Resultado do exame da Farbar Recovery Scan Tool (FRST) (x64) Versão: 13-07-2017
Executado por MANSIQ (administrador) em ADALBA-PC (13-07-2017 20:53:38)
Executando a partir de H:\MANSIQ\Downloads
Perfis Carregados: MANSIQ (Perfis Disponíveis: MANSIQ & ADALBA & TEste & Administrador)
Platform: Windows 10 Pro Versão 1607 (X64) Idioma: Português (Brasil)
Internet Explorer Versão 11 (Navegador padrão: FF)
Modo da Inicialização: Normal
Tutorial da Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processos (Whitelisted) =================

(Se uma entrada for incluída na fixlist, o processo será fechado. O arquivo não será movido.)

(GAS Tecnologia) C:\Program Files (x86)\GbPlugin\gbpsv.exe
(IBM Corp.) C:\Program Files (x86)\Trusteer\Rapport\bin\RapportMgmtService.exe
(AMD) C:\Windows\System32\atiesrxx.exe
(Advanced Micro Devices, Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe
(Microsoft Corporation) C:\Windows\SysWOW64\svchost.exe
(Copyright (c) 2017 Plays.tv, LLC) C:\Program Files (x86)\Raptr Inc\PlaysTV\plays_service.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
(GAS Tecnologia LTDA) C:\Program Files\Diebold\Warsaw\core.exe
(IBM Corp.) C:\Program Files (x86)\Trusteer\Rapport\bin\x64\RapportInjService_x64.exe
(HP Inc.) C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe
(AMD) C:\Windows\System32\atieclxx.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\tv_w32.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\tv_x64.exe
(GAS Tecnologia) C:\Program Files (x86)\GbPlugin\gbpsv.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer.exe
(IBM Corp.) C:\Program Files (x86)\Trusteer\Rapport\bin\RapportService.exe
(IBM Corp.) C:\Program Files (x86)\Trusteer\Rapport\bin\x64\RapportInjService_x64.exe
(GAS Tecnologia LTDA) C:\Program Files\Diebold\Warsaw\core.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MSASCuiL.exe
(© 2015 Microsoft Corporation) C:\Users\MANSIQ\AppData\Local\Microsoft\BingSvc\BingSvc.exe
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
(Hewlett-Packard Co.) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(Hewlett-Packard) C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Raptr, Inc) C:\Program Files (x86)\Raptr Inc\Raptr\raptr.exe
() C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.18.614.0_x64__kzf8qxf38zg5c\SkypeHost.exe
(Raptr, Inc) C:\Program Files (x86)\Raptr Inc\Raptr\raptr_im.exe
(Raptr Inc.) C:\Program Files (x86)\Raptr Inc\Raptr\raptr_ep64.exe
() C:\Program Files (x86)\Procob\SisReCIp\sisrecip_novo.exe
(ESET) C:\Program Files\ESET\ESET Security\ekrn.exe
(ESET) C:\Program Files\ESET\ESET Security\egui.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer_Desktop.exe
(Microsoft Corporation) C:\Windows\System32\msiexec.exe
(Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe

==================== Registro (Whitelisted) ====================

(Se uma entrada for incluída na fixlist, o ítem no Registro será restaurado para o padrão ou removido. O arquivo não será movido.)

HKLM\...\Run: [Diebold - Warsaw] => C:\Program Files\Diebold\Warsaw\core.exe [954416 2017-03-22] (GAS Tecnologia LTDA)
HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe [767176 2015-11-04] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [PlaysTV] => C:\Program Files (x86)\Raptr Inc\PlaysTV\playstv_launcher.exe [51416 2017-06-29] (Copyright (c) 2017 Plays.tv, LLC)
HKLM-x32\...\Run: [Raptr] => C:\Program Files (x86)\Raptr Inc\Raptr\raptrstub.exe [58584 2017-05-30] (Raptr, Inc)
HKLM-x32\...\Run: [HP Software Update] => C:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe [96056 2013-05-30] (Hewlett-Packard)
HKLM-x32\...\Run: [] => [X]
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [587288 2017-03-15] (Oracle Corporation)
Winlogon\Notify\ GbPluginCef: C:\PROGRAM FILES (X86)\GBPLUGIN\gbiehCef.dll [2017-01-18] (Caixa Economica Federal)
Winlogon\Notify\ GbPluginuni: C:\Program Files (x86)\GbPlugin\gbiehuni.dll [2017-01-12] (Banco Itaú Unibanco)
HKU\S-1-5-21-1707329635-3587688271-2924560325-1001\...\Run: [BingSvc] => C:\Users\MANSIQ\AppData\Local\Microsoft\BingSvc\BingSvc.exe [144008 2015-11-05] (© 2015 Microsoft Corporation)
HKU\S-1-5-21-1707329635-3587688271-2924560325-1001\...\Run: [EmotiplusHelper] => C:\Users\MANSIQ\AppData\Local\EmotiplusHelper\EmotiplusHelper.exe [136088 2017-02-01] (Emotiplus)
HKU\S-1-5-21-1707329635-3587688271-2924560325-1001\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [27716568 2017-05-04] (Skype Technologies S.A.)
ShellExecuteHooks-x32: GbPluginObj Class - {E37CB5F0-51F5-4395-A808-5FA49E399003} - C:\PROGRAM FILES (X86)\GbPlugin\gbiehcef.dll [1903328 2017-01-18] (Caixa Economica Federal)
ShellExecuteHooks-x32: GbPluginObj Class - {E37CB5F0-51F5-4395-A808-5FA49E399008} - C:\Program Files (x86)\GbPlugin\gbiehuni.dll [1951968 2017-01-12] (Banco Itaú Unibanco)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\HP Digital Imaging Monitor.lnk [2016-04-15]
ShortcutTarget: HP Digital Imaging Monitor.lnk -> C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe (Hewlett-Packard Co.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\PROCOB - Vincular Consultas por IP.lnk [2017-01-09]
ShortcutTarget: PROCOB - Vincular Consultas por IP.lnk -> C:\Program Files (x86)\Procob\SisReCIp\sisrecip_novo.exe ()

==================== Internet (Whitelisted) ====================

(Se um ítem for incluído na fixlist, sendo um ítem do Registro, será removido ou restaurado para o padrão.)

Tcpip\Parameters: [DhcpNameServer] 181.213.132.2 181.213.132.3
Tcpip\..\Interfaces\{67cd66a8-4c07-498b-8f83-8834c5e31b43}: [DhcpNameServer] 181.213.132.2 181.213.132.3

Internet Explorer:
==================
HKU\S-1-5-21-1707329635-3587688271-2924560325-1001\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://www.msn.com/pt-br/?ocid=iehp
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_131\bin\ssv.dll [2017-07-10] (Oracle Corporation)
BHO-x32: GbIehObj Class -> {C41A1C0E-EA6C-11D4-B1B8-444553540003} -> C:\PROGRAM FILES (X86)\GBPLUGIN\gbiehcef.dll [2017-01-18] (Caixa Economica Federal)
BHO-x32: GbIehObj Class -> {C41A1C0E-EA6C-11D4-B1B8-444553540008} -> C:\Program Files (x86)\GbPlugin\gbiehuni.dll [2017-01-12] (Banco Itaú Unibanco)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_131\bin\jp2ssv.dll [2017-07-10] (Oracle Corporation)

FireFox:
========
FF DefaultProfile: b0j479ma.default
FF ProfilePath: C:\Users\MANSIQ\AppData\Roaming\Mozilla\Firefox\Profiles\b0j479ma.default [2017-07-13]
FF DefaultSearchEngine: Mozilla\Firefox\Profiles\b0j479ma.default -> Bing 
FF SearchEngineOrder.3: Mozilla\Firefox\Profiles\b0j479ma.default -> Bing 
FF SelectedSearchEngine: Mozilla\Firefox\Profiles\b0j479ma.default -> Bing 
FF Homepage: Mozilla\Firefox\Profiles\b0j479ma.default -> hxxp://www.msn.com/?pc=SK216&ocid=SK216DHP&osmkt=pt-br
FF Keyword.URL: Mozilla\Firefox\Profiles\b0j479ma.default -> hxxp://www.bing.com/search?FORM=SK216DF&PC=SK216&q=
FF Extension: (IBM Security Rapport) - C:\Users\MANSIQ\AppData\Roaming\Mozilla\Extensions\{ec8030f7-c20a-464f-9b0e-13a3a9e97384}\rapportext@trusteer.com.xpi [2017-07-12]
FF Extension: (Bing Search) - C:\Users\MANSIQ\AppData\Roaming\Mozilla\Firefox\Profiles\b0j479ma.default\Extensions\bingsearch.full@microsoft.com.xpi [2016-06-21]
FF Extension: (Download77 Search Engine) - C:\Users\MANSIQ\AppData\Roaming\Mozilla\Firefox\Profiles\b0j479ma.default\Extensions\{4ac4bb39-ec53-44aa-962e-f038976b1045}.xpi [2016-08-08]
FF SearchPlugin: C:\Users\MANSIQ\AppData\Roaming\Mozilla\Firefox\Profiles\b0j479ma.default\searchplugins\bing-.xml [2016-06-21]
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL [Nenhum Arquivo]
FF Plugin-x32: @java.com/DTPlugin,version=11.131.2 -> C:\Program Files (x86)\Java\jre1.8.0_131\bin\dtplugin\npDeployJava1.dll [2017-07-10] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.131.2 -> C:\Program Files (x86)\Java\jre1.8.0_131\bin\plugin2\npjp2.dll [2017-07-10] (Oracle Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-05-11] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-05-11] (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.2.3 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2016-06-01] (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.2.4 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2016-06-01] (VideoLAN)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2017-04-04] (Adobe Systems Inc.)
FF Plugin HKU\S-1-5-21-1707329635-3587688271-2924560325-1001: SkypePlugin -> C:\Users\MANSIQ\AppData\Local\SkypePlugin\7.19.0.182\npGatewayNpapi.dll [2016-05-27] (Skype Technologies S.A.)
FF Plugin HKU\S-1-5-21-1707329635-3587688271-2924560325-1001: SkypePlugin64 -> C:\Users\MANSIQ\AppData\Local\SkypePlugin\7.19.0.182\npGatewayNpapi-x64.dll [2016-05-27] (Skype Technologies S.A.)

Chrome: 
=======
CHR Profile: C:\Users\MANSIQ\AppData\Local\Google\Chrome\User Data\Default [2017-07-13]
CHR Extension: (Google Apresentações) - C:\Users\MANSIQ\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2016-04-15]
CHR Extension: (Google Docs) - C:\Users\MANSIQ\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2016-04-15]
CHR Extension: (Google Drive) - C:\Users\MANSIQ\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2016-04-15]
CHR Extension: (Rapport) - C:\Users\MANSIQ\AppData\Local\Google\Chrome\User Data\Default\Extensions\bbjllphbppobebmjpjcijfbakobcheof [2016-09-08]
CHR Extension: (YouTube) - C:\Users\MANSIQ\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2016-04-15]
CHR Extension: (Planilhas do Google) - C:\Users\MANSIQ\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2016-04-15]
CHR Extension: (Documentos Google off-line) - C:\Users\MANSIQ\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-04-15]
CHR Extension: (Pagamentos da Chrome Web Store) - C:\Users\MANSIQ\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2017-03-13]
CHR Extension: (Gmail) - C:\Users\MANSIQ\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2016-04-15]
CHR Extension: (Chrome Media Router) - C:\Users\MANSIQ\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2017-07-02]
CHR HKU\S-1-5-21-1707329635-3587688271-2924560325-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [bbjllphbppobebmjpjcijfbakobcheof] - hxxps://clients2.google.com/service/update2/crx

==================== Serviços (Whitelisted) ====================

(Se uma entrada for incluída na fixlist, será removida do Registro. O arquivo não será movido, a menos que seja colocado separadamente.)

R2 AMD FUEL Service; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [351944 2015-11-04] (Advanced Micro Devices, Inc.)
R2 ekrn; C:\Program Files\ESET\ESET Security\ekrn.exe [2625368 2017-04-26] (ESET)
R2 GbpSv; C:\Program Files (x86)\GbPlugin\gbpsv.exe [631520 2017-07-13] (GAS Tecnologia)
R2 HPSLPSVC; C:\Program Files (x86)\HP\Digital Imaging\bin\HPSLPSVC64.DLL [1039360 2011-08-18] (Hewlett-Packard Co.) [Arquivo não assinado]
R2 HPSupportSolutionsFrameworkService; C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe [321056 2017-06-01] (HP Inc.)
S2 Net Driver HPZ12; C:\Windows\System32\HPZinw12.dll [71680 2010-08-06] (Hewlett-Packard) [Arquivo não assinado]
R2 PlaysService; C:\Program Files (x86)\Raptr Inc\PlaysTV\plays_service.exe [55000 2017-06-29] (Copyright (c) 2017 Plays.tv, LLC)
S2 Pml Driver HPZ12; C:\Windows\System32\HPZipm12.dll [89600 2010-08-06] (Hewlett-Packard) [Arquivo não assinado]
R2 RapportMgmtService; C:\Program Files (x86)\Trusteer\Rapport\bin\RapportMgmtService.exe [2340336 2017-06-27] (IBM Corp.)
S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [2889896 2016-09-15] (Microsoft Corporation)
R2 TeamViewer; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [7757040 2017-04-06] (TeamViewer GmbH)
R2 Warsaw Technology; C:\Program Files\Diebold\Warsaw\core.exe [954416 2017-03-22] (GAS Tecnologia LTDA)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [347320 2017-04-27] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [103712 2017-04-27] (Microsoft Corporation)

===================== Drivers (Whitelisted) ======================

(Se uma entrada for incluída na fixlist, será removida do Registro. O arquivo não será movido, a menos que seja colocado separadamente.)

R0 amdkmafd; C:\WINDOWS\System32\drivers\amdkmafd.sys [31992 2015-06-03] (Advanced Micro Devices, Inc.)
R2 AODDriver4.3; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys [59616 2014-02-11] (Advanced Micro Devices)
R3 AtiHDAudioService; C:\WINDOWS\system32\drivers\AtihdWT6.sys [102912 2015-07-21] (Advanced Micro Devices)
S3 dot4; C:\WINDOWS\system32\DRIVERS\Dot4.sys [151968 2012-09-25] (Windows (R) Win 7 DDK provider)
S3 Dot4Print; C:\WINDOWS\System32\drivers\Dot4Prt.sys [27040 2012-09-25] (Windows (R) Win 7 DDK provider)
R1 eamonm; C:\WINDOWS\System32\DRIVERS\eamonm.sys [132848 2017-05-04] (ESET)
R0 edevmon; C:\WINDOWS\System32\DRIVERS\edevmon.sys [107344 2017-05-04] (ESET)
S0 eelam; C:\WINDOWS\System32\DRIVERS\eelam.sys [14880 2017-05-04] (ESET)
R1 ehdrv; C:\WINDOWS\system32\DRIVERS\ehdrv.sys [178056 2017-05-04] (ESET)
S2 ekbdflt; C:\WINDOWS\system32\DRIVERS\ekbdflt.sys [50752 2017-05-04] (ESET)
R3 Envy24HFS; C:\WINDOWS\system32\drivers\Envy24HF.sys [150016 2007-03-15] (VIA - IC Ensemble, Inc.)
R1 epfw; C:\WINDOWS\system32\DRIVERS\epfw.sys [78192 2017-05-04] (ESET)
R1 epfwwfp; C:\WINDOWS\system32\DRIVERS\epfwwfp.sys [101648 2017-05-04] (ESET)
R3 GBPRCM; C:\PROGRAM FILES (X86)\GBPLUGIN\gbprcm64.sys [29912 2015-12-08] (GAS Tecnologia)
R3 LcUvcUpper; C:\WINDOWS\system32\DRIVERS\LcUvcUpper.sys [37912 2015-09-21] (Microsoft Corporation)
S3 NetAdapterCx; C:\WINDOWS\System32\drivers\NetAdapterCx.sys [90624 2016-07-16] ()
R1 RapportAegle64; C:\Program Files (x86)\Trusteer\Rapport\bin\x64\RapportAegle64.sys [384288 2017-06-27] (IBM Corp.)
R1 RapportCerberus_1804063; C:\ProgramData\Trusteer\Rapport\store\exts\RapportCerberus\baseline\RapportCerberus64_1804063.sys [1271264 2017-07-12] (IBM Corp.)
R1 RapportEI64; C:\Program Files (x86)\Trusteer\Rapport\bin\x64\RapportEI64.sys [585408 2017-06-27] (IBM Corp.)
R0 RapportHades64; C:\WINDOWS\System32\Drivers\RapportHades64.sys [253880 2017-06-27] (IBM Corp.)
R0 RapportKE64; C:\WINDOWS\System32\Drivers\RapportKE64.sys [507936 2017-06-27] (IBM Corp.)
R1 RapportPG64; C:\Program Files (x86)\Trusteer\Rapport\bin\x64\RapportPG64.sys [610592 2017-06-27] (IBM Corp.)
R3 Warsaw_PP; C:\Program Files (x86)\GbPlugin\wsftprp64.sys [24792 2015-12-08] (GAS Tecnologia LTDA)
S3 WdBoot; C:\WINDOWS\system32\drivers\WdBoot.sys [44056 2016-07-16] (Microsoft Corporation)
S3 WdFilter; C:\WINDOWS\system32\drivers\WdFilter.sys [290144 2016-07-16] (Microsoft Corporation)
S3 WdNisDrv; C:\WINDOWS\System32\Drivers\WdNisDrv.sys [123232 2016-07-16] (Microsoft Corporation)
S1 wsddfac; C:\WINDOWS\System32\drivers\wsddfac.sys [28376 2017-07-12] (GAS Tecnologia)
R1 wsddntf; C:\WINDOWS\system32\DRIVERS\wsddntf.sys [47176 2016-06-21] (GAS Tecnologia)
S1 wsddpp; C:\Windows\system32\drivers\wsddpp.sys [25184 2017-03-22] (GAS Tecnologia)
S3 wsddprm; C:\WINDOWS\system32\drivers\wsddprm.sys [25184 2017-03-22] (GAS Tecnologia)

==================== NetSvcs (Whitelisted) ===================

(Se uma entrada for incluída na fixlist, será removida do Registro. O arquivo não será movido, a menos que seja colocado separadamente.)


==================== Um Mês Criados arquivos e pastas ========

(Se uma entrada for incluída na fixlist, o arquivo/pasta será movido.)

2017-07-13 20:53 - 2017-07-13 20:53 - 00000000 ____D C:\FRST
2017-07-13 15:39 - 2017-07-13 15:39 - 00002065 _____ C:\Users\Public\Desktop\Proteção de pagamento bancário.lnk
2017-07-13 15:39 - 2017-07-13 15:39 - 00000000 ____D C:\Users\Todos os Usuários\ESET
2017-07-13 15:39 - 2017-07-13 15:39 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ESET
2017-07-13 15:39 - 2017-07-13 15:39 - 00000000 ____D C:\ProgramData\ESET
2017-07-13 15:39 - 2017-07-13 15:39 - 00000000 ____D C:\Program Files\ESET
2017-07-13 14:47 - 2017-07-13 14:47 - 00000000 ____D C:\Users\TEste\AppData\Local\ElevatedDiagnostics
2017-07-13 14:34 - 2017-07-13 14:34 - 00000000 ____D C:\Users\TEste\AppData\Local\Comms
2017-07-13 14:19 - 2017-07-13 14:19 - 00000000 ____D C:\Users\TEste\AppData\Roaming\Skype
2017-07-13 14:18 - 2017-07-13 14:22 - 00002380 _____ C:\Users\TEste\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2017-07-13 14:18 - 2017-07-13 14:22 - 00000000 ___RD C:\Users\TEste\OneDrive
2017-07-13 14:12 - 2017-07-13 14:13 - 00000000 ____D C:\Users\TEste\AppData\Local\MicrosoftEdge
2017-07-13 14:11 - 2017-07-13 14:11 - 00000000 ____D C:\Users\TEste\AppData\Roaming\PlaysTV
2017-07-13 14:11 - 2017-07-13 14:11 - 00000000 ____D C:\Users\TEste\AppData\Local\AMD
2017-07-13 14:10 - 2017-07-13 15:18 - 00000000 ____D C:\Users\TEste\AppData\Roaming\Raptr
2017-07-13 14:10 - 2017-07-13 14:10 - 00000000 ____D C:\Users\TEste\AppData\Roaming\ATI
2017-07-13 14:10 - 2017-07-13 14:10 - 00000000 ____D C:\Users\TEste\AppData\Local\ATI
2017-07-13 14:09 - 2017-07-13 14:09 - 00000000 ____D C:\Users\TEste\AppData\Local\Publishers
2017-07-13 14:08 - 2017-07-13 15:39 - 00000000 ____D C:\Users\TEste
2017-07-13 14:08 - 2017-07-13 14:30 - 00000000 ____D C:\Users\TEste\AppData\Local\Packages
2017-07-13 14:08 - 2017-07-13 14:09 - 00000000 ____D C:\Users\TEste\AppData\Local\ConnectedDevicesPlatform
2017-07-13 14:08 - 2017-07-13 14:08 - 00000020 ___SH C:\Users\TEste\ntuser.ini
2017-07-13 14:08 - 2017-07-13 14:08 - 00000000 _SHDL C:\Users\TEste\Modelos
2017-07-13 14:08 - 2017-07-13 14:08 - 00000000 _SHDL C:\Users\TEste\Meus Documentos
2017-07-13 14:08 - 2017-07-13 14:08 - 00000000 _SHDL C:\Users\TEste\Menu Iniciar
2017-07-13 14:08 - 2017-07-13 14:08 - 00000000 _SHDL C:\Users\TEste\Dados de Aplicativos
2017-07-13 14:08 - 2017-07-13 14:08 - 00000000 _SHDL C:\Users\TEste\Configurações Locais
2017-07-13 14:08 - 2017-07-13 14:08 - 00000000 _SHDL C:\Users\TEste\AppData\Roaming\Microsoft\Windows\Start Menu\Programas
2017-07-13 14:08 - 2017-07-13 14:08 - 00000000 _SHDL C:\Users\TEste\AppData\Local\Histórico
2017-07-13 14:08 - 2017-07-13 14:08 - 00000000 _SHDL C:\Users\TEste\AppData\Local\Dados de Aplicativos
2017-07-13 14:08 - 2017-07-13 14:08 - 00000000 _SHDL C:\Users\TEste\Ambiente de Rede
2017-07-13 14:08 - 2017-07-13 14:08 - 00000000 _SHDL C:\Users\TEste\Ambiente de Impressão
2017-07-13 14:08 - 2017-07-13 14:08 - 00000000 ____D C:\Users\TEste\AppData\Roaming\Adobe
2017-07-13 14:08 - 2017-07-13 14:08 - 00000000 ____D C:\Users\TEste\AppData\Local\VirtualStore
2017-07-13 14:08 - 2017-07-13 14:08 - 00000000 ____D C:\Users\TEste\AppData\Local\TileDataLayer
2017-07-13 14:08 - 2017-07-13 14:08 - 00000000 ____D C:\Users\TEste\AppData\Local\Google
2017-07-13 14:08 - 2017-07-12 11:48 - 00000000 ____D C:\Users\TEste\AppData\Roaming\Mozilla
2017-07-13 14:08 - 2016-10-17 09:53 - 00000000 ____D C:\Users\TEste\AppData\Local\Trusteer
2017-07-13 14:08 - 2016-10-17 09:53 - 00000000 ____D C:\Users\TEste\AppData\Local\Microsoft Help
2017-07-13 13:12 - 2017-07-13 14:53 - 00000004 _____ C:\ScrubRetValFile.txt
2017-07-13 11:22 - 2017-07-13 11:22 - 00001129 _____ C:\Users\Public\Desktop\Revo Uninstaller Pro.lnk
2017-07-13 11:22 - 2017-07-13 11:22 - 00000000 ____D C:\Users\Todos os Usuários\VS Revo Group
2017-07-13 11:22 - 2017-07-13 11:22 - 00000000 ____D C:\Users\MANSIQ\AppData\Local\VS Revo Group
2017-07-13 11:22 - 2017-07-13 11:22 - 00000000 ____D C:\ProgramData\VS Revo Group
2017-07-13 11:22 - 2017-07-13 11:22 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Revo Uninstaller Pro
2017-07-13 11:22 - 2016-12-21 14:52 - 00040240 _____ (VS Revo Group) C:\WINDOWS\system32\Drivers\revoflt.sys
2017-07-13 11:21 - 2017-07-13 11:21 - 00000000 ____D C:\Program Files\VS Revo Group
2017-07-13 10:53 - 2017-07-13 10:53 - 00003280 _____ C:\WINDOWS\System32\Tasks\OneDrive Standalone Update Task v2
2017-07-13 10:51 - 2017-07-13 10:51 - 00000000 ____D C:\Users\ADALBA\AppData\Roaming\Skype
2017-07-13 10:50 - 2017-07-13 10:52 - 00002383 _____ C:\Users\ADALBA\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2017-07-13 10:50 - 2017-07-13 10:52 - 00000000 ___RD C:\Users\ADALBA\OneDrive
2017-07-13 10:50 - 2017-07-13 10:50 - 00000000 ____D C:\Users\ADALBA\AppData\Local\AMD
2017-07-13 10:49 - 2017-07-13 10:50 - 00000000 ____D C:\Users\ADALBA\AppData\Roaming\Raptr
2017-07-13 10:49 - 2017-07-13 10:49 - 00000000 ____D C:\Users\ADALBA\AppData\Roaming\PlaysTV
2017-07-13 10:49 - 2017-07-13 10:49 - 00000000 ____D C:\Users\ADALBA\AppData\Roaming\ATI
2017-07-13 10:49 - 2017-07-13 10:49 - 00000000 ____D C:\Users\ADALBA\AppData\Local\ATI
2017-07-13 10:48 - 2017-07-13 10:48 - 00000000 ____D C:\Users\ADALBA\AppData\Local\Publishers
2017-07-13 10:47 - 2017-07-13 10:50 - 00000000 ____D C:\Users\ADALBA
2017-07-13 10:47 - 2017-07-13 10:49 - 00000000 ____D C:\Users\ADALBA\AppData\Local\Packages
2017-07-13 10:47 - 2017-07-13 10:48 - 00000000 ____D C:\Users\ADALBA\AppData\Local\ConnectedDevicesPlatform
2017-07-13 10:47 - 2017-07-13 10:47 - 00000020 ___SH C:\Users\ADALBA\ntuser.ini
2017-07-13 10:47 - 2017-07-13 10:47 - 00000000 _SHDL C:\Users\ADALBA\Modelos
2017-07-13 10:47 - 2017-07-13 10:47 - 00000000 _SHDL C:\Users\ADALBA\Meus Documentos
2017-07-13 10:47 - 2017-07-13 10:47 - 00000000 _SHDL C:\Users\ADALBA\Menu Iniciar
2017-07-13 10:47 - 2017-07-13 10:47 - 00000000 _SHDL C:\Users\ADALBA\Dados de Aplicativos
2017-07-13 10:47 - 2017-07-13 10:47 - 00000000 _SHDL C:\Users\ADALBA\Configurações Locais
2017-07-13 10:47 - 2017-07-13 10:47 - 00000000 _SHDL C:\Users\ADALBA\AppData\Roaming\Microsoft\Windows\Start Menu\Programas
2017-07-13 10:47 - 2017-07-13 10:47 - 00000000 _SHDL C:\Users\ADALBA\AppData\Local\Histórico
2017-07-13 10:47 - 2017-07-13 10:47 - 00000000 _SHDL C:\Users\ADALBA\AppData\Local\Dados de Aplicativos
2017-07-13 10:47 - 2017-07-13 10:47 - 00000000 _SHDL C:\Users\ADALBA\Ambiente de Rede
2017-07-13 10:47 - 2017-07-13 10:47 - 00000000 _SHDL C:\Users\ADALBA\Ambiente de Impressão
2017-07-13 10:47 - 2017-07-13 10:47 - 00000000 ____D C:\Users\ADALBA\AppData\Roaming\Adobe
2017-07-13 10:47 - 2017-07-13 10:47 - 00000000 ____D C:\Users\ADALBA\AppData\Local\VirtualStore
2017-07-13 10:47 - 2017-07-13 10:47 - 00000000 ____D C:\Users\ADALBA\AppData\Local\TileDataLayer
2017-07-13 10:47 - 2017-07-13 10:47 - 00000000 ____D C:\Users\ADALBA\AppData\Local\Google
2017-07-13 10:47 - 2017-07-12 11:48 - 00000000 ____D C:\Users\ADALBA\AppData\Roaming\Mozilla
2017-07-13 10:47 - 2016-10-17 09:53 - 00000000 ____D C:\Users\ADALBA\AppData\Local\Trusteer
2017-07-13 10:47 - 2016-10-17 09:53 - 00000000 ____D C:\Users\ADALBA\AppData\Local\Microsoft Help
2017-07-13 00:27 - 2017-07-13 00:27 - 00000000 ____D C:\Users\Todos os Usuários\LHService
2017-07-13 00:27 - 2017-07-13 00:27 - 00000000 ____D C:\ProgramData\LHService
2017-07-13 00:17 - 2017-07-13 00:17 - 00000000 ____D C:\Users\Todos os Usuários\LockHunter
2017-07-13 00:17 - 2017-07-13 00:17 - 00000000 ____D C:\ProgramData\LockHunter
2017-07-13 00:16 - 2017-07-13 11:19 - 00000000 ____D C:\Program Files\LockHunter
2017-07-13 00:16 - 2017-07-13 00:16 - 00000000 ____D C:\Users\MANSIQ\AppData\Roaming\LockHunter
2017-07-12 23:35 - 2017-07-13 00:17 - 00000214 _____ C:\WINDOWS\Tasks\CreateExplorerShellUnelevatedTask.job
2017-07-12 13:45 - 2017-07-12 13:45 - 00000000 ____D C:\WINDOWS\system32\UNP
2017-07-12 12:07 - 2017-07-12 12:16 - 00000000 ____D C:\AdwCleaner
2017-07-12 11:48 - 2017-07-12 11:48 - 00000000 ____D C:\Users\Usuário Padrão\AppData\Roaming\Mozilla
2017-07-12 11:48 - 2017-07-12 11:48 - 00000000 ____D C:\Users\Default\AppData\Roaming\Mozilla
2017-07-12 11:48 - 2017-07-12 11:48 - 00000000 ____D C:\Users\Default User\AppData\Roaming\Mozilla
2017-07-12 11:47 - 2017-07-12 11:47 - 00003208 _____ C:\WINDOWS\System32\Tasks\{4B9734DA-D81A-41D2-8C95-5D35447B4C8F}
2017-07-10 15:33 - 2017-07-10 15:33 - 00097856 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\WindowsAccessBridge-32.dll
2017-07-10 15:33 - 2017-07-10 15:33 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2017-07-10 15:33 - 2017-07-10 15:33 - 00000000 ____D C:\Program Files (x86)\Java
2017-07-10 10:46 - 2017-07-10 10:46 - 00000000 ____D C:\Users\MANSIQ\AppData\Local\UNP
2017-07-10 10:31 - 2017-07-12 13:46 - 00000000 ____D C:\Program Files\UNP
2017-07-10 09:54 - 2017-07-10 09:54 - 00000000 ___HD C:\$SysReset
2017-07-10 09:34 - 2017-07-10 09:34 - 00000000 __SHD C:\found.001
2017-07-03 12:05 - 2017-07-03 12:05 - 00000000 ____D C:\Users\MANSIQ\AppData\Roaming\Apple Computer
2017-07-03 12:05 - 2017-07-03 12:05 - 00000000 ____D C:\Users\MANSIQ\AppData\Local\Apple Computer
2017-07-03 12:05 - 2017-07-03 12:05 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes
2017-07-03 12:03 - 2017-07-03 12:05 - 00000000 ____D C:\Program Files\iTunes
2017-07-03 12:03 - 2017-07-03 12:03 - 00002535 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Apple Software Update.lnk
2017-07-03 12:03 - 2017-07-03 12:03 - 00000000 ____D C:\WINDOWS\System32\Tasks\Apple
2017-07-03 12:03 - 2017-07-03 12:03 - 00000000 ____D C:\Users\Todos os Usuários\Apple Computer
2017-07-03 12:03 - 2017-07-03 12:03 - 00000000 ____D C:\Users\MANSIQ\AppData\Local\Apple
2017-07-03 12:03 - 2017-07-03 12:03 - 00000000 ____D C:\ProgramData\Apple Computer
2017-07-03 12:03 - 2017-07-03 12:03 - 00000000 ____D C:\Program Files\iPod
2017-07-03 12:03 - 2017-07-03 12:03 - 00000000 ____D C:\Program Files (x86)\Apple Software Update
2017-07-03 12:02 - 2017-07-03 12:02 - 00000000 ____D C:\Program Files\Common Files\Apple
2017-07-03 12:02 - 2017-07-03 12:02 - 00000000 ____D C:\Program Files\Bonjour
2017-07-03 12:02 - 2017-07-03 12:02 - 00000000 ____D C:\Program Files (x86)\Bonjour
2017-07-03 12:01 - 2017-07-03 12:03 - 00000000 ____D C:\Users\Todos os Usuários\Apple
2017-07-03 12:01 - 2017-07-03 12:03 - 00000000 ____D C:\ProgramData\Apple
2017-07-03 08:54 - 2017-07-03 08:54 - 00000000 ____D C:\Users\MANSIQ\AppData\Roaming\Hewlett-Packard
2017-07-01 15:35 - 2017-07-01 15:35 - 00000000 ____D C:\Users\MANSIQ\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\CMS
2017-07-01 15:34 - 2017-07-01 15:35 - 00054250 _____ C:\Program Files (x86)\CMS Setup Log.txt
2017-07-01 15:34 - 2017-07-01 15:35 - 00000000 ____D C:\Program Files (x86)\CMS
2017-06-26 13:11 - 2017-06-26 13:11 - 00000000 ___SD C:\WINDOWS\UpdateAssistantV2
2017-06-26 10:09 - 2017-06-03 07:50 - 00315744 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\atmfd.dll
2017-06-26 10:09 - 2017-06-03 07:16 - 00279904 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\sdbus.sys
2017-06-26 10:09 - 2017-06-03 07:11 - 01706488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KernelBase.dll
2017-06-26 10:09 - 2017-06-03 07:09 - 02213760 _____ (Microsoft Corporation) C:\WINDOWS\system32\KernelBase.dll
2017-06-26 10:09 - 2017-06-03 07:06 - 02048496 _____ C:\WINDOWS\SysWOW64\CoreUIComponents.dll
2017-06-26 10:09 - 2017-06-03 06:59 - 01181024 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ndis.sys
2017-06-26 10:09 - 2017-06-03 06:59 - 00118112 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tdx.sys
2017-06-26 10:09 - 2017-06-03 06:58 - 00340832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msv1_0.dll
2017-06-26 10:09 - 2017-06-03 06:55 - 00780640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WWAHost.exe
2017-06-26 10:09 - 2017-06-03 06:54 - 00187232 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dumpsd.sys
2017-06-26 10:09 - 2017-06-03 06:52 - 01021784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppxPackaging.dll
2017-06-26 10:09 - 2017-06-03 06:52 - 00607072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NetSetupEngine.dll
2017-06-26 10:09 - 2017-06-03 06:52 - 00111968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NetSetupApi.dll
2017-06-26 10:09 - 2017-06-03 06:50 - 00857440 _____ (Microsoft Corporation) C:\WINDOWS\system32\WWAHost.exe
2017-06-26 10:09 - 2017-06-03 06:50 - 00381792 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBXHCI.SYS
2017-06-26 10:09 - 2017-06-03 06:49 - 20967840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll
2017-06-26 10:09 - 2017-06-03 06:48 - 00857952 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupEngine.dll
2017-06-26 10:09 - 2017-06-03 06:48 - 00148832 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupApi.dll
2017-06-26 10:09 - 2017-06-03 06:45 - 22220864 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll
2017-06-26 10:09 - 2017-06-03 06:44 - 01412640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gdi32full.dll
2017-06-26 10:09 - 2017-06-03 06:44 - 00545944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fontdrvhost.exe
2017-06-26 10:09 - 2017-06-03 06:39 - 05686272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Data.Pdf.dll
2017-06-26 10:09 - 2017-06-03 06:39 - 02532192 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpip.sys
2017-06-26 10:09 - 2017-06-03 06:33 - 00095232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserDataTimeUtil.dll
2017-06-26 10:09 - 2017-06-03 06:32 - 00002560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tzres.dll
2017-06-26 10:09 - 2017-06-03 06:31 - 00224256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ExSMime.dll
2017-06-26 10:09 - 2017-06-03 06:31 - 00037376 _____ (Adobe Systems) C:\WINDOWS\SysWOW64\atmlib.dll
2017-06-26 10:09 - 2017-06-03 06:28 - 00285184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.BlockedShutdown.dll
2017-06-26 10:09 - 2017-06-03 06:28 - 00232448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edputil.dll
2017-06-26 10:09 - 2017-06-03 06:26 - 00231936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.LockScreen.dll
2017-06-26 10:09 - 2017-06-03 06:26 - 00100352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AuthBrokerUI.dll
2017-06-26 10:09 - 2017-06-03 06:22 - 00364544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NetSetupShim.dll
2017-06-26 10:09 - 2017-06-03 06:22 - 00327168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\netcorehc.dll
2017-06-26 10:09 - 2017-06-03 06:22 - 00181760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tcpipcfg.dll
2017-06-26 10:09 - 2017-06-03 06:20 - 00755712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kerberos.dll
2017-06-26 10:09 - 2017-06-03 06:19 - 01164288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\certutil.exe
2017-06-26 10:09 - 2017-06-03 06:16 - 00709120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CPFilters.dll
2017-06-26 10:09 - 2017-06-03 06:16 - 00119808 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserDataTimeUtil.dll
2017-06-26 10:09 - 2017-06-03 06:15 - 00886272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\aadtb.dll
2017-06-26 10:09 - 2017-06-03 06:15 - 00053248 _____ (Microsoft Corporation) C:\WINDOWS\system32\musdialoghandlers.dll
2017-06-26 10:09 - 2017-06-03 06:15 - 00041472 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\BasicRender.sys
2017-06-26 10:09 - 2017-06-03 06:14 - 00238592 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotification.exe
2017-06-26 10:09 - 2017-06-03 06:14 - 00124416 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssprxy.dll
2017-06-26 10:09 - 2017-06-03 06:14 - 00098304 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotificationUx.exe
2017-06-26 10:09 - 2017-06-03 06:12 - 00027136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fdProxy.dll
2017-06-26 10:09 - 2017-06-03 06:09 - 00441344 _____ (Microsoft Corporation) C:\WINDOWS\system32\netcorehc.dll
2017-06-26 10:09 - 2017-06-03 06:08 - 02643968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tquery.dll
2017-06-26 10:09 - 2017-06-03 06:08 - 01221120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Audio.dll
2017-06-26 10:09 - 2017-06-03 06:07 - 00552960 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusUpdateHandlers.dll
2017-06-26 10:09 - 2017-06-03 06:07 - 00456192 _____ (Microsoft Corporation) C:\WINDOWS\system32\puiobj.dll
2017-06-26 10:09 - 2017-06-03 06:05 - 01883648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Logon.dll
2017-06-26 10:09 - 2017-06-03 06:05 - 00295424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\hnetcfg.dll
2017-06-26 10:09 - 2017-06-03 06:04 - 02006528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DWrite.dll
2017-06-26 10:09 - 2017-06-03 06:04 - 00773120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchIndexer.exe
2017-06-26 10:09 - 2017-06-03 06:03 - 01988096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mssrch.dll
2017-06-26 10:09 - 2017-06-03 06:02 - 02997760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32kfull.sys
2017-06-26 10:09 - 2017-06-03 05:54 - 01217024 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Audio.dll
2017-06-26 10:09 - 2017-06-03 05:52 - 03403264 _____ (Microsoft Corporation) C:\WINDOWS\system32\tquery.dll
2017-06-26 10:09 - 2017-06-03 05:51 - 00266752 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupSvc.dll
2017-06-26 10:09 - 2017-06-03 05:50 - 02538496 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssrch.dll
2017-06-26 10:09 - 2017-06-03 05:49 - 00903680 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchIndexer.exe
2017-06-26 10:09 - 2017-06-03 05:48 - 01131008 _____ (Microsoft Corporation) C:\WINDOWS\system32\localspl.dll
2017-06-26 10:09 - 2017-06-03 05:48 - 00834048 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32spl.dll
2017-06-26 10:09 - 2017-06-03 05:48 - 00391168 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuuhext.dll
2017-06-26 10:09 - 2017-06-03 05:40 - 00483840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CoreMessaging.dll
2017-06-26 10:09 - 2017-05-25 02:56 - 00038752 _____ (Microsoft Corporation) C:\WINDOWS\system32\OOBEUpdater.exe
2017-06-26 10:09 - 2017-03-04 03:16 - 00368128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\puiobj.dll
2017-06-26 10:09 - 2017-03-04 03:16 - 00100864 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpninprc.dll
2017-06-26 10:09 - 2016-09-07 01:53 - 00118272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppointmentActivation.dll
2017-06-26 10:08 - 2017-06-03 07:50 - 00192856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\aepic.dll
2017-06-26 10:08 - 2017-06-03 07:14 - 01564512 _____ (Microsoft Corporation) C:\WINDOWS\system32\appraiser.dll
2017-06-26 10:08 - 2017-06-03 07:14 - 01214816 _____ (Microsoft Corporation) C:\WINDOWS\system32\aeinv.dll
2017-06-26 10:08 - 2017-06-03 07:14 - 00629088 _____ (Microsoft Corporation) C:\WINDOWS\system32\generaltel.dll
2017-06-26 10:08 - 2017-06-03 07:14 - 00544096 _____ (Microsoft Corporation) C:\WINDOWS\system32\devinv.dll
2017-06-26 10:08 - 2017-06-03 07:14 - 00379232 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\atmfd.dll
2017-06-26 10:08 - 2017-06-03 07:14 - 00335712 _____ (Microsoft Corporation) C:\WINDOWS\system32\dcntel.dll
2017-06-26 10:08 - 2017-06-03 07:14 - 00334176 _____ (Microsoft Corporation) C:\WINDOWS\system32\invagent.dll
2017-06-26 10:08 - 2017-06-03 07:14 - 00233824 _____ (Microsoft Corporation) C:\WINDOWS\system32\aepic.dll
2017-06-26 10:08 - 2017-06-03 07:14 - 00136032 _____ (Microsoft Corporation) C:\WINDOWS\system32\acmigration.dll
2017-06-26 10:08 - 2017-06-03 07:14 - 00136024 _____ (Microsoft Corporation) C:\WINDOWS\system32\ImplatSetup.dll
2017-06-26 10:08 - 2017-06-03 07:14 - 00096608 _____ (Microsoft Corporation) C:\WINDOWS\system32\CompatTelRunner.exe
2017-06-26 10:08 - 2017-06-03 07:14 - 00034648 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceCensus.exe
2017-06-26 10:08 - 2017-06-03 07:11 - 00128864 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tm.sys
2017-06-26 10:08 - 2017-06-03 07:08 - 07783256 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2017-06-26 10:08 - 2017-06-03 07:01 - 02681200 _____ C:\WINDOWS\system32\CoreUIComponents.dll
2017-06-26 10:08 - 2017-06-03 06:59 - 00764392 _____ (Microsoft Corporation) C:\WINDOWS\system32\CoreMessaging.dll
2017-06-26 10:08 - 2017-06-03 06:53 - 00404824 _____ (Microsoft Corporation) C:\WINDOWS\system32\msv1_0.dll
2017-06-26 10:08 - 2017-06-03 06:51 - 02187104 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys
2017-06-26 10:08 - 2017-06-03 06:51 - 00402272 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms1.sys
2017-06-26 10:08 - 2017-06-03 06:49 - 00624048 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cng.sys
2017-06-26 10:08 - 2017-06-03 06:49 - 00509280 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\storport.sys
2017-06-26 10:08 - 2017-06-03 06:48 - 01112416 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppxPackaging.dll
2017-06-26 10:08 - 2017-06-03 06:48 - 01100128 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvix64.exe
2017-06-26 10:08 - 2017-06-03 06:48 - 00989024 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvax64.exe
2017-06-26 10:08 - 2017-06-03 06:44 - 01600624 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppobjs.dll
2017-06-26 10:08 - 2017-06-03 06:40 - 01566552 _____ (Microsoft Corporation) C:\WINDOWS\system32\gdi32full.dll
2017-06-26 10:08 - 2017-06-03 06:40 - 00628552 _____ (Microsoft Corporation) C:\WINDOWS\system32\fontdrvhost.exe
2017-06-26 10:08 - 2017-06-03 06:39 - 00455520 _____ (Microsoft Corporation) C:\WINDOWS\system32\securekernel.exe
2017-06-26 10:08 - 2017-06-03 06:23 - 00306688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieproxy.dll
2017-06-26 10:08 - 2017-06-03 06:22 - 07217152 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Data.Pdf.dll
2017-06-26 10:08 - 2017-06-03 06:18 - 22569984 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll
2017-06-26 10:08 - 2017-06-03 06:16 - 00002560 _____ (Microsoft Corporation) C:\WINDOWS\system32\tzres.dll
2017-06-26 10:08 - 2017-06-03 06:15 - 19414016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2017-06-26 10:08 - 2017-06-03 06:15 - 18364928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll
2017-06-26 10:08 - 2017-06-03 06:14 - 00045056 _____ (Adobe Systems) C:\WINDOWS\system32\atmlib.dll
2017-06-26 10:08 - 2017-06-03 06:11 - 00353792 _____ (Microsoft Corporation) C:\WINDOWS\system32\cloudAP.dll
2017-06-26 10:08 - 2017-06-03 06:10 - 00418304 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.BlockedShutdown.dll
2017-06-26 10:08 - 2017-06-03 06:10 - 00252928 _____ (Microsoft Corporation) C:\WINDOWS\system32\edputil.dll
2017-06-26 10:08 - 2017-06-03 06:10 - 00117760 _____ (Microsoft Corporation) C:\WINDOWS\system32\AuthBrokerUI.dll
2017-06-26 10:08 - 2017-06-03 06:09 - 00489472 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupShim.dll
2017-06-26 10:08 - 2017-06-03 06:09 - 00337408 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetworkBindingEngineMigPlugin.dll
2017-06-26 10:08 - 2017-06-03 06:08 - 12187648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2017-06-26 10:08 - 2017-06-03 06:08 - 00691200 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieproxy.dll
2017-06-26 10:08 - 2017-06-03 06:08 - 00324608 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.LockScreen.dll
2017-06-26 10:08 - 2017-06-03 06:08 - 00147456 _____ (Microsoft Corporation) C:\WINDOWS\system32\winsrv.dll
2017-06-26 10:08 - 2017-06-03 06:07 - 00255488 _____ (Microsoft Corporation) C:\WINDOWS\system32\HNetCfgClient.dll
2017-06-26 10:08 - 2017-06-03 06:06 - 03664384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2017-06-26 10:08 - 2017-06-03 06:06 - 00198144 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpapisrv.dll
2017-06-26 10:08 - 2017-06-03 06:04 - 06042624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakra.dll
2017-06-26 10:08 - 2017-06-03 06:03 - 00932864 _____ (Microsoft Corporation) C:\WINDOWS\system32\kerberos.dll
2017-06-26 10:08 - 2017-06-03 06:01 - 00856064 _____ (Microsoft Corporation) C:\WINDOWS\system32\efscore.dll
2017-06-26 10:08 - 2017-06-03 06:00 - 23677440 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2017-06-26 10:08 - 2017-06-03 05:58 - 00064512 _____ (Microsoft Corporation) C:\WINDOWS\system32\fdProxy.dll
2017-06-26 10:08 - 2017-06-03 05:56 - 13091840 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2017-06-26 10:08 - 2017-06-03 05:53 - 08125440 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll
2017-06-26 10:08 - 2017-06-03 05:52 - 02510848 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetworkMobileSettings.dll
2017-06-26 10:08 - 2017-06-03 05:52 - 00975872 _____ (Microsoft Corporation) C:\WINDOWS\HelpPane.exe
2017-06-26 10:08 - 2017-06-03 05:52 - 00886784 _____ (Microsoft Corporation) C:\WINDOWS\system32\CPFilters.dll
2017-06-26 10:08 - 2017-06-03 05:51 - 01418240 _____ (Microsoft Corporation) C:\WINDOWS\system32\certutil.exe
2017-06-26 10:08 - 2017-06-03 05:50 - 04744704 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2017-06-26 10:08 - 2017-06-03 05:49 - 03615744 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys
2017-06-26 10:08 - 2017-06-03 05:49 - 02691072 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Logon.dll
2017-06-26 10:08 - 2017-06-03 05:49 - 02475520 _____ (Microsoft Corporation) C:\WINDOWS\system32\DWrite.dll
2017-06-26 10:08 - 2017-06-03 05:49 - 02318848 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll
2017-06-26 10:08 - 2017-06-03 05:49 - 01845248 _____ (Microsoft Corporation) C:\WINDOWS\system32\FntCache.dll
2017-06-26 10:08 - 2017-06-03 05:49 - 01513472 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys
2017-06-26 10:08 - 2017-06-03 05:49 - 00351744 _____ (Microsoft Corporation) C:\WINDOWS\system32\hnetcfg.dll
2017-06-26 10:08 - 2017-06-03 05:48 - 01490432 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll
2017-06-26 10:08 - 2017-06-03 05:46 - 01121280 _____ (Microsoft Corporation) C:\WINDOWS\system32\aadtb.dll
2017-06-26 10:08 - 2017-06-03 03:08 - 00080078 _____ C:\WINDOWS\system32\normidna.nls
2017-06-26 10:08 - 2017-03-04 03:22 - 00822784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakradiag.dll
2017-06-26 10:08 - 2017-03-04 03:19 - 00635904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9diag.dll
2017-06-26 09:26 - 2017-07-06 10:06 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox

==================== Um Mês Modificados arquivos e pastas ========

(Se uma entrada for incluída na fixlist, o arquivo/pasta será movido.)

2017-07-13 20:54 - 2016-06-21 14:48 - 00000000 ____D C:\Users\MANSIQ\AppData\Roaming\Skype
2017-07-13 20:50 - 2016-12-05 08:34 - 00000000 ____D C:\Users\MANSIQ\AppData\LocalLow\Mozilla
2017-07-13 20:49 - 2016-07-16 08:47 - 00000000 ____D C:\Program Files\Common Files\microsoft shared
2017-07-13 20:49 - 2016-04-15 13:52 - 00000000 ____D C:\Users\Todos os Usuários\Microsoft Help
2017-07-13 20:48 - 2016-07-16 08:47 - 00000000 ____D C:\Program Files\Common Files\System
2017-07-13 20:48 - 2016-02-13 14:57 - 00000000 ____D C:\WINDOWS\ShellNew
2017-07-13 20:48 - 2015-10-30 04:24 - 00000076 _____ C:\WINDOWS\win.ini
2017-07-13 20:31 - 2016-10-17 09:47 - 00000000 ____D C:\WINDOWS\system32\SleepStudy
2017-07-13 17:14 - 2016-07-16 08:36 - 00000000 ____D C:\WINDOWS\CbsTemp
2017-07-13 15:43 - 2016-06-20 16:04 - 00000000 ____D C:\Users\MANSIQ\AppData\Local\ESET
2017-07-13 15:39 - 2016-07-16 08:47 - 00000000 ___HD C:\WINDOWS\ELAMBKUP
2017-07-13 15:39 - 2016-07-16 08:45 - 00000000 ____D C:\WINDOWS\INF
2017-07-13 15:33 - 2016-10-17 09:49 - 00000000 ____D C:\Users\MANSIQ
2017-07-13 15:33 - 2016-04-15 13:43 - 00000000 ____D C:\Users\MANSIQ\AppData\Roaming\Raptr
2017-07-13 15:32 - 2016-04-18 11:54 - 00000000 ____D C:\Users\Todos os Usuários\GbPlugin
2017-07-13 15:32 - 2016-04-18 11:54 - 00000000 ____D C:\ProgramData\GbPlugin
2017-07-13 15:22 - 2016-07-16 20:10 - 00782304 _____ C:\WINDOWS\system32\prfh0416.dat
2017-07-13 15:22 - 2016-07-16 20:10 - 00433918 _____ C:\WINDOWS\system32\prfc0416.dat
2017-07-13 15:22 - 2016-04-15 13:03 - 02918968 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2017-07-13 15:15 - 2016-10-17 10:01 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT
2017-07-13 15:15 - 2016-10-17 09:47 - 00438272 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2017-07-13 15:15 - 2016-04-18 11:54 - 00000000 ____D C:\Program Files (x86)\GbPlugin
2017-07-13 14:31 - 2016-07-16 08:47 - 00000000 ____D C:\WINDOWS\AppReadiness
2017-07-13 14:08 - 2016-02-13 15:20 - 00000000 __RHD C:\Users\Public\AccountPictures
2017-07-13 10:37 - 2016-07-16 08:47 - 00000000 ___HD C:\Program Files\WindowsApps
2017-07-13 10:37 - 2016-04-15 12:59 - 00000000 ____D C:\Users\MANSIQ\AppData\Local\Packages
2017-07-13 09:58 - 2016-10-17 10:01 - 00002886 _____ C:\WINDOWS\System32\Tasks\OneDrive Standalone Update Task
2017-07-13 09:53 - 2016-04-15 14:28 - 00015194 _____ C:\WINDOWS\Q-Dir.ini
2017-07-13 09:49 - 2016-04-25 09:38 - 00000000 ___RD C:\Users\MANSIQ\OneDrive
2017-07-13 09:37 - 2016-04-15 17:45 - 00000000 ____D C:\Users\MANSIQ\AppData\Local\ElevatedDiagnostics
2017-07-13 09:25 - 2016-04-15 15:28 - 00000000 ____D C:\Program Files (x86)\TeamViewer
2017-07-13 09:25 - 2016-04-15 13:45 - 00000000 ____D C:\Users\MANSIQ\AppData\Roaming\PlaysTV
2017-07-12 22:58 - 2016-04-18 11:57 - 00028376 _____ (GAS Tecnologia) C:\WINDOWS\system32\Drivers\wsddfac.sys
2017-07-12 22:40 - 2016-04-15 15:28 - 00000000 ____D C:\Users\MANSIQ\AppData\Roaming\TeamViewer
2017-07-12 13:50 - 2016-04-18 10:25 - 00000000 ____D C:\WINDOWS\system32\MRT
2017-07-12 13:47 - 2016-04-18 10:25 - 135225752 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2017-07-12 13:12 - 2016-10-19 12:59 - 00000000 ____D C:\WINDOWS\Minidump
2017-07-12 13:12 - 2016-10-17 10:46 - 00000000 ___DC C:\WINDOWS\Panther
2017-07-12 11:47 - 2016-09-08 12:28 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Proteção de Terminal Trusteer
2017-07-12 11:11 - 2016-04-15 15:03 - 00565416 ____N (Microsoft Corporation) C:\WINDOWS\system32\MpSigStub.exe
2017-07-12 09:49 - 2017-05-15 11:29 - 00000000 ____D C:\Users\Todos os Usuários\HDAudDeck-VIA
2017-07-12 09:49 - 2017-05-15 11:29 - 00000000 ____D C:\ProgramData\HDAudDeck-VIA
2017-07-12 09:04 - 2016-04-15 13:02 - 00002277 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2017-07-12 09:04 - 2016-04-15 13:02 - 00002265 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2017-07-10 15:34 - 2016-04-15 15:12 - 00000000 ____D C:\Users\Todos os Usuários\Oracle
2017-07-10 15:34 - 2016-04-15 15:12 - 00000000 ____D C:\ProgramData\Oracle
2017-07-10 11:30 - 2016-07-16 08:47 - 00000000 ____D C:\WINDOWS\system32\NDF
2017-07-06 10:06 - 2016-04-15 13:04 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2017-06-29 10:35 - 2016-07-16 08:47 - 00000000 ____D C:\WINDOWS\rescache
2017-06-29 09:11 - 2016-06-21 14:48 - 00000000 ____D C:\Users\Todos os Usuários\Skype
2017-06-29 09:11 - 2016-06-21 14:48 - 00000000 ____D C:\ProgramData\Skype
2017-06-29 09:10 - 2016-10-31 10:34 - 00000000 ___RD C:\Program Files (x86)\Skype
2017-06-27 15:11 - 2016-09-08 12:28 - 00507936 _____ (IBM Corp.) C:\WINDOWS\system32\Drivers\RapportKE64.sys
2017-06-27 15:11 - 2016-09-08 12:28 - 00253880 _____ (IBM Corp.) C:\WINDOWS\system32\Drivers\RapportHades64.sys
2017-06-26 13:13 - 2016-07-16 03:04 - 00524288 _____ C:\WINDOWS\system32\config\BBI
2017-06-26 13:11 - 2016-07-16 08:47 - 00000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2017-06-26 13:11 - 2016-07-16 08:47 - 00000000 ____D C:\WINDOWS\system32\appraiser
2017-06-26 13:11 - 2016-07-16 08:47 - 00000000 ____D C:\WINDOWS\ShellExperiences

==================== Arquivos na raiz de alguns diretórios =======

2017-07-01 15:34 - 2017-07-01 15:35 - 0054250 _____ () C:\Program Files (x86)\CMS Setup Log.txt
2016-05-30 10:53 - 2016-06-20 16:43 - 0003584 _____ () C:\Users\MANSIQ\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2016-10-20 10:30 - 2016-10-20 10:30 - 0001623 _____ () C:\Users\MANSIQ\AppData\Local\recently-used.xbel
2016-04-15 17:30 - 2016-04-15 17:41 - 0000812 _____ () C:\ProgramData\hpzinstall.log

Alguns arquivos em TEMP:
====================
2017-07-13 15:49 - 2011-03-31 20:05 - 0174440 _____ (Microsoft Corporation) C:\Users\MANSIQ\AppData\Local\Temp\ose00000.exe
2017-07-13 20:40 - 2011-03-31 20:05 - 0174440 _____ (Microsoft Corporation) C:\Users\MANSIQ\AppData\Local\Temp\ose00001.exe
2017-07-13 15:19 - 2011-03-31 20:05 - 0174440 _____ (Microsoft Corporation) C:\Users\TEste\AppData\Local\Temp\ose00000.exe

==================== Bamital & volsnap ======================

(Não há correção automática para arquivos que não passaram na verificação.)

C:\WINDOWS\system32\winlogon.exe => O arquivo é assinado digitalmente
C:\WINDOWS\system32\wininit.exe => O arquivo é assinado digitalmente
C:\WINDOWS\explorer.exe => O arquivo é assinado digitalmente
C:\WINDOWS\SysWOW64\explorer.exe => O arquivo é assinado digitalmente
C:\WINDOWS\system32\svchost.exe => O arquivo é assinado digitalmente
C:\WINDOWS\SysWOW64\svchost.exe => O arquivo é assinado digitalmente
C:\WINDOWS\system32\services.exe => O arquivo é assinado digitalmente
C:\WINDOWS\system32\User32.dll => O arquivo é assinado digitalmente
C:\WINDOWS\SysWOW64\User32.dll => O arquivo é assinado digitalmente
C:\WINDOWS\system32\userinit.exe => O arquivo é assinado digitalmente
C:\WINDOWS\SysWOW64\userinit.exe => O arquivo é assinado digitalmente
C:\WINDOWS\system32\rpcss.dll => O arquivo é assinado digitalmente
C:\WINDOWS\system32\dnsapi.dll => O arquivo é assinado digitalmente
C:\WINDOWS\SysWOW64\dnsapi.dll => O arquivo é assinado digitalmente
C:\WINDOWS\system32\Drivers\volsnap.sys => O arquivo é assinado digitalmente

LastRegBack: 2017-07-10 10:17

==================== Fim de FRST.txt ============================