Resultado do exame da Farbar Recovery Scan Tool (FRST) (x86) Versão: 15-03-2017
Executado por JORGE (administrador) em JORGE-PC (01-04-2017 05:38:13)
Executando a partir de C:\Users\JORGE\Downloads
Perfis Carregados: JORGE (Perfis Disponíveis: JORGE)
Platform: Microsoft Windows 7 Ultimate  (X86) Idioma: Português (Brasil)
Internet Explorer Versão 8 (Navegador padrão: Chrome)
Modo da Inicialização: Normal
Tutorial da Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processos (Whitelisted) =================

(Se uma entrada for incluída na fixlist, o processo será fechado. O arquivo não será movido.)

(Microsoft Corporation) C:\Program Files\Microsoft Security Client\MsMpEng.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(DEVGURU Co., LTD.) C:\Program Files\SAMSUNG\USB Drivers\25_escape\conn\ss_conn_service.exe
() C:\Program Files\UCBrowser\Application\UCService.exe
(Sony) C:\Program Files\Sony\Xperia Companion\Service\XperiaCompanionService.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\NisSrv.exe
(SlimWare Utilities, Inc.) C:\Program Files\SlimDrivers\SlimDrivers.exe
(Google Inc.) C:\Program Files\Google\Update\1.3.32.7\GoogleCrashHandler.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Intel Corporation) C:\Windows\System32\igfxsrvc.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe
() C:\Windows\snuvcdsm.exe
(Hewlett-Packard) C:\Program Files\HP\HP Software Update\hpwuschd2.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jusched.exe
(Spotify Ltd) C:\Users\JORGE\AppData\Roaming\Spotify\SpotifyWebHelper.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\avastui.exe
(Piriform Ltd) C:\Program Files\CCleaner\CCleaner.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(BitTorrent Inc.) C:\Users\JORGE\AppData\Roaming\uTorrent\uTorrent.exe
(Hewlett-Packard Co.) C:\Program Files\HP\HP Deskjet 3510 series\Bin\ScanToPCActivationApp.exe
(Sony) C:\Program Files\Sony\Xperia Companion\XperiaCompanionAgent.exe
(Oracle Corporation) C:\Users\JORGE\AppData\Local\younity\jre-windows-32\launch4j-tmp\younity.exe
(BitTorrent Inc.) C:\Users\JORGE\AppData\Roaming\uTorrent\updates\3.4.9_43388\utorrentie.exe
(BitTorrent Inc.) C:\Users\JORGE\AppData\Roaming\uTorrent\updates\3.4.9_43388\utorrentie.exe
(GraphicsMagick Group) C:\Users\JORGE\AppData\Local\younity\younity-native\binaries\gm.exe
(GraphicsMagick Group) C:\Users\JORGE\AppData\Local\younity\younity-native\binaries\gm.exe
(GraphicsMagick Group) C:\Users\JORGE\AppData\Local\younity\younity-native\binaries\gm.exe
(GraphicsMagick Group) C:\Users\JORGE\AppData\Local\younity\younity-native\binaries\gm.exe
(GraphicsMagick Group) C:\Users\JORGE\AppData\Local\younity\younity-native\binaries\gm.exe
(GraphicsMagick Group) C:\Users\JORGE\AppData\Local\younity\younity-native\binaries\gm.exe
() C:\Program Files\UCBrowser\Application\6.1.2015.1007\UCAgent.exe
(Google) C:\Program Files\Google\Drive\googledrivesync.exe
(Google) C:\Program Files\Google\Drive\googledrivesync.exe
(Microsoft Corporation) C:\Windows\System32\wuauclt.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe

==================== Registro (Whitelisted) ====================

(Se uma entrada for incluída na fixlist, o ítem no Registro será restaurado para o padrão ou removido. O arquivo não será movido.)

HKLM\...\Run: [MSC] => c:\Program Files\Microsoft Security Client\msseces.exe [1002984 2016-11-14] (Microsoft Corporation)
HKLM\...\Run: [SNUVCDSM] => C:\Windows\snuvcdsm.exe [27184 2009-08-10] ()
HKLM\...\Run: [PLFSetL] => C:\Windows\PLFSetL.exe [94208 2008-07-03] (sonix)
HKLM\...\Run: [HP Software Update] => C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe [96056 2013-05-30] (Hewlett-Packard)
HKLM\...\Run: [] => [X]
HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2422512 2014-01-24] (Synaptics Incorporated)
HKLM\...\Run: [SunJavaUpdateSched] => C:\Program Files\Common Files\Java\Java Update\jusched.exe [587288 2016-12-12] (Oracle Corporation)
HKLM\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvLaunch.exe [205512 2017-03-13] (AVAST Software)
HKU\S-1-5-21-2380034176-3038914706-124590162-1000\...\Run: [Spotify Web Helper] => C:\Users\JORGE\AppData\Roaming\Spotify\SpotifyWebHelper.exe [1446000 2017-03-26] (Spotify Ltd)
HKU\S-1-5-21-2380034176-3038914706-124590162-1000\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner.exe [6490904 2015-08-19] (Piriform Ltd)
HKU\S-1-5-21-2380034176-3038914706-124590162-1000\...\Run: [uTorrent] => C:\Users\JORGE\AppData\Roaming\uTorrent\uTorrent.exe [2147520 2017-03-13] (BitTorrent Inc.)
HKU\S-1-5-21-2380034176-3038914706-124590162-1000\...\Run: [HP Deskjet 3510 series (NET)] => C:\Program Files\HP\HP Deskjet 3510 series\Bin\ScanToPCActivationApp.exe [1837672 2012-10-17] (Hewlett-Packard Co.)
HKU\S-1-5-21-2380034176-3038914706-124590162-1000\...\Run: [GoogleDriveSync] => C:\Program Files\Google\Drive\googledrivesync.exe [23819304 2017-03-21] (Google)
HKU\S-1-5-21-2380034176-3038914706-124590162-1000\...\Run: [Spotify] => C:\Users\JORGE\AppData\Roaming\Spotify\Spotify.exe [7089776 2017-03-26] (Spotify Ltd)
HKU\S-1-5-21-2380034176-3038914706-124590162-1000\...\Run: [XperiaCompanionAgent] => C:\Program Files\Sony\Xperia Companion\XperiaCompanionAgent.exe [2097024 2017-02-07] (Sony)
HKU\S-1-5-21-2380034176-3038914706-124590162-1000\...\MountPoints2: E - E:\Startme.exe
HKU\S-1-5-21-2380034176-3038914706-124590162-1000\...\MountPoints2: {042157b7-aa33-11e5-aa1c-c417fe3e45ae} - E:\Startme.exe
HKU\S-1-5-21-2380034176-3038914706-124590162-1000\...\MountPoints2: {10e68f31-5680-11e5-aa82-00262d8b6a59} - E:\Startme.exe
HKU\S-1-5-18\...\RunOnce: [SPReview] => C:\Windows\System32\SPReview\SPReview.exe [280576 2017-04-01] (Microsoft Corporation)
ShellIconOverlayIdentifiers: [  GoogleDriveBlacklisted] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D42} => C:\Program Files\Google\Drive\googledrivesync32.dll [2017-03-21] (Google)
ShellIconOverlayIdentifiers: [  GoogleDriveSynced] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D40} => C:\Program Files\Google\Drive\googledrivesync32.dll [2017-03-21] (Google)
ShellIconOverlayIdentifiers: [  GoogleDriveSyncing] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D41} => C:\Program Files\Google\Drive\googledrivesync32.dll [2017-03-21] (Google)
ShellIconOverlayIdentifiers: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll [2017-03-13] (AVAST Software)
Startup: C:\Users\JORGE\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Monitorar alertas de tinta - HP Deskjet 3510 series (Rede).lnk [2016-08-07]
Startup: C:\Users\JORGE\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\younity.lnk [2017-03-31]
ShortcutTarget: younity.lnk -> C:\Users\JORGE\AppData\Local\younity\younity.exe (Entangled Media Corp.)

==================== Internet (Whitelisted) ====================

(Se um ítem for incluído na fixlist, sendo um ítem do Registro, será removido ou restaurado para o padrão.)

Tcpip\Parameters: [DhcpNameServer] 200.184.46.14 8.8.8.8
Tcpip\..\Interfaces\{6FB27C54-95AE-43BB-B87B-DE89DCB08A47}: [DhcpNameServer] 200.184.46.14 8.8.8.8
Tcpip\..\Interfaces\{B249BB5F-6FDB-4F7D-9E47-C99E49F8B652}: [DhcpNameServer] 200.184.46.14 8.8.8.8

Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxps://search.avast.com/AV756/
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxps://search.avast.com/AV756/search/web?q={searchTerms}
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = 
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = 
HKU\S-1-5-21-2380034176-3038914706-124590162-1000\Software\Microsoft\Internet Explorer\Main,Search Page = hxxps://search.avast.com/AV756/search/web?q={searchTerms}
HKU\S-1-5-21-2380034176-3038914706-124590162-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxps://br.yahoo.com/?fr=yset_ie_syc_oracle&type=orcl_hpset
HKU\S-1-5-21-2380034176-3038914706-124590162-1000\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://www.msn.com/pt-br/?ocid=iehp
SearchScopes: HKLM -> DefaultScope {8C31F27B-BE8A-4e4b-A478-17760AF1F5D9} URL = hxxps://search.avast.com/AV756/search/web?q={searchTerms}
SearchScopes: HKLM -> {8C31F27B-BE8A-4e4b-A478-17760AF1F5D9} URL = hxxps://search.avast.com/AV756/search/web?q={searchTerms}
SearchScopes: HKU\S-1-5-21-2380034176-3038914706-124590162-1000 -> DefaultScope {8C31F27B-BE8A-4e4b-A478-17760AF1F5D9} URL = hxxps://search.avast.com/AV756/search/web?q={searchTerms}
SearchScopes: HKU\S-1-5-21-2380034176-3038914706-124590162-1000 -> {76227593-8D02-4FDB-B003-13418DF3696B} URL = hxxp://www.google.com/search?hl=en&q={searchTerms}
SearchScopes: HKU\S-1-5-21-2380034176-3038914706-124590162-1000 -> {8C31F27B-BE8A-4e4b-A478-17760AF1F5D9} URL = hxxps://search.avast.com/AV756/search/web?q={searchTerms}
SearchScopes: HKU\S-1-5-21-2380034176-3038914706-124590162-1000 -> {92BB2FE0-D984-41F3-85EA-4A65E2CCFF62} URL = hxxps://br.search.yahoo.com/search?p={searchTerms}&intl=br&fr=yset_ie_syc_oracle&type=orcl_default&partnerexternal-oracle=external-oracle
BHO: Sem Nome -> {10921475-03CE-4E04-90CE-E2E7EF20C814} -> Nenhum Arquivo
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Windows\java\bin\ssv.dll [2017-02-07] (Oracle Corporation)
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2017-03-13] (AVAST Software)
BHO: Evernote extension -> {92EF2EAD-A7CE-4424-B0DB-499CF856608E} -> C:\Program Files\Evernote\Evernote\EvernoteIE.dll [2015-07-01] (Evernote Corp., 305 Walnut Street, Redwood City, CA 94063)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Windows\java\bin\jp2ssv.dll [2017-02-07] (Oracle Corporation)

FireFox:
========
FF DefaultProfile: ekpgxqkc.default
FF ProfilePath: C:\Users\JORGE\AppData\Roaming\Mozilla\Firefox\Profiles\ekpgxqkc.default [2017-04-01]
FF DefaultSearchEngine: Mozilla\Firefox\Profiles\ekpgxqkc.default -> Avast Search
FF DefaultSearchUrl: Mozilla\Firefox\Profiles\ekpgxqkc.default -> hxxps://search.avast.com/AV756/search/web?q={searchTerms}
FF SearchEngineOrder.1: Mozilla\Firefox\Profiles\ekpgxqkc.default -> Avast Search
FF SelectedSearchEngine: Mozilla\Firefox\Profiles\ekpgxqkc.default -> Avast Search
FF Homepage: Mozilla\Firefox\Profiles\ekpgxqkc.default -> hxxps://search.avast.com/AV756/
FF Keyword.URL: Mozilla\Firefox\Profiles\ekpgxqkc.default -> hxxps://search.avast.com/AV756/search/web?q={searchTerms}
FF SearchPlugin: C:\Users\JORGE\AppData\Roaming\Mozilla\Firefox\Profiles\ekpgxqkc.default\searchplugins\avast-search.xml [2017-01-29]
FF HKLM\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF => não encontrado (a)
FF HKLM\...\Firefox\Extensions: [sp@avast.com] - C:\Program Files\AVAST Software\Avast\SafePrice\FF => não encontrado (a)
FF Plugin: @java.com/DTPlugin,version=11.121.2 -> C:\Windows\java\bin\dtplugin\npDeployJava1.dll [2017-02-07] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.121.2 -> C:\Windows\java\bin\plugin2\npjp2.dll [2017-02-07] (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.50905.0\npctrl.dll [2017-02-10] ( Microsoft Corporation)
FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.32.7\npGoogleUpdate3.dll [2017-01-11] (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.32.7\npGoogleUpdate3.dll [2017-01-11] (Google Inc.)
FF Plugin: Adobe Reader -> C:\Program Files\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2016-12-23] (Adobe Systems Inc.)

Chrome: 
=======
CHR Profile: C:\Users\JORGE\AppData\Local\Google\Chrome\User Data\Default [2017-04-01]
CHR Extension: (Google Apresentações) - C:\Users\JORGE\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2017-02-11]
CHR Extension: (Google Docs) - C:\Users\JORGE\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2017-02-11]
CHR Extension: (Google Drive) - C:\Users\JORGE\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2017-02-11]
CHR Extension: (YouTube) - C:\Users\JORGE\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2017-02-11]
CHR Extension: (Avast SafePrice) - C:\Users\JORGE\AppData\Local\Google\Chrome\User Data\Default\Extensions\eofcbnmajmjmplflapaojjnihcjkigck [2017-03-14]
CHR Extension: (Adii Rockstar) - C:\Users\JORGE\AppData\Local\Google\Chrome\User Data\Default\Extensions\epgpolfkodhcikoaoepmmpinkolmjdeb [2017-03-25]
CHR Extension: (Planilhas do Google) - C:\Users\JORGE\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2017-02-11]
CHR Extension: (Documentos Google off-line) - C:\Users\JORGE\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2017-02-11]
CHR Extension: (Avast Online Security) - C:\Users\JORGE\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2017-03-14]
CHR Extension: (Application Launcher for Drive (by Google)) - C:\Users\JORGE\AppData\Local\Google\Chrome\User Data\Default\Extensions\lmjegmlicamnimmfhcmpkclmigmmcbeh [2017-02-11]
CHR Extension: (Pagamentos da Chrome Web Store) - C:\Users\JORGE\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2017-03-08]
CHR Extension: (Gmail) - C:\Users\JORGE\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2017-02-11]
CHR Extension: (Chrome Media Router) - C:\Users\JORGE\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2017-03-12]
CHR HKLM\...\Chrome\Extension: [eofcbnmajmjmplflapaojjnihcjkigck] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - hxxps://clients2.google.com/service/update2/crx
CHR HKU\S-1-5-21-2380034176-3038914706-124590162-1000\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [lmjegmlicamnimmfhcmpkclmigmmcbeh] - hxxps://clients2.google.com/service/update2/crx

==================== Serviços (Whitelisted) ====================

(Se uma entrada for incluída na fixlist, será removida do Registro. O arquivo não será movido, a menos que seja colocado separadamente.)

S3 aswbIDSAgent; C:\Program Files\AVAST Software\Avast\aswidsagent.exe [5545144 2017-03-13] (AVAST Software s.r.o.)
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [262736 2017-03-13] (AVAST Software)
S2 LiveUpdateSvc; C:\Program Files\IObit\LiveUpdate\LiveUpdate.exe [2909472 2015-07-29] (IObit)
R2 MsMpSvc; c:\Program Files\Microsoft Security Client\MsMpEng.exe [103696 2016-11-14] (Microsoft Corporation)
R3 NisSrv; c:\Program Files\Microsoft Security Client\NisSrv.exe [280864 2016-11-14] (Microsoft Corporation)
R2 ss_conn_service; C:\Program Files\SAMSUNG\USB Drivers\25_escape\conn\ss_conn_service.exe [741640 2014-06-16] (DEVGURU Co., LTD.)
R2 UCBrowserSvc; C:\Program Files\UCBrowser\Application\UCService.exe [629648 2017-02-21] ()
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [680960 2009-07-13] (Microsoft Corporation)
R2 XperiaCompanionService; C:\Program Files\Sony\Xperia Companion\Service\XperiaCompanionService.exe [1431424 2017-02-07] (Sony)

===================== Drivers (Whitelisted) ======================

(Se uma entrada for incluída na fixlist, será removida do Registro. O arquivo não será movido, a menos que seja colocado separadamente.)

S3 acpials; C:\Windows\System32\DRIVERS\acpials.sys [7680 2009-07-13] (Microsoft Corporation)
S3 aswbidsdriver; C:\Windows\system32\drivers\aswbidsdriverx.sys [257288 2017-03-13] (AVAST Software s.r.o.)
S3 aswbidsh; C:\Windows\system32\drivers\aswbidshx.sys [148720 2017-03-13] (AVAST Software s.r.o.)
S3 aswblog; C:\Windows\system32\drivers\aswblogx.sys [267016 2017-03-13] (AVAST Software s.r.o.)
S3 aswbuniv; C:\Windows\system32\drivers\aswbunivx.sys [41176 2017-03-13] (AVAST Software s.r.o.)
S3 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [34136 2017-03-13] (AVAST Software)
S3 aswKbd; C:\Windows\system32\drivers\aswKbd.sys [31064 2017-03-14] (AVAST Software)
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [106392 2017-03-13] (AVAST Software)
S3 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [90336 2017-03-13] (AVAST Software)
R0 aswRvrt; C:\Windows\system32\drivers\aswRvrt.sys [62152 2017-03-13] (AVAST Software)
S3 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [756200 2017-03-13] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [465024 2017-03-25] (AVAST Software)
S3 aswStm; C:\Windows\system32\drivers\aswStm.sys [118288 2017-03-13] (AVAST Software)
S3 aswVmm; C:\Windows\system32\drivers\aswVmm.sys [278776 2017-03-14] (AVAST Software)
S3 ggsomc; C:\Windows\System32\DRIVERS\ggsomc.sys [26328 2015-08-29] (Sony Mobile Communications)
R1 HWiNFO32; C:\Windows\system32\drivers\HWiNFO32.SYS [23840 2015-08-27] (REALiX(tm))
R3 L1C; C:\Windows\System32\DRIVERS\L1C62x86.sys [110280 2015-08-27] (Qualcomm Atheros Co., Ltd.)
S3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [98520 2017-03-11] (Malwarebytes Corporation)
R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [252808 2016-08-25] (Microsoft Corporation)
S3 pwdrvio; C:\Windows\system32\pwdrvio.sys [16472 2012-01-18] ()
S3 pwdspio; C:\Windows\system32\pwdspio.sys [11104 2012-01-18] ()
S3 RTSUER; C:\Windows\System32\Drivers\RtsUer.sys [308192 2017-01-19] (Realsil Semiconductor Corporation)
R3 SmbDrvI; C:\Windows\System32\DRIVERS\Smb_driver_Intel.sys [25768 2016-03-07] (Synaptics Incorporated)
R3 SNP2UVC; C:\Windows\System32\DRIVERS\snp2uvc.sys [1761280 2009-09-10] ()
S3 SWDUMon; C:\Windows\System32\DRIVERS\SWDUMon.sys [13368 2017-03-31] (SlimWare Utilities, Inc.)
U3 aswbdisk; não ImagePath
S3 RSUSBSTOR; System32\Drivers\RtsUStor.sys [X]
U5 RTSPER; C:\Windows\System32\Drivers\RTSPER.sys [614880 2017-02-06] (Realsil Semiconductor Corporation)
S3 RtsUIR; system32\DRIVERS\Rts516xIR.sys [X]
S3 USBCCID; system32\DRIVERS\RtsUCcid.sys [X]

==================== NetSvcs (Whitelisted) ===================

(Se uma entrada for incluída na fixlist, será removida do Registro. O arquivo não será movido, a menos que seja colocado separadamente.)


==================== Um Mês Criados arquivos e pastas ========

(Se uma entrada for incluída na fixlist, o arquivo/pasta será movido.)

2017-04-01 05:38 - 2017-04-01 05:39 - 00019778 _____ C:\Users\JORGE\Downloads\FRST.txt
2017-04-01 05:37 - 2017-04-01 05:38 - 00000000 ____D C:\FRST
2017-04-01 05:35 - 2017-04-01 05:36 - 01766912 _____ (Farbar) C:\Users\JORGE\Downloads\FRST.exe
2017-04-01 04:16 - 2017-04-01 04:21 - 00000000 ____D C:\Symbols
2017-04-01 04:08 - 2017-04-01 04:13 - 346666496 _____ C:\Users\JORGE\Downloads\Windows_Win7SP1.7601.17514.101119-1850.X86FRE.Symbols.msi
2017-04-01 03:50 - 2017-04-01 03:55 - 239126136 _____ C:\Users\JORGE\Downloads\Windows6.1-KB947821-v34-x86 (1).msu
2017-04-01 03:25 - 2017-04-01 03:25 - 00000000 ____D C:\Windows\system32\SPReview
2017-04-01 03:08 - 2017-04-01 03:14 - 00000000 ____D C:\e9ef1910edce78edb50f
2017-04-01 03:08 - 2017-04-01 03:08 - 00000000 ____D C:\c213b39ea56af6023d03b2
2017-04-01 03:02 - 2017-04-01 03:08 - 00000000 ____D C:\0eaa6250837578797473cd3372d871
2017-04-01 01:07 - 2017-04-01 01:10 - 239126136 _____ C:\Users\JORGE\Downloads\Windows6.1-KB947821-v34-x86.msu
2017-03-31 22:32 - 2017-03-31 22:32 - 00000000 ____D C:\Users\Todos os Usuários\SWCUTemp
2017-03-31 22:32 - 2017-03-31 22:32 - 00000000 ____D C:\ProgramData\SWCUTemp
2017-03-14 00:36 - 2017-03-31 22:21 - 00000000 ____D C:\Users\JORGE\AppData\LocalLow\uTorrent
2017-03-14 00:19 - 2017-03-14 00:19 - 00001124 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avast SafeZone Browser.lnk
2017-03-14 00:14 - 2017-03-14 00:13 - 00031064 _____ (AVAST Software) C:\Windows\system32\Drivers\aswKbd.sys
2017-03-14 00:01 - 2017-03-14 00:01 - 00000000 ____D C:\Users\JORGE\AppData\Roaming\AVAST Software
2017-03-13 23:58 - 2017-03-13 23:58 - 00002075 _____ C:\Users\Public\Desktop\Avast Free Antivirus.lnk
2017-03-13 23:58 - 2017-03-13 23:58 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVAST Software
2017-03-13 23:57 - 2017-03-13 23:57 - 00000000 ____D C:\Program Files\Common Files\AV
2017-03-13 23:56 - 2017-03-25 10:02 - 00465024 _____ (AVAST Software) C:\Windows\system32\Drivers\aswsp.sys
2017-03-13 23:56 - 2017-03-14 22:13 - 00278776 _____ (AVAST Software) C:\Windows\system32\Drivers\aswvmm.sys
2017-03-13 23:56 - 2017-03-13 23:55 - 00118288 _____ (AVAST Software) C:\Windows\system32\Drivers\aswStm.sys
2017-03-13 23:56 - 2017-03-13 23:54 - 00106392 _____ (AVAST Software) C:\Windows\system32\Drivers\aswMonFlt.sys
2017-03-13 23:56 - 2017-03-13 23:54 - 00090336 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRdr2.sys
2017-03-13 23:56 - 2017-03-13 23:54 - 00062152 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRvrt.sys
2017-03-13 23:56 - 2017-03-13 23:54 - 00034136 _____ (AVAST Software) C:\Windows\system32\Drivers\aswHwid.sys
2017-03-13 23:56 - 2017-03-13 23:52 - 00756200 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSnx.sys
2017-03-13 23:56 - 2017-03-13 23:51 - 00267016 _____ (AVAST Software s.r.o.) C:\Windows\system32\Drivers\aswblogx.sys
2017-03-13 23:56 - 2017-03-13 23:51 - 00257288 _____ (AVAST Software s.r.o.) C:\Windows\system32\Drivers\aswbidsdriverx.sys
2017-03-13 23:56 - 2017-03-13 23:51 - 00148720 _____ (AVAST Software s.r.o.) C:\Windows\system32\Drivers\aswbidshx.sys
2017-03-13 23:56 - 2017-03-13 23:51 - 00041176 _____ (AVAST Software s.r.o.) C:\Windows\system32\Drivers\aswbunivx.sys
2017-03-13 23:55 - 2017-03-13 23:54 - 00921280 _____ (Microsoft Corporation) C:\Windows\ucrtbase.dll
2017-03-13 23:55 - 2017-03-13 23:54 - 00328208 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe
2017-03-13 23:46 - 2017-03-14 00:12 - 00000000 ____D C:\Program Files\AVAST Software
2017-03-13 23:44 - 2017-03-14 01:14 - 00000000 ____D C:\Users\Todos os Usuários\AVAST Software
2017-03-13 23:44 - 2017-03-14 01:14 - 00000000 ____D C:\ProgramData\AVAST Software
2017-03-13 23:42 - 2017-03-13 23:42 - 06654968 _____ (AVAST Software) C:\Users\JORGE\Downloads\avast_free_antivirus_setup_online.exe
2017-03-12 10:53 - 2017-03-12 10:53 - 00057560 _____ C:\Users\JORGE\AppData\Local\GDIPFONTCACHEV1.DAT
2017-03-12 10:50 - 2017-03-12 10:51 - 00266816 _____ C:\Windows\system32\FNTCACHE.DAT
2017-03-03 01:32 - 2017-03-03 02:06 - 636082201 _____ C:\Users\JORGE\Downloads\open_gapps-arm-4.4-stock-20170302.zip
2017-03-02 21:10 - 2017-03-02 22:06 - 277881758 _____ C:\Users\JORGE\Downloads\cm-11-20160110-UNOFFICIAL-flamingo - copy.zip
2017-03-02 21:04 - 2017-03-02 21:07 - 14936480 _____ C:\Users\JORGE\Downloads\cm11-hybrid-kernel-beta4 (1).zip

==================== Um Mês Modificados arquivos e pastas ========

(Se uma entrada for incluída na fixlist, o arquivo/pasta será movido.)

2017-04-01 05:39 - 2017-02-19 04:45 - 00000000 ____D C:\Users\JORGE\AppData\Local\younity
2017-04-01 05:34 - 2015-08-29 00:56 - 00000000 ____D C:\Users\JORGE\AppData\Roaming\uTorrent
2017-04-01 05:24 - 2017-01-11 16:48 - 00000284 _____ C:\Windows\Tasks\UCBrowserUpdaterCore.job
2017-04-01 05:24 - 2015-11-02 13:25 - 00000444 _____ C:\Windows\Tasks\UCBrowserUpdater.job
2017-04-01 05:22 - 2015-08-27 14:25 - 00000000 ____D C:\Users\JORGE\AppData\Local\Spotify
2017-04-01 05:20 - 2009-07-14 01:34 - 00009584 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2017-04-01 05:20 - 2009-07-14 01:34 - 00009584 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2017-04-01 04:03 - 2015-08-27 14:25 - 00000000 ____D C:\Users\JORGE\AppData\Roaming\Spotify
2017-04-01 01:03 - 2017-02-19 04:54 - 00000000 ____D C:\Users\JORGE\AppData\Local\younityClient
2017-04-01 00:34 - 2015-09-12 00:34 - 00000366 _____ C:\Windows\Tasks\SlimCleaner Plus (Scheduled Scan - JORGE).job
2017-03-31 22:34 - 2015-08-27 14:07 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Drive
2017-03-31 22:20 - 2015-09-12 00:16 - 00000386 _____ C:\Windows\Tasks\SlimDrivers Startup.job
2017-03-31 22:19 - 2015-09-12 00:16 - 00013368 _____ (SlimWare Utilities, Inc.) C:\Windows\system32\Drivers\SWDUMon.sys
2017-03-31 22:19 - 2015-08-27 19:32 - 00000000 ____D C:\Users\Todos os Usuários\ProductData
2017-03-31 22:19 - 2015-08-27 19:32 - 00000000 ____D C:\ProgramData\ProductData
2017-03-31 22:18 - 2015-09-01 02:18 - 00000346 _____ C:\Windows\Tasks\DriverToolkit Autorun.job
2017-03-31 22:18 - 2009-07-14 01:53 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2017-03-30 16:08 - 2015-08-26 13:51 - 00431272 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
2017-03-26 16:45 - 2015-08-27 01:29 - 00000000 ____D C:\Program Files\Google
2017-03-26 16:30 - 2009-07-13 23:37 - 00000000 ____D C:\Windows\system32\NDF
2017-03-18 14:46 - 2015-08-26 13:54 - 00000000 ____D C:\Windows\system32\MRT
2017-03-18 14:40 - 2015-08-26 13:54 - 135706696 ____C (Microsoft Corporation) C:\Windows\system32\MRT.exe
2017-03-17 13:06 - 2015-08-27 13:56 - 00000000 ____D C:\Program Files\Microsoft Silverlight
2017-03-16 03:24 - 2015-08-27 13:56 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
2017-03-14 22:55 - 2015-08-28 20:37 - 00802904 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2017-03-14 22:55 - 2015-08-28 20:37 - 00144472 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl
2017-03-14 22:54 - 2015-08-28 20:37 - 00000000 ____D C:\Windows\system32\Macromed
2017-03-13 23:43 - 2009-07-13 23:37 - 00000000 ____D C:\Windows\inf
2017-03-13 23:30 - 2015-08-29 21:10 - 00000000 ____D C:\Program Files\Sony Mobile
2017-03-13 23:03 - 2017-02-19 04:46 - 00000000 ____D C:\Users\JORGE\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\younity
2017-03-12 10:51 - 2009-07-14 01:53 - 00032608 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2017-03-11 22:02 - 2015-12-04 10:24 - 00000000 ____D C:\Users\JORGE\Desktop\jorge
2017-03-11 21:39 - 2015-08-29 09:22 - 00000000 ____D C:\Users\JORGE\AppData\Local\Mozilla
2017-03-11 21:32 - 2017-02-11 10:43 - 00002211 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2017-03-11 21:32 - 2017-02-11 10:43 - 00002199 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2017-03-11 20:35 - 2015-08-29 01:30 - 00098520 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2017-03-02 22:13 - 2017-02-17 21:04 - 00000000 ____D C:\Users\JORGE\Desktop\Roms CM11 e Nitrogens

==================== Arquivos na raiz de alguns diretórios =======

2015-08-31 21:54 - 2015-08-31 22:01 - 0034874 _____ () C:\Users\JORGE\AppData\Local\HWVendorDetection.log
2016-07-21 21:40 - 2016-07-21 21:40 - 0007605 _____ () C:\Users\JORGE\AppData\Local\Resmon.ResmonCfg
2015-08-29 01:19 - 2015-08-29 01:19 - 0000057 _____ () C:\ProgramData\Ament.ini

Alguns arquivos em TEMP:
====================
2017-03-13 22:53 - 2017-03-13 22:59 - 166963184 _____ (Entangled Media Corp.                                       ) C:\Users\JORGE\AppData\Local\Temp\ycu5260879081803813996.exe

==================== Bamital & volsnap ======================

(Não há correção automática para arquivos que não passaram na verificação.)

C:\Windows\explorer.exe => O arquivo é assinado digitalmente
C:\Windows\system32\winlogon.exe => O arquivo é assinado digitalmente
C:\Windows\system32\wininit.exe => O arquivo é assinado digitalmente
C:\Windows\system32\svchost.exe => O arquivo é assinado digitalmente
C:\Windows\system32\services.exe => O arquivo é assinado digitalmente
C:\Windows\system32\User32.dll => O arquivo é assinado digitalmente
C:\Windows\system32\userinit.exe => O arquivo é assinado digitalmente
C:\Windows\system32\rpcss.dll => O arquivo é assinado digitalmente
C:\Windows\system32\dnsapi.dll => O arquivo é assinado digitalmente
C:\Windows\system32\Drivers\volsnap.sys => O arquivo é assinado digitalmente

LastRegBack: 2017-03-25 10:52

==================== Fim de FRST.txt ============================