Resultado do exame da Farbar Recovery Scan Tool (FRST) (x64) Versão: 21-06-2017 01
Executado por Documento (administrador) em VICKTORDOC-PC (21-06-2017 13:07:45)
Executando a partir de C:\Users\Documento\Downloads
Perfis Carregados: Documento (Perfis Disponíveis: Documento)
Platform: Windows 7 Ultimate (X64) Idioma: Português (Brasil)
Internet Explorer Versão 8 (Navegador padrão: Chrome)
Modo da Inicialização: Normal
Tutorial da Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processos (Whitelisted) =================

(Se uma entrada for incluída na fixlist, o processo será fechado. O arquivo não será movido.)

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe
(QIHU 360 SOFTWARE CO. LIMITED) C:\Program Files (x86)\360\Total Security\safemon\QHActiveDefense.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ElevationManager\AdobeUpdateService.exe
(Adobe Systems, Incorporated) C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe
(EFS Software, Inc.) C:\EFS Software\Easy Chat Server\ecsService.exe
(Seiko Epson Corporation) C:\Windows\System32\escsvc64.exe
(SEIKO EPSON CORPORATION) C:\Program Files\Common Files\EPSON\EPW!3 SSRP\E_S60RPB.EXE
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe
(arvato digital services llc) C:\Program Files\Common Files\Protexis\License Service\PsiService_2.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NvContainer\nvcontainer.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
(VIA Technologies, Inc.) C:\Windows\System32\ViakaraokeSrv.exe
(SEIKO EPSON CORPORATION) C:\Windows\System32\spool\drivers\x64\3\E_YATIN2E.EXE
(QIHU 360 SOFTWARE CO. LIMITED) C:\Program Files (x86)\360\Total Security\safemon\QHSafeTray.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\IPC\AdobeIPCBroker.exe
(Disc Soft Ltd) C:\Program Files\DAEMON Tools Lite\DiscSoftBusService.exe
(QIHU 360 SOFTWARE CO. LIMITED) C:\Program Files (x86)\360\Total Security\safemon\QHWatchdog.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office\Office15\MSOSYNC.EXE
(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ADS\Adobe Desktop Service.exe
() C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSync\CoreSync.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CCXProcess\CCXProcess.exe
(Node.js) C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CCXProcess\libs\node.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CCLibrary\CCLibrary.exe
(Node.js) C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CCLibrary\libs\node.exe
(Node.js) C:\Program Files (x86)\NVIDIA Corporation\NvNode\NVIDIA Web Helper.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamuseragent.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\System32\PrintIsolationHost.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

==================== Registro (Whitelisted) ====================

(Se uma entrada for incluída na fixlist, o ítem no Registro será restaurado para o padrão ou removido. O arquivo não será movido.)

HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [508128 2016-07-01] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [QHSafeTray] => C:\Program Files (x86)\360\Total Security\safemon\QHSafeTray.exe [1944528 2017-05-17] (QIHU 360 SOFTWARE CO. LIMITED)
HKLM-x32\...\Run: [AdobeCS6ServiceManager] => C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe [1073312 2012-03-09] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [Adobe Creative Cloud] => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe [2406496 2017-06-04] (Adobe Systems Incorporated)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
Winlogon\Notify\ GbPluginCef: C:\Program Files (x86)\GbPlugin\gbiehCef.dll [2016-08-10] (Caixa Economica Federal)
HKU\S-1-5-21-1643177870-958204008-4245990445-1000\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [9363672 2017-02-07] (Piriform Ltd)
HKU\S-1-5-21-1643177870-958204008-4245990445-1000\...\Run: [BitTorrent] => C:\Users\Documento\AppData\Roaming\BitTorrent\BitTorrent.exe [2239176 2017-03-17] (BitTorrent Inc.)
HKU\S-1-5-21-1643177870-958204008-4245990445-1000\...\Run: [DAEMON Tools Lite] => C:\Program Files\DAEMON Tools Lite\DTLite.exe [5583120 2015-02-27] (Disc Soft Ltd)
HKU\S-1-5-21-1643177870-958204008-4245990445-1000\...\Run: [EPLTarget\P0000000000000001] => C:\Windows\system32\spool\DRIVERS\x64\3\E_YATIN2E.EXE [298560 2014-03-20] (SEIKO EPSON CORPORATION)
HKU\S-1-5-21-1643177870-958204008-4245990445-1000\...\Run: [MinerGateGui] => C:\Program Files\MinerGate\minergate.exe [19334144 2016-09-23] ()
HKU\S-1-5-21-1643177870-958204008-4245990445-1000\...\MountPoints2: {03949b7a-2dc4-11e7-93a8-1078d2be3fde} - K:\setup.exe
HKU\S-1-5-21-1643177870-958204008-4245990445-1000\...\MountPoints2: {21d0c792-0efb-11e7-bf26-1078d2be3fde} - E:\setup.exe
ShellExecuteHooks-x32: GbPluginObj Class - {E37CB5F0-51F5-4395-A808-5FA49E399003} - C:\Program Files (x86)\GbPlugin\gbiehcef.dll [1903328 2016-08-10] (Caixa Economica Federal)
ShellIconOverlayIdentifiers: [ AccExtIco1] -> {AB9CF9F8-8A96-4F9D-BF21-CE85714C3A47} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll [2017-05-26] ()
ShellIconOverlayIdentifiers: [ AccExtIco2] -> {853B7E05-C47D-4985-909A-D0DC5C6D7303} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll [2017-05-26] ()
ShellIconOverlayIdentifiers: [ AccExtIco3] -> {42D38F2E-98E9-4382-B546-E24E4D6D04BB} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll [2017-05-26] ()

==================== Internet (Whitelisted) ====================

(Se um ítem for incluído na fixlist, sendo um ítem do Registro, será removido ou restaurado para o padrão.)

Hosts: Há mais de uma entrada no Hosts. Veja a seção Hosts do Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.168.1.200
Tcpip\..\Interfaces\{5DFA7E69-F7CC-48F1-A32B-9BB8ECD2D5EF}: [DhcpNameServer] 192.168.1.200
Tcpip\..\Interfaces\{958142EF-84FA-4500-9B49-CB3CFE5AF3D2}: [DhcpNameServer] 192.168.42.129
Tcpip\..\Interfaces\{A9C2C0C5-061B-44E8-AA1C-747917DECD29}: [DhcpNameServer] 192.168.42.129
Tcpip\..\Interfaces\{E55CA940-3496-421B-A11C-9A92596E2E11}: [DhcpNameServer] 192.168.42.129

Internet Explorer:
==================
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Restrição <======= ATENÇÃO
HKU\S-1-5-21-1643177870-958204008-4245990445-1000\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://www.msn.com/pt-br/?ocid=iehp
BHO: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\Office15\OCHelper.dll [2012-10-01] (Microsoft Corporation)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office15\URLREDIR.DLL [2012-10-01] (Microsoft Corporation)
BHO: SafeMon Class -> {B69F34DD-F0F9-42DC-9EDD-957187DA688D} -> C:\Program Files (x86)\360\Total Security\safemon\safemon64.dll [2017-05-17] (Qihu 360 Software Co., Ltd.)
BHO: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office\Office15\GROOVEEX.DLL [2012-10-01] (Microsoft Corporation)
BHO-x32: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll [2012-10-01] (Microsoft Corporation)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office15\URLREDIR.DLL [2012-10-01] (Microsoft Corporation)
BHO-x32: SafeMon Class -> {B69F34DD-F0F9-42DC-9EDD-957187DA688D} -> C:\Program Files (x86)\360\Total Security\safemon\safemon.dll [2017-03-03] (Qihu 360 Software Co., Ltd.)
BHO-x32: GbIehObj Class -> {C41A1C0E-EA6C-11D4-B1B8-444553540003} -> C:\Program Files (x86)\GbPlugin\gbiehcef.dll [2016-08-10] (Caixa Economica Federal)
BHO-x32: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\Office15\GROOVEEX.DLL [2012-10-01] (Microsoft Corporation)
Handler: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office\Office15\MSOSB.DLL [2012-10-01] (Microsoft Corporation)
Filter: deflate - {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\Windows\system32\urlmon.dll [2009-07-13] (Microsoft Corporation)
Filter-x32: deflate - {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\Windows\SysWOW64\urlmon.dll [2009-07-13] (Microsoft Corporation)
Filter: gzip - {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\Windows\system32\urlmon.dll [2009-07-13] (Microsoft Corporation)
Filter-x32: gzip - {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\Windows\SysWOW64\urlmon.dll [2009-07-13] (Microsoft Corporation)

FireFox:
========
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~1\MICROS~2\Office15\NPSPWRAP.DLL [2012-10-01] (Microsoft Corporation)
FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect64.dll [2017-06-04] (Adobe Systems)
FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files (x86)\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2012-10-01] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~2\Office15\NPSPWRAP.DLL [2012-10-01] (Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2017-05-01] (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2017-05-01] (NVIDIA Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-05-02] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-05-02] (Google Inc.)
FF Plugin-x32: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect32.dll [2017-06-04] (Adobe Systems)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npMeetingJoinPluginOC.dll [2012-10-01] (Microsoft Corporation)

Chrome:
=======
CHR HomePage: Default -> hxxp://www.google.com/
CHR StartupUrls: Default -> "hxxps://www.google.com.br/"
CHR DefaultSearchKeyword: Default -> google.com__
CHR Profile: C:\Users\Documento\AppData\Local\Google\Chrome\User Data\Default [2017-06-21]
CHR Extension: (Google Apresentações) - C:\Users\Documento\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2017-03-07]
CHR Extension: (Google Docs) - C:\Users\Documento\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2017-03-07]
CHR Extension: (Google Drive) - C:\Users\Documento\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2017-03-07]
CHR Extension: (YouTube) - C:\Users\Documento\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2017-03-07]
CHR Extension: (umRei Login Pinterest) - C:\Users\Documento\AppData\Local\Google\Chrome\User Data\Default\Extensions\bnckgjlamhknpljomhcogofeehofeomh [2017-06-20]
CHR Extension: (Adblock Plus) - C:\Users\Documento\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2017-03-21]
CHR Extension: (Free Rider HD) - C:\Users\Documento\AppData\Local\Google\Chrome\User Data\Default\Extensions\emikpifndnjfkgofoglceekhkbaicbde [2017-03-07]
CHR Extension: (Planilhas do Google) - C:\Users\Documento\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2017-03-07]
CHR Extension: (Causality Games) - C:\Users\Documento\AppData\Local\Google\Chrome\User Data\Default\Extensions\femoooemgmjaebeodbbikbkmhlafenpl [2017-03-07]
CHR Extension: (Documentos Google off-line) - C:\Users\Documento\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2017-03-07]
CHR Extension: (AdBlock) - C:\Users\Documento\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2017-06-19]
CHR Extension: (AllCast Receiver) - C:\Users\Documento\AppData\Local\Google\Chrome\User Data\Default\Extensions\hjbljnpdahefgnopeohlaeohgkiidnoe [2017-03-07]
CHR Extension: (Widget Bússola do Investidor) - C:\Users\Documento\AppData\Local\Google\Chrome\User Data\Default\Extensions\hnajpciepgcjdfheploaompnokjebfoa [2017-03-07]
CHR Extension: (Desprotetor de Links) - C:\Users\Documento\AppData\Local\Google\Chrome\User Data\Default\Extensions\imcbnnnoghiihopefblgehihofbfbmei [2017-04-17] [UpdateUrl: hxxps://desprotetor.com.br/firefox_update.json] <==== ATENÇÃO
CHR Extension: (Pagamentos da Chrome Web Store) - C:\Users\Documento\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2017-03-09]
CHR Extension: (Gmail) - C:\Users\Documento\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2017-03-07]
CHR Extension: (Chrome Media Router) - C:\Users\Documento\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2017-05-12]
CHR Extension: (Canvas Rider) - C:\Users\Documento\AppData\Local\Google\Chrome\User Data\Default\Extensions\poknhlcknimnnbfcombaooklofipaibk [2017-03-07]
CHR HKLM-x32\...\Chrome\Extension: [glcimepnljoholdmjchkloafkggfoijh] - hxxps://clients2.google.com/service/update2/crx

==================== Serviços (Whitelisted) ====================

(Se uma entrada for incluída na fixlist, será removida do Registro. O arquivo não será movido, a menos que seja colocado separadamente.)

R2 AdobeUpdateService; C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ElevationManager\AdobeUpdateService.exe [814688 2017-06-04] (Adobe Systems Incorporated)
R2 AGSService; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe [2246256 2017-05-18] (Adobe Systems, Incorporated)
R3 Disc Soft Lite Bus Service; C:\Program Files\DAEMON Tools Lite\DiscSoftBusService.exe [1272592 2015-02-27] (Disc Soft Ltd)
R2 Easy Chat Service; C:\EFS Software\Easy Chat Server\ecsService.exe [208896 2012-05-01] (EFS Software, Inc.) [Arquivo não assinado]
R2 EpsonScanSvc; C:\Windows\system32\EscSvc64.exe [144560 2012-05-17] (Seiko Epson Corporation)
R2 EPSON_PM_RPCV4_06; C:\Program Files\Common Files\EPSON\EPW!3 SSRP\E_S60RPB.EXE [152640 2013-04-15] (SEIKO EPSON CORPORATION)
S3 GbpSv; C:\Program Files (x86)\GbPlugin\GbpSv.exe [631520 2016-08-10] (GAS Tecnologia)
R2 IAStorDataMgrSvc; C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [15720 2013-11-21] (Intel Corporation)
R2 NvContainerLocalSystem; C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [495224 2017-05-03] (NVIDIA Corporation)
R3 NvContainerNetworkService; C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [495224 2017-05-03] (NVIDIA Corporation)
R2 NVDisplay.ContainerLocalSystem; C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe [462968 2017-05-01] (NVIDIA Corporation)
R2 NvTelemetryContainer; C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe [450168 2017-05-03] (NVIDIA Corporation)
R2 PSI_SVC_2_x64; c:\Program Files\Common Files\Protexis\License Service\PsiService_2.exe [336824 2010-11-30] (arvato digital services llc)
R2 QHActiveDefense; C:\Program Files (x86)\360\Total Security\safemon\QHActiveDefense.exe [928208 2017-05-17] (QIHU 360 SOFTWARE CO. LIMITED)
R2 TeamViewer; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [10884848 2017-05-23] (TeamViewer GmbH)
R2 VIAKaraokeService; C:\Windows\system32\viakaraokesrv.exe [27768 1999-12-31] (VIA Technologies, Inc.)
R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2009-07-13] (Microsoft Corporation)

===================== Drivers (Whitelisted) ======================

(Se uma entrada for incluída na fixlist, será removida do Registro. O arquivo não será movido, a menos que seja colocado separadamente.)

R1 360AntiHacker; C:\Windows\System32\Drivers\360AntiHacker64.sys [175040 2017-05-17] (360.cn)
R3 360AvFlt; C:\Windows\System32\DRIVERS\360AvFlt.sys [86248 2017-05-17] (360.cn)
R3 360AvFlt; C:\Windows\SysWOW64\DRIVERS\360AvFlt.sys [86248 2017-05-17] (360.cn)
R1 360Box64; C:\Windows\System32\DRIVERS\360Box64.sys [330472 2017-05-17] (360.cn)
S3 360Camera; C:\Windows\System32\Drivers\360Camera64.sys [49088 2017-05-17] (360.cn)
R1 360FsFlt; C:\Windows\System32\DRIVERS\360FsFlt.sys [423360 2017-05-17] (360.cn)
R1 BAPIDRV; C:\Windows\System32\DRIVERS\BAPIDRV64.sys [190400 2017-05-17] (360.cn)
R3 dtlitescsibus; C:\Windows\System32\DRIVERS\dtlitescsibus.sys [30352 2017-03-22] (Disc Soft Ltd)
S3 GBPRCM; C:\Program Files (x86)\GbPlugin\gbprcm64.sys [29912 2016-08-10] (GAS Tecnologia)
R0 iaStorF; C:\Windows\System32\DRIVERS\iaStorF.sys [28008 2013-11-21] (Intel Corporation)
R3 L1C; C:\Windows\System32\DRIVERS\L1C62x64.sys [117912 1999-12-31] (Qualcomm Atheros Co., Ltd.)
R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [30328 2017-05-03] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [48248 2017-05-03] (NVIDIA Corporation)
R3 nvvhci; C:\Windows\System32\DRIVERS\nvvhci.sys [76840 2017-03-31] (NVIDIA Corporation)
S3 Warsaw_PP; C:\Program Files (x86)\GbPlugin\wsftprp64.sys [24792 2016-08-10] (GAS Tecnologia LTDA)
S1 gbpddfac; system32\drivers\gbpddfac64.sys [X]
S0 gbpddreg; system32\drivers\gbpddreg64.sys [X]
S3 xhunter1; \??\C:\Windows\xhunter1.sys [X]
S3 xspirit; \??\C:\Windows\xspirit.sys [X]

========================== MD5 dos Drivers =======================

C:\Windows\system32\DRIVERS\1394ohci.sys ==> MD5 é legítimo
C:\Windows\System32\Drivers\360AntiHacker64.sys 2733ACA32C0AFA50A8C3143BAF75D665
C:\Windows\System32\DRIVERS\360AvFlt.sys 06DC8E24D1846A26FFE978A51B73BBA0
C:\Windows\SysWOW64\DRIVERS\360AvFlt.sys 06DC8E24D1846A26FFE978A51B73BBA0
C:\Windows\System32\DRIVERS\360Box64.sys 03882DAC88F6C1CAD9101A9FC426B3EF
C:\Windows\System32\Drivers\360Camera64.sys 006D8E524AE01FAD1C26C8A052ED6F4F
C:\Windows\System32\DRIVERS\360FsFlt.sys 44E84459FA46FE89D1CF63C426837E33
C:\Windows\System32\DRIVERS\ACPI.sys ==> MD5 é legítimo
C:\Windows\system32\DRIVERS\acpipmi.sys ==> MD5 é legítimo
C:\Windows\system32\DRIVERS\adp94xx.sys ==> MD5 é legítimo
C:\Windows\system32\DRIVERS\adpahci.sys ==> MD5 é legítimo
C:\Windows\system32\DRIVERS\adpu320.sys ==> MD5 é legítimo
C:\Windows\system32\drivers\afd.sys B9384E03479D2506BC924C16A3DB87BC
C:\Windows\system32\DRIVERS\agp440.sys ==> MD5 é legítimo
C:\Windows\system32\DRIVERS\aliide.sys ==> MD5 é legítimo
C:\Windows\system32\DRIVERS\amdide.sys ==> MD5 é legítimo
C:\Windows\system32\DRIVERS\amdk8.sys ==> MD5 é legítimo
C:\Windows\system32\DRIVERS\amdppm.sys ==> MD5 é legítimo
C:\Windows\system32\DRIVERS\amdsata.sys 7A4B413614C055935567CF88A9734D38
C:\Windows\system32\DRIVERS\amdsbs.sys ==> MD5 é legítimo
C:\Windows\System32\DRIVERS\amdxata.sys ==> MD5 é legítimo
C:\Windows\system32\drivers\appid.sys ==> MD5 é legítimo
C:\Windows\system32\DRIVERS\arc.sys ==> MD5 é legítimo
C:\Windows\system32\DRIVERS\arcsas.sys ==> MD5 é legítimo
C:\Windows\System32\DRIVERS\asyncmac.sys ==> MD5 é legítimo
C:\Windows\System32\DRIVERS\atapi.sys ==> MD5 é legítimo
C:\Windows\system32\DRIVERS\bxvbda.sys ==> MD5 é legítimo
C:\Windows\System32\DRIVERS\b57nd60a.sys ==> MD5 é legítimo
C:\Windows\System32\DRIVERS\BAPIDRV64.sys A29BBD0E0F844FA9CF2A92D6274E5025
C:\Windows\System32\Drivers\Beep.sys ==> MD5 é legítimo
C:\Windows\System32\DRIVERS\blbdrive.sys ==> MD5 é legítimo
C:\Windows\System32\DRIVERS\bowser.sys ==> MD5 é legítimo
C:\Windows\system32\DRIVERS\BrFiltLo.sys ==> MD5 é legítimo
C:\Windows\system32\DRIVERS\BrFiltUp.sys ==> MD5 é legítimo
C:\Windows\System32\Drivers\Brserid.sys ==> MD5 é legítimo
C:\Windows\System32\Drivers\BrSerWdm.sys ==> MD5 é legítimo
C:\Windows\System32\Drivers\BrUsbMdm.sys ==> MD5 é legítimo
C:\Windows\System32\Drivers\BrUsbSer.sys ==> MD5 é legítimo
C:\Windows\system32\DRIVERS\bthmodem.sys ==> MD5 é legítimo
C:\Windows\System32\DRIVERS\cdfs.sys ==> MD5 é legítimo
C:\Windows\System32\DRIVERS\cdrom.sys ==> MD5 é legítimo
C:\Windows\system32\DRIVERS\circlass.sys ==> MD5 é legítimo
C:\Windows\System32\CLFS.sys ==> MD5 é legítimo
C:\Windows\system32\DRIVERS\CmBatt.sys ==> MD5 é legítimo
C:\Windows\system32\DRIVERS\cmdide.sys ==> MD5 é legítimo
C:\Windows\System32\Drivers\cng.sys ==> MD5 é legítimo
C:\Windows\system32\DRIVERS\compbatt.sys ==> MD5 é legítimo
C:\Windows\System32\DRIVERS\CompositeBus.sys ==> MD5 é legítimo
C:\Windows\system32\DRIVERS\crcdisk.sys ==> MD5 é legítimo
C:\Windows\System32\drivers\csc.sys 4A6173C2279B498CD8F57CAE504564CB
C:\Windows\System32\Drivers\dfsc.sys 3F1DC527070ACB87E40AFE46EF6DA749
C:\Windows\System32\drivers\discache.sys ==> MD5 é legítimo
C:\Windows\System32\DRIVERS\disk.sys ==> MD5 é legítimo
C:\Windows\System32\drivers\drmkaud.sys ==> MD5 é legítimo
C:\Windows\System32\DRIVERS\dtlitescsibus.sys 080598EFE474B7A28D7260C3AC389E36
C:\Windows\System32\drivers\dxgkrnl.sys EBCE0B0924835F635F620D19F0529DCE
C:\Windows\system32\DRIVERS\evbda.sys ==> MD5 é legítimo
C:\Windows\system32\DRIVERS\elxstor.sys ==> MD5 é legítimo
C:\Windows\system32\DRIVERS\errdev.sys ==> MD5 é legítimo
C:\Windows\System32\Drivers\exfat.sys ==> MD5 é legítimo
C:\Windows\System32\Drivers\fastfat.sys ==> MD5 é legítimo
C:\Windows\system32\DRIVERS\fdc.sys ==> MD5 é legítimo
C:\Windows\System32\drivers\fileinfo.sys ==> MD5 é legítimo
C:\Windows\System32\drivers\filetrace.sys ==> MD5 é legítimo
C:\Windows\system32\DRIVERS\flpydisk.sys ==> MD5 é legítimo
C:\Windows\System32\drivers\fltmgr.sys ==> MD5 é legítimo
C:\Windows\System32\drivers\FsDepends.sys ==> MD5 é legítimo
C:\Windows\System32\Drivers\Fs_Rec.sys ==> MD5 é legítimo
C:\Windows\System32\DRIVERS\fvevol.sys ==> MD5 é legítimo
C:\Windows\system32\DRIVERS\gagp30kx.sys ==> MD5 é legítimo
C:\Program Files (x86)\GbPlugin\gbprcm64.sys 6E7E53635127C96B52E0636F36D89D14
C:\Windows\system32\drivers\hcw85cir.sys ==> MD5 é legítimo
C:\Windows\System32\drivers\HdAudio.sys ==> MD5 é legítimo
C:\Windows\System32\DRIVERS\HDAudBus.sys ==> MD5 é legítimo
C:\Windows\system32\DRIVERS\HidBatt.sys ==> MD5 é legítimo
C:\Windows\system32\DRIVERS\hidbth.sys ==> MD5 é legítimo
C:\Windows\system32\DRIVERS\hidir.sys ==> MD5 é legítimo
C:\Windows\System32\DRIVERS\hidusb.sys ==> MD5 é legítimo
C:\Windows\system32\DRIVERS\HpSAMD.sys ==> MD5 é legítimo
C:\Windows\System32\drivers\HTTP.sys ==> MD5 é legítimo
C:\Windows\System32\drivers\hwpolicy.sys ==> MD5 é legítimo
C:\Windows\System32\DRIVERS\i8042prt.sys ==> MD5 é legítimo
C:\Windows\System32\DRIVERS\iaStorA.sys 25555186E4FBDF0E30A5DBFC9B9A73F9
C:\Windows\System32\DRIVERS\iaStorF.sys 10E79E366FA255318F5D1D0ED07F947D
C:\Windows\system32\DRIVERS\iaStorV.sys ==> MD5 é legítimo
C:\Windows\System32\DRIVERS\igdkmd64.sys 690E1FCE66B5F0DB3A00B30E9CC2D617
C:\Windows\system32\DRIVERS\iirsp.sys ==> MD5 é legítimo
C:\Windows\System32\DRIVERS\IntcDAud.sys F5495B38BFB9149925F54F65AB40EFBF
C:\Windows\system32\DRIVERS\intelide.sys ==> MD5 é legítimo
C:\Windows\System32\DRIVERS\intelppm.sys ==> MD5 é legítimo
C:\Windows\System32\DRIVERS\ipfltdrv.sys ==> MD5 é legítimo
C:\Windows\system32\DRIVERS\IPMIDrv.sys ==> MD5 é legítimo
C:\Windows\System32\drivers\ipnat.sys ==> MD5 é legítimo
C:\Windows\System32\drivers\irenum.sys ==> MD5 é legítimo
C:\Windows\system32\DRIVERS\isapnp.sys ==> MD5 é legítimo
C:\Windows\system32\DRIVERS\msiscsi.sys ==> MD5 é legítimo
C:\Windows\System32\DRIVERS\kbdclass.sys ==> MD5 é legítimo
C:\Windows\System32\DRIVERS\kbdhid.sys ==> MD5 é legítimo
C:\Windows\System32\Drivers\ksecdd.sys ==> MD5 é legítimo
C:\Windows\System32\Drivers\ksecpkg.sys BBE1BF6D9B661C354D4857D5FADB943B
C:\Windows\system32\drivers\ksthunk.sys ==> MD5 é legítimo
C:\Windows\System32\DRIVERS\L1C62x64.sys EC1F237A9F101C488678523889F2DDE4
C:\Windows\System32\DRIVERS\lltdio.sys ==> MD5 é legítimo
C:\Windows\system32\DRIVERS\lsi_fc.sys ==> MD5 é legítimo
C:\Windows\system32\DRIVERS\lsi_sas.sys ==> MD5 é legítimo
C:\Windows\system32\DRIVERS\lsi_sas2.sys ==> MD5 é legítimo
C:\Windows\system32\DRIVERS\lsi_scsi.sys ==> MD5 é legítimo
C:\Windows\system32\drivers\luafv.sys ==> MD5 é legítimo
C:\Windows\system32\DRIVERS\megasas.sys ==> MD5 é legítimo
C:\Windows\system32\DRIVERS\MegaSR.sys ==> MD5 é legítimo
C:\Windows\System32\drivers\modem.sys ==> MD5 é legítimo
C:\Windows\System32\DRIVERS\monitor.sys ==> MD5 é legítimo
C:\Windows\System32\DRIVERS\mouclass.sys ==> MD5 é legítimo
C:\Windows\System32\DRIVERS\mouhid.sys ==> MD5 é legítimo
C:\Windows\System32\drivers\mountmgr.sys ==> MD5 é legítimo
C:\Windows\system32\DRIVERS\mpio.sys ==> MD5 é legítimo
C:\Windows\System32\drivers\mpsdrv.sys ==> MD5 é legítimo
C:\Windows\system32\drivers\mrxdav.sys ==> MD5 é legítimo
C:\Windows\System32\DRIVERS\mrxsmb.sys B7F3D2C40BDF8FFB73EBFB19C77734E2
C:\Windows\System32\DRIVERS\mrxsmb10.sys 86C6F88B5168CE21CF8D69D0B3FF5D19
C:\Windows\System32\DRIVERS\mrxsmb20.sys B081069251C8E9F42CB8769D07148F9C
C:\Windows\System32\DRIVERS\msahci.sys ==> MD5 é legítimo
C:\Windows\system32\DRIVERS\msdsm.sys ==> MD5 é legítimo
C:\Windows\System32\Drivers\Msfs.sys ==> MD5 é legítimo
C:\Windows\System32\drivers\mshidkmdf.sys ==> MD5 é legítimo
C:\Windows\System32\DRIVERS\msisadrv.sys ==> MD5 é legítimo
C:\Windows\System32\drivers\MSKSSRV.sys ==> MD5 é legítimo
C:\Windows\System32\drivers\MSPCLOCK.sys ==> MD5 é legítimo
C:\Windows\System32\drivers\MSPQM.sys ==> MD5 é legítimo
C:\Windows\System32\Drivers\MsRPC.sys ==> MD5 é legítimo
C:\Windows\System32\DRIVERS\mssmbios.sys ==> MD5 é legítimo
C:\Windows\System32\drivers\MSTEE.sys ==> MD5 é legítimo
C:\Windows\system32\DRIVERS\MTConfig.sys ==> MD5 é legítimo
C:\Windows\System32\Drivers\mup.sys ==> MD5 é legítimo
C:\Windows\System32\DRIVERS\nwifi.sys ==> MD5 é legítimo
C:\Windows\System32\drivers\ndis.sys ==> MD5 é legítimo
C:\Windows\System32\DRIVERS\ndiscap.sys ==> MD5 é legítimo
C:\Windows\System32\DRIVERS\ndistapi.sys ==> MD5 é legítimo
C:\Windows\System32\DRIVERS\ndisuio.sys ==> MD5 é legítimo
C:\Windows\System32\DRIVERS\ndiswan.sys ==> MD5 é legítimo
C:\Windows\System32\Drivers\NDProxy.sys ==> MD5 é legítimo
C:\Windows\System32\DRIVERS\netbios.sys ==> MD5 é legítimo
C:\Windows\System32\DRIVERS\netbt.sys ==> MD5 é legítimo
C:\Windows\system32\DRIVERS\nfrd960.sys ==> MD5 é legítimo
C:\Windows\System32\Drivers\Npfs.sys ==> MD5 é legítimo
C:\Windows\System32\drivers\nsiproxy.sys ==> MD5 é legítimo
C:\Windows\System32\Drivers\Ntfs.sys ==> MD5 é legítimo
C:\Windows\System32\Drivers\Null.sys ==> MD5 é legítimo
C:\Windows\System32\drivers\nvhda64v.sys C27427C9D79DE00A01B9987B68485F60
C:\Windows\System32\DRIVERS\nvlddmkm.sys 20BD2AAAE6BDF544F0F7840D3D89AF1B
C:\Windows\system32\DRIVERS\nvraid.sys ==> MD5 é legítimo
C:\Windows\system32\DRIVERS\nvstor.sys ==> MD5 é legítimo
C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys 4942EC595A4A10F94BB060CB2DFE83BD
C:\Windows\System32\drivers\nvvad64v.sys F489CE4A8456F9EB0F0C5532E2FD7549
C:\Windows\System32\DRIVERS\nvvhci.sys 842E1AB0A53CEDE011F71C4E4DCC9871
C:\Windows\system32\DRIVERS\nv_agp.sys ==> MD5 é legítimo
C:\Windows\system32\DRIVERS\ohci1394.sys ==> MD5 é legítimo
C:\Windows\system32\DRIVERS\parport.sys ==> MD5 é legítimo
C:\Windows\System32\drivers\partmgr.sys ==> MD5 é legítimo
C:\Windows\System32\DRIVERS\pci.sys ==> MD5 é legítimo
C:\Windows\system32\DRIVERS\pciide.sys ==> MD5 é legítimo
C:\Windows\system32\DRIVERS\pcmcia.sys ==> MD5 é legítimo
C:\Windows\System32\drivers\pcw.sys ==> MD5 é legítimo
C:\Windows\System32\drivers\peauth.sys ==> MD5 é legítimo
C:\Windows\System32\DRIVERS\raspptp.sys ==> MD5 é legítimo
C:\Windows\system32\DRIVERS\processr.sys ==> MD5 é legítimo
C:\Windows\System32\DRIVERS\pacer.sys ==> MD5 é legítimo
C:\Windows\system32\DRIVERS\ql2300.sys ==> MD5 é legítimo
C:\Windows\system32\DRIVERS\ql40xx.sys ==> MD5 é legítimo
C:\Windows\system32\drivers\qwavedrv.sys ==> MD5 é legítimo
C:\Windows\System32\DRIVERS\rasacd.sys ==> MD5 é legítimo
C:\Windows\System32\DRIVERS\AgileVpn.sys ==> MD5 é legítimo
C:\Windows\System32\DRIVERS\rasl2tp.sys ==> MD5 é legítimo
C:\Windows\System32\DRIVERS\raspppoe.sys ==> MD5 é legítimo
C:\Windows\System32\DRIVERS\rassstp.sys ==> MD5 é legítimo
C:\Windows\System32\DRIVERS\rdbss.sys ==> MD5 é legítimo
C:\Windows\System32\DRIVERS\rdpbus.sys ==> MD5 é legítimo
C:\Windows\System32\DRIVERS\RDPCDD.sys ==> MD5 é legítimo
C:\Windows\System32\drivers\rdpdr.sys 9706B84DBABFC4B4CA46C5A82B14DFA3
C:\Windows\System32\drivers\rdpencdd.sys ==> MD5 é legítimo
C:\Windows\System32\drivers\rdprefmp.sys ==> MD5 é legítimo
C:\Windows\System32\Drivers\RDPWD.sys ==> MD5 é legítimo
C:\Windows\System32\drivers\rdyboost.sys ==> MD5 é legítimo
C:\Windows\System32\DRIVERS\rspndr.sys ==> MD5 é legítimo
C:\Windows\system32\DRIVERS\vms3cap.sys 88AF6E02AB19DF7FD07ECDF9C91E9AF6
C:\Windows\system32\DRIVERS\sbp2port.sys ==> MD5 é legítimo
C:\Windows\System32\Drivers\SCDEmu.sys DCDDB49D4C829FD8CB3EF7FAA7F7403B
C:\Windows\System32\DRIVERS\scfilter.sys ==> MD5 é legítimo
C:\Windows\System32\Drivers\secdrv.sys ==> MD5 é legítimo
C:\Windows\System32\DRIVERS\serenum.sys ==> MD5 é legítimo
C:\Windows\System32\DRIVERS\serial.sys ==> MD5 é legítimo
C:\Windows\system32\DRIVERS\sermouse.sys ==> MD5 é legítimo
C:\Windows\system32\DRIVERS\sffdisk.sys ==> MD5 é legítimo
C:\Windows\system32\DRIVERS\sffp_mmc.sys ==> MD5 é legítimo
C:\Windows\system32\DRIVERS\sffp_sd.sys ==> MD5 é legítimo
C:\Windows\system32\DRIVERS\sfloppy.sys ==> MD5 é legítimo
C:\Windows\system32\DRIVERS\SiSRaid2.sys ==> MD5 é legítimo
C:\Windows\system32\DRIVERS\sisraid4.sys ==> MD5 é legítimo
C:\Windows\System32\DRIVERS\smb.sys ==> MD5 é legítimo
C:\Windows\System32\Drivers\spldr.sys ==> MD5 é legítimo
C:\Windows\System32\DRIVERS\srv.sys DE6F5658DA951C4BC8E498570B5B0D5F
C:\Windows\System32\DRIVERS\srv2.sys 4D33D59C0B930C523D29F9BD40CDA9D2
C:\Windows\System32\DRIVERS\srvnet.sys 5A663FD67049267BC5C3F3279E631FFB
C:\Windows\system32\DRIVERS\stexstor.sys ==> MD5 é legítimo
C:\Windows\System32\DRIVERS\vmstorfl.sys FFD7A6F15B14234B5B0E5D49E7961895
C:\Windows\system32\DRIVERS\storvsc.sys 8FCCBEFC5C440B3C23454656E551B09A
C:\Windows\System32\DRIVERS\swenum.sys ==> MD5 é legítimo
C:\Windows\System32\drivers\tcpip.sys 912107716BAB424C7870E8E6AF5E07E1
C:\Windows\System32\DRIVERS\tcpip.sys 912107716BAB424C7870E8E6AF5E07E1
C:\Windows\System32\drivers\tcpipreg.sys ==> MD5 é legítimo
C:\Windows\System32\drivers\tdpipe.sys ==> MD5 é legítimo
C:\Windows\System32\drivers\tdtcp.sys ==> MD5 é legítimo
C:\Windows\System32\DRIVERS\tdx.sys ==> MD5 é legítimo
C:\Windows\System32\DRIVERS\termdd.sys ==> MD5 é legítimo
C:\Windows\System32\DRIVERS\tssecsrv.sys ==> MD5 é legítimo
C:\Windows\System32\DRIVERS\tunnel.sys ==> MD5 é legítimo
C:\Windows\system32\DRIVERS\uagp35.sys ==> MD5 é legítimo
C:\Windows\System32\DRIVERS\udfs.sys ==> MD5 é legítimo
C:\Windows\system32\DRIVERS\uliagpkx.sys ==> MD5 é legítimo
C:\Windows\System32\DRIVERS\umbus.sys ==> MD5 é legítimo
C:\Windows\system32\DRIVERS\umpass.sys ==> MD5 é legítimo
C:\Windows\System32\DRIVERS\usbccgp.sys ==> MD5 é legítimo
C:\Windows\system32\DRIVERS\usbcir.sys ==> MD5 é legítimo
C:\Windows\System32\DRIVERS\usbehci.sys ==> MD5 é legítimo
C:\Windows\System32\DRIVERS\usbhub.sys ==> MD5 é legítimo
C:\Windows\system32\DRIVERS\usbohci.sys ==> MD5 é legítimo
C:\Windows\System32\DRIVERS\usbprint.sys ==> MD5 é legítimo
C:\Windows\System32\DRIVERS\usbscan.sys ==> MD5 é legítimo
C:\Windows\System32\DRIVERS\USBSTOR.SYS ==> MD5 é legítimo
C:\Windows\system32\DRIVERS\usbuhci.sys ==> MD5 é legítimo
C:\Windows\System32\DRIVERS\usb8023x.sys 70D05EE263568A742D14E1876DF80532
C:\Windows\System32\DRIVERS\vdrvroot.sys ==> MD5 é legítimo
C:\Windows\System32\DRIVERS\vgapnp.sys ==> MD5 é legítimo
C:\Windows\System32\drivers\vga.sys ==> MD5 é legítimo
C:\Windows\system32\DRIVERS\vhdmp.sys ==> MD5 é legítimo
C:\Windows\System32\drivers\viahduaa.sys 0AE6B10B700689681A9892E67EE7B00B
C:\Windows\system32\DRIVERS\viaide.sys ==> MD5 é legítimo
C:\Windows\system32\DRIVERS\vmbus.sys 1501699D7EDA984ABC4155A7DA5738D1
C:\Windows\system32\DRIVERS\VMBusHID.sys AE10C35761889E65A6F7176937C5592C
C:\Windows\System32\DRIVERS\volmgr.sys ==> MD5 é legítimo
C:\Windows\System32\drivers\volmgrx.sys ==> MD5 é legítimo
C:\Windows\System32\DRIVERS\volsnap.sys ==> MD5 é legítimo
C:\Windows\system32\DRIVERS\vsmraid.sys ==> MD5 é legítimo
C:\Windows\System32\drivers\vwifibus.sys ==> MD5 é legítimo
C:\Windows\system32\DRIVERS\wacompen.sys ==> MD5 é legítimo
C:\Windows\System32\DRIVERS\wanarp.sys ==> MD5 é legítimo
C:\Windows\System32\DRIVERS\wanarp.sys ==> MD5 é legítimo
C:\Program Files (x86)\GbPlugin\wsftprp64.sys 9B06D67FEDAABE253A2A68B68F5CBD2A
C:\Windows\system32\DRIVERS\wd.sys ==> MD5 é legítimo
C:\Windows\System32\drivers\Wdf01000.sys ==> MD5 é legítimo
C:\Windows\System32\DRIVERS\wfplwf.sys ==> MD5 é legítimo
C:\Windows\System32\drivers\wimmount.sys ==> MD5 é legítimo
C:\Windows\SysWOW64\drivers\wimmount.sys ==> MD5 é legítimo
C:\Windows\System32\DRIVERS\WinUsb.sys ==> MD5 é legítimo
C:\Windows\System32\DRIVERS\wmiacpi.sys ==> MD5 é legítimo
C:\Windows\system32\drivers\ws2ifsl.sys ==> MD5 é legítimo
C:\Windows\System32\drivers\WudfPf.sys ==> MD5 é legítimo
C:\Windows\System32\DRIVERS\WUDFRd.sys ==> MD5 é legítimo

==================== NetSvcs (Whitelisted) ===================

(Se uma entrada for incluída na fixlist, será removida do Registro. O arquivo não será movido, a menos que seja colocado separadamente.)


==================== Três Meses Criados arquivos e pastas ========

(Se uma entrada for incluída na fixlist, o arquivo/pasta será movido.)

2017-06-21 13:07 - 2017-06-21 13:08 - 00036452 _____ C:\Users\Documento\Downloads\FRST.txt
2017-06-21 13:07 - 2017-06-21 13:07 - 00000000 ___HD C:\Users\Public\Documents\AdobeGC
2017-06-21 13:07 - 2017-06-21 13:07 - 00000000 ____D C:\FRST
2017-06-21 13:06 - 2017-06-21 13:06 - 02439680 _____ (Farbar) C:\Users\Documento\Downloads\FRST64.exe
2017-06-16 11:45 - 2017-06-16 11:45 - 00000000 _____ C:\Users\Documento\Desktop\Novo Documento de Texto (3).txt
2017-06-14 12:13 - 2017-06-14 12:13 - 00018476 _____ C:\Users\Documento\Desktop\Boleto2017306692754.pdf
2017-06-12 12:44 - 2017-06-12 12:44 - 00137177 _____ C:\Users\Documento\Desktop\Boletos.pdf
2017-06-06 10:31 - 2017-06-06 10:31 - 00001149 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Creative Cloud.lnk
2017-06-06 10:31 - 2017-06-06 10:31 - 00001137 _____ C:\Users\Public\Desktop\Adobe Creative Cloud.lnk
2017-06-02 14:32 - 2017-06-02 14:32 - 00001040 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Photoshop CC 2015.lnk
2017-06-02 14:32 - 2017-06-02 14:32 - 00000000 ____D C:\Users\Documento\Documents\Adobe
2017-06-02 14:06 - 2017-06-02 14:23 - 00000000 ____D C:\Users\Documento\Desktop\ensaio 02062017
2017-06-01 10:09 - 2017-06-01 10:15 - 17385800 _____ (Google Inc.) C:\Users\Documento\Downloads\picasa-3-9-138-150-multi-win (1).exe
2017-05-31 16:19 - 2017-06-05 14:33 - 30085700 _____ C:\Users\Documento\Downloads\LOGO CUECAS22.cdr
2017-05-31 16:19 - 2017-06-02 16:55 - 31530990 _____ C:\Users\Documento\Downloads\Cópia_de_segurança_de_LOGO CUECAS22.cdr
2017-05-31 14:37 - 2017-05-31 14:37 - 00411179 _____ C:\Users\Documento\Downloads\logo Tippo.cdr
2017-05-26 16:17 - 2017-05-26 16:17 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MinerGate
2017-05-26 16:17 - 2017-05-26 16:17 - 00000000 ____D C:\Program Files\MinerGate
2017-05-26 16:07 - 2017-05-26 16:06 - 12842216 _____ C:\Users\Documento\Desktop\Claymore.s.Dual.Ethereum.Decred_Siacoin_Lbry_Pascal.AMD.NVIDIA.GPU.Miner.v9.4.zip
2017-05-25 17:32 - 2017-05-26 16:06 - 00000000 ____D C:\Users\Documento\Desktop\Claymore's Dual Ethereum+Decred_Siacoin_Lbry_Pascal AMD+NVIDIA GPU Miner v9.4
2017-05-23 15:05 - 2017-05-23 15:05 - 00137078 _____ C:\Users\Documento\Downloads\Boletos (1).pdf
2017-05-23 15:03 - 2017-05-23 15:03 - 00137205 _____ C:\Users\Documento\Downloads\Boletos.pdf
2017-05-22 13:24 - 2017-05-22 13:24 - 00246732 _____ C:\Users\Documento\Downloads\cinzel.zip
2017-05-22 12:47 - 2017-06-21 13:00 - 00000000 ___RD C:\Users\Documento\Creative Cloud Files
2017-05-22 12:47 - 2017-06-05 10:27 - 00000000 ____D C:\Users\Todos os Usuários\boost_interprocess
2017-05-22 12:47 - 2017-06-05 10:27 - 00000000 ____D C:\ProgramData\boost_interprocess
2017-05-19 14:51 - 2017-05-19 17:40 - 133618447 _____ C:\Users\Documento\Documents\OUTDOOR DOC JEANS.cdr
2017-05-19 14:51 - 2017-05-19 17:19 - 132668379 _____ C:\Users\Documento\Documents\Cópia_de_segurança_de_OUTDOOR DOC JEANS.cdr
2017-05-19 11:06 - 2017-05-19 11:06 - 14749120 _____ (Microsoft Corporation) C:\Users\Documento\Downloads\vc_redist.x64.exe
2017-05-19 11:03 - 2017-05-19 11:03 - 00003630 _____ C:\Users\Documento\Downloads\api-ms-win-crt-runtime-l1-1-0.zip
2017-05-19 11:00 - 2017-06-02 14:32 - 00000000 ____D C:\Program Files\Common Files\Adobe
2017-05-19 11:00 - 2017-05-19 11:00 - 00002463 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Illustrator CC 2017.lnk
2017-05-18 17:24 - 2017-05-18 17:24 - 06443195 _____ C:\Users\Documento\Downloads\Neon-social-media-icons.zip
2017-05-18 16:27 - 2017-05-18 17:59 - 186618391 _____ C:\Users\Documento\Documents\convite doc jeans.cdr
2017-05-18 16:27 - 2017-05-18 17:13 - 180983165 _____ C:\Users\Documento\Documents\Cópia_de_segurança_de_convite doc jeans.cdr
2017-05-15 16:35 - 2017-06-07 17:37 - 64405482 _____ C:\Users\Documento\Documents\ARTES CAMISARIA.cdr
2017-05-15 16:35 - 2017-06-01 16:33 - 64353251 _____ C:\Users\Documento\Documents\Cópia_de_segurança_de_ARTES CAMISARIA.cdr
2017-05-15 15:56 - 2017-05-15 15:57 - 04141239 _____ C:\Users\Documento\Downloads\Visa-stamps-collection.zip
2017-05-15 15:23 - 2017-05-15 15:23 - 04759967 _____ C:\Users\Documento\Downloads\Best-product-luxury-labels.zip
2017-05-15 14:42 - 2017-05-15 14:42 - 04239333 _____ C:\Users\Documento\Downloads\coco_gothic.zip
2017-05-15 14:28 - 2017-05-16 17:25 - 00011130 _____ C:\Users\Documento\Documents\DOC. BASIC-PREMIUM.xlsx
2017-05-15 11:41 - 2017-05-15 11:53 - 00010850 _____ C:\Users\Documento\Desktop\DOC. BASIC-PREMIUM.xlsx
2017-05-13 11:09 - 2017-05-13 11:09 - 03528259 _____ C:\Users\Documento\Downloads\Faixa de Entrada.pdf
2017-05-13 09:50 - 2017-05-13 09:50 - 05003032 _____ C:\Users\Documento\Downloads\Set-reflections-golden-effects-light.zip
2017-05-13 09:44 - 2017-05-13 09:44 - 03222378 _____ C:\Users\Documento\Downloads\Set-transparent-light-effects-sparkles.zip
2017-05-13 09:28 - 2017-05-13 09:28 - 09138082 _____ C:\Users\Documento\Downloads\Casino-signal-design.zip
2017-05-13 09:28 - 2017-05-13 09:28 - 02194936 _____ C:\Users\Documento\Downloads\Background-2016-with-golden-lights.zip
2017-05-13 09:27 - 2017-05-13 09:27 - 09090337 _____ C:\Users\Documento\Downloads\Blurred-bokeh-background-warm-tones.zip
2017-05-11 11:12 - 2017-05-11 11:12 - 00325241 _____ C:\Users\Documento\Downloads\cartao doc jeans conv. curvas.cdr
2017-05-11 11:04 - 2017-05-11 11:04 - 00426483 _____ C:\Users\Documento\Downloads\venilson cartao visita conv. curvas.cdr
2017-05-11 11:02 - 2017-05-11 11:02 - 00323695 _____ C:\Users\Documento\Downloads\cartao doc jeans.cdr
2017-05-09 16:31 - 2017-05-09 16:31 - 01501372 _____ C:\Users\Documento\Downloads\roboto.zip
2017-05-09 16:31 - 2017-05-09 16:31 - 00210692 _____ C:\Users\Documento\Downloads\champagne_limousines.zip
2017-05-09 16:09 - 2017-05-09 16:09 - 00018127 _____ C:\Users\Documento\Downloads\sunshine_boulevard.zip
2017-05-09 15:57 - 2017-05-09 15:57 - 00199352 _____ C:\Users\Documento\Downloads\vincentia.zip
2017-05-09 15:54 - 2017-05-09 15:54 - 02796251 _____ C:\Users\Documento\Downloads\Wedding-badges-with-ornaments-vintage-style.zip
2017-05-08 12:29 - 2017-05-08 12:29 - 01008827 _____ C:\Users\Documento\Downloads\ghost_army_stencil.zip
2017-05-08 12:29 - 2017-05-08 12:29 - 00031968 _____ C:\Users\Documento\Downloads\aspades.zip
2017-05-08 12:17 - 2017-05-08 12:17 - 18758259 _____ C:\Users\Documento\Downloads\Banner edit.By studiovip.rar
2017-05-07 18:05 - 2017-05-07 18:05 - 00000000 ____D C:\Users\Documento\AppData\Roaming\TechSmith
2017-05-07 18:04 - 2017-05-08 12:10 - 00000000 ____D C:\Users\Documento\Documents\Camtasia Studio
2017-05-07 18:04 - 2017-05-07 18:04 - 00000000 ____D C:\Users\Documento\AppData\Local\TechSmith
2017-05-07 18:02 - 2017-05-07 18:02 - 00001168 _____ C:\Users\Public\Desktop\Camtasia Studio 8.lnk
2017-05-07 18:02 - 2017-05-07 18:02 - 00000000 ____D C:\Users\Todos os Usuários\TechSmith
2017-05-07 18:02 - 2017-05-07 18:02 - 00000000 ____D C:\Users\Todos os Usuários\regid.1995-08.com.techsmith
2017-05-07 18:02 - 2017-05-07 18:02 - 00000000 ____D C:\ProgramData\TechSmith
2017-05-07 18:02 - 2017-05-07 18:02 - 00000000 ____D C:\ProgramData\regid.1995-08.com.techsmith
2017-05-07 18:02 - 2017-05-07 18:02 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TechSmith
2017-05-05 18:39 - 2017-06-02 13:37 - 00000000 ____D C:\Users\Documento\Desktop\CARTAO VISITA
2017-05-05 17:38 - 2017-05-05 17:38 - 00000584 _____ C:\Users\Documento\Downloads\oficial QR.zip
2017-05-05 17:03 - 2017-05-05 17:03 - 00000586 _____ C:\Users\Documento\Downloads\qr_code (1).zip
2017-05-05 16:43 - 2017-05-05 16:43 - 00000586 _____ C:\Users\Documento\Downloads\qr_code.zip
2017-05-05 16:10 - 2017-05-05 16:10 - 01015736 _____ C:\Users\Documento\Downloads\Scial-network-icons-collection.zip
2017-05-05 15:59 - 2017-05-05 15:59 - 00786476 _____ C:\Users\Documento\Downloads\Universal-icons.zip
2017-05-05 15:57 - 2017-05-05 15:57 - 00512814 _____ C:\Users\Documento\Downloads\Popular-social-networking-icons.zip
2017-05-05 15:53 - 2017-05-05 15:53 - 00110843 _____ C:\Users\Documento\Downloads\jellyka_saint_andrew_s_queen.zip
2017-05-05 12:16 - 2017-05-31 14:04 - 00003236 _____ C:\Windows\System32\Tasks\klcp_update
2017-05-05 12:15 - 2017-05-05 12:15 - 00000000 ____D C:\Users\Documento\AppData\Roaming\MPC-HC
2017-05-05 12:15 - 2017-05-05 12:15 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\K-Lite Codec Pack
2017-05-05 12:15 - 2016-05-08 07:27 - 03613696 _____ (x264vfw project) C:\Windows\SysWOW64\x264vfw.dll
2017-05-05 12:15 - 2015-12-18 07:00 - 00674816 _____ C:\Windows\SysWOW64\xvidcore.dll
2017-05-05 12:15 - 2015-12-18 07:00 - 00282112 _____ C:\Windows\SysWOW64\xvidvfw.dll
2017-05-05 12:15 - 2015-10-24 14:00 - 00112128 _____ C:\Windows\SysWOW64\ff_vfw.dll
2017-05-05 12:15 - 2012-07-21 08:54 - 00122880 _____ (fccHandler) C:\Windows\SysWOW64\ac3acm.acm
2017-05-05 12:15 - 2011-12-07 15:32 - 00216064 _____ ( ) C:\Windows\SysWOW64\lagarith.dll
2017-05-05 12:14 - 2017-05-05 12:14 - 14116136 _____ (MPC-HC Team ) C:\Users\Documento\Desktop\MPC-HC.1.7.11.x64.exe
2017-05-05 12:05 - 2017-05-01 17:14 - 00134592 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvStreaming.exe
2017-05-05 12:05 - 2017-03-10 18:17 - 00525600 _____ C:\Windows\SysWOW64\vulkan-1.dll
2017-05-05 12:05 - 2017-03-10 18:17 - 00233760 _____ C:\Windows\SysWOW64\vulkaninfo.exe
2017-05-05 12:00 - 2017-05-01 19:32 - 35281528 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcompiler.dll
2017-05-05 12:00 - 2017-05-01 19:32 - 28592760 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll
2017-05-05 12:00 - 2017-05-01 19:32 - 17423240 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvwgf2um.dll
2017-05-05 12:00 - 2017-05-01 19:32 - 14270072 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys
2017-05-05 12:00 - 2017-05-01 19:32 - 13401256 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvd3dum.dll
2017-05-05 12:00 - 2017-05-01 19:32 - 09245560 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll
2017-05-05 12:00 - 2017-05-01 19:32 - 09014792 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvptxJitCompiler.dll
2017-05-05 12:00 - 2017-05-01 19:32 - 08805416 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll
2017-05-05 12:00 - 2017-05-01 19:32 - 03012032 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll
2017-05-05 12:00 - 2017-05-01 19:32 - 00991168 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll
2017-05-05 12:00 - 2017-05-01 19:32 - 00911992 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll
2017-05-05 12:00 - 2017-05-01 19:32 - 00577728 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvfatbinaryLoader.dll
2017-05-05 12:00 - 2017-05-01 19:32 - 00499136 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFROpenGL.dll
2017-05-05 12:00 - 2017-05-01 19:32 - 00426128 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvEncodeAPI.dll
2017-05-05 12:00 - 2017-05-01 19:32 - 00406736 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvumdshim.dll
2017-05-05 12:00 - 2017-05-01 19:32 - 00148016 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvinit.dll
2017-05-05 12:00 - 2017-05-01 19:32 - 00131720 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglshim32.dll
2017-05-05 11:15 - 2017-05-05 11:15 - 00003814 _____ C:\Windows\System32\Tasks\NVIDIA GeForce Experience SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2017-05-05 11:13 - 2017-05-03 17:21 - 00143480 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvaudcap32v.dll
2017-05-05 11:13 - 2017-05-03 17:21 - 00048248 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvvad64v.sys
2017-05-04 13:51 - 2017-05-04 13:51 - 00001231 _____ C:\Users\Documento\Desktop\Adobe Dreamweaver CS6.lnk
2017-05-04 13:47 - 2017-05-04 13:47 - 00003520 _____ C:\Windows\System32\Tasks\AdobeAAMUpdater-1.0-VICKTORDOC-PC-Documento
2017-05-04 13:31 - 2017-06-02 14:32 - 00000000 ____D C:\Users\Todos os Usuários\regid.1986-12.com.adobe
2017-05-04 13:31 - 2017-06-02 14:32 - 00000000 ____D C:\ProgramData\regid.1986-12.com.adobe
2017-05-04 13:31 - 2017-05-04 13:31 - 00000000 ____D C:\Users\Documento\AppData\LocalLow\Adobe
2017-05-04 13:30 - 2017-05-04 13:30 - 00001231 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Dreamweaver CS6.lnk
2017-05-04 13:29 - 2017-05-04 13:29 - 00001353 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Extension Manager CS6.lnk
2017-05-04 13:28 - 2017-05-04 13:28 - 00001519 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe ExtendScript Toolkit CS6.lnk
2017-05-04 13:28 - 2017-05-04 13:28 - 00000997 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Help.lnk
2017-05-04 13:27 - 2017-05-04 13:27 - 00001097 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Widget Browser.lnk
2017-05-04 13:27 - 2017-05-04 13:27 - 00000000 ____D C:\Users\Usuário Padrão\AppData\Roaming\Macromedia
2017-05-04 13:27 - 2017-05-04 13:27 - 00000000 ____D C:\Users\Default\AppData\Roaming\Macromedia
2017-05-04 13:27 - 2017-05-04 13:27 - 00000000 ____D C:\Users\Default User\AppData\Roaming\Macromedia
2017-05-04 13:11 - 2017-06-02 14:45 - 00000000 ____D C:\Users\Documento\AppData\Roaming\Adobe
2017-05-04 13:11 - 2017-06-02 14:22 - 00000000 ____D C:\Users\Todos os Usuários\Adobe
2017-05-04 13:11 - 2017-06-02 14:22 - 00000000 ____D C:\ProgramData\Adobe
2017-05-04 13:11 - 2017-05-04 13:11 - 00000000 ____D C:\Users\Documento\AppData\Roaming\Macromedia
2017-05-04 13:10 - 2017-06-21 13:08 - 00000000 ____D C:\Users\Documento\AppData\Local\Adobe
2017-05-04 12:21 - 2017-05-04 12:21 - 00000000 ____D C:\Users\Documento\Desktop\pt
2017-05-04 12:18 - 2017-05-04 12:21 - 00027459 ____H C:\Users\Documento\Desktop\Web_Services_Hacking_and_Hardening.m7p
2017-05-04 12:18 - 2017-05-04 12:18 - 00000000 ____D C:\Users\Todos os Usuários\multilizer
2017-05-04 12:18 - 2017-05-04 12:18 - 00000000 ____D C:\Users\Documento\Documents\Multilizer
2017-05-04 12:18 - 2017-05-04 12:18 - 00000000 ____D C:\Users\Documento\AppData\Roaming\multilizer
2017-05-04 12:18 - 2017-05-04 12:18 - 00000000 ____D C:\ProgramData\multilizer
2017-05-04 12:18 - 2017-05-04 12:18 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Multilizer PDF Translator
2017-05-04 12:17 - 2017-05-04 12:17 - 06541080 _____ (Rex Partners ) C:\Users\Documento\Downloads\PDFTranslatorMultilizerv2.exe
2017-05-04 12:08 - 2017-05-04 12:09 - 16927069 _____ C:\Users\Documento\Downloads\Web Hacking.zip
2017-05-04 11:30 - 2017-05-04 11:30 - 00000846 _____ C:\Users\Documento\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Start Tor Browser.lnk
2017-05-04 11:30 - 2017-05-04 11:30 - 00000798 _____ C:\Users\Documento\Desktop\Start Tor Browser.lnk
2017-05-04 11:30 - 2017-05-04 11:30 - 00000000 ____D C:\Users\Documento\Desktop\Tor Browser
2017-05-04 11:28 - 2017-05-04 11:29 - 50881720 _____ C:\Users\Documento\Downloads\torbrowser-install-6.5.2_en-US.exe
2017-05-03 15:05 - 2017-05-03 15:05 - 00228819 _____ C:\Users\Documento\Downloads\BOLETO_111654000.pdf
2017-05-03 12:46 - 2017-06-21 13:01 - 00005038 _____ C:\Windows\System32\Tasks\Microsoft Office 15 Sync Maintenance for VICKTORDOC-PC-Documento VicktorDoc-PC
2017-05-02 15:24 - 2017-06-21 13:01 - 00000000 ____D C:\Users\Documento\AppData\Local\minergate
2017-05-02 14:21 - 2017-05-02 14:21 - 00000000 ____D C:\Users\Documento\AppData\Local\TeamViewer
2017-05-02 14:15 - 2017-05-02 14:15 - 00000000 ____D C:\Users\Documento\AppData\Roaming\Obsidium
2017-05-02 14:12 - 2017-06-02 17:40 - 00000971 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamViewer 12.lnk
2017-05-02 14:12 - 2017-06-02 17:40 - 00000959 _____ C:\Users\Public\Desktop\TeamViewer 12.lnk
2017-05-02 14:12 - 2017-05-04 12:19 - 00000000 ____D C:\Users\Documento\AppData\Roaming\TeamViewer
2017-05-02 14:10 - 2017-05-02 14:10 - 26842496 _____ C:\Users\Documento\Downloads\TeamViewer.12.0.75813.Incl.patch-URET_v4.8_E.zip
2017-05-02 14:08 - 2017-05-02 14:09 - 12945320 _____ C:\Users\Documento\Downloads\TeamViewer_Setup_es.rar
2017-05-02 12:42 - 2017-05-02 12:42 - 00000000 ____D C:\Users\Documento\AppData\Roaming\Google
2017-05-02 12:37 - 2017-05-02 12:37 - 01130328 _____ (Google Inc.) C:\Users\Documento\Downloads\ChromeSetup.exe
2017-04-30 15:38 - 2017-04-30 15:38 - 00000000 ____D C:\Users\Documento\ansel
2017-04-30 15:36 - 2017-04-30 15:36 - 00007594 _____ C:\Users\Documento\AppData\Local\Resmon.ResmonCfg
2017-04-30 14:51 - 2017-04-30 14:51 - 00000868 _____ C:\Users\Public\Desktop\Watch Dogs 2.lnk
2017-04-30 14:51 - 2017-04-30 14:51 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Watch Dogs 2
2017-04-30 14:13 - 2017-04-30 14:13 - 00000000 ____D C:\Users\Public\Documents\DAEMON Tools Images
2017-04-25 13:41 - 2017-04-25 13:41 - 00010141 _____ C:\Users\Documento\Documents\VALE FUNCIONARIOS.xlsx
2017-04-20 16:52 - 2017-04-20 16:52 - 00000561 _____ C:\Users\Documento\Desktop\Fraps.lnk
2017-04-20 16:52 - 2017-04-20 16:52 - 00000000 ____D C:\Users\Documento\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Fraps
2017-04-20 16:51 - 2017-04-20 16:51 - 02381984 _____ C:\Users\Documento\Downloads\FRAPS 3.0.3 + Crack.rar
2017-04-20 13:00 - 2017-04-02 13:12 - 00218040 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvhda64v.sys
2017-04-20 13:00 - 2017-03-31 21:41 - 00076840 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvvhci.sys
2017-04-20 12:59 - 2017-04-01 00:20 - 00000669 _____ C:\Windows\SysWOW64\nv-vk32.json
2017-04-20 11:57 - 2017-04-20 11:57 - 00715696 _____ () C:\Users\Documento\Downloads\setup.exe
2017-04-18 16:28 - 2017-04-18 16:28 - 00000812 _____ C:\Users\Public\Desktop\PowerISO.lnk
2017-04-18 16:28 - 2017-04-18 16:28 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PowerISO
2017-04-18 16:28 - 2016-10-01 21:50 - 00137280 _____ (Power Software Ltd) C:\Windows\system32\Drivers\scdemu.sys
2017-04-12 17:49 - 2017-04-30 15:38 - 00000000 ____D C:\Users\Documento\Documents\My Games
2017-04-12 17:49 - 2017-04-30 15:38 - 00000000 ____D C:\Users\Documento\Documents\CPY_SAVES
2017-04-12 17:48 - 2017-04-12 17:48 - 00021077 _____ C:\Users\Documento\Downloads\cpy-fcp.crk.only.rar
2017-04-12 17:42 - 2017-04-12 17:42 - 00001243 _____ C:\Users\Public\Desktop\Far Cry Primal.lnk
2017-04-12 17:42 - 2017-04-12 17:42 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Far Cry Primal
2017-04-12 13:42 - 2017-04-12 18:09 - 00003490 _____ C:\Windows\System32\Tasks\AutoKMS
2017-04-12 12:10 - 2017-04-12 12:09 - 00000202 _____ C:\Windows\system32\Drivers\etc\hosts.backup
2017-04-12 12:08 - 2017-04-12 12:08 - 00000000 _____ C:\Users\Documento\Desktop\Novo Documento de Texto (2).txt
2017-04-12 12:05 - 2017-04-12 12:05 - 01987146 _____ C:\Users\Documento\Downloads\Spotify Sem Propaganda.rar
2017-04-12 12:01 - 2017-04-12 12:01 - 01485870 _____ C:\Users\Documento\Downloads\Namsofy.crx
2017-04-12 11:49 - 2017-06-21 12:57 - 00000004 _____ C:\Windows\SysWOW64\cwsfe.dll
2017-04-10 14:02 - 2017-04-10 14:02 - 00000755 _____ C:\Users\Documento\Desktop\Easy Chat Server.lnk
2017-04-10 14:02 - 2017-04-10 14:02 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Easy Chat Server
2017-04-10 13:59 - 2017-04-10 13:59 - 01418422 _____ (EFS Software, Inc. ) C:\Users\Documento\Downloads\Baixaki_easy-chat-server [1].exe
2017-04-10 13:58 - 2017-04-10 13:58 - 01838720 _____ (Stub Installer ) C:\Users\Documento\Downloads\Baixaki_easy-chat-server.exe
2017-04-10 13:51 - 2017-04-12 17:59 - 00001923 _____ C:\Users\Documento\Documents\ChatSeguroConfig.bin
2017-04-10 13:51 - 2017-04-10 13:51 - 00000000 ____D C:\Users\Documento\Documents\ChatSeguro
2017-04-10 13:47 - 2017-04-10 13:48 - 03187712 _____ C:\Users\Documento\Downloads\chatseguro_setup.msi
2017-04-06 11:25 - 2017-04-06 11:25 - 00000930 _____ C:\Users\Public\Desktop\EPSON Scan.lnk
2017-04-06 11:12 - 2017-04-06 11:24 - 24407560 _____ C:\Users\Documento\Downloads\L220_WW_WIN_4012_41.exe
2017-04-06 11:09 - 2017-04-06 11:09 - 00000000 ___RD C:\Users\Documento\Documents\Scanned Documents
2017-04-06 11:09 - 2017-04-06 11:09 - 00000000 ____D C:\Users\Documento\Documents\Fax
2017-04-05 16:03 - 2017-06-21 13:03 - 00000913 _____ C:\Windows\Tasks\EPSON L220 Series Update {FA4B4616-FF78-4A16-814F-285137F9BEA6}.job
2017-04-05 16:03 - 2017-04-05 16:03 - 00003980 _____ C:\Windows\System32\Tasks\EPSON L220 Series Update {FA4B4616-FF78-4A16-814F-285137F9BEA6}
2017-04-05 15:59 - 2017-04-05 16:01 - 31198704 _____ C:\Users\Documento\Downloads\L220_x64_222JAUsHomeExportAsiaML.exe
2017-04-05 13:57 - 2017-04-05 13:57 - 00000000 ____D C:\Users\Documento\Downloads\Far.Cry.Primal-CPY
2017-04-03 12:02 - 2017-06-16 10:58 - 00031017 _____ C:\Users\Documento\Documents\METAS DOCUMENTO JEANS.xlsx
2017-03-28 13:05 - 2017-03-28 13:05 - 00000000 ____D C:\Users\Documento\AppData\Local\PointBlank
2017-03-28 11:40 - 2017-03-28 11:40 - 00000745 _____ C:\Users\Documento\Desktop\PointBlank.lnk
2017-03-28 11:40 - 2017-03-28 11:40 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PointBlank
2017-03-27 16:38 - 2017-06-21 12:58 - 00000000 ___SD C:\Users\Documento\AppData\LocalLow\Temp
2017-03-27 16:36 - 2010-06-02 04:55 - 00527192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_7.dll
2017-03-27 16:36 - 2010-06-02 04:55 - 00239960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_7.dll
2017-03-27 16:36 - 2010-06-02 04:55 - 00074072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_5.dll
2017-03-27 16:36 - 2010-05-26 11:41 - 02106216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_43.dll
2017-03-27 16:36 - 2010-05-26 11:41 - 01868128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dcsx_43.dll
2017-03-27 16:36 - 2010-02-04 10:01 - 00528216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_6.dll
2017-03-27 16:36 - 2010-02-04 10:01 - 00238936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_6.dll
2017-03-27 16:36 - 2010-02-04 10:01 - 00074072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_4.dll
2017-03-27 16:36 - 2010-02-04 10:01 - 00022360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_7.dll
2017-03-27 16:36 - 2009-09-04 17:44 - 00515416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_5.dll
2017-03-27 16:36 - 2009-09-04 17:44 - 00238936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_5.dll
2017-03-27 16:36 - 2009-09-04 17:44 - 00069464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_3.dll
2017-03-27 16:36 - 2009-09-04 17:29 - 05501792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dcsx_42.dll
2017-03-27 16:36 - 2009-09-04 17:29 - 01974616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_42.dll
2017-03-27 16:36 - 2009-09-04 17:29 - 01892184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_42.dll
2017-03-27 16:36 - 2009-09-04 17:29 - 00453456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_42.dll
2017-03-27 16:36 - 2009-09-04 17:29 - 00235344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx11_42.dll
2017-03-27 16:36 - 2009-03-16 14:18 - 00517448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_4.dll
2017-03-27 16:36 - 2009-03-16 14:18 - 00235352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_4.dll
2017-03-27 16:36 - 2009-03-16 14:18 - 00022360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_6.dll
2017-03-27 16:36 - 2009-03-09 15:27 - 04178264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_41.dll
2017-03-27 16:36 - 2009-03-09 15:27 - 01846632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_41.dll
2017-03-27 16:36 - 2009-03-09 15:27 - 00453456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_41.dll
2017-03-27 16:36 - 2008-10-27 10:04 - 00514384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_3.dll
2017-03-27 16:36 - 2008-10-27 10:04 - 00235856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_3.dll
2017-03-27 16:36 - 2008-10-27 10:04 - 00070992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_2.dll
2017-03-27 16:36 - 2008-10-27 10:04 - 00023376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_5.dll
2017-03-27 16:36 - 2008-10-10 04:52 - 04379984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_40.dll
2017-03-27 16:36 - 2008-10-10 04:52 - 02036576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_40.dll
2017-03-27 16:36 - 2008-10-10 04:52 - 00452440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_40.dll
2017-03-27 16:36 - 2008-07-31 10:41 - 00238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_2.dll
2017-03-27 16:36 - 2008-07-31 10:41 - 00068616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_1.dll
2017-03-27 16:36 - 2008-07-31 10:40 - 00509448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_2.dll
2017-03-27 16:36 - 2008-07-10 11:01 - 00467984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_39.dll
2017-03-27 16:36 - 2008-07-10 11:00 - 03851784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_39.dll
2017-03-27 16:36 - 2008-07-10 11:00 - 01493528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_39.dll
2017-03-27 16:36 - 2008-05-30 14:19 - 00507400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_1.dll
2017-03-27 16:36 - 2008-05-30 14:18 - 00238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_1.dll
2017-03-27 16:36 - 2008-05-30 14:17 - 00065032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_0.dll
2017-03-27 16:36 - 2008-05-30 14:17 - 00025608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_4.dll
2017-03-27 16:36 - 2008-05-30 14:11 - 03850760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_38.dll
2017-03-27 16:36 - 2008-05-30 14:11 - 01491992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_38.dll
2017-03-27 16:36 - 2008-05-30 14:11 - 00467984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_38.dll
2017-03-27 16:36 - 2008-03-05 16:03 - 00479752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_0.dll
2017-03-27 16:35 - 2008-03-05 16:03 - 00238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_0.dll
2017-03-27 16:35 - 2008-03-05 16:00 - 00025608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_3.dll
2017-03-27 16:35 - 2008-03-05 15:56 - 03786760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_37.dll
2017-03-27 16:35 - 2008-03-05 15:56 - 01420824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_37.dll
2017-03-27 16:35 - 2008-02-05 23:07 - 00462864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_37.dll
2017-03-27 16:35 - 2007-10-22 03:39 - 00267272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_10.dll
2017-03-27 16:35 - 2007-10-22 03:37 - 00017928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_2.dll
2017-03-27 16:35 - 2007-10-12 15:14 - 03734536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_36.dll
2017-03-27 16:35 - 2007-10-12 15:14 - 01374232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_36.dll
2017-03-27 16:35 - 2007-10-02 09:56 - 00444776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_36.dll
2017-03-27 16:35 - 2007-07-20 00:57 - 00267112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_9.dll
2017-03-27 16:35 - 2007-07-19 18:14 - 03727720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_35.dll
2017-03-27 16:35 - 2007-07-19 18:14 - 01358192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_35.dll
2017-03-27 16:35 - 2007-07-19 18:14 - 00444776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_35.dll
2017-03-27 16:35 - 2007-06-20 20:46 - 00266088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_8.dll
2017-03-27 16:35 - 2007-05-16 16:45 - 03497832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_34.dll
2017-03-27 16:35 - 2007-05-16 16:45 - 01124720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_34.dll
2017-03-27 16:35 - 2007-05-16 16:45 - 00443752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_34.dll
2017-03-27 16:35 - 2007-04-04 18:55 - 00261480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_7.dll
2017-03-27 16:35 - 2007-04-04 18:53 - 00081768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_3.dll
2017-03-27 16:35 - 2007-03-15 16:57 - 00443752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_33.dll
2017-03-27 16:35 - 2007-03-12 16:42 - 03495784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_33.dll
2017-03-27 16:35 - 2007-03-12 16:42 - 01123696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_33.dll
2017-03-27 16:35 - 2007-03-05 12:42 - 00015128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\x3daudio1_1.dll
2017-03-27 16:35 - 2007-01-24 15:27 - 00255848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_6.dll
2017-03-27 16:35 - 2006-12-08 12:02 - 00251672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_5.dll
2017-03-27 16:35 - 2006-11-29 13:06 - 03426072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_32.dll
2017-03-27 16:35 - 2006-11-29 13:06 - 00440080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10.dll
2017-03-27 16:35 - 2006-09-28 16:05 - 02414360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_31.dll
2017-03-27 16:35 - 2006-09-28 16:05 - 00237848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_4.dll
2017-03-27 16:35 - 2006-07-28 09:30 - 00236824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_3.dll
2017-03-27 16:35 - 2006-07-28 09:30 - 00062744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_2.dll
2017-03-27 16:35 - 2006-05-31 07:24 - 00230168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_2.dll
2017-03-27 16:35 - 2006-03-31 12:40 - 02388176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_30.dll
2017-03-27 16:35 - 2006-03-31 12:39 - 00229584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_1.dll
2017-03-27 16:35 - 2006-03-31 12:39 - 00062672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_1.dll
2017-03-27 16:35 - 2006-02-03 08:43 - 02332368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_29.dll
2017-03-27 16:35 - 2006-02-03 08:42 - 00230096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_0.dll
2017-03-27 16:35 - 2006-02-03 08:41 - 00014032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\x3daudio1_0.dll
2017-03-27 16:35 - 2005-12-05 18:09 - 02323664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_28.dll
2017-03-27 16:35 - 2005-07-22 19:59 - 02319568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_27.dll
2017-03-27 16:35 - 2005-05-26 15:34 - 02297552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_26.dll
2017-03-27 16:35 - 2005-03-18 17:19 - 02337488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_25.dll
2017-03-27 16:35 - 2005-02-05 19:45 - 02222800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_24.dll
2017-03-27 16:31 - 2017-03-27 16:37 - 00000000 ____D C:\Windows\SysWOW64\directx
2017-03-27 16:30 - 2017-03-27 16:30 - 00254107 _____ C:\Users\Documento\Downloads\DirectX By TG Viideos.rar
2017-03-27 16:23 - 2017-03-28 10:07 - 1654866387 _____ C:\Users\Documento\Downloads\PointBlankSetup_20161215.rar
2017-03-27 16:22 - 2017-03-27 16:22 - 00016156 _____ C:\Users\Documento\Downloads\PointBlankSetup_20161215.rar.torrent
2017-03-24 14:12 - 2017-04-12 12:40 - 00000868 _____ C:\Users\Documento\Desktop\Notepad++.lnk
2017-03-24 14:00 - 2017-03-24 14:00 - 00000000 ____D C:\Users\Documento\AppData\Roaming\Notepad++
2017-03-24 14:00 - 2017-03-24 14:00 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Notepad++
2017-03-24 13:59 - 2017-03-24 13:59 - 02974456 _____ C:\Users\Documento\Downloads\npp.7.3.3.Installer.x64.exe
2017-03-24 13:40 - 2017-05-29 12:27 - 00003008 _____ C:\Users\Documento\Desktop\PAG 2017.lnk
2017-03-23 11:40 - 2017-04-20 21:33 - 00000000 ____D C:\Users\Documento\AppData\Local\Spotify
2017-03-23 11:40 - 2017-03-23 11:40 - 00001829 _____ C:\Users\Documento\Desktop\Spotify.lnk
2017-03-23 11:40 - 2017-03-23 11:40 - 00001815 _____ C:\Users\Documento\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Spotify.lnk
2017-03-23 11:39 - 2017-04-20 19:37 - 00000000 ____D C:\Users\Documento\AppData\Roaming\Spotify
2017-03-23 11:38 - 2017-03-23 11:38 - 00277200 _____ (Spotify Ltd) C:\Users\Documento\Downloads\SpotifySetup.exe

==================== Três Meses Modificados arquivos e pastas ========

(Se uma entrada for incluída na fixlist, o arquivo/pasta será movido.)

2017-06-21 13:08 - 2017-03-07 18:17 - 00000000 ____D C:\Users\Todos os Usuários\NVIDIA
2017-06-21 13:08 - 2017-03-07 18:17 - 00000000 ____D C:\ProgramData\NVIDIA
2017-06-21 13:06 - 2009-07-14 01:45 - 00014016 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2017-06-21 13:06 - 2009-07-14 01:45 - 00014016 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2017-06-21 13:02 - 2017-03-17 12:02 - 00000000 ____D C:\Users\Documento\AppData\Roaming\BitTorrent
2017-06-21 12:58 - 2017-03-08 17:02 - 00000000 ____D C:\Users\Documento\AppData\LocalLow\360WD
2017-06-21 12:57 - 2009-07-14 02:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2017-06-20 15:19 - 2009-07-29 13:08 - 00770094 _____ C:\Windows\system32\prfh0416.dat
2017-06-20 15:19 - 2009-07-29 13:08 - 00169644 _____ C:\Windows\system32\prfc0416.dat
2017-06-20 15:19 - 2009-07-14 02:13 - 01805386 _____ C:\Windows\system32\PerfStringBackup.INI
2017-06-20 15:19 - 2009-07-14 00:20 - 00000000 ____D C:\Windows\inf
2017-06-20 14:49 - 2017-03-09 09:50 - 00000000 ____D C:\Users\Documento\AppData\Local\CrashDumps
2017-06-19 16:58 - 2017-03-08 17:57 - 00000000 ____D C:\Users\Public\Documents\Corel
2017-06-12 12:35 - 2017-03-21 10:02 - 00144920 _____ C:\Users\Documento\AppData\Local\GDIPFONTCACHEV1.DAT
2017-06-12 12:34 - 2017-03-21 11:38 - 00570544 _____ C:\Windows\system32\FNTCACHE.DAT
2017-06-07 10:19 - 2017-05-02 14:12 - 00000000 ____D C:\Program Files (x86)\TeamViewer
2017-06-06 10:30 - 2017-05-04 13:27 - 00000000 ____D C:\Program Files (x86)\Adobe
2017-06-05 13:46 - 2009-07-14 00:20 - 00000000 ____D C:\Windows\system32\NDF
2017-06-02 14:29 - 2017-03-07 18:16 - 00000000 ____D C:\Users\Todos os Usuários\Package Cache
2017-06-02 14:29 - 2017-03-07 18:16 - 00000000 ____D C:\ProgramData\Package Cache
2017-06-02 14:25 - 2017-05-19 10:59 - 00000000 ____D C:\Program Files\Adobe
2017-06-01 10:05 - 2017-03-17 12:02 - 00000000 __SHD C:\$360Section
2017-06-01 10:05 - 2017-03-08 17:07 - 00000000 ____D C:\Users\Todos os Usuários\360Quarant
2017-06-01 10:05 - 2017-03-08 17:07 - 00000000 ____D C:\ProgramData\360Quarant
2017-05-31 14:04 - 2017-03-07 18:17 - 00003738 _____ C:\Windows\System32\Tasks\NvTmRep_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2017-05-31 14:04 - 2017-03-07 18:17 - 00003730 _____ C:\Windows\System32\Tasks\NvTmMon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2017-05-31 14:04 - 2017-03-07 18:17 - 00003554 _____ C:\Windows\System32\Tasks\NvTmRepOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2017-05-31 10:44 - 2017-03-08 17:02 - 00001149 _____ C:\Users\Public\Desktop\360 Total Security.lnk
2017-05-31 10:44 - 2017-03-08 17:02 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\360 Security Center
2017-05-29 12:27 - 2017-03-16 14:23 - 00002704 _____ C:\Users\Documento\Desktop\_ADAM VICKTOR-servidor.lnk
2017-05-26 16:17 - 2017-03-07 17:21 - 00001419 _____ C:\Users\Documento\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2017-05-22 12:47 - 2017-03-07 17:20 - 00000000 ____D C:\Users\Documento
2017-05-22 12:31 - 2017-03-07 18:17 - 00000000 ____D C:\Users\Documento\AppData\Local\NVIDIA Corporation

==================== Arquivos na raiz de alguns diretórios =======

2017-04-30 15:36 - 2017-04-30 15:36 - 0007594 _____ () C:\Users\Documento\AppData\Local\Resmon.ResmonCfg

Alguns arquivos em TEMP:
====================
2017-03-28 12:59 - 2017-03-28 12:59 - 0000512 _____ () C:\Users\Documento\AppData\Local\Temp\287c499808bcff52a39d16f78044882a.dll
2017-03-28 13:04 - 2017-03-28 13:36 - 0000056 _____ () C:\Users\Documento\AppData\Local\Temp\9a4ff85ce1efdbdcab03b67b1444625e.dll
2017-05-04 13:51 - 2017-05-04 13:15 - 2054888 _____ (Adobe Systems Incorporated) C:\Users\Documento\AppData\Local\Temp\AdobeApplicationManager.exe
2017-04-26 15:07 - 2017-04-19 21:18 - 0754352 _____ (NVIDIA Corporation) C:\Users\Documento\AppData\Local\Temp\nvSCPAPI.dll
2017-04-20 13:03 - 2017-04-19 21:18 - 0867968 _____ (NVIDIA Corporation) C:\Users\Documento\AppData\Local\Temp\nvSCPAPI64.dll
2017-04-20 13:00 - 2017-04-19 21:18 - 0367736 _____ (NVIDIA Corporation) C:\Users\Documento\AppData\Local\Temp\nvStInst.exe

==================== Bamital & volsnap ======================

(Não há correção automática para arquivos que não passaram na verificação.)

C:\Windows\system32\winlogon.exe => O arquivo é assinado digitalmente
C:\Windows\system32\wininit.exe => O arquivo é assinado digitalmente
C:\Windows\SysWOW64\wininit.exe => O arquivo é assinado digitalmente
C:\Windows\explorer.exe => O arquivo é assinado digitalmente
C:\Windows\SysWOW64\explorer.exe => O arquivo é assinado digitalmente
C:\Windows\system32\svchost.exe => O arquivo é assinado digitalmente
C:\Windows\SysWOW64\svchost.exe => O arquivo é assinado digitalmente
C:\Windows\system32\services.exe => O arquivo é assinado digitalmente
C:\Windows\system32\User32.dll => O arquivo é assinado digitalmente
C:\Windows\SysWOW64\User32.dll => O arquivo é assinado digitalmente
C:\Windows\system32\userinit.exe => O arquivo é assinado digitalmente
C:\Windows\SysWOW64\userinit.exe => O arquivo é assinado digitalmente
C:\Windows\system32\rpcss.dll => O arquivo é assinado digitalmente
C:\Windows\system32\dnsapi.dll => O arquivo é assinado digitalmente
C:\Windows\SysWOW64\dnsapi.dll => O arquivo é assinado digitalmente
C:\Windows\system32\Drivers\volsnap.sys => O arquivo é assinado digitalmente

LastRegBack: 2017-06-12 13:16

==================== Fim de FRST.txt ============================