Resultado do exame da Farbar Recovery Scan Tool (FRST) (x64) Versão: 23-02-2017
Executado por joao (administrador) em JOAO-PC (23-02-2017 02:23:30)
Executando a partir de C:\Users\joao\Downloads
Perfis Carregados: joao (Perfis Disponíveis: joao)
Platform: Windows 7 Ultimate (X64) Idioma: Português (Brasil)
Internet Explorer Versão 8 (Navegador padrão: FF)
Modo da Inicialização: Normal
Tutorial da Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processos (Whitelisted) =================

(Se uma entrada for incluída na fixlist, o processo será fechado. O arquivo não será movido.)

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe
(GAS Tecnologia) C:\Program Files (x86)\GbPlugin\GbpSv.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\MsMpEng.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(Sandboxie Holdings, LLC) D:\sandboxie\SbieSvc.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\EPU-4 Engine\FourEngine.exe
(BlueStack Systems, Inc.) C:\Program Files (x86)\Bluestacks\HD-LogRotatorService.exe
(Hi-Rez Studios) C:\Program Files (x86)\Hi-Rez Studios\HiPatchService.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(GAS Tecnologia LTDA) C:\Program Files\Diebold\Warsaw\core.exe
(Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe
() C:\Program Files (x86)\Pingzapper\PZService.exe
() C:\Program Files (x86)\Razer\Razer Services\GSS\GameScannerService.exe
(Valve Corporation) C:\Program Files (x86)\Steam\Steam.exe
(BlueStack Systems, Inc.) C:\Program Files (x86)\Bluestacks\HD-Agent.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Sandboxie Holdings, LLC) D:\sandboxie\SbieCtrl.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
(Razer Inc.) C:\Program Files (x86)\Razer\Synapse\RzSynapse.exe
(Razer Inc) C:\Program Files (x86)\Razer\Razer_Kraken0502_Driver\Drivers\SysAudio\Kraken0502Helper.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NvContainer\nvcontainer.exe
(Razer Inc.) C:\Program Files (x86)\Razer\Razer Cortex\RzKLService.exe
(Razer Inc.) C:\Program Files (x86)\Razer\Razer Cortex\RazerCortex.exe
(GAS Tecnologia LTDA) C:\Program Files\Diebold\Warsaw\core.exe
(Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\ShadowPlay\nvspcaps64.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA Share.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\NisSrv.exe
(GAS Tecnologia) C:\Program Files (x86)\GbPlugin\GbpSv.exe
(Valve Corporation) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe
(HP Inc.) C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe
(Valve Corporation) C:\Program Files (x86)\Common Files\Steam\SteamService.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA Share.exe
(Node.js) C:\Program Files (x86)\NVIDIA Corporation\NvNode\NVIDIA Web Helper.exe
(The CefSharp Authors) C:\Program Files (x86)\Razer\Razer Cortex\Cef\CefSharp.BrowserSubprocess.exe
(Razer Inc.) C:\Program Files (x86)\Razer\Razer Cortex\FPSRunner32.exe
(Razer Inc.) C:\Program Files (x86)\Razer\Razer Cortex\x64\FPSRunner64.exe
(Razer, Inc.) C:\Program Files (x86)\Razer\Razer Cortex\RzFpsApplet\RzFpsApplet.exe
(Valve Corporation) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe
(Razer, Inc.) C:\Program Files (x86)\Razer\InGameEngine\32bit\RazerIngameEngine.exe
(Razer, Inc.) C:\Users\joao\AppData\Local\Razer\InGameEngine\cache\RzFpsApplet\rzcefrenderprocess.exe
(Razer, Inc.) C:\Users\joao\AppData\Local\Razer\InGameEngine\cache\RzFpsApplet\rzcefrenderprocess.exe
(Razer, Inc.) C:\Users\joao\AppData\Local\Razer\InGameEngine\cache\RzFpsApplet\rzcefrenderprocess.exe
(Razer, Inc.) C:\Users\joao\AppData\Local\Razer\InGameEngine\cache\RzFpsApplet\rzcefrenderprocess.exe
(BlueStack Systems, Inc.) C:\Program Files (x86)\Bluestacks\Bluestacks.exe
(BlueStack Systems, Inc.) C:\Program Files (x86)\Bluestacks\HD-Plus-Service.exe
(Bluestack System Inc. ) C:\Program Files (x86)\Bluestacks\BstkSVC.exe
(TeamSpeak Systems GmbH) C:\Program Files (x86)\TeamSpeak 3 Client\ts3client_win32.exe
(Valve Corporation) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe

==================== Registro (Whitelisted) ====================

(Se uma entrada for incluída na fixlist, o ítem no Registro será restaurado para o padrão ou removido. O arquivo não será movido.)

HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [11613288 2010-11-19] (Realtek Semiconductor)
HKLM\...\Run: [MSC] => c:\Program Files\Microsoft Security Client\msseces.exe [1340192 2016-01-29] (Microsoft Corporation)
HKLM\...\Run: [Diebold - Warsaw] => C:\Program Files\Diebold\Warsaw\core.exe [927280 2016-11-11] (GAS Tecnologia LTDA)
HKLM\...\Run: [ShadowPlay] => "C:\Windows\system32\rundll32.exe" C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart
HKLM\...\Run: [Malwarebytes TrayApp] => C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\mbamtray.exe [2780112 2017-01-20] (Malwarebytes)
HKLM-x32\...\Run: [] => [X]
HKLM-x32\...\Run: [Razer Synapse] => C:\Program Files (x86)\Razer\Synapse\RzSynapse.exe [596640 2017-01-16] (Razer Inc.)
HKLM-x32\...\Run: [Kraken0502Launcher] => C:\Program Files (x86)\Razer\Razer_Kraken0502_Driver\Drivers\SysAudio\Kraken0502Helper.exe [1599808 2015-08-14] (Razer Inc)
HKLM-x32\...\Run: [RazerCortex] => C:\Program Files (x86)\Razer\Razer Cortex\CortexLauncher.exe [222160 2016-09-28] (Razer Inc.)
Winlogon\Notify\ GbPluginBb: C:\Program Files (x86)\GbPlugin\gbieh.dll [2016-06-07] (Banco do Brasil)
HKU\S-1-5-21-793131916-1262031037-2198829704-1000\...\Run: [{8CCCD0E7-56E4-45FB-B3FB-9F5183C2F4F0}] => "C:\Users\joao\Downloads\LeagueofLegends_BR_Installer_2016_05_13.exe" /cmdloc "HKCU\Software\Riot Games AiTemp\{8CCCD0E7-56E4-45FB-B3FB-9F5183C2F4F0}"
HKU\S-1-5-21-793131916-1262031037-2198829704-1000\...\Run: [Steam] => C:\Program Files (x86)\Steam\steam.exe [2881824 2017-01-18] (Valve Corporation)
HKU\S-1-5-21-793131916-1262031037-2198829704-1000\...\Run: [Chromium] => c:\users\joao\appdata\local\chromium\application\chrome.exe [1068544 2016-03-18] (The Chromium Authors)
HKU\S-1-5-21-793131916-1262031037-2198829704-1000\...\Run: [BlueStacks Agent] => C:\Program Files (x86)\Bluestacks\HD-Agent.exe [986648 2016-10-21] (BlueStack Systems, Inc.)
HKU\S-1-5-21-793131916-1262031037-2198829704-1000\...\Run: [SandboxieControl] => D:\sandboxie\SbieCtrl.exe [799376 2016-12-13] (Sandboxie Holdings, LLC)
ShellExecuteHooks-x32: GbPluginObj Class - {E37CB5F0-51F5-4395-A808-5FA49E399F83} - C:\Program Files (x86)\GbPlugin\gbieh.dll [1947872 2016-06-07] (Banco do Brasil)
Startup: C:\Users\joao\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Monitorar alertas de tinta - HP Deskjet 2050 J510 series.lnk [2017-02-22]
ShortcutTarget: Monitorar alertas de tinta - HP Deskjet 2050 J510 series.lnk -> C:\Program Files\HP\HP Deskjet 2050 J510 series\Bin\HPStatusBL.dll (Hewlett-Packard Co.)
GroupPolicy: Restrição <======= ATENÇÃO
CHR HKLM\SOFTWARE\Policies\Google: Restrição <======= ATENÇÃO

==================== Internet (Whitelisted) ====================

(Se um ítem for incluído na fixlist, sendo um ítem do Registro, será removido ou restaurado para o padrão.)

Tcpip\Parameters: [DhcpNameServer] 187.123.62.41 187.123.62.36 201.6.4.116
Tcpip\..\Interfaces\{B06641F2-E632-423D-B4B3-171BE7D1A13E}: [DhcpNameServer] 187.123.62.41 187.123.62.36 201.6.4.116

Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://go.microsoft.com/fwlink/?LinkID=617911&ResetID=131190306024044200&GUID=EA24B8E6-605C-428A-BC77-8B3DADD8F7C3
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://go.microsoft.com/fwlink/?LinkID=617911&ResetID=131190306024044200&GUID=EA24B8E6-605C-428A-BC77-8B3DADD8F7C3
HKU\S-1-5-21-793131916-1262031037-2198829704-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://go.microsoft.com/fwlink/?LinkID=617911&ResetID=131190306024200200&GUID=EA24B8E6-605C-428A-BC77-8B3DADD8F7C3
HKU\S-1-5-21-793131916-1262031037-2198829704-1000\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://www.msn.com/pt-br/?ocid=iehp
SearchScopes: HKLM -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSSE
SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSSE
SearchScopes: HKLM-x32 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSSE
SearchScopes: HKLM-x32 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSSE
SearchScopes: HKU\S-1-5-21-793131916-1262031037-2198829704-1000 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSSE
SearchScopes: HKU\S-1-5-21-793131916-1262031037-2198829704-1000 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSSE
BHO: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\Office15\OCHelper.dll [2012-10-01] (Microsoft Corporation)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office15\URLREDIR.DLL [2012-10-01] (Microsoft Corporation)
BHO: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office\Office15\GROOVEEX.DLL [2012-10-01] (Microsoft Corporation)
BHO-x32: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll [2012-10-01] (Microsoft Corporation)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office15\URLREDIR.DLL [2012-10-01] (Microsoft Corporation)
BHO-x32: GbIehObj Class -> {C41A1C0E-EA6C-11D4-B1B8-444553540000} -> C:\Program Files (x86)\GbPlugin\gbieh.dll [2016-06-07] (Banco do Brasil)
BHO-x32: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\Office15\GROOVEEX.DLL [2012-10-01] (Microsoft Corporation)
Handler: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office\Office15\MSOSB.DLL [2012-10-01] (Microsoft Corporation)
Filter: deflate - {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\Windows\system32\urlmon.dll [2009-07-13] (Microsoft Corporation)
Filter-x32: deflate - {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\Windows\SysWOW64\urlmon.dll [2009-07-13] (Microsoft Corporation)
Filter: gzip - {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\Windows\system32\urlmon.dll [2009-07-13] (Microsoft Corporation)
Filter-x32: gzip - {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\Windows\SysWOW64\urlmon.dll [2009-07-13] (Microsoft Corporation)
StartMenuInternet: IEXPLORE.EXE - iexplore.exe

FireFox:
========
FF DefaultProfile: lf7ot01h.default
FF ProfilePath: C:\Users\joao\AppData\Roaming\Mozilla\Firefox\Profiles\lf7ot01h.default [2017-02-23]
FF NewTab: Mozilla\Firefox\Profiles\lf7ot01h.default -> about:newtab
FF SelectedSearchEngine: Mozilla\Firefox\Profiles\lf7ot01h.default -> google
FF Homepage: Mozilla\Firefox\Profiles\lf7ot01h.default -> about:home
FF Extension: (MEGA) - C:\Users\joao\AppData\Roaming\Mozilla\Firefox\Profiles\lf7ot01h.default\Extensions\firefox@mega.co.nz.xpi [2017-02-17]
FF Extension: (Malware Search) - C:\Users\joao\AppData\Roaming\Mozilla\Firefox\Profiles\lf7ot01h.default\Extensions\{27c60876-b5c9-4335-b4f3-52b26782220c}.xpi [2017-02-15]
FF Extension: (Adblock Plus) - C:\Users\joao\AppData\Roaming\Mozilla\Firefox\Profiles\lf7ot01h.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2016-11-23]
FF Extension: (SHA-1 deprecation staged rollout) - C:\Users\joao\AppData\Roaming\Mozilla\Firefox\Profiles\lf7ot01h.default\features\{fe4782fc-a49a-41d5-bedd-c2e429b47b07}\disableSHA1rollout@mozilla.org.xpi [2017-02-16]
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_24_0_0_221.dll [2017-02-15] ()
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~1\MICROS~3\Office15\NPSPWRAP.DLL [2012-10-01] (Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_24_0_0_221.dll [2017-02-15] ()
FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files (x86)\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2012-10-01] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~2\Office15\NPSPWRAP.DLL [2012-10-01] (Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2017-01-20] (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2017-01-20] (NVIDIA Corporation)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2016-12-23] (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npMeetingJoinPluginOC.dll [2012-10-01] (Microsoft Corporation)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll [2016-12-23] (Adobe Systems Inc.)

==================== Serviços (Whitelisted) ====================

(Se uma entrada for incluída na fixlist, será removida do Registro. O arquivo não será movido, a menos que seja colocado separadamente.)

S3 BstHdAndroidSvc; C:\Program Files (x86)\Bluestacks\HD-Service.exe [445976 2016-10-21] (BlueStack Systems, Inc.)
R2 BstHdLogRotatorSvc; C:\Program Files (x86)\Bluestacks\HD-LogRotatorService.exe [425496 2016-10-21] (BlueStack Systems, Inc.)
R3 BstHdPlusAndroidSvc; C:\Program Files (x86)\Bluestacks\HD-Plus-Service.exe [466456 2016-10-21] (BlueStack Systems, Inc.)
S3 EasyAntiCheat; C:\Windows\SysWOW64\EasyAntiCheat.exe [394512 2016-11-29] (EasyAntiCheat Ltd)
R2 GbpSv; C:\Program Files (x86)\GbPlugin\GbpSv.exe [631520 2016-06-07] (GAS Tecnologia)
R2 HiPatchService; C:\Program Files (x86)\Hi-Rez Studios\HiPatchService.exe [9728 2017-02-10] (Hi-Rez Studios) [Arquivo não assinado]
R2 HPSupportSolutionsFrameworkService; C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe [29760 2016-07-04] (HP Inc.)
R2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe [4355024 2017-01-20] (Malwarebytes)
R2 MsMpSvc; c:\Program Files\Microsoft Security Client\MsMpEng.exe [23808 2016-01-29] (Microsoft Corporation)
R3 NisSrv; c:\Program Files\Microsoft Security Client\NisSrv.exe [374344 2016-01-29] (Microsoft Corporation)
R2 NvContainerLocalSystem; C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [462784 2017-01-20] (NVIDIA Corporation)
S3 NvContainerNetworkService; C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [462784 2017-01-20] (NVIDIA Corporation)
R2 NVDisplay.ContainerLocalSystem; C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe [464440 2017-01-20] (NVIDIA Corporation)
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1879488 2016-06-14] (NVIDIA Corporation)
R2 NvTelemetryContainer; C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe [425408 2017-01-20] (NVIDIA Corporation)
S3 OverwolfUpdater; C:\Program Files (x86)\Overwolf\OverwolfUpdater.exe [1325112 2017-02-20] (Overwolf LTD)
R2 PingzapperSvc; C:\Program Files (x86)\Pingzapper\PZService.exe [632320 2016-01-22] () [Arquivo não assinado]
R2 Razer Game Scanner Service; C:\Program Files (x86)\Razer\Razer Services\GSS\GameScannerService.exe [189264 2016-09-24] ()
R2 RzKLService; C:\Program Files (x86)\Razer\Razer Cortex\RzKLService.exe [133376 2016-09-28] (Razer Inc.)
R2 SbieSvc; D:\sandboxie\SbieSvc.exe [197776 2016-12-13] (Sandboxie Holdings, LLC)
R2 Warsaw Technology; C:\Program Files\Diebold\Warsaw\core.exe [927280 2016-11-11] (GAS Tecnologia LTDA)
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2009-07-13] (Microsoft Corporation)
S2 rtop; "C:\Program Files\ByteFence\rtop\bin\rtop_svc.exe" [X]

===================== Drivers (Whitelisted) ======================

(Se uma entrada for incluída na fixlist, será removida do Registro. O arquivo não será movido, a menos que seja colocado separadamente.)

R1 AsIO; C:\Windows\SysWow64\drivers\AsIO.sys [13440 2016-07-14] ()
S3 BstHdDrv; C:\Program Files (x86)\Bluestacks\HD-Hypervisor-amd64.sys [152672 2016-10-21] (BlueStack Systems)
R3 BstkDrv; C:\Program Files (x86)\Bluestacks\BstkDrv.sys [270904 2016-10-07] (Bluestack System Inc. )
S3 cpuz140; C:\Users\joao\AppData\Local\Temp\cpuz140\cpuz140_x64.sys [45888 2017-02-07] (CPUID) <==== ATENÇÃO
R1 ESProtectionDriver; C:\Windows\system32\drivers\mbae64.sys [77416 2017-01-20] ()
R1 gbpddfac; C:\Windows\System32\drivers\gbpddfac64.sys [28888 2017-02-22] (GAS Tecnologia)
R0 gbpddreg; C:\Windows\System32\drivers\gbpddreg64.sys [29816 2017-02-22] (GAS Tecnologia)
R3 GBPRCM; C:\Program Files (x86)\GbPlugin\gbprcm64.sys [29912 2016-05-09] (GAS Tecnologia)
R1 HWiNFO32; C:\Windows\system32\drivers\HWiNFO64A.SYS [27552 2017-02-07] (REALiX(tm))
R2 MBAMChameleon; C:\Windows\system32\drivers\MBAMChameleon.sys [176584 2017-02-15] (Malwarebytes)
R3 MBAMProtection; C:\Windows\system32\drivers\mbam.sys [43968 2017-02-22] (Malwarebytes)
R0 MBAMSwissArmy; C:\Windows\System32\drivers\MBAMSwissArmy.sys [251848 2017-02-22] (Malwarebytes)
R3 MBAMWebProtection; C:\Windows\system32\drivers\mwac.sys [81696 2017-02-23] (Malwarebytes)
R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [289120 2015-11-13] (Microsoft Corporation)
R3 MTsensor; C:\Windows\System32\DRIVERS\ASACPI.sys [15416 2009-07-17] ()
R3 NisDrv; C:\Windows\System32\DRIVERS\NisDrvWFP.sys [133816 2015-11-13] (Microsoft Corporation)
S3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [27584 2017-01-20] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [46016 2017-01-20] (NVIDIA Corporation)
R3 nvvhci; C:\Windows\System32\DRIVERS\nvvhci.sys [57792 2017-01-20] (NVIDIA Corporation)
R3 rzdaendpt; C:\Windows\System32\DRIVERS\rzdaendpt.sys [42000 2016-10-30] (Razer Inc)
R2 rzpmgrk; C:\Windows\system32\drivers\rzpmgrk.sys [44144 2016-09-16] (Razer, Inc.)
R2 rzpnk; C:\Windows\system32\drivers\rzpnk.sys [137840 2016-10-08] (Razer, Inc.)
R3 rzvkeyboard; C:\Windows\System32\DRIVERS\rzvkeyboard.sys [44048 2016-10-30] (Razer Inc)
R3 SbieDrv; D:\sandboxie\SbieDrv.sys [205968 2016-12-13] (Sandboxie Holdings, LLC)
R3 Warsaw_PP; C:\Program Files (x86)\GbPlugin\wsftprp64.sys [24792 2016-05-09] (GAS Tecnologia LTDA)
R1 wsddfac; C:\Windows\System32\drivers\wsddfac.sys [28376 2017-02-22] (GAS Tecnologia)
R1 wsddntf; C:\Windows\System32\DRIVERS\wsddntf.sys [36984 2016-11-11] (GAS Tecnologia)
S1 wsddpp; C:\Windows\system32\drivers\wsddpp.sys [25184 2016-11-11] (GAS Tecnologia)
S3 wsddprm; C:\Windows\system32\drivers\wsddprm.sys [25184 2016-11-11] (GAS Tecnologia)

==================== NetSvcs (Whitelisted) ===================

(Se uma entrada for incluída na fixlist, será removida do Registro. O arquivo não será movido, a menos que seja colocado separadamente.)


==================== Um Mês Criados arquivos e pastas ========

(Se uma entrada for incluída na fixlist, o arquivo/pasta será movido.)

2017-02-23 02:23 - 2017-02-23 02:24 - 00020516 _____ C:\Users\joao\Downloads\FRST.txt
2017-02-23 02:23 - 2017-02-23 02:23 - 00000000 ____D C:\FRST
2017-02-23 02:22 - 2017-02-23 02:22 - 02423296 _____ (Farbar) C:\Users\joao\Downloads\FRST64.exe
2017-02-23 02:14 - 2017-02-23 02:14 - 00000000 ____D C:\Windows\CheckSur
2017-02-23 02:04 - 2017-02-23 02:04 - 00003132 _____ C:\Windows\System32\Tasks\{3D9AF35D-243F-41EC-9C88-B3D89BAA8D94}
2017-02-23 02:03 - 2017-02-23 02:03 - 14749120 _____ (Microsoft Corporation) C:\Users\joao\Downloads\vc_redist.x64(2).exe
2017-02-23 02:01 - 2017-02-23 02:01 - 14749120 _____ (Microsoft Corporation) C:\Users\joao\Downloads\vc_redist.x64(1).exe
2017-02-23 02:00 - 2017-02-23 02:00 - 14572000 _____ (Microsoft Corporation) C:\Users\joao\Downloads\vc_redist.x64.exe
2017-02-23 01:59 - 2017-02-23 01:59 - 13767776 _____ (Microsoft Corporation) C:\Users\joao\Downloads\vc_redist.x86.exe
2017-02-23 01:40 - 2017-02-23 01:40 - 00001437 _____ C:\Users\joao\Desktop\MU_LEGEND.lnk
2017-02-23 01:40 - 2017-02-23 01:40 - 00000000 ____D C:\Users\joao\AppData\Local\VCLStylesSkin
2017-02-23 01:40 - 2017-02-23 01:40 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MU LEGEND GLOBAL
2017-02-23 01:30 - 2017-02-23 01:30 - 00000000 ____D C:\Program Files (x86)\Webzen
2017-02-22 23:12 - 2017-02-23 01:29 - 00000000 ____D C:\download
2017-02-22 23:11 - 2017-02-22 23:11 - 00000000 ____D C:\Users\Todos os Usuários\WEBZEN
2017-02-22 23:11 - 2017-02-22 23:11 - 00000000 ____D C:\ProgramData\WEBZEN
2017-02-22 23:09 - 2017-02-22 23:09 - 05929456 _____ C:\Users\joao\Downloads\MU_LEGEND_Downloader_EN.exe
2017-02-22 22:10 - 2017-02-22 22:10 - 00566839 _____ C:\Users\joao\Desktop\AI_AGGRO.rar
2017-02-20 17:53 - 2017-02-20 17:54 - 40620408 _____ C:\Users\joao\Downloads\Pack GRFs CrimsonRo.rar
2017-02-20 17:39 - 2017-02-20 17:40 - 00004377 _____ C:\Users\joao\Downloads\plugin.ini
2017-02-18 14:35 - 2017-02-18 14:35 - 01420880 _____ C:\Users\joao\ts3_recording_17_02_18_14_35_37.wav
2017-02-17 11:21 - 2017-02-17 11:21 - 00000723 _____ C:\Users\joao\Desktop\Sandboxed Web Browser.lnk
2017-02-17 11:21 - 2017-02-17 11:21 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sandboxie
2017-02-15 13:33 - 2017-02-15 13:33 - 00176584 _____ (Malwarebytes) C:\Windows\system32\Drivers\MBAMChameleon.sys
2017-02-15 13:32 - 2017-02-23 01:49 - 00081696 _____ (Malwarebytes) C:\Windows\system32\Drivers\mwac.sys
2017-02-15 13:32 - 2017-02-22 18:41 - 00110536 _____ (Malwarebytes) C:\Windows\system32\Drivers\farflt.sys
2017-02-15 13:32 - 2017-02-22 18:41 - 00043968 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbam.sys
2017-02-15 13:32 - 2017-02-22 18:40 - 00251848 _____ (Malwarebytes) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2017-02-15 13:32 - 2017-02-15 13:32 - 00000000 ____D C:\Users\Todos os Usuários\Malwarebytes
2017-02-15 13:32 - 2017-02-15 13:32 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes
2017-02-15 13:32 - 2017-02-15 13:32 - 00000000 ____D C:\ProgramData\Malwarebytes
2017-02-15 13:32 - 2017-02-15 13:32 - 00000000 ____D C:\Program Files\Malwarebytes
2017-02-15 13:32 - 2017-01-20 07:47 - 00077416 _____ C:\Windows\system32\Drivers\mbae64.sys
2017-02-15 13:30 - 2017-02-15 13:31 - 55566792 _____ (Malwarebytes ) C:\Users\joao\Downloads\mb3-setup-consumer-3.0.6.1469.exe
2017-02-15 12:57 - 2017-02-15 12:58 - 00000000 ____D C:\AdwCleaner
2017-02-15 12:56 - 2017-02-15 12:57 - 04015056 _____ C:\Users\joao\Downloads\adwcleaner_6.043.exe
2017-02-15 12:43 - 2017-02-15 12:43 - 00000000 ____D C:\Users\joao\Desktop\PLAYLIST SELECIONADA
2017-02-15 11:14 - 2017-02-15 11:14 - 00000000 ____D C:\Users\joao\AppData\Local\4kdownload.com
2017-02-15 11:14 - 2017-02-15 11:14 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\4K Download
2017-02-15 11:14 - 2017-02-15 11:14 - 00000000 ____D C:\Program Files (x86)\4KDownload
2017-02-15 11:09 - 2017-02-15 11:09 - 00105722 _____ C:\Users\joao\Downloads\Flash-2017.zip
2017-02-14 10:55 - 2017-02-14 10:55 - 00000003 _____ C:\Windows\SysWOW64\HRUPPROG.EXIT
2017-02-14 10:54 - 2017-02-14 10:55 - 00000003 _____ C:\Windows\SysWOW64\HRUPPROG.TXT
2017-02-14 00:58 - 2017-02-14 00:58 - 00000000 ____D C:\Users\cesar_000\Desktop\GRFdoInsanity
2017-02-14 00:58 - 2017-02-14 00:58 - 00000000 ____D C:\Users\cesar_000
2017-02-14 00:56 - 2017-02-14 00:56 - 07144691 _____ C:\Users\joao\Downloads\GRF+Editor.rar
2017-02-13 20:41 - 2017-02-13 20:41 - 00001281 _____ C:\Users\Public\Desktop\Razer Cortex.lnk
2017-02-13 20:38 - 2017-02-13 20:39 - 123589304 _____ (Razer Inc. ) C:\Users\joao\Downloads\RazerCortexSetup_7.6.8.66.exe
2017-02-13 18:00 - 2017-02-13 18:01 - 55975680 _____ C:\Users\joao\Downloads\black (2).grf
2017-02-13 13:48 - 2017-02-13 13:48 - 00262144 _____ C:\Windows\Minidump\021317-18174-01.dmp
2017-02-12 12:10 - 2017-02-12 12:10 - 00262144 ____N C:\Windows\Minidump\021217-18298-01.dmp
2017-02-10 10:11 - 2017-02-10 10:11 - 00385760 _____ C:\Windows\Minidump\021017-18657-01.dmp
2017-02-08 12:03 - 2017-02-08 12:03 - 00000000 ___RD C:\Sandbox
2017-02-08 00:39 - 2017-02-16 11:33 - 00001682 _____ C:\Windows\Sandboxie.ini
2017-02-08 00:37 - 2017-02-08 00:37 - 05485792 _____ (Sandboxie Holdings, LLC) C:\Users\joao\Downloads\SandboxieInstall64-516.exe
2017-02-07 13:41 - 2017-01-20 11:07 - 00134080 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvStreaming.exe
2017-02-07 13:35 - 2017-01-23 20:04 - 00217528 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvhda64v.sys
2017-02-07 13:35 - 2017-01-23 20:04 - 00047664 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdap64.dll
2017-02-07 13:35 - 2017-01-20 13:36 - 40192056 _____ C:\Windows\system32\nvcompiler.dll
2017-02-07 13:35 - 2017-01-20 13:36 - 35272760 _____ C:\Windows\SysWOW64\nvcompiler.dll
2017-02-07 13:35 - 2017-01-20 13:36 - 34934720 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll
2017-02-07 13:35 - 2017-01-20 13:36 - 28209720 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll
2017-02-07 13:35 - 2017-01-20 13:36 - 19008392 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll
2017-02-07 13:35 - 2017-01-20 13:36 - 16403200 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dumx.dll
2017-02-07 13:35 - 2017-01-20 13:36 - 14677456 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll
2017-02-07 13:35 - 2017-01-20 13:36 - 14286392 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys
2017-02-07 13:35 - 2017-01-20 13:36 - 11123424 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll
2017-02-07 13:35 - 2017-01-20 13:36 - 11019192 _____ (NVIDIA Corporation) C:\Windows\system32\nvptxJitCompiler.dll
2017-02-07 13:35 - 2017-01-20 13:36 - 09308896 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll
2017-02-07 13:35 - 2017-01-20 13:36 - 08990584 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvptxJitCompiler.dll
2017-02-07 13:35 - 2017-01-20 13:36 - 03623992 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll
2017-02-07 13:35 - 2017-01-20 13:36 - 03185720 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll
2017-02-07 13:35 - 2017-01-20 13:36 - 01985080 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6437849.dll
2017-02-07 13:35 - 2017-01-20 13:36 - 01591352 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6437849.dll
2017-02-07 13:35 - 2017-01-20 13:36 - 01051072 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll
2017-02-07 13:35 - 2017-01-20 13:36 - 00990264 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll
2017-02-07 13:35 - 2017-01-20 13:36 - 00960568 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll
2017-02-07 13:35 - 2017-01-20 13:36 - 00909760 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll
2017-02-07 13:35 - 2017-01-20 13:36 - 00687224 _____ (NVIDIA Corporation) C:\Windows\system32\nvfatbinaryLoader.dll
2017-02-07 13:35 - 2017-01-20 13:36 - 00609216 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFROpenGL.dll
2017-02-07 13:35 - 2017-01-20 13:36 - 00576192 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvfatbinaryLoader.dll
2017-02-07 13:35 - 2017-01-20 13:36 - 00504104 _____ (NVIDIA Corporation) C:\Windows\system32\nvEncodeAPI64.dll
2017-02-07 13:35 - 2017-01-20 13:36 - 00499136 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFROpenGL.dll
2017-02-07 13:35 - 2017-01-20 13:36 - 00496680 _____ (NVIDIA Corporation) C:\Windows\system32\nvumdshimx.dll
2017-02-07 13:35 - 2017-01-20 13:36 - 00425288 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvEncodeAPI.dll
2017-02-07 13:35 - 2017-01-20 13:36 - 00412720 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvumdshim.dll
2017-02-07 13:35 - 2017-01-20 13:36 - 00173272 _____ (NVIDIA Corporation) C:\Windows\system32\nvinitx.dll
2017-02-07 13:35 - 2017-01-20 13:36 - 00156792 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglshim64.dll
2017-02-07 13:35 - 2017-01-20 13:36 - 00150760 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvinit.dll
2017-02-07 13:35 - 2017-01-20 13:36 - 00135840 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglshim32.dll
2017-02-07 13:35 - 2017-01-20 13:36 - 00000669 _____ C:\Windows\SysWOW64\nv-vk32.json
2017-02-07 13:35 - 2017-01-20 13:36 - 00000669 _____ C:\Windows\system32\nv-vk64.json
2017-02-07 13:04 - 2017-02-07 13:04 - 00027552 _____ (REALiX(tm)) C:\Windows\system32\Drivers\HWiNFO64A.SYS
2017-02-07 13:04 - 2017-02-07 13:04 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HWiNFO64
2017-02-07 13:04 - 2017-02-07 13:04 - 00000000 ____D C:\Program Files\HWiNFO64
2017-02-07 13:02 - 2017-02-07 13:02 - 03782064 _____ (Martin Malík - REALiX ) C:\Users\joao\Downloads\hw64_544.exe
2017-02-07 11:28 - 2017-02-07 11:28 - 01189840 _____ ( ) C:\Users\joao\Downloads\hwmonitor_1.30.exe
2017-02-07 11:28 - 2017-02-07 11:28 - 00000930 _____ C:\Users\Public\Desktop\CPUID HWMonitor.lnk
2017-02-07 11:28 - 2017-02-07 11:28 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CPUID
2017-02-07 11:28 - 2017-02-07 11:28 - 00000000 ____D C:\Program Files\CPUID
2017-02-07 11:26 - 2017-02-07 11:26 - 00007610 _____ C:\Users\joao\AppData\Local\Resmon.ResmonCfg
2017-02-06 16:34 - 2017-02-06 16:34 - 00262144 _____ C:\Windows\Minidump\020617-16270-01.dmp
2017-02-05 23:20 - 2017-02-05 23:20 - 00699668 _____ C:\Users\joao\Downloads\Bichito.exe
2017-02-03 11:03 - 2017-02-03 11:03 - 00000000 ____D C:\Users\joao\AppData\Local\RzStats
2017-02-03 10:57 - 2017-02-03 10:57 - 00385112 _____ C:\Windows\Minidump\020317-26691-01.dmp
2017-02-03 10:54 - 2016-09-16 21:12 - 00044144 _____ (Razer, Inc.) C:\Windows\system32\Drivers\rzpmgrk.sys
2017-02-03 10:43 - 2017-02-03 10:43 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_rzvkeyboard_01009.Wdf
2017-02-03 10:43 - 2017-02-03 10:43 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_rzudd_01009.Wdf
2017-02-03 10:43 - 2017-02-03 10:43 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_rzdaendpt_01009.Wdf
2017-02-02 18:40 - 2017-02-05 14:46 - 00000000 ____D C:\project
2017-02-02 18:39 - 2017-02-02 18:40 - 92628158 _____ C:\Users\joao\Downloads\ROP.rar
2017-01-31 21:15 - 2017-01-31 21:17 - 96160337 _____ C:\Users\joao\Downloads\Avioes do Forro - NoComando 2k17.rar
2017-01-28 21:26 - 2017-01-28 21:27 - 00395920 _____ C:\Windows\Minidump\012817-20326-01.dmp
2017-01-28 12:02 - 2017-01-28 12:02 - 00406584 _____ C:\Windows\Minidump\012817-18205-01.dmp
2017-01-25 20:07 - 2017-01-25 20:07 - 00058576 _____ C:\Users\joao\Downloads\AI.rar
2017-01-25 12:40 - 2017-01-25 12:40 - 00941776 _____ (Carambis (ROSTPAY LTD.)) C:\Users\joao\Downloads\InstallerDU-2.4.2.9633.exe
2017-01-25 12:36 - 2017-01-31 21:33 - 00000000 ____D C:\Users\joao\Desktop\jÃO
2017-01-25 09:41 - 2017-01-25 09:41 - 00003742 _____ C:\Windows\System32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2017-01-25 09:41 - 2017-01-25 09:41 - 00001412 _____ C:\Users\Public\Desktop\GeForce Experience.lnk
2017-01-25 09:41 - 2017-01-20 15:41 - 01872320 _____ (NVIDIA Corporation) C:\Windows\system32\nvspcap64.dll
2017-01-25 09:41 - 2017-01-20 15:41 - 01755072 _____ (NVIDIA Corporation) C:\Windows\system32\nvspbridge64.dll
2017-01-25 09:41 - 2017-01-20 15:41 - 01464768 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvspcap.dll
2017-01-25 09:41 - 2017-01-20 15:41 - 01317312 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvspbridge.dll
2017-01-25 09:41 - 2017-01-20 15:41 - 00120256 _____ C:\Windows\system32\NvRtmpStreamer64.dll
2017-01-25 09:40 - 2017-01-25 09:40 - 00004146 _____ C:\Windows\System32\Tasks\NvDriverUpdateCheckDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2017-01-25 09:40 - 2017-01-25 09:40 - 00003738 _____ C:\Windows\System32\Tasks\NvTmRep_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2017-01-25 09:40 - 2017-01-25 09:40 - 00003738 _____ C:\Windows\System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2017-01-25 09:40 - 2017-01-25 09:40 - 00003730 _____ C:\Windows\System32\Tasks\NvTmMon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2017-01-25 09:40 - 2017-01-25 09:40 - 00003554 _____ C:\Windows\System32\Tasks\NvTmRepOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2017-01-25 09:40 - 2017-01-25 09:40 - 00003494 _____ C:\Windows\System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2017-01-25 09:40 - 2017-01-20 15:41 - 00156608 _____ (NVIDIA Corporation) C:\Windows\system32\nvaudcap64v.dll
2017-01-25 09:40 - 2017-01-20 15:41 - 00124352 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvaudcap32v.dll
2017-01-25 09:40 - 2017-01-20 15:41 - 00057792 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvvhci.sys
2017-01-25 09:40 - 2017-01-20 15:41 - 00046016 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvvad64v.sys
2017-01-25 09:40 - 2017-01-20 11:04 - 00001951 _____ C:\Windows\NvContainerRecovery.bat
2017-01-25 09:40 - 2017-01-20 10:36 - 00001951 _____ C:\Windows\NvTelemetryContainerRecovery.bat
2017-01-24 17:36 - 2017-01-24 17:36 - 00000000 ____D C:\Program Files (x86)\Gravity
2017-01-24 17:08 - 2017-01-24 17:08 - 01068367 _____ C:\Users\joao\Downloads\✩ ✪ A.I Cheio de razão Nova 2016 ✩✪.rar
2017-01-24 12:06 - 2017-01-24 12:06 - 00000000 ____D C:\Users\joao\AppData\Local\Level Up!
2017-01-24 12:05 - 2017-01-24 12:05 - 00001602 _____ C:\Users\joao\Desktop\Warface.lnk
2017-01-24 11:57 - 2017-01-24 11:57 - 00000000 ____D C:\Level Up

==================== Um Mês Modificados arquivos e pastas ========

(Se uma entrada for incluída na fixlist, o arquivo/pasta será movido.)

2017-02-23 02:20 - 2016-08-07 12:05 - 00000000 ____D C:\Users\joao\AppData\Roaming\TS3Client
2017-02-23 01:31 - 2016-08-16 21:06 - 00000902 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2017-02-23 00:29 - 2016-07-20 23:08 - 00000000 ____D C:\Program Files (x86)\Steam
2017-02-22 22:15 - 2015-09-01 14:05 - 00000000 ____D C:\Hel Networks Aika - Copy
2017-02-22 19:53 - 2016-11-04 14:04 - 00000000 ____D C:\Users\Todos os Usuários\BlueStacksSetup
2017-02-22 19:53 - 2016-11-04 14:04 - 00000000 ____D C:\ProgramData\BlueStacksSetup
2017-02-22 18:50 - 2016-07-23 11:13 - 00002441 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk
2017-02-22 18:49 - 2009-07-14 01:45 - 00016944 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2017-02-22 18:49 - 2009-07-14 01:45 - 00016944 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2017-02-22 18:44 - 2016-08-27 12:04 - 00028888 _____ (GAS Tecnologia) C:\Windows\system32\Drivers\gbpddfac64.sys
2017-02-22 18:43 - 2016-07-16 10:14 - 00000000 ____D C:\Users\joao\AppData\Local\CrashDumps
2017-02-22 18:42 - 2016-07-14 23:03 - 00000000 ____D C:\Users\Todos os Usuários\NVIDIA
2017-02-22 18:42 - 2016-07-14 23:03 - 00000000 ____D C:\ProgramData\NVIDIA
2017-02-22 18:40 - 2016-08-27 12:04 - 00000000 ____D C:\Program Files (x86)\GbPlugin
2017-02-22 18:39 - 2016-12-27 10:04 - 00028376 _____ (GAS Tecnologia) C:\Windows\system32\Drivers\wsddfac.sys
2017-02-22 18:38 - 2016-11-18 20:49 - 00000000 ____D C:\Users\joao\AppData\LocalLow\Mozilla
2017-02-22 18:38 - 2016-08-27 12:04 - 00000000 ____D C:\Users\Todos os Usuários\GbPlugin
2017-02-22 18:38 - 2016-08-27 12:04 - 00000000 ____D C:\ProgramData\GbPlugin
2017-02-22 18:37 - 2016-08-15 20:24 - 00000000 ____D C:\Program Files (x86)\Hi-Rez Studios
2017-02-22 18:36 - 2009-07-14 02:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2017-02-22 14:37 - 2016-08-27 12:04 - 00029816 _____ (GAS Tecnologia) C:\Windows\system32\Drivers\gbpddreg64.sys
2017-02-20 23:55 - 2016-08-07 11:54 - 00000000 ____D C:\Program Files (x86)\Overwolf
2017-02-20 12:28 - 2009-07-14 00:20 - 00000000 ____D C:\Windows\system32\NDF
2017-02-18 14:35 - 2016-07-14 22:21 - 00000000 ____D C:\Users\joao
2017-02-16 13:48 - 2009-07-14 14:55 - 00705572 _____ C:\Windows\system32\prfh0416.dat
2017-02-16 13:48 - 2009-07-14 14:55 - 00147412 _____ C:\Windows\system32\prfc0416.dat
2017-02-16 13:48 - 2009-07-14 02:13 - 01634914 _____ C:\Windows\system32\PerfStringBackup.INI
2017-02-16 13:48 - 2009-07-14 00:20 - 00000000 ____D C:\Windows\inf
2017-02-15 01:31 - 2016-08-16 21:06 - 00802904 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2017-02-15 01:31 - 2016-08-16 21:06 - 00003840 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2017-02-15 01:31 - 2016-08-16 21:06 - 00000000 ____D C:\Windows\system32\Macromed
2017-02-15 01:31 - 2016-08-15 22:28 - 00144472 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2017-02-15 01:31 - 2016-08-15 22:28 - 00000000 ____D C:\Windows\SysWOW64\Macromed
2017-02-13 20:44 - 2016-07-14 23:17 - 00000000 ____D C:\Users\joao\AppData\Local\Razer
2017-02-13 20:41 - 2016-07-14 23:15 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Razer
2017-02-13 20:40 - 2016-07-14 23:15 - 00000000 ____D C:\Users\Todos os Usuários\Razer
2017-02-13 20:40 - 2016-07-14 23:15 - 00000000 ____D C:\ProgramData\Razer
2017-02-13 20:40 - 2016-07-14 23:15 - 00000000 ____D C:\Program Files (x86)\Razer
2017-02-13 13:48 - 2016-07-17 01:18 - 684639675 _____ C:\Windows\MEMORY.DMP
2017-02-13 13:48 - 2016-07-16 09:39 - 00000000 ____D C:\Windows\Minidump
2017-02-07 13:42 - 2017-01-23 11:12 - 00000000 ____D C:\temp
2017-02-07 13:42 - 2016-07-14 23:06 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation
2017-02-07 13:42 - 2016-07-14 23:00 - 00000000 ____D C:\Users\Todos os Usuários\NVIDIA Corporation
2017-02-07 13:42 - 2016-07-14 23:00 - 00000000 ____D C:\ProgramData\NVIDIA Corporation
2017-02-07 13:40 - 2016-07-14 23:01 - 00000000 ____D C:\Program Files (x86)\VulkanRT
2017-02-07 13:39 - 2016-07-14 23:00 - 00000000 ____D C:\Program Files (x86)\NVIDIA Corporation
2017-02-07 13:39 - 2016-07-14 22:50 - 00000000 ____D C:\Program Files\NVIDIA Corporation
2017-02-05 14:06 - 2016-07-14 23:35 - 00000000 ____D C:\Users\joao\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Hammer & Chisel, Inc
2017-02-05 14:06 - 2016-07-14 23:35 - 00000000 ____D C:\Users\joao\AppData\Local\Discord
2017-02-03 16:01 - 2016-07-14 23:35 - 00000000 ____D C:\Users\joao\AppData\Roaming\discord
2017-01-28 12:02 - 2016-11-18 12:21 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2017-01-28 12:02 - 2016-07-14 22:38 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2017-01-25 12:25 - 2016-07-14 23:06 - 00000000 ____D C:\Users\joao\AppData\Local\NVIDIA Corporation
2017-01-24 12:30 - 2017-01-23 11:45 - 00000000 ____D C:\Users\joao\.aria2
2017-01-24 12:05 - 2017-01-23 11:12 - 00000000 ____D C:\Users\joao\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Level Up
2017-01-24 11:44 - 2017-01-23 11:15 - 00000000 ____D C:\Users\joao\Documents\LevelUp Data
2017-01-24 10:29 - 2017-01-23 11:12 - 00000000 ____D C:\Users\joao\AppData\Local\Deployment

==================== Arquivos na raiz de alguns diretórios =======

2017-02-07 11:26 - 2017-02-07 11:26 - 0007610 _____ () C:\Users\joao\AppData\Local\Resmon.ResmonCfg
2016-07-23 18:17 - 2016-07-23 18:17 - 0000057 _____ () C:\ProgramData\Ament.ini
2016-08-04 20:33 - 2016-08-04 20:33 - 0000016 _____ () C:\ProgramData\mntemp

Alguns arquivos em TEMP:
====================
2016-07-14 23:27 - 2017-02-22 18:37 - 0619840 _____ () C:\Users\joao\AppData\Local\Temp\0Kraken0502DevProps.dll
2016-07-14 23:03 - 2016-07-10 19:36 - 0735152 _____ (NVIDIA Corporation) C:\Users\joao\AppData\Local\Temp\nvSCPAPI.dll
2017-02-07 13:35 - 2016-07-10 19:36 - 0335296 _____ (NVIDIA Corporation) C:\Users\joao\AppData\Local\Temp\nvStInst.exe

==================== Bamital & volsnap ======================

(Não há correção automática para arquivos que não passaram na verificação.)

C:\Windows\system32\winlogon.exe => O arquivo é assinado digitalmente
C:\Windows\system32\wininit.exe => O arquivo é assinado digitalmente
C:\Windows\SysWOW64\wininit.exe => O arquivo é assinado digitalmente
C:\Windows\explorer.exe => O arquivo é assinado digitalmente
C:\Windows\SysWOW64\explorer.exe => O arquivo é assinado digitalmente
C:\Windows\system32\svchost.exe => O arquivo é assinado digitalmente
C:\Windows\SysWOW64\svchost.exe => O arquivo é assinado digitalmente
C:\Windows\system32\services.exe => O arquivo é assinado digitalmente
C:\Windows\system32\User32.dll => O arquivo é assinado digitalmente
C:\Windows\SysWOW64\User32.dll => O arquivo é assinado digitalmente
C:\Windows\system32\userinit.exe => O arquivo é assinado digitalmente
C:\Windows\SysWOW64\userinit.exe => O arquivo é assinado digitalmente
C:\Windows\system32\rpcss.dll => O arquivo é assinado digitalmente
C:\Windows\system32\dnsapi.dll => O arquivo é assinado digitalmente
C:\Windows\SysWOW64\dnsapi.dll => O arquivo é assinado digitalmente
C:\Windows\system32\Drivers\volsnap.sys => O arquivo é assinado digitalmente

LastRegBack: 2017-02-13 09:39

==================== Fim de FRST.txt ============================