Resultado do exame da Farbar Recovery Scan Tool (FRST) (x64) Versão: 25-07-2016
Executado por 7User (administrador) em ADMINISTRATIVO (27-07-2016 08:38:04)
Executando a partir de C:\Users\7User\Downloads
Perfis Carregados: 7User (Perfis Disponíveis: 7User)
Platform: Windows 7 Professional (X64) Idioma: Português (Brasil)
Internet Explorer Versão 8 (Navegador padrão: Chrome)
Modo da Inicialização: Normal
Tutorial da Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processos (Whitelisted) =================

(Se uma entrada for incluída na fixlist, o processo será fechado. O arquivo não será movido.)

(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
() C:\Program Files\Common Files\Common Desktop Agent\CDASrv.exe
(A.E.T. Europe B.V.) C:\Windows\System32\aetcrss1.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe
(Microsoft Corporation) C:\Windows\System32\StikyNot.exe
(Unimake Softwares) C:\GatTecnologia\Emissor NFe\uninfe.exe
() C:\Program Files (x86)\AppBrad\NetExpressUpdater.exe
() C:\Program Files (x86)\TP-LINK\TP-LINK Wireless Configuration Utility\TWCU.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE
() C:\Windows\SysWOW64\spdsvc.exe
() C:\Windows\SysWOW64\SecUPDUtilSvc.exe
(@ByELDI) C:\Program Files\KMSpico\Service_KMS.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\avastui.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe
(Oracle Corporation) C:\Program Files (x86)\Java\jre1.8.0_91\bin\javaw.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\System32\calc.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe


==================== Registro (Whitelisted) ===========================

(Se uma entrada for incluída na fixlist, o ítem no Registro será restaurado para o padrão ou removido. O arquivo não será movido.)

HKLM\...\Run: [CDAServer] => C:\Program Files\Common Files\Common Desktop Agent\CDASrv.exe [464608 2014-09-08] ()
HKLM\...\Run: [CertificateRegistration] => C:\Windows\system32\aetcrss1.exe [25600 2013-12-18] (A.E.T. Europe B.V.)
HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [8900328 2016-07-11] (AVAST Software)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [595992 2016-05-20] (Oracle Corporation)
HKU\S-1-5-21-934367019-2104420527-3839530920-1000\...\Run: [RESTART_STICKY_NOTES] => C:\Windows\System32\StikyNot.exe [427520 2009-07-13] (Microsoft Corporation)
HKU\S-1-5-18\...\RunOnce: [SPReview] => C:\Windows\System32\SPReview\SPReview.exe [301568 2016-05-15] (Microsoft Corporation)
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2016-06-30] (AVAST Software)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Emissor NFe.lnk [2016-07-14]
ShortcutTarget: Emissor NFe.lnk -> C:\GatTecnologia\Emissor NFe\uninfe.exe (Unimake Softwares)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\TagPlus Terminal de Consulta.lnk [2016-07-01]
ShortcutTarget: TagPlus Terminal de Consulta.lnk -> C:\GatTecnologia\TagPlus Terminal de Consulta\Terminal.bat ()
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\TP-LINK Wireless Configuration Utility.lnk [2016-04-18]
ShortcutTarget: TP-LINK Wireless Configuration Utility.lnk -> C:\Program Files (x86)\TP-LINK\TP-LINK Wireless Configuration Utility\TWCU.exe ()

==================== Internet (Whitelisted) ====================

(Se um ítem for incluído na fixlist, sendo um ítem do Registro, será removido ou restaurado para o padrão.)

Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{0BA5D031-F2DE-4970-A8A7-2CC1EA6A98AD}: [DhcpNameServer] 201.17.128.105 201.17.128.111
Tcpip\..\Interfaces\{15C93115-4315-418D-B260-971DAC2B4353}: [DhcpNameServer] 192.168.1.1

Internet Explorer:
==================
BHO: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\root\Office16\OCHelper.dll [2016-07-27] (Microsoft Corporation)
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2016-06-30] (AVAST Software)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\root\Office16\URLREDIR.DLL [2016-07-27] (Microsoft Corporation)
BHO: Microsoft OneDrive for Business Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office\root\Office16\GROOVEEX.DLL [2016-07-27] (Microsoft Corporation)
BHO-x32: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\OCHelper.dll [2016-07-27] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_91\bin\ssv.dll [2016-06-22] (Oracle Corporation)
BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2016-06-30] (AVAST Software)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\URLREDIR.DLL [2016-07-27] (Microsoft Corporation)
BHO-x32: Microsoft OneDrive for Business Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\GROOVEEX.DLL [2016-07-27] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_91\bin\jp2ssv.dll [2016-06-22] (Oracle Corporation)
Handler: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2016-07-27] (Microsoft Corporation)
Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2016-07-27] (Microsoft Corporation)
Handler: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2016-07-27] (Microsoft Corporation)
Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2016-07-27] (Microsoft Corporation)
Handler: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2016-07-27] (Microsoft Corporation)
Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2016-07-27] (Microsoft Corporation)
Handler: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2016-07-27] (Microsoft Corporation)
Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2016-07-27] (Microsoft Corporation)
Filter: deflate - {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\Windows\system32\urlmon.dll [2010-12-21] (Microsoft Corporation)
Filter-x32: deflate - {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\Windows\SysWOW64\urlmon.dll [2010-12-21] (Microsoft Corporation)
Filter: gzip - {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\Windows\system32\urlmon.dll [2010-12-21] (Microsoft Corporation)
Filter-x32: gzip - {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\Windows\SysWOW64\urlmon.dll [2010-12-21] (Microsoft Corporation)

FireFox:
========
FF ProfilePath: C:\Users\7User\AppData\Roaming\Mozilla\Firefox\Profiles\4otsglys.default
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\Office16\NPSPWRAP.DLL [2016-07-27] (Microsoft Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=11.91.2 -> C:\Program Files (x86)\Java\jre1.8.0_91\bin\dtplugin\npDeployJava1.dll [2016-06-22] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.91.2 -> C:\Program Files (x86)\Java\jre1.8.0_91\bin\plugin2\npjp2.dll [2016-06-22] (Oracle Corporation)
FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2016-07-27] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\NPSPWRAP.DLL [2016-07-27] (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.30.3\npGoogleUpdate3.dll [2016-05-10] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.30.3\npGoogleUpdate3.dll [2016-05-10] (Google Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2016-06-30] (Adobe Systems Inc.)
FF HKLM\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: Avast Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2016-06-30]
FF HKLM\...\Firefox\Extensions: [sp@avast.com] - C:\Program Files\AVAST Software\Avast\SafePrice\FF
FF Extension: Avast SafePrice - C:\Program Files\AVAST Software\Avast\SafePrice\FF [2016-06-30]
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF HKLM-x32\...\Firefox\Extensions: [sp@avast.com] - C:\Program Files\AVAST Software\Avast\SafePrice\FF

Chrome:
=======
CHR StartupUrls: Default -> "hxxp://app.gaterp.com.br/cmc/"
CHR Profile: C:\Users\7User\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Docs) - C:\Users\7User\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2016-05-05]
CHR Extension: (Google Drive) - C:\Users\7User\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2016-05-05]
CHR Extension: (YouTube) - C:\Users\7User\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2016-05-05]
CHR Extension: (Avast SafePrice) - C:\Users\7User\AppData\Local\Google\Chrome\User Data\Default\Extensions\eofcbnmajmjmplflapaojjnihcjkigck [2016-07-02]
CHR Extension: (Documentos Google off-line) - C:\Users\7User\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-05-05]
CHR Extension: (Avast Online Security) - C:\Users\7User\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2016-05-21]
CHR Extension: (Pagamentos da Chrome Web Store) - C:\Users\7User\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2016-05-05]
CHR Extension: (Gmail) - C:\Users\7User\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2016-05-05]
CHR HKLM-x32\...\Chrome\Extension: [eofcbnmajmjmplflapaojjnihcjkigck] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChromeSp.crx [2016-05-05]
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2016-05-05]

==================== Serviços (Whitelisted) ========================

(Se uma entrada for incluída na fixlist, será removida do Registro. O arquivo não será movido, a menos que seja colocado separadamente.)

R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [197128 2016-06-30] (AVAST Software)
R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [2950848 2016-07-04] (Microsoft Corporation)
R2 NetExpress Updater; C:\Program Files (x86)\AppBrad\NetExpressUpdater.exe [13312 2016-03-16] () [Arquivo não assinado]
R2 Samsung Printer Dianostics Service; C:\Windows\SysWOW64\\spdsvc.exe [498488 2016-05-01] ()
R2 SamsungUPDUtilSvc; C:\Windows\SysWOW64\SecUPDUtilSvc.exe [143664 2016-05-18] ()
R2 Service KMSELDI; C:\Program Files\KMSpico\Service_KMS.exe [737984 2015-08-30] (@ByELDI) [Arquivo não assinado]
R2 TeamViewer; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [7032080 2016-05-12] (TeamViewer GmbH)
R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2009-07-13] (Microsoft Corporation)

===================== Drivers (Whitelisted) ==========================

(Se uma entrada for incluída na fixlist, será removida do Registro. O arquivo não será movido, a menos que seja colocado separadamente.)

R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [37656 2016-06-30] (AVAST Software)
R1 aswKbd; C:\Windows\system32\drivers\aswKbd.sys [37144 2016-06-30] (AVAST Software)
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [108304 2016-06-30] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [103064 2016-06-30] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [74544 2016-06-30] (AVAST Software)
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1070904 2016-06-30] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [473592 2016-07-13] (AVAST Software)
R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [162904 2016-06-30] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [290088 2016-06-30] (AVAST Software)
R3 e1qexpress; C:\Windows\System32\DRIVERS\e1q60x64.sys [244736 2009-06-10] (Intel Corporation)
S3 ebdrv; C:\Windows\system32\DRIVERS\evbda.sys [3286016 2009-06-10] (Broadcom Corporation)
R3 RTL8192cu; C:\Windows\System32\DRIVERS\RTL8192cu.sys [926824 2013-03-12] (Realtek Semiconductor Corporation )
R3 WirelessKeyboardFilter; C:\Windows\System32\DRIVERS\WirelessKeyboardFilter.sys [49384 2016-03-29] (Microsoft Corporation)

==================== NetSvcs (Whitelisted) ===================

(Se uma entrada for incluída na fixlist, será removida do Registro. O arquivo não será movido, a menos que seja colocado separadamente.)


==================== Três Meses Criados arquivos e pastas ========

(Se uma entrada for incluída na fixlist, o arquivo/pasta será movido.)

2016-07-27 08:38 - 2016-07-27 08:38 - 00015535 _____ C:\Users\7User\Downloads\FRST.txt
2016-07-27 08:30 - 2016-07-27 08:38 - 00000000 ____D C:\FRST
2016-07-27 08:28 - 2016-07-27 08:28 - 02394112 _____ (Farbar) C:\Users\7User\Downloads\FRST64.exe
2016-07-27 08:02 - 2016-07-27 08:02 - 00000000 ____D C:\Program Files\Common Files\DESIGNER
2016-07-23 16:02 - 2016-07-23 16:02 - 00000000 ____D C:\f63bcf3657020304805e59d5af9153
2016-07-22 18:35 - 2016-07-22 18:35 - 00000000 ____D C:\40109d0d1c95223d22
2016-07-21 15:26 - 2016-07-21 15:26 - 00022528 _____ C:\Users\7User\Downloads\Report21Jul16.xls
2016-07-20 18:57 - 2016-07-20 18:57 - 00000000 ____D C:\0a5efb2250e3cefe22c595
2016-07-20 17:06 - 2016-07-20 17:06 - 00009728 _____ C:\Users\7User\Downloads\Report20Jul16 (1).xls
2016-07-20 16:54 - 2016-07-20 16:54 - 00009728 _____ C:\Users\7User\Downloads\Report20Jul16.xls
2016-07-20 07:14 - 2016-07-20 07:15 - 00000000 ____D C:\f4c9f1373e633e9970650120ef
2016-07-19 19:15 - 2016-07-20 17:02 - 00045056 _____ C:\Users\7User\Documents\Pedido_Castor.xls
2016-07-19 19:11 - 2016-07-19 19:11 - 00096768 _____ C:\Users\7User\Downloads\Report19Jul16 (1).xls
2016-07-19 18:59 - 2016-07-19 18:59 - 00064000 _____ C:\Users\7User\Downloads\Report19Jul16.xls
2016-07-19 18:41 - 2016-07-20 10:04 - 00008894 _____ C:\Users\7User\Documents\Dados bancario.xlsx
2016-07-18 15:13 - 2016-07-20 17:52 - 00000000 ____D C:\Users\7User\Documents\Pedidos
2016-07-18 14:31 - 2016-07-18 14:33 - 00052224 _____ C:\Users\7User\Downloads\Report18Jul16 (1).xls
2016-07-18 11:17 - 2016-07-18 11:17 - 00016350 _____ C:\Users\Public\Documents\PC_0000000001.pdf
2016-07-18 11:00 - 2016-07-18 11:00 - 00129024 _____ C:\Users\7User\Downloads\Report18Jul16.xls
2016-07-16 15:55 - 2016-07-16 15:55 - 00000000 ____D C:\d2a0edc81c2e1161dd88be
2016-07-14 14:34 - 2016-07-14 14:35 - 07101368 _____ (TeamViewer) C:\Users\7User\Downloads\TeamViewer.exe
2016-07-14 13:50 - 2016-07-14 13:50 - 02100032 _____ C:\Users\7User\Downloads\conf_cert_saf4 2.exe
2016-07-14 13:49 - 2016-07-14 13:49 - 00716551 _____ C:\Windows\unins000.exe
2016-07-14 13:49 - 2016-07-14 13:49 - 00002365 _____ C:\Windows\unins000.dat
2016-07-14 13:48 - 2016-07-14 13:49 - 00346040 _____ (Prodemge ) C:\Users\7User\Downloads\cadeiasprodemgeie.exe
2016-07-14 13:47 - 2016-07-14 13:48 - 00952184 _____ C:\Users\7User\Downloads\cadeiasprodemgefirefox_v2 1.exe
2016-07-14 13:47 - 2016-07-14 13:47 - 00000000 ____D C:\Users\Todos os Usuários\SZCCID
2016-07-14 13:47 - 2016-07-14 13:47 - 00000000 ____D C:\ProgramData\SZCCID
2016-07-14 13:47 - 2016-07-14 13:47 - 00000000 ____D C:\Program Files (x86)\G&D
2016-07-14 13:42 - 2016-07-14 13:43 - 04663863 _____ (Giesecke & Devrient GmbH) C:\Users\7User\Downloads\GDsetupStarsignCUTx64.exe
2016-07-14 13:42 - 2016-07-14 13:42 - 00000000 ____D C:\Users\7User\AppData\Local\A.E.T. Europe B.V
2016-07-14 13:41 - 2016-07-14 13:41 - 00000000 ____D C:\Users\Todos os Usuários\A.E.T. Europe B.V
2016-07-14 13:41 - 2016-07-14 13:41 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SafeSign Standard
2016-07-14 13:41 - 2016-07-14 13:41 - 00000000 ____D C:\ProgramData\A.E.T. Europe B.V
2016-07-14 13:41 - 2016-07-14 13:41 - 00000000 ____D C:\Program Files\A.E.T. Europe B.V
2016-07-14 13:38 - 2016-07-14 13:38 - 10060250 _____ (Morpho Cards & A.E.T ) C:\Users\7User\Downloads\safesignuserclient3093-64.exe
2016-07-14 13:36 - 2016-07-14 13:36 - 00423666 _____ (Morpho e-Documents) C:\Users\7User\Downloads\morphocciddrivers_redist_v1.0.0_install_Win7-8.exe
2016-07-14 13:04 - 2016-07-14 13:04 - 02655368 _____ (Gat Tecnologia ) C:\Users\7User\Downloads\UniNFe_3.5 (1).exe
2016-07-14 13:03 - 2016-07-14 13:04 - 02655368 _____ (Gat Tecnologia ) C:\Users\7User\Downloads\UniNFe_3.5.exe
2016-07-14 12:50 - 2016-07-14 12:50 - 00000781 _____ C:\Users\Public\Desktop\Emissor NFe.lnk
2016-07-14 12:50 - 2016-07-14 12:50 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Emissor NFe
2016-07-14 12:48 - 2016-07-14 12:49 - 02655368 _____ (Gat Tecnologia ) C:\Users\7User\Downloads\UniNFe_3.5__KGh0dHA6Ly9hcHAuZ2F0ZXJwLmNvbS5ici9jbWMvKSh3c2VydmljZSkobXpoam5kcXlteikoMSk=.exe
2016-07-14 12:47 - 2016-07-14 12:47 - 00000000 ____H C:\Windows\system32\Drivers\Msft_User_WUDFUsbccidDriver_01_09_00.Wdf
2016-07-14 08:00 - 2016-07-14 08:00 - 00000000 ____D C:\8f59707dd2766820b7b18d9a9670c194
2016-07-13 19:22 - 2016-07-13 19:22 - 00000000 ____D C:\120169a129f94fbe5ac8e9
2016-07-13 14:20 - 2016-07-13 15:41 - 00073216 _____ C:\Users\7User\Downloads\Report13Jul16.xls
2016-07-13 09:56 - 2016-07-13 09:56 - 00223551 _____ C:\Users\7User\Downloads\Instruções para gerar estoques.xlsx
2016-07-12 19:04 - 2016-07-12 19:04 - 00000000 ____D C:\0b13ebe27778ca5f86a24c3a
2016-07-12 18:29 - 2016-07-12 18:29 - 00000000 ____D C:\Users\7User\Desktop\BelmonteCertificado
2016-07-12 18:29 - 2016-07-12 18:28 - 00001813 _____ C:\Users\7User\Desktop\BelmonteCertificado.rar
2016-07-11 16:34 - 2016-07-11 16:34 - 01442864 _____ C:\Users\7User\Downloads\Scan_20160711_162504.pdf
2016-07-11 16:18 - 2016-07-11 16:18 - 00000000 ___RD C:\Users\7User\Documents\Scanned Documents
2016-07-11 16:18 - 2016-07-11 16:18 - 00000000 ____D C:\Users\7User\Documents\Fax
2016-07-11 16:08 - 2016-07-11 16:08 - 00262658 _____ C:\Users\7User\Downloads\ContratoSocialDepositoBarbosa (2).pdf
2016-07-11 07:31 - 2016-07-18 15:13 - 00000000 ____D C:\Users\7User\Documents\BAIXA DE TITULOS
2016-07-09 16:11 - 2016-07-09 16:11 - 00000000 ____D C:\fca452b21adcd714f6355fac18
2016-07-08 18:55 - 2016-07-08 18:55 - 00000000 ____D C:\b817ca324621a08d2e
2016-07-08 09:32 - 2016-07-08 09:32 - 00002008 _____ C:\Users\7User\Downloads\08072016.txt
2016-07-08 08:02 - 2016-07-08 08:02 - 00000000 ____H C:\Windows\system32\Drivers\Msft_User_WpdMtpDr_01_09_00.Wdf
2016-07-07 15:56 - 2016-06-25 13:03 - 00304128 _____ (Microsoft Corporation) C:\Windows\system32\EOSNotify.exe
2016-07-05 19:07 - 2016-07-05 19:07 - 00000000 ____D C:\fc9c341b45feb1e1eb5ba1f5ea
2016-07-04 19:11 - 2016-07-04 19:11 - 00000000 ____D C:\2924c2467214051464f5
2016-07-04 15:54 - 2016-07-27 08:08 - 00000000 ____D C:\Users\7User\Desktop\Controle_Estoque
2016-07-04 12:50 - 2016-07-04 12:50 - 00055402 _____ C:\Users\7User\Downloads\Orcamento_3341031129.pdf
2016-07-04 12:50 - 2016-07-04 12:50 - 00055402 _____ C:\Users\7User\Downloads\Orcamento_3341031129 (1).pdf
2016-07-03 13:11 - 2016-07-03 13:11 - 00000000 ____D C:\22ca836deaafa0d0742d5c
2016-07-02 16:31 - 2016-07-02 16:31 - 00000000 ____D C:\a1443f12d117635866ca
2016-07-01 19:05 - 2016-07-01 19:05 - 00000000 ____D C:\0438d80da033246ac8d0c8d33e
2016-07-01 16:32 - 2016-07-01 16:32 - 00000000 ____D C:\Users\7User\Downloads\fwdoramentocamisaplocanecas
2016-07-01 16:27 - 2016-07-14 12:49 - 00000000 ____D C:\GatTecnologia
2016-07-01 16:27 - 2016-07-01 16:27 - 00735328 _____ (Oracle Corporation) C:\Program Files (x86)\Java 32 Bits
2016-07-01 16:27 - 2016-07-01 16:27 - 00001886 _____ C:\Users\7User\Desktop\TagPlus Terminal de Consulta.lnk
2016-07-01 16:27 - 2016-07-01 16:27 - 00000000 ____D C:\Users\7User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\TagPlus Terminal de Consulta
2016-07-01 16:19 - 2016-07-01 16:20 - 07444576 _____ (TagPlus ) C:\Users\7User\Downloads\TagPlus_Terminal_de_Consulta__KGh0dHA6Ly9hcHAuZ2F0ZXJwLmNvbS5ici9jbWMvKSh3c2VydmljZSkobXpoam5kcXlteikoMSk=.exe
2016-07-01 15:24 - 2016-07-01 15:24 - 00145826 _____ C:\Users\7User\Downloads\fwdoramentocamisaplocanecas.zip
2016-07-01 11:23 - 2016-07-01 11:23 - 06542011 _____ C:\Users\7User\Downloads\010516_010716_010716_00056237000356.xml
2016-07-01 08:47 - 2016-07-01 08:47 - 00001606 _____ C:\Users\7User\Downloads\01072016.txt
2016-06-30 19:01 - 2016-06-30 19:01 - 00000000 ____D C:\0afc5af64efe81406c90de
2016-06-30 15:14 - 2016-06-30 15:14 - 00992960 _____ (Microsoft Corporation) C:\Windows\system32\ucrtbase.dll
2016-06-30 15:14 - 2016-06-30 15:14 - 00921280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ucrtbase.dll
2016-06-30 15:14 - 2016-06-30 15:14 - 00390984 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe
2016-06-30 15:14 - 2016-06-30 15:14 - 00053208 _____ (AVAST Software) C:\Windows\avastSS.scr
2016-06-29 18:51 - 2016-06-29 18:52 - 00000000 ____D C:\3747996b59a32a688d54b8e1bbe840cc
2016-06-29 11:27 - 2016-06-29 11:27 - 04286564 _____ C:\Users\7User\Downloads\glenisson.pdf
2016-06-29 10:32 - 2016-06-29 10:32 - 00278304 _____ C:\Windows\Minidump\062916-27549-01.dmp
2016-06-28 18:52 - 2016-06-28 18:52 - 00000000 ____D C:\b5e3346076867a4265d28da39723
2016-06-26 12:09 - 2016-06-26 12:09 - 00000000 ____D C:\7c64ae98de20f158e01995931b
2016-06-25 16:47 - 2016-06-25 16:47 - 00000000 ____D C:\a2bb3653a0c9b17803f785
2016-06-24 15:22 - 2016-06-24 15:22 - 00096543 _____ C:\Users\7User\Downloads\Tabela Nova NOV - DEPOSITO.pdf
2016-06-24 12:36 - 2016-06-29 10:32 - 945819426 _____ C:\Windows\MEMORY.DMP
2016-06-24 12:36 - 2016-06-29 10:32 - 00000000 ____D C:\Windows\Minidump
2016-06-24 12:36 - 2016-06-24 12:36 - 00278304 _____ C:\Windows\Minidump\062416-38532-01.dmp
2016-06-23 18:45 - 2016-06-23 18:45 - 00000000 ____D C:\7bccc80b1d616b83f88870be
2016-06-22 15:09 - 2016-06-22 15:09 - 00000000 ____D C:\fd1b1e573c4104181e4f163093a7
2016-06-22 12:11 - 2016-06-22 12:11 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2016-06-22 12:11 - 2016-06-22 12:10 - 00097344 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2016-06-22 12:10 - 2016-06-22 12:10 - 00000000 ____D C:\Program Files (x86)\Java
2016-06-22 12:06 - 2016-06-22 12:07 - 00738368 _____ (Oracle Corporation) C:\Users\7User\Downloads\jxpiinstall.exe
2016-06-22 11:48 - 2016-06-22 11:48 - 00000000 ____D C:\c9e0b87979628cce71d1
2016-06-22 11:10 - 2016-06-22 11:10 - 00737856 _____ (Oracle Corporation) C:\Users\7User\Downloads\chromeinstall-8u91.exe
2016-06-21 18:52 - 2016-06-21 18:52 - 00000000 ____D C:\9599886720c47c71c54ac967bb15
2016-06-21 08:43 - 2016-06-21 08:43 - 00024310 _____ C:\Users\7User\Downloads\emissaoBoletoRedirecionar.pdf
2016-06-20 18:54 - 2016-06-20 18:54 - 00000000 ____D C:\ebfbfb5f8a605fca651d34c6
2016-06-19 12:07 - 2016-06-19 12:07 - 00000000 ____D C:\16975e51717eee8797c1e8037a5075
2016-06-18 16:47 - 2016-06-18 16:47 - 00000000 ____D C:\c2e7a6075ae7d690ffb181
2016-06-17 19:02 - 2016-06-17 19:02 - 00000000 ____D C:\7baf4b3172497ae80bbb1384
2016-06-16 18:56 - 2016-06-16 18:56 - 00000000 ____D C:\0cac580d034dc0a2222ccd08e5
2016-06-16 14:13 - 2016-06-16 14:13 - 00061654 _____ C:\Users\7User\Downloads\7131052016001000024084_danfe.pdf
2016-06-16 11:18 - 2016-06-16 11:18 - 00019426 _____ C:\Users\7User\Downloads\NFe35160684684455007176550010018999421893115962.xml
2016-06-15 19:07 - 2016-06-15 19:07 - 00000000 ____D C:\7c831944b68f040a30864defdc
2016-06-15 17:10 - 2016-06-15 17:10 - 00052741 _____ C:\Users\7User\Downloads\Orcamento_3032063660.pdf
2016-06-15 16:21 - 2016-06-15 16:21 - 00059514 _____ C:\Users\7User\Downloads\Orcamento_3032063651.pdf
2016-06-15 07:06 - 2016-06-15 07:06 - 00000000 ____D C:\304e6e9c683fc4754f
2016-06-14 13:18 - 2016-06-14 13:18 - 00000000 ____D C:\f6e6389df00ce93170008b605f8104
2016-06-14 13:07 - 2016-06-14 13:07 - 00000000 ____D C:\1803cd845151267458
2016-06-14 12:45 - 2016-06-14 12:46 - 00000000 ____D C:\71449467b5b8ba865e9f
2016-06-14 11:53 - 2016-06-14 11:53 - 00262658 _____ C:\Users\7User\Downloads\ContratoSocialDepositoBarbosa (1).pdf
2016-06-14 08:52 - 2016-06-14 08:52 - 02921397 _____ C:\Users\7User\Downloads\BELMONTE.pdf
2016-06-14 08:52 - 2016-06-14 08:52 - 02921330 _____ C:\Users\7User\Downloads\POPULAR.pdf
2016-06-14 08:51 - 2016-06-14 08:51 - 02922368 _____ C:\Users\7User\Downloads\BARBOSA.pdf
2016-06-14 08:44 - 2016-06-14 08:44 - 02927114 _____ C:\Users\7User\Downloads\BannerCSN_Constrular.pdf
2016-06-13 18:50 - 2016-06-13 18:50 - 00000000 ____D C:\0d9caafa19b4dbb0a35fe1ebf7c5
2016-06-13 14:09 - 2016-06-13 14:09 - 00050317 _____ C:\Users\7User\Downloads\DANFE_PDF_329716.PDF
2016-06-13 11:24 - 2016-06-13 11:24 - 00095622 _____ C:\Users\7User\Downloads\GatERP - BELMONTE MATERIAL DE CONSTRUCAO LTDA - EPP.pdf
2016-06-10 10:53 - 2016-06-22 11:47 - 00013226 _____ C:\Users\7User\Documents\CONTROLE DE ESTOQUE PONTAS.xlsx
2016-06-10 10:02 - 2016-06-10 10:02 - 00495611 _____ C:\Users\7User\Downloads\NFe31160617359233000188550010072639701079901789.pdf
2016-06-10 10:01 - 2016-06-10 10:01 - 00367680 _____ C:\Users\7User\Downloads\NFe31160617359233000188550010072639711079901794 (1).pdf
2016-06-10 09:59 - 2016-06-10 09:59 - 00367680 _____ C:\Users\7User\Downloads\NFe31160617359233000188550010072639711079901794.pdf
2016-06-10 09:58 - 2016-06-10 09:58 - 00161211 _____ C:\Users\7User\Downloads\NFe31160617359233000188550010072639691079901770.pdf
2016-06-10 08:24 - 2016-06-10 08:24 - 00159879 _____ C:\Users\7User\Downloads\NFe31160617359233000188550010072639681079901764.pdf
2016-06-09 18:50 - 2016-06-09 18:50 - 00000000 ____D C:\28f1dd1514c4ffb5c1
2016-06-09 12:57 - 2016-07-05 11:33 - 00000000 ____D C:\Users\7User\Documents\ETIQUETAS PISOS
2016-06-08 19:02 - 2016-06-08 19:02 - 00000000 ____D C:\15929c4821cb026bb823bbaba270
2016-06-08 16:23 - 2016-07-25 18:37 - 00000000 ____D C:\Users\7User\Documents\ETIQUETAS PIAS
2016-06-08 11:04 - 2016-06-08 11:04 - 00021216 _____ C:\Users\7User\Downloads\GRF_Atualizada.PDF
2016-06-08 07:52 - 2016-06-08 07:52 - 00000000 ____D C:\8578c8009503a80537b4ecc938ee
2016-06-08 07:16 - 2016-06-08 07:16 - 00000000 ____D C:\c37428f9a0dbed621abad9f3
2016-06-07 15:42 - 2016-06-07 15:42 - 00262658 _____ C:\Users\7User\Downloads\ContratoSocialDepositoBarbosa.pdf
2016-06-07 15:20 - 2016-06-07 15:20 - 00000000 ____D C:\ac855048b3cdc4fba159b27a73
2016-06-07 14:21 - 2016-06-07 14:21 - 06230082 _____ C:\Users\7User\Downloads\teodoro.pdf
2016-06-07 09:50 - 2016-06-07 09:50 - 00014607 _____ C:\Users\7User\Downloads\TABELA GAB. MGM.xlsx
2016-06-06 11:42 - 2016-06-06 11:42 - 00036121 _____ C:\Users\7User\Downloads\35160512580468000181550010000417421006911934-nfe.xml
2016-06-05 12:23 - 2016-06-05 12:23 - 00000000 ____D C:\572e5928bc1e0ae588e7266d14dbced0
2016-06-04 16:16 - 2016-06-04 16:16 - 00000000 ____D C:\65c6cf019d0f69169a6fd8f231a8
2016-06-03 18:58 - 2016-06-03 18:58 - 00000000 ____D C:\b29c8c6c896a781b8079fa
2016-06-01 18:41 - 2016-06-01 18:41 - 00000000 ____D C:\47bbbddce3bc8882f85d2c2ba5ab7120
2016-06-01 16:49 - 2016-06-01 16:49 - 00035850 _____ C:\Users\7User\Downloads\Planilha de comissão Maio 2016 - TOTAL (1).pdf
2016-06-01 16:27 - 2016-06-01 16:28 - 00000000 ____D C:\78f232c2578e33b8d9
2016-05-31 19:01 - 2016-05-31 19:02 - 00000000 ____D C:\f31ea26863b1108f97f5136c
2016-05-31 18:03 - 2016-05-31 18:03 - 00000000 ____D C:\b31a0e96a31849c786ceae6c
2016-05-31 17:49 - 2016-05-31 17:50 - 00000000 ____D C:\490367814dc6017e05e8
2016-05-31 11:43 - 2016-05-31 11:45 - 00000000 ____D C:\Users\7User\Documents\ST - SEGURANCA DO TRABALHO
2016-05-31 09:38 - 2016-05-31 09:38 - 00000000 ____D C:\Users\7User\AppData\Roaming\Adobe
2016-05-31 09:38 - 2016-05-31 09:38 - 00000000 ____D C:\Users\7User\AppData\LocalLow\Adobe
2016-05-31 09:38 - 2016-05-31 09:38 - 00000000 ____D C:\Users\7User\AppData\Local\CEF
2016-05-31 09:34 - 2016-05-31 09:38 - 00000000 ____D C:\Users\7User\Documents\DOCUMENTOS MATRIZ
2016-05-30 16:11 - 2016-05-30 16:12 - 00000000 ____D C:\Users\7User\AppData\Roaming\AnyDesk
2016-05-30 13:48 - 2016-07-13 07:43 - 00000000 ____D C:\Users\7User\Documents\COMPROVANTE_PAGAMENTO_TRANSFERENCIA
2016-05-29 12:33 - 2016-05-29 12:33 - 00000000 ____D C:\8db16b3a49079b5ce768f99008e0
2016-05-28 15:46 - 2016-05-28 15:46 - 00000000 ____D C:\e9405d2edbf563205dfb
2016-05-27 19:00 - 2016-05-27 19:00 - 00000000 ____D C:\36fcda46582e1046e1619fd858ded1
2016-05-27 11:35 - 2016-06-30 14:21 - 00000000 ____D C:\Users\7User\Documents\ORÇAMENTOS
2016-05-26 12:32 - 2016-05-26 12:32 - 00000000 ____D C:\4e5b53f56e1ac0fa613ad71845e2a1
2016-05-24 12:13 - 2016-05-24 12:14 - 00000000 ____D C:\6d1d2ba8f8bd8c93439117bcd843
2016-05-24 12:04 - 2016-05-24 12:04 - 00000000 ____D C:\5ad4d611aa89234f21dfba
2016-05-24 11:10 - 2016-05-24 11:10 - 00000000 ____D C:\6e0313221bc25d04a45d1cfe24c3ce
2016-05-24 08:51 - 2016-07-14 11:39 - 00004476 _____ C:\Windows\System32\Tasks\Adobe Acrobat Update Task
2016-05-24 08:50 - 2016-07-14 11:38 - 00002441 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk
2016-05-24 08:50 - 2016-05-24 08:50 - 00002047 _____ C:\Users\Public\Desktop\Acrobat Reader DC.lnk
2016-05-24 08:50 - 2016-05-24 08:50 - 00000000 ____D C:\Program Files (x86)\Adobe
2016-05-24 08:49 - 2016-05-25 07:30 - 00000000 ____D C:\Users\Todos os Usuários\Adobe
2016-05-24 08:49 - 2016-05-25 07:30 - 00000000 ____D C:\ProgramData\Adobe
2016-05-24 08:47 - 2016-05-31 09:38 - 00000000 ____D C:\Users\7User\AppData\Local\Adobe
2016-05-24 08:40 - 2016-05-24 08:46 - 00000000 ____D C:\Users\7User\Documents\DOCUMENTOS CADASTRO CONSTRULAR
2016-05-23 18:53 - 2016-05-23 18:53 - 00000000 ____D C:\749f1fc967434bce5e7d5ca0f6
2016-05-23 16:28 - 2016-06-09 13:25 - 00000000 ____D C:\Users\7User\Documents\LISTA DE FALTA
2016-05-22 12:17 - 2016-05-22 12:17 - 00000000 ____D C:\8da0ececbdeb24fdb332682d7e16
2016-05-21 15:59 - 2016-05-21 15:59 - 00000000 ____D C:\d78af55223067b0f8bdf348eb7369ca5
2016-05-20 18:57 - 2016-05-20 18:57 - 00000000 ____D C:\e23862c57515b9288dc191
2016-05-18 12:19 - 2016-05-18 12:19 - 00000000 ____D C:\Users\7User\AppData\Local\Microsoft Help
2016-05-18 08:26 - 2016-05-18 08:26 - 00000000 ____D C:\Users\Todos os Usuários\SSScan
2016-05-18 08:26 - 2016-05-18 08:26 - 00000000 ____D C:\ProgramData\SSScan
2016-05-18 08:25 - 2016-05-18 08:25 - 00000000 ____D C:\Windows\twain_64
2016-05-18 08:25 - 2013-10-04 02:31 - 00579072 _____ C:\Windows\system32\SNWIAUI.dll
2016-05-18 08:25 - 2013-10-04 01:53 - 00734720 _____ C:\Windows\system32\SnMinDrv.dll
2016-05-18 08:25 - 2013-10-04 01:53 - 00155136 _____ C:\Windows\system32\SnImgFlt.dll
2016-05-18 08:25 - 2013-10-04 01:52 - 00068096 _____ C:\Windows\system32\SnErHdlr.dll
2016-05-18 08:25 - 2013-06-01 02:13 - 01571160 ____N C:\Windows\TotalUninstaller.exe
2016-05-18 08:25 - 2012-12-09 23:09 - 00120846 _____ C:\Windows\system32\WIAEXSTR.loc
2016-05-18 08:25 - 2012-03-13 20:58 - 00166640 _____ (TWAIN Working Group) C:\Windows\system32\TWAINDSM.dll
2016-05-18 08:25 - 2012-03-13 20:58 - 00148728 _____ (TWAIN Working Group) C:\Windows\SysWOW64\TWAINDSM.dll
2016-05-18 08:25 - 2012-02-09 04:20 - 00355840 _____ (Samsung Electronics) C:\Windows\system32\snWIAMUI.dll
2016-05-18 08:24 - 2016-05-18 08:24 - 00143664 ____N C:\Windows\SysWOW64\SecUPDUtilSvc.exe
2016-05-18 08:24 - 2016-05-18 08:24 - 00143664 ____N C:\Windows\system32\SecUPDUtilSvc.exe
2016-05-18 08:24 - 2015-03-11 23:43 - 00158016 _____ C:\Windows\system32\us003ci.exe
2016-05-18 08:24 - 2015-03-11 23:43 - 00089600 _____ (SS) C:\Windows\system32\us003ci.dll
2016-05-18 08:24 - 2015-03-11 23:43 - 00022528 _____ () C:\Windows\system32\us003lm.dll
2016-05-18 08:23 - 2016-05-18 08:23 - 02078208 ____N C:\Windows\SysWOW64\DlgSearchEngine.dll
2016-05-18 08:23 - 2016-05-01 09:38 - 00498488 ____N C:\Windows\SysWOW64\spdsvc.exe
2016-05-18 08:23 - 2015-12-04 10:03 - 00017831 ____N C:\Windows\SysWOW64\spddata.xml
2016-05-18 08:22 - 2016-05-18 18:06 - 00000000 ____D C:\Users\7User\AppData\Roaming\Samsung
2016-05-18 08:22 - 2016-05-18 08:22 - 00000000 ____D C:\Program Files\Common Files\Common Desktop Agent
2016-05-18 08:20 - 2016-05-18 18:06 - 00000000 ____D C:\Users\Todos os Usuários\Samsung
2016-05-18 08:20 - 2016-05-18 18:06 - 00000000 ____D C:\ProgramData\Samsung
2016-05-18 08:20 - 2016-05-18 08:20 - 00000000 ____D C:\Program Files (x86)\SamsungPrinterLiveUpdateInstaller
2016-05-18 08:20 - 2016-05-18 08:20 - 00000000 ____D C:\Program Files (x86)\SamsungPrinterLiveUpdate
2016-05-18 08:20 - 2015-06-11 10:58 - 01848320 _____ C:\Windows\system32\eed_ec.dll
2016-05-18 08:20 - 2015-06-11 10:58 - 00688408 _____ (Samsung Electronics) C:\Windows\system32\eed_sl.exe
2016-05-18 08:20 - 2015-06-11 10:58 - 00226424 _____ C:\Windows\system32\SBuySupplies.exe
2016-05-18 08:20 - 2015-06-11 10:58 - 00158040 _____ (SS) C:\Windows\system32\ssm4mci.exe
2016-05-18 08:20 - 2015-06-11 10:58 - 00089600 _____ (SS) C:\Windows\system32\ssm4mci.dll
2016-05-18 08:20 - 2015-06-11 10:58 - 00022528 _____ () C:\Windows\system32\ssm4mlm.dll
2016-05-18 08:20 - 2015-06-11 10:58 - 00000273 _____ C:\Windows\system32\eed_sl.exe.config
2016-05-18 08:19 - 2016-05-18 08:26 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Samsung Printers
2016-05-18 08:19 - 2016-05-18 08:23 - 00002265 _____ C:\Users\Public\Desktop\Diagnóstico da impressora Samsung.lnk
2016-05-18 08:19 - 2013-09-01 23:57 - 00155696 _____ C:\Windows\Wiainst64.exe
2016-05-18 08:18 - 2016-05-18 08:26 - 00000000 ____D C:\Program Files (x86)\Samsung
2016-05-18 08:18 - 2015-06-10 03:18 - 00094208 ____N C:\Windows\SysWOW64\ssdevm.dll
2016-05-18 08:18 - 2015-06-10 03:18 - 00087552 ____N C:\Windows\system32\ssdevm64.dll
2016-05-18 08:18 - 2013-06-01 23:38 - 00053248 _____ C:\Windows\SysWOW64\Ssusbpn.dll
2016-05-18 08:18 - 2013-06-01 23:38 - 00049152 _____ C:\Windows\system32\Ssusbp64.dll
2016-05-18 08:18 - 2013-02-22 13:29 - 00365568 _____ C:\Windows\system32\SaMinDrv.dll
2016-05-18 08:18 - 2013-02-22 13:29 - 00112128 _____ C:\Windows\system32\SaImgFlt.dll
2016-05-18 08:18 - 2013-02-22 13:29 - 00055296 _____ C:\Windows\system32\SaErHdlr.dll
2016-05-18 07:56 - 2016-05-18 07:37 - 04357416 _____ C:\Users\7User\Desktop\SamsungPrinterInstaller.exe
2016-05-16 07:10 - 2016-05-16 07:10 - 00000165 ____H C:\Users\7User\Desktop\~$LISTA DE FALTAS CONSTRULAR.xlsx
2016-05-15 12:09 - 2016-05-15 12:09 - 00000000 ____D C:\Windows\system32\SPReview
2016-05-15 12:08 - 2016-05-15 12:08 - 00000000 ____D C:\4ab826d005a2ac384ef501
2016-05-15 10:59 - 2016-06-27 12:14 - 00010069 _____ C:\Users\7User\Desktop\LISTA DE FALTAS CONSTRULAR.xlsx
2016-05-15 10:59 - 2016-05-15 10:59 - 00000000 ____D C:\Users\7User\Documents\Modelos Personalizados do Office
2016-05-14 16:51 - 2016-05-14 16:52 - 00000000 ____D C:\a0e72df34a2ea4a237
2016-05-10 16:51 - 2016-07-26 08:09 - 00000000 ____D C:\Users\7User\AppData\LocalLow\Scpad
2016-05-10 16:51 - 2016-05-10 16:51 - 00000000 ____D C:\Windows\Sun
2016-05-10 16:51 - 2016-05-10 16:51 - 00000000 ____D C:\Users\7User\AppData\Local\Geckofx
2016-05-10 16:50 - 2016-05-10 16:50 - 00000904 _____ C:\Users\Public\Desktop\Bradesco.lnk
2016-05-10 16:50 - 2016-05-10 16:50 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Aplicativo Bradesco
2016-05-10 16:49 - 2016-07-26 08:10 - 00000000 ____D C:\Users\7User\AppData\Roaming\NetExpress50
2016-05-10 16:49 - 2016-05-10 16:50 - 00000000 ____D C:\Program Files (x86)\AppBrad
2016-05-09 16:32 - 2009-10-10 00:17 - 00014336 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\sffp_sd.sys
2016-05-09 10:20 - 2016-07-26 08:52 - 00000000 ____D C:\Program Files (x86)\TeamViewer
2016-05-09 10:20 - 2016-05-23 09:06 - 00000971 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamViewer 11.lnk
2016-05-09 10:20 - 2016-05-23 09:06 - 00000959 _____ C:\Users\Public\Desktop\TeamViewer 11.lnk
2016-05-09 09:07 - 2016-05-12 13:39 - 00000000 ____D C:\Users\7User\AppData\Roaming\TeamViewer
2016-05-09 09:04 - 2016-05-09 09:04 - 00003364 _____ C:\Windows\System32\Tasks\AutoPico Daily Restart
2016-05-09 09:04 - 2016-05-09 09:04 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\KMSpico
2016-05-09 09:04 - 2016-05-09 09:04 - 00000000 ____D C:\Program Files\KMSpico
2016-05-09 09:04 - 2010-12-05 23:16 - 00090112 _____ (Vestris Inc.) C:\Windows\system32\Vestris.ResourceLib.dll
2016-05-09 09:03 - 2016-05-09 09:03 - 00002124 _____ C:\Users\7User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Microsoft OneDrive.lnk
2016-05-09 09:03 - 2016-05-09 09:03 - 00002106 _____ C:\Users\Usuário Padrão\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Microsoft OneDrive.lnk
2016-05-09 09:03 - 2016-05-09 09:03 - 00002106 _____ C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Microsoft OneDrive.lnk
2016-05-09 09:03 - 2016-05-09 09:03 - 00002106 _____ C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Microsoft OneDrive.lnk
2016-05-09 09:03 - 2016-05-09 09:03 - 00000000 ___RD C:\Users\7User\OneDrive
2016-05-09 09:03 - 2016-05-09 09:03 - 00000000 ____D C:\Program Files (x86)\Microsoft OneDrive
2016-05-09 09:02 - 2016-05-09 09:02 - 00000000 ____D C:\Users\Todos os Usuários\Microsoft OneDrive
2016-05-09 09:02 - 2016-05-09 09:02 - 00000000 ____D C:\ProgramData\Microsoft OneDrive
2016-05-09 08:40 - 2016-05-09 08:40 - 00002459 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OneDrive for Business.lnk
2016-05-09 08:40 - 2016-05-09 08:40 - 00002417 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype for Business 2016.lnk
2016-05-09 08:40 - 2016-05-09 08:40 - 00002406 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Word 2016.lnk
2016-05-09 08:40 - 2016-05-09 08:40 - 00002371 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Access 2016.lnk
2016-05-09 08:40 - 2016-05-09 08:40 - 00002355 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PowerPoint 2016.lnk
2016-05-09 08:40 - 2016-05-09 08:40 - 00002352 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Excel 2016.lnk
2016-05-09 08:40 - 2016-05-09 08:40 - 00002342 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OneNote 2016.lnk
2016-05-09 08:40 - 2016-05-09 08:40 - 00002338 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Outlook 2016.lnk
2016-05-09 08:40 - 2016-05-09 08:40 - 00002322 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Publisher 2016.lnk
2016-05-09 08:40 - 2016-05-09 08:40 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Ferramentas do Microsoft Office 2016
2016-05-09 08:31 - 2016-07-27 08:03 - 00000000 ____D C:\Users\Todos os Usuários\regid.1991-06.com.microsoft
2016-05-09 08:31 - 2016-07-27 08:03 - 00000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2016-05-09 08:31 - 2016-05-09 08:31 - 00000000 ____D C:\Windows\System32\Tasks\OfficeSoftwareProtectionPlatform
2016-05-09 08:28 - 2016-05-09 08:27 - 01804512 _____ C:\WindowsGABRIOLA.tt2
2016-05-09 08:26 - 2016-07-27 07:58 - 00000000 ____D C:\Program Files\Microsoft Office
2016-05-09 08:24 - 2016-05-09 08:24 - 00000000 ____D C:\Program Files\Microsoft Office 15
2016-05-09 08:04 - 2016-05-09 08:04 - 00000000 ____H C:\Windows\system32\Drivers\Msft_User_WpdFs_01_09_00.Wdf
2016-05-09 08:03 - 2016-05-10 16:52 - 00000000 ____D C:\Users\7User\AppData\LocalLow\Necomp
2016-05-09 08:02 - 2016-05-09 08:02 - 00000000 ____D C:\Users\7User\AppData\Roaming\Oracle
2016-05-09 07:58 - 2016-05-09 07:58 - 00000000 ____D C:\Users\7User\Documents\CertificadoBradesco
2016-05-09 07:58 - 2016-05-09 07:58 - 00000000 ____D C:\Users\7User\AppData\Roaming\WinRAR
2016-05-09 07:58 - 2016-05-09 07:58 - 00000000 ____D C:\Users\7User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
2016-05-09 07:58 - 2016-05-09 07:58 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
2016-05-09 07:58 - 2016-05-09 07:58 - 00000000 ____D C:\Program Files\WinRAR
2016-05-09 07:47 - 2016-05-09 07:47 - 00000000 ____D C:\Users\7User\AppData\Roaming\Sun
2016-05-09 07:47 - 2016-05-09 07:47 - 00000000 ____D C:\Users\7User\AppData\LocalLow\Sun
2016-05-09 07:47 - 2016-05-09 07:47 - 00000000 ____D C:\Users\7User\.oracle_jre_usage
2016-05-09 07:46 - 2016-06-22 12:17 - 00000000 ____D C:\Users\Todos os Usuários\Oracle
2016-05-09 07:46 - 2016-06-22 12:17 - 00000000 ____D C:\ProgramData\Oracle
2016-05-09 07:45 - 2016-05-09 07:45 - 00000000 ____D C:\Users\7User\AppData\LocalLow\Oracle
2016-05-07 16:22 - 2016-05-07 16:22 - 00000000 ____D C:\Windows\system32\EventProviders
2016-05-06 13:43 - 2016-06-22 15:05 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2016-05-06 13:43 - 2016-06-22 15:05 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2016-05-06 13:43 - 2016-05-06 13:49 - 00000000 ____D C:\Users\7User\AppData\Local\Mozilla
2016-05-06 13:43 - 2016-05-06 13:43 - 00001159 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2016-05-06 13:43 - 2016-05-06 13:43 - 00001147 _____ C:\Users\Public\Desktop\Mozilla Firefox.lnk
2016-05-06 13:43 - 2016-05-06 13:43 - 00000000 ____D C:\Users\7User\AppData\Roaming\Mozilla
2016-05-05 18:56 - 2009-11-25 12:47 - 01942856 _____ (Microsoft Corporation) C:\Windows\system32\dfshim.dll
2016-05-05 18:56 - 2009-11-25 12:47 - 01130824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dfshim.dll
2016-05-05 18:56 - 2009-11-25 12:47 - 00444752 _____ (Microsoft Corporation) C:\Windows\system32\mscoree.dll
2016-05-05 18:56 - 2009-11-25 12:47 - 00320352 _____ (Microsoft Corporation) C:\Windows\system32\PresentationHost.exe
2016-05-05 18:56 - 2009-11-25 12:47 - 00297808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mscoree.dll
2016-05-05 18:56 - 2009-11-25 12:47 - 00295264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PresentationHost.exe
2016-05-05 18:56 - 2009-11-25 12:47 - 00109912 _____ (Microsoft Corporation) C:\Windows\system32\PresentationHostProxy.dll
2016-05-05 18:56 - 2009-11-25 12:47 - 00099176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PresentationHostProxy.dll
2016-05-05 18:56 - 2009-11-25 12:47 - 00049472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netfxperf.dll
2016-05-05 18:56 - 2009-11-25 12:47 - 00048960 _____ (Microsoft Corporation) C:\Windows\system32\netfxperf.dll
2016-05-05 17:33 - 2016-07-01 07:09 - 00003896 _____ C:\Windows\System32\Tasks\SafeZone scheduled Autoupdate 1462480420
2016-05-05 17:33 - 2016-06-30 15:13 - 00037144 _____ (AVAST Software) C:\Windows\system32\Drivers\aswKbd.sys
2016-05-05 17:33 - 2016-05-05 17:33 - 00001037 _____ C:\Users\Public\Desktop\Avast SafeZone Browser.lnk
2016-05-05 17:33 - 2016-05-05 17:33 - 00001037 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avast SafeZone Browser.lnk
2016-05-05 17:30 - 2016-05-05 17:30 - 00000000 ____D C:\Users\7User\AppData\Roaming\AVAST Software
2016-05-05 17:29 - 2016-07-22 07:13 - 00004180 _____ C:\Windows\System32\Tasks\avast! Emergency Update
2016-05-05 17:29 - 2016-07-13 15:15 - 00473592 _____ (AVAST Software) C:\Windows\system32\Drivers\aswsp.sys
2016-05-05 17:29 - 2016-06-30 15:14 - 00473592 _____ (AVAST Software) C:\Windows\system32\Drivers\aswsp.sys.146731052815202
2016-05-05 17:29 - 2016-06-30 15:14 - 00290088 _____ (AVAST Software) C:\Windows\system32\Drivers\aswVmm.sys
2016-05-05 17:29 - 2016-06-30 15:14 - 00162904 _____ (AVAST Software) C:\Windows\system32\Drivers\aswStm.sys
2016-05-05 17:29 - 2016-06-30 15:14 - 00108304 _____ (AVAST Software) C:\Windows\system32\Drivers\aswMonFlt.sys
2016-05-05 17:29 - 2016-06-30 15:14 - 00103064 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRdr2.sys
2016-05-05 17:29 - 2016-06-30 15:14 - 00074544 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRvrt.sys
2016-05-05 17:29 - 2016-06-30 15:14 - 00037656 _____ (AVAST Software) C:\Windows\system32\Drivers\aswHwid.sys
2016-05-05 17:29 - 2016-06-30 15:13 - 01070904 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSnx.sys
2016-05-05 17:29 - 2016-05-05 17:29 - 00001922 _____ C:\Users\Public\Desktop\Avast Free Antivirus.lnk
2016-05-05 17:29 - 2016-05-05 17:29 - 00000000 ____D C:\Windows\System32\Tasks\AVAST Software
2016-05-05 17:29 - 2016-05-05 17:29 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVAST Software
2016-05-05 17:29 - 2016-05-05 17:29 - 00000000 ____D C:\Program Files\Common Files\AV
2016-05-05 17:26 - 2016-05-05 17:33 - 00000000 ____D C:\Users\Todos os Usuários\AVAST Software
2016-05-05 17:26 - 2016-05-05 17:33 - 00000000 ____D C:\ProgramData\AVAST Software
2016-05-05 17:26 - 2016-05-05 17:33 - 00000000 ____D C:\Program Files\AVAST Software
2016-05-05 16:37 - 2010-09-14 03:45 - 00367104 _____ (Microsoft Corporation) C:\Windows\system32\wcncsvc.dll
2016-05-05 16:37 - 2010-09-14 03:07 - 00276992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wcncsvc.dll
2016-05-05 16:33 - 2016-07-14 08:20 - 00000000 ____D C:\Windows\system32\MRT
2016-05-05 16:33 - 2016-07-14 08:01 - 144749672 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2016-05-05 16:30 - 2016-05-05 16:30 - 00000000 ____H C:\Windows\system32\Drivers\Msft_User_WirelessDevice_01_09_00.Wdf
2016-05-05 16:28 - 2016-05-05 16:28 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_dc3d_01009.Wdf
2016-05-05 16:27 - 2010-11-02 02:12 - 01837568 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll
2016-05-05 16:27 - 2010-03-04 01:32 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ks.sys
2016-05-05 16:27 - 2009-12-11 07:29 - 00153160 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2016-05-05 16:27 - 2009-12-11 06:24 - 01446912 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2016-05-05 16:27 - 2009-12-11 04:39 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2016-05-05 16:27 - 2009-12-11 04:36 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2016-05-05 16:26 - 2012-09-06 14:38 - 00295792 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\volsnap.sys
2016-05-05 16:26 - 2011-08-30 02:21 - 14164480 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2016-05-05 16:26 - 2011-08-30 01:28 - 12868096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2016-05-05 16:26 - 2011-01-26 03:53 - 00982912 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys
2016-05-05 16:26 - 2011-01-26 03:53 - 00265088 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgmms1.sys
2016-05-05 16:26 - 2011-01-26 03:31 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\cdd.dll
2016-05-05 16:26 - 2010-12-21 03:16 - 01197056 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2016-05-05 16:26 - 2010-12-21 03:16 - 00442880 _____ (Microsoft Corporation) C:\Windows\system32\winhttp.dll
2016-05-05 16:26 - 2010-12-21 03:16 - 00258048 _____ (Microsoft Corporation) C:\Windows\system32\WebClnt.dll
2016-05-05 16:26 - 2010-12-21 03:16 - 00097280 _____ (Microsoft Corporation) C:\Windows\system32\wscsvc.dll
2016-05-05 16:26 - 2010-12-21 03:16 - 00062976 _____ (Microsoft Corporation) C:\Windows\system32\wscapi.dll
2016-05-05 16:26 - 2010-12-21 03:15 - 01498112 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2016-05-05 16:26 - 2010-12-21 03:15 - 00264192 _____ (Microsoft Corporation) C:\Windows\system32\upnp.dll
2016-05-05 16:26 - 2010-12-21 03:15 - 00015360 _____ (Microsoft Corporation) C:\Windows\system32\slwga.dll
2016-05-05 16:26 - 2010-12-21 03:13 - 02003968 _____ (Microsoft Corporation) C:\Windows\system32\msxml6.dll
2016-05-05 16:26 - 2010-12-21 03:13 - 01880576 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
2016-05-05 16:26 - 2010-12-21 03:11 - 12369408 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2016-05-05 16:26 - 2010-12-21 03:10 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\davclnt.dll
2016-05-05 16:26 - 2010-12-21 02:38 - 01228288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2016-05-05 16:26 - 2010-12-21 02:38 - 00981504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2016-05-05 16:26 - 2010-12-21 02:38 - 00350720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winhttp.dll
2016-05-05 16:26 - 2010-12-21 02:38 - 00204800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WebClnt.dll
2016-05-05 16:26 - 2010-12-21 02:38 - 00204288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\upnp.dll
2016-05-05 16:26 - 2010-12-21 02:38 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wscapi.dll
2016-05-05 16:26 - 2010-12-21 02:38 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\slwga.dll
2016-05-05 16:26 - 2010-12-21 02:36 - 01389568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml6.dll
2016-05-05 16:26 - 2010-12-21 02:36 - 01236992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll
2016-05-05 16:26 - 2010-12-21 02:35 - 10989056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2016-05-05 16:26 - 2010-12-21 02:34 - 00080384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\davclnt.dll
2016-05-05 16:26 - 2010-11-04 03:31 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2016-05-05 16:26 - 2010-11-04 03:31 - 00064512 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2016-05-05 16:26 - 2010-11-04 02:48 - 00176640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2016-05-05 16:26 - 2010-11-04 02:48 - 00048128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2016-05-05 16:26 - 2010-11-02 02:18 - 00662528 _____ (Microsoft Corporation) C:\Windows\system32\XpsPrint.dll
2016-05-05 16:26 - 2010-11-02 02:18 - 00470016 _____ (Microsoft Corporation) C:\Windows\system32\XpsGdiConverter.dll
2016-05-05 16:26 - 2010-11-02 02:18 - 00229888 _____ (Microsoft Corporation) C:\Windows\system32\XpsRasterService.dll
2016-05-05 16:26 - 2010-11-02 02:12 - 01540608 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll
2016-05-05 16:26 - 2010-11-02 02:12 - 01133568 _____ (Microsoft Corporation) C:\Windows\system32\FntCache.dll
2016-05-05 16:26 - 2010-11-02 02:12 - 00902656 _____ (Microsoft Corporation) C:\Windows\system32\d2d1.dll
2016-05-05 16:26 - 2010-11-02 02:12 - 00320512 _____ (Microsoft Corporation) C:\Windows\system32\d3d10_1core.dll
2016-05-05 16:26 - 2010-11-02 02:12 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\d3d10_1.dll
2016-05-05 16:26 - 2010-11-02 01:41 - 00442880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XpsPrint.dll
2016-05-05 16:26 - 2010-11-02 01:41 - 00283648 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XpsGdiConverter.dll
2016-05-05 16:26 - 2010-11-02 01:41 - 00135168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XpsRasterService.dll
2016-05-05 16:26 - 2010-11-02 01:35 - 01170944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10warp.dll
2016-05-05 16:26 - 2010-11-02 01:35 - 01074176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll
2016-05-05 16:26 - 2010-11-02 01:35 - 00739840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d2d1.dll
2016-05-05 16:26 - 2010-11-02 01:35 - 00218624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10_1core.dll
2016-05-05 16:26 - 2010-11-02 01:35 - 00161792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10_1.dll
2016-05-05 16:26 - 2010-06-26 02:31 - 01863680 _____ (Microsoft Corporation) C:\Windows\system32\ExplorerFrame.dll
2016-05-05 16:26 - 2010-06-26 02:14 - 01495040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ExplorerFrame.dll
2016-05-05 16:26 - 2010-05-23 07:15 - 01619456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMVDECOD.DLL
2016-05-05 16:26 - 2010-05-23 07:11 - 03181568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mf.dll
2016-05-05 16:26 - 2010-05-23 07:11 - 00196608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfreadwrite.dll
2016-05-05 16:26 - 2010-05-23 05:37 - 01888256 _____ (Microsoft Corporation) C:\Windows\system32\WMVDECOD.DLL
2016-05-05 16:26 - 2010-05-23 05:35 - 04068864 _____ (Microsoft Corporation) C:\Windows\system32\mf.dll
2016-05-05 16:26 - 2010-05-23 05:35 - 00257024 _____ (Microsoft Corporation) C:\Windows\system32\mfreadwrite.dll
2016-05-05 16:26 - 2010-05-23 05:35 - 00206848 _____ (Microsoft Corporation) C:\Windows\system32\mfps.dll
2016-05-05 16:26 - 2010-03-24 03:59 - 01736608 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2016-05-05 16:26 - 2010-03-24 03:37 - 01289528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2016-05-05 16:26 - 2010-01-19 06:05 - 00424960 _____ (Microsoft Corporation) C:\Windows\system32\secproc.dll
2016-05-05 16:26 - 2010-01-19 06:05 - 00422912 _____ (Microsoft Corporation) C:\Windows\system32\secproc_isv.dll
2016-05-05 16:26 - 2010-01-19 06:05 - 00121856 _____ (Microsoft Corporation) C:\Windows\system32\secproc_ssp_isv.dll
2016-05-05 16:26 - 2010-01-19 06:05 - 00121856 _____ (Microsoft Corporation) C:\Windows\system32\secproc_ssp.dll
2016-05-05 16:26 - 2010-01-19 06:00 - 00357888 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_isv.exe
2016-05-05 16:26 - 2010-01-19 06:00 - 00356352 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate.exe
2016-05-05 16:26 - 2010-01-19 06:00 - 00306688 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_ssp.exe
2016-05-05 16:26 - 2010-01-19 06:00 - 00305152 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_ssp_isv.exe
2016-05-05 16:26 - 2010-01-18 20:29 - 00369152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc.dll
2016-05-05 16:26 - 2010-01-18 20:29 - 00365568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_isv.dll
2016-05-05 16:26 - 2010-01-18 20:29 - 00085504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_ssp_isv.dll
2016-05-05 16:26 - 2010-01-18 20:29 - 00085504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_ssp.dll
2016-05-05 16:26 - 2010-01-18 20:28 - 00324608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_isv.exe
2016-05-05 16:26 - 2010-01-18 20:28 - 00320512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate.exe
2016-05-05 16:26 - 2010-01-18 20:28 - 00280064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_ssp.exe
2016-05-05 16:26 - 2010-01-18 20:28 - 00277504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_ssp_isv.exe
2016-05-05 16:26 - 2009-10-31 03:34 - 02870272 _____ (Microsoft Corporation) C:\Windows\explorer.exe
2016-05-05 16:26 - 2009-10-31 02:45 - 02614272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\explorer.exe
2016-05-05 16:26 - 2009-10-28 03:24 - 00389632 _____ (Microsoft Corporation) C:\Windows\system32\winlogon.exe
2016-05-05 15:31 - 2011-04-09 03:58 - 00142336 _____ (Microsoft Corporation) C:\Windows\system32\poqexec.exe
2016-05-05 15:31 - 2011-04-09 02:56 - 00123904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\poqexec.exe
2016-05-05 15:02 - 2015-03-19 00:07 - 05503416 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2016-05-05 15:02 - 2015-03-18 23:57 - 03963320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2016-05-05 15:02 - 2015-03-18 23:57 - 03908024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2016-05-05 15:02 - 2013-03-19 02:54 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll
2016-05-05 15:02 - 2013-03-19 01:53 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll
2016-05-05 15:02 - 2013-03-19 00:19 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe
2016-05-05 14:56 - 2016-06-18 09:16 - 00002193 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2016-05-05 14:56 - 2016-06-18 09:16 - 00002181 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2016-05-05 14:56 - 2014-09-14 21:44 - 03195392 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2016-05-05 14:54 - 2016-06-21 12:13 - 00485032 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
2016-05-05 14:53 - 2016-07-27 08:14 - 00001066 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2016-05-05 14:53 - 2016-07-27 08:05 - 00001070 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2016-05-05 14:53 - 2016-05-10 17:59 - 00004066 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2016-05-05 14:53 - 2016-05-10 17:59 - 00003814 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2016-05-05 14:53 - 2016-05-05 18:06 - 00000000 ____D C:\Users\7User\AppData\Local\Google
2016-05-05 14:53 - 2016-05-05 14:56 - 00000000 ____D C:\Program Files (x86)\Google
2016-05-05 14:53 - 2016-05-05 14:53 - 00000000 ____D C:\Users\7User\AppData\Local\Deployment
2016-05-05 14:53 - 2016-05-05 14:53 - 00000000 ____D C:\Users\7User\AppData\Local\Apps\2.0
2016-05-05 14:50 - 2012-06-02 19:19 - 02428952 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2016-05-05 14:50 - 2012-06-02 19:19 - 00057880 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2016-05-05 14:50 - 2012-06-02 19:19 - 00044056 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
2016-05-05 14:50 - 2012-06-02 19:15 - 02622464 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2016-05-05 14:49 - 2012-06-02 19:19 - 00701976 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2016-05-05 14:49 - 2012-06-02 19:19 - 00038424 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
2016-05-05 14:49 - 2012-06-02 19:15 - 00099840 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
2016-04-28 05:30 - 2016-04-28 05:30 - 00635040 _____ (Microsoft Corporation) C:\Windows\system32\msvcp140.dll
2016-04-28 05:30 - 2016-04-28 05:30 - 00439608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvcp140.dll
2016-04-28 05:30 - 2016-04-28 05:30 - 00390320 _____ (Microsoft Corporation) C:\Windows\system32\vccorlib140.dll
2016-04-28 05:30 - 2016-04-28 05:30 - 00332968 _____ (Microsoft Corporation) C:\Windows\system32\concrt140.dll
2016-04-28 05:30 - 2016-04-28 05:30 - 00266928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vccorlib140.dll
2016-04-28 05:30 - 2016-04-28 05:30 - 00243520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\concrt140.dll
2016-04-28 05:30 - 2016-04-28 05:30 - 00088752 _____ (Microsoft Corporation) C:\Windows\system32\vcruntime140.dll
2016-04-28 05:30 - 2016-04-28 05:30 - 00085328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vcruntime140.dll

==================== Três Meses Modificados arquivos e pastas ========

(Se uma entrada for incluída na fixlist, o arquivo/pasta será movido.)

2016-07-27 08:24 - 2009-07-14 01:45 - 00014624 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2016-07-27 08:24 - 2009-07-14 01:45 - 00014624 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2016-07-27 08:13 - 2009-07-14 02:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2016-07-27 08:02 - 2009-07-14 00:20 - 00000000 ____D C:\Program Files\Common Files\Microsoft Shared
2016-07-22 07:13 - 2016-04-18 17:01 - 00000000 ____D C:\Users\7User\AppData\Roaming\TP-LINK
2016-07-15 12:53 - 2009-07-14 00:20 - 00000000 __RHD C:\Users\Public\Libraries
2016-07-14 13:47 - 2016-04-18 16:59 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2016-07-14 13:47 - 2009-07-14 00:20 - 00000000 ____D C:\Windows\inf
2016-07-02 07:42 - 2009-07-14 01:45 - 00439464 _____ C:\Windows\system32\FNTCACHE.DAT
2016-07-01 18:18 - 2016-04-19 00:00 - 00112600 _____ C:\Users\7User\AppData\Local\GDIPFONTCACHEV1.DAT

==================== Arquivos na raiz de alguns diretórios =======

2016-07-01 16:27 - 2016-07-01 16:27 - 0735328 _____ (Oracle Corporation) C:\Program Files (x86)\Java 32 Bits

Alguns arquivos em TEMP:
====================
C:\Users\7User\AppData\Local\Temp\jre-8u101-windows-au.exe


==================== Bamital & volsnap =================

(Não há correção automática para arquivos que não passaram na verificação.)

C:\Windows\system32\winlogon.exe => O arquivo é assinado digitalmente
C:\Windows\system32\wininit.exe => O arquivo é assinado digitalmente
C:\Windows\SysWOW64\wininit.exe => O arquivo é assinado digitalmente
C:\Windows\explorer.exe => O arquivo é assinado digitalmente
C:\Windows\SysWOW64\explorer.exe => O arquivo é assinado digitalmente
C:\Windows\system32\svchost.exe => O arquivo é assinado digitalmente
C:\Windows\SysWOW64\svchost.exe => O arquivo é assinado digitalmente
C:\Windows\system32\services.exe => O arquivo é assinado digitalmente
C:\Windows\system32\User32.dll => O arquivo é assinado digitalmente
C:\Windows\SysWOW64\User32.dll => O arquivo é assinado digitalmente
C:\Windows\system32\userinit.exe => O arquivo é assinado digitalmente
C:\Windows\SysWOW64\userinit.exe => O arquivo é assinado digitalmente
C:\Windows\system32\rpcss.dll => O arquivo é assinado digitalmente
C:\Windows\system32\dnsapi.dll => O arquivo é assinado digitalmente
C:\Windows\SysWOW64\dnsapi.dll => O arquivo é assinado digitalmente
C:\Windows\system32\Drivers\volsnap.sys => O arquivo é assinado digitalmente


LastRegBack: 2016-07-20 08:39

==================== Fim de FRST.txt ============================