Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version:18-11-2015
Ran by Eda (administrator) on EDA-PC (19-11-2015 11:08:08)
Running from C:\Users\Eda\Downloads
Loaded Profiles: Eda (Available Profiles: Eda)
Platform: Windows 7 Ultimate (X64) Language: Português (Brasil)
Internet Explorer Version 8 (Default browser: Chrome)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(GAS Tecnologia) C:\Program Files (x86)\GbPlugin\GbpSv.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Firebird Project) C:\Program Files (x86)\Firebird\Firebird_2_5\bin\fbguard.exe
(HP) C:\Windows\System32\HPSIsvc.exe
(Firebird Project) C:\Program Files (x86)\Firebird\Firebird_2_5\bin\fbserver.exe
(Microsoft Corporation) C:\Windows\System32\LogonUI.exe
(GAS Tecnologia) C:\Program Files (x86)\GbPlugin\GbpSv.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe


==================== Registry (Whitelisted) ===========================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM-x32\...\Run: [BCSSync] => C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe [91520 2010-03-13] (Microsoft Corporation)
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2014-05-08] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [7004376 2015-11-19] (AVAST Software)
Winlogon\Notify\ GbPluginBb: C:\Program Files (x86)\GbPlugin\gbieh.dll [2015-11-04] (Banco do Brasil)
Winlogon\Notify\ GbPluginCef: C:\Program Files (x86)\GbPlugin\gbiehCef.dll [2015-09-01] (Caixa Economica Federal)
HKU\S-1-5-21-2980527414-734487522-1780117058-1000\...\MountPoints2: {8691db03-8dec-11e5-8e2d-20cf30df71ab} - F:\SISetup.exe
ShellExecuteHooks-x32: GbPluginObj Class - {E37CB5F0-51F5-4395-A808-5FA49E399F83} - C:\Program Files (x86)\GbPlugin\gbieh.dll [1945472 2015-11-04] (Banco do Brasil)
ShellExecuteHooks-x32: GbPluginObj Class - {E37CB5F0-51F5-4395-A808-5FA49E399003} - C:\Program Files (x86)\GbPlugin\gbiehcef.dll [1867432 2015-09-01] (Caixa Economica Federal)
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2015-11-19] (AVAST Software)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Tcpip\Parameters: [DhcpNameServer] 200.204.0.10 200.204.0.138
Tcpip\..\Interfaces\{D5DEBBAF-D8EC-4758-9C38-3B0DD875151F}: [DhcpNameServer] 200.204.0.10 200.204.0.138

Internet Explorer:
==================
HKU\S-1-5-21-2980527414-734487522-1780117058-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.com.br/
BHO: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL [2010-03-25] (Microsoft Corporation)
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2015-11-19] (AVAST Software)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL [2010-02-28] (Microsoft Corporation)
BHO-x32: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL [2010-03-25] (Microsoft Corporation)
BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2015-11-19] (AVAST Software)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL [2010-02-28] (Microsoft Corporation)
BHO-x32: GbIehObj Class -> {C41A1C0E-EA6C-11D4-B1B8-444553540000} -> C:\Program Files (x86)\GbPlugin\gbieh.dll [2015-11-04] (Banco do Brasil)
BHO-x32: GbIehObj Class -> {C41A1C0E-EA6C-11D4-B1B8-444553540003} -> C:\Program Files (x86)\GbPlugin\gbiehcef.dll [2015-09-01] (Caixa Economica Federal)
DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
Filter: deflate - {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\Windows\system32\urlmon.dll [2009-07-13] (Microsoft Corporation)
Filter-x32: deflate - {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\Windows\SysWOW64\urlmon.dll [2009-07-13] (Microsoft Corporation)
Filter: gzip - {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\Windows\system32\urlmon.dll [2009-07-13] (Microsoft Corporation)
Filter-x32: gzip - {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\Windows\SysWOW64\urlmon.dll [2009-07-13] (Microsoft Corporation)

FireFox:
========
FF ProfilePath: C:\Users\Eda\AppData\Roaming\Mozilla\Firefox\Profiles\9cxm6tey.default
FF Plugin: @microsoft.com/GENUINE -> disabled [No File]
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/GENUINE -> disabled [No File]
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL [2010-03-24] (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.28.15\npGoogleUpdate3.dll [2015-11-18] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.28.15\npGoogleUpdate3.dll [2015-11-18] (Google Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2014-05-08] (Adobe Systems Inc.)
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: Avast Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2015-11-19]

Chrome:
=======
CHR Profile: C:\Users\Eda\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Apresentações) - C:\Users\Eda\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-11-18]
CHR Extension: (Google Docs) - C:\Users\Eda\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-11-18]
CHR Extension: (Google Drive) - C:\Users\Eda\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-11-18]
CHR Extension: (YouTube) - C:\Users\Eda\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-11-18]
CHR Extension: (Google Search) - C:\Users\Eda\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-11-18]
CHR Extension: (Planilhas do Google) - C:\Users\Eda\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-11-18]
CHR Extension: (Documentos Google off-line) - C:\Users\Eda\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2015-11-18]
CHR Extension: (Avast Online Security) - C:\Users\Eda\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2015-11-19]
CHR Extension: (Pagamentos da Chrome Web Store) - C:\Users\Eda\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-11-18]
CHR Extension: (Gmail) - C:\Users\Eda\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-11-18]
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2015-11-19]

==================== Services (Whitelisted) ========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [174416 2015-11-19] (AVAST Software)
R2 FirebirdGuardianDefaultInstance; C:\Program Files (x86)\Firebird\Firebird_2_5\bin\fbguard.exe [98304 2010-09-17] (Firebird Project) [File not signed]
R3 FirebirdServerDefaultInstance; C:\Program Files (x86)\Firebird\Firebird_2_5\bin\fbserver.exe [3735552 2010-09-17] (Firebird Project) [File not signed]
R2 GbpSv; C:\Program Files (x86)\GbPlugin\GbpSv.exe [593120 2015-11-04] (GAS Tecnologia)
R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2009-07-13] (Microsoft Corporation)

===================== Drivers (Whitelisted) ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [28656 2015-11-19] (AVAST Software)
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [97648 2015-11-19] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [93528 2015-11-19] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65224 2015-11-19] (AVAST Software)
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1059656 2015-11-19] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [449992 2015-11-19] (AVAST Software)
R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [154256 2015-11-19] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [273784 2015-11-19] (AVAST Software)
S3 ebdrv; C:\Windows\system32\DRIVERS\evbda.sys [3286016 2009-06-10] (Broadcom Corporation)
R1 gbpddfac; C:\Windows\System32\drivers\gbpddfac64.sys [28888 2015-11-19] (GAS Tecnologia)
R0 gbpddreg; C:\Windows\System32\drivers\gbpddreg64.sys [29816 2015-11-19] (GAS Tecnologia)
R3 GBPRCM; C:\Program Files (x86)\GbPlugin\gbprcm64.sys [29912 2015-09-22] (GAS Tecnologia)
R3 mvusbews; C:\Windows\System32\Drivers\mvusbews.sys [20480 2010-04-28] (Marvell Semiconductor, Inc.)
R3 Warsaw_PP; C:\Program Files (x86)\GbPlugin\wsftprp64.sys [24792 2015-09-22] (GAS Tecnologia LTDA)

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-11-19 11:08 - 2015-11-19 11:08 - 00011037 _____ C:\Users\Eda\Downloads\FRST.txt
2015-11-19 11:08 - 2015-11-19 11:08 - 00000000 ____D C:\FRST
2015-11-19 11:06 - 2015-11-19 11:07 - 02008576 _____ (Farbar) C:\Users\Eda\Downloads\FRST64.exe
2015-11-19 10:51 - 2015-11-19 10:55 - 00000000 ____D C:\Windows\system32\MRT
2015-11-19 10:51 - 2015-10-27 18:43 - 145617392 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2015-11-19 10:47 - 2011-04-09 04:58 - 00142336 _____ (Microsoft Corporation) C:\Windows\system32\poqexec.exe
2015-11-19 10:47 - 2011-04-09 04:45 - 05509504 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2015-11-19 10:47 - 2011-04-09 04:13 - 03957632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2015-11-19 10:47 - 2011-04-09 04:13 - 03901824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2015-11-19 10:47 - 2011-04-09 03:56 - 00123904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\poqexec.exe
2015-11-19 10:43 - 2012-06-02 20:19 - 02428952 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2015-11-19 10:43 - 2012-06-02 20:19 - 00701976 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2015-11-19 10:43 - 2012-06-02 20:19 - 00057880 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2015-11-19 10:43 - 2012-06-02 20:19 - 00044056 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
2015-11-19 10:43 - 2012-06-02 20:19 - 00038424 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
2015-11-19 10:43 - 2012-06-02 20:15 - 02622464 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2015-11-19 10:43 - 2012-06-02 20:15 - 00099840 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
2015-11-19 10:43 - 2012-06-02 15:19 - 00186752 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
2015-11-19 10:43 - 2012-06-02 15:15 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
2015-11-19 10:40 - 2015-11-19 10:56 - 00000902 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2015-11-19 10:40 - 2015-11-19 10:40 - 00003840 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2015-11-19 10:39 - 2015-11-19 10:39 - 00780488 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2015-11-19 10:39 - 2015-11-19 10:39 - 00142536 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2015-11-19 10:39 - 2015-11-19 10:39 - 00000000 ____D C:\Windows\SysWOW64\Macromed
2015-11-19 10:39 - 2015-11-19 10:39 - 00000000 ____D C:\Windows\system32\Macromed
2015-11-19 10:32 - 2015-11-19 10:32 - 00003252 _____ C:\Windows\System32\Tasks\{36725B16-5879-4AD9-B117-371C5B173C25}
2015-11-19 10:29 - 2015-11-19 10:32 - 00000000 ____D C:\Users\Todos os Usuários\Temp
2015-11-19 10:29 - 2015-11-19 10:32 - 00000000 ____D C:\ProgramData\Temp
2015-11-19 10:24 - 2015-11-19 10:06 - 00386096 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe
2015-11-19 10:21 - 2015-11-19 10:21 - 00000000 ____D C:\Users\Usuário Padrão\AppData\Roaming\AVAST Software
2015-11-19 10:21 - 2015-11-19 10:21 - 00000000 ____D C:\Users\Default\AppData\Roaming\AVAST Software
2015-11-19 10:21 - 2015-11-19 10:21 - 00000000 ____D C:\Users\Default User\AppData\Roaming\AVAST Software
2015-11-19 10:07 - 2015-11-19 10:07 - 00001922 _____ C:\Users\Public\Desktop\Avast Free Antivirus.lnk
2015-11-19 10:07 - 2015-11-19 10:07 - 00000000 ____D C:\Users\Eda\AppData\Roaming\AVAST Software
2015-11-19 10:07 - 2015-11-19 10:07 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVAST Software
2015-11-19 10:06 - 2015-11-19 10:24 - 00003924 _____ C:\Windows\System32\Tasks\avast! Emergency Update
2015-11-19 10:06 - 2015-11-19 10:06 - 01059656 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSnx.sys
2015-11-19 10:06 - 2015-11-19 10:06 - 00449992 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSP.sys
2015-11-19 10:06 - 2015-11-19 10:06 - 00273784 _____ (AVAST Software) C:\Windows\system32\Drivers\aswVmm.sys
2015-11-19 10:06 - 2015-11-19 10:06 - 00154256 _____ (AVAST Software) C:\Windows\system32\Drivers\aswStm.sys
2015-11-19 10:06 - 2015-11-19 10:06 - 00097648 _____ (AVAST Software) C:\Windows\system32\Drivers\aswMonFlt.sys
2015-11-19 10:06 - 2015-11-19 10:06 - 00093528 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRdr2.sys
2015-11-19 10:06 - 2015-11-19 10:06 - 00065224 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRvrt.sys
2015-11-19 10:06 - 2015-11-19 10:06 - 00043112 _____ (AVAST Software) C:\Windows\avastSS.scr
2015-11-19 10:06 - 2015-11-19 10:06 - 00028656 _____ (AVAST Software) C:\Windows\system32\Drivers\aswHwid.sys
2015-11-19 10:06 - 2015-11-19 10:06 - 00000000 ____D C:\Users\Todos os Usuários\boost_interprocess
2015-11-19 10:06 - 2015-11-19 10:06 - 00000000 ____D C:\ProgramData\boost_interprocess
2015-11-19 10:00 - 2015-11-19 10:00 - 00000000 ____D C:\Program Files\AVAST Software
2015-11-19 09:59 - 2015-11-19 09:59 - 00000000 ____D C:\Users\Todos os Usuários\AVAST Software
2015-11-19 09:59 - 2015-11-19 09:59 - 00000000 ____D C:\ProgramData\AVAST Software
2015-11-19 09:58 - 2015-11-19 09:59 - 05084256 _____ (AVAST Software) C:\Users\Eda\Downloads\avast_free_antivirus_setup_online.exe
2015-11-19 08:07 - 2015-11-19 08:09 - 00000000 ____D C:\Users\Eda\AppData\Local\Microsoft Games
2015-11-19 08:07 - 2015-11-19 08:07 - 00000000 ____D C:\Windows\System32\Tasks\Games
2015-11-18 13:02 - 2015-11-18 13:02 - 00000000 __SHD C:\Windows\ftpcache
2015-11-18 13:02 - 2015-11-18 13:02 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_mvusbews_01007.Wdf
2015-11-18 13:02 - 2015-11-18 13:02 - 00000000 ____D C:\Users\Eda\AppData\Roaming\Macromedia
2015-11-18 13:02 - 2015-11-18 13:02 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HP
2015-11-18 13:02 - 2010-04-29 15:10 - 00127800 _____ (HP) C:\Windows\system32\HPSIsvc.exe
2015-11-18 13:01 - 2015-11-18 13:01 - 00000000 ____D C:\Program Files\HP
2015-11-18 13:01 - 2010-04-28 13:49 - 01490656 _____ (Microsoft Corporation) C:\Windows\system32\WdfCoInstaller01007.dll
2015-11-18 13:01 - 2010-04-28 13:49 - 00212992 _____ C:\Windows\system32\m1130wia.dll
2015-11-18 13:01 - 2010-04-28 13:49 - 00082432 _____ C:\Windows\system32\mvusbews.dll
2015-11-18 13:01 - 2010-04-28 13:49 - 00052224 _____ C:\Windows\system32\HPM1210SMs.dll
2015-11-18 13:01 - 2010-04-28 13:49 - 00020480 _____ (Marvell Semiconductor, Inc.) C:\Windows\system32\Drivers\mvusbews.sys
2015-11-18 13:01 - 2010-03-31 15:49 - 00350720 _____ C:\Windows\system32\mvhlewsi.dll
2015-11-18 13:01 - 2010-03-31 11:52 - 01366016 _____ C:\Windows\system32\HPM1210SM.exe
2015-11-18 13:01 - 2010-03-31 11:51 - 00407040 _____ C:\Windows\system32\HPM1210LM.DLL
2015-11-18 10:00 - 2015-11-18 11:00 - 00000000 ____D C:\Users\Eda\AppData\Local\Mozilla
2015-11-18 10:00 - 2015-11-18 10:00 - 00000000 ____D C:\Users\Eda\AppData\Roaming\Mozilla
2015-11-18 09:56 - 2015-11-18 09:56 - 00243976 _____ C:\Users\Eda\Downloads\Firefox Setup Stub 42.0.exe
2015-11-18 09:56 - 2015-11-18 09:56 - 00000000 ____D C:\Intel
2015-11-18 09:55 - 2015-11-18 09:55 - 00002441 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader XI.lnk
2015-11-18 09:55 - 2015-11-18 09:55 - 00002019 _____ C:\Users\Public\Desktop\Adobe Reader XI.lnk
2015-11-18 09:55 - 2015-11-18 09:55 - 00000000 ____D C:\Users\Eda\AppData\Roaming\Adobe
2015-11-18 09:55 - 2015-11-18 09:55 - 00000000 ____D C:\Users\Eda\AppData\LocalLow\Adobe
2015-11-18 09:55 - 2015-11-18 09:55 - 00000000 ____D C:\Users\Eda\AppData\Local\Adobe
2015-11-18 09:55 - 2015-11-18 09:55 - 00000000 ____D C:\Program Files (x86)\Adobe
2015-11-18 09:52 - 2015-11-18 09:55 - 00000000 ____D C:\Users\Todos os Usuários\Adobe
2015-11-18 09:52 - 2015-11-18 09:55 - 00000000 ____D C:\ProgramData\Adobe
2015-11-18 09:52 - 2015-11-18 09:52 - 00000000 ____D C:\Users\Eda\Documents\seguro fran
2015-11-18 09:52 - 2015-11-18 09:52 - 00000000 ____D C:\Users\Eda\Documents\AssistenteCertificadoDigital
2015-11-18 09:52 - 2015-05-26 16:49 - 00000000 ____D C:\Users\Eda\Documents\Meu Scanner
2015-11-18 09:50 - 2015-11-18 09:50 - 00003031 _____ C:\Users\Eda\Desktop\Word.lnk
2015-11-18 09:50 - 2015-11-18 09:50 - 00002911 _____ C:\Users\Eda\Desktop\Microsoft Excel 2010.lnk
2015-11-18 09:28 - 2015-11-18 16:59 - 00000000 ____D C:\Despa_Win
2015-11-18 09:26 - 2015-11-18 09:26 - 00007605 _____ C:\Users\Eda\AppData\Local\Resmon.ResmonCfg
2015-11-18 09:22 - 2015-11-19 11:01 - 00011932 _____ C:\Windows\PFRO.log
2015-11-18 09:20 - 2011-04-04 11:43 - 02065096 _____ C:\Users\Eda\Desktop\Suporte_Asa.exe
2015-11-18 09:06 - 2015-11-18 09:06 - 00001024 _____ C:\.rnd
2015-11-18 09:04 - 2015-11-19 11:08 - 00028888 _____ (GAS Tecnologia) C:\Windows\system32\Drivers\gbpddfac64.sys
2015-11-18 09:04 - 2015-11-19 11:06 - 00000000 ____D C:\Users\Todos os Usuários\GbPlugin
2015-11-18 09:04 - 2015-11-19 11:06 - 00000000 ____D C:\ProgramData\GbPlugin
2015-11-18 09:04 - 2015-11-19 11:02 - 00029816 _____ (GAS Tecnologia) C:\Windows\system32\Drivers\gbpddreg64.sys
2015-11-18 09:04 - 2015-11-19 11:02 - 00000000 ____D C:\Program Files (x86)\GbPlugin
2015-11-18 09:04 - 2015-11-19 10:30 - 00000000 ____D C:\Users\Todos os Usuários\GAS Tecnologia
2015-11-18 09:04 - 2015-11-19 10:30 - 00000000 ____D C:\ProgramData\GAS Tecnologia
2015-11-18 09:03 - 2015-11-18 09:07 - 00003060 _____ C:\Users\Eda\Downloads\Diagnóstico BB.log
2015-11-18 09:03 - 2015-11-18 09:03 - 02612608 _____ (Banco do Brasil SA) C:\Users\Eda\Downloads\DiagnosticoBB.exe
2015-11-18 09:01 - 2015-11-18 09:01 - 00002253 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2015-11-18 09:01 - 2015-11-18 09:01 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
2015-11-18 08:57 - 2015-11-19 11:02 - 00001062 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2015-11-18 08:57 - 2015-11-19 11:02 - 00001058 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2015-11-18 08:57 - 2015-11-18 09:01 - 00000000 ____D C:\Users\Eda\AppData\Local\Google
2015-11-18 08:57 - 2015-11-18 09:01 - 00000000 ____D C:\Program Files (x86)\Google
2015-11-18 08:57 - 2015-11-18 08:57 - 00004058 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2015-11-18 08:57 - 2015-11-18 08:57 - 00003806 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2015-11-18 08:56 - 2015-11-18 08:57 - 00000000 ____D C:\Users\Eda\AppData\Local\Deployment
2015-11-18 08:56 - 2015-11-18 08:56 - 00000000 ____D C:\Users\Eda\AppData\Local\Apps\2.0
2015-11-18 08:54 - 2015-11-18 08:54 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SharePoint
2015-11-18 08:54 - 2015-11-18 08:54 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office
2015-11-18 08:54 - 2015-11-18 08:54 - 00000000 ____D C:\Program Files (x86)\Microsoft Synchronization Services
2015-11-18 08:53 - 2015-11-18 08:53 - 00000000 ____D C:\Windows\PCHEALTH
2015-11-18 08:53 - 2015-11-18 08:53 - 00000000 ____D C:\Program Files (x86)\Microsoft Sync Framework
2015-11-18 08:53 - 2015-11-18 08:53 - 00000000 ____D C:\Program Files (x86)\Microsoft SQL Server Compact Edition
2015-11-18 08:43 - 2015-06-23 12:30 - 00300704 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
2015-11-18 08:35 - 2015-11-18 08:35 - 00000000 ____D C:\Windows\System32\Tasks\OfficeSoftwareProtectionPlatform
2015-11-18 08:32 - 2015-11-18 08:32 - 00000000 ____D C:\Program Files (x86)\Microsoft Visual Studio 8
2015-11-18 08:29 - 2015-11-18 08:29 - 00000000 ____D C:\Program Files\Microsoft Office
2015-11-18 08:28 - 2015-11-18 08:28 - 00000000 ____D C:\Program Files (x86)\Microsoft Analysis Services
2015-11-18 08:27 - 2015-11-18 08:55 - 00000000 ____D C:\Users\Todos os Usuários\Microsoft Help
2015-11-18 08:27 - 2015-11-18 08:55 - 00000000 ____D C:\ProgramData\Microsoft Help
2015-11-18 08:27 - 2015-11-18 08:53 - 00000000 ____D C:\Program Files (x86)\Microsoft Office
2015-11-18 08:27 - 2015-11-18 08:27 - 00000000 ____D C:\Users\Eda\AppData\Local\Microsoft Help
2015-11-18 08:25 - 2015-11-18 08:25 - 00000000 __RHD C:\MSOCache
2015-11-18 08:19 - 2015-11-19 10:52 - 00000000 ____D C:\Users\Todos os Usuários\firebird
2015-11-18 08:19 - 2015-11-19 10:52 - 00000000 ____D C:\ProgramData\firebird
2015-11-18 08:19 - 2015-11-19 09:57 - 00000945 _____ C:\Users\Eda\Desktop\Despa_Win - Atalho.lnk
2015-11-18 08:19 - 2010-09-17 11:13 - 00548864 _____ (Firebird Project) C:\Windows\SysWOW64\GDS32.DLL
2015-11-18 08:18 - 2015-11-18 08:18 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firebird 2.5 (Win32)
2015-11-18 08:18 - 2015-11-18 08:18 - 00000000 ____D C:\Program Files (x86)\Firebird
2015-11-18 08:18 - 2015-11-18 08:18 - 00000000 ____D C:\Despa_Win_Original
2015-11-18 08:18 - 2010-09-17 11:16 - 00462848 _____ (IBPhoenix) C:\Windows\SysWOW64\Firebird2Control.cpl
2015-11-18 08:17 - 2015-11-18 08:17 - 00000000 ____D C:\Users\Eda\AppData\Roaming\TeamViewer
2015-11-18 08:13 - 2015-11-19 10:19 - 00109240 _____ C:\Users\Eda\AppData\Local\GDIPFONTCACHEV1.DAT
2015-11-18 08:13 - 2015-11-19 10:13 - 00000000 ____D C:\Program Files (x86)\WinRAR
2015-11-18 08:13 - 2015-11-19 10:10 - 00000000 ____D C:\Users\Eda\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
2015-11-18 08:13 - 2015-11-19 10:10 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
2015-11-18 08:13 - 2015-11-18 08:13 - 00000000 ____D C:\Users\Eda\Downloads\vwindows-226
2015-11-18 08:13 - 2015-11-18 08:13 - 00000000 ____D C:\Users\Eda\AppData\Roaming\WinRAR
2015-11-18 08:11 - 2015-11-18 08:11 - 03932302 _____ C:\Users\Eda\Downloads\vwindows-226.rar

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-11-19 11:06 - 2009-07-29 14:08 - 00654272 _____ C:\Windows\system32\prfh0416.dat
2015-11-19 11:06 - 2009-07-29 14:08 - 00124724 _____ C:\Windows\system32\prfc0416.dat
2015-11-19 11:06 - 2009-07-14 03:13 - 01491932 _____ C:\Windows\system32\PerfStringBackup.INI
2015-11-19 11:05 - 2002-01-01 02:51 - 00164355 _____ C:\Windows\WindowsUpdate.log
2015-11-19 11:01 - 2009-07-14 03:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2015-11-19 11:01 - 2009-07-14 02:51 - 00016976 _____ C:\Windows\setupact.log
2015-11-19 11:00 - 2009-07-14 02:45 - 00009584 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-11-19 11:00 - 2009-07-14 02:45 - 00009584 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-11-19 10:41 - 2009-07-14 01:20 - 00000000 __RHD C:\Users\Public\Libraries
2015-11-19 10:14 - 2009-07-14 02:45 - 00416288 _____ C:\Windows\system32\FNTCACHE.DAT
2015-11-19 08:38 - 2009-07-14 01:20 - 00000000 ____D C:\Windows\system32\NDF
2015-11-18 11:40 - 2009-07-14 01:20 - 00000000 ____D C:\Windows\rescache
2015-11-18 08:54 - 2009-07-14 05:46 - 00000000 ____D C:\Windows\ShellNew
2015-11-18 08:54 - 2009-07-14 03:32 - 00000000 ____D C:\Program Files (x86)\MSBuild
2015-11-18 08:34 - 2009-07-14 01:20 - 00000000 ____D C:\Program Files\Common Files\Microsoft Shared
2015-11-18 08:30 - 2009-07-14 00:34 - 00000478 _____ C:\Windows\win.ini
2015-11-18 08:15 - 2009-07-14 03:09 - 00000000 ____D C:\Windows\System32\Tasks\WPD
2015-11-18 08:14 - 2009-07-13 21:56 - 00419840 _____ (Microsoft Corporation) C:\Windows\system32\systemcpl.dll
2015-11-18 08:14 - 2009-07-13 21:52 - 00014848 _____ (Microsoft Corporation) C:\Windows\system32\slwga.dll
2015-11-18 08:14 - 2009-07-13 21:38 - 01008640 _____ (Microsoft Corporation) C:\Windows\system32\user32.dll
2015-11-18 08:14 - 2009-07-13 21:36 - 00013824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\slwga.dll
2015-11-18 08:14 - 2009-07-13 21:24 - 00833024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user32.dll
2015-11-18 08:13 - 2009-07-14 03:32 - 00000000 ____D C:\Windows\system32\restore

==================== Files in the root of some directories =======

2015-11-18 09:26 - 2015-11-18 09:26 - 0007605 _____ () C:\Users\Eda\AppData\Local\Resmon.ResmonCfg

Some files in TEMP:
====================
C:\Users\Eda\AppData\Local\Temp\siinst.exe
C:\Users\Eda\AppData\Local\Temp\strings.dll


==================== Bamital & volsnap =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\dnsapi.dll => File is digitally signed
C:\Windows\SysWOW64\dnsapi.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2015-11-18 11:30

==================== End of FRST.txt ============================