Resultado do exame da Farbar Recovery Scan Tool (FRST) (x86) Versão: 01-03-2017 01
Executado por user (administrador) em TERMINAL004 (03-03-2017 09:01:34)
Executando a partir de C:\Users\user\Downloads
Perfis Carregados: user (Perfis Disponíveis: user)
Platform: Microsoft Windows 7 Ultimate (X86) Idioma: Português (Brasil)
Internet Explorer Versão 8 (Navegador padrão: Chrome)
Modo da Inicialização: Normal
Tutorial da Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processos (Whitelisted) =================

(Se uma entrada for incluída na fixlist, o processo será fechado. O arquivo não será movido.)

(GAS Tecnologia) C:\Program Files\GbPlugin\gbpsv.exe
(Kaspersky Lab ZAO) C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2013\avp.exe
(BeAnywhere) C:\Program Files\BeAnywhere Support Express\GetSupportService\BASupSrvcUpdater.exe
(BeAnywhere) C:\Program Files\BeAnywhere Support Express\GetSupportService\BASupSrvc.exe
(Dynamsoft Corporation) C:\Windows\System32\Dynamsoft\DynamicWebTwain\ForChrome\WebTWAINService.exe
(Firebird Project) C:\Program Files\Firebird\Firebird_2_1\bin\fbguard.exe
(Dynamsoft Corporation) C:\Windows\System32\Dynamsoft\DynamicWebTwain\ForChrome\WebTWAINService.exe
(Teruten) C:\Windows\System32\FsUsbExService.Exe
(HP) C:\Windows\System32\HPSIsvc.exe
() C:\Windows\System32\srvany.exe
() C:\Windows\KMService.exe
(LogMeIn, Inc.) C:\Program Files\LogMeIn\x86\LMIGuardianSvc.exe
(Protexis Inc.) C:\Program Files\Common Files\Protexis\License Service\PsiService_2.exe
(SafeNet, Inc.) C:\Program Files\SafeNet\Authentication\SAC\x32\SACSrv.exe
(Scopus Soluções em TI Ltda) C:\Program Files\scpbrad\scpbradserv.exe
(TeamViewer GmbH) C:\Program Files\TeamViewer\TeamViewer_Service.exe
() C:\ProgramData\ViaNuvem\MyDocsPrinterService.exe
(GAS Tecnologia) C:\Program Files\GbPlugin\gbpsv.exe
(GAS Tecnologia LTDA) C:\Program Files\Diebold\Warsaw\core.exe
(Dynamsoft Corporation) C:\Windows\System32\Dynamsoft\DynamicWebTwain\ForChrome\WebTWAINService.exe
(Firebird Project) C:\Program Files\Firebird\Firebird_2_1\bin\fbserver.exe
(Scopus Soluções em TI Ltda) C:\Program Files\scpbrad\scpbradguard.exe
(VIA) C:\Program Files\VIA\VIAudioi\VDeck\VDeck.exe
(cyberlink) C:\Program Files\CyberLink\Shared files\brs.exe
(LogMeIn, Inc.) C:\Program Files\LogMeIn\x86\LogMeInSystray.exe
(Kaspersky Lab ZAO) C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2013\avp.exe
(A.E.T. Europe B.V.) C:\Windows\System32\aetcrss1.exe
(Wondershare) C:\Program Files\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe
(SafeNet, Inc.) C:\Program Files\SafeNet\Authentication\SAC\x32\SACMonitor.exe
(GAS Tecnologia LTDA) C:\Program Files\Diebold\Warsaw\core.exe
(BeAnywhere) C:\Program Files\BeAnywhere Support Express\GetSupportService\BASupSrvcCnfg.exe
(Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jusched.exe
(Brother Industries, Ltd.) C:\Program Files\Brother\ControlCenter3\BrccMCtl.exe
(Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jucheck.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
(Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(DLL-Files.com Client ) C:\Users\user\Downloads\clientsetup_fde-1.exe
() C:\Users\user\AppData\Local\Temp\is-QGTUK.tmp\clientsetup_fde-1.tmp
(Microsoft Corporation) C:\Windows\System32\taskkill.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe

==================== Registro (Whitelisted) ====================
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olicies\Google: Restrição <======= ATENÇÃO

==================== Internet (Whitelisted) ====================

(Se um ítem for incluído na fixlist, sendo um ítem do Registro, será removido ou restaurado para o padrão.)

ProxyServer: [S-1-5-21-1386506006-3242650030-3149965245-1000] => 192.168.1.253:8080
AutoConfigURL: [S-1-5-21-1386506006-3242650030-3149965245-1000] => 192.168.1.253:8080
Hosts: Há mais de uma entrada no Hosts. Veja a seção Hosts do Addition.txt
Tcpip\..\Interfaces\{C060399C-5E4E-4862-82AE-83821489C1C9}: [NameServer] 8.8.8.8,8.8.4.4

Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.globasearch.com/?serie=211&b=3&installkey=Fi5WOJdWUnm4I2ZDe3Tu
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page =
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL =
HKU\S-1-5-21-1386506006-3242650030-3149965245-1000\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.bing.com/search?q={searchTerms}
HKU\S-1-5-21-1386506006-3242650030-3149965245-1000\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://www.msn.com/pt-br/?ocid=iehp
HKU\S-1-5-21-1386506006-3242650030-3149965245-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.globasearch.com/?serie=211&b=3&installkey=Fi5WOJdWUnm4I2ZDe3Tu
SearchScopes: HKLM -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.globasearch.com/?serie=211&installkey=Fi5WOJdWUnm4I2ZDe3Tu&b=3&q={searchTerms}
SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.globasearch.com/?serie=211&installkey=Fi5WOJdWUnm4I2ZDe3Tu&b=3&q={searchTerms}
SearchScopes: HKU\S-1-5-21-1386506006-3242650030-3149965245-1000 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.globasearch.com/?serie=211&installkey=Fi5WOJdWUnm4I2ZDe3Tu&b=3&q={searchTerms}
SearchScopes: HKU\S-1-5-21-1386506006-3242650030-3149965245-1000 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.globasearch.com/?serie=211&installkey=Fi5WOJdWUnm4I2ZDe3Tu&b=3&q={searchTerms}
SearchScopes: HKU\S-1-5-21-1386506006-3242650030-3149965245-1000 -> {214585AC-9378-4687-BB58-AED1A255409D} URL = hxxps://br.search.yahoo.com/search?p={searchTerms}&fr=yset_ie_syc_oracle&type=orcl_default
BHO: Content Blocker Plugin -> {5564CC73-EFA7-4CBF-918A-5CF7FBBFFF4F} -> C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2013\IEExt\ContentBlocker\ie_content_blocker_plugin.dll [2013-12-11] (Kaspersky Lab ZAO)
BHO: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL [2010-03-25] (Microsoft Corporation)
BHO: Virtual Keyboard Plugin -> {73455575-E40C-433C-9784-C78DC7761455} -> C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2013\IEExt\VirtualKeyboard\ie_virtual_keyboard_plugin.dll [2014-05-20] (Kaspersky Lab ZAO)
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_111\bin\ssv.dll [2016-12-15] (Oracle Corporation)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2011-03-28] (Microsoft Corp.)
BHO: Safe Money Plugin -> {9E6D0D23-3D72-4A94-AE1F-2D167624E3D9} -> C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2013\IEExt\OnlineBanking\online_banking_bho.dll [2013-12-11] (Kaspersky Lab ZAO)
BHO: Windows Live Messenger Companion Helper -> {9FDDE16B-836F-4806-AB1F-1455CBEFF289} -> C:\Program Files\Windows Live\Companion\companioncore.dll [2012-03-08] (Microsoft Corporation)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL [2010-02-28] (Microsoft Corporation)
BHO: GbIehObj Class -> {C41A1C0E-EA6C-11D4-B1B8-444553540000} -> C:\PROGRAM FILES\GBPLUGIN\gbieh.dll [2016-06-16] (Banco do Brasil)
BHO: GbIehObj Class -> {C41A1C0E-EA6C-11D4-B1B8-444553540003} -> C:\PROGRAM FILES\GBPLUGIN\gbiehcef.dll [2016-09-15] (Caixa Economica Federal)
BHO: GbIehObj Class -> {C41A1C0E-EA6C-11D4-B1B8-444553540008} -> C:\Program Files\GbPlugin\gbiehuni.dll [2016-12-08] (Banco Itaú Unibanco)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_111\bin\jp2ssv.dll [2016-12-15] (Oracle Corporation)
BHO: URL Advisor Plugin -> {E33CF602-D945-461A-83F0-819F76A199F8} -> C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2013\IEExt\UrlAdvisor\klwtbbho.dll [2013-12-11] (Kaspersky Lab ZAO)
Toolbar: HKLM - Sem Nome - {ae07101b-46d4-4a98-af68-0333ea26e113} - Nenhum Arquivo
Toolbar: HKU\S-1-5-21-1386506006-3242650030-3149965245-1000 -> Sem Nome - {1D80D668-2160-46A2-B3A7-E166795B0B28} - Nenhum Arquivo
Toolbar: HKU\S-1-5-21-1386506006-3242650030-3149965245-1000 -> Sem Nome - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - Nenhum Arquivo
Toolbar: HKU\S-1-5-21-1386506006-3242650030-3149965245-1000 -> Sem Nome - {D4027C7F-154A-4066-A1AD-4243D8127440} - Nenhum Arquivo
DPF: {233C1507-6A77-46A4-9443-F871F945D258} hxxp://download.macromedia.com/pub/shockwave/cabs/director/sw.cab
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.8.0/jinstall-1_8_0_65-windows-i586.cab
DPF: {CAFEEFAC-0017-0000-0051-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_51-windows-i586.cab
DPF: {CAFEEFAC-0018-0000-0031-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.8.0/jinstall-1_8_0_31-windows-i586.cab
DPF: {CAFEEFAC-0018-0000-0065-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.8.0/jinstall-1_8_0_65-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.8.0/jinstall-1_8_0_65-windows-i586.cab
Handler: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files\Windows Live\Messenger\msgrapp.dll Nenhum Arquivo
Handler: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files\Windows Live\Messenger\msgrapp.dll Nenhum Arquivo
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll [2017-01-01] (Skype Technologies)
StartMenuInternet: IEXPLORE.EXE - iexplore.exe

FireFox:
========
FF DefaultProfile: 5qraj3qc.default
FF ProfilePath: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\5qraj3qc.default [2017-03-03]
FF user.js: detected! => C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\5qraj3qc.default\user.js [2014-10-07]
FF NewTab: Mozilla\Firefox\Profiles\5qraj3qc.default -> hxxp://www.globasearch.com/?serie=211&b=2&installkey=Fi5WOJdWUnm4I2ZDe3Tu&newtab
FF DefaultSearchEngine: Mozilla\Firefox\Profiles\5qraj3qc.default -> Google
FF SearchEngineOrder.1: Mozilla\Firefox\Profiles\5qraj3qc.default -> Ask.com Search
FF SearchEngineOrder.3: Mozilla\Firefox\Profiles\5qraj3qc.default -> Bing
FF SelectedSearchEngine: Mozilla\Firefox\Profiles\5qraj3qc.default -> Google
FF Homepage: Mozilla\Firefox\Profiles\5qraj3qc.default -> hxxp://www.globasearch.com/?serie=211&b=2&installkey=Fi5WOJdWUnm4I2ZDe3Tu
FF Extension: (Nova guia do Yahoo) - C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\5qraj3qc.default\Extensions\jid1-G80Ec8LLEbK5fQ@jetpack.xpi [2015-09-24] [não assinado]
FF Extension: (Quick Start) - C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\5qraj3qc.default\Extensions\quick_start@gmail.com [2014-06-03] [não assinado]
FF Extension: (SHA-1 deprecation staged rollout) - C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\5qraj3qc.default\features\{232a0fa4-71fe-4ffa-bb2f-c43b1cacbb57}\disableSHA1rollout@mozilla.org.xpi [2017-02-17]
FF SearchPlugin: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\5qraj3qc.default\searchplugins\askcomsearch.xml [2012-10-10]
FF SearchPlugin: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\5qraj3qc.default\searchplugins\Astromenda.xml [2014-09-19]
FF SearchPlugin: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\5qraj3qc.default\searchplugins\bingp.xml [2013-07-12]
FF SearchPlugin: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\5qraj3qc.default\searchplugins\yahoo-web.xml [2015-08-21]
FF ProfilePath: C:\ProgramData\Kaspersky Lab\SafeBrowser\S-1-5-21-1386506006-3242650030-3149965245-1000\FireFox [2015-11-09]
FF Extension: (Kaspersky URL Advisor) - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2013\FFExt\url_advisor@kaspersky.com [2015-02-18] [não assinado]
FF Extension: (Virtual Keyboard) - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2013\FFExt\virtual_keyboard@kaspersky.com [2015-02-18] [não assinado]
FF Extension: (Dangerous Websites Blocker) - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2013\FFExt\content_blocker@kaspersky.com [2015-02-18] [não assinado]
FF Extension: (Anti-Banner) - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2013\FFExt\anti_banner@kaspersky.com [2015-02-18] [não assinado]
FF Extension: (Safe Money) - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2013\FFExt\online_banking@kaspersky.com [2015-02-18] [não assinado]
FF Extension: (GBBD Banco do Brasil) - C:\Users\user\AppData\Local\GAS Tecnologia\GBBD\bb\xpi [2015-04-08] [não assinado]
FF HKLM\...\Firefox\Extensions: [url_advisor@kaspersky.com] - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2013\FFExt\url_advisor@kaspersky.com
FF HKLM\...\Firefox\Extensions: [virtual_keyboard@kaspersky.com] - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2013\FFExt\virtual_keyboard@kaspersky.com
FF HKLM\...\Firefox\Extensions: [content_blocker@kaspersky.com] - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2013\FFExt\content_blocker@kaspersky.com
FF HKLM\...\Firefox\Extensions: [anti_banner@kaspersky.com] - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2013\FFExt\anti_banner@kaspersky.com
FF HKLM\...\Firefox\Extensions: [online_banking@kaspersky.com] - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2013\FFExt\online_banking@kaspersky.com
FF HKLM\...\Firefox\Extensions: [quick_start@gmail.com] - C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\5qraj3qc.default\extensions\quick_start@gmail.com
FF HKU\S-1-5-21-1386506006-3242650030-3149965245-1000\...\Firefox\Extensions: [lyrix@lyrixeeker.co] - C:\Program Files\LyriXeeker\122.xpi => não encontrado (a)
FF HKU\S-1-5-21-1386506006-3242650030-3149965245-1000\...\Firefox\Extensions: [Lyrics@LyricsContainer.co] - C:\Program Files\LyricsContainer\125.xpi => não encontrado (a)
FF HKU\S-1-5-21-1386506006-3242650030-3149965245-1000\...\Firefox\Extensions: [{87F8774F-B485-47E2-A755-A40A8A5E886D}] - C:\Users\user\AppData\Local\GAS Tecnologia\GBBD\cef\xpi
FF Extension: (GBBD Caixa Economica Federal) - C:\Users\user\AppData\Local\GAS Tecnologia\GBBD\cef\xpi [2013-12-23] [não assinado]
FF HKU\S-1-5-21-1386506006-3242650030-3149965245-1000\...\Firefox\Extensions: [{87F8774F-B485-47E2-A755-A40A8A5E886C}] - C:\Users\user\AppData\Local\GAS Tecnologia\GBBD\bb\xpi
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\nationzoom.xml [2013-12-12]
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF32_24_0_0_221.dll [2017-02-14] ()
FF Plugin: @adobe.com/ShockwavePlayer -> C:\Windows\system32\Adobe\Director\np32dsw.dll [2011-08-02] (Adobe Systems, Inc.)
FF Plugin: @dynamsoft.com/ImageCaptureSuitePlugin -> C:\Windows\system32\dynamsoft\ImageCaptureSuite\NPImageCaptureSuite.dll [2013-12-17] (Dynamsoft Corporation)
FF Plugin: @java.com/DTPlugin,version=11.111.2 -> C:\Program Files\Java\jre1.8.0_111\bin\dtplugin\npDeployJava1.dll [2016-12-15] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.111.2 -> C:\Program Files\Java\jre1.8.0_111\bin\plugin2\npjp2.dll [2016-12-15] (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.10411.0\npctrl.dll [2012-04-11] ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~1\MICROS~2\Office14\NPSPWRAP.DLL [2010-03-24] (Microsoft Corporation)
FF Plugin: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll [2012-03-08] (Microsoft Corporation)
FF Plugin: @microsoft.com/WLPG,version=15.4.3555.0308 -> C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll [2012-03-08] (Microsoft Corporation)
FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.32.7\npGoogleUpdate3.dll [2016-12-19] (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.32.7\npGoogleUpdate3.dll [2016-12-19] (Google Inc.)
FF Plugin: Adobe Reader -> C:\Program Files\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2016-12-23] (Adobe Systems Inc.)
FF Plugin HKU\S-1-5-21-1386506006-3242650030-3149965245-1000: @tools.google.com/Google Update;version=3 -> C:\Users\user\AppData\Local\Google\Update\1.3.24.7\npGoogleUpdate3.dll [Nenhum Arquivo]
FF Plugin HKU\S-1-5-21-1386506006-3242650030-3149965245-1000: @tools.google.com/Google Update;version=9 -> C:\Users\user\AppData\Local\Google\Update\1.3.24.7\npGoogleUpdate3.dll [Nenhum Arquivo]
FF Plugin HKU\S-1-5-21-1386506006-3242650030-3149965245-1000: gastecnologia.com.br/sf/bb -> C:\Users\user\AppData\Local\GAS Tecnologia\GBBD\npsf_bb.dll [2015-04-08] (GAS Tecnologia)
FF Plugin HKU\S-1-5-21-1386506006-3242650030-3149965245-1000: gastecnologia.com.br/sf/cef -> C:\Users\user\AppData\Local\GAS Tecnologia\GBBD\npsf_cef.dll [2013-11-04] (GAS Tecnologia)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\np-mswmp.dll [2007-04-10] (Microsoft Corporation)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\nppdf32.dll [2016-12-23] (Adobe Systems Inc.)

Chrome:
=======
CHR DefaultProfile: Profile 7
CHR HomePage: Profile 7 -> hxxp://www.search.ask.com/?gct=hp
CHR DefaultSearchURL: Profile 7 -> hxxp://www.search.ask.com/web?q={searchTerms}
CHR DefaultSearchKeyword: Profile 7 -> search.ask.com
CHR DefaultSuggestURL: Profile 7 -> hxxp://ssmsp.ask.com/query?sstype=prefix&li=ff&q={searchTerms}
CHR Profile: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default [2016-10-27]
CHR Extension: (Conselheiro de URLs da Kaspersky) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\dchlnpcodkpfdpacogkljefecpegganj [2016-10-27]
CHR Extension: (Dinheiro seguro) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\hakdifolhalapjijoafobooafbilfakh [2016-10-27]
CHR Extension: (Bloqueio de Conteúdo) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\hghkgaeecgjhjkannahfamoehjmkjail [2016-10-27]
CHR Extension: (Skype) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl [2016-10-27]
CHR Extension: (Proteção Kaspersky) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\lpoimibckejjdjcfbdnajaicnklhfplh [2016-10-27]
CHR Extension: (Pagamentos da Chrome Web Store) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2016-10-27]
CHR Extension: (GBBD Caixa Economica Federal) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nnjbodopomfddehlalfilheomcahbpei [2016-10-27]
CHR Extension: (Yahoo Web) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\npdicihegicnhaangkdmcgbjceoemeoo [2016-10-27]
CHR Extension: (Anti-Banner) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjldcfjmnllhmgjclecdnfampinooman [2016-10-27]
CHR Extension: (Chrome Media Router) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2016-10-27]
CHR Profile: C:\Users\user\AppData\Local\Google\Chrome\User Data\Guest Profile [2015-03-20]
CHR Profile: C:\Users\user\AppData\Local\Google\Chrome\User Data\Profile 1 [2015-02-04]
CHR Extension: (Google Apresentações) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-02-04]
CHR Extension: (Google Docs) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\aohghmighlieiainnegkcijnfilokake [2015-02-04]
CHR Extension: (Google Drive) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-02-04]
CHR Extension: (YouTube) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-02-04]
CHR Extension: (Pesquisa do Google) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-02-03]
CHR Extension: (Conselheiro de URLs da Kaspersky) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\dchlnpcodkpfdpacogkljefecpegganj [2015-02-03]
CHR Extension: (Planilhas do Google) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-02-04]
CHR Extension: (Bloqueio de Conteúdo) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\hghkgaeecgjhjkannahfamoehjmkjail [2015-02-03]
CHR Extension: (Desprotetor de Links) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\imcbnnnoghiihopefblgehihofbfbmei [2015-02-03]
CHR Extension: (Teclado virtual) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\jagncdcchgajhfhijbbhecadmaiegcmh [2015-02-03]
CHR Extension: (Proteção Kaspersky) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\lpoimibckejjdjcfbdnajaicnklhfplh [2015-02-03]
CHR Extension: (Google Wallet) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-02-03]
CHR Extension: (GBBD Caixa Economica Federal) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\nnjbodopomfddehlalfilheomcahbpei [2015-02-03]
CHR Extension: (GBBD Caixa Economica Federal) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\pbcaplhfkihhldmlbjhgajdeghjdbffi [2015-02-03]
CHR Extension: (Quick start) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma [2015-02-03]
CHR Extension: (Astromenda New Tab) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae [2015-02-03]
CHR Extension: (Gmail) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-02-03]
CHR Extension: (Anti-Banner) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\pjldcfjmnllhmgjclecdnfampinooman [2015-02-03]
CHR Profile: C:\Users\user\AppData\Local\Google\Chrome\User Data\Profile 5 [2015-03-16]
CHR Extension: (Ask Search) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Profile 5\Extensions\aaaaaiabcopkplhgaedhbloeejhhankf [2015-03-03]
CHR Extension: (Google Apresentações) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Profile 5\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-03-03]
CHR Extension: (Google Docs) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Profile 5\Extensions\aohghmighlieiainnegkcijnfilokake [2015-03-04]
CHR Extension: (Google Drive) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Profile 5\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-03-04]
CHR Extension: (YouTube) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Profile 5\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-03-04]
CHR Extension: (Pesquisa do Google) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Profile 5\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-03-04]
CHR Extension: (Conselheiro de URLs da Kaspersky) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Profile 5\Extensions\dchlnpcodkpfdpacogkljefecpegganj [2015-03-03]
CHR Extension: (Planilhas do Google) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Profile 5\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-03-03]
CHR Extension: (Dinheiro seguro) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Profile 5\Extensions\hakdifolhalapjijoafobooafbilfakh [2015-03-03]
CHR Extension: (Bloqueio de Conteúdo) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Profile 5\Extensions\hghkgaeecgjhjkannahfamoehjmkjail [2015-03-03]
CHR Extension: (Desprotetor de Links) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Profile 5\Extensions\imcbnnnoghiihopefblgehihofbfbmei [2015-03-13]
CHR Extension: (Skype Click to Call) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Profile 5\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl [2015-03-11]
CHR Extension: (Proteção Kaspersky) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Profile 5\Extensions\lpoimibckejjdjcfbdnajaicnklhfplh [2015-03-03]
CHR Extension: (Google Wallet) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Profile 5\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-03-09]
CHR Extension: (GBBD Caixa Economica Federal) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Profile 5\Extensions\nnjbodopomfddehlalfilheomcahbpei [2015-03-03]
CHR Extension: (GBBD Caixa Economica Federal) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Profile 5\Extensions\pbcaplhfkihhldmlbjhgajdeghjdbffi [2015-03-13]
CHR Extension: (Quick start) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Profile 5\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma [2015-03-13]
CHR Extension: (Gmail) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Profile 5\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-03-04]
CHR Extension: (Anti-Banner) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Profile 5\Extensions\pjldcfjmnllhmgjclecdnfampinooman [2015-03-03]
CHR Profile: C:\Users\user\AppData\Local\Google\Chrome\User Data\Profile 6 [2015-03-20]
CHR Extension: (Ask Search) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Profile 6\Extensions\aaaaaiabcopkplhgaedhbloeejhhankf [2015-03-16]
CHR Extension: (Google Docs) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Profile 6\Extensions\aohghmighlieiainnegkcijnfilokake [2015-03-16]
CHR Extension: (Google Drive) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Profile 6\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-03-16]
CHR Extension: (Conselheiro de URLs da Kaspersky) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Profile 6\Extensions\dchlnpcodkpfdpacogkljefecpegganj [2015-03-16]
CHR Extension: (Dinheiro seguro) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Profile 6\Extensions\hakdifolhalapjijoafobooafbilfakh [2015-03-16]
CHR Extension: (Bloqueio de Conteúdo) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Profile 6\Extensions\hghkgaeecgjhjkannahfamoehjmkjail [2015-03-16]
CHR Extension: (Desprotetor de Links) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Profile 6\Extensions\imcbnnnoghiihopefblgehihofbfbmei [2015-03-20]
CHR Extension: (Skype Click to Call) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Profile 6\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl [2015-03-16]
CHR Extension: (Proteção Kaspersky) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Profile 6\Extensions\lpoimibckejjdjcfbdnajaicnklhfplh [2015-03-16]
CHR Extension: (Google Wallet) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Profile 6\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-03-16]
CHR Extension: (GBBD Caixa Economica Federal) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Profile 6\Extensions\nnjbodopomfddehlalfilheomcahbpei [2015-03-16]
CHR Extension: (GBBD Caixa Economica Federal) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Profile 6\Extensions\pbcaplhfkihhldmlbjhgajdeghjdbffi [2015-03-20]
CHR Extension: (Quick start) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Profile 6\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma [2015-03-20]
CHR Extension: (Astromenda New Tab) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Profile 6\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae [2015-03-16]
CHR Extension: (Anti-Banner) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Profile 6\Extensions\pjldcfjmnllhmgjclecdnfampinooman [2015-03-16]
CHR Profile: C:\Users\user\AppData\Local\Google\Chrome\User Data\Profile 7 [2017-03-03]
CHR Extension: (Conselheiro de URLs da Kaspersky) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Profile 7\Extensions\dchlnpcodkpfdpacogkljefecpegganj [2015-03-20]
CHR Extension: (Adobe Acrobat) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Profile 7\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2017-01-30]
CHR Extension: (AdBlock) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Profile 7\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2017-03-02]
CHR Extension: (Dinheiro seguro) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Profile 7\Extensions\hakdifolhalapjijoafobooafbilfakh [2015-03-20]
CHR Extension: (Bloqueio de Conteúdo) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Profile 7\Extensions\hghkgaeecgjhjkannahfamoehjmkjail [2015-03-20]
CHR Extension: (Lista de Lelivros) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Profile 7\Extensions\ioobingmiafncnfnichjppegkpjlmcgi [2016-02-16]
CHR Extension: (Video DownloadHelper) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Profile 7\Extensions\lmjnegcaeklhafolokijcfjliaokphfk [2016-12-21]
CHR Extension: (Pagamentos da Chrome Web Store) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Profile 7\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2017-01-23]
CHR Extension: (GBBD Caixa Economica Federal) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Profile 7\Extensions\nnjbodopomfddehlalfilheomcahbpei [2015-03-20]
CHR Extension: (GBBD Caixa Economica Federal) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Profile 7\Extensions\pbcaplhfkihhldmlbjhgajdeghjdbffi [2015-12-29]
CHR Extension: (Anti-Banner) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Profile 7\Extensions\pjldcfjmnllhmgjclecdnfampinooman [2015-03-20]
CHR Extension: (Chrome Media Router) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Profile 7\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2017-02-08]
CHR HKLM\...\Chrome\Extension: [abfmigjiaapipflmopkaaooigcjjdojh] - C:\Program Files\LyricsContainer\125.crx
CHR HKLM\...\Chrome\Extension: [dchlnpcodkpfdpacogkljefecpegganj] - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2013\ChromeExt\urladvisor.crx [2013-04-30]
CHR HKLM\...\Chrome\Extension: [dopemniaeocfenlpnoannaefnhfcjcgi] - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\searchswitch.crx
CHR HKLM\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM\...\Chrome\Extension: [hakdifolhalapjijoafobooafbilfakh] - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2013\ChromeExt\online_banking_chrome.crx [2013-04-30]
CHR HKLM\...\Chrome\Extension: [hghkgaeecgjhjkannahfamoehjmkjail] - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2013\ChromeExt\content_blocker_chrome.crx [2013-04-30]
CHR HKLM\...\Chrome\Extension: [ifohbjbgfchkkfhphahclmkpgejiplfo] - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\newtab.crx
CHR HKLM\...\Chrome\Extension: [jagncdcchgajhfhijbbhecadmaiegcmh] - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2013\ChromeExt\virtkbd.crx [2013-04-30]
CHR HKLM\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM\...\Chrome\Extension: [lpoimibckejjdjcfbdnajaicnklhfplh] - hxxps://chrome.google.com/webstore/detail/lpoimibckejjdjcfbdnajaicnklhfplh
CHR HKLM\...\Chrome\Extension: [npdicihegicnhaangkdmcgbjceoemeoo] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM\...\Chrome\Extension: [odnofacmifkjndflfmmplhckcbfjckhj] - C:\Program Files\LyriXeeker\122.crx
CHR HKLM\...\Chrome\Extension: [ogfjmhfnldnajmfaofeiaepghjenbgjo] - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\ep.crx
CHR HKLM\...\Chrome\Extension: [pelmeidfhdlhlbjimpabfcbnnojbboma] - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\newtabv3.crx
CHR HKLM\...\Chrome\Extension: [pfkfdlcdbajamklbneflfbcmfgddmpae] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM\...\Chrome\Extension: [pjldcfjmnllhmgjclecdnfampinooman] - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2013\ChromeExt\ab.crx [2013-04-30]
CHR HKU\S-1-5-21-1386506006-3242650030-3149965245-1000\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [nnjbodopomfddehlalfilheomcahbpei] - C:\Users\user\AppData\Local\GAS Tecnologia\GBBD\cef\sf.crx [2013-12-23]
CHR HKU\S-1-5-21-1386506006-3242650030-3149965245-1000\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [pfkfdlcdbajamklbneflfbcmfgddmpae] - hxxps://clients2.google.com/service/update2/crx

==================== Serviços (Whitelisted) ====================

(Se uma entrada for incluída na fixlist, será removida do Registro. O arquivo não será movido, a menos que seja colocado separadamente.)

"Warsaw Technology" => serviço foi desbloqueado. <===== ATENÇÃO

R2 AVP; C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2013\avp.exe [356128 2013-10-11] (Kaspersky Lab ZAO)
R2 BASupportExpressSrvcUpdater; C:\Program Files\BeAnywhere Support Express\GetSupportService\BASupSrvcUpdater.exe [1088664 2015-09-10] (BeAnywhere)
R2 BASupportExpressStandaloneService; C:\Program Files\BeAnywhere Support Express\GetSupportService\BASupSrvc.exe [3655832 2015-09-10] (BeAnywhere)
R2 Dynamsoft WebTWAIN Service; C:\Windows\System32\Dynamsoft\DynamicWebTwain\ForChrome\WebTWAINService.exe [1325584 2015-07-13] (Dynamsoft Corporation)
R2 FirebirdGuardianDefaultInstance; C:\Program Files\Firebird\Firebird_2_1\bin\fbguard.exe [81920 2012-05-18] (Firebird Project) [Arquivo não assinado]
R3 FirebirdServerDefaultInstance; C:\Program Files\Firebird\Firebird_2_1\bin\fbserver.exe [2785280 2012-05-18] (Firebird Project) [Arquivo não assinado]
R2 FsUsbExService; C:\Windows\system32\FsUsbExService.Exe [233472 2013-05-22] (Teruten) [Arquivo não assinado]
R2 GbpSv; C:\Program Files\GbPlugin\gbpsv.exe [590048 2017-03-02] (GAS Tecnologia)
R2 KMService; C:\Windows\system32\srvany.exe [8192 2011-02-14] () [Arquivo não assinado]
R2 SACSrv; C:\Program Files\SafeNet\Authentication\SAC\x32\SACSrv.exe [9872 2012-04-16] (SafeNet, Inc.)
R2 scpbradserv; C:\Program Files\scpbrad\scpbradserv.exe [1993728 2017-02-20] (Scopus Soluções em TI Ltda)
R2 TeamViewer; C:\Program Files\TeamViewer\TeamViewer_Service.exe [5611280 2015-08-07] (TeamViewer GmbH)
R2 ViaNuvemService; C:\ProgramData\ViaNuvem\MyDocsPrinterService.exe [15872 2015-03-30] () [Arquivo não assinado]
R2 Warsaw Technology; C:\Program Files\Diebold\Warsaw\core.exe [792624 2016-11-11] (GAS Tecnologia LTDA)
R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [680960 2009-07-13] (Microsoft Corporation)

===================== Drivers (Whitelisted) ======================

(Se uma entrada for incluída na fixlist, será removida do Registro. O arquivo não será movido, a menos que seja colocado separadamente.)

R3 AKSIFDH; C:\Windows\System32\DRIVERS\aksifdh.sys [48296 2008-07-29] (Aladdin Knowledge Systems, Ltd.)
S3 AKSUP; C:\Windows\System32\drivers\aksup.sys [34472 2008-07-29] (Aladdin Knowledge Systems, Ltd.)
R0 Bhbase; C:\Windows\System32\drivers\Bhbase.sys [47456 2013-09-03] (Baidu, Inc.)
S3 BroadcomWModem; C:\Windows\System32\DRIVERS\bcmww.sys [118400 2005-06-02] (Broadcom Corporation)
R3 FsUsbExDisk; C:\Windows\system32\FsUsbExDisk.SYS [37344 2013-05-22] () [Arquivo não assinado]
R0 GbpKm; C:\Windows\System32\drivers\gbpkm.sys [49496 2015-08-26] (GAS Tecnologia)
S3 GemCCID; C:\Windows\System32\Drivers\GemCCID.sys [89600 2009-08-10] (Gemalto)
R3 iKeyEnum; C:\Windows\System32\DRIVERS\ikeyenum.sys [11616 2010-04-29] (SafeNet, Inc.)
R3 iKeyIFD; C:\Windows\System32\DRIVERS\ikeyifd.sys [18080 2010-04-29] (SafeNet, Inc.)
R0 kl1; C:\Windows\System32\DRIVERS\kl1.sys [135776 2013-12-11] (Kaspersky Lab ZAO)
R1 KLIF; C:\Windows\System32\DRIVERS\klif.sys [597600 2014-05-20] (Kaspersky Lab ZAO)
R1 KLIM6; C:\Windows\System32\DRIVERS\klim6.sys [25696 2013-12-11] (Kaspersky Lab ZAO)
R3 klkbdflt; C:\Windows\System32\DRIVERS\klkbdflt.sys [25696 2013-10-11] (Kaspersky Lab ZAO)
R3 klmouflt; C:\Windows\System32\DRIVERS\klmouflt.sys [25696 2013-10-11] (Kaspersky Lab ZAO)
R1 kltdi; C:\Windows\System32\DRIVERS\kltdi.sys [44000 2013-10-11] (Kaspersky Lab ZAO)
R1 kneps; C:\Windows\System32\DRIVERS\kneps.sys [145224 2015-02-18] (Kaspersky Lab ZAO)
R1 Ndisrd; C:\Windows\System32\DRIVERS\gbpndisrdn.sys [29400 2016-10-24] (GAS Tecnologia)
S3 NdisrdMP; C:\Windows\System32\DRIVERS\gbpndisrd.sys [31088 2016-02-25] (GbPlugin NDIS Device Driver)
S3 SzCCID; C:\Windows\System32\DRIVERS\SzCCID.sys [24064 2011-01-21] (Generic)
R3 VIAHdAudAddService; C:\Windows\System32\drivers\viahduaa.sys [1108480 2009-11-25] (VIA Technologies, Inc.)
R1 wsddfac; C:\Windows\System32\drivers\wsddfac.sys [22744 2017-03-03] (GAS Tecnologia)
R1 wsddntf; C:\Windows\System32\DRIVERS\wsddntf.sys [31864 2016-06-16] (GAS Tecnologia)
R1 wsddpp; C:\Windows\system32\drivers\wsddpp.sys [22624 2016-11-11] (GAS Tecnologia)
R3 wsddprm; C:\Windows\system32\drivers\wsddprm.sys [22624 2016-11-11] (GAS Tecnologia)
R2 {1BA31E5A-C098-42d8-8F88-3C9F78A2FDDC}; C:\Program Files\CyberLink\PowerDVD10\NavFilter\000.fcl [87536 2010-03-13] (CyberLink Corp.)
S3 Baidu PC Faster FileShredder; \??\C:\Users\user\AppData\Local\Temp\_@7425.tmp\FileKill_x86.sys [X] <==== ATENÇÃO
S3 BprotectEx; \??\C:\Windows\System32\drivers\BprotectEx.sys [X]
S0 gbpddreg; system32\drivers\gbpddreg32.sys [X]
U5 klflt; C:\Windows\System32\Drivers\klflt.sys [74848 2014-05-20] (Kaspersky Lab ZAO)
S4 LMIRfsClientNP; não ImagePath
S3 PCFApiUtil; \??\C:\Program Files\Baidu Security\PC Faster\3.7.0.0\PCFApiUtil.sys [X]
U5 RnbToken; C:\Windows\System32\Drivers\RnbToken.sys [21472 2010-04-29] (SafeNet, Inc.)

==================== NetSvcs (Whitelisted) ===================

(Se uma entrada for incluída na fixlist, será removida do Registro. O arquivo não será movido, a menos que seja colocado separadamente.)


==================== Três Meses Criados arquivos e pastas ========

(Se uma entrada for incluída na fixlist, o arquivo/pasta será movido.)

2017-03-03 09:01 - 2017-03-03 09:02 - 00053466 _____ C:\Users\user\Downloads\FRST.txt
2017-03-03 09:01 - 2017-03-03 09:01 - 00000000 ____D C:\FRST
2017-03-03 08:59 - 2017-03-03 09:00 - 01765888 _____ (Farbar) C:\Users\user\Downloads\FRST.exe
2017-03-03 08:58 - 2017-03-03 08:58 - 02423808 _____ (Farbar) C:\Users\user\Downloads\FRST64.exe
2017-03-03 08:56 - 2017-03-03 08:56 - 13767776 _____ (Microsoft Corporation) C:\Users\user\Downloads\vc_redist.x86.exe
2017-03-03 08:51 - 2017-03-03 08:52 - 02729024 _____ (DLL-Files.com Client ) C:\Users\user\Downloads\clientsetup_fde-1.exe
2017-03-03 08:48 - 2017-03-03 08:48 - 00002687 _____ C:\Users\Public\Desktop\Skype.lnk
2017-03-03 08:48 - 2017-03-03 08:48 - 00000165 ____H C:\Users\user\Desktop\~$Pasta14.xlsx
2017-03-03 08:48 - 2017-03-03 08:48 - 00000000 ___RD C:\Program Files\Skype
2017-03-03 08:48 - 2017-03-03 08:48 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
2017-03-03 08:48 - 2017-03-03 08:48 - 00000000 ____D C:\Program Files\Common Files\Skype
2017-03-03 08:45 - 2017-03-03 08:45 - 01631200 _____ (Skype Technologies S.A.) C:\Users\user\Downloads\SkypeSetup.exe
2017-03-03 07:41 - 2017-03-03 07:41 - 00000000 ____D C:\Users\Todos os Usuários\Package Cache
2017-03-03 07:41 - 2017-03-03 07:41 - 00000000 ____D C:\ProgramData\Package Cache
2017-03-02 15:57 - 2017-03-02 15:57 - 00001728 _____ C:\Users\Public\Desktop\IRPF2017 - Declaração de Ajuste Anual, Final de Espólio e Saída Definitiva do País.lnk
2017-03-02 15:54 - 2017-03-02 15:54 - 00000000 ____D C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Programas RFB2017
2017-03-02 15:54 - 2017-03-02 15:54 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Programas RFB2017
2017-03-02 15:52 - 2017-03-02 15:52 - 28203488 _____ (Receita Federal do Brasil) C:\Users\user\Downloads\IRPF2017Win32v1.0.exe
2017-03-02 09:51 - 2017-03-02 09:51 - 00076148 _____ C:\Users\user\Downloads\DAS-PGMEI-15121552000125.pdf
2017-03-02 09:47 - 2017-03-02 09:47 - 00015022 _____ C:\Users\user\Downloads\DASNSIMEI-Recibo-15121552000125.pdf
2017-03-02 08:43 - 2017-03-02 08:43 - 00024604 _____ C:\Users\user\Downloads\RelatorioNotaFiscalEletronicaAbrzxcscasf.pdf
2017-03-02 08:37 - 2017-03-02 08:37 - 00024563 _____ C:\Users\user\Downloads\RelatorioNotaFiscgvnhkgkalEletronicaAbrasf.pdf
2017-03-02 08:33 - 2017-03-02 08:33 - 00024543 _____ C:\Users\user\Downloads\RelatorioNotaFiscalEletronicaAbraujyiyisf.pdf
2017-03-02 08:28 - 2017-03-02 08:28 - 00024555 _____ C:\Users\user\Downloads\RelatorioNotaFiscalEletronicaAbraxazsf.pdf
2017-03-02 08:24 - 2017-03-02 08:24 - 00024517 _____ C:\Users\user\Downloads\RelatorioNotaFiscalEletronicaAbrazbgxsf.pdf
2017-03-02 08:08 - 2017-03-02 08:14 - 00000009 __RSH C:\Windows\ULDR
2017-03-02 08:07 - 2017-03-02 08:08 - 07438336 _____ (Orbit30@www.win7vista.com) C:\Users\user\Downloads\ULoader-6.0.0.3_baixebr.exe
2017-02-23 13:47 - 2017-02-23 13:47 - 00110339 _____ C:\Users\user\Desktop\Comprovante de Inscrição e de Situação Cadastral - Impressão.pdf
2017-02-23 13:40 - 2017-02-23 13:40 - 00115369 _____ C:\Users\user\Desktop\Certificado da Condicao de Microempreendedor Individual - Impressão.pdf
2017-02-22 17:15 - 2017-02-23 17:09 - 00009054 _____ C:\Users\user\Desktop\Pasta14.xlsx
2017-02-22 10:05 - 2017-02-22 10:05 - 00150848 _____ C:\Users\user\Downloads\DAS-PGMEI-27151971000199.pdf
2017-02-22 08:35 - 2017-02-22 08:35 - 00068138 _____ C:\Users\user\Downloads\DAS-PGMEI-17931532000145.pdf
2017-02-21 10:01 - 2017-02-21 10:02 - 00070012 _____ C:\Users\user\Downloads\7171705286700170.pdf
2017-02-21 09:24 - 2017-02-21 09:24 - 00065975 _____ C:\Users\user\Downloads\DasDau-07141705285886667.pdf
2017-02-21 08:22 - 2017-02-21 08:22 - 00150832 _____ C:\Users\user\Downloads\DAS-PGMEI-18994529000133 (4).pdf
2017-02-21 08:21 - 2017-02-21 08:21 - 00067662 _____ C:\Users\user\Downloads\DAS-PGMEI-18994529000133 (3).pdf
2017-02-21 08:20 - 2017-02-21 08:20 - 00067436 _____ C:\Users\user\Downloads\DAS-PGMEI-18994529000133 (2).pdf
2017-02-20 15:36 - 2017-02-20 15:36 - 00159055 _____ C:\Users\user\Downloads\DAS-PGMEI-14871202000113 (4).pdf
2017-02-20 14:58 - 2017-02-20 14:58 - 00006921 _____ C:\Users\user\Downloads\PGDASD-APURACAO-22007179201701001.pdf
2017-02-20 14:56 - 2017-02-20 14:56 - 00007236 _____ C:\Users\user\Downloads\PGDASD-APURACAO-22007179201612001.pdf
2017-02-20 11:36 - 2017-02-20 11:36 - 00086062 _____ C:\Users\user\Downloads\certidao_10543319000117 (2).pdf
2017-02-20 11:21 - 2017-02-20 11:21 - 00014971 _____ C:\Users\user\Downloads\DASNSIMEI-Recibo-05053612000166.pdf
2017-02-20 11:18 - 2017-02-20 11:18 - 00067814 _____ C:\Users\user\Downloads\DAS-PGMEI-05053612000166 (2).pdf
2017-02-17 16:06 - 2017-02-17 16:06 - 00170249 _____ C:\Users\user\Downloads\1487157004953.pdf
2017-02-17 15:57 - 2017-02-17 15:58 - 03823839 _____ C:\Users\user\Downloads\1485448769485.pdf
2017-02-17 15:57 - 2017-02-17 15:57 - 00143985 _____ C:\Users\user\Downloads\1485448801996.pdf
2017-02-17 15:57 - 2017-02-17 15:57 - 00034270 _____ C:\Users\user\Downloads\1485448742761.pdf
2017-02-17 14:33 - 2017-02-17 14:34 - 00156237 _____ C:\Users\user\Downloads\Nubank_2017-02-20.pdf
2017-02-17 08:59 - 2017-02-17 09:04 - 134085285 _____ (Flexera Software) C:\Users\user\Downloads\PVA_EFD_w32-2.3.3.exe
2017-02-16 14:31 - 2017-03-02 10:50 - 00548213 _____ C:\Users\user\Desktop\12 b - solicitação de pesquisa.pdf
2017-02-16 13:41 - 2017-02-16 13:41 - 00610096 _____ C:\Users\user\Downloads\12 b - solicitação de pesquisa (2).pdf
2017-02-16 08:59 - 2017-02-16 08:59 - 00159181 _____ C:\Users\user\Downloads\DAS-PGMEI-14818701000147.pdf
2017-02-15 15:55 - 2017-02-15 15:55 - 00024307 _____ C:\Users\user\Downloads\RelatorioNotaFiscalEletronicaAbCGACArasf.pdf
2017-02-15 10:36 - 2017-02-15 10:36 - 00159149 _____ C:\Users\user\Downloads\DAS-PGMEI-15011949000164 (3).pdf
2017-02-15 10:35 - 2017-02-15 10:35 - 00015015 _____ C:\Users\user\Downloads\DASNSIMEI-Recibo-14871202000113 (1).pdf
2017-02-15 10:32 - 2017-02-15 10:32 - 00159077 _____ C:\Users\user\Downloads\DAS-PGMEI-15011949000164 (2).pdf
2017-02-15 10:29 - 2017-02-15 10:29 - 00014993 _____ C:\Users\user\Downloads\DASNSIMEI-Recibo-15011949000164 (1).pdf
2017-02-14 14:15 - 2017-02-14 14:16 - 00801578 _____ C:\Users\user\Downloads\Indice VSL 14 02.pdf
2017-02-13 11:10 - 2017-02-13 11:11 - 00024761 _____ C:\Users\user\Downloads\RelatorioNotaFiscalEletronicscddacAbrasf.pdf
2017-02-13 09:08 - 2017-02-13 09:08 - 00070633 _____ C:\Users\user\Downloads\EST2017-478314.pdf
2017-02-10 12:56 - 2017-02-10 12:57 - 00106930 _____ C:\Users\user\Downloads\Boleto vivo.pdf
2017-02-10 08:00 - 2017-02-10 08:01 - 01512797 _____ C:\Users\user\Downloads\Fwd%3a_G_P_TRANSPORTES_LTDA_ME_%2f_APÓLICE_+_CARNÊ.zip
2017-02-08 09:37 - 2017-02-08 09:38 - 00154735 _____ C:\Users\user\Downloads\Cálculo de Contribuições - Guia da Previdência Social (2).pdf
2017-02-08 09:05 - 2017-02-08 09:05 - 00087812 _____ C:\Users\user\Downloads\RelatorioNotaFiscalEletronicaAbrasfsdfgadf(1).pdf
2017-02-07 12:31 - 2017-02-07 12:32 - 00067556 _____ C:\Users\user\Downloads\DAS-PGMEI-15110213000143 (1).pdf
2017-02-07 10:01 - 2017-02-07 10:01 - 00159160 _____ C:\Users\user\Downloads\DAS-PGMEI-15047032000110.pdf
2017-02-07 09:59 - 2017-02-07 09:59 - 00015034 _____ C:\Users\user\Downloads\DASNSIMEI-Recibo-15047032000110.pdf
2017-02-07 07:49 - 2017-02-07 07:49 - 00042654 _____ C:\Users\user\Downloads\INFORME RENDIMENTOS ALTIVO .pdf
2017-02-07 07:45 - 2017-02-07 07:46 - 00015677 _____ C:\Users\user\Downloads\informe de rendimento Altivo.pdf
2017-02-02 12:52 - 2017-02-02 12:52 - 00025619 _____ C:\Users\user\Downloads\RelatorioNotaFiscalEletronicaAbrasfsdfgadf.pdf
2017-02-02 12:44 - 2017-02-02 12:44 - 00024904 _____ C:\Users\user\Downloads\RelatorioNotaFiscalEletroyurrnicaAbrasf.pdf
2017-02-01 15:37 - 2017-02-01 15:37 - 00014999 _____ C:\Users\user\Downloads\DASNSIMEI-Recibo-15039201000170.pdf
2017-02-01 15:37 - 2017-02-01 15:37 - 00014999 _____ C:\Users\user\Downloads\DASNSIMEI-Recibo-15039201000170 (1).pdf
2017-02-01 12:47 - 2017-02-20 15:59 - 00018411 _____ C:\Users\user\Desktop\Planilha Gfip Negativa 2017.xlsx
2017-01-31 09:37 - 2017-01-31 09:37 - 00044896 _____ C:\Users\user\Downloads\04521272000198_ConsutaOptantes.pdf
2017-01-31 09:24 - 2017-01-31 09:24 - 00044164 _____ C:\Users\user\Downloads\10719360000100_ConsutaOptantes.pdf
2017-01-31 08:33 - 2017-01-31 08:34 - 00120789 _____ C:\Users\user\Downloads\conta_vivo_27998516231_10_2016.pdf
2017-01-30 09:40 - 2017-01-30 09:40 - 00150949 _____ C:\Users\user\Downloads\DAS-PGMEI-15110213000143.pdf
2017-01-30 09:37 - 2017-01-30 09:37 - 00015024 _____ C:\Users\user\Downloads\DASNSIMEI-Recibo-15110213000143.pdf
2017-01-27 09:46 - 2017-01-27 09:46 - 00211065 _____ C:\Users\user\Downloads\RELACAO DE ITENS (1).pdf
2017-01-27 09:45 - 2017-01-27 09:45 - 00503333 _____ C:\Users\user\Downloads\PROPOSTA (1).pdf
2017-01-27 09:36 - 2017-01-27 09:36 - 00211134 _____ C:\Users\user\Downloads\RELACAO DE ITENS.pdf
2017-01-27 09:35 - 2017-01-27 09:35 - 00503333 _____ C:\Users\user\Downloads\PROPOSTA.pdf
2017-01-26 09:30 - 2017-01-26 09:30 - 00086064 _____ C:\Users\user\Downloads\certidao_10719360000100 (14).pdf
2017-01-26 09:13 - 2017-01-26 09:13 - 00015019 _____ C:\Users\user\Downloads\DASNSIMEI-Recibo-18954913000102.pdf
2017-01-26 09:07 - 2017-01-26 09:07 - 00024430 _____ C:\Users\user\Downloads\RelatorioNotaFiscalEletronifffffffbcaAbrasf.pdf
2017-01-25 14:46 - 2017-01-25 14:46 - 00039910 _____ C:\Users\user\Downloads\WhatsApp Image 2017-01-25 at 10.44.34.jpeg
2017-01-25 14:46 - 2017-01-25 14:46 - 00035654 _____ C:\Users\user\Downloads\WhatsApp Image 2017-01-24 at 13.51.22.jpeg
2017-01-25 14:03 - 2017-01-25 14:03 - 00086057 _____ C:\Users\user\Downloads\certidao_04521272000198 (13).pdf
2017-01-25 12:43 - 2017-01-25 12:43 - 00086071 _____ C:\Users\user\Downloads\certidao_17680721000192 (11).pdf
2017-01-25 08:15 - 2017-01-25 08:15 - 00040059 _____ C:\Users\user\Downloads\boletim (4).pdf
2017-01-25 08:14 - 2017-01-25 08:14 - 00041540 _____ C:\Users\user\Downloads\fed7c976-c85e-48dc-a5c1-e11f116a12d8.pdf
2017-01-25 08:11 - 2017-01-25 08:11 - 00024482 _____ C:\Users\user\Downloads\boleto (30).pdf
2017-01-25 07:03 - 2017-01-25 07:03 - 00159497 _____ C:\Users\user\Downloads\DAS-PGMEI-15242107000113 (1).pdf
2017-01-25 06:59 - 2017-01-25 06:59 - 00015434 _____ C:\Users\user\Downloads\DASNSIMEI-Recibo-15242107000113.pdf
2017-01-24 15:34 - 2017-01-24 15:34 - 00069969 _____ C:\Users\user\Downloads\7171702437046088.pdf
2017-01-24 15:30 - 2017-01-24 15:30 - 00012390 _____ C:\Users\user\Downloads\Relatorio(4).pdf
2017-01-24 13:03 - 2017-01-24 13:03 - 00015063 _____ C:\Users\user\Downloads\Relatorio(3).pdf
2017-01-24 12:52 - 2017-01-24 12:52 - 00086073 _____ C:\Users\user\Downloads\certidao_17680721000192 (10).pdf
2017-01-24 12:47 - 2017-01-24 12:47 - 00086074 _____ C:\Users\user\Downloads\certidao_17680721000192 (9).pdf
2017-01-24 09:54 - 2017-01-24 09:54 - 00011131 _____ C:\Users\user\Downloads\DASNSIMEI-Recibo-VENTURINI.pdf
2017-01-24 09:50 - 2017-01-24 09:50 - 00159227 _____ C:\Users\user\Downloads\DAS-PGMEI-15013497000150 (2).pdf
2017-01-24 09:44 - 2017-01-24 09:44 - 00015015 _____ C:\Users\user\Downloads\DASNSIMEI-Recibo-15013497000150 (1).pdf
2017-01-24 08:43 - 2017-01-24 08:43 - 00086068 _____ C:\Users\user\Downloads\certidao_17709402000162 (1).pdf
2017-01-23 15:26 - 2017-01-23 15:26 - 00610096 _____ C:\Users\user\Downloads\12 b - solicitação de pesquisa (1).pdf
2017-01-23 08:25 - 2017-01-23 08:26 - 00024615 _____ C:\Users\user\Downloads\RelatorioNotaFiscalEletronicaAbrasfafSADFsfg.pdf
2017-01-19 15:53 - 2017-02-20 16:54 - 00000000 ____D C:\Program Files\scpbrad
2017-01-19 15:50 - 2017-01-19 15:51 - 07748576 _____ (Banco Bradesco S.A.) C:\Users\user\Downloads\scpbradinst (1).exe
2017-01-19 13:48 - 2017-01-19 13:49 - 00511237 _____ C:\Users\user\Downloads\N1_FOCO.pdf
2017-01-19 08:32 - 2017-01-19 08:32 - 00086057 _____ C:\Users\user\Downloads\certidao_04521272000198 (12).pdf
2017-01-19 08:00 - 2017-01-19 08:00 - 00086062 _____ C:\Users\user\Downloads\certidao_10719360000100 (13).pdf
2017-01-18 14:33 - 2017-01-18 14:34 - 00530933 _____ C:\Users\user\Downloads\EDITAL2017.0001.pdf
2017-01-18 13:36 - 2017-01-18 13:48 - 134082531 _____ (Flexera Software) C:\Users\user\Downloads\PVA_EFD_w32-2.3.2.exe
2017-01-17 12:34 - 2017-01-17 12:35 - 00105116 _____ C:\Users\user\Downloads\Boleto_0207786069_01_20170101_20170101.pdf
2017-01-16 16:01 - 2017-01-16 16:01 - 00000000 ____D C:\ProgramDataLogs
2017-01-16 15:14 - 2017-01-16 15:14 - 00158089 _____ C:\Users\user\Downloads\Nubank_2017-01-20.pdf
2017-01-13 10:39 - 2017-01-13 10:39 - 00032591 _____ C:\Users\user\Downloads\SARAIVA-Jan-17.pdf
2017-01-11 09:07 - 2017-01-11 09:07 - 00004594 _____ C:\Users\user\Downloads\extrato(93).pdf
2017-01-11 08:56 - 2017-01-11 08:56 - 00004601 _____ C:\Users\user\Downloads\extrato(92).pdf
2017-01-11 08:54 - 2017-01-11 08:54 - 00004812 _____ C:\Users\user\Downloads\extrato(91).pdf
2017-01-11 08:52 - 2017-01-11 08:52 - 00004812 _____ C:\Users\user\Downloads\extrato(90).pdf
2017-01-11 08:49 - 2017-01-11 08:49 - 00004812 _____ C:\Users\user\Downloads\extrato(89).pdf
2017-01-11 08:47 - 2017-01-11 08:47 - 00003763 _____ C:\Users\user\Downloads\extrato(88).pdf
2017-01-11 08:44 - 2017-01-11 08:44 - 00004590 _____ C:\Users\user\Downloads\extrato(87).pdf
2017-01-11 08:42 - 2017-01-11 08:42 - 00004594 _____ C:\Users\user\Downloads\extrato(86).pdf
2017-01-11 08:16 - 2017-01-11 08:16 - 00003776 _____ C:\Users\user\Downloads\extrato(81).pdf
2017-01-11 08:16 - 2017-01-11 08:16 - 00003775 _____ C:\Users\user\Downloads\extrato(80).pdf
2017-01-11 08:16 - 2017-01-11 08:16 - 00003772 _____ C:\Users\user\Downloads\extrato(85).pdf
2017-01-11 08:16 - 2017-01-11 08:16 - 00003771 _____ C:\Users\user\Downloads\extrato(84).pdf
2017-01-11 08:16 - 2017-01-11 08:16 - 00003768 _____ C:\Users\user\Downloads\extrato(82).pdf
2017-01-11 08:16 - 2017-01-11 08:16 - 00003766 _____ C:\Users\user\Downloads\extrato(83).pdf
2017-01-10 14:45 - 2017-01-10 14:45 - 00001800 _____ C:\Users\user\Downloads\sicoob_2017_01_10_15_40_47.pdf
2017-01-10 08:49 - 2017-01-10 08:49 - 00086066 _____ C:\Users\user\Downloads\certidao_17709402000162.pdf
2017-01-10 07:53 - 2017-01-10 07:53 - 00000165 ____H C:\Users\user\Desktop\~$EMPRESAS CADASTRADAS NO CRA-ES.xlsx
2017-01-09 08:22 - 2017-01-09 08:23 - 00610096 _____ C:\Users\user\Downloads\12 b - solicitação de pesquisa.pdf
2017-01-06 12:32 - 2017-01-06 12:33 - 01748831 _____ C:\Users\user\Downloads\setup (8).exe
2017-01-06 09:36 - 2017-01-06 09:37 - 00000021 _____ C:\Users\user\Downloads\dua-undefined(2).pdf
2017-01-06 09:35 - 2017-01-06 09:35 - 00000021 _____ C:\Users\user\Downloads\dua-undefined(1).pdf
2017-01-06 09:33 - 2017-01-06 09:33 - 00000021 _____ C:\Users\user\Downloads\dua-undefined (1).pdf
2017-01-06 09:30 - 2017-01-06 09:30 - 00000021 _____ C:\Users\user\Downloads\dua-undefined.pdf
2017-01-04 15:57 - 2017-03-01 12:57 - 00012329 _____ C:\Users\user\Desktop\Pasta1.xlsx
2017-01-04 09:22 - 2017-01-06 10:17 - 00010689 _____ C:\Users\user\Desktop\EMPRESAS CADASTRADAS NO CRA-ES.xlsx
2017-01-04 08:11 - 2017-01-04 08:11 - 00024633 _____ C:\Users\user\Downloads\RelatorioNotaFiscalEletronicaAbrassfgsfgsgff.pdf
2017-01-04 06:39 - 2017-03-03 07:38 - 00022744 _____ (GAS Tecnologia) C:\Windows\system32\Drivers\wsddfac.sys
2017-01-04 06:39 - 2016-11-11 14:37 - 00022624 ____N (GAS Tecnologia) C:\Windows\system32\Drivers\wsddpp.sys
2017-01-03 12:31 - 2017-01-03 12:31 - 00070154 _____ C:\Users\user\Downloads\7171700316321600.pdf
2017-01-03 10:36 - 2017-01-03 10:36 - 00070160 _____ C:\Users\user\Downloads\7171700315362523.pdf
2017-01-03 08:58 - 2017-01-03 08:59 - 00023956 _____ C:\Users\user\Downloads\RelatorioNotaFiscalEletronicajkjAbrasf.pdf
2016-12-29 09:24 - 2016-12-29 09:24 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Drive
2016-12-29 09:14 - 2016-12-29 09:14 - 00093234 _____ C:\Users\user\Downloads\pdf2doc (1).zip
2016-12-29 08:13 - 2016-12-29 08:14 - 01749241 _____ C:\Users\user\Downloads\setup (7).exe
2016-12-29 08:06 - 2016-12-29 08:06 - 21025552 _____ (Mooii) C:\Users\user\Downloads\PhotoScapeSetup_V3.7.exe
2016-12-29 07:02 - 2016-12-29 07:02 - 00262144 _____ C:\Users\user\Downloads\INSERIR DATA 2016.doc
2016-12-28 14:20 - 2016-12-28 14:20 - 00086099 _____ C:\Users\user\Downloads\certidao_11210123000173 (3).pdf
2016-12-28 13:43 - 2016-12-28 13:43 - 00024496 _____ C:\Users\user\Downloads\RelatorioNotaFiscalEletronicaSDSAbrasf.pdf
2016-12-28 13:40 - 2016-12-28 13:40 - 00024596 _____ C:\Users\user\Downloads\RelatorioNotaFiscalEletronicaFGSAbrasf.pdf
2016-12-28 13:34 - 2016-12-28 13:34 - 00024567 _____ C:\Users\user\Downloads\RelatorioNotaFiscalEletrGRonicaAbrasf.pdf
2016-12-28 13:30 - 2016-12-28 13:30 - 00024608 _____ C:\Users\user\Downloads\RelatorioNotaFiscalEletrdfhsdfhffdfsdfghonicaAbrasf.pdf
2016-12-28 08:54 - 2016-12-28 08:54 - 00069965 _____ C:\Users\user\Downloads\7171636301921708.pdf
2016-12-27 10:45 - 2016-11-11 14:37 - 00022624 ____N (GAS Tecnologia) C:\Windows\system32\Drivers\wsddprm.sys
2016-12-27 09:07 - 2016-12-27 09:07 - 00086063 _____ C:\Users\user\Downloads\certidao_10719360000100 (12).pdf
2016-12-27 06:48 - 2016-12-27 06:48 - 00259871 _____ C:\Users\user\Downloads\Célio Aguiar P---.pdf
2016-12-26 15:43 - 2017-01-16 06:55 - 00013343 _____ C:\Users\user\Desktop\PLANILHA CALENDARIO 2017.xlsx
2016-12-23 08:16 - 2016-12-23 08:16 - 00009161 _____ C:\Users\user\Downloads\PGDASD-EXTRATO-21627086201610002.pdf
2016-12-22 14:49 - 2016-12-22 14:49 - 00024355 _____ C:\Users\user\Downloads\boleto (29).pdf
2016-12-22 08:41 - 2016-12-22 08:41 - 00086074 _____ C:\Users\user\Downloads\certidao_17680721000192 (8).pdf
2016-12-22 07:53 - 2016-12-22 07:53 - 00066941 _____ C:\Users\user\Downloads\DAS-PGMEI-14871202000113 (3).pdf
2016-12-22 07:51 - 2016-12-22 07:51 - 00067386 _____ C:\Users\user\Downloads\DAS-PGMEI-15011949000164 (1).pdf
2016-12-22 07:06 - 2016-12-22 07:06 - 00024106 _____ C:\Users\user\Downloads\RelatorioNotaFiscalEletronicaAbrasfJHGK.pdf
2016-12-22 07:01 - 2016-12-22 07:01 - 00024499 _____ C:\Users\user\Downloads\RelatorioNotaFiscalEletronicaAbrasfdhdfh.pdf
2016-12-21 14:36 - 2016-12-21 14:36 - 00024904 _____ C:\Users\user\Downloads\RelatorioNotaFiscalEletronicaAbrafghswfsf.pdf
2016-12-21 14:32 - 2016-12-21 14:33 - 00024790 _____ C:\Users\user\Downloads\RelatorioNotaFiscalEletronicaAbrfvsdfvasf.pdf
2016-12-21 09:00 - 2016-12-21 09:00 - 00019905 _____ C:\Users\user\Downloads\VerAta (11).pdf
2016-12-20 14:45 - 2016-12-20 14:45 - 00067228 _____ C:\Users\user\Downloads\DAS-PGMEI-11712840000101 (3).pdf
2016-12-20 14:44 - 2016-12-20 14:44 - 00067176 _____ C:\Users\user\Downloads\DAS-PGMEI-11712840000101 (2).pdf
2016-12-20 09:59 - 2016-12-20 09:59 - 00086059 _____ C:\Users\user\Downloads\certidao_04521272000198 (11).pdf
2016-12-19 15:31 - 2016-12-19 15:31 - 00028302 _____ C:\Users\user\Downloads\recibo(3).pdf
2016-12-19 15:29 - 2016-12-19 15:29 - 00008421 _____ C:\Users\user\Downloads\recibo(2).pdf
2016-12-19 15:25 - 2016-12-19 15:26 - 00003786 _____ C:\Users\user\Downloads\extrato(78).pdf
2016-12-19 15:25 - 2016-12-19 15:26 - 00003766 _____ C:\Users\user\Downloads\extrato(79).pdf
2016-12-19 15:25 - 2016-12-19 15:25 - 00003787 _____ C:\Users\user\Downloads\extrato(76).pdf
2016-12-19 15:25 - 2016-12-19 15:25 - 00003766 _____ C:\Users\user\Downloads\extrato(74).pdf
2016-12-19 15:25 - 2016-12-19 15:25 - 00003765 _____ C:\Users\user\Downloads\extrato(77).pdf
2016-12-19 15:25 - 2016-12-19 15:25 - 00003763 _____ C:\Users\user\Downloads\extrato(75).pdf
2016-12-19 07:18 - 2016-12-19 07:18 - 00606915 _____ C:\Users\user\Desktop\CRC MARCELO .pdf
2016-12-15 14:55 - 2016-12-15 14:55 - 00024926 _____ C:\Users\user\Downloads\RelatorioNotaFiscalEletronicaAbrasferqy.pdf
2016-12-15 14:21 - 2016-12-15 14:20 - 00665548 _____ C:\Users\user\Desktop\index.pdf
2016-12-15 13:38 - 2016-12-15 15:59 - 00014663 _____ C:\Users\user\Downloads\UTOPIA.docx
2016-12-15 13:33 - 2016-12-15 13:33 - 00067873 _____ C:\Users\user\Downloads\DAS-PGMEI-26721246000146.pdf
2016-12-15 10:34 - 2016-12-15 10:34 - 00002175 _____ C:\Users\Public\Desktop\Receitanet 1.09 .lnk
2016-12-15 10:26 - 2016-12-15 10:26 - 00000000 ____D C:\Program Files\Common Files\Java
2016-12-15 10:21 - 2016-12-15 10:22 - 00737344 _____ (Oracle Corporation) C:\Users\user\Downloads\chromeinstall-8u111.exe
2016-12-15 10:12 - 2016-12-15 10:12 - 25942520 _____ (Receita Federal do Brasil) C:\Users\user\Downloads\IRPF2016Win32v1.3.exe
2016-12-15 10:12 - 2016-12-15 10:12 - 06957281 _____ (Serpro - Serviço Federal de Processamento de Dados) C:\Users\user\Downloads\Receitanet-1.09 (1).exe
2016-12-15 09:49 - 2016-12-15 09:49 - 00008234 _____ C:\Users\user\Downloads\PGDASD-EXTRATO-25096755201611001.pdf
2016-12-15 09:45 - 2016-12-15 09:45 - 00004103 _____ C:\Users\user\Downloads\ComprovanteOpcaoRegime (2).pdf
2016-12-14 14:29 - 2016-12-14 14:50 - 00000000 ____D C:\Users\user\Desktop\RECIBOS RAONE FURLAN
2016-12-14 12:18 - 2016-12-14 12:18 - 00086122 _____ C:\Users\user\Downloads\certidao_06313941000161 (2).pdf
2016-12-13 09:38 - 2016-12-13 09:38 - 00078585 _____ C:\Users\user\Downloads\fatura-20-dez-2016.pdf
2016-12-13 09:17 - 2016-12-13 09:17 - 00008581 _____ C:\Users\user\Downloads\DeclaracaoDEFIS-200962062015001.pdf
2016-12-13 09:17 - 2016-12-13 09:17 - 00004452 _____ C:\Users\user\Downloads\ReciboDEFIS-200962062015001.pdf
2016-12-12 16:02 - 2016-12-12 16:02 - 00136141 _____ C:\Users\user\Desktop\Requerimento de Certidão de Débitos pdf.pdf
2016-12-12 13:01 - 2016-12-12 13:37 - 00016345 _____ C:\Users\user\Downloads\ALDIR.docx
2016-12-12 10:34 - 2016-12-12 10:34 - 00134687 _____ C:\Users\user\Downloads\Requerimento de Certidão de Débitos pdf.pdf
2016-12-12 10:33 - 2016-12-12 10:34 - 00182512 _____ C:\Users\user\Downloads\Declaração de débitos compensados por meio do formulário eletrônico Compensação de Débitos de CPRB Declaração para obtenção de certidão pdf.pdf
2016-12-09 14:53 - 2016-12-09 14:54 - 00004601 _____ C:\Users\user\Downloads\extrato(71).pdf
2016-12-09 14:53 - 2016-12-09 14:54 - 00003775 _____ C:\Users\user\Downloads\extrato(72).pdf
2016-12-09 14:53 - 2016-12-09 14:54 - 00003759 _____ C:\Users\user\Downloads\extrato(73).pdf
2016-12-09 14:53 - 2016-12-09 14:53 - 00003784 _____ C:\Users\user\Downloads\extrato(69).pdf
2016-12-09 14:53 - 2016-12-09 14:53 - 00003777 _____ C:\Users\user\Downloads\extrato(70).pdf
2016-12-08 14:02 - 2016-12-08 14:02 - 00067636 _____ C:\Users\user\Downloads\Ambiente_de_trabalho_seguro-_Atitude_e_Responsabil.html
2016-12-08 13:50 - 2016-12-08 13:50 - 01584515 _____ C:\Users\user\Downloads\LIQUIDA_PROENG%2c_Imoveis_Novos_a_partir_de_R$_195.000%2c00_vila_velha_-_Davi_Boechard.zip
2016-12-08 08:49 - 2016-12-08 08:49 - 00163526 _____ C:\Users\user\Downloads\dadosImovel-69709017.pdf
2016-12-08 08:47 - 2016-12-08 08:47 - 00163414 _____ C:\Users\user\Downloads\dadosImovel-67373240.pdf
2016-12-08 08:46 - 2016-12-08 08:46 - 00163417 _____ C:\Users\user\Downloads\dadosImovel-67373186.pdf
2016-12-08 08:44 - 2016-12-08 08:44 - 00163427 _____ C:\Users\user\Downloads\dadosImovel-64709353.pdf
2016-12-08 08:37 - 2016-12-08 08:37 - 00163634 _____ C:\Users\user\Downloads\dadosImovel-64317560.pdf
2016-12-08 08:35 - 2016-12-08 08:35 - 00164182 _____ C:\Users\user\Downloads\dadosImovel-49314661.pdf
2016-12-08 08:31 - 2016-12-08 08:31 - 00164306 _____ C:\Users\user\Downloads\dadosImovel-01979280.pdf
2016-12-08 08:26 - 2016-12-08 08:27 - 00164566 _____ C:\Users\user\Downloads\dadosImovel-02244497.pdf
2016-12-08 07:27 - 2016-12-08 07:27 - 00024525 _____ C:\Users\user\Downloads\RelatorioNotaFiscalEletronicaADFHSbrasf.pdf
2016-12-08 07:25 - 2016-12-08 07:25 - 00024555 _____ C:\Users\user\Downloads\RelatorioNotaFiscalEletronSHFcaAbrasf.pdf
2016-12-08 07:21 - 2016-12-08 07:21 - 00024540 _____ C:\Users\user\Downloads\RelatorioNotaFiscalEletronicaAbraSDFsf.pdf
2016-12-08 07:14 - 2016-12-08 07:14 - 00024655 _____ C:\Users\user\Downloads\sddffsfff.pdf
2016-12-07 13:40 - 2016-06-16 18:43 - 00031864 _____ (GAS Tecnologia) C:\Windows\system32\Drivers\wsddntf.sys
2016-12-07 13:40 - 2016-06-16 18:43 - 00008811 _____ C:\Windows\system32\Drivers\wsddntf.cat
2016-12-07 13:40 - 2016-06-16 14:06 - 00002708 _____ C:\Windows\system32\Drivers\wsddntf.inf
2016-12-07 10:55 - 2016-12-07 10:55 - 00061596 _____ C:\Users\user\Downloads\pdf2doc.zip
2016-12-07 10:39 - 2016-12-07 12:54 - 00227328 _____ C:\Users\user\Downloads\simulado constitucional_av1_parteI.doc
2016-12-07 09:18 - 2016-12-07 09:19 - 00086064 _____ C:\Users\user\Downloads\certidao_10719360000100 (11).pdf
2016-12-07 06:56 - 2016-12-07 06:57 - 43878872 _____ (Skype Technologies S.A.) C:\Users\user\Downloads\Não confirmado 679727.crdownload
2016-12-07 06:38 - 2016-12-07 06:38 - 00000162 ____H C:\Users\user\Desktop\~$TULO EM CAIXA ALTA.docx
2016-12-07 06:38 - 2016-12-07 06:38 - 00000162 ____H C:\Users\user\Desktop\~$d. 31.004 v018 - RDT - Retificação de Dados do Trabalhador - FGTS.dot
2016-12-06 16:03 - 2017-01-09 13:02 - 00051056 _____ C:\Users\user\Desktop\TÍTULO EM CAIXA ALTA.docx
2016-12-06 14:53 - 2016-12-06 14:53 - 00031840 _____ C:\Users\user\Downloads\MOD_31004v018_RDT_FGTS (2).zip
2016-12-06 14:53 - 2016-12-06 14:53 - 00031840 _____ C:\Users\user\Downloads\MOD_31004v018_RDT_FGTS (1).zip
2016-12-06 14:18 - 2016-12-06 14:18 - 00000000 ____D C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\ByteFence
2016-12-06 13:04 - 2016-12-06 13:05 - 01866728 _____ ( ) C:\Users\user\Downloads\Baixaki_skype.exe
2016-12-06 12:27 - 2016-12-06 12:27 - 00067583 _____ C:\Users\user\Downloads\DAS-PGMEI-23265870000198.pdf
2016-12-06 10:12 - 2016-12-06 10:12 - 00275366 _____ C:\Users\user\Downloads\simulado constitucional_av1_parteI.pdf
2016-12-06 10:07 - 2016-12-06 10:07 - 00225708 _____ C:\Users\user\Downloads\simulado constitucional II_av1_parte II.pdf
2016-12-06 10:06 - 2016-12-06 10:06 - 00284766 _____ C:\Users\user\Downloads\simulado constitucional II_av2_parte I.pdf
2016-12-06 10:06 - 2016-12-06 10:06 - 00155425 _____ C:\Users\user\Downloads\simulado constitucional II_av2_parteII.pdf
2016-12-06 07:00 - 2016-12-06 07:00 - 00086057 _____ C:\Users\user\Downloads\certidao_04521272000198 (10).pdf
2016-12-05 15:34 - 2016-12-05 15:35 - 01550767 _____ C:\Users\user\Downloads\Fatura (12).pdf
2016-12-05 15:12 - 2015-11-12 15:44 - 00020086 _____ C:\Users\user\Desktop\CONTRATO COMPRA E VENDA DE IMOVEL - atual.docx
2016-12-05 13:14 - 2016-12-05 13:17 - 00256000 _____ C:\Users\user\Downloads\Biblioteca_862617.doc
2016-12-05 11:00 - 2016-12-05 11:00 - 00029184 _____ C:\Users\user\Downloads\CASOS CONCRETOS AV2.doc
2016-12-05 09:43 - 2016-12-05 09:43 - 00024512 _____ C:\Users\user\Downloads\RelatorioNotaFiscalEletronfjficaAbrasf.pdf
2016-12-05 09:43 - 2016-12-05 09:43 - 00024403 _____ C:\Users\user\Downloads\RelatorioNotaFiscalElelkjtronicaAbrasf.pdf
2016-12-05 09:42 - 2016-12-05 09:42 - 00024447 _____ C:\Users\user\Downloads\RelatorioNotaFiscalEletronicaAbrnbgasf.pdf
2016-12-05 09:41 - 2016-12-05 09:41 - 00024483 _____ C:\Users\user\Downloads\RelatorioNotaFiscalEletronicxssaAbrasf.pdf
2016-12-05 09:40 - 2016-12-05 09:40 - 00024524 _____ C:\Users\user\Downloads\RelatorioNotaFiscalEletronicaAsbrasf.pdf
2016-12-05 09:39 - 2016-12-05 09:39 - 00024581 _____ C:\Users\user\Downloads\RelatorioNotaFiscalElhhetronicaAbrasf.pdf
2016-12-05 09:37 - 2016-12-05 09:37 - 00024321 _____ C:\Users\user\Downloads\RelatorioNotaFiscalEletrohggnicaAbrasf.pdf
2016-12-05 09:36 - 2016-12-05 09:36 - 00024366 _____ C:\Users\user\Downloads\RelatorioNotaFiscalEdggfletronicaAbrasf.pdf
2016-12-05 09:33 - 2016-12-05 09:33 - 00024553 _____ C:\Users\user\Downloads\RelatorioNotaFiscalEletronicaAbrabxzsf.pdf
2016-12-05 09:32 - 2016-12-05 09:32 - 00024498 _____ C:\Users\user\Downloads\RelatorioNotaFiscalEletfgsronicaAbrasf.pdf
2016-12-05 09:31 - 2016-12-05 09:31 - 00024540 _____ C:\Users\user\Downloads\RelatorioNotaFiscalEletronicaAbradfsasf.pdf
2016-12-05 09:31 - 2016-12-05 09:31 - 00024484 _____ C:\Users\user\Downloads\RelatorioNotaFiscalEletronicaAbrassgsaf.pdf
2016-12-05 09:30 - 2016-12-05 09:30 - 00024524 _____ C:\Users\user\Downloads\RelatorioNotaFiscalEletronicaAbraddsf.pdf
2016-12-05 09:28 - 2016-12-05 09:28 - 00024543 _____ C:\Users\user\Downloads\RelatorioNotaFiscalEletronicaAbdcscrasf.pdf
2016-12-05 09:25 - 2016-12-05 09:25 - 00024420 _____ C:\Users\user\Downloads\RelatorioNotaFiscalEletrfghnicaAbrasf.pdf
2016-12-05 09:24 - 2016-12-05 09:24 - 00024411 _____ C:\Users\user\Downloads\RelatorioNotaFiscalEletronicggaAbrasf.pdf
2016-12-05 08:48 - 2016-12-05 08:48 - 00024459 _____ C:\Users\user\Downloads\boleto (28).pdf
2016-12-05 08:36 - 2016-12-05 08:37 - 00024456 _____ C:\Users\user\Downloads\RelatorioNotaFiscalEletronicaAbrasfasdfs.pdf
2016-12-05 07:32 - 2016-12-08 15:50 - 00035328 _____ C:\Users\user\Downloads\Trabalho da sogra.doc

==================== Três Meses Modificados arquivos e pastas ========

(Se uma entrada for incluída na fixlist, o arquivo/pasta será movido.)

2017-03-03 09:01 - 2012-05-13 11:03 - 00000902 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2017-03-03 08:56 - 2009-07-14 01:34 - 00019968 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2017-03-03 08:56 - 2009-07-14 01:34 - 00019968 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2017-03-03 08:48 - 2012-09-06 14:05 - 00000000 ____D C:\Users\Todos os Usuários\Skype
2017-03-03 08:48 - 2012-09-06 14:05 - 00000000 ____D C:\ProgramData\Skype
2017-03-03 08:41 - 2011-10-07 20:45 - 00001074 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1386506006-3242650030-3149965245-1000UA.job
2017-03-03 07:57 - 2013-10-11 08:58 - 00000000 ____D C:\Users\Todos os Usuários\Kaspersky Lab
2017-03-03 07:57 - 2013-10-11 08:58 - 00000000 ____D C:\ProgramData\Kaspersky Lab
2017-03-03 07:52 - 2012-06-08 16:00 - 00000000 ____D C:\Users\Todos os Usuários\GbPlugin
2017-03-03 07:52 - 2012-06-08 16:00 - 00000000 ____D C:\ProgramData\GbPlugin
2017-03-03 07:42 - 2012-09-06 14:05 - 00000000 ____D C:\Users\user\AppData\Roaming\Skype
2017-03-03 07:41 - 2011-10-07 20:45 - 00001022 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1386506006-3242650030-3149965245-1000Core.job
2017-03-03 07:38 - 2009-07-14 01:53 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2017-03-03 07:37 - 2012-06-08 16:00 - 00000000 ____D C:\Program Files\GbPlugin
2017-03-02 15:57 - 2013-06-18 07:51 - 00000000 ___HD C:\Program Files\InstallJammer Registry
2017-03-02 15:54 - 2013-06-17 16:40 - 00000000 ____D C:\Arquivos de Programas RFB
2017-03-02 10:53 - 2016-11-24 09:05 - 00000000 ____D C:\Users\user\AppData\LocalLow\Mozilla
2017-03-02 08:09 - 2009-07-13 23:37 - 00000000 ____D C:\Windows\system32\oobe
2017-02-23 23:48 - 2009-07-14 01:52 - 00000000 ____D C:\Windows\system32\FxsTmp
2017-02-23 22:31 - 2011-02-12 11:39 - 01641362 _____ C:\Windows\system32\PerfStringBackup.INI
2017-02-23 22:31 - 2009-08-04 23:58 - 00707974 _____ C:\Windows\system32\prfh0416.dat
2017-02-23 22:31 - 2009-08-04 23:58 - 00147754 _____ C:\Windows\system32\prfc0416.dat
2017-02-23 22:31 - 2009-07-13 23:37 - 00000000 ____D C:\Windows\inf
2017-02-23 10:15 - 2015-10-14 12:31 - 00000000 ____D C:\Users\user\Documents\Arquivos do Outlook
2017-02-23 10:12 - 2015-06-22 10:42 - 00000000 ____D C:\Users\user\Desktop\ASSOCIAÇÕES
2017-02-23 08:11 - 2014-02-27 09:42 - 00000000 ____D C:\Users\user\Desktop\Nova pasta45
2017-02-23 08:02 - 2016-09-02 08:37 - 00002441 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk
2017-02-21 09:25 - 2012-07-03 09:24 - 00000000 ____D C:\Users\user\AppData\Local\CutePDF Writer
2017-02-20 14:36 - 2015-06-23 11:12 - 00000000 ____D C:\Users\user\Desktop\EMPRESA
2017-02-20 08:33 - 2009-07-14 01:53 - 00032608 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2017-02-17 09:46 - 2013-06-18 07:56 - 00000000 ____D C:\Users\user\.receitanet
2017-02-17 09:15 - 2011-12-21 09:17 - 00000000 ____D C:\Program Files\Apollo Softwares
2017-02-17 09:06 - 2016-05-18 08:58 - 00002049 _____ C:\Users\Public\Desktop\EFD ICMS IPI.lnk
2017-02-16 10:20 - 2013-01-03 14:43 - 00000000 ____D C:\Program Files\CAIXA
2017-02-15 07:39 - 2011-08-20 12:44 - 00000000 ____D C:\Program Files\Google
2017-02-14 11:17 - 2015-12-22 07:02 - 00000000 ____D C:\Users\user\Desktop\BACKUP SEFIP
2017-02-14 09:01 - 2012-05-13 11:03 - 00802904 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2017-02-14 09:01 - 2011-06-02 13:44 - 00144472 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl
2017-02-14 09:01 - 2011-02-14 07:54 - 00000000 ____D C:\Windows\system32\Macromed
2017-02-14 08:42 - 2015-12-23 15:31 - 00000027 _____ C:\DataHora.cns
2017-02-10 09:11 - 2012-02-06 10:00 - 00000000 ___RD C:\Temp
2017-02-08 12:32 - 2013-10-29 08:54 - 00000000 ____D C:\SEFIP
2017-02-07 09:20 - 2015-06-22 10:41 - 00000000 ____D C:\Users\user\Desktop\DOC. RECEITA FEDERAL
2017-02-07 08:31 - 2011-02-23 14:13 - 00000426 _____ C:\Windows\BRWMARK.INI
2017-02-07 06:58 - 2014-11-28 13:13 - 00002143 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2017-02-06 13:19 - 2014-10-22 15:18 - 00000000 ____D C:\Users\user\Desktop\Formulario FICUS-CAIXA

==================== Arquivos na raiz de alguns diretórios =======

2015-02-12 16:24 - 2015-02-12 16:24 - 0001303 _____ () C:\Program Files\201412_10015193000108.TXT.txt
2015-02-13 07:18 - 2015-02-13 07:18 - 0001343 _____ () C:\Program Files\201412_31797616000169.TXT.txt
2016-07-26 10:27 - 2016-07-26 17:36 - 0218684 _____ () C:\Program Files\SpedECF-04988517000191-Original-dez2015.txt
2014-10-07 16:04 - 2014-10-07 16:05 - 0017812 _____ () C:\Users\user\AppData\Roaming\unins000.dat
2014-10-07 16:04 - 2014-10-07 16:04 - 0815314 _____ () C:\Users\user\AppData\Roaming\unins000.exe
2013-12-23 08:41 - 2013-12-23 08:41 - 0017186 _____ () C:\Users\user\AppData\Roaming\unins001.dat
2013-12-23 08:41 - 2013-12-23 08:41 - 0730322 _____ () C:\Users\user\AppData\Roaming\unins001.exe
2014-09-08 11:31 - 2015-02-09 07:31 - 0000164 _____ () C:\Users\user\AppData\Roaming\WB.CFG
2014-12-01 21:31 - 2014-12-17 13:31 - 0000010 _____ () C:\Users\user\AppData\Local\DSI.DAT
2015-08-13 11:31 - 2015-08-13 11:31 - 0001086 _____ () C:\ProgramData\ViaNuvem_Installer.txt

Arquivos para serem movidos ou deletados:
====================
C:\Users\user\signver1.dll


Alguns arquivos em TEMP:
====================
2015-03-03 08:04 - 2015-03-03 08:04 - 0663448 _____ (Ask Partner Network) C:\Users\user\AppData\Local\Temp\APNSetup.exe
2012-07-06 12:12 - 2012-07-06 12:12 - 0357064 _____ (Ask.com) C:\Users\user\AppData\Local\Temp\ApnStub.exe
2012-01-06 22:22 - 2012-01-06 22:22 - 0246440 _____ (Ask.com) C:\Users\user\AppData\Local\Temp\AskSLib.dll
2013-12-12 06:54 - 2013-12-12 06:55 - 10355400 _____ () C:\Users\user\AppData\Local\Temp\BackupSetup.exe
2015-08-20 15:40 - 2015-11-17 14:31 - 0096288 _____ () C:\Users\user\AppData\Local\Temp\cct.dll
2012-07-03 09:23 - 2012-07-03 09:23 - 5254656 _____ () C:\Users\user\AppData\Local\Temp\converter.exe
2012-06-08 15:59 - 2012-06-08 16:00 - 3676528 _____ (Caixa Econômica Federal ) C:\Users\user\AppData\Local\Temp\gbpcef.exe
2011-03-23 16:43 - 2011-03-03 12:09 - 0158048 _____ () C:\Users\user\AppData\Local\Temp\GLF8B37.tmp.ConduitEngineSetup.exe
2015-09-22 14:06 - 2015-09-22 14:06 - 2382216 _____ (Mooii) C:\Users\user\AppData\Local\Temp\GoogleSetup.exe
2013-07-12 15:30 - 2013-07-12 15:30 - 0000000 _____ () C:\Users\user\AppData\Local\Temp\hfm_wens.dll
2013-07-16 15:25 - 2013-07-16 15:25 - 0659320 _____ () C:\Users\user\AppData\Local\Temp\ICReinstall_java-runtime-70-update-25-32-bits.exe
2013-07-12 08:24 - 2013-07-12 08:24 - 0009216 _____ () C:\Users\user\AppData\Local\Temp\ivz1jn2s.dll
2015-08-20 15:40 - 2015-11-17 14:31 - 0287120 _____ (Ask Partner Network) C:\Users\user\AppData\Local\Temp\JavaIC.dll
2011-02-09 21:48 - 2011-02-09 21:48 - 0885536 _____ (Sun Microsystems, Inc.) C:\Users\user\AppData\Local\Temp\jre-6u24-windows-i586-iftw-rv.exe
2011-08-04 12:03 - 2011-08-04 12:03 - 0911136 _____ (Sun Microsystems, Inc.) C:\Users\user\AppData\Local\Temp\jre-6u26-windows-i586-iftw-rv.exe
2012-08-29 09:07 - 2012-08-29 09:07 - 0908272 _____ (Sun Microsystems, Inc.) C:\Users\user\AppData\Local\Temp\jre-6u35-windows-i586-iftw.exe
2013-04-05 11:44 - 2013-04-05 11:44 - 0904104 _____ (Oracle Corporation) C:\Users\user\AppData\Local\Temp\jre-7u21-windows-i586-iftw.exe
2013-06-21 22:58 - 2013-06-21 22:58 - 0903080 _____ (Oracle Corporation) C:\Users\user\AppData\Local\Temp\jre-7u25-windows-i586-iftw.exe
2016-09-02 08:25 - 2016-09-02 08:25 - 0741440 _____ (Oracle Corporation) C:\Users\user\AppData\Local\Temp\jre-8u101-windows-au.exe
2015-02-06 07:50 - 2015-02-06 07:50 - 0641448 _____ (Oracle Corporation) C:\Users\user\AppData\Local\Temp\jre-8u31-windows-au.exe
2015-05-22 16:51 - 2015-05-22 16:52 - 0562272 _____ (Oracle Corporation) C:\Users\user\AppData\Local\Temp\jre-8u45-windows-au.exe
2015-11-17 13:45 - 2015-11-17 13:45 - 0585824 _____ (Oracle Corporation) C:\Users\user\AppData\Local\Temp\jre-8u65-windows-au.exe
2016-01-30 05:10 - 2016-01-30 05:10 - 0736352 _____ (Oracle Corporation) C:\Users\user\AppData\Local\Temp\jre-8u73-windows-au.exe
2016-04-01 15:48 - 2016-04-01 15:48 - 0736320 _____ (Oracle Corporation) C:\Users\user\AppData\Local\Temp\jre-8u77-windows-au.exe
2016-04-29 09:05 - 2016-04-29 09:05 - 0739904 _____ (Oracle Corporation) C:\Users\user\AppData\Local\Temp\jre-8u91-windows-au.exe
2011-03-23 16:43 - 2011-03-03 20:19 - 2743120 _____ () C:\Users\user\AppData\Local\Temp\Messenger_Plus_BR.exe
2013-05-06 12:46 - 2013-05-06 12:47 - 2916352 _____ () C:\Users\user\AppData\Local\Temp\mpam-9ec59366.exe
2012-07-26 10:21 - 2012-02-27 14:44 - 0834560 _____ (Yuna Software) C:\Users\user\AppData\Local\Temp\MsgPlusUninstall.exe
2015-08-20 15:40 - 2015-11-17 14:31 - 0331488 _____ (McAfee, Inc.) C:\Users\user\AppData\Local\Temp\msscct32.dll
2011-03-23 16:43 - 2011-01-17 16:54 - 0175912 _____ (Conduit Ltd.) C:\Users\user\AppData\Local\Temp\prxGLF8B37.tmp.tbMess.dll
2011-09-17 16:05 - 2012-07-03 08:58 - 3946696 _____ (Ask) C:\Users\user\AppData\Local\Temp\setup.exe
2015-03-13 15:29 - 2011-05-11 08:22 - 0607800 ____R (HP) C:\Users\user\AppData\Local\Temp\siinst.exe
2013-06-12 07:49 - 2016-12-06 14:01 - 43878872 _____ (Skype Technologies S.A.) C:\Users\user\AppData\Local\Temp\SkypeSetup.exe
2015-03-13 15:29 - 2011-05-04 19:49 - 0270336 ____R (HP) C:\Users\user\AppData\Local\Temp\strings.dll
2012-07-26 10:23 - 2011-03-03 11:59 - 4215080 _____ (Conduit Ltd.) C:\Users\user\AppData\Local\Temp\tbMess.dll
2012-07-19 07:58 - 2012-07-19 07:59 - 1158064 _____ (Yuna Software) C:\Users\user\AppData\Local\Temp\Update_1820.exe
2011-03-23 16:28 - 2011-03-23 16:36 - 6883720 _____ (Yuna Software) C:\Users\user\AppData\Local\Temp\Update_2b44.exe
2014-12-03 14:51 - 2014-12-03 14:51 - 0559000 _____ (Ask Partner Network) C:\Users\user\AppData\Local\Temp\uttE74F.tmp.exe
2013-12-12 06:55 - 2013-12-12 06:55 - 4216840 _____ (Microsoft Corporation) C:\Users\user\AppData\Local\Temp\vcredist_x86.exe
2017-03-03 08:45 - 2017-03-03 08:46 - 14456872 _____ (Microsoft Corporation) C:\Users\user\AppData\Local\Temp\vc_redist.x86.exe
2012-03-19 19:38 - 2012-03-19 19:38 - 151883624 _____ (Microsoft Corporation) C:\Users\user\AppData\Local\Temp\wlsetup-cvr.exe
2012-04-27 20:53 - 2012-04-27 20:57 - 0318904 _____ (Microsoft Corporation) C:\Users\user\AppData\Local\Temp\wmpfirefoxplugin.exe
2015-08-20 15:40 - 2015-11-17 14:31 - 0402200 _____ (Yahoo Inc.) C:\Users\user\AppData\Local\Temp\YSearchUtil.dll
2015-08-20 17:09 - 2015-08-20 17:09 - 0765968 _____ (Yahoo! Inc.) C:\Users\user\AppData\Local\Temp\ytb.exe
2013-06-07 10:07 - 2006-05-24 14:10 - 0455600 _____ (Macrovision Corporation) C:\Users\user\AppData\Local\Temp\_is3F91.exe

==================== Bamital & volsnap ======================

(Não há correção automática para arquivos que não passaram na verificação.)

C:\Windows\explorer.exe => O arquivo é assinado digitalmente
C:\Windows\system32\winlogon.exe => O arquivo é assinado digitalmente
C:\Windows\system32\wininit.exe => O arquivo é assinado digitalmente
C:\Windows\system32\svchost.exe => O arquivo é assinado digitalmente
C:\Windows\system32\services.exe => O arquivo é assinado digitalmente
C:\Windows\system32\User32.dll => MD5 é legítimo
C:\Windows\system32\userinit.exe => O arquivo é assinado digitalmente
C:\Windows\system32\rpcss.dll => O arquivo é assinado digitalmente
C:\Windows\system32\dnsapi.dll => O arquivo é assinado digitalmente
C:\Windows\system32\Drivers\volsnap.sys => O arquivo é assinado digitalmente

LastRegBack: 2017-02-22 15:23

==================== Fim de FRST.txt ============================