Publicité
Publicité
Format du document : text/plain
Prévisualisation
Resultado do exame da Farbar Recovery Scan Tool (FRST) (x64) Versão: 08-03-2017
Executado por edson (administrador) em EDSON-PC (10-03-2017 00:09:58)
Executando a partir de C:\Users\edson\Downloads\Programs
Perfis Carregados: edson (Perfis Disponíveis: edson)
Platform: Windows 7 Ultimate Service Pack 1 (X64) Idioma: Português (Brasil)
Internet Explorer Versão 8 (Navegador padrão: Chrome)
Modo da Inicialização: Normal
Tutorial da Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Processos (Whitelisted) =================
(Se uma entrada for incluída na fixlist, o processo será fechado. O arquivo não será movido.)
(GAS Tecnologia) C:\Program Files (x86)\GbPlugin\gbpsv.exe
(AMD) C:\Windows\System32\atiesrxx.exe
(Logitech Inc.) C:\Program Files (x86)\Common Files\logishrd\LVMVFM\UMVPFSrv.exe
(AMD) C:\Windows\System32\atieclxx.exe
(APN LLC.) C:\Program Files (x86)\AskPartnerNetwork\Toolbar\apnmcp.exe
() C:\Program Files\Bigfoot Networks\Killer Network Manager\BFNService.exe
(McAfee, Inc.) C:\Program Files\TrueKey\InstallerWrapperService.exe
(GAS Tecnologia LTDA) C:\Program Files\Diebold\Warsaw\core.exe
(GAS Tecnologia) C:\Program Files (x86)\GbPlugin\gbpsv.exe
(Megaify Software Co., Ltd.) C:\Program Files (x86)\DriverToolkit\DriverToolkit.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(ASUSTek Computer Inc.) C:\Program Files\ROG Thunderbolt Audio\CPL\ROG ThunderBolt Audio.exe
() C:\Windows\SysWOW64\ExMgr.exe
(GAS Tecnologia LTDA) C:\Program Files\Diebold\Warsaw\core.exe
(Tonec Inc.) C:\Program Files (x86)\Internet Download Manager\IDMan.exe
(The Chromium Authors) C:\Users\edson\AppData\Local\chromium\Application\chrome.exe
(Antibody Software) C:\Program Files (x86)\Bulk Image Downloader\BIDDropBox.exe
(© 2015 Microsoft Corporation) C:\Users\edson\AppData\Local\Microsoft\BingSvc\BingSvc.exe
(McAfee, Inc.) C:\Program Files\McAfee Security Scan\3.11.500\SSScheduler.exe
(The Chromium Authors) C:\Users\edson\AppData\Local\chromium\Application\chrome.exe
(Razer USA Ltd) C:\Program Files (x86)\Razer\Mamba\RazerMambaSysTray.exe
() C:\Program Files (x86)\DFX\DFX.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(APN) C:\Program Files (x86)\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe
() C:\Program Files (x86)\DFX\Universal\Apps\DfxSharedApp32.exe
() C:\Program Files (x86)\DFX\Universal\Apps\DfxSharedApp64.exe
(The Chromium Authors) C:\Users\edson\AppData\Local\chromium\Application\chrome.exe
(Tonec Inc.) C:\Program Files (x86)\Internet Download Manager\IEMonitor.exe
(The Chromium Authors) C:\Users\edson\AppData\Local\chromium\Application\chrome.exe
(The Chromium Authors) C:\Users\edson\AppData\Local\chromium\Application\chrome.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.32.7\GoogleCrashHandler.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.32.7\GoogleCrashHandler64.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\System32\wbem\WMIADAP.exe
==================== Registro (Whitelisted) ====================
(Se uma entrada for incluída na fixlist, o ítem no Registro será restaurado para o padrão ou removido. O arquivo não será movido.)
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [8484056 2015-06-12] (Realtek Semiconductor)
HKLM\...\Run: [Cm6620Sound] => C:\Program Files\ROG Thunderbolt Audio\CPL\ROG ThunderBolt Audio.exe [314368 2011-09-09] (ASUSTek Computer Inc.)
HKLM\...\Run: [EX_Hook] => C:\Windows\syswow64\ExMgr.exe [204800 2011-02-25] ()
HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [446392 2012-04-04] (Adobe Systems Incorporated)
HKLM\...\Run: [Diebold - Warsaw] => C:\Program Files\Diebold\Warsaw\core.exe [1058864 2016-05-11] (GAS Tecnologia LTDA)
HKLM-x32\...\Run: [Razer Mamba Elite Driver] => C:\Program Files (x86)\Razer\Mamba\RazerMambaSysTray.exe [974864 2012-12-21] (Razer USA Ltd)
HKLM-x32\...\Run: [DFX] => C:\Program Files (x86)\DFX\DFX.exe [1596920 2016-10-13] ()
HKLM-x32\...\Run: [SwitchBoard] => C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [AdobeCS6ServiceManager] => C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe [1073312 2012-03-09] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [587288 2016-12-12] (Oracle Corporation)
HKLM-x32\...\Run: [ApnTBMon] => C:\Program Files (x86)\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe [1928768 2016-11-15] (APN)
Winlogon\Notify\ GbPluginUni: C:\Program Files (x86)\GbPlugin\gbiehUni.dll [2017-01-27] (Banco Itaú Unibanco)
HKU\S-1-5-21-707682792-1128049521-3259909178-1001\...\Run: [IDMan] => C:\Program Files (x86)\Internet Download Manager\IDMan.exe [4019312 2017-02-13] (Tonec Inc.)
HKU\S-1-5-21-707682792-1128049521-3259909178-1001\...\Run: [Chromium] => c:\users\edson\appdata\local\chromium\application\chrome.exe [1068544 2016-03-18] (The Chromium Authors)
HKU\S-1-5-21-707682792-1128049521-3259909178-1001\...\Run: [AdobeBridge] => [X]
HKU\S-1-5-21-707682792-1128049521-3259909178-1001\...\Run: [BID Drop Box] => C:\Program Files (x86)\Bulk Image Downloader\BIDDropBox.exe [1210576 2015-06-05] (Antibody Software)
HKU\S-1-5-21-707682792-1128049521-3259909178-1001\...\Run: [BingSvc] => C:\Users\edson\AppData\Local\Microsoft\BingSvc\BingSvc.exe [144008 2015-11-05] (© 2015 Microsoft Corporation)
HKU\S-1-5-21-707682792-1128049521-3259909178-1001\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [27534808 2017-02-14] (Skype Technologies S.A.)
HKU\S-1-5-21-707682792-1128049521-3259909178-1001\...\MountPoints2: {5c02107d-bc60-11e6-bed0-f46d04240343} - "H:\WD SmartWare.exe" autoplay=true
HKU\S-1-5-18\...\RunOnce: [SPReview] => C:\Windows\System32\SPReview\SPReview.exe [301568 2016-11-02] (Microsoft Corporation)
ShellExecuteHooks-x32: GbPluginObj Class - {E37CB5F0-51F5-4395-A808-5FA49E399008} - C:\PROGRAM FILES (X86)\GbPlugin\gbiehuni.dll [1951968 2017-01-27] (Banco Itaú Unibanco)
ShellIconOverlayIdentifiers: [ IDM Shell Extension] -> {CDC95B92-E27C-4745-A8C5-64A52A78855D} => C:\Program Files (x86)\Internet Download Manager\IDMShellExt64.dll [2015-08-14] (Tonec Inc.)
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => -> Nenhum Arquivo
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Bigfoot Killer Network Manager.lnk [2016-10-25]
ShortcutTarget: Bigfoot Killer Network Manager.lnk -> C:\Program Files\Bigfoot Networks\Killer Network Manager\KillerNetManager.exe ()
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\McAfee Security Scan Plus.lnk [2017-03-09]
ShortcutTarget: McAfee Security Scan Plus.lnk -> C:\Program Files\McAfee Security Scan\3.11.500\SSScheduler.exe (McAfee, Inc.)
GroupPolicy: Restrição <======= ATENÇÃO
CHR HKLM\SOFTWARE\Policies\Google: Restrição <======= ATENÇÃO
==================== Internet (Whitelisted) ====================
(Se um ítem for incluído na fixlist, sendo um ítem do Registro, será removido ou restaurado para o padrão.)
Winsock: Catalog9 01 C:\Windows\SysWOW64\BfLLR.dll [174592 2012-07-03] (Bigfoot Networks, Inc.)
Winsock: Catalog9 02 C:\Windows\SysWOW64\BfLLR.dll [174592 2012-07-03] (Bigfoot Networks, Inc.)
Winsock: Catalog9 03 C:\Windows\SysWOW64\BfLLR.dll [174592 2012-07-03] (Bigfoot Networks, Inc.)
Winsock: Catalog9 04 C:\Windows\SysWOW64\BfLLR.dll [174592 2012-07-03] (Bigfoot Networks, Inc.)
Winsock: Catalog9 15 C:\Windows\SysWOW64\BfLLR.dll [174592 2012-07-03] (Bigfoot Networks, Inc.)
Winsock: Catalog9-x64 01 C:\Windows\system32\BfLLR.dll [189952 2012-07-03] (Bigfoot Networks, Inc.)
Winsock: Catalog9-x64 02 C:\Windows\system32\BfLLR.dll [189952 2012-07-03] (Bigfoot Networks, Inc.)
Winsock: Catalog9-x64 03 C:\Windows\system32\BfLLR.dll [189952 2012-07-03] (Bigfoot Networks, Inc.)
Winsock: Catalog9-x64 04 C:\Windows\system32\BfLLR.dll [189952 2012-07-03] (Bigfoot Networks, Inc.)
Winsock: Catalog9-x64 15 C:\Windows\system32\BfLLR.dll [189952 2012-07-03] (Bigfoot Networks, Inc.)
Hosts: 0.0.0.1 mssplus.mcafee.com
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1 192.168.1.1
Tcpip\..\Interfaces\{A9985670-73C1-4ACC-A752-5A76348B9FD4}: [DhcpNameServer] 192.168.1.1 192.168.1.1
Tcpip\..\Interfaces\{CCF963E1-4F13-41C2-836D-1564393FCB11}: [DhcpNameServer] 192.168.1.1 192.168.1.1
Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page =
HKU\S-1-5-21-707682792-1128049521-3259909178-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.msn.com/?pc=SK216&ocid=SK216DHP&osmkt=pt-br
HKU\S-1-5-21-707682792-1128049521-3259909178-1001\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://www.msn.com/pt-br/?ocid=iehp
SearchScopes: HKLM -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM-x32 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM-x32 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-707682792-1128049521-3259909178-1001 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-707682792-1128049521-3259909178-1001 -> {2211d4a5-48d0-47f5-a7cd-81e861470f7f} URL = hxxp://www.bing.com/search?FORM=SK216DF&PC=SK216&q={searchTerms}&src=IE-SearchBox
BHO: IDM integration (IDMIEHlprObj Class) -> {0055C089-8582-441B-A0BF-17B458C2A3A8} -> C:\Program Files (x86)\Internet Download Manager\IDMIECC64.dll [2016-12-10] (Internet Download Manager, Tonec Inc.)
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_121\bin\ssv.dll [2017-03-03] (Oracle Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_121\bin\jp2ssv.dll [2017-03-03] (Oracle Corporation)
BHO-x32: IDM integration (IDMIEHlprObj Class) -> {0055C089-8582-441B-A0BF-17B458C2A3A8} -> C:\Program Files (x86)\Internet Download Manager\IDMIECC.dll [2016-12-10] (Internet Download Manager, Tonec Inc.)
BHO-x32: GbIehObj Class -> {C41A1C0E-EA6C-11D4-B1B8-444553540008} -> C:\PROGRAM FILES (X86)\GBPLUGIN\gbiehuni.dll [2017-01-27] (Banco Itaú Unibanco)
Toolbar: HKU\S-1-5-21-707682792-1128049521-3259909178-1001 -> Sem Nome - {41545533-2D54-4D47-00A7-7A786E7484D7} - Nenhum Arquivo
Filter: deflate - {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\Windows\system32\urlmon.dll [2010-11-20] (Microsoft Corporation)
Filter-x32: deflate - {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\Windows\SysWOW64\urlmon.dll [2010-11-20] (Microsoft Corporation)
Filter: gzip - {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\Windows\system32\urlmon.dll [2010-11-20] (Microsoft Corporation)
Filter-x32: gzip - {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\Windows\SysWOW64\urlmon.dll [2010-11-20] (Microsoft Corporation)
FireFox:
========
FF HKU\S-1-5-21-707682792-1128049521-3259909178-1001\...\SeaMonkey\Extensions: [mozilla_cc@internetdownloadmanager.com] - C:\Users\edson\AppData\Roaming\IDM\idmmzcc5
FF Extension: (IDM CC) - C:\Users\edson\AppData\Roaming\IDM\idmmzcc5 [2017-03-10] [não assinado]
FF HKU\S-1-5-21-707682792-1128049521-3259909178-1001\...\SeaMonkey\Extensions: [mozilla_cc2@internetdownloadmanager.com] - C:\Program Files (x86)\Internet Download Manager\idmmzcc2.xpi
FF Extension: (IDM integration) - C:\Program Files (x86)\Internet Download Manager\idmmzcc2.xpi [2017-01-26]
FF Plugin: @java.com/DTPlugin,version=11.121.2 -> C:\Program Files\Java\jre1.8.0_121\bin\dtplugin\npDeployJava1.dll [2017-03-03] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.121.2 -> C:\Program Files\Java\jre1.8.0_121\bin\plugin2\npjp2.dll [2017-03-03] (Oracle Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.32.7\npGoogleUpdate3.dll [2016-12-16] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.32.7\npGoogleUpdate3.dll [2016-12-16] (Google Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2016-12-17] (Adobe Systems Inc.)
Chrome:
=======
CHR HomePage: Default -> teoma.com/?gct=hp
CHR StartupUrls: Default -> "hxxps://mail.google.com/mail/u/0/#inbox","hxxps://br0.forgeofempires.com/page/"
CHR Profile: C:\Users\edson\AppData\Local\Google\Chrome\User Data\Default [2017-03-10]
CHR Extension: (Google Apresentações) - C:\Users\edson\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2016-10-25]
CHR Extension: (Google Docs) - C:\Users\edson\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2016-10-25]
CHR Extension: (Google Drive) - C:\Users\edson\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2016-10-25]
CHR Extension: (internet Download Manager For Chrome) - C:\Users\edson\AppData\Local\Google\Chrome\User Data\Default\Extensions\blhjobkfabeopalncconblmakfcllmhk [2016-11-09]
CHR Extension: (YouTube) - C:\Users\edson\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2016-10-25]
CHR Extension: (Adblock Plus) - C:\Users\edson\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2016-10-26]
CHR Extension: (Teoma Shopping App) - C:\Users\edson\AppData\Local\Google\Chrome\User Data\Default\Extensions\cglobijmmnefeacmdjkgkimhjcidaedm [2017-03-05]
CHR Extension: (Teoma) - C:\Users\edson\AppData\Local\Google\Chrome\User Data\Default\Extensions\cohecngphbppjpaokeilaichhgggcmjb [2017-03-05]
CHR Extension: (Bing) - C:\Users\edson\AppData\Local\Google\Chrome\User Data\Default\Extensions\fcfenmboojpjinhpgggodefccipikbpd [2017-01-20]
CHR Extension: (Planilhas do Google) - C:\Users\edson\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2016-10-25]
CHR Extension: (Documentos Google off-line) - C:\Users\edson\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-10-25]
CHR Extension: (AdBlock) - C:\Users\edson\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2017-02-25]
CHR Extension: (Autodesk Homestyler) - C:\Users\edson\AppData\Local\Google\Chrome\User Data\Default\Extensions\kdmmkfaghgcicheaimnpffeeekheafkb [2016-10-25]
CHR Extension: (Planner 5D Design de Interior) - C:\Users\edson\AppData\Local\Google\Chrome\User Data\Default\Extensions\mcafejemebbngbglfoinpoaannbihjna [2016-10-25]
CHR Extension: (IDM Integration Module) - C:\Users\edson\AppData\Local\Google\Chrome\User Data\Default\Extensions\ngpampappnmepgilojfohadhhmbhlaek [2016-12-09]
CHR Extension: (Pagamentos da Chrome Web Store) - C:\Users\edson\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2017-03-09]
CHR Extension: (Gmail) - C:\Users\edson\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2016-10-25]
CHR Extension: (Chrome Media Router) - C:\Users\edson\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2017-02-07]
CHR HKLM\...\Chrome\Extension: [cglobijmmnefeacmdjkgkimhjcidaedm] - C:\ProgramData\AskPartnerNetwork\Toolbar\Shared\CRX\cglobijmmnefeacmdjkgkimhjcidaedm.crx [2016-11-15]
CHR HKLM\...\Chrome\Extension: [cohecngphbppjpaokeilaichhgggcmjb] - C:\ProgramData\AskPartnerNetwork\Toolbar\Shared\CRX\cohecngphbppjpaokeilaichhgggcmjb.crx [2016-11-15]
CHR HKLM\...\Chrome\Extension: [ngpampappnmepgilojfohadhhmbhlaek] - C:\Program Files (x86)\Internet Download Manager\IDMGCExt.crx [2017-02-13]
CHR HKU\S-1-5-21-707682792-1128049521-3259909178-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [fcfenmboojpjinhpgggodefccipikbpd] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [cglobijmmnefeacmdjkgkimhjcidaedm] - C:\ProgramData\AskPartnerNetwork\Toolbar\Shared\CRX\cglobijmmnefeacmdjkgkimhjcidaedm.crx [2016-11-15]
CHR HKLM-x32\...\Chrome\Extension: [cohecngphbppjpaokeilaichhgggcmjb] - C:\ProgramData\AskPartnerNetwork\Toolbar\Shared\CRX\cohecngphbppjpaokeilaichhgggcmjb.crx [2016-11-15]
CHR HKLM-x32\...\Chrome\Extension: [ngpampappnmepgilojfohadhhmbhlaek] - C:\Program Files (x86)\Internet Download Manager\IDMGCExt.crx [2017-02-13]
==================== Serviços (Whitelisted) ====================
(Se uma entrada for incluída na fixlist, será removida do Registro. O arquivo não será movido, a menos que seja colocado separadamente.)
R2 APNMCP; C:\Program Files (x86)\AskPartnerNetwork\Toolbar\apnmcp.exe [202304 2016-11-15] (APN LLC.)
S3 ATLOISAService; C:\Windows\syswow64\ATLOISAService.exe [512000 2011-06-24] (Cmedia Electronics Inc.) [Arquivo não assinado]
R2 Bigfoot Networks Killer Service; C:\Program Files\Bigfoot Networks\Killer Network Manager\BFNService.exe [492032 2012-07-03] () [Arquivo não assinado]
R2 GbpSv; C:\Program Files (x86)\GbPlugin\gbpsv.exe [590048 2017-01-27] (GAS Tecnologia)
R2 InstallerWrapperService; C:\Program Files\TrueKey\InstallerWrapperService.exe [47688 2016-07-19] (McAfee, Inc.)
S3 McComponentHostService; C:\Program Files\McAfee Security Scan\3.11.500\McCHSvc.exe [329480 2017-01-19] (McAfee, Inc.)
S2 SpyHunter 4 Service; C:\Program Files\Enigma Software Group\SpyHunter\SH4Service.exe [859816 2016-11-14] (Enigma Software Group USA, LLC.)
S3 SwitchBoard; C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated) [Arquivo não assinado]
R2 Warsaw Technology; C:\Program Files\Diebold\Warsaw\core.exe [1058864 2016-05-11] (GAS Tecnologia LTDA)
R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2009-07-13] (Microsoft Corporation)
===================== Drivers (Whitelisted) ======================
(Se uma entrada for incluída na fixlist, será removida do Registro. O arquivo não será movido, a menos que seja colocado separadamente.)
S3 BfEdge7x64; C:\Windows\System32\DRIVERS\Edge7x64.sys [31336 2012-07-03] (Bigfoot Networks, Inc.)
R3 BFN7x64; C:\Windows\System32\DRIVERS\Xeno7x64.sys [157288 2012-07-03] (Bigfoot Networks, Inc.)
S3 DFX11_1; C:\Windows\System32\drivers\dfx11_1x64.sys [28008 2015-08-31] (Windows (R) Win 7 DDK provider)
R3 DFX12; C:\Windows\System32\drivers\dfx12x64.sys [29688 2015-11-12] (Windows (R) Win 7 DDK provider)
S3 esgiguard; C:\Program Files\Enigma Software Group\SpyHunter\esgiguard.sys [15920 2016-11-02] (Enigma Software Group USA, LLC.)
S3 EsgScanner; C:\Windows\System32\DRIVERS\EsgScanner.sys [22704 2016-11-02] ()
S1 gbpddfac; C:\Windows\System32\drivers\gbpddfac64.sys [28888 2017-02-12] (GAS Tecnologia)
R0 gbpddreg; C:\Windows\System32\drivers\gbpddreg64.sys [29816 2017-03-10] (GAS Tecnologia)
R3 GBPRCM; C:\Program Files (x86)\GbPlugin\gbprcm64.sys [29912 2015-12-04] (GAS Tecnologia)
R3 mamba2; C:\Windows\System32\DRIVERS\mamba2.sys [11776 2012-12-10] (Razer USA Ltd)
R3 MTsensor; C:\Windows\System32\DRIVERS\ASACPI.sys [8192 2005-03-29] ()
R3 USBUAA; C:\Windows\System32\DRIVERS\USBUAA.SYS [140544 2011-09-06] (C-Media Inc.)
R3 Warsaw_PP; C:\Program Files (x86)\GbPlugin\wsftprp64.sys [24792 2015-12-04] (GAS Tecnologia LTDA)
R4 WinDivert1.1; C:\Program Files\Diebold\Warsaw\WinDivert64.sys [38104 2015-07-07] (Basil)
R1 wsddfac; C:\Windows\System32\drivers\wsddfac.sys [101080 2017-03-10] (GAS Tecnologia)
R1 wsddpp; C:\Windows\system32\drivers\wsddpp.sys [103640 2015-03-18] (GAS Tecnologia)
U0 aswVmm; não ImagePath
S3 Synth3dVsc; System32\drivers\synth3dvsc.sys [X]
S3 tsusbhub; system32\drivers\tsusbhub.sys [X]
S3 VGPU; System32\drivers\rdvgkmd.sys [X]
==================== NetSvcs (Whitelisted) ===================
(Se uma entrada for incluída na fixlist, será removida do Registro. O arquivo não será movido, a menos que seja colocado separadamente.)
==================== Três Meses Criados arquivos e pastas ========
(Se uma entrada for incluída na fixlist, o arquivo/pasta será movido.)
2017-03-10 00:09 - 2017-03-10 00:09 - 00000000 ____D C:\FRST
2017-03-09 14:25 - 2017-03-10 00:04 - 00000358 _____ C:\Windows\Tasks\DriverToolkit Autorun.job
2017-03-09 14:25 - 2017-03-09 14:25 - 00002714 _____ C:\Windows\System32\Tasks\DriverToolkit Autorun
2017-03-09 11:41 - 2017-03-09 11:41 - 05929896 _____ C:\Users\edson\Downloads\Com o caminhoneiro na boleia - machosaonatural.com.br - XVIDEOS.COM.TS
2017-03-09 11:38 - 2017-03-09 11:38 - 43088284 _____ C:\Users\edson\Downloads\BICHONA ESCONDE CÂMERA, E GRAVA ENCONTRO SEXUAL COM HOMEM CASADO PAI DE FAMÍLIA! - XVIDEOS.COM.TS
2017-03-09 11:37 - 2017-03-09 11:37 - 51388672 _____ C:\Users\edson\Downloads\Coroa turco e seu garoto - machosaonatural.com.br - XVIDEOS.COM.TS
2017-03-09 11:35 - 2017-03-09 11:35 - 04529672 _____ C:\Users\edson\Downloads\Tio Joao e seu bitelao - machosaonatural.com.br - XVIDEOS.COM.TS
2017-03-09 11:32 - 2017-03-09 11:32 - 32281292 _____ C:\Users\edson\Downloads\Urso Pai Deixando Sobrinho Mamar seu Cacete www.daddytube.club - XVIDEOS.COM.TS
2017-03-09 11:22 - 2017-03-09 11:22 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\McAfee Security Scan Plus
2017-03-09 11:22 - 2017-03-09 11:22 - 00000000 ____D C:\Program Files\McAfee Security Scan
2017-03-09 11:14 - 2017-03-09 11:14 - 00000000 ____D C:\Users\edson\AppData\Local\DriverToolkit
2017-03-09 10:52 - 2017-03-09 11:22 - 00001964 _____ C:\Users\Public\Desktop\McAfee Security Scan Plus.lnk
2017-03-09 10:52 - 2017-03-09 10:52 - 00000000 ____D C:\Users\Todos os Usuários\McAfee Security Scan
2017-03-09 10:52 - 2017-03-09 10:52 - 00000000 ____D C:\ProgramData\McAfee Security Scan
2017-03-09 10:52 - 2017-03-09 10:52 - 00000000 ____D C:\Program Files\TrueKey
2017-03-09 10:45 - 2017-03-09 10:45 - 00000000 __SHD C:\Users\TEMP~1.EDS
2017-03-09 10:37 - 2017-03-09 10:37 - 00000000 ____D C:\308b32a86a3a4f6c10
2017-03-07 12:34 - 2017-03-07 12:34 - 00000000 ____D C:\521e103f8af7749468d5f7
2017-03-06 10:47 - 2017-03-06 10:47 - 01034556 _____ C:\Users\edson\Downloads\Windows6.1-KB2999226-x64.msu
2017-03-06 10:47 - 2017-03-06 10:47 - 00000000 ____D C:\7e9316f6bc29f9faf57fc4c605ae9d
2017-03-06 10:44 - 2017-03-09 10:45 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
2017-03-06 10:43 - 2017-03-09 10:45 - 00002515 _____ C:\Users\Public\Desktop\Skype.lnk
2017-03-06 10:39 - 2017-03-06 10:44 - 00000000 ___RD C:\Program Files (x86)\Skype
2017-03-05 12:10 - 2017-03-05 12:10 - 00000000 ____D C:\Users\Todos os Usuários\AskPartnerNetwork
2017-03-05 12:10 - 2017-03-05 12:10 - 00000000 ____D C:\ProgramData\AskPartnerNetwork
2017-03-05 12:10 - 2017-03-05 12:10 - 00000000 ____D C:\Program Files (x86)\AskPartnerNetwork
2017-03-05 12:10 - 2013-05-23 08:52 - 00386560 _____ (Dart Communications) C:\Windows\SysWOW64\DartSecure2.dll
2017-03-05 12:10 - 2013-05-23 08:52 - 00234496 _____ (Dart Communications) C:\Windows\SysWOW64\DartCertificate.dll
2017-03-05 12:10 - 2013-05-06 12:17 - 00425472 _____ (Dart Communications) C:\Windows\SysWOW64\DartSock.dll
2017-03-05 12:10 - 2008-08-18 18:18 - 00077824 _____ (Fox Magic Software) C:\Windows\SysWOW64\fmcodec.DLL
2017-03-04 14:34 - 2017-03-04 14:34 - 00000000 ____D C:\Users\Todos os Usuários\Package Cache
2017-03-04 14:34 - 2017-03-04 14:34 - 00000000 ____D C:\ProgramData\Package Cache
2017-03-04 11:43 - 2017-03-04 11:43 - 370053151 _____ C:\Users\edson\Downloads\Varios Artistas - As 100 Mais Nacionais de Novelas (1).rar
2017-03-04 10:35 - 2017-03-04 10:35 - 68571657 _____ C:\Users\edson\Downloads\RITCHIE - OUTRA VEZ AO VIVO NO ESTÚDIO(2009).rar
2017-03-04 10:33 - 2017-03-04 10:33 - 35051700 _____ C:\Users\edson\Downloads\Ritchie - Tigres de Bengala.rar
2017-03-04 10:13 - 2017-03-04 11:39 - 00000000 ____D C:\Users\edson\Downloads\MUSICAS ANTIGAS
2017-03-04 01:45 - 2017-03-04 01:45 - 183659957 _____ C:\Users\edson\Downloads\Varios Artistas - As 100 Mais da MPB - Parte 1.rar
2017-03-04 01:43 - 2017-03-04 01:43 - 186708494 _____ C:\Users\edson\Downloads\Varios Artistas - As 100 Mais da MPB - Parte 2.rar
2017-03-04 01:42 - 2017-03-04 01:42 - 262991458 _____ C:\Users\edson\Downloads\Populares - Velhos Tempos - 4CDS.rar
2017-03-04 01:40 - 2017-03-04 01:40 - 55791784 _____ C:\Users\edson\Downloads\Gilliard - Pérolas 2000.rar
2017-03-04 01:39 - 2017-03-04 01:39 - 51731248 _____ C:\Users\edson\Downloads\Sucessos Sertanejos Originais, Vol. 1.rar
2017-03-04 01:37 - 2017-03-04 01:37 - 60253934 _____ C:\Users\edson\Downloads\Cantores Populares, Vol. 2 - Anos 80.rar
2017-03-04 01:37 - 2017-03-04 01:37 - 370053151 _____ C:\Users\edson\Downloads\Varios Artistas - As 100 Mais Nacionais de Novelas.rar
2017-03-04 01:20 - 2017-03-04 01:20 - 00000000 ____D C:\Users\edson\Downloads\Passageiros 2017 Bluray 1080p Dublado - WWW.THEPIRATEFILMES.COM
2017-03-04 01:19 - 2017-03-04 01:19 - 00000000 ____D C:\Users\edson\Downloads\Sing 2017 Bluray 720p Legendado - WWW.THEPIRATEFILMES.COM
2017-03-03 00:20 - 2017-03-03 00:20 - 00001724 _____ C:\Users\Public\Desktop\IRPF2017 - Declaração de Ajuste Anual, Final de Espólio e Saída Definitiva do País.lnk
2017-03-03 00:20 - 2017-03-03 00:20 - 00000000 ___HD C:\Program Files (x86)\InstallJammer Registry
2017-03-03 00:20 - 2017-03-03 00:20 - 00000000 ____D C:\Users\edson\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Programas RFB2017
2017-03-03 00:20 - 2017-03-03 00:20 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Programas RFB2017
2017-03-03 00:20 - 2017-03-03 00:20 - 00000000 ____D C:\Arquivos de Programas RFB
2017-03-03 00:16 - 2017-03-03 00:16 - 00110144 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge-64.dll
2017-03-03 00:16 - 2017-03-03 00:16 - 00000000 ____D C:\Users\Todos os Usuários\Oracle
2017-03-03 00:16 - 2017-03-03 00:16 - 00000000 ____D C:\Users\edson\AppData\Roaming\Sun
2017-03-03 00:16 - 2017-03-03 00:16 - 00000000 ____D C:\Users\edson\AppData\LocalLow\Sun
2017-03-03 00:16 - 2017-03-03 00:16 - 00000000 ____D C:\ProgramData\Oracle
2017-03-03 00:16 - 2017-03-03 00:16 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2017-03-03 00:16 - 2017-03-03 00:16 - 00000000 ____D C:\Program Files\Java
2017-03-01 11:01 - 2017-03-01 11:01 - 00000328 _____ C:\Users\edson\Downloads\cb_backups_codes_edbrasil.txt
2017-02-25 01:35 - 2017-02-25 01:35 - 00000000 ____D C:\Users\edson\Downloads\Assassins.Creed.2016.1080p.HDRip.x264.DUAL-WWW.TORRENTDOSFILMES.COM
2017-02-24 01:13 - 2017-02-24 01:13 - 00000000 ____D C:\Users\edson\Downloads\Comando Kill 2017 Bluray 1080p Dublado - WWW.THEPIRATESHARE.COM
2017-02-23 11:58 - 2017-02-23 11:58 - 00000000 ____D C:\Users\edson\Downloads\Assassins Creed 2017 WEBRip 720p Legendado - WWW.THEPIRATESHARE.COM
2017-02-19 20:49 - 2017-02-19 20:49 - 00000000 ____D C:\Users\edson\Downloads\Montanha Taoísta 1080p (2017) Dublado BluRay -- By - Lucas Firmo
2017-02-19 20:29 - 2017-02-19 20:29 - 00000000 ____D C:\Users\edson\Downloads\10000 Anos Depois 2017 WEBRip 1080p Dublado - WWW.THEPIRATESHARE.COM
2017-02-19 20:28 - 2017-02-19 20:28 - 00000000 ____D C:\Users\edson\Downloads\Abril e o Mundo Extraordinário 2017 Bluray 1080p Dublado - WWW.THEPIRATESHARE.COM
2017-02-19 20:25 - 2017-02-19 20:25 - 00000000 ____D C:\Users\edson\Downloads\iBoy 2017 1080p WEBRip Dublado - WWW.THEPIRATESHARE.COM
2017-02-19 20:23 - 2017-02-19 20:23 - 00000000 ____D C:\Users\edson\Downloads\Emerald City s01e06 720p Legendado - WWW.THEPIRATESHARE.COM
2017-02-19 20:23 - 2017-02-19 20:23 - 00000000 ____D C:\Users\edson\Downloads\A Lenda do Rei Macaco A Volta do Herói 2017 720p WEB-DL Dublado - WWW.THEPIRATESHARE.COM
2017-02-19 20:21 - 2017-02-19 20:21 - 00000000 ____D C:\Users\edson\Downloads\Emerald City S01E05 720p Legendado - WWW.THEPIRATESHARE.COM
2017-02-19 20:20 - 2017-02-19 20:20 - 00000000 ____D C:\Users\edson\Downloads\Emerald City s01e04 2017 720p Legendado - WWW.THEPIRATESHARE.COM
2017-02-19 20:13 - 2017-02-19 20:13 - 00000000 ____D C:\Users\edson\Downloads\Emerald City s01e03 2017 720p Legendado - WWW.THEPIRATESHARE.COM
2017-02-19 20:13 - 2017-02-19 20:13 - 00000000 ____D C:\Users\edson\Downloads\Emerald City s01e01 720p Legendado - TPF
2017-02-19 20:11 - 2017-02-19 20:11 - 00000000 ____D C:\Users\edson\Downloads\A Volta do Juízo Final 2016 1080p WEB-DL Dublado - WWW.THEPIRATESHARE.COM
2017-02-19 20:10 - 2017-02-19 20:10 - 00000000 ____D C:\Users\edson\Downloads\O Shaolin Do Sertão 2017 1080p HDTV NACIONAL-WWW.THEPIRATESHARE.COM
2017-02-19 20:10 - 2017-02-19 20:10 - 00000000 ____D C:\Users\edson\Downloads\O Despertar da Lenda 1080p (2017) Dublado BluRay -- By - Lucas Firmo
2017-02-19 20:03 - 2017-02-19 20:03 - 00000000 ____D C:\Users\edson\Downloads\Moana - Um Mar de Aventuras (2017) Legendado 1080p By-LuanHarper
2017-02-16 13:22 - 2017-02-16 13:22 - 00002144 _____ C:\Users\Public\Desktop\Google Earth.lnk
2017-02-16 13:22 - 2017-02-16 13:22 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Earth
2017-02-16 12:17 - 2017-02-16 12:17 - 00000000 ____D C:\Users\edson\Downloads\Anjos da Noite - Guerras de Sangue 1080p (2017) Dublado BluRay -- By - Lucas Firmo
2017-02-16 12:14 - 2017-02-16 12:14 - 00000000 ____D C:\Users\edson\Downloads\Legion S01E01 720p Dublado - WWW.THEPIRATESHARE.COM
2017-02-16 12:07 - 2017-02-16 12:07 - 00000000 ____D C:\Users\edson\Downloads\Doutor Estranho 2016 Bluray 1080p Legendado - WWWW.THEPIRATESHARE.COM
2017-02-13 14:14 - 2016-10-17 12:35 - 00223464 _____ (Tonec Inc.) C:\Windows\system32\Drivers\idmwfp.sys
2017-02-13 11:35 - 2017-02-13 11:36 - 00000000 ____D C:\Users\TEMP
2017-02-13 11:35 - 2017-02-13 11:35 - 00000000 _____ C:\Users\TEMP\AppData\Local\{8FE4F07A-E5E3-4B5B-8554-0E0A7E4FDCEC}
2017-02-08 23:34 - 2017-02-08 23:34 - 00856047 _____ C:\Users\edson\Downloads\router_table.skp
2017-02-08 10:11 - 2016-08-06 16:13 - 00000000 ___RD C:\Users\edson\Downloads\Jaco e Jacozinho - Viola Divina
2017-02-02 12:43 - 2017-02-02 12:43 - 68314203 _____ C:\Users\edson\Downloads\Jaco e Jacozinho - 24 Sucessos.rar
2017-02-02 00:01 - 2017-02-02 00:01 - 2572295247 _____ C:\Users\edson\Downloads\Amigo.rar
2017-02-01 23:42 - 2017-02-01 23:42 - 2231106674 _____ C:\Users\edson\Downloads\Infinity.rar
2017-02-01 23:40 - 2017-02-01 23:40 - 2501739073 _____ C:\Users\edson\Downloads\IGO8.rar
2017-02-01 23:35 - 2017-02-02 00:02 - 00000000 ____D C:\Users\edson\Downloads\GPS 2017 ATUALIZAÇÃO
2017-02-01 23:35 - 2017-02-01 23:35 - 00000000 ____D C:\Users\edson\Downloads\GFPS BACK UP
2017-02-01 23:19 - 2017-02-01 23:19 - 00933424 _____ C:\Users\edson\Downloads\Menu.rar
2017-01-29 12:29 - 2017-01-29 12:37 - 00000000 ____D C:\Users\edson\Downloads\Trollhunters 2016 1ª WEBRip 720p Temporada Completa Dublado - WWW.THEPIRATESHARE.COM
2017-01-29 12:27 - 2017-01-29 12:28 - 00000000 ____D C:\Users\edson\Downloads\Liga da Justiça Sombria 1080p (2017) Dublado BluRay -- By - Lucas Firmo
2017-01-27 23:06 - 2017-03-08 00:15 - 00000000 ____D C:\Users\edson\AppData\Local\ElevatedDiagnostics
2017-01-13 00:50 - 2017-03-04 01:18 - 00000000 ____D C:\Users\edson\AppData\LocalLow\BitTorrent
2017-01-09 12:00 - 2017-03-10 00:03 - 00101080 _____ (GAS Tecnologia) C:\Windows\system32\Drivers\wsddfac.sys
2017-01-09 12:00 - 2017-01-09 12:00 - 00000000 ___HD C:\Program Files (x86)\GAS Tecnologia
2017-01-09 12:00 - 2017-01-09 12:00 - 00000000 ___HD C:\Program Files (x86)\Diebold
2017-01-09 12:00 - 2015-03-18 09:23 - 00103640 ____N (GAS Tecnologia) C:\Windows\system32\Drivers\wsddpp.sys
2017-01-09 11:57 - 2017-01-09 12:00 - 00000000 ____D C:\Program Files\Diebold
2017-01-09 11:56 - 2017-01-09 12:00 - 00000000 ____D C:\Users\Todos os Usuários\Temp
2017-01-09 11:56 - 2017-01-09 12:00 - 00000000 ____D C:\ProgramData\Temp
2016-12-25 18:27 - 2017-01-21 11:56 - 00000000 ____D C:\Users\edson\Documents\Bulk Image Downloader
2016-12-25 18:25 - 2016-12-30 09:09 - 00000000 ____D C:\Users\edson\AppData\Roaming\BID
2016-12-25 18:25 - 2016-12-30 09:01 - 00001133 _____ C:\Users\edson\Desktop\BID Queue Manager.lnk
2016-12-25 18:25 - 2016-12-30 09:01 - 00001067 _____ C:\Users\edson\Desktop\Bulk Image Downloader.lnk
2016-12-25 18:25 - 2016-12-30 09:01 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Bulk Image Downloader
2016-12-25 18:25 - 2016-12-30 09:01 - 00000000 ____D C:\Program Files (x86)\Bulk Image Downloader
2016-12-19 09:36 - 2016-12-19 09:36 - 00000000 ____D C:\Users\edson\AppData\LocalLow\Google
2016-12-18 13:53 - 2016-12-18 13:53 - 00014820 _____ C:\Windows\system32\neste-quarto-de-245-m-a-arquiteta-mayra-lopes-recorreu-ao-branco-bege-e-o-amadeirado-para-compor-a-cartela-de-cores-na-parede-atras-da-cama-papel-de-parede-arabescado-que-compoe-1379017475970_1024x682.lnk
2016-12-12 23:34 - 2016-12-12 23:34 - 00000011 _____ C:\Users\edson\Desktop\PISPASEP.txt
==================== Três Meses Modificados arquivos e pastas ========
(Se uma entrada for incluída na fixlist, o arquivo/pasta será movido.)
2017-03-10 00:09 - 2009-07-14 14:55 - 00663606 _____ C:\Windows\system32\prfh0416.dat
2017-03-10 00:09 - 2009-07-14 14:55 - 00127896 _____ C:\Windows\system32\prfc0416.dat
2017-03-10 00:09 - 2009-07-14 02:13 - 01517030 _____ C:\Windows\system32\PerfStringBackup.INI
2017-03-10 00:09 - 2009-07-14 00:20 - 00000000 ____D C:\Windows\inf
2017-03-10 00:04 - 2016-11-18 10:07 - 00029816 _____ (GAS Tecnologia) C:\Windows\system32\Drivers\gbpddreg64.sys
2017-03-10 00:03 - 2016-11-18 10:07 - 00000000 ____D C:\Users\Todos os Usuários\GbPlugin
2017-03-10 00:03 - 2016-11-18 10:07 - 00000000 ____D C:\ProgramData\GbPlugin
2017-03-10 00:03 - 2016-11-18 10:07 - 00000000 ____D C:\Program Files (x86)\GbPlugin
2017-03-10 00:03 - 2009-07-14 02:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2017-03-09 14:25 - 2016-10-26 01:04 - 00000000 ____D C:\Users\edson\AppData\Roaming\DMCache
2017-03-09 13:53 - 2016-10-29 12:02 - 00000902 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2017-03-09 13:32 - 2016-10-27 09:32 - 00000978 _____ C:\Windows\Tasks\Yahoo! Powered lisir.job
2017-03-09 12:32 - 2016-10-27 09:32 - 00000000 ____D C:\Users\Todos os Usuários\{4AC58FA6-C087-0560-4641-9B22DC0310EC}
2017-03-09 12:32 - 2016-10-27 09:32 - 00000000 ____D C:\ProgramData\{4AC58FA6-C087-0560-4641-9B22DC0310EC}
2017-03-09 12:15 - 2016-10-26 01:04 - 00000000 ____D C:\Users\edson\Downloads\Video
2017-03-09 11:20 - 2009-07-14 01:45 - 00013232 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2017-03-09 11:20 - 2009-07-14 01:45 - 00013232 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2017-03-09 11:13 - 2016-10-29 12:02 - 00000964 _____ C:\Windows\Tasks\Adobe Flash Player PPAPI Notifier.job
2017-03-09 10:52 - 2016-10-29 12:02 - 00802904 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2017-03-09 10:52 - 2016-10-29 12:02 - 00144472 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2017-03-09 10:52 - 2016-10-29 12:02 - 00003958 _____ C:\Windows\System32\Tasks\Adobe Flash Player PPAPI Notifier
2017-03-09 10:52 - 2016-10-29 12:02 - 00003840 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2017-03-09 10:52 - 2016-10-29 12:02 - 00000000 ____D C:\Windows\SysWOW64\Macromed
2017-03-09 10:52 - 2016-10-29 12:02 - 00000000 ____D C:\Windows\system32\Macromed
2017-03-09 10:52 - 2016-10-29 12:02 - 00000000 ____D C:\Users\edson\AppData\Local\Adobe
2017-03-09 10:46 - 2009-07-14 02:09 - 00000000 ____D C:\Windows\System32\Tasks\WPD
2017-03-09 10:45 - 2016-10-26 11:45 - 00000000 ____D C:\Users\Todos os Usuários\Skype
2017-03-09 10:45 - 2016-10-26 11:45 - 00000000 ____D C:\ProgramData\Skype
2017-03-09 10:45 - 2009-07-14 01:57 - 00001547 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk
2017-03-09 10:37 - 2016-12-04 18:28 - 00000000 ____D C:\Users\edson\Downloads\Compressed
2017-03-08 00:18 - 2009-07-14 00:20 - 00000000 ____D C:\Windows\system32\NDF
2017-03-05 12:10 - 2016-10-25 11:08 - 00001186 _____ C:\Users\Public\Desktop\aTube Catcher.lnk
2017-03-05 12:10 - 2016-10-25 11:08 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\aTube Catcher
2017-03-04 14:34 - 2016-10-26 11:45 - 00000000 ____D C:\Users\edson\AppData\Roaming\Skype
2017-03-04 01:47 - 2016-10-26 13:09 - 00000000 ____D C:\Users\edson\AppData\Roaming\BitTorrent
2017-02-21 00:02 - 2016-10-26 01:04 - 00000000 ____D C:\Program Files (x86)\Internet Download Manager
2017-02-20 12:48 - 2016-10-26 01:04 - 00000000 ____D C:\Users\edson\AppData\Roaming\IDM
2017-02-16 13:22 - 2016-10-25 11:09 - 00000000 ____D C:\Program Files (x86)\Google
2017-02-15 07:53 - 2016-11-08 09:53 - 20636760 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerInstaller.exe
2017-02-13 11:35 - 2016-10-25 10:59 - 00000000 ____D C:\Users\Todos os Usuários\Bigfoot Networks
2017-02-13 11:35 - 2016-10-25 10:59 - 00000000 ____D C:\ProgramData\Bigfoot Networks
2017-02-12 20:48 - 2016-09-01 11:45 - 00000676 _____ C:\native log.txt
2017-02-12 20:46 - 2016-11-18 10:07 - 00028888 _____ (GAS Tecnologia) C:\Windows\system32\Drivers\gbpddfac64.sys
2017-02-08 10:11 - 2016-11-04 13:57 - 00000000 ____D C:\Users\edson\Downloads\VIDEOS SR MIGUE
2017-02-08 08:58 - 2016-10-25 10:56 - 00000000 ____D C:\Users\edson
==================== Arquivos na raiz de alguns diretórios =======
2016-10-26 08:49 - 2016-10-26 08:49 - 0000058 _____ () C:\Users\edson\AppData\Local\DonationCoder_ScreenshotCaptor_InstallInfo.dat
Alguns arquivos em TEMP:
====================
2016-11-08 12:36 - 2016-11-08 12:36 - 3580664 _____ () C:\Users\edson\AppData\Local\Temp\aplicativoitau.exe
2016-10-26 00:30 - 2016-10-26 00:31 - 17618816 _____ (DsNET Corp ) C:\Users\edson\AppData\Local\Temp\atcMedia1641477445416.exe
2017-03-05 12:09 - 2017-03-05 12:10 - 19844976 _____ (DsNET Corp ) C:\Users\edson\AppData\Local\Temp\atcMedia2371488715747.exe
2017-01-19 23:42 - 2017-01-19 23:42 - 1118360 _____ (© 2015 Microsoft Corporation) C:\Users\edson\AppData\Local\Temp\BSvcProcessor.exe
2017-01-19 23:42 - 2017-01-19 23:42 - 0170128 _____ (© 2015 Microsoft Corporation) C:\Users\edson\AppData\Local\Temp\BSvcUpdater.exe
2017-03-09 10:38 - 2017-03-09 10:38 - 4036096 _____ () C:\Users\edson\AppData\Local\Temp\EDSON-PC_edson_bggnz.Dll
2017-03-09 10:38 - 2017-03-09 10:38 - 5975552 _____ () C:\Users\edson\AppData\Local\Temp\EDSON-PC_edson_eoftnx.dll
2017-03-09 10:38 - 2017-03-09 10:38 - 5975552 _____ () C:\Users\edson\AppData\Local\Temp\EDSON-PC_edson_xcwvkj.dll
2016-10-27 09:44 - 2016-10-27 09:44 - 0010240 _____ () C:\Users\edson\AppData\Local\Temp\gwpu7wbq.dll
2016-10-27 09:40 - 2016-10-27 09:40 - 1889856 _____ ( ) C:\Users\edson\AppData\Local\Temp\ICReinstall_Baixaki_k-lite-mega-codec-pack.exe
2016-10-20 14:26 - 2016-10-20 14:26 - 2458672 _____ (The OpenSSL Project, http://www.openssl.org/) C:\Users\edson\AppData\Local\Temp\libeay32.dll
2016-10-27 09:43 - 2016-10-27 09:43 - 0008192 _____ () C:\Users\edson\AppData\Local\Temp\mnt1hymc.dll
2016-10-20 14:26 - 2016-10-20 14:26 - 0970912 _____ (Microsoft Corporation) C:\Users\edson\AppData\Local\Temp\msvcr120.dll
2016-10-25 11:12 - 2016-10-25 11:12 - 7060456 _____ (Logitech, Inc.) C:\Users\edson\AppData\Local\Temp\qc_e3f0f3ef_27e6_4ca8_8a7c_a3d761aa54bb_64.exe
2016-12-04 19:10 - 2017-01-19 11:13 - 43918808 _____ (Skype Technologies S.A.) C:\Users\edson\AppData\Local\Temp\SkypeSetup.exe
2016-10-20 14:26 - 2016-10-20 14:26 - 0772672 _____ () C:\Users\edson\AppData\Local\Temp\sqlite3.dll
2017-03-06 10:34 - 2017-03-06 10:42 - 14456872 _____ (Microsoft Corporation) C:\Users\edson\AppData\Local\Temp\vc_redist.x86.exe
2016-10-27 09:44 - 2016-10-27 09:44 - 0008704 _____ () C:\Users\edson\AppData\Local\Temp\x5cngg3v.dll
==================== Bamital & volsnap ======================
(Não há correção automática para arquivos que não passaram na verificação.)
C:\Windows\system32\winlogon.exe => O arquivo é assinado digitalmente
C:\Windows\system32\wininit.exe => O arquivo é assinado digitalmente
C:\Windows\SysWOW64\wininit.exe => O arquivo é assinado digitalmente
C:\Windows\explorer.exe => O arquivo é assinado digitalmente
C:\Windows\SysWOW64\explorer.exe => O arquivo é assinado digitalmente
C:\Windows\system32\svchost.exe => O arquivo é assinado digitalmente
C:\Windows\SysWOW64\svchost.exe => O arquivo é assinado digitalmente
C:\Windows\system32\services.exe => O arquivo é assinado digitalmente
C:\Windows\system32\User32.dll => O arquivo é assinado digitalmente
C:\Windows\SysWOW64\User32.dll => O arquivo é assinado digitalmente
C:\Windows\system32\userinit.exe => O arquivo é assinado digitalmente
C:\Windows\SysWOW64\userinit.exe => O arquivo é assinado digitalmente
C:\Windows\system32\rpcss.dll => O arquivo é assinado digitalmente
C:\Windows\system32\dnsapi.dll => O arquivo é assinado digitalmente
C:\Windows\SysWOW64\dnsapi.dll => O arquivo é assinado digitalmente
C:\Windows\system32\Drivers\volsnap.sys => O arquivo é assinado digitalmente
LastRegBack: 2017-03-04 17:20
==================== Fim de FRST.txt ============================
Executado por edson (administrador) em EDSON-PC (10-03-2017 00:09:58)
Executando a partir de C:\Users\edson\Downloads\Programs
Perfis Carregados: edson (Perfis Disponíveis: edson)
Platform: Windows 7 Ultimate Service Pack 1 (X64) Idioma: Português (Brasil)
Internet Explorer Versão 8 (Navegador padrão: Chrome)
Modo da Inicialização: Normal
Tutorial da Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Processos (Whitelisted) =================
(Se uma entrada for incluída na fixlist, o processo será fechado. O arquivo não será movido.)
(GAS Tecnologia) C:\Program Files (x86)\GbPlugin\gbpsv.exe
(AMD) C:\Windows\System32\atiesrxx.exe
(Logitech Inc.) C:\Program Files (x86)\Common Files\logishrd\LVMVFM\UMVPFSrv.exe
(AMD) C:\Windows\System32\atieclxx.exe
(APN LLC.) C:\Program Files (x86)\AskPartnerNetwork\Toolbar\apnmcp.exe
() C:\Program Files\Bigfoot Networks\Killer Network Manager\BFNService.exe
(McAfee, Inc.) C:\Program Files\TrueKey\InstallerWrapperService.exe
(GAS Tecnologia LTDA) C:\Program Files\Diebold\Warsaw\core.exe
(GAS Tecnologia) C:\Program Files (x86)\GbPlugin\gbpsv.exe
(Megaify Software Co., Ltd.) C:\Program Files (x86)\DriverToolkit\DriverToolkit.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(ASUSTek Computer Inc.) C:\Program Files\ROG Thunderbolt Audio\CPL\ROG ThunderBolt Audio.exe
() C:\Windows\SysWOW64\ExMgr.exe
(GAS Tecnologia LTDA) C:\Program Files\Diebold\Warsaw\core.exe
(Tonec Inc.) C:\Program Files (x86)\Internet Download Manager\IDMan.exe
(The Chromium Authors) C:\Users\edson\AppData\Local\chromium\Application\chrome.exe
(Antibody Software) C:\Program Files (x86)\Bulk Image Downloader\BIDDropBox.exe
(© 2015 Microsoft Corporation) C:\Users\edson\AppData\Local\Microsoft\BingSvc\BingSvc.exe
(McAfee, Inc.) C:\Program Files\McAfee Security Scan\3.11.500\SSScheduler.exe
(The Chromium Authors) C:\Users\edson\AppData\Local\chromium\Application\chrome.exe
(Razer USA Ltd) C:\Program Files (x86)\Razer\Mamba\RazerMambaSysTray.exe
() C:\Program Files (x86)\DFX\DFX.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(APN) C:\Program Files (x86)\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe
() C:\Program Files (x86)\DFX\Universal\Apps\DfxSharedApp32.exe
() C:\Program Files (x86)\DFX\Universal\Apps\DfxSharedApp64.exe
(The Chromium Authors) C:\Users\edson\AppData\Local\chromium\Application\chrome.exe
(Tonec Inc.) C:\Program Files (x86)\Internet Download Manager\IEMonitor.exe
(The Chromium Authors) C:\Users\edson\AppData\Local\chromium\Application\chrome.exe
(The Chromium Authors) C:\Users\edson\AppData\Local\chromium\Application\chrome.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.32.7\GoogleCrashHandler.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.32.7\GoogleCrashHandler64.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\System32\wbem\WMIADAP.exe
==================== Registro (Whitelisted) ====================
(Se uma entrada for incluída na fixlist, o ítem no Registro será restaurado para o padrão ou removido. O arquivo não será movido.)
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [8484056 2015-06-12] (Realtek Semiconductor)
HKLM\...\Run: [Cm6620Sound] => C:\Program Files\ROG Thunderbolt Audio\CPL\ROG ThunderBolt Audio.exe [314368 2011-09-09] (ASUSTek Computer Inc.)
HKLM\...\Run: [EX_Hook] => C:\Windows\syswow64\ExMgr.exe [204800 2011-02-25] ()
HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [446392 2012-04-04] (Adobe Systems Incorporated)
HKLM\...\Run: [Diebold - Warsaw] => C:\Program Files\Diebold\Warsaw\core.exe [1058864 2016-05-11] (GAS Tecnologia LTDA)
HKLM-x32\...\Run: [Razer Mamba Elite Driver] => C:\Program Files (x86)\Razer\Mamba\RazerMambaSysTray.exe [974864 2012-12-21] (Razer USA Ltd)
HKLM-x32\...\Run: [DFX] => C:\Program Files (x86)\DFX\DFX.exe [1596920 2016-10-13] ()
HKLM-x32\...\Run: [SwitchBoard] => C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [AdobeCS6ServiceManager] => C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe [1073312 2012-03-09] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [587288 2016-12-12] (Oracle Corporation)
HKLM-x32\...\Run: [ApnTBMon] => C:\Program Files (x86)\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe [1928768 2016-11-15] (APN)
Winlogon\Notify\ GbPluginUni: C:\Program Files (x86)\GbPlugin\gbiehUni.dll [2017-01-27] (Banco Itaú Unibanco)
HKU\S-1-5-21-707682792-1128049521-3259909178-1001\...\Run: [IDMan] => C:\Program Files (x86)\Internet Download Manager\IDMan.exe [4019312 2017-02-13] (Tonec Inc.)
HKU\S-1-5-21-707682792-1128049521-3259909178-1001\...\Run: [Chromium] => c:\users\edson\appdata\local\chromium\application\chrome.exe [1068544 2016-03-18] (The Chromium Authors)
HKU\S-1-5-21-707682792-1128049521-3259909178-1001\...\Run: [AdobeBridge] => [X]
HKU\S-1-5-21-707682792-1128049521-3259909178-1001\...\Run: [BID Drop Box] => C:\Program Files (x86)\Bulk Image Downloader\BIDDropBox.exe [1210576 2015-06-05] (Antibody Software)
HKU\S-1-5-21-707682792-1128049521-3259909178-1001\...\Run: [BingSvc] => C:\Users\edson\AppData\Local\Microsoft\BingSvc\BingSvc.exe [144008 2015-11-05] (© 2015 Microsoft Corporation)
HKU\S-1-5-21-707682792-1128049521-3259909178-1001\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [27534808 2017-02-14] (Skype Technologies S.A.)
HKU\S-1-5-21-707682792-1128049521-3259909178-1001\...\MountPoints2: {5c02107d-bc60-11e6-bed0-f46d04240343} - "H:\WD SmartWare.exe" autoplay=true
HKU\S-1-5-18\...\RunOnce: [SPReview] => C:\Windows\System32\SPReview\SPReview.exe [301568 2016-11-02] (Microsoft Corporation)
ShellExecuteHooks-x32: GbPluginObj Class - {E37CB5F0-51F5-4395-A808-5FA49E399008} - C:\PROGRAM FILES (X86)\GbPlugin\gbiehuni.dll [1951968 2017-01-27] (Banco Itaú Unibanco)
ShellIconOverlayIdentifiers: [ IDM Shell Extension] -> {CDC95B92-E27C-4745-A8C5-64A52A78855D} => C:\Program Files (x86)\Internet Download Manager\IDMShellExt64.dll [2015-08-14] (Tonec Inc.)
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => -> Nenhum Arquivo
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Bigfoot Killer Network Manager.lnk [2016-10-25]
ShortcutTarget: Bigfoot Killer Network Manager.lnk -> C:\Program Files\Bigfoot Networks\Killer Network Manager\KillerNetManager.exe ()
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\McAfee Security Scan Plus.lnk [2017-03-09]
ShortcutTarget: McAfee Security Scan Plus.lnk -> C:\Program Files\McAfee Security Scan\3.11.500\SSScheduler.exe (McAfee, Inc.)
GroupPolicy: Restrição <======= ATENÇÃO
CHR HKLM\SOFTWARE\Policies\Google: Restrição <======= ATENÇÃO
==================== Internet (Whitelisted) ====================
(Se um ítem for incluído na fixlist, sendo um ítem do Registro, será removido ou restaurado para o padrão.)
Winsock: Catalog9 01 C:\Windows\SysWOW64\BfLLR.dll [174592 2012-07-03] (Bigfoot Networks, Inc.)
Winsock: Catalog9 02 C:\Windows\SysWOW64\BfLLR.dll [174592 2012-07-03] (Bigfoot Networks, Inc.)
Winsock: Catalog9 03 C:\Windows\SysWOW64\BfLLR.dll [174592 2012-07-03] (Bigfoot Networks, Inc.)
Winsock: Catalog9 04 C:\Windows\SysWOW64\BfLLR.dll [174592 2012-07-03] (Bigfoot Networks, Inc.)
Winsock: Catalog9 15 C:\Windows\SysWOW64\BfLLR.dll [174592 2012-07-03] (Bigfoot Networks, Inc.)
Winsock: Catalog9-x64 01 C:\Windows\system32\BfLLR.dll [189952 2012-07-03] (Bigfoot Networks, Inc.)
Winsock: Catalog9-x64 02 C:\Windows\system32\BfLLR.dll [189952 2012-07-03] (Bigfoot Networks, Inc.)
Winsock: Catalog9-x64 03 C:\Windows\system32\BfLLR.dll [189952 2012-07-03] (Bigfoot Networks, Inc.)
Winsock: Catalog9-x64 04 C:\Windows\system32\BfLLR.dll [189952 2012-07-03] (Bigfoot Networks, Inc.)
Winsock: Catalog9-x64 15 C:\Windows\system32\BfLLR.dll [189952 2012-07-03] (Bigfoot Networks, Inc.)
Hosts: 0.0.0.1 mssplus.mcafee.com
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1 192.168.1.1
Tcpip\..\Interfaces\{A9985670-73C1-4ACC-A752-5A76348B9FD4}: [DhcpNameServer] 192.168.1.1 192.168.1.1
Tcpip\..\Interfaces\{CCF963E1-4F13-41C2-836D-1564393FCB11}: [DhcpNameServer] 192.168.1.1 192.168.1.1
Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page =
HKU\S-1-5-21-707682792-1128049521-3259909178-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.msn.com/?pc=SK216&ocid=SK216DHP&osmkt=pt-br
HKU\S-1-5-21-707682792-1128049521-3259909178-1001\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://www.msn.com/pt-br/?ocid=iehp
SearchScopes: HKLM -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM-x32 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM-x32 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-707682792-1128049521-3259909178-1001 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-707682792-1128049521-3259909178-1001 -> {2211d4a5-48d0-47f5-a7cd-81e861470f7f} URL = hxxp://www.bing.com/search?FORM=SK216DF&PC=SK216&q={searchTerms}&src=IE-SearchBox
BHO: IDM integration (IDMIEHlprObj Class) -> {0055C089-8582-441B-A0BF-17B458C2A3A8} -> C:\Program Files (x86)\Internet Download Manager\IDMIECC64.dll [2016-12-10] (Internet Download Manager, Tonec Inc.)
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_121\bin\ssv.dll [2017-03-03] (Oracle Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_121\bin\jp2ssv.dll [2017-03-03] (Oracle Corporation)
BHO-x32: IDM integration (IDMIEHlprObj Class) -> {0055C089-8582-441B-A0BF-17B458C2A3A8} -> C:\Program Files (x86)\Internet Download Manager\IDMIECC.dll [2016-12-10] (Internet Download Manager, Tonec Inc.)
BHO-x32: GbIehObj Class -> {C41A1C0E-EA6C-11D4-B1B8-444553540008} -> C:\PROGRAM FILES (X86)\GBPLUGIN\gbiehuni.dll [2017-01-27] (Banco Itaú Unibanco)
Toolbar: HKU\S-1-5-21-707682792-1128049521-3259909178-1001 -> Sem Nome - {41545533-2D54-4D47-00A7-7A786E7484D7} - Nenhum Arquivo
Filter: deflate - {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\Windows\system32\urlmon.dll [2010-11-20] (Microsoft Corporation)
Filter-x32: deflate - {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\Windows\SysWOW64\urlmon.dll [2010-11-20] (Microsoft Corporation)
Filter: gzip - {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\Windows\system32\urlmon.dll [2010-11-20] (Microsoft Corporation)
Filter-x32: gzip - {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\Windows\SysWOW64\urlmon.dll [2010-11-20] (Microsoft Corporation)
FireFox:
========
FF HKU\S-1-5-21-707682792-1128049521-3259909178-1001\...\SeaMonkey\Extensions: [mozilla_cc@internetdownloadmanager.com] - C:\Users\edson\AppData\Roaming\IDM\idmmzcc5
FF Extension: (IDM CC) - C:\Users\edson\AppData\Roaming\IDM\idmmzcc5 [2017-03-10] [não assinado]
FF HKU\S-1-5-21-707682792-1128049521-3259909178-1001\...\SeaMonkey\Extensions: [mozilla_cc2@internetdownloadmanager.com] - C:\Program Files (x86)\Internet Download Manager\idmmzcc2.xpi
FF Extension: (IDM integration) - C:\Program Files (x86)\Internet Download Manager\idmmzcc2.xpi [2017-01-26]
FF Plugin: @java.com/DTPlugin,version=11.121.2 -> C:\Program Files\Java\jre1.8.0_121\bin\dtplugin\npDeployJava1.dll [2017-03-03] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.121.2 -> C:\Program Files\Java\jre1.8.0_121\bin\plugin2\npjp2.dll [2017-03-03] (Oracle Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.32.7\npGoogleUpdate3.dll [2016-12-16] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.32.7\npGoogleUpdate3.dll [2016-12-16] (Google Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2016-12-17] (Adobe Systems Inc.)
Chrome:
=======
CHR HomePage: Default -> teoma.com/?gct=hp
CHR StartupUrls: Default -> "hxxps://mail.google.com/mail/u/0/#inbox","hxxps://br0.forgeofempires.com/page/"
CHR Profile: C:\Users\edson\AppData\Local\Google\Chrome\User Data\Default [2017-03-10]
CHR Extension: (Google Apresentações) - C:\Users\edson\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2016-10-25]
CHR Extension: (Google Docs) - C:\Users\edson\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2016-10-25]
CHR Extension: (Google Drive) - C:\Users\edson\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2016-10-25]
CHR Extension: (internet Download Manager For Chrome) - C:\Users\edson\AppData\Local\Google\Chrome\User Data\Default\Extensions\blhjobkfabeopalncconblmakfcllmhk [2016-11-09]
CHR Extension: (YouTube) - C:\Users\edson\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2016-10-25]
CHR Extension: (Adblock Plus) - C:\Users\edson\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2016-10-26]
CHR Extension: (Teoma Shopping App) - C:\Users\edson\AppData\Local\Google\Chrome\User Data\Default\Extensions\cglobijmmnefeacmdjkgkimhjcidaedm [2017-03-05]
CHR Extension: (Teoma) - C:\Users\edson\AppData\Local\Google\Chrome\User Data\Default\Extensions\cohecngphbppjpaokeilaichhgggcmjb [2017-03-05]
CHR Extension: (Bing) - C:\Users\edson\AppData\Local\Google\Chrome\User Data\Default\Extensions\fcfenmboojpjinhpgggodefccipikbpd [2017-01-20]
CHR Extension: (Planilhas do Google) - C:\Users\edson\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2016-10-25]
CHR Extension: (Documentos Google off-line) - C:\Users\edson\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-10-25]
CHR Extension: (AdBlock) - C:\Users\edson\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2017-02-25]
CHR Extension: (Autodesk Homestyler) - C:\Users\edson\AppData\Local\Google\Chrome\User Data\Default\Extensions\kdmmkfaghgcicheaimnpffeeekheafkb [2016-10-25]
CHR Extension: (Planner 5D Design de Interior) - C:\Users\edson\AppData\Local\Google\Chrome\User Data\Default\Extensions\mcafejemebbngbglfoinpoaannbihjna [2016-10-25]
CHR Extension: (IDM Integration Module) - C:\Users\edson\AppData\Local\Google\Chrome\User Data\Default\Extensions\ngpampappnmepgilojfohadhhmbhlaek [2016-12-09]
CHR Extension: (Pagamentos da Chrome Web Store) - C:\Users\edson\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2017-03-09]
CHR Extension: (Gmail) - C:\Users\edson\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2016-10-25]
CHR Extension: (Chrome Media Router) - C:\Users\edson\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2017-02-07]
CHR HKLM\...\Chrome\Extension: [cglobijmmnefeacmdjkgkimhjcidaedm] - C:\ProgramData\AskPartnerNetwork\Toolbar\Shared\CRX\cglobijmmnefeacmdjkgkimhjcidaedm.crx [2016-11-15]
CHR HKLM\...\Chrome\Extension: [cohecngphbppjpaokeilaichhgggcmjb] - C:\ProgramData\AskPartnerNetwork\Toolbar\Shared\CRX\cohecngphbppjpaokeilaichhgggcmjb.crx [2016-11-15]
CHR HKLM\...\Chrome\Extension: [ngpampappnmepgilojfohadhhmbhlaek] - C:\Program Files (x86)\Internet Download Manager\IDMGCExt.crx [2017-02-13]
CHR HKU\S-1-5-21-707682792-1128049521-3259909178-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [fcfenmboojpjinhpgggodefccipikbpd] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [cglobijmmnefeacmdjkgkimhjcidaedm] - C:\ProgramData\AskPartnerNetwork\Toolbar\Shared\CRX\cglobijmmnefeacmdjkgkimhjcidaedm.crx [2016-11-15]
CHR HKLM-x32\...\Chrome\Extension: [cohecngphbppjpaokeilaichhgggcmjb] - C:\ProgramData\AskPartnerNetwork\Toolbar\Shared\CRX\cohecngphbppjpaokeilaichhgggcmjb.crx [2016-11-15]
CHR HKLM-x32\...\Chrome\Extension: [ngpampappnmepgilojfohadhhmbhlaek] - C:\Program Files (x86)\Internet Download Manager\IDMGCExt.crx [2017-02-13]
==================== Serviços (Whitelisted) ====================
(Se uma entrada for incluída na fixlist, será removida do Registro. O arquivo não será movido, a menos que seja colocado separadamente.)
R2 APNMCP; C:\Program Files (x86)\AskPartnerNetwork\Toolbar\apnmcp.exe [202304 2016-11-15] (APN LLC.)
S3 ATLOISAService; C:\Windows\syswow64\ATLOISAService.exe [512000 2011-06-24] (Cmedia Electronics Inc.) [Arquivo não assinado]
R2 Bigfoot Networks Killer Service; C:\Program Files\Bigfoot Networks\Killer Network Manager\BFNService.exe [492032 2012-07-03] () [Arquivo não assinado]
R2 GbpSv; C:\Program Files (x86)\GbPlugin\gbpsv.exe [590048 2017-01-27] (GAS Tecnologia)
R2 InstallerWrapperService; C:\Program Files\TrueKey\InstallerWrapperService.exe [47688 2016-07-19] (McAfee, Inc.)
S3 McComponentHostService; C:\Program Files\McAfee Security Scan\3.11.500\McCHSvc.exe [329480 2017-01-19] (McAfee, Inc.)
S2 SpyHunter 4 Service; C:\Program Files\Enigma Software Group\SpyHunter\SH4Service.exe [859816 2016-11-14] (Enigma Software Group USA, LLC.)
S3 SwitchBoard; C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated) [Arquivo não assinado]
R2 Warsaw Technology; C:\Program Files\Diebold\Warsaw\core.exe [1058864 2016-05-11] (GAS Tecnologia LTDA)
R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2009-07-13] (Microsoft Corporation)
===================== Drivers (Whitelisted) ======================
(Se uma entrada for incluída na fixlist, será removida do Registro. O arquivo não será movido, a menos que seja colocado separadamente.)
S3 BfEdge7x64; C:\Windows\System32\DRIVERS\Edge7x64.sys [31336 2012-07-03] (Bigfoot Networks, Inc.)
R3 BFN7x64; C:\Windows\System32\DRIVERS\Xeno7x64.sys [157288 2012-07-03] (Bigfoot Networks, Inc.)
S3 DFX11_1; C:\Windows\System32\drivers\dfx11_1x64.sys [28008 2015-08-31] (Windows (R) Win 7 DDK provider)
R3 DFX12; C:\Windows\System32\drivers\dfx12x64.sys [29688 2015-11-12] (Windows (R) Win 7 DDK provider)
S3 esgiguard; C:\Program Files\Enigma Software Group\SpyHunter\esgiguard.sys [15920 2016-11-02] (Enigma Software Group USA, LLC.)
S3 EsgScanner; C:\Windows\System32\DRIVERS\EsgScanner.sys [22704 2016-11-02] ()
S1 gbpddfac; C:\Windows\System32\drivers\gbpddfac64.sys [28888 2017-02-12] (GAS Tecnologia)
R0 gbpddreg; C:\Windows\System32\drivers\gbpddreg64.sys [29816 2017-03-10] (GAS Tecnologia)
R3 GBPRCM; C:\Program Files (x86)\GbPlugin\gbprcm64.sys [29912 2015-12-04] (GAS Tecnologia)
R3 mamba2; C:\Windows\System32\DRIVERS\mamba2.sys [11776 2012-12-10] (Razer USA Ltd)
R3 MTsensor; C:\Windows\System32\DRIVERS\ASACPI.sys [8192 2005-03-29] ()
R3 USBUAA; C:\Windows\System32\DRIVERS\USBUAA.SYS [140544 2011-09-06] (C-Media Inc.)
R3 Warsaw_PP; C:\Program Files (x86)\GbPlugin\wsftprp64.sys [24792 2015-12-04] (GAS Tecnologia LTDA)
R4 WinDivert1.1; C:\Program Files\Diebold\Warsaw\WinDivert64.sys [38104 2015-07-07] (Basil)
R1 wsddfac; C:\Windows\System32\drivers\wsddfac.sys [101080 2017-03-10] (GAS Tecnologia)
R1 wsddpp; C:\Windows\system32\drivers\wsddpp.sys [103640 2015-03-18] (GAS Tecnologia)
U0 aswVmm; não ImagePath
S3 Synth3dVsc; System32\drivers\synth3dvsc.sys [X]
S3 tsusbhub; system32\drivers\tsusbhub.sys [X]
S3 VGPU; System32\drivers\rdvgkmd.sys [X]
==================== NetSvcs (Whitelisted) ===================
(Se uma entrada for incluída na fixlist, será removida do Registro. O arquivo não será movido, a menos que seja colocado separadamente.)
==================== Três Meses Criados arquivos e pastas ========
(Se uma entrada for incluída na fixlist, o arquivo/pasta será movido.)
2017-03-10 00:09 - 2017-03-10 00:09 - 00000000 ____D C:\FRST
2017-03-09 14:25 - 2017-03-10 00:04 - 00000358 _____ C:\Windows\Tasks\DriverToolkit Autorun.job
2017-03-09 14:25 - 2017-03-09 14:25 - 00002714 _____ C:\Windows\System32\Tasks\DriverToolkit Autorun
2017-03-09 11:41 - 2017-03-09 11:41 - 05929896 _____ C:\Users\edson\Downloads\Com o caminhoneiro na boleia - machosaonatural.com.br - XVIDEOS.COM.TS
2017-03-09 11:38 - 2017-03-09 11:38 - 43088284 _____ C:\Users\edson\Downloads\BICHONA ESCONDE CÂMERA, E GRAVA ENCONTRO SEXUAL COM HOMEM CASADO PAI DE FAMÍLIA! - XVIDEOS.COM.TS
2017-03-09 11:37 - 2017-03-09 11:37 - 51388672 _____ C:\Users\edson\Downloads\Coroa turco e seu garoto - machosaonatural.com.br - XVIDEOS.COM.TS
2017-03-09 11:35 - 2017-03-09 11:35 - 04529672 _____ C:\Users\edson\Downloads\Tio Joao e seu bitelao - machosaonatural.com.br - XVIDEOS.COM.TS
2017-03-09 11:32 - 2017-03-09 11:32 - 32281292 _____ C:\Users\edson\Downloads\Urso Pai Deixando Sobrinho Mamar seu Cacete www.daddytube.club - XVIDEOS.COM.TS
2017-03-09 11:22 - 2017-03-09 11:22 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\McAfee Security Scan Plus
2017-03-09 11:22 - 2017-03-09 11:22 - 00000000 ____D C:\Program Files\McAfee Security Scan
2017-03-09 11:14 - 2017-03-09 11:14 - 00000000 ____D C:\Users\edson\AppData\Local\DriverToolkit
2017-03-09 10:52 - 2017-03-09 11:22 - 00001964 _____ C:\Users\Public\Desktop\McAfee Security Scan Plus.lnk
2017-03-09 10:52 - 2017-03-09 10:52 - 00000000 ____D C:\Users\Todos os Usuários\McAfee Security Scan
2017-03-09 10:52 - 2017-03-09 10:52 - 00000000 ____D C:\ProgramData\McAfee Security Scan
2017-03-09 10:52 - 2017-03-09 10:52 - 00000000 ____D C:\Program Files\TrueKey
2017-03-09 10:45 - 2017-03-09 10:45 - 00000000 __SHD C:\Users\TEMP~1.EDS
2017-03-09 10:37 - 2017-03-09 10:37 - 00000000 ____D C:\308b32a86a3a4f6c10
2017-03-07 12:34 - 2017-03-07 12:34 - 00000000 ____D C:\521e103f8af7749468d5f7
2017-03-06 10:47 - 2017-03-06 10:47 - 01034556 _____ C:\Users\edson\Downloads\Windows6.1-KB2999226-x64.msu
2017-03-06 10:47 - 2017-03-06 10:47 - 00000000 ____D C:\7e9316f6bc29f9faf57fc4c605ae9d
2017-03-06 10:44 - 2017-03-09 10:45 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
2017-03-06 10:43 - 2017-03-09 10:45 - 00002515 _____ C:\Users\Public\Desktop\Skype.lnk
2017-03-06 10:39 - 2017-03-06 10:44 - 00000000 ___RD C:\Program Files (x86)\Skype
2017-03-05 12:10 - 2017-03-05 12:10 - 00000000 ____D C:\Users\Todos os Usuários\AskPartnerNetwork
2017-03-05 12:10 - 2017-03-05 12:10 - 00000000 ____D C:\ProgramData\AskPartnerNetwork
2017-03-05 12:10 - 2017-03-05 12:10 - 00000000 ____D C:\Program Files (x86)\AskPartnerNetwork
2017-03-05 12:10 - 2013-05-23 08:52 - 00386560 _____ (Dart Communications) C:\Windows\SysWOW64\DartSecure2.dll
2017-03-05 12:10 - 2013-05-23 08:52 - 00234496 _____ (Dart Communications) C:\Windows\SysWOW64\DartCertificate.dll
2017-03-05 12:10 - 2013-05-06 12:17 - 00425472 _____ (Dart Communications) C:\Windows\SysWOW64\DartSock.dll
2017-03-05 12:10 - 2008-08-18 18:18 - 00077824 _____ (Fox Magic Software) C:\Windows\SysWOW64\fmcodec.DLL
2017-03-04 14:34 - 2017-03-04 14:34 - 00000000 ____D C:\Users\Todos os Usuários\Package Cache
2017-03-04 14:34 - 2017-03-04 14:34 - 00000000 ____D C:\ProgramData\Package Cache
2017-03-04 11:43 - 2017-03-04 11:43 - 370053151 _____ C:\Users\edson\Downloads\Varios Artistas - As 100 Mais Nacionais de Novelas (1).rar
2017-03-04 10:35 - 2017-03-04 10:35 - 68571657 _____ C:\Users\edson\Downloads\RITCHIE - OUTRA VEZ AO VIVO NO ESTÚDIO(2009).rar
2017-03-04 10:33 - 2017-03-04 10:33 - 35051700 _____ C:\Users\edson\Downloads\Ritchie - Tigres de Bengala.rar
2017-03-04 10:13 - 2017-03-04 11:39 - 00000000 ____D C:\Users\edson\Downloads\MUSICAS ANTIGAS
2017-03-04 01:45 - 2017-03-04 01:45 - 183659957 _____ C:\Users\edson\Downloads\Varios Artistas - As 100 Mais da MPB - Parte 1.rar
2017-03-04 01:43 - 2017-03-04 01:43 - 186708494 _____ C:\Users\edson\Downloads\Varios Artistas - As 100 Mais da MPB - Parte 2.rar
2017-03-04 01:42 - 2017-03-04 01:42 - 262991458 _____ C:\Users\edson\Downloads\Populares - Velhos Tempos - 4CDS.rar
2017-03-04 01:40 - 2017-03-04 01:40 - 55791784 _____ C:\Users\edson\Downloads\Gilliard - Pérolas 2000.rar
2017-03-04 01:39 - 2017-03-04 01:39 - 51731248 _____ C:\Users\edson\Downloads\Sucessos Sertanejos Originais, Vol. 1.rar
2017-03-04 01:37 - 2017-03-04 01:37 - 60253934 _____ C:\Users\edson\Downloads\Cantores Populares, Vol. 2 - Anos 80.rar
2017-03-04 01:37 - 2017-03-04 01:37 - 370053151 _____ C:\Users\edson\Downloads\Varios Artistas - As 100 Mais Nacionais de Novelas.rar
2017-03-04 01:20 - 2017-03-04 01:20 - 00000000 ____D C:\Users\edson\Downloads\Passageiros 2017 Bluray 1080p Dublado - WWW.THEPIRATEFILMES.COM
2017-03-04 01:19 - 2017-03-04 01:19 - 00000000 ____D C:\Users\edson\Downloads\Sing 2017 Bluray 720p Legendado - WWW.THEPIRATEFILMES.COM
2017-03-03 00:20 - 2017-03-03 00:20 - 00001724 _____ C:\Users\Public\Desktop\IRPF2017 - Declaração de Ajuste Anual, Final de Espólio e Saída Definitiva do País.lnk
2017-03-03 00:20 - 2017-03-03 00:20 - 00000000 ___HD C:\Program Files (x86)\InstallJammer Registry
2017-03-03 00:20 - 2017-03-03 00:20 - 00000000 ____D C:\Users\edson\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Programas RFB2017
2017-03-03 00:20 - 2017-03-03 00:20 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Programas RFB2017
2017-03-03 00:20 - 2017-03-03 00:20 - 00000000 ____D C:\Arquivos de Programas RFB
2017-03-03 00:16 - 2017-03-03 00:16 - 00110144 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge-64.dll
2017-03-03 00:16 - 2017-03-03 00:16 - 00000000 ____D C:\Users\Todos os Usuários\Oracle
2017-03-03 00:16 - 2017-03-03 00:16 - 00000000 ____D C:\Users\edson\AppData\Roaming\Sun
2017-03-03 00:16 - 2017-03-03 00:16 - 00000000 ____D C:\Users\edson\AppData\LocalLow\Sun
2017-03-03 00:16 - 2017-03-03 00:16 - 00000000 ____D C:\ProgramData\Oracle
2017-03-03 00:16 - 2017-03-03 00:16 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2017-03-03 00:16 - 2017-03-03 00:16 - 00000000 ____D C:\Program Files\Java
2017-03-01 11:01 - 2017-03-01 11:01 - 00000328 _____ C:\Users\edson\Downloads\cb_backups_codes_edbrasil.txt
2017-02-25 01:35 - 2017-02-25 01:35 - 00000000 ____D C:\Users\edson\Downloads\Assassins.Creed.2016.1080p.HDRip.x264.DUAL-WWW.TORRENTDOSFILMES.COM
2017-02-24 01:13 - 2017-02-24 01:13 - 00000000 ____D C:\Users\edson\Downloads\Comando Kill 2017 Bluray 1080p Dublado - WWW.THEPIRATESHARE.COM
2017-02-23 11:58 - 2017-02-23 11:58 - 00000000 ____D C:\Users\edson\Downloads\Assassins Creed 2017 WEBRip 720p Legendado - WWW.THEPIRATESHARE.COM
2017-02-19 20:49 - 2017-02-19 20:49 - 00000000 ____D C:\Users\edson\Downloads\Montanha Taoísta 1080p (2017) Dublado BluRay -- By - Lucas Firmo
2017-02-19 20:29 - 2017-02-19 20:29 - 00000000 ____D C:\Users\edson\Downloads\10000 Anos Depois 2017 WEBRip 1080p Dublado - WWW.THEPIRATESHARE.COM
2017-02-19 20:28 - 2017-02-19 20:28 - 00000000 ____D C:\Users\edson\Downloads\Abril e o Mundo Extraordinário 2017 Bluray 1080p Dublado - WWW.THEPIRATESHARE.COM
2017-02-19 20:25 - 2017-02-19 20:25 - 00000000 ____D C:\Users\edson\Downloads\iBoy 2017 1080p WEBRip Dublado - WWW.THEPIRATESHARE.COM
2017-02-19 20:23 - 2017-02-19 20:23 - 00000000 ____D C:\Users\edson\Downloads\Emerald City s01e06 720p Legendado - WWW.THEPIRATESHARE.COM
2017-02-19 20:23 - 2017-02-19 20:23 - 00000000 ____D C:\Users\edson\Downloads\A Lenda do Rei Macaco A Volta do Herói 2017 720p WEB-DL Dublado - WWW.THEPIRATESHARE.COM
2017-02-19 20:21 - 2017-02-19 20:21 - 00000000 ____D C:\Users\edson\Downloads\Emerald City S01E05 720p Legendado - WWW.THEPIRATESHARE.COM
2017-02-19 20:20 - 2017-02-19 20:20 - 00000000 ____D C:\Users\edson\Downloads\Emerald City s01e04 2017 720p Legendado - WWW.THEPIRATESHARE.COM
2017-02-19 20:13 - 2017-02-19 20:13 - 00000000 ____D C:\Users\edson\Downloads\Emerald City s01e03 2017 720p Legendado - WWW.THEPIRATESHARE.COM
2017-02-19 20:13 - 2017-02-19 20:13 - 00000000 ____D C:\Users\edson\Downloads\Emerald City s01e01 720p Legendado - TPF
2017-02-19 20:11 - 2017-02-19 20:11 - 00000000 ____D C:\Users\edson\Downloads\A Volta do Juízo Final 2016 1080p WEB-DL Dublado - WWW.THEPIRATESHARE.COM
2017-02-19 20:10 - 2017-02-19 20:10 - 00000000 ____D C:\Users\edson\Downloads\O Shaolin Do Sertão 2017 1080p HDTV NACIONAL-WWW.THEPIRATESHARE.COM
2017-02-19 20:10 - 2017-02-19 20:10 - 00000000 ____D C:\Users\edson\Downloads\O Despertar da Lenda 1080p (2017) Dublado BluRay -- By - Lucas Firmo
2017-02-19 20:03 - 2017-02-19 20:03 - 00000000 ____D C:\Users\edson\Downloads\Moana - Um Mar de Aventuras (2017) Legendado 1080p By-LuanHarper
2017-02-16 13:22 - 2017-02-16 13:22 - 00002144 _____ C:\Users\Public\Desktop\Google Earth.lnk
2017-02-16 13:22 - 2017-02-16 13:22 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Earth
2017-02-16 12:17 - 2017-02-16 12:17 - 00000000 ____D C:\Users\edson\Downloads\Anjos da Noite - Guerras de Sangue 1080p (2017) Dublado BluRay -- By - Lucas Firmo
2017-02-16 12:14 - 2017-02-16 12:14 - 00000000 ____D C:\Users\edson\Downloads\Legion S01E01 720p Dublado - WWW.THEPIRATESHARE.COM
2017-02-16 12:07 - 2017-02-16 12:07 - 00000000 ____D C:\Users\edson\Downloads\Doutor Estranho 2016 Bluray 1080p Legendado - WWWW.THEPIRATESHARE.COM
2017-02-13 14:14 - 2016-10-17 12:35 - 00223464 _____ (Tonec Inc.) C:\Windows\system32\Drivers\idmwfp.sys
2017-02-13 11:35 - 2017-02-13 11:36 - 00000000 ____D C:\Users\TEMP
2017-02-13 11:35 - 2017-02-13 11:35 - 00000000 _____ C:\Users\TEMP\AppData\Local\{8FE4F07A-E5E3-4B5B-8554-0E0A7E4FDCEC}
2017-02-08 23:34 - 2017-02-08 23:34 - 00856047 _____ C:\Users\edson\Downloads\router_table.skp
2017-02-08 10:11 - 2016-08-06 16:13 - 00000000 ___RD C:\Users\edson\Downloads\Jaco e Jacozinho - Viola Divina
2017-02-02 12:43 - 2017-02-02 12:43 - 68314203 _____ C:\Users\edson\Downloads\Jaco e Jacozinho - 24 Sucessos.rar
2017-02-02 00:01 - 2017-02-02 00:01 - 2572295247 _____ C:\Users\edson\Downloads\Amigo.rar
2017-02-01 23:42 - 2017-02-01 23:42 - 2231106674 _____ C:\Users\edson\Downloads\Infinity.rar
2017-02-01 23:40 - 2017-02-01 23:40 - 2501739073 _____ C:\Users\edson\Downloads\IGO8.rar
2017-02-01 23:35 - 2017-02-02 00:02 - 00000000 ____D C:\Users\edson\Downloads\GPS 2017 ATUALIZAÇÃO
2017-02-01 23:35 - 2017-02-01 23:35 - 00000000 ____D C:\Users\edson\Downloads\GFPS BACK UP
2017-02-01 23:19 - 2017-02-01 23:19 - 00933424 _____ C:\Users\edson\Downloads\Menu.rar
2017-01-29 12:29 - 2017-01-29 12:37 - 00000000 ____D C:\Users\edson\Downloads\Trollhunters 2016 1ª WEBRip 720p Temporada Completa Dublado - WWW.THEPIRATESHARE.COM
2017-01-29 12:27 - 2017-01-29 12:28 - 00000000 ____D C:\Users\edson\Downloads\Liga da Justiça Sombria 1080p (2017) Dublado BluRay -- By - Lucas Firmo
2017-01-27 23:06 - 2017-03-08 00:15 - 00000000 ____D C:\Users\edson\AppData\Local\ElevatedDiagnostics
2017-01-13 00:50 - 2017-03-04 01:18 - 00000000 ____D C:\Users\edson\AppData\LocalLow\BitTorrent
2017-01-09 12:00 - 2017-03-10 00:03 - 00101080 _____ (GAS Tecnologia) C:\Windows\system32\Drivers\wsddfac.sys
2017-01-09 12:00 - 2017-01-09 12:00 - 00000000 ___HD C:\Program Files (x86)\GAS Tecnologia
2017-01-09 12:00 - 2017-01-09 12:00 - 00000000 ___HD C:\Program Files (x86)\Diebold
2017-01-09 12:00 - 2015-03-18 09:23 - 00103640 ____N (GAS Tecnologia) C:\Windows\system32\Drivers\wsddpp.sys
2017-01-09 11:57 - 2017-01-09 12:00 - 00000000 ____D C:\Program Files\Diebold
2017-01-09 11:56 - 2017-01-09 12:00 - 00000000 ____D C:\Users\Todos os Usuários\Temp
2017-01-09 11:56 - 2017-01-09 12:00 - 00000000 ____D C:\ProgramData\Temp
2016-12-25 18:27 - 2017-01-21 11:56 - 00000000 ____D C:\Users\edson\Documents\Bulk Image Downloader
2016-12-25 18:25 - 2016-12-30 09:09 - 00000000 ____D C:\Users\edson\AppData\Roaming\BID
2016-12-25 18:25 - 2016-12-30 09:01 - 00001133 _____ C:\Users\edson\Desktop\BID Queue Manager.lnk
2016-12-25 18:25 - 2016-12-30 09:01 - 00001067 _____ C:\Users\edson\Desktop\Bulk Image Downloader.lnk
2016-12-25 18:25 - 2016-12-30 09:01 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Bulk Image Downloader
2016-12-25 18:25 - 2016-12-30 09:01 - 00000000 ____D C:\Program Files (x86)\Bulk Image Downloader
2016-12-19 09:36 - 2016-12-19 09:36 - 00000000 ____D C:\Users\edson\AppData\LocalLow\Google
2016-12-18 13:53 - 2016-12-18 13:53 - 00014820 _____ C:\Windows\system32\neste-quarto-de-245-m-a-arquiteta-mayra-lopes-recorreu-ao-branco-bege-e-o-amadeirado-para-compor-a-cartela-de-cores-na-parede-atras-da-cama-papel-de-parede-arabescado-que-compoe-1379017475970_1024x682.lnk
2016-12-12 23:34 - 2016-12-12 23:34 - 00000011 _____ C:\Users\edson\Desktop\PISPASEP.txt
==================== Três Meses Modificados arquivos e pastas ========
(Se uma entrada for incluída na fixlist, o arquivo/pasta será movido.)
2017-03-10 00:09 - 2009-07-14 14:55 - 00663606 _____ C:\Windows\system32\prfh0416.dat
2017-03-10 00:09 - 2009-07-14 14:55 - 00127896 _____ C:\Windows\system32\prfc0416.dat
2017-03-10 00:09 - 2009-07-14 02:13 - 01517030 _____ C:\Windows\system32\PerfStringBackup.INI
2017-03-10 00:09 - 2009-07-14 00:20 - 00000000 ____D C:\Windows\inf
2017-03-10 00:04 - 2016-11-18 10:07 - 00029816 _____ (GAS Tecnologia) C:\Windows\system32\Drivers\gbpddreg64.sys
2017-03-10 00:03 - 2016-11-18 10:07 - 00000000 ____D C:\Users\Todos os Usuários\GbPlugin
2017-03-10 00:03 - 2016-11-18 10:07 - 00000000 ____D C:\ProgramData\GbPlugin
2017-03-10 00:03 - 2016-11-18 10:07 - 00000000 ____D C:\Program Files (x86)\GbPlugin
2017-03-10 00:03 - 2009-07-14 02:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2017-03-09 14:25 - 2016-10-26 01:04 - 00000000 ____D C:\Users\edson\AppData\Roaming\DMCache
2017-03-09 13:53 - 2016-10-29 12:02 - 00000902 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2017-03-09 13:32 - 2016-10-27 09:32 - 00000978 _____ C:\Windows\Tasks\Yahoo! Powered lisir.job
2017-03-09 12:32 - 2016-10-27 09:32 - 00000000 ____D C:\Users\Todos os Usuários\{4AC58FA6-C087-0560-4641-9B22DC0310EC}
2017-03-09 12:32 - 2016-10-27 09:32 - 00000000 ____D C:\ProgramData\{4AC58FA6-C087-0560-4641-9B22DC0310EC}
2017-03-09 12:15 - 2016-10-26 01:04 - 00000000 ____D C:\Users\edson\Downloads\Video
2017-03-09 11:20 - 2009-07-14 01:45 - 00013232 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2017-03-09 11:20 - 2009-07-14 01:45 - 00013232 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2017-03-09 11:13 - 2016-10-29 12:02 - 00000964 _____ C:\Windows\Tasks\Adobe Flash Player PPAPI Notifier.job
2017-03-09 10:52 - 2016-10-29 12:02 - 00802904 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2017-03-09 10:52 - 2016-10-29 12:02 - 00144472 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2017-03-09 10:52 - 2016-10-29 12:02 - 00003958 _____ C:\Windows\System32\Tasks\Adobe Flash Player PPAPI Notifier
2017-03-09 10:52 - 2016-10-29 12:02 - 00003840 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2017-03-09 10:52 - 2016-10-29 12:02 - 00000000 ____D C:\Windows\SysWOW64\Macromed
2017-03-09 10:52 - 2016-10-29 12:02 - 00000000 ____D C:\Windows\system32\Macromed
2017-03-09 10:52 - 2016-10-29 12:02 - 00000000 ____D C:\Users\edson\AppData\Local\Adobe
2017-03-09 10:46 - 2009-07-14 02:09 - 00000000 ____D C:\Windows\System32\Tasks\WPD
2017-03-09 10:45 - 2016-10-26 11:45 - 00000000 ____D C:\Users\Todos os Usuários\Skype
2017-03-09 10:45 - 2016-10-26 11:45 - 00000000 ____D C:\ProgramData\Skype
2017-03-09 10:45 - 2009-07-14 01:57 - 00001547 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk
2017-03-09 10:37 - 2016-12-04 18:28 - 00000000 ____D C:\Users\edson\Downloads\Compressed
2017-03-08 00:18 - 2009-07-14 00:20 - 00000000 ____D C:\Windows\system32\NDF
2017-03-05 12:10 - 2016-10-25 11:08 - 00001186 _____ C:\Users\Public\Desktop\aTube Catcher.lnk
2017-03-05 12:10 - 2016-10-25 11:08 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\aTube Catcher
2017-03-04 14:34 - 2016-10-26 11:45 - 00000000 ____D C:\Users\edson\AppData\Roaming\Skype
2017-03-04 01:47 - 2016-10-26 13:09 - 00000000 ____D C:\Users\edson\AppData\Roaming\BitTorrent
2017-02-21 00:02 - 2016-10-26 01:04 - 00000000 ____D C:\Program Files (x86)\Internet Download Manager
2017-02-20 12:48 - 2016-10-26 01:04 - 00000000 ____D C:\Users\edson\AppData\Roaming\IDM
2017-02-16 13:22 - 2016-10-25 11:09 - 00000000 ____D C:\Program Files (x86)\Google
2017-02-15 07:53 - 2016-11-08 09:53 - 20636760 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerInstaller.exe
2017-02-13 11:35 - 2016-10-25 10:59 - 00000000 ____D C:\Users\Todos os Usuários\Bigfoot Networks
2017-02-13 11:35 - 2016-10-25 10:59 - 00000000 ____D C:\ProgramData\Bigfoot Networks
2017-02-12 20:48 - 2016-09-01 11:45 - 00000676 _____ C:\native log.txt
2017-02-12 20:46 - 2016-11-18 10:07 - 00028888 _____ (GAS Tecnologia) C:\Windows\system32\Drivers\gbpddfac64.sys
2017-02-08 10:11 - 2016-11-04 13:57 - 00000000 ____D C:\Users\edson\Downloads\VIDEOS SR MIGUE
2017-02-08 08:58 - 2016-10-25 10:56 - 00000000 ____D C:\Users\edson
==================== Arquivos na raiz de alguns diretórios =======
2016-10-26 08:49 - 2016-10-26 08:49 - 0000058 _____ () C:\Users\edson\AppData\Local\DonationCoder_ScreenshotCaptor_InstallInfo.dat
Alguns arquivos em TEMP:
====================
2016-11-08 12:36 - 2016-11-08 12:36 - 3580664 _____ () C:\Users\edson\AppData\Local\Temp\aplicativoitau.exe
2016-10-26 00:30 - 2016-10-26 00:31 - 17618816 _____ (DsNET Corp ) C:\Users\edson\AppData\Local\Temp\atcMedia1641477445416.exe
2017-03-05 12:09 - 2017-03-05 12:10 - 19844976 _____ (DsNET Corp ) C:\Users\edson\AppData\Local\Temp\atcMedia2371488715747.exe
2017-01-19 23:42 - 2017-01-19 23:42 - 1118360 _____ (© 2015 Microsoft Corporation) C:\Users\edson\AppData\Local\Temp\BSvcProcessor.exe
2017-01-19 23:42 - 2017-01-19 23:42 - 0170128 _____ (© 2015 Microsoft Corporation) C:\Users\edson\AppData\Local\Temp\BSvcUpdater.exe
2017-03-09 10:38 - 2017-03-09 10:38 - 4036096 _____ () C:\Users\edson\AppData\Local\Temp\EDSON-PC_edson_bggnz.Dll
2017-03-09 10:38 - 2017-03-09 10:38 - 5975552 _____ () C:\Users\edson\AppData\Local\Temp\EDSON-PC_edson_eoftnx.dll
2017-03-09 10:38 - 2017-03-09 10:38 - 5975552 _____ () C:\Users\edson\AppData\Local\Temp\EDSON-PC_edson_xcwvkj.dll
2016-10-27 09:44 - 2016-10-27 09:44 - 0010240 _____ () C:\Users\edson\AppData\Local\Temp\gwpu7wbq.dll
2016-10-27 09:40 - 2016-10-27 09:40 - 1889856 _____ ( ) C:\Users\edson\AppData\Local\Temp\ICReinstall_Baixaki_k-lite-mega-codec-pack.exe
2016-10-20 14:26 - 2016-10-20 14:26 - 2458672 _____ (The OpenSSL Project, http://www.openssl.org/) C:\Users\edson\AppData\Local\Temp\libeay32.dll
2016-10-27 09:43 - 2016-10-27 09:43 - 0008192 _____ () C:\Users\edson\AppData\Local\Temp\mnt1hymc.dll
2016-10-20 14:26 - 2016-10-20 14:26 - 0970912 _____ (Microsoft Corporation) C:\Users\edson\AppData\Local\Temp\msvcr120.dll
2016-10-25 11:12 - 2016-10-25 11:12 - 7060456 _____ (Logitech, Inc.) C:\Users\edson\AppData\Local\Temp\qc_e3f0f3ef_27e6_4ca8_8a7c_a3d761aa54bb_64.exe
2016-12-04 19:10 - 2017-01-19 11:13 - 43918808 _____ (Skype Technologies S.A.) C:\Users\edson\AppData\Local\Temp\SkypeSetup.exe
2016-10-20 14:26 - 2016-10-20 14:26 - 0772672 _____ () C:\Users\edson\AppData\Local\Temp\sqlite3.dll
2017-03-06 10:34 - 2017-03-06 10:42 - 14456872 _____ (Microsoft Corporation) C:\Users\edson\AppData\Local\Temp\vc_redist.x86.exe
2016-10-27 09:44 - 2016-10-27 09:44 - 0008704 _____ () C:\Users\edson\AppData\Local\Temp\x5cngg3v.dll
==================== Bamital & volsnap ======================
(Não há correção automática para arquivos que não passaram na verificação.)
C:\Windows\system32\winlogon.exe => O arquivo é assinado digitalmente
C:\Windows\system32\wininit.exe => O arquivo é assinado digitalmente
C:\Windows\SysWOW64\wininit.exe => O arquivo é assinado digitalmente
C:\Windows\explorer.exe => O arquivo é assinado digitalmente
C:\Windows\SysWOW64\explorer.exe => O arquivo é assinado digitalmente
C:\Windows\system32\svchost.exe => O arquivo é assinado digitalmente
C:\Windows\SysWOW64\svchost.exe => O arquivo é assinado digitalmente
C:\Windows\system32\services.exe => O arquivo é assinado digitalmente
C:\Windows\system32\User32.dll => O arquivo é assinado digitalmente
C:\Windows\SysWOW64\User32.dll => O arquivo é assinado digitalmente
C:\Windows\system32\userinit.exe => O arquivo é assinado digitalmente
C:\Windows\SysWOW64\userinit.exe => O arquivo é assinado digitalmente
C:\Windows\system32\rpcss.dll => O arquivo é assinado digitalmente
C:\Windows\system32\dnsapi.dll => O arquivo é assinado digitalmente
C:\Windows\SysWOW64\dnsapi.dll => O arquivo é assinado digitalmente
C:\Windows\system32\Drivers\volsnap.sys => O arquivo é assinado digitalmente
LastRegBack: 2017-03-04 17:20
==================== Fim de FRST.txt ============================