Resultado do exame da Farbar Recovery Scan Tool (FRST) (x86) Versão: 07-12-2016
Executado por Carlão (administrador) em CARLAO (15-12-2016 09:42:46)
Executando a partir de C:\Users\Carlão\Desktop
Perfis Carregados: Carlão (Perfis Disponíveis: Carlão)
Platform: Microsoft Windows 7 Professional Service Pack 1 (X86) Idioma: Português (Brasil)
Internet Explorer Versão 11 (Navegador padrão não detectado!)
Modo da Inicialização: Normal
Tutorial da Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processos (Whitelisted) =================

(Se uma entrada for incluída na fixlist, o processo será fechado. O arquivo não será movido.)

(GAS Tecnologia) C:\Program Files\GbPlugin\gbpsv.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
(Microsoft Corporation) C:\Program Files\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe
(Microsoft Corporation) C:\Program Files\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe
(GAS Tecnologia LTDA) C:\Program Files\Diebold\Warsaw\core.exe
(Microsoft Corp.) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVCM.EXE
(GAS Tecnologia) C:\Program Files\GbPlugin\gbpsv.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\avastui.exe
(Kurupira.NET) C:\Program Files\Kurupira\WebFilter\kurupiraWF.exe
(Microsoft Corporation) C:\Windows\System32\wbem\unsecapp.exe
(GAS Tecnologia LTDA) C:\Program Files\Diebold\Warsaw\core.exe
(Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jusched.exe
(WinZip Computing, S.L.) C:\Program Files\WinZip\WZUpdateNotifier.exe
(WinZip Computing, S.L.) C:\Program Files\WinZip\FAHWindow32.exe
(WinZip Computing, S.L.) C:\Program Files\WinZip\WzPreloader.exe
(Piriform Ltd) C:\Program Files\CCleaner\CCleaner.exe
(Kurupira.NET) C:\Program Files\Kurupira\WebFilter\rcp.exe
(Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jucheck.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe

==================== Registro (Whitelisted) ====================

(Se uma entrada for incluída na fixlist, o ítem no Registro será restaurado para o padrão ou removido. O arquivo não será movido.)

HKLM\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [7408312 2016-06-27] (AVAST Software)
HKLM\...\Run: [KurupiraNet] => C:\Program Files\Kurupira\WebFilter\kurupirawf.exe [7727288 2012-12-11] (Kurupira.NET)
HKLM\...\Run: [Diebold - Warsaw] => C:\Program Files\Diebold\Warsaw\core.exe [792112 2016-06-22] (GAS Tecnologia LTDA)
HKLM\...\Run: [SunJavaUpdateSched] => C:\Program Files\Common Files\Java\Java Update\jusched.exe [598552 2016-06-22] (Oracle Corporation)
Winlogon\Notify\ GbPluginBb: C:\Program Files\GbPlugin\gbieh.dll [2016-06-16] (Banco do Brasil)
HKLM\...\Policies\Explorer: [EnableShellExecuteHooks] 1
HKU\S-1-5-21-1851673844-4146158839-1204907345-1000\...\Run: [KurupiraNet] => C:\Program Files\Kurupira\WebFilter\kurupirawf.exe [7727288 2012-12-11] (Kurupira.NET)
HKU\S-1-5-21-1851673844-4146158839-1204907345-1000\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner.exe [6564776 2015-10-19] (Piriform Ltd)
HKU\S-1-5-21-1851673844-4146158839-1204907345-1000\...\Policies\Explorer: []
HKU\S-1-5-18\...\Run: [KurupiraNet] => C:\Program Files\Kurupira\WebFilter\kurupirawf.exe [7727288 2012-12-11] (Kurupira.NET)
ShellExecuteHooks: GbPluginObj Class - {E37CB5F0-51F5-4395-A808-5FA49E399F83} - C:\PROGRAM FILES\GbPlugin\gbieh.dll [1947872 2016-06-16] (Banco do Brasil)
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll [2016-05-16] (AVAST Software)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\FAH.lnk [2016-09-08]
ShortcutTarget: FAH.lnk -> C:\Program Files\WinZip\FAHConsole.exe (WinZip Computing, S.L.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Notificador de atualização.lnk [2016-09-08]
ShortcutTarget: Notificador de atualização.lnk -> C:\Program Files\WinZip\WZUpdateNotifier.exe (WinZip Computing, S.L.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\WinZip Preloader.lnk [2016-09-08]
ShortcutTarget: WinZip Preloader.lnk -> C:\Program Files\WinZip\WzPreloader.exe (WinZip Computing, S.L.)
GroupPolicy: Restrição ? <======= ATENÇÃO
GroupPolicyScripts: Restrição <======= ATENÇÃO
CHR HKLM\SOFTWARE\Policies\Google: Restrição <======= ATENÇÃO

==================== Internet (Whitelisted) ====================

(Se um ítem for incluído na fixlist, sendo um ítem do Registro, será removido ou restaurado para o padrão.)

Tcpip\..\Interfaces\{C2778027-00F7-4FA5-8785-D45CFF1A7AD9}: [NameServer] 208.67.222.222,8.8.8.8
ManualProxies:

Internet Explorer:
==================
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Restrição <======= ATENÇÃO
HKU\S-1-5-21-1851673844-4146158839-1204907345-1000\SOFTWARE\Policies\Microsoft\Internet Explorer: Restrição <======= ATENÇÃO
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.bing.com/search?FORM=INCOH1&PC=IC05&PTAG=ICO-40cce826
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=msnhome
HKU\S-1-5-19\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKU\S-1-5-20\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKU\S-1-5-21-1851673844-4146158839-1204907345-1000\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
SearchScopes: HKLM -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?FORM=INCOH2&PC=IC05&PTAG=ICO-40cce826&q={searchTerms}
SearchScopes: HKLM -> {0191A6B0-1154-4C22-9182-23A95BBE92D9} URL = hxxp://www.google.com/search?q={searchTerms}
SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?FORM=INCOH2&PC=IC05&PTAG=ICO-40cce826&q={searchTerms}
SearchScopes: HKLM -> {632F07F3-19A1-4d16-A23F-E6CE9486BAB5} URL = hxxp://www.bing.com/search?q={searchTerms}&FORM=AVASDF&PC=AV01
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 -> {0191A6B0-1154-4C22-9182-23A95BBE92D9} URL = hxxp://www.google.com/search?q={searchTerms}
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> {0191A6B0-1154-4C22-9182-23A95BBE92D9} URL = hxxp://www.google.com/search?q={searchTerms}
SearchScopes: HKU\S-1-5-21-1851673844-4146158839-1204907345-1000 -> DefaultScope {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = hxxp://www.bing.com/search?FORM=INCOH2&PC=IC05&PTAG=ICO-40cce826&q={searchTerms}
SearchScopes: HKU\S-1-5-21-1851673844-4146158839-1204907345-1000 -> {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = hxxp://www.bing.com/search?FORM=INCOH2&PC=IC05&PTAG=ICO-40cce826&q={searchTerms}
SearchScopes: HKU\S-1-5-21-1851673844-4146158839-1204907345-1000 -> {d4fee3d1-1014-4db8-a824-573bf9ab51c7} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSE1
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_101\bin\ssv.dll [2016-09-08] (Oracle Corporation)
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2016-05-16] (AVAST Software)
BHO: Easy Photo Print -> {9421DD08-935F-4701-A9CA-22DF90AC4EA6} -> C:\Program Files\Epson Software\Easy Photo Print\EPTBL.dll [2012-01-25] (SEIKO EPSON CORPORATION)
BHO: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2016-01-08] (Microsoft Corporation)
BHO: GbIehObj Class -> {C41A1C0E-EA6C-11D4-B1B8-444553540000} -> C:\PROGRAM FILES\GBPLUGIN\gbieh.dll [2016-06-16] (Banco do Brasil)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_101\bin\jp2ssv.dll [2016-09-08] (Oracle Corporation)
Toolbar: HKLM - Easy Photo Print - {9421DD08-935F-4701-A9CA-22DF90AC4EA6} - C:\Program Files\Epson Software\Easy Photo Print\EPTBL.dll [2012-01-25] (SEIKO EPSON CORPORATION)
DPF: {7530BFB8-7293-4D34-9923-61A11451AFC5} hxxp://download.eset.com/special/eos/OnlineScanner.cab
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_21-windows-i586.cab
DPF: {CAFEEFAC-0017-0000-0021-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_21-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_21-windows-i586.cab
DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
DPF: {F9043C85-F6F2-101A-A3C9-08002B2F49FB}
Handler: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll [2006-10-27] (Microsoft Corporation)
Handler: livecall - {828030A1-22C1-4009-854F-8E305202313F} - Nenhum Arquivo
Handler: msnim - {828030A1-22C1-4009-854F-8E305202313F} - Nenhum Arquivo
Handler: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2016-01-08] (Microsoft Corporation)

FireFox:
========
FF ProfilePath: C:\Users\Carlão\AppData\Roaming\Yoono\Yoono\Profiles\ojfbikjp.default [2011-07-18]
FF Extension: (Sem Nome) - C:\Program Files\Yoono Desktop\extensions\{d9284e50-81fc-11da-a72b-0800200c9a66} [2011-07-18] [não assinado]
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF32_23_0_0_207.dll [2016-11-18] ()
FF Plugin: @Google.com/GoogleEarthPlugin -> C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll [2016-10-06] (Google)
FF Plugin: @java.com/DTPlugin,version=11.101.2 -> C:\Program Files\Java\jre1.8.0_101\bin\dtplugin\npDeployJava1.dll [2016-09-08] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.101.2 -> C:\Program Files\Java\jre1.8.0_101\bin\plugin2\npjp2.dll [2016-09-08] (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.20125.0\npctrl.dll [Nenhum Arquivo]
FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.31.5\npGoogleUpdate3.dll [2016-07-29] (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.31.5\npGoogleUpdate3.dll [2016-07-29] (Google Inc.)
FF Plugin: Adobe Reader -> C:\Program Files\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2016-09-30] (Adobe Systems Inc.)

Chrome:
=======
CHR DefaultProfile: ChromeDefaultData
CHR DefaultSearchURL: ChromeDefaultData -> hxxp://www.trotux.com/search/?q={searchTerms}&z=ffb720a4409ee4720df78bfgbz1bdg5e0z5t1gbw1e&from=fss&uid=395049983_1052499_BCD2A720&type=sp
CHR DefaultSearchKeyword: ChromeDefaultData -> trotux
CHR Profile: C:\Users\Carlão\AppData\Local\Google\Chrome\User Data\ChromeDefaultData [2016-12-13] <==== ATENÇÃO
CHR Extension: (Skype) - C:\Users\Carlão\AppData\Local\Google\Chrome\User Data\ChromeDefaultData\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl [2016-12-07]
CHR Extension: (Pagamentos da Chrome Web Store) - C:\Users\Carlão\AppData\Local\Google\Chrome\User Data\ChromeDefaultData\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2016-12-07]
CHR Extension: (Chrome Media Router) - C:\Users\Carlão\AppData\Local\Google\Chrome\User Data\ChromeDefaultData\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2016-12-07]
CHR HKLM\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2016-05-16]
CHR HKLM\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files\Skype\Toolbars\ChromeExtension\skype_chrome_extension.crx [2016-01-08]

==================== Serviços (Whitelisted) ====================

(Se uma entrada for incluída na fixlist, será removida do Registro. O arquivo não será movido, a menos que seja colocado separadamente.)

S4 ABBYY.Licensing.FineReader.Professional.10.0; C:\Program Files\Common Files\ABBYY\FineReader\10.00\Licensing\PE\NetworkLicenseServer.exe [814344 2009-12-22] (ABBYY)
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [243296 2016-05-16] (AVAST Software)
R2 c2cautoupdatesvc; C:\Program Files\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1433216 2016-01-08] (Microsoft Corporation)
R2 c2cpnrsvc; C:\Program Files\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1773696 2016-01-08] (Microsoft Corporation)
S4 CLHNServiceForPowerDVD; C:\Program Files\CyberLink\PowerDVD11\Kernel\DMP\CLHNServiceForPowerDVD.exe [83240 2011-04-20] ()
S4 CyberLink PowerDVD 11.0 Monitor Service; C:\Program Files\CyberLink\PowerDVD11\Common\MediaServer\CLMSMonitorService.exe [70952 2011-03-31] (CyberLink)
S4 CyberLink PowerDVD 11.0 Service; C:\Program Files\CyberLink\PowerDVD11\Common\MediaServer\CLMSServer.exe [312616 2011-03-31] (CyberLink)
S4 EpsonCustomerParticipation; C:\Program Files\EPSON\EpsonCustomerParticipation\EPCP.exe [577008 2014-11-04] (SEIKO EPSON CORPORATION)
S4 EpsonScanSvc; C:\Windows\system32\EscSvc.exe [126128 2012-05-17] (Seiko Epson Corporation)
S4 FlexNet Licensing Service; C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [1064312 2016-04-01] (Flexera Software LLC)
S4 ForceWare Intelligent Application Manager (IAM); C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin32\nSvcAppFlt.exe [387616 2009-04-19] ()
R2 GbpSv; C:\Program Files\GbPlugin\gbpsv.exe [631520 2016-06-16] (GAS Tecnologia)
S4 IDriverT; C:\Program Files\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe [69632 2005-11-14] (Macrovision Corporation) [Arquivo não assinado]
S4 KNet; C:\Windows\svcproxy\svcproxy.exe [3573944 2012-10-30] (Kurupira.net)
S4 nSvcIp; C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin32\nSvcIp.exe [178720 2009-04-19] ()
S4 svcprocess; C:\Windows\svcproxy\svcprocess.exe [166072 2012-10-30] (Kurupira.NET)
R2 Warsaw Technology; C:\Program Files\Diebold\Warsaw\core.exe [792112 2016-06-22] (GAS Tecnologia LTDA)
R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [680960 2009-07-13] (Microsoft Corporation)
U4 AvastVBoxSvc; "C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe" [X]

===================== Drivers (Whitelisted) ======================

(Se uma entrada for incluída na fixlist, será removida do Registro. O arquivo não será movido, a menos que seja colocado separadamente.)

R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [32792 2016-05-16] (AVAST Software)
R1 aswKbd; C:\Windows\system32\drivers\aswKbd.sys [35096 2016-05-16] (AVAST Software)
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [91168 2016-05-16] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [91232 2016-05-16] (AVAST Software)
R0 aswRvrt; C:\Windows\system32\Drivers\aswRvrt.sys [58776 2016-05-16] (AVAST Software)
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [815792 2016-05-16] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [449640 2016-05-16] (AVAST Software)
R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [124808 2016-05-16] (AVAST Software)
R0 aswVmm; C:\Windows\system32\Drivers\aswVmm.sys [224616 2016-08-05] (AVAST Software)
R0 Bhbase; C:\Windows\System32\drivers\Bhbase.sys [47456 2014-03-11] (Baidu, Inc.)
R2 DgiVecp; C:\Windows\system32\Drivers\DgiVecp.sys [38400 2009-10-12] (Samsung Electronics Co., Ltd.) [Arquivo não assinado]
R0 gbpddreg; C:\Windows\System32\drivers\gbpddreg32.sys [25848 2016-12-14] (GAS Tecnologia)
R0 GbpKm; C:\Windows\System32\drivers\gbpkm.sys [49496 2015-11-04] (GAS Tecnologia)
R1 Ndisrd; C:\Windows\System32\DRIVERS\gbpndisrdn.sys [29400 2014-04-08] (GAS Tecnologia)
R2 ntk_PowerDVD; C:\Program Files\CyberLink\PowerDVD11\Kernel\DMP\ntk_PowerDVD.sys [71664 2011-04-20] (Cyberlink Corp.)
R2 SSPORT; C:\Windows\system32\Drivers\SSPORT.sys [5120 2009-10-12] (Samsung Electronics) [Arquivo não assinado]
R3 VIAHdAudAddService; C:\Windows\System32\drivers\viahduaa.sys [1086976 2009-09-17] (VIA Technologies, Inc.)
R4 WinDivert1.1; C:\Program Files\Diebold\Warsaw\WinDivert32.sys [31448 2015-07-07] (Basil)
R1 wsddfac; C:\Windows\System32\drivers\wsddfac.sys [80728 2016-12-14] (GAS Tecnologia)
R1 wsddpp; C:\Windows\system32\drivers\wsddpp.sys [79064 2015-03-18] (GAS Tecnologia)
R2 {329F96B6-DF1E-4328-BFDA-39EA953C1312}; C:\Program Files\CyberLink\PowerDVD11\Common\NavFilter\000.fcl [77296 2011-04-12] (CyberLink Corp.)
S3 AsrCDDrv; \??\C:\Windows\system32\Drivers\AsrCDDrv.sys [X]
S3 BHipsEx; \??\C:\Windows\System32\drivers\BHipsEx.sys [X]
S3 catchme; \??\C:\Users\CARLO~1\AppData\Local\Temp\catchme.sys [X]
S2 LMIInfo; \??\C:\Program Files\LogMeIn\x86\RaInfo.sys [X]
S4 LMIRfsClientNP; não ImagePath
S1 mosfilterdrv; system32\drivers\mosfilterdrv.sys [X]
S3 NdisrdMP; system32\DRIVERS\gbpndisrd.sys [X]
U4 VBoxAswDrv; \??\C:\Program Files\AVAST Software\Avast\ng\vbox\VBoxAswDrv.sys [X]

==================== NetSvcs (Whitelisted) ===================

(Se uma entrada for incluída na fixlist, será removida do Registro. O arquivo não será movido, a menos que seja colocado separadamente.)


==================== Três Meses Criados arquivos e pastas ========

(Se uma entrada for incluída na fixlist, o arquivo/pasta será movido.)

2016-12-15 09:42 - 2016-12-15 09:42 - 00018022 _____ C:\Users\Carlão\Desktop\FRST.txt
2016-12-15 08:55 - 2016-12-15 09:42 - 00000000 ____D C:\FRST
2016-12-15 08:54 - 2016-12-15 08:54 - 01761792 _____ (Farbar) C:\Users\Carlão\Desktop\FRST.exe
2016-12-14 16:58 - 2016-12-14 16:58 - 00243720 _____ C:\Users\Carlão\Downloads\Firefox Setup Stub 50.1.0.exe
2016-12-14 11:06 - 2016-12-14 13:49 - 00000000 ____D C:\Users\Carlão\Desktop\Notas Dezembro16
2016-12-13 10:07 - 2016-12-13 10:07 - 00015823 _____ C:\ComboFix.txt
2016-12-13 09:40 - 2016-12-13 09:40 - 05658636 ____R (Swearware) C:\Users\Carlão\Desktop\ComboFix.exe
2016-12-13 08:38 - 2016-12-13 08:38 - 00148208 _____ C:\Users\Carlão\AppData\Local\GDIPFONTCACHEV1.DAT
2016-12-13 08:03 - 2016-12-13 08:03 - 03921768 _____ C:\Windows\system32\FNTCACHE.DAT
2016-12-12 16:40 - 2016-12-13 09:31 - 00170200 _____ (Malwarebytes) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2016-12-12 16:40 - 2016-12-12 16:41 - 00001058 _____ C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2016-12-12 16:40 - 2016-12-12 16:41 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2016-12-12 16:40 - 2016-12-12 16:41 - 00000000 ____D C:\Program Files\Malwarebytes Anti-Malware
2016-12-12 16:40 - 2016-03-10 14:09 - 00053120 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2016-12-12 16:40 - 2016-03-10 14:08 - 00126336 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbamchameleon.sys
2016-12-12 16:40 - 2016-03-10 14:08 - 00024448 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbam.sys
2016-12-12 16:03 - 2016-12-13 11:43 - 00000829 _____ C:\Users\Carlão\Desktop\ZHPCleaner.lnk
2016-12-09 10:32 - 2016-12-09 10:32 - 00000000 ____D C:\Users\Carlão\Downloads\Procurando Dory 2016 720p Bluray Dublado - TPF
2016-12-07 16:18 - 2016-12-07 16:18 - 00000000 ____D C:\Users\Public\ABBYY
2016-12-07 15:03 - 2016-12-07 15:04 - 05974040 _____ (© pdfforge GmbH.) C:\Users\Carlão\Downloads\PDF_Architect_4_Installer.exe
2016-12-07 14:12 - 2016-12-13 10:07 - 00000000 ____D C:\Qoobox
2016-12-07 14:12 - 2011-06-26 04:45 - 00256000 _____ C:\Windows\PEV.exe
2016-12-07 14:12 - 2010-11-07 15:20 - 00208896 _____ C:\Windows\MBR.exe
2016-12-07 14:12 - 2009-04-20 02:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe
2016-12-07 14:12 - 2000-08-30 22:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe
2016-12-07 14:12 - 2000-08-30 22:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe
2016-12-07 14:12 - 2000-08-30 22:00 - 00098816 _____ C:\Windows\sed.exe
2016-12-07 14:12 - 2000-08-30 22:00 - 00080412 _____ C:\Windows\grep.exe
2016-12-07 14:12 - 2000-08-30 22:00 - 00068096 _____ C:\Windows\zip.exe
2016-12-07 14:11 - 2016-12-07 14:34 - 00000000 ____D C:\Windows\erdnt
2016-12-07 13:50 - 2016-12-07 13:50 - 00001220 _____ C:\Users\Carlão\Desktop\Revo Uninstaller.lnk
2016-12-07 13:50 - 2016-12-07 13:50 - 00000000 ____D C:\Users\Carlão\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Revo Uninstaller
2016-12-07 11:05 - 2016-12-07 11:05 - 00243696 _____ C:\Users\Carlão\Downloads\Firefox Setup Stub 50.0.2.exe
2016-12-07 09:16 - 2016-12-12 16:52 - 00000000 ____D C:\Users\Carlão\AppData\Local\ESET
2016-12-06 17:09 - 2016-12-12 17:09 - 00000000 ____D C:\AdwCleaner
2016-12-06 17:09 - 2016-12-06 17:09 - 03968464 _____ C:\Users\Carlão\Downloads\AdwCleaner.exe
2016-12-06 16:35 - 2016-12-06 16:37 - 00000000 ____D C:\Windows\system32\SSL
2016-12-06 16:34 - 2016-12-06 16:34 - 00000000 ____D C:\Users\Todos os Usuários\Avira
2016-12-06 16:34 - 2016-12-06 16:34 - 00000000 ____D C:\Users\Todos os Usuários\Avg
2016-12-06 16:34 - 2016-12-06 16:34 - 00000000 ____D C:\ProgramData\Avira
2016-12-06 16:34 - 2016-12-06 16:34 - 00000000 ____D C:\ProgramData\Avg
2016-12-06 16:32 - 2016-12-07 13:44 - 00000000 ____D C:\Users\Carlão\AppData\Roaming\Rafage
2016-12-06 16:32 - 2016-12-06 16:32 - 00000000 ____D C:\Users\Carlão\AppData\Local\Kernishwusied
2016-12-06 16:24 - 2016-12-06 16:24 - 00000000 ____D C:\Users\Carlão\Desktop\Dados anteriores do Firefox
2016-12-06 14:23 - 2016-12-06 14:23 - 03485269 _____ C:\Users\Carlão\Desktop\Notas Novembro16.rar
2016-12-06 10:57 - 2016-12-08 14:56 - 00000000 ____D C:\Users\Carlão\Documents\Wondershare PDF Converter Pro
2016-12-06 10:57 - 2016-12-06 10:57 - 00000000 ____D C:\Program Files\Common Files\Wondershare
2016-12-06 10:57 - 2015-06-12 10:40 - 00082504 _____ (Wondershare Software) C:\Windows\system32\WSMonitor.dll
2016-12-06 10:56 - 2016-12-06 16:34 - 00000000 ____D C:\Program Files\Wondershare
2016-12-06 10:56 - 2016-12-06 10:56 - 00001213 _____ C:\Users\Public\Desktop\Wondershare PDF Converter Pro.lnk
2016-12-06 10:56 - 2016-12-06 10:56 - 00000000 ____D C:\Users\Carlão\AppData\Roaming\Wondershare
2016-12-06 10:56 - 2016-12-06 10:56 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Wondershare
2016-12-06 10:13 - 2016-12-06 10:42 - 89188649 _____ C:\Users\Carlão\Downloads\WONDS4101.rar
2016-12-06 10:10 - 2016-12-06 10:10 - 00000000 ____D C:\Users\Public\Documents\Baidu
2016-12-06 10:01 - 2016-12-06 10:01 - 00000000 ____D C:\Users\Carlão\AppData\Roaming\ProxyList
2016-12-06 09:57 - 2016-12-06 16:31 - 00000000 ____D C:\Users\Todos os Usuários\vCore
2016-12-06 09:57 - 2016-12-06 16:31 - 00000000 ____D C:\ProgramData\vCore
2016-12-06 09:57 - 2016-12-06 09:57 - 00000000 ___HD C:\Users\Todos os Usuários\23z85818t641
2016-12-06 09:57 - 2016-12-06 09:57 - 00000000 ___HD C:\ProgramData\23z85818t641
2016-12-06 09:25 - 2016-12-06 16:34 - 00000000 ____D C:\Program Files\Free PDF to Word Converter
2016-12-06 09:25 - 2016-12-06 09:25 - 00000000 ____D C:\Users\Carlão\AppData\Roaming\Free-PDF-to-Word.com
2016-12-06 09:22 - 2016-12-06 09:22 - 00611469 _____ (Free-PDF-to-Word.com ) C:\Users\Carlão\Downloads\free-pdf-to-word-converter-1.3.exe
2016-12-05 08:11 - 2016-12-05 08:11 - 00001287 _____ C:\Users\Carlão\Desktop\Media Player Classic.lnk
2016-11-29 14:04 - 2016-11-29 14:04 - 00013504 _____ C:\Users\Carlão\Downloads\Untitled
2016-11-21 08:40 - 2016-12-14 17:02 - 00000000 ____D C:\Users\Carlão\AppData\LocalLow\Mozilla
2016-11-18 09:34 - 2016-12-14 17:17 - 00000000 ____D C:\Program Files\Mozilla Firefox
2016-11-07 09:00 - 2016-11-07 09:00 - 00002096 _____ C:\Users\Public\Desktop\Google Earth.lnk
2016-11-07 09:00 - 2016-11-07 09:00 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Earth
2016-10-28 11:36 - 2016-10-28 11:37 - 00000000 ____D C:\Users\Carlão\Downloads\A.Abelha.Maya.O.Filme.720p.WWW.TORRENTDOSFILMES.COM
2016-10-28 11:35 - 2016-10-28 11:35 - 00002644 _____ C:\Users\Carlão\AppData\Roaming\Microsoft\Windows\Start Menu\µTorrent.lnk
2016-10-28 11:34 - 2016-12-12 17:01 - 00000000 ____D C:\Users\Carlão\AppData\Roaming\uTorrent
2016-10-28 11:33 - 2016-10-28 11:33 - 02370560 _____ (BitTorrent Inc.) C:\Users\Carlão\Downloads\Baixaki_utorrent [1].exe
2016-10-28 08:42 - 2016-10-28 08:42 - 00000000 ____D C:\Users\Todos os Usuários\Sicoobnet
2016-10-28 08:42 - 2016-10-28 08:42 - 00000000 ____D C:\ProgramData\Sicoobnet
2016-10-20 12:15 - 2016-10-20 12:15 - 00000000 _____ C:\Windows\system32\last.dump
2016-10-11 12:02 - 2016-10-11 12:02 - 02286834 _____ C:\Users\Carlão\Downloads\livro-para-colorir.pdf
2016-10-05 11:26 - 2016-10-05 11:26 - 05058444 _____ C:\Users\Carlão\Desktop\Notas Setembro 16.rar
2016-09-27 17:28 - 2016-09-27 17:29 - 05411379 _____ C:\Users\Carlão\Downloads\perfil_eleitorado_2016.zip
2016-09-21 09:35 - 2016-09-21 09:36 - 27145990 _____ C:\Users\Carlão\Downloads\WhatsApp.apk

==================== Três Meses Modificados arquivos e pastas ========

(Se uma entrada for incluída na fixlist, o arquivo/pasta será movido.)

2016-12-15 09:25 - 2015-02-09 10:25 - 00000919 _____ C:\Windows\Tasks\EPSON XP-211 214 216 Series Update {16B93A3F-D2B3-427A-8C30-A1482D5B5869}.job
2016-12-15 09:25 - 2015-02-09 10:25 - 00000733 _____ C:\Windows\Tasks\EPSON XP-211 214 216 Series Invitation {16B93A3F-D2B3-427A-8C30-A1482D5B5869}.job
2016-12-15 09:25 - 2009-07-14 02:52 - 00000000 ____D C:\Windows\system32\FxsTmp
2016-12-15 09:03 - 2012-03-30 09:05 - 00000902 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2016-12-15 08:58 - 2012-04-10 10:03 - 00001058 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2016-12-15 08:46 - 2009-07-14 00:37 - 00000000 ____D C:\Windows\system32\NDF
2016-12-15 08:10 - 2016-02-15 17:02 - 00000000 ___SD C:\Users\Carlão\AppData\LocalLow\Temp
2016-12-15 02:42 - 2009-07-14 02:34 - 00021872 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2016-12-15 02:42 - 2009-07-14 02:34 - 00021872 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2016-12-14 19:59 - 2016-03-08 14:41 - 00002151 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2016-12-14 19:59 - 2012-04-10 10:13 - 00002163 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2016-12-14 17:18 - 2016-02-05 10:23 - 00025848 _____ (GAS Tecnologia) C:\Windows\system32\Drivers\gbpddreg32.sys
2016-12-14 17:18 - 2013-02-28 10:21 - 00000000 ___HD C:\Windows\svcproxy
2016-12-14 17:18 - 2011-07-15 11:33 - 00000000 ____D C:\Users\Todos os Usuários\GbPlugin
2016-12-14 17:18 - 2011-07-15 11:33 - 00000000 ____D C:\ProgramData\GbPlugin
2016-12-14 17:17 - 2016-02-05 10:28 - 00080728 _____ (GAS Tecnologia) C:\Windows\system32\Drivers\wsddfac.sys
2016-12-14 17:17 - 2012-04-10 10:03 - 00001054 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2016-12-14 17:17 - 2009-07-14 02:53 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2016-12-14 14:30 - 2014-03-31 16:34 - 00000000 ____D C:\Users\Todos os Usuários\firebird
2016-12-14 14:30 - 2014-03-31 16:34 - 00000000 ____D C:\ProgramData\firebird
2016-12-14 09:13 - 2011-03-11 16:39 - 00021504 _____ C:\Users\Carlão\Desktop\Boleto Carlos Oliveira.xls
2016-12-14 09:03 - 2014-07-07 12:27 - 00000000 ____D C:\Sicoobnet
2016-12-14 09:02 - 2015-03-31 11:11 - 00011677 _____ C:\Users\Carlão\Desktop\Boletos Elizeu.xlsx
2016-12-14 08:11 - 2009-07-14 00:37 - 00000000 ____D C:\Windows\inf
2016-12-13 14:35 - 2011-07-14 16:38 - 00000000 ____D C:\Users\Carlão\AppData\Local\Microsoft Help
2016-12-13 11:51 - 2016-08-08 16:49 - 00000000 ____D C:\Users\Carlão\AppData\Roaming\ZHP
2016-12-13 10:02 - 2009-07-14 00:04 - 00000215 _____ C:\Windows\system.ini
2016-12-13 08:48 - 2009-07-14 00:37 - 00000000 ____D C:\Windows\Globalization
2016-12-12 17:13 - 2011-07-14 16:01 - 00000000 ____D C:\Users\Carlão
2016-12-12 17:06 - 2014-09-22 18:14 - 00005414 _____ C:\PureRa.txt
2016-12-12 17:05 - 2015-05-20 18:10 - 00000000 ____D C:\CadEtiq
2016-12-12 17:05 - 2015-05-20 18:09 - 00000000 ____D C:\Pimaco
2016-12-12 17:01 - 2016-08-11 17:02 - 00000000 ____D C:\Users\Carlão\AppData\Roaming\MPC-HC
2016-12-12 17:01 - 2016-08-09 09:12 - 00000000 ____D C:\Users\Todos os Usuários\VSO
2016-12-12 17:01 - 2016-08-09 09:12 - 00000000 ____D C:\ProgramData\VSO
2016-12-12 17:01 - 2011-12-02 09:56 - 00000000 ____D C:\Users\Carlão\AppData\Roaming\Vso
2016-12-12 16:51 - 2011-11-09 17:04 - 00000000 ____D C:\Users\Carlão\Documents\My Digital Editions
2016-12-12 15:58 - 2015-08-03 16:23 - 00012295 _____ C:\Users\Carlão\Desktop\CONTROLE CARLOS.xlsx
2016-12-09 16:32 - 2016-02-15 11:48 - 00000000 ____D C:\Program Files\PDF Architect 4
2016-12-09 11:17 - 2016-08-09 09:12 - 00000000 ____D C:\Users\Carlão\Documents\ConvertXToDVD
2016-12-07 16:18 - 2012-05-17 14:37 - 00000000 ____D C:\Users\Carlão\AppData\Roaming\ABBYY
2016-12-07 16:18 - 2012-05-17 13:04 - 00000000 ____D C:\Users\Todos os Usuários\ABBYY
2016-12-07 16:18 - 2012-05-17 13:04 - 00000000 ____D C:\ProgramData\ABBYY
2016-12-07 14:27 - 2011-11-11 13:43 - 00000000 ____D C:\Users\Todos os Usuários\Temp
2016-12-07 14:27 - 2011-11-11 13:43 - 00000000 ____D C:\ProgramData\Temp
2016-12-07 13:57 - 2012-08-15 12:55 - 00000000 ____D C:\Program Files\DsNET Corp
2016-12-07 13:50 - 2014-09-23 12:14 - 00000000 ____D C:\Program Files\VS Revo Group
2016-12-07 11:44 - 2011-07-14 15:53 - 00000000 ____D C:\Windows\Panther
2016-12-07 10:14 - 2014-08-01 09:19 - 00000000 ____D C:\Users\Carlão\Downloads\Sony Sound Forge Pro 11.0 Build 272 (2013)
2016-12-07 10:11 - 2014-06-04 16:51 - 00000000 ____D C:\Users\Carlão\Downloads\CorelDRAW Graphics Suite X6 Português - Brasil + Keygen
2016-12-06 17:17 - 2012-04-10 10:03 - 00000000 ____D C:\Users\Carlão\AppData\Local\Google
2016-12-06 17:05 - 2015-10-29 17:05 - 00000000 ____D C:\Users\Carlão\AppData\Local\MEGAsync
2016-12-06 17:04 - 2015-10-29 17:05 - 00000000 ___RD C:\Users\Carlão\Documents\MEGAsync
2016-12-06 16:54 - 2009-07-14 00:37 - 00000000 ____D C:\Windows\schemas
2016-12-06 16:34 - 2016-09-08 12:42 - 00000000 ____D C:\Program Files\WinZip
2016-12-06 16:34 - 2016-08-09 15:58 - 00000000 ____D C:\Program Files\UCBrowser
2016-12-06 16:34 - 2016-08-09 15:49 - 00000000 ___HD C:\Program Files\6q9EA3F
2016-12-06 16:34 - 2016-04-01 15:51 - 00000000 ____D C:\Program Files\Autodesk
2016-12-06 16:34 - 2016-03-08 10:37 - 00000000 ____D C:\Program Files\AdwCleaner
2016-12-06 16:34 - 2016-02-05 10:28 - 00000000 ___HD C:\Program Files\GAS Tecnologia
2016-12-06 16:34 - 2015-09-11 16:14 - 00000000 ____D C:\Program Files\Firebird
2016-12-06 16:34 - 2015-06-24 16:23 - 00000000 ____D C:\Program Files\Dropbox
2016-12-06 16:34 - 2015-02-09 10:27 - 00000000 ____D C:\Program Files\EpsonNet
2016-12-06 16:34 - 2015-02-09 10:27 - 00000000 ____D C:\Program Files\EPSON
2016-12-06 16:34 - 2015-02-09 10:25 - 00000000 ____D C:\Program Files\EPSON Software
2016-12-06 16:34 - 2014-10-28 11:35 - 00000000 ____D C:\Program Files\Microsoft SQL Server
2016-12-06 16:34 - 2014-08-08 09:37 - 00000000 ____D C:\Program Files\Java
2016-12-06 16:34 - 2014-07-29 12:56 - 00000000 ____D C:\Program Files\DVDFab 9
2016-12-06 16:34 - 2014-07-24 17:59 - 00000000 ____D C:\Program Files\Ministério do Meio Ambiente
2016-12-06 16:34 - 2014-03-12 15:56 - 00000000 ____D C:\Program Files\DVD Shrink
2016-12-06 16:34 - 2013-08-23 17:25 - 00000000 ____D C:\Program Files\AnvSoft
2016-12-06 16:34 - 2013-08-06 17:31 - 00000000 ____D C:\Program Files\AVAST Software
2016-12-06 16:34 - 2013-08-01 15:56 - 00000000 ____D C:\Program Files\CompuFour
2016-12-06 16:34 - 2013-07-17 17:53 - 00000000 ____D C:\Program Files\Borland
2016-12-06 16:34 - 2013-05-22 11:11 - 00000000 ___RD C:\Program Files\Skype
2016-12-06 16:34 - 2013-03-04 16:53 - 00000000 ____D C:\Program Files\OpenXML-ODF Translator
2016-12-06 16:34 - 2013-02-28 10:21 - 00000000 ____D C:\Program Files\Kurupira
2016-12-06 16:34 - 2013-02-27 17:25 - 00000000 ____D C:\Program Files\Microsoft Silverlight
2016-12-06 16:34 - 2013-02-13 17:11 - 00000000 ___HD C:\Program Files\Zero G Registry
2016-12-06 16:34 - 2013-02-13 17:11 - 00000000 ____D C:\Program Files\Assistente Pimaco +
2016-12-06 16:34 - 2012-05-17 13:04 - 00000000 ____D C:\Program Files\ABBYY FineReader 10
2016-12-06 16:34 - 2012-04-10 10:03 - 00000000 ____D C:\Program Files\Google
2016-12-06 16:34 - 2012-02-13 14:19 - 00000000 ____D C:\Program Files\SimpleOCR
2016-12-06 16:34 - 2012-02-07 09:20 - 00000000 ____D C:\Program Files\Microsoft Visual Studio 9.0
2016-12-06 16:34 - 2012-02-07 09:20 - 00000000 ____D C:\Program Files\Microsoft SDKs
2016-12-06 16:34 - 2012-02-06 16:03 - 00000000 ____D C:\Program Files\Corel
2016-12-06 16:34 - 2012-02-06 15:27 - 00000000 ____D C:\Program Files\WinRAR
2016-12-06 16:34 - 2011-12-02 09:55 - 00000000 ____D C:\Program Files\VSO
2016-12-06 16:34 - 2011-11-11 15:31 - 00000000 ____D C:\Program Files\FreeTime
2016-12-06 16:34 - 2011-11-11 13:44 - 00000000 ____D C:\Program Files\CyberLink
2016-12-06 16:34 - 2011-10-05 18:13 - 00000000 ____D C:\Program Files\Adobe
2016-12-06 16:34 - 2011-07-21 15:55 - 00000000 ____D C:\Program Files\LogMeIn
2016-12-06 16:34 - 2011-07-15 17:42 - 00000000 ____D C:\Program Files\Yoono Desktop
2016-12-06 16:34 - 2011-07-15 11:33 - 00000000 ____D C:\Program Files\GbPlugin
2016-12-06 16:34 - 2011-07-14 18:44 - 00000000 ____D C:\Program Files\Samsung
2016-12-06 16:34 - 2011-07-14 17:42 - 00000000 ____D C:\Program Files\Windows Live
2016-12-06 16:34 - 2011-07-14 17:23 - 00000000 ____D C:\Program Files\TeamViewer
2016-12-06 16:34 - 2011-07-14 16:51 - 00000000 ____D C:\Program Files\Nero
2016-12-06 16:34 - 2011-07-14 16:41 - 00000000 ____D C:\Program Files\Microsoft Works
2016-12-06 16:34 - 2011-07-14 16:41 - 00000000 ____D C:\Program Files\Microsoft Visual Studio
2016-12-06 16:34 - 2011-07-14 16:38 - 00000000 ____D C:\Program Files\Microsoft Visual Studio 8
2016-12-06 16:34 - 2011-07-14 16:38 - 00000000 ____D C:\Program Files\Microsoft Office
2016-12-06 16:34 - 2011-07-14 16:32 - 00000000 ____D C:\Program Files\K-Lite Codec Pack
2016-12-06 16:34 - 2011-07-14 16:22 - 00000000 ____D C:\Program Files\CCleaner
2016-12-06 16:34 - 2011-07-14 16:11 - 00000000 ____D C:\Program Files\VIA
2016-12-06 16:34 - 2011-07-14 16:09 - 00000000 ___HD C:\Program Files\InstallShield Installation Information
2016-12-06 16:34 - 2011-07-14 16:09 - 00000000 ____D C:\Program Files\NVIDIA Corporation
2016-12-06 16:34 - 2011-04-12 02:56 - 00000000 ____D C:\Program Files\Windows Journal
2016-12-06 16:34 - 2009-07-14 02:52 - 00000000 ____D C:\Program Files\Windows Sidebar
2016-12-06 16:34 - 2009-07-14 02:52 - 00000000 ____D C:\Program Files\Windows Portable Devices
2016-12-06 16:34 - 2009-07-14 02:52 - 00000000 ____D C:\Program Files\Windows Photo Viewer
2016-12-06 16:34 - 2009-07-14 02:52 - 00000000 ____D C:\Program Files\Windows Defender
2016-12-06 16:34 - 2009-07-14 02:52 - 00000000 ____D C:\Program Files\Reference Assemblies
2016-12-06 16:34 - 2009-07-14 02:52 - 00000000 ____D C:\Program Files\MSBuild
2016-12-06 16:34 - 2009-07-14 02:52 - 00000000 ____D C:\Program Files\DVD Maker
2016-12-06 16:34 - 2009-07-14 00:37 - 00000000 ____D C:\Program Files\Windows NT
2016-12-06 14:02 - 2011-04-12 02:47 - 00705786 _____ C:\Windows\system32\prfh0416.dat
2016-12-06 14:02 - 2011-04-12 02:47 - 00146512 _____ C:\Windows\system32\prfc0416.dat
2016-12-06 14:02 - 2010-11-20 19:01 - 01634728 _____ C:\Windows\system32\PerfStringBackup.INI
2016-12-06 09:34 - 2016-02-15 11:37 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PDFCreator
2016-12-06 09:29 - 2016-02-15 11:49 - 00000000 ____D C:\Users\Carlão\AppData\Roaming\PDF Architect 4
2016-11-28 16:16 - 2010-04-14 16:10 - 00000000 ____D C:\Users\Carlão\Documents\SECRETARIA MUNICIPAL DA AGRICULTURA
2016-11-21 11:55 - 2011-07-14 16:38 - 00000000 ____D C:\Users\Todos os Usuários\Microsoft Help
2016-11-18 09:34 - 2014-07-07 12:33 - 00001416 _____ C:\Users\Carlão\Desktop\Sicoobnet Empresarial.lnk
2016-11-18 08:14 - 2012-03-30 09:05 - 00796352 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2016-11-18 08:14 - 2011-07-14 17:28 - 00142528 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl
2016-11-18 08:14 - 2011-07-14 17:28 - 00000000 ____D C:\Windows\system32\Macromed

==================== Arquivos na raiz de alguns diretórios =======

2014-07-07 12:27 - 2016-08-08 15:35 - 0000225 _____ () C:\Program Files\scbe.properties
2011-12-02 09:56 - 2016-08-12 10:01 - 0007887 _____ () C:\Users\Carlão\AppData\Roaming\pcouffin.cat
2011-12-02 09:56 - 2016-08-12 10:01 - 0001144 _____ () C:\Users\Carlão\AppData\Roaming\pcouffin.inf
2011-12-02 09:56 - 2016-08-12 10:01 - 0000033 _____ () C:\Users\Carlão\AppData\Roaming\pcouffin.log
2011-12-02 09:56 - 2016-08-12 10:01 - 0047360 _____ (VSO Software) C:\Users\Carlão\AppData\Roaming\pcouffin.sys
2011-12-02 09:57 - 2016-05-20 09:05 - 0001173 _____ () C:\Users\Carlão\AppData\Roaming\vso_ts_preview.xml
2014-08-05 09:13 - 2014-08-05 09:13 - 0003584 _____ () C:\Users\Carlão\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2013-03-04 09:29 - 2015-05-18 18:08 - 0004096 _____ () C:\Users\Carlão\AppData\Local\keyfile3.drm
2011-10-31 09:40 - 2011-10-31 09:40 - 0000001 _____ () C:\Users\Carlão\AppData\Local\llftool.4.12.agreement
2013-03-13 14:41 - 2013-03-13 14:41 - 0000017 _____ () C:\Users\Carlão\AppData\Local\resmon.resmoncfg
2014-03-12 18:00 - 2014-04-01 09:09 - 0000040 ___SH () C:\ProgramData\.zreglib
2014-08-04 11:32 - 2014-08-04 11:32 - 0000152 _____ () C:\ProgramData\bc.ini
2012-02-06 13:38 - 2012-02-06 15:43 - 0002516 ___SH () C:\ProgramData\KGyGaAvL.sys
2016-04-01 15:57 - 2016-04-01 15:57 - 0000147 _____ () C:\ProgramData\Microsoft.SqlServer.Compact.351.32.bc

Arquivos para serem movidos ou deletados:
====================
C:\Users\Carlão\instmsiw.exe
C:\Users\Carlão\Setup.exe
C:\Users\Carlão\unicows.dll


==================== Bamital & volsnap ======================

(Não há correção automática para arquivos que não passaram na verificação.)

C:\Windows\explorer.exe => O arquivo é assinado digitalmente
C:\Windows\system32\winlogon.exe => O arquivo é assinado digitalmente
C:\Windows\system32\wininit.exe => O arquivo é assinado digitalmente
C:\Windows\system32\svchost.exe => O arquivo é assinado digitalmente
C:\Windows\system32\services.exe => O arquivo é assinado digitalmente
C:\Windows\system32\User32.dll => O arquivo é assinado digitalmente
C:\Windows\system32\userinit.exe => O arquivo é assinado digitalmente
C:\Windows\system32\rpcss.dll => O arquivo é assinado digitalmente
C:\Windows\system32\dnsapi.dll => O arquivo é assinado digitalmente
C:\Windows\system32\Drivers\volsnap.sys => O arquivo é assinado digitalmente

LastRegBack: 2016-12-14 09:30

==================== Fim de FRST.txt ============================