Publicité
Publicité
Format du document : text/plain
Prévisualisation
Resultado do exame da Farbar Recovery Scan Tool (FRST) (x64) Versão: 02-12-2016
Executado por Imprimak (administrador) em IMPRIMAKCOREL (03-12-2016 12:59:12)
Executando a partir de C:\Users\Imprimak\Downloads
Perfis Carregados: Imprimak (Perfis Disponíveis: Imprimak)
Platform: Windows 7 Professional Service Pack 1 (X64) Idioma: Português (Brasil)
Internet Explorer Versão 9 (Navegador padrão: Chrome)
Modo da Inicialização: Normal
Tutorial da Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Processos (Whitelisted) =================
(Se uma entrada for incluída na fixlist, o processo será fechado. O arquivo não será movido.)
(GAS Tecnologia) C:\Program Files (x86)\GbPlugin\GbpSv.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
() C:\Windows\KMS-R@1n.exe
(Visicom Media Inc.) C:\Program Files\Panda Security URL Filtering\Panda_URL_Filteringb.exe
(DEVGURU Co., LTD.) C:\Program Files (x86)\Samsung\USB Drivers\25_escape\conn\ss_conn_service.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
(GAS Tecnologia) C:\Program Files (x86)\GbPlugin\GbpSv.exe
(GAS Tecnologia LTDA) C:\Program Files\Diebold\Warsaw\core.exe
(Microsoft Corporation) C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\avastui.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
() C:\Windows\KMS-R@1nhook.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.31.5\GoogleCrashHandler.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.31.5\GoogleCrashHandler64.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\System32\wusa.exe
(GAS Tecnologia LTDA) C:\Program Files\Diebold\Warsaw\core.exe
==================== Registro (Whitelisted) ====================
(Se uma entrada for incluída na fixlist, o ítem no Registro será restaurado para o padrão ou removido. O arquivo não será movido.)
HKLM\...\Run: [Diebold - Warsaw] => C:\Program Files\Diebold\Warsaw\core.exe [1058864 2016-05-11] (GAS Tecnologia LTDA)
HKLM-x32\...\Run: [USB3MON] => C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [293872 2015-07-20] (Intel Corporation)
HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [9080768 2016-11-16] (AVAST Software)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [587288 2016-09-22] (Oracle Corporation)
HKLM\...\Winlogon: [Userinit] C:\Windows\SysWOW64\userinit.exe,
Winlogon\Notify\ GbPluginUni: C:\Program Files (x86)\GbPlugin\gbiehUni.dll [2015-09-04] (Banco Itaú Unibanco)
HKU\S-1-5-21-802947663-2367206658-4263064168-1000\...\Run: [{AE130607-A875-497D-A660-C7F9E7B30A17}] => powershell.exe -noprofile -windowstyle hidden -executionpolicy bypass iex ([Text.Encoding]::ASCII.GetString([Convert]::FromBase64String((gp 'HKCU:\Software\Classes\GSUI').EjbauIDwJ)));
HKU\S-1-5-21-802947663-2367206658-4263064168-1000\...\CurrentVersion\Windows: [Load] C:\ProgramData\msdnonmi.exe <===== ATENÇÃO
HKU\S-1-5-21-802947663-2367206658-4263064168-1000\...\MountPoints2: {63b7c1fc-4598-11e5-aac1-086266999005} - E:\LaunchU3.exe -a
IFEO\OSppSvc.exe: [Debugger] KMS-R@1nhook.exe
IFEO\SppSvc.exe: [Debugger] KMS-R@1nhook.exe
ShellExecuteHooks-x32: GbPluginObj Class - {E37CB5F0-51F5-4395-A808-5FA49E399008} - C:\Program Files (x86)\GbPlugin\gbiehuni.dll [1896696 2015-09-04] (Banco Itaú Unibanco)
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2016-09-16] (AVAST Software)
Startup: C:\Users\Imprimak\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\x.vbs [2016-05-01] ()
==================== Internet (Whitelisted) ====================
(Se um ítem for incluído na fixlist, sendo um ítem do Registro, será removido ou restaurado para o padrão.)
Hosts: Há mais de uma entrada no Hosts. Veja a seção Hosts do Addition.txt
Tcpip\Parameters: [DhcpNameServer] 187.2.216.34 187.2.216.39
Tcpip\..\Interfaces\{08ADA6BE-D098-4120-B8A4-98AD7443CF8F}: [DhcpNameServer] 187.2.216.34 187.2.216.39
Internet Explorer:
==================
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxps://search.avast.com/AV772/
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = hxxps://search.avast.com/AV772/search/web?q={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL =
HKU\S-1-5-21-802947663-2367206658-4263064168-1000\Software\Microsoft\Internet Explorer\Main,Search Page = hxxps://search.avast.com/AV772/search/web?q={searchTerms}
HKU\S-1-5-21-802947663-2367206658-4263064168-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxps://search.avast.com/AV772/
HKU\S-1-5-21-802947663-2367206658-4263064168-1000\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://www.msn.com/pt-br/?ocid=iehp
SearchScopes: HKLM-x32 -> DefaultScope {8C31F27B-BE8A-4e4b-A478-17760AF1F5D9} URL = hxxps://search.avast.com/AV772/search/web?q={searchTerms}
SearchScopes: HKLM-x32 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.globasearch.com/?serie=211&installkey=5y60YUuGj5Y0lD8FUhe4&b=3&q={searchTerms}
SearchScopes: HKLM-x32 -> {8C31F27B-BE8A-4e4b-A478-17760AF1F5D9} URL = hxxps://search.avast.com/AV772/search/web?q={searchTerms}
SearchScopes: HKU\S-1-5-21-802947663-2367206658-4263064168-1000 -> DefaultScope {8C31F27B-BE8A-4e4b-A478-17760AF1F5D9} URL = hxxps://search.avast.com/AV772/search/web?q={searchTerms}
SearchScopes: HKU\S-1-5-21-802947663-2367206658-4263064168-1000 -> {8C31F27B-BE8A-4e4b-A478-17760AF1F5D9} URL = hxxps://search.avast.com/AV772/search/web?q={searchTerms}
SearchScopes: HKU\S-1-5-21-802947663-2367206658-4263064168-1000 -> {ACB2583F-8ECD-4012-BEAE-002E4DE2E683} URL = hxxp://www.globasearch.com/?serie=211&installkey=5y60YUuGj5Y0lD8FUhe4&b=3&q={searchTerms}
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_111\bin\ssv.dll [2016-11-26] (Oracle Corporation)
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2016-10-24] (AVAST Software)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL [2010-02-28] (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_111\bin\jp2ssv.dll [2016-11-26] (Oracle Corporation)
BHO-x32: BitComet Helper -> {39F7E362-828A-4B5A-BCAF-5B79BFDFEA60} -> C:\Program Files (x86)\BitComet\tools\BitCometBHO_1.5.4.11.dll [2013-11-29] (BitComet)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_111\bin\ssv.dll [2016-11-26] (Oracle Corporation)
BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2016-10-24] (AVAST Software)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL [2010-02-28] (Microsoft Corporation)
BHO-x32: GbIehObj Class -> {C41A1C0E-EA6C-11D4-B1B8-444553540008} -> C:\Program Files (x86)\GbPlugin\gbiehuni.dll [2015-09-04] (Banco Itaú Unibanco)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_111\bin\jp2ssv.dll [2016-11-26] (Oracle Corporation)
FireFox:
========
FF DefaultProfile: l33nln9t.default
FF ProfilePath: C:\Users\Imprimak\AppData\Roaming\Mozilla\Firefox\Profiles\l33nln9t.default [2016-12-02]
FF NewTab: Mozilla\Firefox\Profiles\l33nln9t.default -> hxxp://www.globasearch.com/?serie=211&b=2&installkey=5y60YUuGj5Y0lD8FUhe4&newtab
FF Homepage: Mozilla\Firefox\Profiles\l33nln9t.default -> hxxp://www.globasearch.com/?serie=211&b=2&installkey=5y60YUuGj5Y0lD8FUhe4
FF HKLM\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: (Avast Online Security) - C:\Program Files\AVAST Software\Avast\WebRep\FF [2016-09-16]
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\buscape.xml [2015-07-01]
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\mercadolivre.xml [2015-07-01]
FF Plugin: @java.com/DTPlugin,version=11.111.2 -> C:\Program Files\Java\jre1.8.0_111\bin\dtplugin\npDeployJava1.dll [2016-11-26] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.111.2 -> C:\Program Files\Java\jre1.8.0_111\bin\plugin2\npjp2.dll [2016-11-26] (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.40620.0\npctrl.dll [2015-06-20] ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\Windows\SysWOW64\Adobe\Director\np32dsw_1219159.dll [2015-06-26] (Adobe Systems, Inc.)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.5 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2013-09-16] (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2013-09-16] (Intel Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=11.111.2 -> C:\Program Files (x86)\Java\jre1.8.0_111\bin\dtplugin\npDeployJava1.dll [2016-11-26] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.111.2 -> C:\Program Files (x86)\Java\jre1.8.0_111\bin\plugin2\npjp2.dll [2016-11-26] (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.40620.0\npctrl.dll [2015-06-20] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~2\MICROS~2\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~2\Office14\NPSPWRAP.DLL [2010-03-24] (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.31.5\npGoogleUpdate3.dll [2016-07-29] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.31.5\npGoogleUpdate3.dll [2016-07-29] (Google Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2016-09-30] (Adobe Systems Inc.)
Chrome:
=======
CHR DefaultProfile: Profile 4
CHR Profile: C:\Users\Imprimak\AppData\Local\Google\Chrome\User Data\Default [2016-12-02]
CHR Extension: (Google Apresentações) - C:\Users\Imprimak\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2016-10-01]
CHR Extension: (Google Docs) - C:\Users\Imprimak\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2016-10-03]
CHR Extension: (Google Drive) - C:\Users\Imprimak\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2016-10-01]
CHR Extension: (YouTube) - C:\Users\Imprimak\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2016-10-01]
CHR Extension: (BitComet Download Extension for Chrome) - C:\Users\Imprimak\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhigneefebkcagnpnpbibganpmfgebnk [2016-10-01]
CHR Extension: (Avast SafePrice) - C:\Users\Imprimak\AppData\Local\Google\Chrome\User Data\Default\Extensions\eofcbnmajmjmplflapaojjnihcjkigck [2016-12-02]
CHR Extension: (Planilhas do Google) - C:\Users\Imprimak\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2016-10-01]
CHR Extension: (Documentos Google off-line) - C:\Users\Imprimak\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-10-03]
CHR Extension: (Avast Online Security) - C:\Users\Imprimak\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2016-12-02]
CHR Extension: (Skype) - C:\Users\Imprimak\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl [2016-12-02]
CHR Extension: (Pagamentos da Chrome Web Store) - C:\Users\Imprimak\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2016-10-01]
CHR Extension: (Gmail) - C:\Users\Imprimak\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2016-10-03]
CHR Extension: (Chrome Media Router) - C:\Users\Imprimak\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2016-12-02]
CHR Profile: C:\Users\Imprimak\AppData\Local\Google\Chrome\User Data\Profile 3 [2016-12-02]
CHR Extension: (Google Docs) - C:\Users\Imprimak\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\aohghmighlieiainnegkcijnfilokake [2016-09-03]
CHR Extension: (Google Drive) - C:\Users\Imprimak\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\apdfllckaahabafndbhieahigkjlhalf [2016-09-03]
CHR Extension: (YouTube) - C:\Users\Imprimak\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2016-09-03]
CHR Extension: (Documentos Google off-line) - C:\Users\Imprimak\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-09-03]
CHR Extension: (Pagamentos da Chrome Web Store) - C:\Users\Imprimak\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2016-09-03]
CHR Extension: (Gmail) - C:\Users\Imprimak\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2016-09-03]
CHR Extension: (Chrome Media Router) - C:\Users\Imprimak\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2016-09-03]
CHR Profile: C:\Users\Imprimak\AppData\Local\Google\Chrome\User Data\Profile 4 [2016-12-03]
CHR Extension: (Google Apresentações) - C:\Users\Imprimak\AppData\Local\Google\Chrome\User Data\Profile 4\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2016-09-03]
CHR Extension: (Google Docs) - C:\Users\Imprimak\AppData\Local\Google\Chrome\User Data\Profile 4\Extensions\aohghmighlieiainnegkcijnfilokake [2016-09-03]
CHR Extension: (Google Drive) - C:\Users\Imprimak\AppData\Local\Google\Chrome\User Data\Profile 4\Extensions\apdfllckaahabafndbhieahigkjlhalf [2016-09-03]
CHR Extension: (YouTube) - C:\Users\Imprimak\AppData\Local\Google\Chrome\User Data\Profile 4\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2016-09-03]
CHR Extension: (Planilhas do Google) - C:\Users\Imprimak\AppData\Local\Google\Chrome\User Data\Profile 4\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2016-09-03]
CHR Extension: (Documentos Google off-line) - C:\Users\Imprimak\AppData\Local\Google\Chrome\User Data\Profile 4\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-09-03]
CHR Extension: (Skype) - C:\Users\Imprimak\AppData\Local\Google\Chrome\User Data\Profile 4\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl [2016-10-21]
CHR Extension: (Pagamentos da Chrome Web Store) - C:\Users\Imprimak\AppData\Local\Google\Chrome\User Data\Profile 4\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2016-09-03]
CHR Extension: (Gmail) - C:\Users\Imprimak\AppData\Local\Google\Chrome\User Data\Profile 4\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2016-09-03]
CHR Extension: (Chrome Media Router) - C:\Users\Imprimak\AppData\Local\Google\Chrome\User Data\Profile 4\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2016-10-25]
CHR HKLM-x32\...\Chrome\Extension: [dhigneefebkcagnpnpbibganpmfgebnk] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [eofcbnmajmjmplflapaojjnihcjkigck] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - hxxps://clients2.google.com/service/update2/crx
==================== Serviços (Whitelisted) ====================
(Se uma entrada for incluída na fixlist, será removida do Registro. O arquivo não será movido, a menos que seja colocado separadamente.)
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [197128 2016-09-16] (AVAST Software)
S3 BITCOMET_HELPER_SERVICE; C:\Program Files (x86)\BitComet\tools\BitCometService.exe [1296728 2013-11-29] (www.BitComet.com)
R2 GbpSv; C:\Program Files (x86)\GbPlugin\GbpSv.exe [587576 2015-08-12] (GAS Tecnologia)
R2 Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [747520 2013-08-27] (Intel(R) Corporation) [Arquivo não assinado]
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [828376 2013-08-27] (Intel(R) Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [169432 2013-09-16] (Intel Corporation)
R2 KMS-R@1n; C:\Windows\KMS-R@1n.exe [26112 2016-12-03] () [Arquivo não assinado]
R2 panda_url_filtering; C:\Program Files\Panda Security URL Filtering\Panda_URL_Filteringb.exe [287752 2015-10-02] (Visicom Media Inc.)
R2 ss_conn_service; C:\Program Files (x86)\Samsung\USB Drivers\25_escape\conn\ss_conn_service.exe [743688 2015-05-21] (DEVGURU Co., LTD.)
R2 TeamViewer; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [5495056 2015-06-18] (TeamViewer GmbH)
R2 Warsaw Technology; C:\Program Files\Diebold\Warsaw\core.exe [1058864 2016-05-11] (GAS Tecnologia LTDA)
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2009-07-13] (Microsoft Corporation)
===================== Drivers (Whitelisted) ======================
(Se uma entrada for incluída na fixlist, será removida do Registro. O arquivo não será movido, a menos que seja colocado separadamente.)
S3 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [37656 2016-09-16] (AVAST Software)
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [108816 2016-09-16] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [103064 2016-09-16] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [74544 2016-09-16] (AVAST Software)
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [969184 2016-09-16] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [513632 2016-09-22] (AVAST Software)
R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [163416 2016-09-16] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [293352 2016-10-13] (AVAST Software)
S3 dg_ssudbus; C:\Windows\System32\DRIVERS\ssudbus.sys [131712 2016-09-05] (Samsung Electronics Co., Ltd.)
R1 gbpddfac; C:\Windows\System32\drivers\gbpddfac64.sys [28888 2016-12-03] (GAS Tecnologia)
R3 GBPRCM; C:\Program Files (x86)\GbPlugin\gbprcm64.sys [29912 2015-09-04] (GAS Tecnologia)
R3 MEIx64; C:\Windows\System32\DRIVERS\TeeDriverx64.sys [99288 2013-09-16] (Intel Corporation)
S3 mkusb20d; C:\Windows\System32\Drivers\mkusb20d.sys [111608 2013-04-15] (Mimaki Engineering Co., Ltd.)
S3 mkusb20s; C:\Windows\System32\Drivers\mkusb20s.sys [87976 2009-09-01] (Mimaki Engineering Co., Ltd.)
R3 panda_url_filteringd; C:\Program Files\Panda Security URL Filtering\panda_url_filteringd.sys [51288 2014-03-19] (Visicom Media Inc.)
S3 ssudmdm; C:\Windows\System32\DRIVERS\ssudmdm.sys [165504 2016-09-05] (Samsung Electronics Co., Ltd.)
S3 ssudserd; C:\Windows\System32\DRIVERS\ssudserd.sys [206080 2015-05-21] (DEVGURU Co., LTD.(www.devguru.co.kr))
R3 Warsaw_PP; C:\Program Files (x86)\GbPlugin\wsftprp64.sys [24792 2015-09-04] (GAS Tecnologia LTDA)
R4 WinDivert1.1; C:\Program Files\Diebold\Warsaw\WinDivert64.sys [38104 2015-07-07] (Basil)
R1 wsddfac; C:\Windows\System32\drivers\wsddfac.sys [101080 2016-12-03] (GAS Tecnologia)
R1 wsddpp; C:\Windows\system32\drivers\wsddpp.sys [103640 2015-03-18] (GAS Tecnologia)
==================== NetSvcs (Whitelisted) ===================
(Se uma entrada for incluída na fixlist, será removida do Registro. O arquivo não será movido, a menos que seja colocado separadamente.)
==================== Três Meses Criados arquivos e pastas ========
(Se uma entrada for incluída na fixlist, o arquivo/pasta será movido.)
2016-12-03 12:56 - 2016-12-03 12:59 - 00021745 _____ C:\Users\Imprimak\Downloads\FRST.txt
2016-12-03 12:51 - 2016-12-03 12:59 - 00000000 ____D C:\FRST
2016-12-03 12:51 - 2016-12-03 12:51 - 02411520 _____ (Farbar) C:\Users\Imprimak\Downloads\FRST64.exe
2016-12-03 12:45 - 2016-12-03 12:45 - 00000000 ___HT C:\Windows\wusa.lock
2016-12-03 12:45 - 2016-12-03 12:45 - 00000000 ____D C:\31e5265f700c6a4780ca
2016-12-03 12:30 - 2016-12-03 12:53 - 00000000 ____D C:\xampp
2016-12-03 11:45 - 2016-12-03 11:45 - 14749120 _____ (Microsoft Corporation) C:\Users\Imprimak\Downloads\vc_redist.x64.exe
2016-12-03 11:37 - 2016-12-03 11:37 - 38332611 _____ C:\Users\Imprimak\Desktop\UNIVERSO HONDA.cdr
2016-12-03 11:31 - 2016-12-03 11:31 - 00000000 ____D C:\141ded70b942f4cec126a4b948
2016-12-03 08:16 - 2016-12-03 08:16 - 00055808 _____ C:\Users\Imprimak\Documents\PRODUÇÃO DIARIA ARTE FINAL.xls
2016-12-03 08:08 - 2016-12-03 08:08 - 00000000 ____D C:\Windows\System32\Tasks\R@1n-KMS
2016-12-03 08:08 - 2016-12-03 08:08 - 00000000 ____D C:\Users\Imprimak\AppData\Local\mpress
2016-12-03 08:07 - 2016-12-03 08:07 - 00263207 ___SH C:\grldr
2016-12-03 08:07 - 2016-12-03 08:07 - 00026112 _____ C:\Windows\KMS-R@1n.exe
2016-12-03 08:07 - 2016-12-03 08:07 - 00004608 _____ C:\Windows\KMS-R@1nhook.exe
2016-12-03 08:07 - 2016-12-03 08:07 - 00003584 _____ C:\Windows\KMS-QADhook.dll
2016-12-02 17:00 - 2016-12-02 18:52 - 109810172 _____ C:\Users\Imprimak\Desktop\rOBSON aRTE PAREDE.cdr
2016-12-02 14:09 - 2016-12-02 14:09 - 00000000 ____D C:\8ee11b729d65e9f50f5919a6e652f1
2016-12-02 13:27 - 2016-12-02 13:27 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CPUID
2016-12-02 13:27 - 2016-12-02 13:27 - 00000000 ____D C:\Program Files\CPUID
2016-12-02 13:12 - 2016-12-02 13:12 - 00000000 ____D C:\79addf721c7fc062e3b9
2016-12-02 13:09 - 2016-12-03 12:45 - 01034556 _____ C:\Users\Imprimak\Downloads\Windows6.1-KB2999226-x64.msu
2016-12-02 13:06 - 2014-05-14 14:23 - 02477536 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2016-12-02 13:06 - 2014-05-14 14:23 - 00700384 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2016-12-02 13:06 - 2014-05-14 14:23 - 00581600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll
2016-12-02 13:06 - 2014-05-14 14:23 - 00058336 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2016-12-02 13:06 - 2014-05-14 14:23 - 00044512 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
2016-12-02 13:06 - 2014-05-14 14:23 - 00038880 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
2016-12-02 13:06 - 2014-05-14 14:23 - 00036320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wups.dll
2016-12-02 13:06 - 2014-05-14 14:21 - 02620928 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2016-12-02 13:06 - 2014-05-14 14:20 - 00097792 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
2016-12-02 13:06 - 2014-05-14 14:17 - 00092672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll
2016-12-02 13:06 - 2014-05-14 09:23 - 00198600 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
2016-12-02 13:06 - 2014-05-14 09:23 - 00179656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll
2016-12-02 13:06 - 2014-05-14 09:20 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
2016-12-02 13:06 - 2014-05-14 09:17 - 00033792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe
2016-12-02 12:58 - 2016-12-02 12:58 - 00000000 ____D C:\Program Files (x86)\MimakiFineCut
2016-12-02 12:55 - 2016-12-02 12:55 - 00003332 _____ C:\Windows\System32\Tasks\CorelUpdateHelperTaskCore
2016-12-02 12:55 - 2016-12-02 12:52 - 00003015 _____ C:\Users\Public\Desktop\CorelDRAW X8 (64-Bit).lnk
2016-12-02 12:53 - 2016-12-02 12:53 - 00000000 ____D C:\Users\Public\Documents\Corel
2016-12-02 12:52 - 2016-12-02 12:53 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CorelDRAW Graphics Suite X8 (64-bit)
2016-12-02 12:51 - 2016-12-02 12:55 - 00000000 ____D C:\Program Files\Corel
2016-12-02 12:48 - 2016-12-02 12:48 - 116580272 _____ C:\Users\Imprimak\Desktop\2263 - AREZZO.cdr
2016-12-02 12:42 - 2016-12-02 12:42 - 00034054 _____ C:\Users\Imprimak\Documents\cc_20161202_124238.reg
2016-12-02 12:35 - 2016-12-02 12:35 - 00002778 _____ C:\Windows\System32\Tasks\CCleanerSkipUAC
2016-12-02 12:35 - 2016-12-02 12:35 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
2016-12-02 12:34 - 2016-12-02 12:38 - 00000000 ____D C:\Program Files\CCleaner
2016-12-02 12:34 - 2012-10-25 22:29 - 00000000 ____D C:\Users\Imprimak\Downloads\CCleaner Professional & Business 3.24.1850
2016-12-02 11:44 - 2016-12-02 11:48 - 01144641 _____ C:\Users\Imprimak\Desktop\LG 1400 adesivos 5x5 com corte.cdr
2016-12-02 11:15 - 2016-12-02 12:05 - 22388912 _____ C:\Users\Imprimak\Desktop\2314__FABINJECT__ADESIVO BRANCO BRILHO COM REFILE (6,3x9,2)200X - (8x17,5)160X.cdr
2016-12-01 13:22 - 2016-12-01 13:26 - 02703176 _____ C:\Users\Imprimak\Desktop\2284__DDDRIN__ADESIVOS BRILHO COM REFILE__1000 PEÇAS.cdr
2016-11-30 10:31 - 2016-11-30 11:58 - 09671735 _____ C:\Users\Imprimak\Desktop\2285___MOTEL DIAMANTE__ADESIVOS BRILHO COM LAMINAÇÃO.cdr
2016-11-30 09:59 - 2016-11-30 10:01 - 71934672 _____ C:\Users\Imprimak\Documents\fccd861iupw64.exe
2016-11-29 16:54 - 2016-11-29 16:54 - 00646532 _____ C:\Users\Imprimak\Desktop\adesivos hospital sabão.cdr
2016-11-29 16:24 - 2016-11-29 16:35 - 00598794 _____ C:\Users\Imprimak\Desktop\adesivos hospital alcool.cdr
2016-11-28 15:25 - 2016-11-28 17:41 - 00000000 ____D C:\Users\Imprimak\Desktop\OUT DOORS CORTADOS PELO ROBSON
2016-11-28 15:25 - 2016-11-28 15:25 - 57569029 _____ C:\Users\Imprimak\Desktop\CAMPESTRE.cdr
2016-11-28 14:02 - 2016-11-28 14:21 - 01487985 _____ C:\Users\Imprimak\Desktop\2287__MAUSER__ADESIVOS BRILHO IMPRESSOS E REFILADOS NO CONTORNO__20x3CM__500UN.cdr
2016-11-26 09:01 - 2016-11-28 12:27 - 00000000 ____D C:\Users\Imprimak\Desktop\PROGRAMAS
2016-11-26 08:14 - 2016-11-26 08:14 - 00000000 _____ C:\Windows\SysWOW64\RENE09E.tmp
2016-11-26 08:13 - 2016-11-26 08:13 - 00000000 ____D C:\Users\Imprimak\AppData\Roaming\Sun
2016-11-25 10:27 - 2016-11-25 13:41 - 01296393 _____ C:\Users\Imprimak\Desktop\__HOSPITAL UNIVERSITARIO__ADESIVO TRANSPARENTE IMPRESSO E REFILADO NO CONTORNO__5,3x2,7cm__145UN.cdr
2016-11-25 10:09 - 2016-11-25 10:15 - 03508810 _____ C:\Users\Imprimak\Desktop\2256__MAUSER__ADESIVOS IMPRESSOS EM BRILHO E REFILADOS__20xcm__1320UN.cdr
2016-11-25 08:39 - 2016-11-28 15:14 - 00002441 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk
2016-11-25 08:39 - 2016-11-28 15:13 - 00004476 _____ C:\Windows\System32\Tasks\Adobe Acrobat Update Task
2016-11-24 10:34 - 2016-11-25 16:02 - 00000000 ____D C:\Users\Imprimak\Desktop\NOVEMBRO DIA 24
2016-11-22 10:42 - 2016-12-03 11:58 - 00000000 ____D C:\Users\Imprimak\Desktop\novembro desktop
2016-11-18 09:57 - 2016-12-02 12:55 - 00000000 ____D C:\Program Files (x86)\Corel
2016-11-18 09:57 - 2016-11-18 09:58 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CorelDRAW Graphics Suite X5
2016-11-17 08:30 - 2016-11-17 08:30 - 00018028 _____ C:\Users\Imprimak\Documents\cc_20161117_083004.reg
2016-10-08 09:10 - 2016-10-08 09:10 - 00000000 ____D C:\Users\TEMP
2016-10-05 09:03 - 2016-11-10 17:38 - 00000000 ____D C:\Users\Imprimak\Desktop\desktop outubro 2016
2016-09-23 19:41 - 2016-09-23 19:41 - 09666588 _____ C:\Users\Imprimak\Documents\gouv.cdr
2016-09-23 17:32 - 2016-09-23 17:32 - 00000000 ____D C:\Users\Imprimak\Documents\FineCut8.5 for CorelDRAW Trial (64-Bit)
2016-09-16 12:31 - 2016-11-28 12:32 - 00004180 _____ C:\Windows\System32\Tasks\avast! Emergency Update
2016-09-16 12:31 - 2016-10-13 09:17 - 00293352 _____ (AVAST Software) C:\Windows\system32\Drivers\aswvmm.sys
2016-09-16 12:31 - 2016-09-22 12:31 - 00513632 _____ (AVAST Software) C:\Windows\system32\Drivers\aswsp.sys
2016-09-16 12:31 - 2016-09-16 12:31 - 00000000 ____D C:\Users\Imprimak\AppData\Roaming\AVAST Software
2016-09-16 12:31 - 2016-09-16 12:31 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVAST Software
2016-09-16 12:31 - 2016-09-16 12:30 - 00163416 _____ (AVAST Software) C:\Windows\system32\Drivers\aswStm.sys
2016-09-16 12:30 - 2016-09-16 12:31 - 00969184 _____ (AVAST Software) C:\Windows\system32\Drivers\aswsnx.sys
2016-09-16 12:30 - 2016-09-16 12:30 - 00391496 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe
2016-09-16 12:30 - 2016-09-16 12:30 - 00108816 _____ (AVAST Software) C:\Windows\system32\Drivers\aswMonFlt.sys
2016-09-16 12:30 - 2016-09-16 12:30 - 00103064 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRdr2.sys
2016-09-16 12:30 - 2016-09-16 12:30 - 00074544 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRvrt.sys
2016-09-16 12:30 - 2016-09-16 12:30 - 00053208 _____ (AVAST Software) C:\Windows\avastSS.scr
2016-09-16 12:30 - 2016-09-16 12:30 - 00037656 _____ (AVAST Software) C:\Windows\system32\Drivers\aswHwid.sys
2016-09-16 12:29 - 2016-09-16 12:29 - 00000000 ____D C:\Program Files\AVAST Software
2016-09-15 16:13 - 2016-09-15 16:13 - 00000000 ____D C:\Users\Imprimak\AppData\Local\CEF
2016-09-15 16:11 - 2016-09-15 16:11 - 00000000 ____D C:\Windows\System32\Tasks\AVAST Software
2016-09-15 16:10 - 2016-09-15 16:10 - 00992960 _____ (Microsoft Corporation) C:\Windows\system32\ucrtbase.dll
2016-09-15 16:10 - 2016-09-15 16:10 - 00921280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ucrtbase.dll
2016-09-15 16:10 - 2016-09-15 16:10 - 00000000 ____D C:\Program Files\Common Files\AV
2016-09-15 16:08 - 2016-09-16 12:28 - 00000000 ____D C:\Users\Todos os Usuários\AVAST Software
2016-09-15 16:08 - 2016-09-16 12:28 - 00000000 ____D C:\ProgramData\AVAST Software
2016-09-05 05:47 - 2016-09-05 05:47 - 00165504 _____ (Samsung Electronics Co., Ltd.) C:\Windows\system32\Drivers\ssudmdm.sys
2016-09-05 05:47 - 2016-09-05 05:47 - 00131712 _____ (Samsung Electronics Co., Ltd.) C:\Windows\system32\Drivers\ssudbus.sys
==================== Três Meses Modificados arquivos e pastas ========
(Se uma entrada for incluída na fixlist, o arquivo/pasta será movido.)
2016-12-03 12:52 - 2016-05-21 09:20 - 00101080 _____ (GAS Tecnologia) C:\Windows\system32\Drivers\wsddfac.sys
2016-12-03 12:49 - 2015-07-20 02:48 - 00000902 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2016-12-03 12:34 - 2015-07-20 02:43 - 00001070 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2016-12-03 12:02 - 2009-07-14 02:45 - 00026528 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2016-12-03 12:02 - 2009-07-14 02:45 - 00026528 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2016-12-03 11:59 - 2010-11-21 07:37 - 00709154 _____ C:\Windows\system32\prfh0416.dat
2016-12-03 11:59 - 2010-11-21 07:37 - 00150802 _____ C:\Windows\system32\prfc0416.dat
2016-12-03 11:59 - 2009-07-14 03:13 - 01650158 _____ C:\Windows\system32\PerfStringBackup.INI
2016-12-03 11:59 - 2009-07-14 01:20 - 00000000 ____D C:\Windows\inf
2016-12-03 11:55 - 2015-07-20 03:26 - 00000206 _____ C:\Windows\Tasks\AutoKMS.job
2016-12-03 11:54 - 2016-05-17 10:22 - 00028888 _____ (GAS Tecnologia) C:\Windows\system32\Drivers\gbpddfac64.sys
2016-12-03 11:54 - 2016-05-17 10:22 - 00000000 ____D C:\Program Files (x86)\GbPlugin
2016-12-03 11:54 - 2015-12-17 11:19 - 00000000 ____D C:\Users\Todos os Usuários\panda_url_filtering
2016-12-03 11:54 - 2015-12-17 11:19 - 00000000 ____D C:\ProgramData\panda_url_filtering
2016-12-03 11:54 - 2015-07-20 02:43 - 00001066 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2016-12-03 11:54 - 2009-07-14 03:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2016-12-03 11:47 - 2015-07-24 10:09 - 00000000 ____D C:\Users\Todos os Usuários\Package Cache
2016-12-03 11:47 - 2015-07-24 10:09 - 00000000 ____D C:\ProgramData\Package Cache
2016-12-03 08:04 - 2016-03-31 18:29 - 00000000 ____D C:\Users\Imprimak\AppData\Roaming\BitComet
2016-12-02 17:56 - 2015-07-21 11:30 - 00000000 ____D C:\Users\Imprimak\Desktop\## EPS IMPRESSAO
2016-12-02 12:58 - 2015-07-21 12:29 - 00000000 ____D C:\Users\Public\FineCut
2016-12-02 12:54 - 2015-07-20 03:03 - 00000000 ____D C:\Users\Todos os Usuários\Corel
2016-12-02 12:54 - 2015-07-20 03:03 - 00000000 ____D C:\ProgramData\Corel
2016-11-28 14:07 - 2015-07-20 02:44 - 00000000 ____D C:\Users\Imprimak\AppData\Local\Adobe
2016-11-28 12:26 - 2016-07-19 11:04 - 00000000 ____D C:\Users\Imprimak\Desktop\DAVID
2016-11-26 11:49 - 2015-07-22 19:02 - 00000000 ____D C:\Users\Imprimak\AppData\Local\ElevatedDiagnostics
2016-11-26 10:15 - 2015-05-08 10:21 - 00000000 ____D C:\Users\Imprimak\Desktop\Targa XT C
2016-11-26 08:59 - 2015-07-20 02:45 - 00000000 ____D C:\Users\Todos os Usuários\Oracle
2016-11-26 08:59 - 2015-07-20 02:45 - 00000000 ____D C:\ProgramData\Oracle
2016-11-26 08:14 - 2015-07-20 02:53 - 00000000 ____D C:\Program Files\Java
2016-11-26 08:14 - 2015-07-20 02:45 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2016-11-26 08:14 - 2015-07-20 02:45 - 00000000 ____D C:\Program Files (x86)\Java
2016-11-26 08:13 - 2015-07-20 02:53 - 00110144 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge-64.dll
2016-11-26 08:13 - 2015-07-20 02:53 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java Development Kit
2016-11-25 08:39 - 2015-07-20 02:44 - 00000000 ____D C:\Program Files (x86)\Adobe
2016-11-25 08:38 - 2015-07-20 02:44 - 00000000 ____D C:\Users\Todos os Usuários\Adobe
2016-11-25 08:38 - 2015-07-20 02:44 - 00000000 ____D C:\ProgramData\Adobe
2016-11-22 21:10 - 2009-07-14 02:45 - 00442280 _____ C:\Windows\system32\FNTCACHE.DAT
2016-11-22 14:36 - 2015-07-20 03:15 - 00117432 _____ C:\Users\Imprimak\AppData\Local\GDIPFONTCACHEV1.DAT
2016-11-21 17:50 - 2015-07-21 09:54 - 00000000 ____D C:\Users\Imprimak\AppData\Roaming\Skype
2016-11-18 10:00 - 2015-07-20 03:04 - 00000000 ____D C:\Users\Todos os Usuários\Microsoft Help
2016-11-18 09:13 - 2015-07-21 09:04 - 00000000 ____D C:\Windows\Minidump
2016-11-18 09:11 - 2009-07-14 01:20 - 00000000 ____D C:\Windows\system32\NDF
2016-11-10 18:40 - 2015-07-20 02:44 - 00002193 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2016-11-09 20:55 - 2009-07-14 03:09 - 00000000 ____D C:\Windows\System32\Tasks\WPD
==================== Bamital & volsnap ======================
(Não há correção automática para arquivos que não passaram na verificação.)
C:\Windows\system32\winlogon.exe => O arquivo é assinado digitalmente
C:\Windows\system32\wininit.exe => O arquivo é assinado digitalmente
C:\Windows\SysWOW64\wininit.exe => O arquivo é assinado digitalmente
C:\Windows\explorer.exe => O arquivo é assinado digitalmente
C:\Windows\SysWOW64\explorer.exe => O arquivo é assinado digitalmente
C:\Windows\system32\svchost.exe => O arquivo é assinado digitalmente
C:\Windows\SysWOW64\svchost.exe => O arquivo é assinado digitalmente
C:\Windows\system32\services.exe => O arquivo é assinado digitalmente
C:\Windows\system32\User32.dll => O arquivo é assinado digitalmente
C:\Windows\SysWOW64\User32.dll => O arquivo é assinado digitalmente
C:\Windows\system32\userinit.exe => O arquivo é assinado digitalmente
C:\Windows\SysWOW64\userinit.exe => O arquivo é assinado digitalmente
C:\Windows\system32\rpcss.dll => O arquivo é assinado digitalmente
C:\Windows\system32\dnsapi.dll => O arquivo é assinado digitalmente
C:\Windows\SysWOW64\dnsapi.dll => O arquivo é assinado digitalmente
C:\Windows\system32\Drivers\volsnap.sys => O arquivo é assinado digitalmente
LastRegBack: 2016-11-24 10:58
==================== Fim de FRST.txt ============================
Executado por Imprimak (administrador) em IMPRIMAKCOREL (03-12-2016 12:59:12)
Executando a partir de C:\Users\Imprimak\Downloads
Perfis Carregados: Imprimak (Perfis Disponíveis: Imprimak)
Platform: Windows 7 Professional Service Pack 1 (X64) Idioma: Português (Brasil)
Internet Explorer Versão 9 (Navegador padrão: Chrome)
Modo da Inicialização: Normal
Tutorial da Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Processos (Whitelisted) =================
(Se uma entrada for incluída na fixlist, o processo será fechado. O arquivo não será movido.)
(GAS Tecnologia) C:\Program Files (x86)\GbPlugin\GbpSv.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
() C:\Windows\KMS-R@1n.exe
(Visicom Media Inc.) C:\Program Files\Panda Security URL Filtering\Panda_URL_Filteringb.exe
(DEVGURU Co., LTD.) C:\Program Files (x86)\Samsung\USB Drivers\25_escape\conn\ss_conn_service.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
(GAS Tecnologia) C:\Program Files (x86)\GbPlugin\GbpSv.exe
(GAS Tecnologia LTDA) C:\Program Files\Diebold\Warsaw\core.exe
(Microsoft Corporation) C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\avastui.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
() C:\Windows\KMS-R@1nhook.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.31.5\GoogleCrashHandler.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.31.5\GoogleCrashHandler64.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\System32\wusa.exe
(GAS Tecnologia LTDA) C:\Program Files\Diebold\Warsaw\core.exe
==================== Registro (Whitelisted) ====================
(Se uma entrada for incluída na fixlist, o ítem no Registro será restaurado para o padrão ou removido. O arquivo não será movido.)
HKLM\...\Run: [Diebold - Warsaw] => C:\Program Files\Diebold\Warsaw\core.exe [1058864 2016-05-11] (GAS Tecnologia LTDA)
HKLM-x32\...\Run: [USB3MON] => C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [293872 2015-07-20] (Intel Corporation)
HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [9080768 2016-11-16] (AVAST Software)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [587288 2016-09-22] (Oracle Corporation)
HKLM\...\Winlogon: [Userinit] C:\Windows\SysWOW64\userinit.exe,
Winlogon\Notify\ GbPluginUni: C:\Program Files (x86)\GbPlugin\gbiehUni.dll [2015-09-04] (Banco Itaú Unibanco)
HKU\S-1-5-21-802947663-2367206658-4263064168-1000\...\Run: [{AE130607-A875-497D-A660-C7F9E7B30A17}] => powershell.exe -noprofile -windowstyle hidden -executionpolicy bypass iex ([Text.Encoding]::ASCII.GetString([Convert]::FromBase64String((gp 'HKCU:\Software\Classes\GSUI').EjbauIDwJ)));
HKU\S-1-5-21-802947663-2367206658-4263064168-1000\...\CurrentVersion\Windows: [Load] C:\ProgramData\msdnonmi.exe <===== ATENÇÃO
HKU\S-1-5-21-802947663-2367206658-4263064168-1000\...\MountPoints2: {63b7c1fc-4598-11e5-aac1-086266999005} - E:\LaunchU3.exe -a
IFEO\OSppSvc.exe: [Debugger] KMS-R@1nhook.exe
IFEO\SppSvc.exe: [Debugger] KMS-R@1nhook.exe
ShellExecuteHooks-x32: GbPluginObj Class - {E37CB5F0-51F5-4395-A808-5FA49E399008} - C:\Program Files (x86)\GbPlugin\gbiehuni.dll [1896696 2015-09-04] (Banco Itaú Unibanco)
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2016-09-16] (AVAST Software)
Startup: C:\Users\Imprimak\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\x.vbs [2016-05-01] ()
==================== Internet (Whitelisted) ====================
(Se um ítem for incluído na fixlist, sendo um ítem do Registro, será removido ou restaurado para o padrão.)
Hosts: Há mais de uma entrada no Hosts. Veja a seção Hosts do Addition.txt
Tcpip\Parameters: [DhcpNameServer] 187.2.216.34 187.2.216.39
Tcpip\..\Interfaces\{08ADA6BE-D098-4120-B8A4-98AD7443CF8F}: [DhcpNameServer] 187.2.216.34 187.2.216.39
Internet Explorer:
==================
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxps://search.avast.com/AV772/
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = hxxps://search.avast.com/AV772/search/web?q={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL =
HKU\S-1-5-21-802947663-2367206658-4263064168-1000\Software\Microsoft\Internet Explorer\Main,Search Page = hxxps://search.avast.com/AV772/search/web?q={searchTerms}
HKU\S-1-5-21-802947663-2367206658-4263064168-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxps://search.avast.com/AV772/
HKU\S-1-5-21-802947663-2367206658-4263064168-1000\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://www.msn.com/pt-br/?ocid=iehp
SearchScopes: HKLM-x32 -> DefaultScope {8C31F27B-BE8A-4e4b-A478-17760AF1F5D9} URL = hxxps://search.avast.com/AV772/search/web?q={searchTerms}
SearchScopes: HKLM-x32 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.globasearch.com/?serie=211&installkey=5y60YUuGj5Y0lD8FUhe4&b=3&q={searchTerms}
SearchScopes: HKLM-x32 -> {8C31F27B-BE8A-4e4b-A478-17760AF1F5D9} URL = hxxps://search.avast.com/AV772/search/web?q={searchTerms}
SearchScopes: HKU\S-1-5-21-802947663-2367206658-4263064168-1000 -> DefaultScope {8C31F27B-BE8A-4e4b-A478-17760AF1F5D9} URL = hxxps://search.avast.com/AV772/search/web?q={searchTerms}
SearchScopes: HKU\S-1-5-21-802947663-2367206658-4263064168-1000 -> {8C31F27B-BE8A-4e4b-A478-17760AF1F5D9} URL = hxxps://search.avast.com/AV772/search/web?q={searchTerms}
SearchScopes: HKU\S-1-5-21-802947663-2367206658-4263064168-1000 -> {ACB2583F-8ECD-4012-BEAE-002E4DE2E683} URL = hxxp://www.globasearch.com/?serie=211&installkey=5y60YUuGj5Y0lD8FUhe4&b=3&q={searchTerms}
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_111\bin\ssv.dll [2016-11-26] (Oracle Corporation)
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2016-10-24] (AVAST Software)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL [2010-02-28] (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_111\bin\jp2ssv.dll [2016-11-26] (Oracle Corporation)
BHO-x32: BitComet Helper -> {39F7E362-828A-4B5A-BCAF-5B79BFDFEA60} -> C:\Program Files (x86)\BitComet\tools\BitCometBHO_1.5.4.11.dll [2013-11-29] (BitComet)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_111\bin\ssv.dll [2016-11-26] (Oracle Corporation)
BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2016-10-24] (AVAST Software)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL [2010-02-28] (Microsoft Corporation)
BHO-x32: GbIehObj Class -> {C41A1C0E-EA6C-11D4-B1B8-444553540008} -> C:\Program Files (x86)\GbPlugin\gbiehuni.dll [2015-09-04] (Banco Itaú Unibanco)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_111\bin\jp2ssv.dll [2016-11-26] (Oracle Corporation)
FireFox:
========
FF DefaultProfile: l33nln9t.default
FF ProfilePath: C:\Users\Imprimak\AppData\Roaming\Mozilla\Firefox\Profiles\l33nln9t.default [2016-12-02]
FF NewTab: Mozilla\Firefox\Profiles\l33nln9t.default -> hxxp://www.globasearch.com/?serie=211&b=2&installkey=5y60YUuGj5Y0lD8FUhe4&newtab
FF Homepage: Mozilla\Firefox\Profiles\l33nln9t.default -> hxxp://www.globasearch.com/?serie=211&b=2&installkey=5y60YUuGj5Y0lD8FUhe4
FF HKLM\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: (Avast Online Security) - C:\Program Files\AVAST Software\Avast\WebRep\FF [2016-09-16]
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\buscape.xml [2015-07-01]
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\mercadolivre.xml [2015-07-01]
FF Plugin: @java.com/DTPlugin,version=11.111.2 -> C:\Program Files\Java\jre1.8.0_111\bin\dtplugin\npDeployJava1.dll [2016-11-26] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.111.2 -> C:\Program Files\Java\jre1.8.0_111\bin\plugin2\npjp2.dll [2016-11-26] (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.40620.0\npctrl.dll [2015-06-20] ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\Windows\SysWOW64\Adobe\Director\np32dsw_1219159.dll [2015-06-26] (Adobe Systems, Inc.)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.5 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2013-09-16] (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2013-09-16] (Intel Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=11.111.2 -> C:\Program Files (x86)\Java\jre1.8.0_111\bin\dtplugin\npDeployJava1.dll [2016-11-26] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.111.2 -> C:\Program Files (x86)\Java\jre1.8.0_111\bin\plugin2\npjp2.dll [2016-11-26] (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.40620.0\npctrl.dll [2015-06-20] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~2\MICROS~2\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~2\Office14\NPSPWRAP.DLL [2010-03-24] (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.31.5\npGoogleUpdate3.dll [2016-07-29] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.31.5\npGoogleUpdate3.dll [2016-07-29] (Google Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2016-09-30] (Adobe Systems Inc.)
Chrome:
=======
CHR DefaultProfile: Profile 4
CHR Profile: C:\Users\Imprimak\AppData\Local\Google\Chrome\User Data\Default [2016-12-02]
CHR Extension: (Google Apresentações) - C:\Users\Imprimak\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2016-10-01]
CHR Extension: (Google Docs) - C:\Users\Imprimak\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2016-10-03]
CHR Extension: (Google Drive) - C:\Users\Imprimak\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2016-10-01]
CHR Extension: (YouTube) - C:\Users\Imprimak\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2016-10-01]
CHR Extension: (BitComet Download Extension for Chrome) - C:\Users\Imprimak\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhigneefebkcagnpnpbibganpmfgebnk [2016-10-01]
CHR Extension: (Avast SafePrice) - C:\Users\Imprimak\AppData\Local\Google\Chrome\User Data\Default\Extensions\eofcbnmajmjmplflapaojjnihcjkigck [2016-12-02]
CHR Extension: (Planilhas do Google) - C:\Users\Imprimak\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2016-10-01]
CHR Extension: (Documentos Google off-line) - C:\Users\Imprimak\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-10-03]
CHR Extension: (Avast Online Security) - C:\Users\Imprimak\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2016-12-02]
CHR Extension: (Skype) - C:\Users\Imprimak\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl [2016-12-02]
CHR Extension: (Pagamentos da Chrome Web Store) - C:\Users\Imprimak\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2016-10-01]
CHR Extension: (Gmail) - C:\Users\Imprimak\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2016-10-03]
CHR Extension: (Chrome Media Router) - C:\Users\Imprimak\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2016-12-02]
CHR Profile: C:\Users\Imprimak\AppData\Local\Google\Chrome\User Data\Profile 3 [2016-12-02]
CHR Extension: (Google Docs) - C:\Users\Imprimak\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\aohghmighlieiainnegkcijnfilokake [2016-09-03]
CHR Extension: (Google Drive) - C:\Users\Imprimak\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\apdfllckaahabafndbhieahigkjlhalf [2016-09-03]
CHR Extension: (YouTube) - C:\Users\Imprimak\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2016-09-03]
CHR Extension: (Documentos Google off-line) - C:\Users\Imprimak\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-09-03]
CHR Extension: (Pagamentos da Chrome Web Store) - C:\Users\Imprimak\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2016-09-03]
CHR Extension: (Gmail) - C:\Users\Imprimak\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2016-09-03]
CHR Extension: (Chrome Media Router) - C:\Users\Imprimak\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2016-09-03]
CHR Profile: C:\Users\Imprimak\AppData\Local\Google\Chrome\User Data\Profile 4 [2016-12-03]
CHR Extension: (Google Apresentações) - C:\Users\Imprimak\AppData\Local\Google\Chrome\User Data\Profile 4\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2016-09-03]
CHR Extension: (Google Docs) - C:\Users\Imprimak\AppData\Local\Google\Chrome\User Data\Profile 4\Extensions\aohghmighlieiainnegkcijnfilokake [2016-09-03]
CHR Extension: (Google Drive) - C:\Users\Imprimak\AppData\Local\Google\Chrome\User Data\Profile 4\Extensions\apdfllckaahabafndbhieahigkjlhalf [2016-09-03]
CHR Extension: (YouTube) - C:\Users\Imprimak\AppData\Local\Google\Chrome\User Data\Profile 4\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2016-09-03]
CHR Extension: (Planilhas do Google) - C:\Users\Imprimak\AppData\Local\Google\Chrome\User Data\Profile 4\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2016-09-03]
CHR Extension: (Documentos Google off-line) - C:\Users\Imprimak\AppData\Local\Google\Chrome\User Data\Profile 4\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-09-03]
CHR Extension: (Skype) - C:\Users\Imprimak\AppData\Local\Google\Chrome\User Data\Profile 4\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl [2016-10-21]
CHR Extension: (Pagamentos da Chrome Web Store) - C:\Users\Imprimak\AppData\Local\Google\Chrome\User Data\Profile 4\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2016-09-03]
CHR Extension: (Gmail) - C:\Users\Imprimak\AppData\Local\Google\Chrome\User Data\Profile 4\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2016-09-03]
CHR Extension: (Chrome Media Router) - C:\Users\Imprimak\AppData\Local\Google\Chrome\User Data\Profile 4\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2016-10-25]
CHR HKLM-x32\...\Chrome\Extension: [dhigneefebkcagnpnpbibganpmfgebnk] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [eofcbnmajmjmplflapaojjnihcjkigck] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - hxxps://clients2.google.com/service/update2/crx
==================== Serviços (Whitelisted) ====================
(Se uma entrada for incluída na fixlist, será removida do Registro. O arquivo não será movido, a menos que seja colocado separadamente.)
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [197128 2016-09-16] (AVAST Software)
S3 BITCOMET_HELPER_SERVICE; C:\Program Files (x86)\BitComet\tools\BitCometService.exe [1296728 2013-11-29] (www.BitComet.com)
R2 GbpSv; C:\Program Files (x86)\GbPlugin\GbpSv.exe [587576 2015-08-12] (GAS Tecnologia)
R2 Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [747520 2013-08-27] (Intel(R) Corporation) [Arquivo não assinado]
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [828376 2013-08-27] (Intel(R) Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [169432 2013-09-16] (Intel Corporation)
R2 KMS-R@1n; C:\Windows\KMS-R@1n.exe [26112 2016-12-03] () [Arquivo não assinado]
R2 panda_url_filtering; C:\Program Files\Panda Security URL Filtering\Panda_URL_Filteringb.exe [287752 2015-10-02] (Visicom Media Inc.)
R2 ss_conn_service; C:\Program Files (x86)\Samsung\USB Drivers\25_escape\conn\ss_conn_service.exe [743688 2015-05-21] (DEVGURU Co., LTD.)
R2 TeamViewer; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [5495056 2015-06-18] (TeamViewer GmbH)
R2 Warsaw Technology; C:\Program Files\Diebold\Warsaw\core.exe [1058864 2016-05-11] (GAS Tecnologia LTDA)
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2009-07-13] (Microsoft Corporation)
===================== Drivers (Whitelisted) ======================
(Se uma entrada for incluída na fixlist, será removida do Registro. O arquivo não será movido, a menos que seja colocado separadamente.)
S3 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [37656 2016-09-16] (AVAST Software)
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [108816 2016-09-16] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [103064 2016-09-16] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [74544 2016-09-16] (AVAST Software)
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [969184 2016-09-16] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [513632 2016-09-22] (AVAST Software)
R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [163416 2016-09-16] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [293352 2016-10-13] (AVAST Software)
S3 dg_ssudbus; C:\Windows\System32\DRIVERS\ssudbus.sys [131712 2016-09-05] (Samsung Electronics Co., Ltd.)
R1 gbpddfac; C:\Windows\System32\drivers\gbpddfac64.sys [28888 2016-12-03] (GAS Tecnologia)
R3 GBPRCM; C:\Program Files (x86)\GbPlugin\gbprcm64.sys [29912 2015-09-04] (GAS Tecnologia)
R3 MEIx64; C:\Windows\System32\DRIVERS\TeeDriverx64.sys [99288 2013-09-16] (Intel Corporation)
S3 mkusb20d; C:\Windows\System32\Drivers\mkusb20d.sys [111608 2013-04-15] (Mimaki Engineering Co., Ltd.)
S3 mkusb20s; C:\Windows\System32\Drivers\mkusb20s.sys [87976 2009-09-01] (Mimaki Engineering Co., Ltd.)
R3 panda_url_filteringd; C:\Program Files\Panda Security URL Filtering\panda_url_filteringd.sys [51288 2014-03-19] (Visicom Media Inc.)
S3 ssudmdm; C:\Windows\System32\DRIVERS\ssudmdm.sys [165504 2016-09-05] (Samsung Electronics Co., Ltd.)
S3 ssudserd; C:\Windows\System32\DRIVERS\ssudserd.sys [206080 2015-05-21] (DEVGURU Co., LTD.(www.devguru.co.kr))
R3 Warsaw_PP; C:\Program Files (x86)\GbPlugin\wsftprp64.sys [24792 2015-09-04] (GAS Tecnologia LTDA)
R4 WinDivert1.1; C:\Program Files\Diebold\Warsaw\WinDivert64.sys [38104 2015-07-07] (Basil)
R1 wsddfac; C:\Windows\System32\drivers\wsddfac.sys [101080 2016-12-03] (GAS Tecnologia)
R1 wsddpp; C:\Windows\system32\drivers\wsddpp.sys [103640 2015-03-18] (GAS Tecnologia)
==================== NetSvcs (Whitelisted) ===================
(Se uma entrada for incluída na fixlist, será removida do Registro. O arquivo não será movido, a menos que seja colocado separadamente.)
==================== Três Meses Criados arquivos e pastas ========
(Se uma entrada for incluída na fixlist, o arquivo/pasta será movido.)
2016-12-03 12:56 - 2016-12-03 12:59 - 00021745 _____ C:\Users\Imprimak\Downloads\FRST.txt
2016-12-03 12:51 - 2016-12-03 12:59 - 00000000 ____D C:\FRST
2016-12-03 12:51 - 2016-12-03 12:51 - 02411520 _____ (Farbar) C:\Users\Imprimak\Downloads\FRST64.exe
2016-12-03 12:45 - 2016-12-03 12:45 - 00000000 ___HT C:\Windows\wusa.lock
2016-12-03 12:45 - 2016-12-03 12:45 - 00000000 ____D C:\31e5265f700c6a4780ca
2016-12-03 12:30 - 2016-12-03 12:53 - 00000000 ____D C:\xampp
2016-12-03 11:45 - 2016-12-03 11:45 - 14749120 _____ (Microsoft Corporation) C:\Users\Imprimak\Downloads\vc_redist.x64.exe
2016-12-03 11:37 - 2016-12-03 11:37 - 38332611 _____ C:\Users\Imprimak\Desktop\UNIVERSO HONDA.cdr
2016-12-03 11:31 - 2016-12-03 11:31 - 00000000 ____D C:\141ded70b942f4cec126a4b948
2016-12-03 08:16 - 2016-12-03 08:16 - 00055808 _____ C:\Users\Imprimak\Documents\PRODUÇÃO DIARIA ARTE FINAL.xls
2016-12-03 08:08 - 2016-12-03 08:08 - 00000000 ____D C:\Windows\System32\Tasks\R@1n-KMS
2016-12-03 08:08 - 2016-12-03 08:08 - 00000000 ____D C:\Users\Imprimak\AppData\Local\mpress
2016-12-03 08:07 - 2016-12-03 08:07 - 00263207 ___SH C:\grldr
2016-12-03 08:07 - 2016-12-03 08:07 - 00026112 _____ C:\Windows\KMS-R@1n.exe
2016-12-03 08:07 - 2016-12-03 08:07 - 00004608 _____ C:\Windows\KMS-R@1nhook.exe
2016-12-03 08:07 - 2016-12-03 08:07 - 00003584 _____ C:\Windows\KMS-QADhook.dll
2016-12-02 17:00 - 2016-12-02 18:52 - 109810172 _____ C:\Users\Imprimak\Desktop\rOBSON aRTE PAREDE.cdr
2016-12-02 14:09 - 2016-12-02 14:09 - 00000000 ____D C:\8ee11b729d65e9f50f5919a6e652f1
2016-12-02 13:27 - 2016-12-02 13:27 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CPUID
2016-12-02 13:27 - 2016-12-02 13:27 - 00000000 ____D C:\Program Files\CPUID
2016-12-02 13:12 - 2016-12-02 13:12 - 00000000 ____D C:\79addf721c7fc062e3b9
2016-12-02 13:09 - 2016-12-03 12:45 - 01034556 _____ C:\Users\Imprimak\Downloads\Windows6.1-KB2999226-x64.msu
2016-12-02 13:06 - 2014-05-14 14:23 - 02477536 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2016-12-02 13:06 - 2014-05-14 14:23 - 00700384 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2016-12-02 13:06 - 2014-05-14 14:23 - 00581600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll
2016-12-02 13:06 - 2014-05-14 14:23 - 00058336 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2016-12-02 13:06 - 2014-05-14 14:23 - 00044512 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
2016-12-02 13:06 - 2014-05-14 14:23 - 00038880 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
2016-12-02 13:06 - 2014-05-14 14:23 - 00036320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wups.dll
2016-12-02 13:06 - 2014-05-14 14:21 - 02620928 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2016-12-02 13:06 - 2014-05-14 14:20 - 00097792 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
2016-12-02 13:06 - 2014-05-14 14:17 - 00092672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll
2016-12-02 13:06 - 2014-05-14 09:23 - 00198600 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
2016-12-02 13:06 - 2014-05-14 09:23 - 00179656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll
2016-12-02 13:06 - 2014-05-14 09:20 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
2016-12-02 13:06 - 2014-05-14 09:17 - 00033792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe
2016-12-02 12:58 - 2016-12-02 12:58 - 00000000 ____D C:\Program Files (x86)\MimakiFineCut
2016-12-02 12:55 - 2016-12-02 12:55 - 00003332 _____ C:\Windows\System32\Tasks\CorelUpdateHelperTaskCore
2016-12-02 12:55 - 2016-12-02 12:52 - 00003015 _____ C:\Users\Public\Desktop\CorelDRAW X8 (64-Bit).lnk
2016-12-02 12:53 - 2016-12-02 12:53 - 00000000 ____D C:\Users\Public\Documents\Corel
2016-12-02 12:52 - 2016-12-02 12:53 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CorelDRAW Graphics Suite X8 (64-bit)
2016-12-02 12:51 - 2016-12-02 12:55 - 00000000 ____D C:\Program Files\Corel
2016-12-02 12:48 - 2016-12-02 12:48 - 116580272 _____ C:\Users\Imprimak\Desktop\2263 - AREZZO.cdr
2016-12-02 12:42 - 2016-12-02 12:42 - 00034054 _____ C:\Users\Imprimak\Documents\cc_20161202_124238.reg
2016-12-02 12:35 - 2016-12-02 12:35 - 00002778 _____ C:\Windows\System32\Tasks\CCleanerSkipUAC
2016-12-02 12:35 - 2016-12-02 12:35 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
2016-12-02 12:34 - 2016-12-02 12:38 - 00000000 ____D C:\Program Files\CCleaner
2016-12-02 12:34 - 2012-10-25 22:29 - 00000000 ____D C:\Users\Imprimak\Downloads\CCleaner Professional & Business 3.24.1850
2016-12-02 11:44 - 2016-12-02 11:48 - 01144641 _____ C:\Users\Imprimak\Desktop\LG 1400 adesivos 5x5 com corte.cdr
2016-12-02 11:15 - 2016-12-02 12:05 - 22388912 _____ C:\Users\Imprimak\Desktop\2314__FABINJECT__ADESIVO BRANCO BRILHO COM REFILE (6,3x9,2)200X - (8x17,5)160X.cdr
2016-12-01 13:22 - 2016-12-01 13:26 - 02703176 _____ C:\Users\Imprimak\Desktop\2284__DDDRIN__ADESIVOS BRILHO COM REFILE__1000 PEÇAS.cdr
2016-11-30 10:31 - 2016-11-30 11:58 - 09671735 _____ C:\Users\Imprimak\Desktop\2285___MOTEL DIAMANTE__ADESIVOS BRILHO COM LAMINAÇÃO.cdr
2016-11-30 09:59 - 2016-11-30 10:01 - 71934672 _____ C:\Users\Imprimak\Documents\fccd861iupw64.exe
2016-11-29 16:54 - 2016-11-29 16:54 - 00646532 _____ C:\Users\Imprimak\Desktop\adesivos hospital sabão.cdr
2016-11-29 16:24 - 2016-11-29 16:35 - 00598794 _____ C:\Users\Imprimak\Desktop\adesivos hospital alcool.cdr
2016-11-28 15:25 - 2016-11-28 17:41 - 00000000 ____D C:\Users\Imprimak\Desktop\OUT DOORS CORTADOS PELO ROBSON
2016-11-28 15:25 - 2016-11-28 15:25 - 57569029 _____ C:\Users\Imprimak\Desktop\CAMPESTRE.cdr
2016-11-28 14:02 - 2016-11-28 14:21 - 01487985 _____ C:\Users\Imprimak\Desktop\2287__MAUSER__ADESIVOS BRILHO IMPRESSOS E REFILADOS NO CONTORNO__20x3CM__500UN.cdr
2016-11-26 09:01 - 2016-11-28 12:27 - 00000000 ____D C:\Users\Imprimak\Desktop\PROGRAMAS
2016-11-26 08:14 - 2016-11-26 08:14 - 00000000 _____ C:\Windows\SysWOW64\RENE09E.tmp
2016-11-26 08:13 - 2016-11-26 08:13 - 00000000 ____D C:\Users\Imprimak\AppData\Roaming\Sun
2016-11-25 10:27 - 2016-11-25 13:41 - 01296393 _____ C:\Users\Imprimak\Desktop\__HOSPITAL UNIVERSITARIO__ADESIVO TRANSPARENTE IMPRESSO E REFILADO NO CONTORNO__5,3x2,7cm__145UN.cdr
2016-11-25 10:09 - 2016-11-25 10:15 - 03508810 _____ C:\Users\Imprimak\Desktop\2256__MAUSER__ADESIVOS IMPRESSOS EM BRILHO E REFILADOS__20xcm__1320UN.cdr
2016-11-25 08:39 - 2016-11-28 15:14 - 00002441 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk
2016-11-25 08:39 - 2016-11-28 15:13 - 00004476 _____ C:\Windows\System32\Tasks\Adobe Acrobat Update Task
2016-11-24 10:34 - 2016-11-25 16:02 - 00000000 ____D C:\Users\Imprimak\Desktop\NOVEMBRO DIA 24
2016-11-22 10:42 - 2016-12-03 11:58 - 00000000 ____D C:\Users\Imprimak\Desktop\novembro desktop
2016-11-18 09:57 - 2016-12-02 12:55 - 00000000 ____D C:\Program Files (x86)\Corel
2016-11-18 09:57 - 2016-11-18 09:58 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CorelDRAW Graphics Suite X5
2016-11-17 08:30 - 2016-11-17 08:30 - 00018028 _____ C:\Users\Imprimak\Documents\cc_20161117_083004.reg
2016-10-08 09:10 - 2016-10-08 09:10 - 00000000 ____D C:\Users\TEMP
2016-10-05 09:03 - 2016-11-10 17:38 - 00000000 ____D C:\Users\Imprimak\Desktop\desktop outubro 2016
2016-09-23 19:41 - 2016-09-23 19:41 - 09666588 _____ C:\Users\Imprimak\Documents\gouv.cdr
2016-09-23 17:32 - 2016-09-23 17:32 - 00000000 ____D C:\Users\Imprimak\Documents\FineCut8.5 for CorelDRAW Trial (64-Bit)
2016-09-16 12:31 - 2016-11-28 12:32 - 00004180 _____ C:\Windows\System32\Tasks\avast! Emergency Update
2016-09-16 12:31 - 2016-10-13 09:17 - 00293352 _____ (AVAST Software) C:\Windows\system32\Drivers\aswvmm.sys
2016-09-16 12:31 - 2016-09-22 12:31 - 00513632 _____ (AVAST Software) C:\Windows\system32\Drivers\aswsp.sys
2016-09-16 12:31 - 2016-09-16 12:31 - 00000000 ____D C:\Users\Imprimak\AppData\Roaming\AVAST Software
2016-09-16 12:31 - 2016-09-16 12:31 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVAST Software
2016-09-16 12:31 - 2016-09-16 12:30 - 00163416 _____ (AVAST Software) C:\Windows\system32\Drivers\aswStm.sys
2016-09-16 12:30 - 2016-09-16 12:31 - 00969184 _____ (AVAST Software) C:\Windows\system32\Drivers\aswsnx.sys
2016-09-16 12:30 - 2016-09-16 12:30 - 00391496 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe
2016-09-16 12:30 - 2016-09-16 12:30 - 00108816 _____ (AVAST Software) C:\Windows\system32\Drivers\aswMonFlt.sys
2016-09-16 12:30 - 2016-09-16 12:30 - 00103064 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRdr2.sys
2016-09-16 12:30 - 2016-09-16 12:30 - 00074544 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRvrt.sys
2016-09-16 12:30 - 2016-09-16 12:30 - 00053208 _____ (AVAST Software) C:\Windows\avastSS.scr
2016-09-16 12:30 - 2016-09-16 12:30 - 00037656 _____ (AVAST Software) C:\Windows\system32\Drivers\aswHwid.sys
2016-09-16 12:29 - 2016-09-16 12:29 - 00000000 ____D C:\Program Files\AVAST Software
2016-09-15 16:13 - 2016-09-15 16:13 - 00000000 ____D C:\Users\Imprimak\AppData\Local\CEF
2016-09-15 16:11 - 2016-09-15 16:11 - 00000000 ____D C:\Windows\System32\Tasks\AVAST Software
2016-09-15 16:10 - 2016-09-15 16:10 - 00992960 _____ (Microsoft Corporation) C:\Windows\system32\ucrtbase.dll
2016-09-15 16:10 - 2016-09-15 16:10 - 00921280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ucrtbase.dll
2016-09-15 16:10 - 2016-09-15 16:10 - 00000000 ____D C:\Program Files\Common Files\AV
2016-09-15 16:08 - 2016-09-16 12:28 - 00000000 ____D C:\Users\Todos os Usuários\AVAST Software
2016-09-15 16:08 - 2016-09-16 12:28 - 00000000 ____D C:\ProgramData\AVAST Software
2016-09-05 05:47 - 2016-09-05 05:47 - 00165504 _____ (Samsung Electronics Co., Ltd.) C:\Windows\system32\Drivers\ssudmdm.sys
2016-09-05 05:47 - 2016-09-05 05:47 - 00131712 _____ (Samsung Electronics Co., Ltd.) C:\Windows\system32\Drivers\ssudbus.sys
==================== Três Meses Modificados arquivos e pastas ========
(Se uma entrada for incluída na fixlist, o arquivo/pasta será movido.)
2016-12-03 12:52 - 2016-05-21 09:20 - 00101080 _____ (GAS Tecnologia) C:\Windows\system32\Drivers\wsddfac.sys
2016-12-03 12:49 - 2015-07-20 02:48 - 00000902 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2016-12-03 12:34 - 2015-07-20 02:43 - 00001070 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2016-12-03 12:02 - 2009-07-14 02:45 - 00026528 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2016-12-03 12:02 - 2009-07-14 02:45 - 00026528 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2016-12-03 11:59 - 2010-11-21 07:37 - 00709154 _____ C:\Windows\system32\prfh0416.dat
2016-12-03 11:59 - 2010-11-21 07:37 - 00150802 _____ C:\Windows\system32\prfc0416.dat
2016-12-03 11:59 - 2009-07-14 03:13 - 01650158 _____ C:\Windows\system32\PerfStringBackup.INI
2016-12-03 11:59 - 2009-07-14 01:20 - 00000000 ____D C:\Windows\inf
2016-12-03 11:55 - 2015-07-20 03:26 - 00000206 _____ C:\Windows\Tasks\AutoKMS.job
2016-12-03 11:54 - 2016-05-17 10:22 - 00028888 _____ (GAS Tecnologia) C:\Windows\system32\Drivers\gbpddfac64.sys
2016-12-03 11:54 - 2016-05-17 10:22 - 00000000 ____D C:\Program Files (x86)\GbPlugin
2016-12-03 11:54 - 2015-12-17 11:19 - 00000000 ____D C:\Users\Todos os Usuários\panda_url_filtering
2016-12-03 11:54 - 2015-12-17 11:19 - 00000000 ____D C:\ProgramData\panda_url_filtering
2016-12-03 11:54 - 2015-07-20 02:43 - 00001066 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2016-12-03 11:54 - 2009-07-14 03:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2016-12-03 11:47 - 2015-07-24 10:09 - 00000000 ____D C:\Users\Todos os Usuários\Package Cache
2016-12-03 11:47 - 2015-07-24 10:09 - 00000000 ____D C:\ProgramData\Package Cache
2016-12-03 08:04 - 2016-03-31 18:29 - 00000000 ____D C:\Users\Imprimak\AppData\Roaming\BitComet
2016-12-02 17:56 - 2015-07-21 11:30 - 00000000 ____D C:\Users\Imprimak\Desktop\## EPS IMPRESSAO
2016-12-02 12:58 - 2015-07-21 12:29 - 00000000 ____D C:\Users\Public\FineCut
2016-12-02 12:54 - 2015-07-20 03:03 - 00000000 ____D C:\Users\Todos os Usuários\Corel
2016-12-02 12:54 - 2015-07-20 03:03 - 00000000 ____D C:\ProgramData\Corel
2016-11-28 14:07 - 2015-07-20 02:44 - 00000000 ____D C:\Users\Imprimak\AppData\Local\Adobe
2016-11-28 12:26 - 2016-07-19 11:04 - 00000000 ____D C:\Users\Imprimak\Desktop\DAVID
2016-11-26 11:49 - 2015-07-22 19:02 - 00000000 ____D C:\Users\Imprimak\AppData\Local\ElevatedDiagnostics
2016-11-26 10:15 - 2015-05-08 10:21 - 00000000 ____D C:\Users\Imprimak\Desktop\Targa XT C
2016-11-26 08:59 - 2015-07-20 02:45 - 00000000 ____D C:\Users\Todos os Usuários\Oracle
2016-11-26 08:59 - 2015-07-20 02:45 - 00000000 ____D C:\ProgramData\Oracle
2016-11-26 08:14 - 2015-07-20 02:53 - 00000000 ____D C:\Program Files\Java
2016-11-26 08:14 - 2015-07-20 02:45 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2016-11-26 08:14 - 2015-07-20 02:45 - 00000000 ____D C:\Program Files (x86)\Java
2016-11-26 08:13 - 2015-07-20 02:53 - 00110144 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge-64.dll
2016-11-26 08:13 - 2015-07-20 02:53 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java Development Kit
2016-11-25 08:39 - 2015-07-20 02:44 - 00000000 ____D C:\Program Files (x86)\Adobe
2016-11-25 08:38 - 2015-07-20 02:44 - 00000000 ____D C:\Users\Todos os Usuários\Adobe
2016-11-25 08:38 - 2015-07-20 02:44 - 00000000 ____D C:\ProgramData\Adobe
2016-11-22 21:10 - 2009-07-14 02:45 - 00442280 _____ C:\Windows\system32\FNTCACHE.DAT
2016-11-22 14:36 - 2015-07-20 03:15 - 00117432 _____ C:\Users\Imprimak\AppData\Local\GDIPFONTCACHEV1.DAT
2016-11-21 17:50 - 2015-07-21 09:54 - 00000000 ____D C:\Users\Imprimak\AppData\Roaming\Skype
2016-11-18 10:00 - 2015-07-20 03:04 - 00000000 ____D C:\Users\Todos os Usuários\Microsoft Help
2016-11-18 09:13 - 2015-07-21 09:04 - 00000000 ____D C:\Windows\Minidump
2016-11-18 09:11 - 2009-07-14 01:20 - 00000000 ____D C:\Windows\system32\NDF
2016-11-10 18:40 - 2015-07-20 02:44 - 00002193 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2016-11-09 20:55 - 2009-07-14 03:09 - 00000000 ____D C:\Windows\System32\Tasks\WPD
==================== Bamital & volsnap ======================
(Não há correção automática para arquivos que não passaram na verificação.)
C:\Windows\system32\winlogon.exe => O arquivo é assinado digitalmente
C:\Windows\system32\wininit.exe => O arquivo é assinado digitalmente
C:\Windows\SysWOW64\wininit.exe => O arquivo é assinado digitalmente
C:\Windows\explorer.exe => O arquivo é assinado digitalmente
C:\Windows\SysWOW64\explorer.exe => O arquivo é assinado digitalmente
C:\Windows\system32\svchost.exe => O arquivo é assinado digitalmente
C:\Windows\SysWOW64\svchost.exe => O arquivo é assinado digitalmente
C:\Windows\system32\services.exe => O arquivo é assinado digitalmente
C:\Windows\system32\User32.dll => O arquivo é assinado digitalmente
C:\Windows\SysWOW64\User32.dll => O arquivo é assinado digitalmente
C:\Windows\system32\userinit.exe => O arquivo é assinado digitalmente
C:\Windows\SysWOW64\userinit.exe => O arquivo é assinado digitalmente
C:\Windows\system32\rpcss.dll => O arquivo é assinado digitalmente
C:\Windows\system32\dnsapi.dll => O arquivo é assinado digitalmente
C:\Windows\SysWOW64\dnsapi.dll => O arquivo é assinado digitalmente
C:\Windows\system32\Drivers\volsnap.sys => O arquivo é assinado digitalmente
LastRegBack: 2016-11-24 10:58
==================== Fim de FRST.txt ============================