensions\newtab.crx <não encontrado (a)>
CHR HKLM-x32\...\Chrome\Extension: [oilkkkefbalmbfppgjmgjoefbclebkce] - hxxps://clients2.google.com/service/update2/crx

==================== Serviços (Whitelisted) ====================

(Se uma entrada for incluída na fixlist, será removida do Registro. O arquivo não será movido, a menos que seja colocado separadamente.)

R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [197128 2016-09-10] (AVAST Software)
R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [3698888 2016-12-04] (Microsoft Corporation)
R2 FirebirdGuardianDefaultInstance; C:\Program Files (x86)\Firebird\Firebird_2_0\bin\fbguard.exe [81920 2007-09-03] (FirebirdSQL Project) [Arquivo não assinado]
R3 FirebirdServerDefaultInstance; C:\Program Files (x86)\Firebird\Firebird_2_0\bin\fbserver.exe [2002944 2007-09-03] (FirebirdSQL Project) [Arquivo não assinado]
R2 GbpSv; C:\Program Files (x86)\GbPlugin\gbpsv.exe [587576 2015-08-13] (GAS Tecnologia)
R3 hpqcxs08; C:\Program Files (x86)\HP\Digital Imaging\bin\hpqcxs08.dll [249344 2009-09-20] (Hewlett-Packard Co.) [Arquivo não assinado]
R2 hpqddsvc; C:\Program Files (x86)\HP\Digital Imaging\bin\hpqddsvc.dll [133120 2009-09-20] (Hewlett-Packard Co.) [Arquivo não assinado]
R2 HPSLPSVC; C:\Program Files (x86)\HP\Digital Imaging\bin\HPSLPSVC64.DLL [1039360 2010-10-22] (Hewlett-Packard Co.) [Arquivo não assinado]
R2 Net Driver HPZ12; C:\Windows\system32\HPZinw12.dll [71680 2010-08-06] (Hewlett-Packard) [Arquivo não assinado]
R2 Pml Driver HPZ12; C:\Windows\system32\HPZipm12.dll [89600 2010-08-06] (Hewlett-Packard) [Arquivo não assinado]
R2 Service KMSELDI; C:\Program Files\KMSpico\Service_KMS.exe [737984 2015-08-30] (@ByELDI) [Arquivo não assinado]
R2 TeamViewer; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [6887696 2015-11-30] (TeamViewer GmbH)
R2 VIAKaraokeService; C:\Windows\system32\viakaraokesrv.exe [27760 2011-11-11] (VIA Technologies, Inc.)
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2009-07-13] (Microsoft Corporation)
S2 BrsHelper; C:\PROGRA~2\YTDOWN~1\BROWSE~2.EXE [X]
S2 CodeMeter.exe; C:\Program Files (x86)\CodeMeter\Runtime\bin\CodeMeter.exe [X]
S2 globalUpdate; C:\Program Files (x86)\globalUpdate\Update\globalupdate.exe /svc [X] <==== ATENÇÃO
S3 globalUpdatem; C:\Program Files (x86)\globalUpdate\Update\globalupdate.exe /medsvc [X] <==== ATENÇÃO
S4 TheDesktopWeatherService; C:\Program Files (x86)\WeatherTool\1.2.2.10180\WeatherService.exe [X]

===================== Drivers (Whitelisted) ======================

(Se uma entrada for incluída na fixlist, será removida do Registro. O arquivo não será movido, a menos que seja colocado separadamente.)

R1 360FltOEM; C:\Windows\System32\DRIVERS\360FltOEM.sys [288688 2013-08-30] (360.cn)
S3 AndNetDiag; C:\Windows\System32\DRIVERS\lgandnetdiag64.sys [29184 2012-07-03] (LG Electronics Inc.)
S3 ANDNetModem; C:\Windows\System32\DRIVERS\lgandnetmodem64.sys [36352 2012-07-03] (LG Electronics Inc.)
S3 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [37656 2016-09-10] (AVAST Software)
R1 aswKbd; C:\Windows\system32\drivers\aswKbd.sys [37144 2016-09-10] (AVAST Software)
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [108816 2016-09-10] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [103064 2016-09-10] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [74544 2016-09-10] (AVAST Software)
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [969184 2016-09-13] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [513632 2016-09-23] (AVAST Software)
R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [163416 2016-09-10] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [293352 2016-10-13] (AVAST Software)
S3 BprotectEx; C:\Windows\System32\drivers\BprotectEx.sys [76096 2013-08-08] (Baidu, Inc.)
R3 GBPRCM; C:\Program Files (x86)\GbPlugin\gbprcm64.sys [29912 2015-09-03] (GAS Tecnologia)
S2 Proteq; C:\Windows\SysWow64\Drivers\Proteq.sys [7598 2012-06-25] (PROTEQ) [Arquivo não assinado]
R3 RtlWlanu; C:\Windows\System32\DRIVERS\rtwlanu.sys [3741960 2015-06-18] (Realtek Semiconductor Corporation                           )
R3 Warsaw_PP; C:\Program Files (x86)\GbPlugin\wsftprp64.sys [24792 2015-09-03] (GAS Tecnologia LTDA)
S1 ccnfd_1_10_0_6; system32\drivers\ccnfd_1_10_0_6.sys [X]
S1 gbpddfac; system32\drivers\gbpddfac64.sys [X]
S3 PCFApiUtil; \??\C:\Program Files (x86)\Baidu Security\PC Faster\3.7.0.0\PCFApiUtil64.sys [X]
S2 sbmntr; \??\C:\PROGRA~2\YTDOWN~1\sbmntr.sys [X]
S2 SPDRIVER_1.42.1.2182; \??\C:\Program Files (x86)\ShopperPro\JSDriver\1.42.1.2182\jsdrv.sys [X]

==================== NetSvcs (Whitelisted) ===================

(Se uma entrada for incluída na fixlist, será removida do Registro. O arquivo não será movido, a menos que seja colocado separadamente.)


==================== Três Meses Criados arquivos e pastas ========

(Se uma entrada for incluída na fixlist, o arquivo/pasta será movido.)

2017-01-03 19:08 - 2017-01-03 19:08 - 00021511 _____ C:\Users\Projetista\Desktop\FRST.txt
2017-01-03 19:07 - 2017-01-03 19:08 - 00000000 ____D C:\FRST
2017-01-03 19:07 - 2017-01-03 19:07 - 02418176 _____ (Farbar) C:\Users\Projetista\Desktop\FRST64.exe
2017-01-03 19:06 - 2017-01-03 19:07 - 02418176 _____ (Farbar) C:\Users\Projetista\Downloads\FRST64.exe
2017-01-03 19:04 - 2017-01-03 19:04 - 00629006 _____ C:\Users\Projetista\Downloads\Windows6.1-KB2999226-x86.msu
2017-01-03 19:03 - 2017-01-03 19:03 - 01034556 _____ C:\Users\Projetista\Downloads\Windows6.1-KB2999226-x64 (3).msu
2017-01-03 18:55 - 2017-01-03 18:55 - 01034556 _____ C:\Users\Projetista\Downloads\Windows6.1-KB2999226-x64 (2).msu
2017-01-03 18:55 - 2017-01-03 18:55 - 01034556 _____ C:\Users\Projetista\Downloads\Windows6.1-KB2999226-x64 (1).msu
2017-01-03 18:52 - 2017-01-03 18:52 - 01034556 _____ C:\Users\Projetista\Downloads\Windows6.1-KB2999226-x64.msu
2017-01-03 17:48 - 2017-01-03 17:48 - 00000000 ____D C:\Program Files\Common Files\DESIGNER
2017-01-03 16:42 - 2016-09-20 17:29 - 00018982 _____ C:\Users\Projetista\Desktop\CONTROLE DE ENTREGA.odt
2017-01-03 13:03 - 2017-01-03 13:19 - 15068056 _____ (Microsoft Corporation) C:\Users\Érica\Downloads\vc_redist.x64.exe
2017-01-03 08:21 - 2017-01-03 08:25 - 00000000 ____D C:\Users\Projetista\Desktop\Projetos William
2017-01-03 08:15 - 2017-01-03 08:15 - 00347068 _____ C:\Users\Projetista\Desktop\Willian_03-01-17_(1001).xlsm
2017-01-03 07:49 - 2017-01-03 07:49 - 00000000 ___RD C:\Users\Projetista\OneDrive
2017-01-03 07:41 - 2017-01-03 17:49 - 00000000 ____D C:\Users\Todos os Usuários\regid.1991-06.com.microsoft
2017-01-03 07:41 - 2017-01-03 17:49 - 00000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2017-01-03 07:20 - 2017-01-03 07:22 - 15068056 _____ (Microsoft Corporation) C:\Users\Projetista\Downloads\vc_redist.x64.exe
2017-01-03 07:18 - 2017-01-03 07:18 - 00342025 _____ C:\Users\Projetista\Downloads\Cliente_data_(código).xlsm
2017-01-03 07:13 - 2017-01-03 07:13 - 00001476 _____ C:\Users\Projetista\Desktop\Promob Downloader.lnk
2017-01-03 07:12 - 2017-01-03 07:13 - 11525176 _____ () C:\Users\Projetista\Downloads\downloader.exe
2017-01-02 07:53 - 2017-01-02 09:42 - 00001476 _____ C:\Users\Érica\Desktop\Promob Downloader.lnk
2017-01-02 07:46 - 2017-01-02 07:51 - 11525176 _____ () C:\Users\Érica\Downloads\downloader.exe
2016-12-30 16:02 - 2016-12-30 16:02 - 00000000 ____D C:\Users\Projetista\AppData\LocalLow\Temp
2016-12-30 15:49 - 2016-12-30 15:49 - 00000000 ____D C:\Users\Projetista\AppData\Roaming\Autodesk
2016-12-30 15:49 - 2016-12-30 15:49 - 00000000 ____D C:\Users\Projetista\AppData\Local\Autodesk
2016-12-30 15:01 - 2016-12-30 15:01 - 00000660 __RSH C:\Users\Vania\ntuser.pol
2016-12-30 15:00 - 2016-12-30 15:00 - 00000000 ____D C:\Users\Projetista\AppData\Roaming\SketchUp
2016-12-30 14:55 - 2017-01-03 17:43 - 01748882 ____H C:\Users\Projetista\AppData\Local\IconCache.db
2016-12-30 09:45 - 2016-12-30 09:45 - 00000000 ____D C:\Users\Projetista\AppData\Roaming\Adobe
2016-12-30 09:45 - 2016-12-30 09:45 - 00000000 ____D C:\Users\Projetista\AppData\LocalLow\Adobe
2016-12-30 09:45 - 2016-12-30 09:45 - 00000000 ____D C:\Users\Projetista\AppData\Local\CEF
2016-12-30 09:45 - 2016-12-30 09:45 - 00000000 ____D C:\Users\Projetista\AppData\Local\Adobe
2016-12-30 09:44 - 2017-01-03 08:07 - 00000000 ____D C:\Users\Projetista\AppData\Local\CutePDF Writer
2016-12-30 09:44 - 2016-12-30 17:00 - 00000000 ____D C:\Users\Projetista\Desktop\Clientes
2016-12-30 09:41 - 2016-12-30 09:41 - 00141888 _____ C:\Users\Projetista\AppData\Local\GDIPFONTCACHEV1.DAT
2016-12-30 09:41 - 2016-12-30 09:41 - 00000000 ____D C:\Users\Projetista\AppData\Local\IsolatedStorage
2016-12-30 09:40 - 2016-12-30 09:40 - 00000000 ____D C:\Users\Projetista\AppData\Roaming\WinRAR
2016-12-30 09:39 - 2016-12-30 09:39 - 00000000 ____D C:\Users\Projetista\Documents\Modelos Personalizados do Office
2016-12-30 09:39 - 2016-12-30 09:39 - 00000000 ____D C:\Users\Projetista\Application Data
2016-12-30 09:35 - 2016-12-30 09:35 - 00000000 ___SD C:\Users\Projetista\AppData\LocalLow\Microsoft
2016-12-30 09:35 - 2016-12-30 09:35 - 00000000 ____D C:\Users\Projetista\AppData\Roaming\AVAST Software
2016-12-30 09:34 - 2017-01-03 19:09 - 00000000 ____D C:\Users\Projetista\AppData\Local\Temp
2016-12-30 09:34 - 2017-01-03 19:08 - 01310720 ___SH C:\Users\Projetista\NTUSER.DAT
2016-12-30 09:34 - 2017-01-03 19:08 - 00262144 ___SH C:\Users\Projetista\ntuser.dat.LOG1
2016-12-30 09:34 - 2017-01-03 19:08 - 00000000 ___RD C:\Users\Projetista\Desktop
2016-12-30 09:34 - 2017-01-03 19:07 - 00000000 ___RD C:\Users\Projetista\Downloads
2016-12-30 09:34 - 2017-01-03 08:17 - 00000000 ____D C:\Users\Projetista\AppData\Local\Microsoft
2016-12-30 09:34 - 2017-01-03 07:49 - 00002181 _____ C:\Users\Projetista\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Microsoft OneDrive.lnk
2016-12-30 09:34 - 2017-01-03 07:49 - 00000000 ____D C:\Users\Projetista
2016-12-30 09:34 - 2017-01-03 06:53 - 00001072 __RSH C:\Users\Projetista\ntuser.pol
2016-12-30 09:34 - 2017-01-02 07:31 - 00000000 ____D C:\Users\Projetista\AppData\Local
2016-12-30 09:34 - 2016-12-30 16:02 - 00000000 ____D C:\Users\Projetista\AppData\LocalLow
2016-12-30 09:34 - 2016-12-30 15:49 - 00000000 ____D C:\Users\Projetista\AppData\Roaming
2016-12-30 09:34 - 2016-12-30 14:55 - 00524288 ___SH C:\Users\Projetista\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000002.regtrans-ms
2016-12-30 09:34 - 2016-12-30 14:55 - 00524288 ___SH C:\Users\Projetista\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000001.regtrans-ms
2016-12-30 09:34 - 2016-12-30 14:55 - 00065536 ___SH C:\Users\Projetista\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TM.blf
2016-12-30 09:34 - 2016-12-30 14:43 - 00000000 ___SD C:\Users\Projetista\AppData\Roaming\Microsoft
2016-12-30 09:34 - 2016-12-30 09:39 - 00000000 ___RD C:\Users\Projetista\Documents
2016-12-30 09:34 - 2016-12-30 09:34 - 00002287 _____ C:\Users\Projetista\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2016-12-30 09:34 - 2016-12-30 09:34 - 00001423 _____ C:\Users\Projetista\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2016-12-30 09:34 - 2016-12-30 09:34 - 00001349 _____ C:\Users\Projetista\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer (64-bit).lnk
2016-12-30 09:34 - 2016-12-30 09:34 - 00000476 ___SH C:\Users\Projetista\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\desktop.ini
2016-12-30 09:34 - 2016-12-30 09:34 - 00000402 ___SH C:\Users\Projetista\Documents\desktop.ini
2016-12-30 09:34 - 2016-12-30 09:34 - 00000282 ___SH C:\Users\Projetista\Downloads\desktop.ini
2016-12-30 09:34 - 2016-12-30 09:34 - 00000282 ___SH C:\Users\Projetista\Desktop\desktop.ini
2016-12-30 09:34 - 2016-12-30 09:34 - 00000174 ___SH C:\Users\Projetista\AppData\Roaming\Microsoft\Windows\Start Menu\desktop.ini
2016-12-30 09:34 - 2016-12-30 09:34 - 00000020 ___SH C:\Users\Projetista\ntuser.ini
2016-12-30 09:34 - 2016-12-30 09:34 - 00000000 _SHDL C:\Users\Projetista\SendTo
2016-12-30 09:34 - 2016-12-30 09:34 - 00000000 _SHDL C:\Users\Projetista\Recent
2016-12-30 09:34 - 2016-12-30 09:34 - 00000000 _SHDL C:\Users\Projetista\Modelos
2016-12-30 09:34 - 2016-12-30 09:34 - 00000000 _SHDL C:\Users\Projetista\Meus documentos
2016-12-30 09:34 - 2016-12-30 09:34 - 00000000 _SHDL C:\Users\Projetista\Menu Iniciar
2016-12-30 09:34 - 2016-12-30 09:34 - 00000000 _SHDL C:\Users\Projetista\Documents\Minhas músicas
2016-12-30 09:34 - 2016-12-30 09:34 - 00000000 _SHDL C:\Users\Projetista\Documents\Minhas imagens
2016-12-30 09:34 - 2016-12-30 09:34 - 00000000 _SHDL C:\Users\Projetista\Documents\Meus vídeos
2016-12-30 09:34 - 2016-12-30 09:34 - 00000000 _SHDL C:\Users\Projetista\Dados de aplicativos
2016-12-30 09:34 - 2016-12-30 09:34 - 00000000 _SHDL C:\Users\Projetista\Cookies
2016-12-30 09:34 - 2016-12-30 09:34 - 00000000 _SHDL C:\Users\Projetista\Configurações locais
2016-12-30 09:34 - 2016-12-30 09:34 - 00000000 _SHDL C:\Users\Projetista\AppData\Roaming\Microsoft\Windows\Start Menu\Programas
2016-12-30 09:34 - 2016-12-30 09:34 - 00000000 _SHDL C:\Users\Projetista\AppData\Local\Temporary Internet Files
2016-12-30 09:34 - 2016-12-30 09:34 - 00000000 _SHDL C:\Users\Projetista\AppData\Local\Histórico
2016-12-30 09:34 - 2016-12-30 09:34 - 00000000 _SHDL C:\Users\Projetista\AppData\Local\Dados de aplicativos
2016-12-30 09:34 - 2016-12-30 09:34 - 00000000 _SHDL C:\Users\Projetista\Ambiente de rede
2016-12-30 09:34 - 2016-12-30 09:34 - 00000000 _SHDL C:\Users\Projetista\Ambiente de impressão
2016-12-30 09:34 - 2016-12-30 09:34 - 00000000 ___SH C:\Users\Projetista\ntuser.dat.LOG2
2016-12-30 09:34 - 2016-12-30 09:34 - 00000000 ___RD C:\Users\Projetista\Videos
2016-12-30 09:34 - 2016-12-30 09:34 - 00000000 ___RD C:\Users\Projetista\Searches
2016-12-30 09:34 - 2016-12-30 09:34 - 00000000 ___RD C:\Users\Projetista\Saved Games
2016-12-30 09:34 - 2016-12-30 09:34 - 00000000 ___RD C:\Users\Projetista\Pictures
2016-12-30 09:34 - 2016-12-30 09:34 - 00000000 ___RD C:\Users\Projetista\Music
2016-12-30 09:34 - 2016-12-30 09:34 - 00000000 ___RD C:\Users\Projetista\Links
2016-12-30 09:34 - 2016-12-30 09:34 - 00000000 ___RD C:\Users\Projetista\Favorites
2016-12-30 09:34 - 2016-12-30 09:34 - 00000000 ___RD C:\Users\Projetista\Contacts
2016-12-30 09:34 - 2016-12-30 09:34 - 00000000 ___RD C:\Users\Projetista\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2016-12-30 09:34 - 2016-12-30 09:34 - 00000000 ___RD C:\Users\Projetista\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2016-12-30 09:34 - 2016-12-30 09:34 - 00000000 ___RD C:\Users\Projetista\AppData\Roaming\Microsoft\Windows\Start Menu\Programs
2016-12-30 09:34 - 2016-12-30 09:34 - 00000000 ___HD C:\Users\Projetista\AppData
2016-12-30 09:34 - 2016-12-30 09:34 - 00000000 ____D C:\Users\Projetista\AppData\Roaming\Identities
2016-12-30 09:34 - 2016-12-30 09:34 - 00000000 ____D C:\Users\Projetista\AppData\Local\Google
2016-12-30 09:34 - 2009-07-14 04:44 - 00000000 ____D C:\Users\Projetista\AppData\Roaming\Media Center Programs
2016-12-30 09:34 - 2009-07-14 01:54 - 00000000 ___RD C:\Users\Projetista\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2016-12-30 09:34 - 2009-07-14 01:49 - 00000000 ___RD C:\Users\Projetista\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2016-12-30 09:33 - 2016-12-30 09:33 - 00000660 __RSH C:\Users\Érica\ntuser.pol
2016-12-30 08:03 - 2016-12-30 08:04 - 00342992 _____ C:\Users\Érica\Desktop\Cliente_data.xlsm
2016-12-30 07:49 - 2016-12-30 07:53 - 00000000 ____D C:\Windows\system32\MRT
2016-12-30 07:49 - 2016-12-30 07:49 - 135632432 ____C (Microsoft Corporation) C:\Windows\system32\MRT.exe
2016-12-30 07:49 - 2016-12-30 07:49 - 00000000 ____D C:\Windows\system32\EventProviders
2016-12-28 09:38 - 2016-12-28 09:38 - 00000000 ____D C:\Users\Vania\Application Data
2016-12-28 09:27 - 2016-12-28 09:28 - 00344372 _____ C:\Users\Vania\Downloads\Cliente_data (1).xlsm
2016-12-28 09:26 - 2016-12-28 09:26 - 00002166 _____ C:\Users\Vania\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Microsoft OneDrive.lnk
2016-12-28 09:26 - 2016-12-28 09:26 - 00000000 ___RD C:\Users\Vania\OneDrive
2016-12-28 09:14 - 2016-12-28 09:14 - 00344372 _____ C:\Users\Vania\Downloads\Cliente_data.xlsm
2016-12-22 14:43 - 2016-12-22 14:45 - 11501573 _____ C:\Users\Érica\Downloads\cozinha (1).skp
2016-12-22 14:27 - 2016-12-22 14:30 - 11501573 _____ C:\Users\Érica\Downloads\cozinha.skp
2016-12-20 14:19 - 2016-12-20 14:19 - 00000000 ____D C:\Users\Érica\AppData\Roaming\LibreOffice
2016-12-20 14:16 - 2016-12-20 14:16 - 00530432 _____ C:\Users\Érica\Downloads\Cópia de PLANILHA MM SAO JOSE - COZINHA TIA JO rev2 (1).xls
2016-12-20 14:14 - 2016-12-20 16:55 - 00464384 _____ C:\Users\Érica\Downloads\Cópia de PLANILHA MM SAO JOSE - COZINHA TIA JO rev2.xls
2016-12-20 13:19 - 2016-12-20 13:20 - 00523264 _____ C:\Users\Érica\Downloads\PLANILHA MM SAO JOSE - COZINHA TIA JO.xls
2016-12-20 12:50 - 2016-12-20 13:02 - 17514025 _____ C:\Users\Érica\Downloads\escritório (4).zip
2016-12-20 10:13 - 2016-12-20 10:22 - 17514025 _____ C:\Users\Érica\Downloads\escritório (3).zip
2016-12-20 07:55 - 2016-12-20 07:55 - 00065751 _____ C:\Users\Érica\Downloads\9.jpg
2016-12-20 07:52 - 2016-12-20 07:52 - 00060335 _____ C:\Users\Érica\Downloads\8.jpg
2016-12-19 17:08 - 2016-12-19 17:08 - 00283906 _____ C:\Windows\msxml4-KB973688-enu.LOG
2016-12-19 14:22 - 2016-12-19 11:52 - 41212283 _____ C:\Users\Érica\Downloads\escritório.skp
2016-12-19 13:32 - 2016-12-19 13:43 - 11436032 _____ C:\Users\Érica\Downloads\escritório (2).zip
2016-12-19 13:14 - 2016-12-19 13:14 - 00000000 ____D C:\Users\Érica\AppData\Roaming\SketchUp
2016-12-19 13:10 - 2016-12-19 11:52 - 41212283 _____ C:\Users\Érica\Desktop\escritório.skp
2016-12-19 12:58 - 2016-12-19 13:08 - 05008978 _____ C:\Users\Érica\Downloads\escritório (1).zip
2016-12-19 12:57 - 2016-12-19 13:08 - 17514025 _____ C:\Users\Érica\Downloads\escritório.zip
2016-12-19 10:07 - 2016-12-19 10:07 - 00274349 _____ C:\Users\Érica\Downloads\Zane cosmeticos.pdf
2016-12-19 10:01 - 2016-12-19 10:01 - 00000000 ____D C:\Users\Érica\AppData\Roaming\Macromedia
2016-12-19 09:35 - 2016-12-19 09:35 - 00003630 _____ C:\Users\Érica\Downloads\api-ms-win-crt-runtime-l1-1-0.zip
2016-12-19 09:29 - 2016-12-19 09:29 - 01034556 _____ C:\Users\Érica\Downloads\Windows6.1-KB2999226-x64.msu
2016-12-15 15:58 - 2016-12-15 16:02 - 00369520 _____ C:\Users\Érica\Desktop\QUARTO01.jpg
2016-12-15 15:32 - 2016-12-19 10:01 - 00000000 ____D C:\Users\Érica\AppData\Roaming\Adobe
2016-12-15 15:32 - 2016-12-15 15:32 - 00000000 ____D C:\Users\Érica\AppData\LocalLow\Adobe
2016-12-15 15:32 - 2016-12-15 15:32 - 00000000 ____D C:\Users\Érica\AppData\Local\Adobe
2016-12-13 09:47 - 2016-12-13 09:47 - 00000000 ____D C:\Users\Érica\Documents\Blocos de Anotações do OneNote
2016-12-13 09:46 - 2016-12-13 09:47 - 00000000 ____D C:\Program Files\KMSpico
2016-12-13 09:46 - 2016-12-13 09:46 - 00003364 _____ C:\Windows\System32\Tasks\AutoPico Daily Restart
2016-12-13 09:46 - 2016-12-13 09:46 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\KMSpico
2016-12-13 09:46 - 2010-12-05 23:16 - 00090112 _____ (Vestris Inc.) C:\Windows\system32\Vestris.ResourceLib.dll
2016-12-13 09:23 - 2016-12-08 15:07 - 01804512 _____ C:\Windows\GABRIOLA.tt2
2016-12-13 09:05 - 2016-12-13 09:05 - 00000000 ____D C:\Users\Érica\AppData\Local\Programs
2016-12-08 17:53 - 2017-01-03 17:43 - 02655606 ____H C:\Users\Érica\AppData\Local\IconCache.db
2016-12-08 15:21 - 2016-12-15 07:34 - 00002166 _____ C:\Users\Érica\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Microsoft OneDrive.lnk
2016-12-08 15:21 - 2016-12-15 07:34 - 00000000 ___RD C:\Users\Érica\OneDrive
2016-12-08 15:21 - 2016-12-08 15:21 - 00002110 _____ C:\Users\Usuário Padrão\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Microsoft OneDrive.lnk
2016-12-08 15:21 - 2016-12-08 15:21 - 00002110 _____ C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Microsoft OneDrive.lnk
2016-12-08 15:21 - 2016-12-08 15:21 - 00002110 _____ C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Microsoft OneDrive.lnk
2016-12-08 15:21 - 2016-12-08 15:21 - 00000000 ____D C:\Users\Todos os Usuários\Microsoft OneDrive
2016-12-08 15:21 - 2016-12-08 15:21 - 00000000 ____D C:\ProgramData\Microsoft OneDrive
2016-12-08 15:21 - 2016-12-08 15:21 - 00000000 ____D C:\Program Files (x86)\Microsoft OneDrive
2016-12-08 15:11 - 2016-12-08 15:11 - 00002419 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OneDrive for Business.lnk
2016-12-08 15:11 - 2016-12-08 15:11 - 00002377 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype for Business 2016.lnk
2016-12-08 15:11 - 2016-12-08 15:11 - 00002366 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Word 2016.lnk
2016-12-08 15:11 - 2016-12-08 15:11 - 00002331 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Access 2016.lnk
2016-12-08 15:11 - 2016-12-08 15:11 - 00002315 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PowerPoint 2016.lnk
2016-12-08 15:11 - 2016-12-08 15:11 - 00002312 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Excel 2016.lnk
2016-12-08 15:11 - 2016-12-08 15:11 - 00002302 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OneNote 2016.lnk
2016-12-08 15:11 - 2016-12-08 15:11 - 00002298 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Outlook 2016.lnk
2016-12-08 15:11 - 2016-12-08 15:11 - 00002282 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Publisher 2016.lnk
2016-12-08 15:11 - 2016-12-08 15:11 - 00000000 ____D C:\Users\Érica\AppData\Local\CEF
2016-12-08 15:11 - 2016-12-08 15:11 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Ferramentas do Microsoft Office 2016
2016-12-08 15:09 - 2016-12-08 15:09 - 00000000 ____D C:\Windows\System32\Tasks\OfficeSoftwareProtectionPlatform
2016-12-08 15:07 - 2017-01-03 17:46 - 00000000 ____D C:\Program Files\Microsoft Office
2016-12-08 15:07 - 2016-12-08 15:07 - 01804512 _____ C:\WindowsGABRIOLA.tt2
2016-12-08 15:07 - 2016-12-08 15:07 - 00000000 ____D C:\Program Files\Microsoft Office 15
2016-12-08 15:05 - 2016-12-08 15:06 - 00000000 ____D C:\Users\Érica\Desktop\Érica
2016-12-08 15:02 - 2017-01-02 07:41 - 00141888 _____ C:\Users\Érica\AppData\Local\GDIPFONTCACHEV1.DAT
2016-12-08 15:02 - 2016-12-19 09:58 - 00000000 ___SD C:\Users\Érica\AppData\LocalLow\Microsoft
2016-12-08 15:02 - 2016-12-08 15:02 - 00000000 ____D C:\Users\Érica\AppData\Local\IsolatedStorage
2016-12-08 15:01 - 2016-12-13 09:48 - 00000000 ___RD C:\Users\Érica\Searches
2016-12-08 15:01 - 2016-12-13 09:47 - 00000000 ___RD C:\Users\Érica\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2016-12-08 15:01 - 2016-12-08 15:01 - 00001423 _____ C:\Users\Érica\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2016-12-08 15:01 - 2016-12-08 15:01 - 00001349 _____ C:\Users\Érica\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer (64-bit).lnk
2016-12-08 15:01 - 2016-12-08 15:01 - 00000476 ___SH C:\Users\Érica\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\desktop.ini
2016-12-08 15:01 - 2016-12-08 15:01 - 00000402 ___SH C:\Users\Érica\Documents\desktop.ini
2016-12-08 15:01 - 2016-12-08 15:01 - 00000282 ___SH C:\Users\Érica\Downloads\desktop.ini
2016-12-08 15:01 - 2016-12-08 15:01 - 00000282 ___SH C:\Users\Érica\Desktop\desktop.ini
2016-12-08 15:01 - 2016-12-08 15:01 - 00000174 ___SH C:\Users\Érica\AppData\Roaming\Microsoft\Windows\Start Menu\desktop.ini
2016-12-08 15:01 - 2016-12-08 15:01 - 00000000 ___RD C:\Users\Érica\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2016-12-08 15:01 - 2016-12-08 15:01 - 00000000 ____D C:\Users\Érica\AppData\Roaming\WinRAR
2016-12-08 15:01 - 2016-12-08 15:01 - 00000000 ____D C:\Users\Érica\AppData\Roaming\AVAST Software
2016-12-08 15:00 - 2017-01-03 17:43 - 01835008 ___SH C:\Users\Érica\NTUSER.DAT
2016-12-08 15:00 - 2017-01-03 17:43 - 00262144 ___SH C:\Users\Érica\ntuser.dat.LOG1
2016-12-08 15:00 - 2017-01-03 16:28 - 00000000 ____D C:\Users\Érica\AppData\Local\Temp
2016-12-08 15:00 - 2017-01-03 13:19 - 00000000 ___RD C:\Users\Érica\Downloads
2016-12-08 15:00 - 2017-01-03 12:59 - 00000000 ___RD C:\Users\Érica\Desktop
2016-12-08 15:00 - 2016-12-30 09:33 - 00000000 ____D C:\Users\Érica
2016-12-08 15:00 - 2016-12-23 07:12 - 00000000 ____D C:\Users\Érica\AppData\Local\Google
2016-12-08 15:00 - 2016-12-23 06:51 - 00000000 ____D C:\Users\Érica\AppData\Local
2016-12-08 15:00 - 2016-12-20 14:19 - 00000000 ____D C:\Users\Érica\AppData\Roaming
2016-12-08 15:00 - 2016-12-19 09:19 - 00000000 ___RD C:\Users\Érica\Pictures
2016-12-08 15:00 - 2016-12-19 09:19 - 00000000 ____D C:\Users\Érica\AppData\Local\Microsoft
2016-12-08 15:00 - 2016-12-16 14:53 - 00000000 ___SD C:\Users\Érica\AppData\Roaming\Microsoft
2016-12-08 15:00 - 2016-12-15 15:32 - 00000000 ____D C:\Users\Érica\AppData\LocalLow
2016-12-08 15:00 - 2016-12-13 09:47 - 00000000 ___RD C:\Users\Érica\Documents
2016-12-08 15:00 - 2016-12-08 17:53 - 00524288 ___SH C:\Users\Érica\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000002.regtrans-ms
2016-12-08 15:00 - 2016-12-08 17:53 - 00524288 ___SH C:\Users\Érica\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000001.regtrans-ms
2016-12-08 15:00 - 2016-12-08 17:53 - 00065536 ___SH C:\Users\Érica\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TM.blf
2016-12-08 15:00 - 2016-12-08 15:21 - 00000000 ___RD C:\Users\Érica\Links
2016-12-08 15:00 - 2016-12-08 15:21 - 00000000 ___RD C:\Users\Érica\AppData\Roaming\Microsoft\Windows\Start Menu\Programs
2016-12-08 15:00 - 2016-12-08 15:01 - 00000000 ___RD C:\Users\Érica\Videos
2016-12-08 15:00 - 2016-12-08 15:01 - 00000000 ___RD C:\Users\Érica\Saved Games
2016-12-08 15:00 - 2016-12-08 15:01 - 00000000 ___RD C:\Users\Érica\Music
2016-12-08 15:00 - 2016-12-08 15:01 - 00000000 ___RD C:\Users\Érica\Favorites
2016-12-08 15:00 - 2016-12-08 15:01 - 00000000 ___RD C:\Users\Érica\Contacts
2016-12-08 15:00 - 2016-12-08 15:00 - 00002287 _____ C:\Users\Érica\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2016-12-08 15:00 - 2016-12-08 15:00 - 00000020 ___SH C:\Users\Érica\ntuser.ini
2016-12-08 15:00 - 2016-12-08 15:00 - 00000000 _SHDL C:\Users\Érica\SendTo
2016-12-08 15:00 - 2016-12-08 15:00 - 00000000 _SHDL C:\Users\Érica\Recent
2016-12-08 15:00 - 2016-12-08 15:00 - 00000000 _SHDL C:\Users\Érica\Modelos
2016-12-08 15:00 - 2016-12-08 15:00 - 00000000 _SHDL C:\Users\Érica\Meus documentos
2016-12-08 15:00 - 2016-12-08 15:00 - 00000000 _SHDL C:\Users\Érica\Menu Iniciar
2016-12-08 15:00 - 2016-12-08 15:00 - 00000000 _SHDL C:\Users\Érica\Documents\Minhas músicas
2016-12-08 15:00 - 2016-12-08 15:00 - 00000000 _SHDL C:\Users\Érica\Documents\Minhas imagens
2016-12-08 15:00 - 2016-12-08 15:00 - 00000000 _SHDL C:\Users\Érica\Documents\Meus vídeos
2016-12-08 15:00 - 2016-12-08 15:00 - 00000000 _SHDL C:\Users\Érica\Dados de aplicativos
2016-12-08 15:00 - 2016-12-08 15:00 - 00000000 _SHDL C:\Users\Érica\Cookies
2016-12-08 15:00 - 2016-12-08 15:00 - 00000000 _SHDL C:\Users\Érica\Configurações locais
2016-12-08 15:00 - 2016-12-08 15:00 - 00000000 _SHDL C:\Users\Érica\AppData\Roaming\Microsoft\Windows\Start Menu\Programas
2016-12-08 15:00 - 2016-12-08 15:00 - 00000000 _SHDL C:\Users\Érica\AppData\Local\Temporary Internet Files
2016-12-08 15:00 - 2016-12-08 15:00 - 00000000 _SHDL C:\Users\Érica\AppData\Local\Histórico
2016-12-08 15:00 - 2016-12-08 15:00 - 00000000 _SHDL C:\Users\Érica\AppData\Local\Dados de aplicativos
2016-12-08 15:00 - 2016-12-08 15:00 - 00000000 _SHDL C:\Users\Érica\Ambiente de rede
2016-12-08 15:00 - 2016-12-08 15:00 - 00000000 _SHDL C:\Users\Érica\Ambiente de impressão
2016-12-08 15:00 - 2016-12-08 15:00 - 00000000 ___SH C:\Users\Érica\ntuser.dat.LOG2
2016-12-08 15:00 - 2016-12-08 15:00 - 00000000 ___HD C:\Users\Érica\AppData
2016-12-08 15:00 - 2016-12-08 15:00 - 00000000 ____D C:\Users\Érica\AppData\Roaming\Identities
2016-12-08 15:00 - 2009-07-14 04:44 - 00000000 ____D C:\Users\Érica\AppData\Roaming\Media Center Programs
2016-12-08 15:00 - 2009-07-14 01:54 - 00000000 ___RD C:\Users\Érica\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2016-12-08 15:00 - 2009-07-14 01:49 - 00000000 ___RD C:\Users\Érica\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2016-12-08 10:13 - 2016-12-08 10:13 - 00000000 ___SD C:\Users\Convidado\AppData\LocalLow\Microsoft
2016-12-08 10:08 - 2016-12-08 10:08 - 00152872 _____ C:\Users\Convidado\AppData\Local\GDIPFONTCACHEV1.DAT
2016-12-06 14:59 - 2016-12-06 14:59 - 00000000 ____D C:\Users\Convidado\AppData\Roaming\Trimble Connect for SketchUp
2016-12-06 14:59 - 2016-12-06 14:59 - 00000000 ____D C:\Users\Convidado\AppData\Roaming\SketchUp
2016-12-06 13:26 - 2016-12-06 13:26 - 00000000 ____D C:\Users\Convidado\AppData\Local\CEF
2016-12-06 10:48 - 2016-12-30 09:02 - 01154114 ____H C:\Users\Convidado\AppData\Local\IconCache.db
2016-12-06 10:42 - 2016-12-06 10:42 - 00000000 ____D C:\Users\Convidado\AppData\Roaming\AVAST Software
2016-12-06 10:41 - 2016-12-30 09:02 - 01048576 ___SH C:\Users\Convidado\NTUSER.DAT
2016-12-06 10:41 - 2016-12-30 09:02 - 00262144 ___SH C:\Users\Convidado\ntuser.dat.LOG1
2016-12-06 10:41 - 2016-12-30 09:02 - 00000000 ____D C:\Users\Convidado\AppData\Local\Temp
2016-12-06 10:41 - 2016-12-30 08:59 - 00000000 ___SD C:\Users\Convidado\AppData\Roaming\Microsoft
2016-12-06 10:41 - 2016-12-30 08:57 - 00000000 ____D C:\Users\Convidado\AppData\Local\Microsoft
2016-12-06 10:41 - 2016-12-08 14:56 - 00000000 ____D C:\Users\Convidado\AppData\Local\Google
2016-12-06 10:41 - 2016-12-08 10:13 - 00000000 ____D C:\Users\Convidado\AppData\LocalLow
2016-12-06 10:41 - 2016-12-08 10:08 - 00000000 ____D C:\Users\Convidado\AppData\Local
2016-12-06 10:41 - 2016-12-06 14:59 - 00000000 ____D C:\Users\Convidado\AppData\Roaming
2016-12-06 10:41 - 2016-12-06 10:48 - 00524288 ___SH C:\Users\Convidado\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000002.regtrans-ms
2016-12-06 10:41 - 2016-12-06 10:48 - 00524288 ___SH C:\Users\Convidado\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000001.regtrans-ms
2016-12-06 10:41 - 2016-12-06 10:48 - 00065536 ___SH C:\Users\Convidado\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TM.blf
2016-12-06 10:41 - 2016-12-06 10:42 - 00002283 _____ C:\Users\Convidado\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2016-12-06 10:41 - 2016-12-06 10:42 - 00002253 _____ C:\Users\Convidado\Desktop\Google Chrome.lnk
2016-12-06 10:41 - 2016-12-06 10:41 - 00001419 _____ C:\Users\Convidado\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2016-12-06 10:41 - 2016-12-06 10:41 - 00001345 _____ C:\Users\Convidado\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer (64-bit).lnk
2016-12-06 10:41 - 2016-12-06 10:41 - 00000476 ___SH C:\Users\Convidado\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\desktop.ini
2016-12-06 10:41 - 2016-12-06 10:41 - 00000402 ___SH C:\Users\Convidado\Documents\desktop.ini
2016-12-06 10:41 - 2016-12-06 10:41 - 00000282 ___SH C:\Users\Convidado\Downloads\desktop.ini
2016-12-06 10:41 - 2016-12-06 10:41 - 00000282 ___SH C:\Users\Convidado\Desktop\desktop.ini
2016-12-06 10:41 - 2016-12-06 10:41 - 00000174 ___SH C:\Users\Convidado\AppData\Roaming\Microsoft\Windows\Start Menu\desktop.ini
2016-12-06 10:41 - 2016-12-06 10:41 - 00000020 ___SH C:\Users\Convidado\ntuser.ini
2016-12-06 10:41 - 2016-12-06 10:41 - 00000000 _SHDL C:\Users\Convidado\SendTo
2016-12-06 10:41 - 2016-12-06 10:41 - 00000000 _SHDL C:\Users\Convidado\Recent
2016-12-06 10:41 - 2016-12-06 10:41 - 00000000 _SHDL C:\Users\Convidado\Modelos
2016-12-06 10:41 - 2016-12-06 10:41 - 00000000 _SHDL C:\Users\Convidado\Meus documentos
2016-12-06 10:41 - 2016-12-06 10:41 - 00000000 _SHDL C:\Users\Convidado\Menu Iniciar
2016-12-06 10:41 - 2016-12-06 10:41 - 00000000 _SHDL C:\Users\Convidado\Documents\Minhas músicas
2016-12-06 10:41 - 2016-12-06 10:41 - 00000000 _SHDL C:\Users\Convidado\Documents\Minhas imagens
2016-12-06 10:41 - 2016-12-06 10:41 - 00000000 _SHDL C:\Users\Convidado\Documents\Meus vídeos
2016-12-06 10:41 - 2016-12-06 10:41 - 00000000 _SHDL C:\Users\Convidado\Dados de aplicativos
2016-12-06 10:41 - 2016-12-06 10:41 - 00000000 _SHDL C:\Users\Convidado\Cookies
2016-12-06 10:41 - 2016-12-06 10:41 - 00000000 _SHDL C:\Users\Convidado\Configurações locais
2016-12-06 10:41 - 2016-12-06 10:41 - 00000000 _SHDL C:\Users\Convidado\AppData\Roaming\Microsoft\Windows\Start Menu\Programas
2016-12-06 10:41 - 2016-12-06 10:41 - 00000000 _SHDL C:\Users\Convidado\AppData\Local\Temporary Internet Files
2016-12-06 10:41 - 2016-12-06 10:41 - 00000000 _SHDL C:\Users\Convidado\AppData\Local\Histórico
2016-12-06 10:41 - 2016-12-06 10:41 - 00000000 _SHDL C:\Users\Convidado\AppData\Local\Dados de aplicativos
2016-12-06 10:41 - 2016-12-06 10:41 - 00000000 _SHDL C:\Users\Convidado\Ambiente de rede
2016-12-06 10:41 - 2016-12-06 10:41 - 00000000 _SHDL C:\Users\Convidado\Ambiente de impressão
2016-12-06 10:41 - 2016-12-06 10:41 - 00000000 ___SH C:\Users\Convidado\ntuser.dat.LOG2
2016-12-06 10:41 - 2016-12-06 10:41 - 00000000 ___RD C:\Users\Convidado\Videos
2016-12-06 10:41 - 2016-12-06 10:41 - 00000000 ___RD C:\Users\Convidado\Searches
2016-12-06 10:41 - 2016-12-06 10:41 - 00000000 ___RD C:\Users\Convidado\Saved Games
2016-12-06 10:41 - 2016-12-06 10:41 - 00000000 ___RD C:\Users\Convidado\Pictures
2016-12-06 10:41 - 2016-12-06 10:41 - 00000000 ___RD C:\Users\Convidado\Music
2016-12-06 10:41 - 2016-12-06 10:41 - 00000000 ___RD C:\Users\Convidado\Links
2016-12-06 10:41 - 2016-12-06 10:41 - 00000000 ___RD C:\Users\Convidado\Favorites
2016-12-06 10:41 - 2016-12-06 10:41 - 00000000 ___RD C:\Users\Convidado\Downloads
2016-12-06 10:41 - 2016-12-06 10:41 - 00000000 ___RD C:\Users\Convidado\Documents
2016-12-06 10:41 - 2016-12-06 10:41 - 00000000 ___RD C:\Users\Convidado\Desktop
2016-12-06 10:41 - 2016-12-06 10:41 - 00000000 ___RD C:\Users\Convidado\Contacts
2016-12-06 10:41 - 2016-12-06 10:41 - 00000000 ___RD C:\Users\Convidado\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2016-12-06 10:41 - 2016-12-06 10:41 - 00000000 ___RD C:\Users\Convidado\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2016-12-06 10:41 - 2016-12-06 10:41 - 00000000 ___RD C:\Users\Convidado\AppData\Roaming\Microsoft\Windows\Start Menu\Programs
2016-12-06 10:41 - 2016-12-06 10:41 - 00000000 ___HD C:\Users\Convidado\AppData
2016-12-06 10:41 - 2016-12-06 10:41 - 00000000 ____D C:\Users\Convidado\AppData\Roaming\Identities
2016-12-06 10:41 - 2016-12-06 10:41 - 00000000 ____D C:\Users\Convidado
2016-12-06 10:41 - 2009-07-14 04:44 - 00000000 ____D C:\Users\Convidado\AppData\Roaming\Media Center Programs
2016-12-06 10:41 - 2009-07-14 01:54 - 00000000 ___RD C:\Users\Convidado\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2016-12-06 10:41 - 2009-07-14 01:49 - 00000000 ___RD C:\Users\Convidado\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2016-12-02 10:28 - 2016-12-02 10:28 - 00670208 _____ C:\Users\Vania\Downloads\PLANILHA MM SAO JOSE1 (Recuperado).xls
2016-12-01 18:07 - 2016-12-01 18:07 - 00000000 ____D C:\Users\Vania\Desktop\Paulo - Maringá
2016-12-01 18:01 - 2016-12-01 18:02 - 00117431 _____ C:\Users\Vania\Downloads\Orçamento Mercado Maringá (3).pdf
2016-12-01 17:54 - 2016-12-01 17:55 - 00115974 _____ C:\Users\Vania\Downloads\Orçamento Mercado Maringá (2).pdf
2016-12-01 17:38 - 2016-12-01 17:38 - 00115684 _____ C:\Users\Vania\Downloads\Orçamento Mercado Maringá (1) (1).pdf
2016-12-01 17:23 - 2016-12-01 17:23 - 00010245 _____ C:\Users\Vania\Downloads\orçamento sao jose 2 (1).xlsx
2016-12-01 17:22 - 2016-12-01 17:23 - 00010245 _____ C:\Users\Vania\Downloads\orçamento sao jose 2.xlsx
2016-12-01 17:19 - 2016-12-01 17:19 - 00124326 _____ C:\Users\Vania\Downloads\Orçamento Mercado Maringá (1).docx
2016-12-01 17:15 - 2016-12-01 17:16 - 00292213 _____ C:\Users\Vania\Downloads\Orçamento Mercado Maringá (1).pdf
2016-12-01 17:13 - 2016-12-01 17:13 - 00292213 _____ C:\Users\Vania\Downloads\Orçamento Mercado Maringá.pdf
2016-11-30 14:46 - 2016-11-30 15:11 - 00098816 _____ C:\Users\Vania\Desktop\Vendas Pendentes.xls
2016-11-30 14:45 - 2016-11-30 14:45 - 00042971 _____ C:\Users\Vania\Downloads\Vendas Pendentes.xlsx
2016-11-30 14:45 - 2016-11-30 14:45 - 00042971 _____ C:\Users\Vania\Downloads\Vendas Pendentes (1).xlsx
2016-11-30 09:29 - 2016-11-30 09:29 - 00223150 _____ C:\Users\Vania\Desktop\cascata.skp
2016-11-28 12:58 - 2016-11-28 12:58 - 00543744 _____ C:\Users\Vania\Downloads\(Nov)_Eliete_Posto Antonini.xls
2016-11-22 07:35 - 2016-11-22 07:35 - 00069107 _____ C:\Users\Vania\Downloads\IMG-20161118-WA0012_resized.jpg
2016-11-21 15:32 - 2016-11-21 15:32 - 00112246 _____ C:\Users\Vania\Downloads\IMG-20161111-WA0000.jpg
2016-11-21 13:19 - 2016-11-21 13:19 - 00010966 _____ C:\Users\Vania\Desktop\PLANILHA VEICULOS.ods
2016-11-11 15:39 - 2016-11-11 15:39 - 00109994 _____ C:\Users\Vania\Downloads\sr_cutlist_v4.1.12.rbz
2016-11-10 15:19 - 2016-11-10 15:19 - 00000000 ____D C:\Users\Vania\Desktop\Balanço
2016-11-10 14:42 - 2016-11-10 14:43 - 03159241 _____ C:\Users\Vania\Downloads\3ª ALTERAÇÃO DO CONTRATO SOCIAL.pdf
2016-11-09 16:45 - 2016-06-09 09:31 - 00309344 _____ (UltraVnc) C:\Users\Vania\Desktop\Suporte.exe
2016-11-04 09:49 - 2016-11-04 09:49 - 00000000 ____D C:\Program Files\Common Files\EPSON
2016-11-04 09:48 - 2016-11-04 09:49 - 00000000 ____D C:\Users\Todos os Usuários\EPSON
2016-11-04 09:48 - 2016-11-04 09:49 - 00000000 ____D C:\ProgramData\EPSON
2016-11-04 09:48 - 2016-11-04 09:48 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\EPSON
2016-11-03 16:06 - 2016-11-03 16:06 - 00014733 _____ C:\Users\Vania\Desktop\vitor metalurgica.ods
2016-11-03 13:37 - 2016-11-03 13:37 - 05938559 _____ C:\Users\Vania\Downloads\PROJETO.pdf
2016-10-31 14:57 - 2016-10-31 14:57 - 06065312 _____ (Microsoft Corporation) C:\Windows\system32\mfc140u.dll
2016-10-31 14:57 - 2016-10-31 14:57 - 06036128 _____ (Microsoft Corporation) C:\Windows\system32\mfc140.dll
2016-10-31 14:57 - 2016-10-31 14:57 - 00628384 _____ (Microsoft Corporation) C:\Windows\system32\msvcp140.dll
2016-10-31 14:57 - 2016-10-31 14:57 - 00541344 _____ (Microsoft Corporation) C:\Windows\system32\vcamp140.dll
2016-10-31 14:57 - 2016-10-31 14:57 - 00391344 _____ (Microsoft Corporation) C:\Windows\system32\vccorlib140.dll
2016-10-31 14:57 - 2016-10-31 14:57 - 00332968 _____ (Microsoft Corporation) C:\Windows\system32\concrt140.dll
2016-10-31 14:57 - 2016-10-31 14:57 - 00183968 _____ (Microsoft Corporation) C:\Windows\system32\vcomp140.dll
2016-10-31 14:57 - 2016-10-31 14:57 - 00105632 _____ (Microsoft Corporation) C:\Windows\system32\mfcm140u.dll
2016-10-31 14:57 - 2016-10-31 14:57 - 00105120 _____ (Microsoft Corporation) C:\Windows\system32\mfcm140.dll
2016-10-31 14:57 - 2016-10-31 14:57 - 00087216 _____ (Microsoft Corporation) C:\Windows\system32\vcruntime140.dll
2016-10-31 14:57 - 2016-10-31 14:57 - 00075432 _____ (Microsoft Corporation) C:\Windows\system32\mfc140fra.dll
2016-10-31 14:57 - 2016-10-31 14:57 - 00075432 _____ (Microsoft Corporation) C:\Windows\system32\mfc140deu.dll
2016-10-31 14:57 - 2016-10-31 14:57 - 00074408 _____ (Microsoft Corporation) C:\Windows\system32\mfc140esn.dll
2016-10-31 14:57 - 2016-10-31 14:57 - 00073384 _____ (Microsoft Corporation) C:\Windows\system32\mfc140ita.dll
2016-10-31 14:57 - 2016-10-31 14:57 - 00071336 _____ (Microsoft Corporation) C:\Windows\system32\mfc140rus.dll
2016-10-31 14:57 - 2016-10-31 14:57 - 00065704 _____ (Microsoft Corporation) C:\Windows\system32\mfc140enu.dll
2016-10-31 14:57 - 2016-10-31 14:57 - 00054952 _____ (Microsoft Corporation) C:\Windows\system32\mfc140jpn.dll
2016-10-31 14:57 - 2016-10-31 14:57 - 00053928 _____ (Microsoft Corporation) C:\Windows\system32\mfc140kor.dll
2016-10-31 14:57 - 2016-10-31 14:57 - 00046760 _____ (Microsoft Corporation) C:\Windows\system32\mfc140cht.dll
2016-10-31 14:57 - 2016-10-31 14:57 - 00046760 _____ (Microsoft Corporation) C:\Windows\system32\mfc140chs.dll
2016-10-30 09:28 - 2016-10-30 09:28 - 00085744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vcruntime140.dll
2016-10-30 09:24 - 2016-10-30 09:24 - 00271104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vccorlib140.dll
2016-10-30 09:23 - 2016-10-30 09:23 - 00443632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvcp140.dll
2016-10-30 09:23 - 2016-10-30 09:23 - 00244504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\concrt140.dll
2016-10-27 10:00 - 2016-10-27 10:00 - 00070297 _____ C:\Users\Vania\Downloads\EDITAL DO PREGÃO 133 - PROC 372 - MÓVEIS PLANEJADOS - ASSISTÊNCIA SOCIAL.rar
2016-10-27 08:07 - 2016-10-27 08:22 - 222531584 _____ C:\Users\Vania\Downloads\LibreOffice_5.1.6_Win_x86.msi
2016-10-25 15:32 - 2016-10-25 15:33 - 05016889 _____ C:\Users\Vania\Downloads\Office_2013_Completo_em_Portugues_BR_32_e_64_Bits_PH_Downs.rar
2016-10-14 08:30 - 2016-10-14 08:30 - 00000000 ___SD C:\Windows\SysWOW64\Microsoft
2016-10-08 11:06 - 2016-10-08 11:30 - 00017329 _____ C:\Users\Vania\Desktop\MAPEAMENTO HIDRÁULICO E ELÉTRICO.odt

==================== Três Meses Modificados arquivos e pastas ========

(Se uma entrada for incluída na fixlist, o arquivo/pasta será movido.)

2017-01-03 19:06 - 2014-04-18 21:36 - 00000282 _____ C:\Windows\Tasks\FF Watcher {26887BCD-13C6-4606-B3B8-0C5B8C9873CF}.job
2017-01-03 19:02 - 2009-07-14 01:45 - 00042032 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2017-01-03 19:02 - 2009-07-14 01:45 - 00042032 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2017-01-03 19:00 - 2015-06-08 22:56 - 00000618 _____ C:\Windows\Tasks\{3B7FD029-D932-411b-AF15-C96CF8EF0C18}{19F8DB95-4D78-4ddb-AC71-C610654FE37F}.job
2017-01-03 18:52 - 2015-06-16 19:52 - 00000430 _____ C:\Windows\Tasks\ToolsUpdatePlatform_ScheduledTask.job
2017-01-03 18:50 - 2015-07-25 22:50 - 00005504 _____ C:\Windows\Tasks\8dceb70f-b9b4-4063-89b8-763eb8660a68-6.job
2017-01-03 18:50 - 2015-07-25 22:50 - 00003124 _____ C:\Windows\Tasks\8dceb70f-b9b4-4063-89b8-763eb8660a68-1-6.job
2017-01-03 18:36 - 2015-07-25 22:36 - 00005502 _____ C:\Windows\Tasks\3684a602-0673-47a5-9b45-32a46950946c-6.job
2017-01-03 18:36 - 2015-07-25 22:36 - 00003122 _____ C:\Windows\Tasks\3684a602-0673-47a5-9b45-32a46950946c-1-6.job
2017-01-03 17:48 - 2009-07-14 00:20 - 00000000 ____D C:\Program Files\Common Files\Microsoft Shared
2017-01-03 17:44 - 2015-10-10 12:07 - 00000000 ____D C:\Program Files (x86)\GbPlugin
2017-01-03 17:44 - 2015-07-25 22:50 - 00005504 _____ C:\Windows\Tasks\8dceb70f-b9b4-4063-89b8-763eb8660a68-7.job
2017-01-03 17:44 - 2015-07-25 22:50 - 00005170 _____ C:\Windows\Tasks\8dceb70f-b9b4-4063-89b8-763eb8660a68-11.job
2017-01-03 17:44 - 2015-07-25 22:50 - 00003124 _____ C:\Windows\Tasks\8dceb70f-b9b4-4063-89b8-763eb8660a68-1-7.job
2017-01-03 17:44 - 2015-07-25 22:50 - 00002432 _____ C:\Windows\Tasks\8dceb70f-b9b4-4063-89b8-763eb8660a68-5_user.job
2017-01-03 17:44 - 2015-07-25 22:50 - 00002432 _____ C:\Windows\Tasks\8dceb70f-b9b4-4063-89b8-763eb8660a68-5.job
2017-01-03 17:44 - 2015-07-25 22:36 - 00005502 _____ C:\Windows\Tasks\3684a602-0673-47a5-9b45-32a46950946c-7.job
2017-01-03 17:44 - 2015-07-25 22:36 - 00005168 _____ C:\Windows\Tasks\3684a602-0673-47a5-9b45-32a46950946c-11.job
2017-01-03 17:44 - 2015-07-25 22:36 - 00003122 _____ C:\Windows\Tasks\3684a602-0673-47a5-9b45-32a46950946c-1-7.job
2017-01-03 17:44 - 2015-07-25 22:36 - 00002430 _____ C:\Windows\Tasks\3684a602-0673-47a5-9b45-32a46950946c-5_user.job
2017-01-03 17:44 - 2015-07-25 22:36 - 00002430 _____ C:\Windows\Tasks\3684a602-0673-47a5-9b45-32a46950946c-5.job
2017-01-03 17:44 - 2015-07-25 22:36 - 00000914 _____ C:\Windows\Tasks\globalUpdateUpdateTaskMachineUA.job
2017-01-03 17:44 - 2015-07-25 22:36 - 00000910 _____ C:\Windows\Tasks\globalUpdateUpdateTaskMachineCore.job
2017-01-03 17:44 - 2015-07-25 22:35 - 00004142 _____ C:\Windows\Tasks\3684a602-0673-47a5-9b45-32a46950946c-3.job
2017-01-03 17:44 - 2015-06-08 22:56 - 00000658 _____ C:\Windows\Tasks\{2A6A6C0A-6DF1-4478-807F-2FF9BF46B935}.job
2017-01-03 17:44 - 2009-07-14 02:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2017-01-03 07:23 - 2015-11-23 09:16 - 00000000 ____D C:\Users\Todos os Usuários\Package Cache
2017-01-03 07:23 - 2015-11-23 09:16 - 00000000 ____D C:\ProgramData\Package Cache
2017-01-03 07:13 - 2015-10-22 09:05 - 00000000 ____D C:\Program Files\Promob
2017-01-03 06:56 - 2009-07-20 19:27 - 00707382 _____ C:\Windows\system32\prfh0416.dat
2017-01-03 06:56 - 2009-07-20 19:27 - 00147628 _____ C:\Windows\system32\prfc0416.dat
2017-01-03 06:56 - 2009-07-14 02:13 - 01640890 _____ C:\Windows\system32\PerfStringBackup.INI
2017-01-03 06:56 - 2009-07-14 00:20 - 00000000 ____D C:\Windows\inf
2017-01-02 07:53 - 2015-10-22 10:23 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Promob
2016-12-30 15:49 - 2016-03-23 10:53 - 00002165 _____ C:\Users\Public\Desktop\DWG TrueView 2016 - English.lnk
2016-12-30 15:07 - 2015-10-19 21:00 - 02902680 ____H C:\Users\Vania\AppData\Local\IconCache.db
2016-12-30 15:07 - 2013-08-31 18:08 - 06815744 ___SH C:\Users\Vania\ntuser.dat
2016-12-30 15:07 - 2013-08-31 18:08 - 00262144 ___SH C:\Users\Vania\ntuser.dat.LOG1
2016-12-30 15:07 - 2013-08-31 18:08 - 00000000 ____D C:\Users\Vania\AppData\Local\Temp
2016-12-30 15:06 - 2013-08-31 18:08 - 00000000 ___RD C:\Users\Vania\Desktop
2016-12-30 15:04 - 2009-07-14 00:20 - 00000000 ___RD C:\Users\Public\Pictures
2016-12-30 15:02 - 2013-08-31 18:08 - 00000000 ___SD C:\Users\Vania\AppData\Roaming\Microsoft
2016-12-30 15:02 - 2013-08-31 18:08 - 00000000 ____D C:\Users\Vania\AppData\Local\Microsoft
2016-12-30 15:01 - 2015-10-20 07:28 - 00141888 _____ C:\Users\Vania\AppData\Local\GDIPFONTCACHEV1.DAT
2016-12-30 15:01 - 2013-08-31 18:08 - 00000000 ____D C:\Users\Vania
2016-12-30 14:56 - 2016-08-29 09:28 - 00000000 ____D C:\Users\Todos os Usuários\Maxima Software
2016-12-30 14:56 - 2016-08-29 09:28 - 00000000 ____D C:\ProgramData\Maxima Software
2016-12-30 14:56 - 2009-07-14 00:20 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs
2016-12-30 14:56 - 2009-07-14 00:20 - 00000000 ___RD C:\Program Files (x86)
2016-12-30 09:34 - 2009-07-14 00:20 - 00000000 ___RD C:\Users
2016-12-30 09:34 - 2009-07-14 00:18 - 00000000 __SHD C:\$Recycle.Bin
2016-12-30 09:33 - 2009-07-14 00:20 - 00000000 ___HD C:\Windows\system32\GroupPolicyUsers
2016-12-30 09:33 - 2009-07-14 00:20 - 00000000 ___HD C:\Windows\system32\GroupPolicy
2016-12-30 08:53 - 2009-07-14 01:45 - 00521176 _____ C:\Windows\system32\FNTCACHE.DAT
2016-12-30 08:45 - 2013-09-17 08:06 - 00010839 _____ C:\Users\Todos os Usuários\hpzinstall.log
2016-12-30 08:45 - 2013-09-17 08:06 - 00010839 _____ C:\ProgramData\hpzinstall.log
2016-12-30 08:36 - 2009-07-14 00:20 - 00000000 ____D C:\Windows\winsxs
2016-12-30 08:04 - 2009-07-14 00:20 - 00000000 ____D C:\Windows\system32\catroot2
2016-12-30 08:04 - 2009-07-14 00:20 - 00000000 ____D C:\Windows\system32\catroot
2016-12-30 07:49 - 2009-07-14 01:45 - 00000000 ____D C:\Windows\debug
2016-12-28 10:24 - 2013-08-31 18:08 - 00000000 ___RD C:\Users\Vania\Downloads
2016-12-28 09:26 - 2013-08-31 18:08 - 00000000 ___RD C:\Users\Vania\Links
2016-12-28 09:26 - 2013-08-31 18:08 - 00000000 ___RD C:\Users\Vania\AppData\Roaming\Microsoft\Windows\Start Menu\Programs
2016-12-19 17:08 - 2009-07-14 00:20 - 00000000 ____D C:\Windows\SysWOW64
2016-12-19 06:56 - 2014-03-12 21:47 - 00003500 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2016-12-19 06:56 - 2014-03-12 21:47 - 00003372 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2016-12-19 06:56 - 2009-07-14 00:20 - 00000000 ____D C:\Windows\Tasks
2016-12-17 07:39 - 2013-08-31 18:08 - 00000000 ____D C:\Users\Vania\AppData\Local
2016-12-14 10:33 - 2009-07-14 00:20 - 00000000 ____D C:\Windows\system32\wdi
2016-12-14 09:27 - 2016-06-09 09:47 - 00000000 ____D C:\sisecf
2016-12-13 09:46 - 2009-07-14 00:20 - 00000000 ____D C:\Windows\system32\Tasks
2016-12-13 09:46 - 2009-07-14 00:20 - 00000000 ____D C:\Program Files
2016-12-08 15:21 - 2009-07-14 00:20 - 00000000 ___RD C:\Users\Default\Links
2016-12-08 15:21 - 2009-07-14 00:20 - 00000000 ____D C:\Users\Usuário Padrão\AppData\Roaming\Microsoft\Windows\Start Menu\Programs
2016-12-08 15:21 - 2009-07-14 00:20 - 00000000 ____D C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs
2016-12-08 15:21 - 2009-07-14 00:20 - 00000000 ____D C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs
2016-12-08 15:20 - 2009-07-14 00:20 - 00000000 ____D C:\Windows\system32\DriverStore
2016-12-08 15:12 - 2009-07-14 00:20 - 00000000 ____D C:\Windows\System32\Tasks\Microsoft
2016-12-08 15:09 - 2009-07-14 00:20 - 00000000 ___SD C:\Users\Todos os Usuários\Microsoft
2016-12-08 15:09 - 2009-07-14 00:20 - 00000000 ___SD C:\ProgramData\Microsoft
2016-12-08 15:01 - 2009-07-14 01:57 - 00001547 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk
2016-12-08 15:01 - 2009-07-14 01:54 - 00001130 ___SH C:\ProgramData\Microsoft\Windows\Start Menu\Programs\desktop.ini
2016-12-08 14:41 - 2015-10-22 07:09 - 00000000 ____D C:\Users\Todos os Usuários\Procad
2016-12-08 14:41 - 2015-10-22 07:09 - 00000000 ____D C:\ProgramData\Procad
2016-12-08 08:24 - 2013-08-31 19:23 - 00004180 _____ C:\Windows\System32\Tasks\avast! Emergency Update
2016-12-07 10:07 - 2015-12-11 09:00 - 00000000 ____D C:\Program Files (x86)\TeamViewer

==================== Arquivos na raiz de alguns diretórios =======

2014-11-05 09:20 - 2014-11-05 09:20 - 0000020 _____ () C:\ProgramData\bc.ini
2014-01-15 02:15 - 2014-01-15 02:15 - 0167784 _____ (Baidu, Inc.) C:\ProgramData\FileSplitUpLoad.dll
2013-09-17 08:06 - 2016-12-30 08:45 - 0010839 _____ () C:\ProgramData\hpzinstall.log
2015-07-31 13:17 - 2015-07-31 13:17 - 1498288 _____ () C:\ProgramData\setup_1ed5f89f982749c3bb0e2a97d186cc96.exe
2015-07-31 13:25 - 2015-07-31 13:25 - 1498288 _____ () C:\ProgramData\setup_87fd2419cfc24845b93ff17789929310.exe

Arquivos para serem movidos ou deletados:
====================
C:\ProgramData\FileSplitUpLoad.dll
C:\ProgramData\setup_1ed5f89f982749c3bb0e2a97d186cc96.exe
C:\ProgramData\setup_87fd2419cfc24845b93ff17789929310.exe
C:\Users\Todos os Usuários\FileSplitUpLoad.dll
C:\Users\Todos os Usuários\setup_1ed5f89f982749c3bb0e2a97d186cc96.exe
C:\Users\Todos os Usuários\setup_87fd2419cfc24845b93ff17789929310.exe
C:\Windows\Tasks\{2A6A6C0A-6DF1-4478-807F-2FF9BF46B935}.job


Alguns arquivos em TEMP:
====================
C:\Users\Vania\AppData\Local\Temp\231013_f.exe
C:\Users\Vania\AppData\Local\Temp\231013_h.exe
C:\Users\Vania\AppData\Local\Temp\231013_l.exe
C:\Users\Vania\AppData\Local\Temp\231013_p.exe
C:\Users\Vania\AppData\Local\Temp\4625.exe
C:\Users\Vania\AppData\Local\Temp\7z920.exe
C:\Users\Vania\AppData\Local\Temp\AcDeltree.exe
C:\Users\Vania\AppData\Local\Temp\BabylonTB.exe
C:\Users\Vania\AppData\Local\Temp\Baidu_Secure_SystemUp_3.7.1.41446.exe
C:\Users\Vania\AppData\Local\Temp\Baidu_Secure_SystemUp_3.7.1.41942.exe
C:\Users\Vania\AppData\Local\Temp\bdg34D8.exe
C:\Users\Vania\AppData\Local\Temp\BingBarSetup-Partner.exe
C:\Users\Vania\AppData\Local\Temp\bobrowser.exe
C:\Users\Vania\AppData\Local\Temp\converter.exe
C:\Users\Vania\AppData\Local\Temp\cubepile_seekm.exe
C:\Users\Vania\AppData\Local\Temp\dotNetFx40_Client_setup.exe
C:\Users\Vania\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpvzvs_t.dll
C:\Users\Vania\AppData\Local\Temp\FP_AX_MSI_INSTALLER.exe
C:\Users\Vania\AppData\Local\Temp\Google_Chrome.exe
C:\Users\Vania\AppData\Local\Temp\GUR8BF9.exe
C:\Users\Vania\AppData\Local\Temp\hao123inst-brazil-somoto.exe
C:\Users\Vania\AppData\Local\Temp\ICReinstall_download[1].exe
C:\Users\Vania\AppData\Local\Temp\ICReinstall_GoogleChrome[1].exe
C:\Users\Vania\AppData\Local\Temp\ICReinstall_mozilla-firefox-34-0-5-32-bits.exe
C:\Users\Vania\AppData\Local\Temp\ICReinstall_nsxD5E0.tmp.exe
C:\Users\Vania\AppData\Local\Temp\ICReinstall_VuuPC_Setup.exe
C:\Users\Vania\AppData\Local\Temp\IminentSetup-1-.exe
C:\Users\Vania\AppData\Local\Temp\InstallHelper.exe
C:\Users\Vania\AppData\Local\Temp\nso4B06.tmp.exe
C:\Users\Vania\AppData\Local\Temp\pcrossbrowser.exe
C:\Users\Vania\AppData\Local\Temp\PC_Faster_Setup_Mini_B25_S.exe
C:\Users\Vania\AppData\Local\Temp\plushdCH2.exe
C:\Users\Vania\AppData\Local\Temp\ProtegeSetup.exe
C:\Users\Vania\AppData\Local\Temp\SkypeSetup.exe
C:\Users\Vania\AppData\Local\Temp\uninst1.exe
C:\Users\Vania\AppData\Local\Temp\v-bates.exe
C:\Users\Vania\AppData\Local\Temp\VSTStubSetup.exe
C:\Users\Vania\AppData\Local\Temp\wajam_download.exe
C:\Users\Vania\AppData\Local\Temp\{5C9EBFE2-910A-409D-8D7B-C7D07A0BE2D3}-DropboxClient_3.8.5.exe


==================== Bamital & volsnap ======================

(Não há correção automática para arquivos que não passaram na verificação.)

C:\Windows\system32\winlogon.exe => O arquivo é assinado digitalmente
C:\Windows\system32\wininit.exe => O arquivo é assinado digitalmente
C:\Windows\SysWOW64\wininit.exe => O arquivo é assinado digitalmente
C:\Windows\explorer.exe => O arquivo é assinado digitalmente
C:\Windows\SysWOW64\explorer.exe => O arquivo é assinado digitalmente
C:\Windows\system32\svchost.exe => O arquivo é assinado digitalmente
C:\Windows\SysWOW64\svchost.exe => O arquivo é assinado digitalmente
C:\Windows\system32\services.exe => O arquivo é assinado digitalmente
C:\Windows\system32\User32.dll => O arquivo é assinado digitalmente
C:\Windows\SysWOW64\User32.dll => O arquivo é assinado digitalmente
C:\Windows\system32\userinit.exe => O arquivo é assinado digitalmente
C:\Windows\SysWOW64\userinit.exe => O arquivo é assinado digitalmente
C:\Windows\system32\rpcss.dll => O arquivo é assinado digitalmente
C:\Windows\system32\dnsapi.dll => O arquivo é assinado digitalmente
C:\Windows\SysWOW64\dnsapi.dll => O arquivo é assinado digitalmente
C:\Windows\system32\Drivers\volsnap.sys => O arquivo é assinado digitalmente

LastRegBack: 2017-01-03 00:33

==================== Fim de FRST.txt ============================