Resultado do exame da Farbar Recovery Scan Tool (FRST) (x86) Versão:05-03-2016 01
Executado por lucas (administrador) em PAULO-PC (08-03-2016 21:54:29)
Executando a partir de C:\Users\lucas\Downloads
Perfis Carregados: lucas (Perfis Disponíveis: lucas & André & Paulo Ferreira)
Platform: Microsoft Windows 7 Ultimate  Service Pack 1 (X86) Idioma: Português (Brasil)
Internet Explorer Versão 11 (Navegador padrão: IE)
Modo da Inicialização: Normal
Tutorial da Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processos (Whitelisted) =================

(Se uma entrada for incluída na fixlist, o processo será fechado. O arquivo não será movido.)

(GAS Tecnologia) C:\Program Files\GbPlugin\GbpSv.exe
(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Microsoft Corporation) C:\Program Files\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe
(Microsoft Corporation) C:\Program Files\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe
(F-Secure Corporation) C:\Program Files\GVT\fshoster32.exe
(F-Secure Corporation) C:\Program Files\GVT\apps\CCF_Reputation\fsorsp.exe
() C:\Program Files\AppBrad\NetExpressUpdater.exe
(F-Secure Corporation) C:\Program Files\GVT\apps\ComputerSecurity\Anti-Virus\fsgk32.exe
(Google Inc.) C:\Program Files\Google\Update\1.3.29.5\GoogleCrashHandler.exe
(arvato digital services llc) C:\Program Files\Common Files\Protexis\License Service\PsiService_2.exe
(Popcorn Time) C:\Program Files\Popcorn Time\Updater.exe
(Advanced Micro Devices Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(GAS Tecnologia LTDA) C:\Program Files\Diebold\Warsaw\core.exe
(GAS Tecnologia LTDA) C:\Program Files\Diebold\Warsaw\core.exe
(Microsoft Corp.) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVC.EXE
(Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jusched.exe
(F-Secure Corporation) C:\Program Files\GVT\fshoster32.exe
(F-Secure Corporation) C:\Program Files\GVT\apps\ComputerSecurity\Common\FSM32.EXE
(Microsoft Corp.) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVCM.EXE
(Microsoft Corporation) C:\Program Files\Microsoft Office\Office14\MSOSYNC.EXE
(F-Secure Corporation) C:\Program Files\GVT\apps\ComputerSecurity\Anti-Virus\fssm32.exe
(Microsoft Corporation) C:\Windows\System32\taskmgr.exe
(Microsoft Corporation) C:\Windows\System32\perfmon.exe
(Adobe Systems Incorporated) C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe


==================== Registro (Whitelisted) ===========================

(Se uma entrada for incluída na fixlist, o ítem no Registro será restaurado para o padrão ou removido. O arquivo não será movido.)

HKLM\...\Run: [BCSSync] => C:\Program Files\Microsoft Office\Office14\BCSSync.exe [89184 2012-11-05] (Microsoft Corporation)
HKLM\...\Run: [StartCCC] => C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [98304 2010-08-25] (Advanced Micro Devices, Inc.)
HKLM\...\Run: [amd_dc_opt] => C:\Program Files\AMD\Dual-Core Optimizer\amd_dc_opt.exe [77824 2008-07-22] (AMD)
HKLM\...\Run: [Diebold - Warsaw] => C:\Program Files\Diebold\Warsaw\core.exe [509752 2015-06-19] (GAS Tecnologia LTDA)
HKLM\...\Run: [SunJavaUpdateSched] => C:\Program Files\Common Files\Java\Java Update\jusched.exe [594992 2016-01-29] (Oracle Corporation)
HKLM\...\Run: [F-Secure Hoster (51855)] => C:\Program Files\GVT\fshoster32.exe [188400 2013-01-18] (F-Secure Corporation)
HKLM\...\Run: [F-Secure Manager] => C:\Program Files\GVT\apps\ComputerSecurity\Common\FSM32.EXE [310312 2015-10-13] (F-Secure Corporation)
Winlogon\Notify\ GbPluginUni: C:\Program Files\GbPlugin\gbiehUni.dll [2015-07-06] (Banco Itaú Unibanco)
HKU\S-1-5-21-2185954319-2002436113-1565270891-1000\...\Run: [EADM] => C:\Program Files\Origin\Origin.exe [3639280 2016-03-02] (Electronic Arts)
HKU\S-1-5-21-2185954319-2002436113-1565270891-1000\...\Run: [Steam] => C:\Program Files\Steam\steam.exe [3074128 2016-03-08] (Valve Corporation)
HKU\S-1-5-21-2185954319-2002436113-1565270891-1000\...\Run: [OfficeSyncProcess] => C:\Program Files\Microsoft Office\Office14\MSOSYNC.EXE [720064 2013-03-09] (Microsoft Corporation)
HKU\S-1-5-21-2185954319-2002436113-1565270891-1000\...\MountPoints2: {8b5825c8-45bf-11e5-9e85-4487fcb6ef4d} - E:\Startme.exe
ShellExecuteHooks: GbPluginObj Class - {E37CB5F0-51F5-4395-A808-5FA49E399008} - C:\Program Files\GbPlugin\gbiehuni.dll [1759992 2015-07-06] (Banco Itaú Unibanco)
Startup: C:\Users\lucas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OneNote 2010 Screen Clipper and Launcher.lnk [2016-02-27]
ShortcutTarget: OneNote 2010 Screen Clipper and Launcher.lnk -> C:\Program Files\Microsoft Office\Office14\ONENOTEM.EXE (Microsoft Corporation)
Startup: C:\Users\Paulo Ferreira\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Registration Prince of Persia Warrior Within.LNK [2016-02-23]
ShortcutTarget: Registration Prince of Persia Warrior Within.LNK -> C:\Program Files\Ubisoft\Prince of Persia Warrior Within\Support\Register\RegistrationReminder.exe (Nenhum Arquivo)

==================== Internet (Whitelisted) ====================

(Se um ítem for incluído na fixlist, sendo um ítem do Registro, será removido ou restaurado para o padrão.)

Tcpip\Parameters: [DhcpNameServer] 192.168.25.1
Tcpip\..\Interfaces\{34A1AD20-0683-4C2A-9451-55B6E57518C7}: [DhcpNameServer] 192.168.25.1

Internet Explorer:
==================
HKU\S-1-5-21-2185954319-2002436113-1565270891-1000\Software\Microsoft\Internet Explorer\Main,Start Page = about:Tabs
SearchScopes: HKU\S-1-5-21-2185954319-2002436113-1565270891-1000 -> DefaultScope {10150977-B278-48AB-9F03-5A3E2F2454E8} URL = hxxp://www.google.com/search?hl=en&q={searchTerms}
SearchScopes: HKU\S-1-5-21-2185954319-2002436113-1565270891-1000 -> {10150977-B278-48AB-9F03-5A3E2F2454E8} URL = hxxp://www.google.com/search?hl=en&q={searchTerms}
SearchScopes: HKU\S-1-5-21-2185954319-2002436113-1565270891-1000 -> {845A808E-7C78-45E9-80EB-FC8DC3A85802} URL = hxxps://br.search.yahoo.com/search?p={searchTerms}&fr=yset_ie_syc_oracle&type=orcl_default
BHO: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL [2013-12-19] (Microsoft Corporation)
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_73\bin\ssv.dll [2016-03-07] (Oracle Corporation)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17] (Microsoft Corp.)
BHO: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2016-01-08] (Microsoft Corporation)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation)
BHO: GbIehObj Class -> {C41A1C0E-EA6C-11D4-B1B8-444553540008} -> C:\Program Files\GbPlugin\gbiehuni.dll [2015-07-06] (Banco Itaú Unibanco)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_73\bin\jp2ssv.dll [2016-03-07] (Oracle Corporation)
BHO: Adblock Plus for IE Browser Helper Object -> {FFCB3198-32F3-4E8B-9539-4324694ED664} -> C:\Program Files\Adblock Plus for IE\AdblockPlus32.dll [2015-09-22] (Eyeo GmbH)
Handler: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2016-01-08] (Microsoft Corporation)
StartMenuInternet: IEXPLORE.EXE - iexplore.exe

FireFox:
========
FF Plugin: @Google.com/GoogleEarthPlugin -> C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll [2015-05-21] (Google)
FF Plugin: @java.com/DTPlugin,version=11.73.2 -> C:\Program Files\Java\jre1.8.0_73\bin\dtplugin\npDeployJava1.dll [2016-03-07] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.73.2 -> C:\Program Files\Java\jre1.8.0_73\bin\plugin2\npjp2.dll [2016-03-07] (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.41212.0\npctrl.dll [2015-12-11] ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~1\MICROS~2\Office14\NPSPWRAP.DLL [2010-03-24] (Microsoft Corporation)
FF Plugin: @raidcall.en/RCplugin -> C:\Users\lucas\AppData\Roaming\raidcall\plugins\nprcplugin.dll [2014-12-23] (Raidcall)
FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.29.5\npGoogleUpdate3.dll [2016-02-01] (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.29.5\npGoogleUpdate3.dll [2016-02-01] (Google Inc.)
FF Plugin: Adobe Reader -> C:\Program Files\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2015-12-18] (Adobe Systems Inc.)

Chrome: 
=======
CHR DefaultSearchURL: Default -> hxxps://br.search.yahoo.com/search?p={searchTerms}&fr=yset_chr_syc_oracle&type=orcl_default
CHR DefaultSearchKeyword: Default -> Yahoo
CHR DefaultSuggestURL: Default -> hxxps://br.search.yahoo.com/sugg/ie?output=fxjson&command={searchTerms}&nResults=10
CHR Profile: C:\Users\lucas\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Apresentações) - C:\Users\lucas\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-09-06]
CHR Extension: (Google Docs) - C:\Users\lucas\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-09-06]
CHR Extension: (Google Drive) - C:\Users\lucas\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-10-21]
CHR Extension: (YouTube) - C:\Users\lucas\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-09-24]
CHR Extension: (Google Search) - C:\Users\lucas\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-10-27]
CHR Extension: (Planilhas do Google) - C:\Users\lucas\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-09-06]
CHR Extension: (Documentos Google off-line) - C:\Users\lucas\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2015-11-18]
CHR Extension: (AdBlock) - C:\Users\lucas\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2016-02-16]
CHR Extension: (Skype) - C:\Users\lucas\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl [2015-12-19]
CHR Extension: (Pagamentos da Chrome Web Store) - C:\Users\lucas\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-09-06]
CHR Extension: (Gmail) - C:\Users\lucas\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-09-06]
CHR HKLM\...\Chrome\Extension: [eedgghdcpmmmilkmfpnklknlenbiolec] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files\Skype\Toolbars\ChromeExtension\skype_chrome_extension.crx [2016-01-08]

==================== Serviços (Whitelisted) ========================

(Se uma entrada for incluída na fixlist, será removida do Registro. O arquivo não será movido, a menos que seja colocado separadamente.)

"Warsaw Technology" => serviço foi desbloqueado. <===== ATENÇÃO

S3 BEService; C:\Program Files\Common Files\BattlEye\BEService.exe [1089056 2016-03-02] ()
R2 c2cautoupdatesvc; C:\Program Files\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1433216 2016-01-08] (Microsoft Corporation)
R2 c2cpnrsvc; C:\Program Files\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1773696 2016-01-08] (Microsoft Corporation)
R2 fshoster; C:\Program Files\GVT\fshoster32.exe [188400 2013-01-18] (F-Secure Corporation)
S3 FSMA; C:\Program Files\GVT\apps\ComputerSecurity\Common\FSMA32.EXE [207912 2015-10-13] (F-Secure Corporation)
R2 FSORSPClient; C:\Program Files\GVT\apps\CCF_Reputation\fsorsp.exe [60456 2016-03-08] (F-Secure Corporation)
R2 GbpSv; C:\Program Files\GbPlugin\GbpSv.exe [546104 2014-09-29] (GAS Tecnologia)
R2 NetExpress Updater; C:\Program Files\AppBrad\NetExpressUpdater.exe [20568 2015-08-21] ()
S3 Origin Client Service; C:\Program Files\Origin\OriginClientService.exe [2104840 2016-03-02] (Electronic Arts)
R2 PSI_SVC_2; c:\Program Files\Common Files\Protexis\License Service\PsiService_2.exe [277360 2014-04-30] (arvato digital services llc)
R2 Update service; C:\Program Files\Popcorn Time\Updater.exe [339968 2015-10-19] (Popcorn Time) [Arquivo não assinado]
R2 Warsaw Technology; C:\Program Files\Diebold\Warsaw\core.exe [509752 2015-06-19] (GAS Tecnologia LTDA)
R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [680960 2013-11-03] (Microsoft Corporation)
S4 YSearchUtilSvc; C:\Program Files\Yahoo!\yset\{1D383546-7C71-F540-9E56-F6DBE36893FB}\YSearchUtilSvc.exe [160536 2015-12-03] (Yahoo Inc.)

===================== Drivers (Whitelisted) ==========================

(Se uma entrada for incluída na fixlist, será removida do Registro. O arquivo não será movido, a menos que seja colocado separadamente.)

S3 asmthub3; C:\Windows\system32\drivers\asmthub3.sys [110920 2012-11-08] (ASMedia Technology Inc)
S3 asmtxhci; C:\Windows\system32\drivers\asmtxhci.sys [333128 2012-11-08] (ASMedia Technology Inc)
R3 Atc002; C:\Windows\System32\DRIVERS\l260x86.sys [29184 2009-07-13] (Atheros Communications, Inc.)
R3 AtiHDAudioService; C:\Windows\System32\drivers\AtihdW73.sys [101904 2010-07-15] (ATI Technologies, Inc.)
S3 b06diag; C:\Windows\system32\drivers\bxdiagx.sys [75816 2012-03-08] (Broadcom Corporation)
S3 BFN7x86; C:\Windows\system32\drivers\Xeno7x86.sys [130152 2012-02-22] (Bigfoot Networks, Inc.)
S3 bxfcoe; C:\Windows\system32\drivers\bxfcoe.sys [150568 2012-02-22] (Broadcom Corporation)
S3 bxois; C:\Windows\system32\drivers\bxois.sys [435240 2012-02-22] (Broadcom Corporation)
S3 dtlitescsibus; C:\Windows\System32\DRIVERS\dtlitescsibus.sys [26168 2016-03-06] (Disc Soft Ltd)
S3 EtronHub3; C:\Windows\System32\Drivers\EtronHub3.sys [65152 2012-07-24] (Etron Technology Inc)
S3 EtronSTOR; C:\Windows\System32\Drivers\EtronSTOR.sys [32512 2012-07-24] (Etron Technology Inc)
S3 EtronXHCI; C:\Windows\System32\Drivers\EtronXHCI.sys [88832 2012-07-24] (Etron Technology Inc)
R3 F-Secure Gatekeeper; C:\Program Files\GVT\apps\ComputerSecurity\Anti-Virus\minifilter\fsgk.sys [160832 2016-03-08] (F-Secure Corporation)
R1 F-Secure HIPS; C:\Program Files\GVT\apps\ComputerSecurity\HIPS\drivers\fshs.sys [95296 2016-03-08] (F-Secure Corporation)
R0 fsbts; C:\Windows\System32\Drivers\fsbts.sys [63680 2016-03-08] ()
R3 fsni; C:\Program Files\GVT\apps\CCF_Scanning\bin\fsni32.sys [77864 2016-03-08] (F-Secure Corporation)
R1 fsvista; C:\Program Files\GVT\apps\ComputerSecurity\Anti-Virus\minifilter\fsvista.sys [12840 2015-10-13] ()
R0 GbpKm; C:\Windows\System32\drivers\gbpkm.sys [47192 2014-07-21] (GAS Tecnologia)
S3 hamachi; C:\Windows\System32\DRIVERS\hamachi.sys [27040 2015-11-12] (LogMeIn, Inc.)
S3 iusb3hub; C:\Windows\system32\drivers\iusb3hub.sys [359560 2012-12-21] (Intel Corporation)
S3 iusb3xhc; C:\Windows\system32\drivers\iusb3xhc.sys [792712 2012-12-21] (Intel Corporation)
R1 ndisrd; C:\Windows\System32\DRIVERS\gbpndisrdn.sys [29400 2015-07-10] (GAS Tecnologia)
S3 nusb3hub; C:\Windows\system32\drivers\nusb3hub.sys [73984 2011-10-25] (Renesas Electronics Corporation)
S3 nusb3xhc; C:\Windows\system32\drivers\nusb3xhc.sys [165120 2011-10-25] (Renesas Electronics Corporation)
R1 SCDEmu; C:\Windows\system32\Drivers\SCDEmu.sys [113984 2015-04-07] (Power Software Ltd)
S3 tap0901; C:\Windows\System32\DRIVERS\tap0901.sys [35288 2013-08-22] (The OpenVPN Project)
R3 usbccgp; C:\Windows\System32\DRIVERS\usbccgp.sys [76288 2013-11-03] (Microsoft Corporation) [Arquivo não assinado]
R4 WinDivert1.1; C:\Program Files\Diebold\Warsaw\WinDivert32.sys [31448 2015-04-01] (Basil)
S3 EagleXNt; \??\C:\Windows\system32\drivers\EagleXNt.sys [X]
S3 FairplayKD; \??\C:\ProgramData\MTA San Andreas All\Common\temp\FairplayKD.sys [X]
S3 MBAMSwissArmy; \??\C:\Windows\system32\drivers\MBAMSwissArmy.sys [X]
S3 VGPU; System32\drivers\rdvgkmd.sys [X]
S3 xhunter1; \??\C:\Windows\xhunter1.sys [X]

==================== NetSvcs (Whitelisted) ===================

(Se uma entrada for incluída na fixlist, será removida do Registro. O arquivo não será movido, a menos que seja colocado separadamente.)


==================== Um Mês Criados arquivos e pastas ========

(Se uma entrada for incluída na fixlist, o arquivo/pasta será movido.)

2016-03-08 21:54 - 2016-03-08 21:54 - 00017466 _____ C:\Users\lucas\Downloads\FRST.txt
2016-03-08 21:52 - 2016-03-08 21:54 - 00000000 ____D C:\FRST
2016-03-08 21:50 - 2016-03-08 21:51 - 01725440 _____ (Farbar) C:\Users\lucas\Downloads\FRST.exe
2016-03-08 21:31 - 2016-03-08 21:31 - 00239339 _____ C:\Users\lucas\Desktop\runscanner.run
2016-03-08 21:29 - 2016-03-08 21:29 - 00000000 ____D C:\Users\lucas\AppData\Roaming\Runscanner.net
2016-03-08 20:13 - 2016-03-08 20:17 - 00063680 _____ C:\Windows\system32\Drivers\fsbts.sys
2016-03-08 19:52 - 2016-03-08 19:52 - 00001897 _____ C:\Users\Public\Desktop\Protect.lnk
2016-03-08 19:52 - 2016-03-08 19:52 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GVT
2016-03-08 19:25 - 2016-03-08 20:06 - 00340800 _____ C:\Windows\ntbtlog.txt
2016-03-08 13:56 - 2016-03-08 13:57 - 00007921 _____ C:\Users\André\Documents\ANDRÉ BO EXTRAVIO RG.pdf
2016-03-08 00:17 - 2016-03-08 00:21 - 53708000 _____ (Microsoft Corporation) C:\Users\lucas\Downloads\Windows-KB890830-V5.33.exe
2016-03-07 20:44 - 2016-03-07 20:44 - 00000000 ____D C:\Users\André\Documents\League of Legends
2016-03-07 20:42 - 2016-03-07 20:42 - 00000000 ____D C:\Users\André\AppData\Roaming\LolClient
2016-03-07 20:36 - 2016-03-08 21:11 - 00000586 _____ C:\Windows\Tasks\Scheduled scanning task.job
2016-03-07 20:32 - 2016-03-08 18:37 - 144254680 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2016-03-07 20:11 - 2016-03-07 20:11 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
2016-03-07 20:11 - 2016-03-07 20:11 - 00000000 ____D C:\Program Files\Microsoft Silverlight
2016-03-07 19:59 - 2016-03-07 20:04 - 00007603 _____ C:\Users\André\AppData\Local\Resmon.ResmonCfg
2016-03-07 19:59 - 2016-03-07 19:59 - 00000000 ____D C:\Users\André\AppData\LocalLow\Adblock Plus for IE
2016-03-07 14:44 - 2016-03-07 14:49 - 00000000 ____D C:\Users\lucas\AppData\LocalLow\Adblock Plus for IE
2016-03-07 14:44 - 2016-03-07 14:44 - 00000000 ____D C:\Program Files\Adblock Plus for IE
2016-03-07 14:10 - 2016-03-07 14:11 - 34170768 _____ (Microsoft Corporation) C:\Users\lucas\Downloads\EIE11_PT-BR_WOL_WIN7.EXE
2016-03-07 08:13 - 2016-03-07 08:13 - 00000000 ____D C:\Program Files\Common Files\Java
2016-03-06 20:32 - 2016-03-06 20:32 - 00000000 ____D C:\Users\Public\Documents\Daemon Tools Images
2016-03-06 20:31 - 2016-03-06 20:33 - 00026168 _____ (Disc Soft Ltd) C:\Windows\system32\Drivers\dtlitescsibus.sys
2016-03-06 20:31 - 2016-03-06 20:31 - 00000000 ____D C:\Users\lucas\AppData\Roaming\DAEMON Tools Lite
2016-03-06 20:27 - 2016-03-06 20:27 - 00690448 _____ (Disc Soft Ltd.) C:\Users\lucas\Downloads\DTLiteInstaller.exe
2016-03-06 08:58 - 2016-03-07 20:51 - 00000000 ____D C:\Users\Paulo Ferreira\AppData\LocalLow\BitTorrent
2016-03-05 17:12 - 2016-03-05 17:13 - 08625774 _____ C:\Users\Paulo Ferreira\Downloads\[PDGH.com.br] - DayZ V3.zip
2016-03-04 23:34 - 2016-03-04 23:34 - 00002684 _____ C:\Users\Paulo Ferreira\Downloads\Gammabright v1.7  [1.5.2] (1).zip
2016-03-04 23:22 - 2016-03-04 23:48 - 00000000 ____D C:\Users\Paulo Ferreira\Desktop\Arquivos do MINE
2016-03-04 23:21 - 2016-03-04 23:21 - 00002810 _____ C:\Users\Paulo Ferreira\Downloads\Fps-Plus-Mod-1.5.2 (1).zip
2016-03-04 22:55 - 2016-03-04 22:55 - 00376304 _____ C:\Users\Paulo Ferreira\Downloads\OptiFine_1.5.2_HD_U_D2.zip
2016-03-04 22:41 - 2013-11-03 20:27 - 00000000 ____D C:\Users\Paulo Ferreira\Desktop\.minecraft
2016-03-04 22:38 - 2016-03-04 22:39 - 19249101 _____ C:\Users\Paulo Ferreira\Downloads\minecraft.1.5.2+forge.rar
2016-03-04 22:38 - 2016-03-04 22:38 - 00053841 _____ C:\Users\Paulo Ferreira\Downloads\[1.5.2]bspkrsCorev2.04 (2).zip
2016-03-04 22:38 - 2016-03-04 22:38 - 00012585 _____ C:\Users\Paulo Ferreira\Downloads\[1.5.2]ArmorStatusHUDv1.7 (2).zip
2016-03-04 22:38 - 2016-03-04 22:38 - 00005656 _____ C:\Users\Paulo Ferreira\Downloads\[1.5.2]StatusEffectHUDv1.10 (2).zip
2016-03-04 22:17 - 2016-03-04 22:23 - 12532772 _____ C:\Users\Paulo Ferreira\Downloads\FlapFusao (1).rar
2016-03-04 18:05 - 2016-03-04 18:05 - 00000000 ____D C:\Users\Paulo Ferreira\Documents\League of Legends
2016-03-04 03:05 - 2016-03-04 03:06 - 00000000 ____D C:\Users\lucas\Documents\NFS Most Wanted
2016-03-03 18:39 - 2016-03-03 18:39 - 00000641 _____ C:\Users\Public\Desktop\WORLDRAG.lnk
2016-03-03 18:39 - 2016-03-03 18:39 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WorldRAG Full
2016-03-03 18:34 - 2016-03-05 02:41 - 00000000 ____D C:\WorldRAG Full
2016-03-03 16:49 - 2016-03-03 18:23 - 1966321691 _____ (WorldRAG ) C:\Users\lucas\Downloads\WorldRAGFull-03-07-2015 Vai se Ferrar.exe
2016-03-03 16:39 - 2016-03-03 16:39 - 00000000 ____D C:\Users\lucas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Level Up
2016-03-03 16:36 - 2016-03-03 16:36 - 00400928 _____ () C:\Users\lucas\Downloads\ragnarok.exe
2016-03-03 15:24 - 2016-03-03 15:31 - 151122192 _____ (WorldRAG ) C:\Users\lucas\Downloads\WorldRAGLite-03-07-2015.exe
2016-03-03 15:10 - 2016-03-03 16:07 - 00000000 ____D C:\Users\lucas\Desktop\WORLDRAG
2016-03-03 15:03 - 2016-03-03 15:09 - 151517654 _____ (WorldRAG.com ) C:\Users\lucas\Downloads\worldro.exe
2016-03-03 14:56 - 2016-03-03 16:22 - 00000737 _____ C:\Users\Public\Desktop\Ragnarok.lnk
2016-03-03 14:56 - 2016-03-03 14:56 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Level Up
2016-03-03 14:47 - 2016-03-03 16:35 - 00000000 ____D C:\Level Up
2016-03-03 12:35 - 2016-03-03 14:06 - 00000000 _____ C:\Users\lucas\Downloads\WorldRAGFull-03-07-2015.exe
2016-03-03 12:30 - 2016-03-03 12:30 - 00012358 _____ C:\Users\André\Downloads\comprovantes.pdf
2016-03-03 02:50 - 2016-03-03 02:50 - 08027504 _____ (Driver-Soft Inc. ) C:\Users\lucas\Downloads\Driver_Genius.exe
2016-03-03 02:30 - 2016-03-03 02:49 - 1862719622 ____R (Level Up! Games ) C:\Users\lucas\Downloads\Instalador_Client_Ragnarok_20150422.exe
2016-03-03 02:29 - 2016-03-03 02:29 - 00018463 _____ C:\Users\lucas\Downloads\Instalador_Client_Ragnarok_20150422.exe.torrent
2016-03-02 23:34 - 2016-03-02 23:34 - 02449376 _____ (Megaify Software ) C:\Users\lucas\Downloads\DriverToolkitInstaller.exe
2016-03-02 23:33 - 2016-03-02 23:33 - 04952336 _____ (Advanced Micro Devices, Inc.) C:\Users\lucas\Downloads\autodetectutility (1).exe
2016-03-02 23:21 - 2016-03-02 23:26 - 00000000 ____D C:\Users\lucas\AppData\LocalLow\Daybreak Game Company
2016-03-02 23:21 - 2016-03-02 23:21 - 00000000 ____D C:\Users\lucas\AppData\Local\SCE
2016-03-02 23:21 - 2016-03-02 23:21 - 00000000 ____D C:\Users\lucas\AppData\Local\Daybreak Game Company
2016-03-02 23:20 - 2015-07-18 10:08 - 00901264 _____ (Microsoft Corporation) C:\Windows\system32\ucrtbase.dll
2016-03-02 23:20 - 2015-07-18 10:08 - 00066400 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-private-l1-1-0.dll
2016-03-02 23:20 - 2015-07-18 10:08 - 00022368 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-math-l1-1-0.dll
2016-03-02 23:20 - 2015-07-18 10:08 - 00019808 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-multibyte-l1-1-0.dll
2016-03-02 23:20 - 2015-07-18 10:08 - 00017760 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-string-l1-1-0.dll
2016-03-02 23:20 - 2015-07-18 10:08 - 00017760 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-stdio-l1-1-0.dll
2016-03-02 23:20 - 2015-07-18 10:08 - 00016224 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-runtime-l1-1-0.dll
2016-03-02 23:20 - 2015-07-18 10:08 - 00015712 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-convert-l1-1-0.dll
2016-03-02 23:20 - 2015-07-18 10:08 - 00014176 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-time-l1-1-0.dll
2016-03-02 23:20 - 2015-07-18 10:08 - 00014176 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-2-0.dll
2016-03-02 23:20 - 2015-07-18 10:08 - 00013664 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-filesystem-l1-1-0.dll
2016-03-02 23:20 - 2015-07-18 10:08 - 00012640 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-process-l1-1-0.dll
2016-03-02 23:20 - 2015-07-18 10:08 - 00012640 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-heap-l1-1-0.dll
2016-03-02 23:20 - 2015-07-18 10:08 - 00012640 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-conio-l1-1-0.dll
2016-03-02 23:20 - 2015-07-18 10:08 - 00012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-utility-l1-1-0.dll
2016-03-02 23:20 - 2015-07-18 10:08 - 00012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-locale-l1-1-0.dll
2016-03-02 23:20 - 2015-07-18 10:08 - 00012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-environment-l1-1-0.dll
2016-03-02 23:20 - 2015-07-18 10:08 - 00012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-2-0.dll
2016-03-02 23:20 - 2015-07-18 10:08 - 00012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-1.dll
2016-03-02 23:20 - 2015-07-18 10:08 - 00011616 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-eventing-provider-l1-1-0.dll
2016-03-02 23:20 - 2015-07-18 10:08 - 00011616 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l2-1-0.dll
2016-03-02 23:20 - 2015-07-18 10:08 - 00011616 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-timezone-l1-1-0.dll
2016-03-02 23:20 - 2015-07-18 10:08 - 00011616 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l2-1-0.dll
2016-03-02 23:20 - 2015-07-18 10:08 - 00011616 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-2-0.dll
2016-03-02 18:23 - 2016-03-02 18:24 - 00000000 ____D C:\Users\lucas\AppData\Local\NFS Underground 2
2016-03-02 18:21 - 2016-03-02 18:21 - 00001254 _____ C:\Users\lucas\AppData\Roaming\Microsoft\Windows\Start Menu\Need for Speed Underground 2.lnk
2016-03-02 18:21 - 2016-03-02 18:21 - 00001230 _____ C:\Users\lucas\Desktop\Need for Speed Underground 2.lnk
2016-03-02 18:19 - 2016-03-02 22:57 - 00000000 ____D C:\Program Files\EA GAMES
2016-03-02 17:38 - 2016-03-02 17:38 - 00000000 ____D C:\Users\lucas\Documents\League of Legends
2016-03-02 15:02 - 2016-03-02 15:02 - 00133004 _____ C:\Users\lucas\Downloads\LANCAMENTO_CIV_ANAC.xlt
2016-03-02 14:44 - 2016-03-02 14:44 - 00000000 ____D C:\Users\lucas\Documents\Criterion Games
2016-03-02 14:30 - 2016-03-02 23:02 - 00002131 _____ C:\Users\Public\Desktop\Need for Speed™ Most Wanted.lnk
2016-03-02 14:30 - 2016-03-02 14:30 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Need for Speed™ Most Wanted
2016-03-02 12:02 - 2016-03-02 12:06 - 00000000 ____D C:\Users\lucas\AppData\Local\Arma 3
2016-03-02 12:02 - 2016-03-02 12:05 - 00000000 ____D C:\Users\lucas\Documents\Arma 3
2016-03-02 12:02 - 2016-03-02 12:02 - 00000000 ____D C:\Users\Todos os Usuários\Bohemia Interactive
2016-03-02 12:02 - 2016-03-02 12:02 - 00000000 ____D C:\ProgramData\Bohemia Interactive
2016-03-02 12:01 - 2016-03-02 12:05 - 00000000 ____D C:\Program Files\Common Files\BattlEye
2016-03-02 11:59 - 2016-03-02 11:59 - 00000000 ____D C:\Users\lucas\AppData\Local\Bohemia_Interactive
2016-03-02 11:58 - 2016-03-02 12:50 - 00000000 ____D C:\Users\lucas\AppData\Local\Arma 3 Launcher
2016-03-02 11:01 - 2016-03-03 11:58 - 00000000 ____D C:\Users\André\Documents\ECONOMIA
2016-03-02 00:05 - 2016-03-02 00:05 - 00000216 _____ C:\Users\lucas\Desktop\Arma 3.url
2016-02-23 23:26 - 2016-02-23 23:26 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Team17
2016-02-23 23:25 - 2016-02-23 23:25 - 00000000 ____D C:\Team17
2016-02-23 23:25 - 1997-08-26 12:06 - 00315904 _____ (InstallShield Software Corporation) C:\Windows\IsUninst.exe
2016-02-23 15:15 - 2016-02-23 15:21 - 00000000 ____D C:\Users\Paulo Ferreira\Desktop\CoD4-MW
2016-02-23 15:13 - 2016-02-23 15:13 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WildGames
2016-02-23 15:10 - 2016-02-23 15:11 - 00000000 __SHD C:\Users\Paulo Ferreira\AppData\Roaming\.#
2016-02-23 15:09 - 2016-02-23 15:09 - 00000000 ____D C:\Users\Todos os Usuários\WildTangent
2016-02-23 15:09 - 2016-02-23 15:09 - 00000000 ____D C:\ProgramData\WildTangent
2016-02-23 14:31 - 2016-02-23 14:51 - 00000000 ____D C:\Users\Todos os Usuários\POPWWPROFILES
2016-02-23 14:31 - 2016-02-23 14:51 - 00000000 ____D C:\ProgramData\POPWWPROFILES
2016-02-23 14:31 - 2016-02-23 14:31 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Ubisoft
2016-02-22 13:42 - 2016-02-22 13:42 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\7-Zip
2016-02-22 13:42 - 2016-02-22 13:42 - 00000000 ____D C:\Program Files\7-Zip
2016-02-21 17:34 - 2016-02-21 17:34 - 00000000 ____D C:\Users\lucas\Documents\PCSX2
2016-02-21 17:32 - 2016-02-21 17:32 - 00001935 _____ C:\Users\Public\Desktop\PCSX2 1.2.1 (r5875).lnk
2016-02-21 17:32 - 2016-02-21 17:32 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PCSX2
2016-02-21 17:14 - 2016-03-06 20:42 - 00000000 ____D C:\Users\lucas\Desktop\Nova pasta
2016-02-20 17:23 - 2016-02-20 17:23 - 00000000 ____D C:\Users\Paulo Ferreira\Desktop\Bugs HStone
2016-02-16 23:53 - 2016-02-16 23:53 - 00000000 __RSH C:\MSDOS.SYS
2016-02-16 23:53 - 2016-02-16 23:53 - 00000000 __RSH C:\IO.SYS
2016-02-15 19:32 - 2016-02-15 19:32 - 00002919 _____ C:\Users\lucas\Downloads\Pokemon - HeartGold Version (USA).torrent
2016-02-15 08:11 - 2016-02-15 08:24 - 11837445 _____ C:\Users\André\Downloads\Diamantina_memoria_web (2).pdf
2016-02-12 00:39 - 2016-02-12 00:39 - 00000215 _____ C:\Users\lucas\Desktop\Worms Reloaded.url
2016-02-08 02:01 - 2016-02-08 02:01 - 00000216 _____ C:\Users\lucas\Desktop\How to Survive.url
2016-02-07 11:20 - 2016-02-07 11:20 - 00000000 ____D C:\Users\Paulo Ferreira\Documents\4A Games

==================== Um Mês Modificados arquivos e pastas ========

(Se uma entrada for incluída na fixlist, o arquivo/pasta será movido.)

2016-03-08 21:53 - 2015-03-09 17:46 - 00001058 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2016-03-08 21:51 - 2015-11-30 11:46 - 00000902 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2016-03-08 21:20 - 2009-07-14 01:34 - 00021072 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2016-03-08 21:20 - 2009-07-14 01:34 - 00021072 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2016-03-08 21:15 - 2015-03-27 12:14 - 00000000 ____D C:\Users\lucas\AppData\Roaming\BitTorrent
2016-03-08 21:15 - 2015-03-10 02:32 - 00000000 ____D C:\Users\Todos os Usuários\Origin
2016-03-08 21:15 - 2015-03-10 02:32 - 00000000 ____D C:\ProgramData\Origin
2016-03-08 21:14 - 2015-03-12 01:36 - 00000000 ____D C:\Program Files\Common Files\Steam
2016-03-08 21:14 - 2015-03-11 10:16 - 00000000 ____D C:\Users\lucas\AppData\Roaming\Skype
2016-03-08 21:12 - 2015-03-12 01:36 - 00000000 ____D C:\Program Files\Steam
2016-03-08 21:11 - 2015-03-09 17:46 - 00001054 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2016-03-08 21:11 - 2009-07-14 01:53 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2016-03-08 21:10 - 2015-03-09 17:11 - 00000000 ____D C:\Program Files\GVT
2016-03-08 20:19 - 2015-09-10 23:13 - 00007615 _____ C:\Users\lucas\AppData\Local\Resmon.ResmonCfg
2016-03-08 20:12 - 2015-03-09 17:15 - 00019433 _____ C:\Windows\prodsett_copy.ini
2016-03-08 20:12 - 2015-03-09 17:10 - 00000000 ____D C:\Users\Todos os Usuários\F-Secure
2016-03-08 20:12 - 2015-03-09 17:10 - 00000000 ____D C:\ProgramData\F-Secure
2016-03-08 19:55 - 2015-03-09 08:33 - 00000000 ____D C:\Users\lucas\AppData\Local\VirtualStore
2016-03-08 19:40 - 2015-03-10 12:13 - 00000000 ____D C:\Users\lucas\AppData\Local\CrashDumps
2016-03-08 19:07 - 2015-03-09 18:38 - 00000000 ____D C:\Users\lucas\AppData\Roaming\TS3Client
2016-03-08 19:02 - 2015-07-10 15:34 - 00000000 ____D C:\Users\Todos os Usuários\GbPlugin
2016-03-08 19:02 - 2015-07-10 15:34 - 00000000 ____D C:\ProgramData\GbPlugin
2016-03-08 13:24 - 2015-07-07 07:31 - 00000000 ____D C:\Users\André\Documents\ANDRÉ PRATICA
2016-03-08 09:03 - 2015-10-13 11:22 - 00000000 ____D C:\Users\André\Documents\ANDRÉ ANÁLISE FINANCEIRA
2016-03-08 00:24 - 2015-12-01 18:28 - 00000000 ____D C:\Users\lucas\AppData\Local\Popcorn Time Community
2016-03-07 23:59 - 2015-08-07 11:30 - 00000000 ____D C:\Users\Paulo Ferreira\AppData\Roaming\TS3Client
2016-03-07 20:51 - 2015-09-05 13:14 - 00000000 ____D C:\Users\Paulo Ferreira\AppData\Roaming\uTorrent
2016-03-07 19:05 - 2015-03-09 16:57 - 00000000 ____D C:\Windows\Minidump
2016-03-07 17:52 - 2009-07-14 01:53 - 00032608 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2016-03-07 14:12 - 2015-03-10 02:45 - 00000000 ___HD C:\Windows\msdownld.tmp
2016-03-07 14:07 - 2015-03-10 02:36 - 00000000 ____D C:\Program Files\Origin Games
2016-03-07 14:04 - 2015-03-16 14:28 - 00000000 ____D C:\Users\lucas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam
2016-03-07 08:15 - 2015-03-10 09:32 - 00000000 ____D C:\Users\Todos os Usuários\Oracle
2016-03-07 08:15 - 2015-03-10 09:32 - 00000000 ____D C:\ProgramData\Oracle
2016-03-07 08:14 - 2015-03-10 09:32 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2016-03-07 08:14 - 2015-03-10 09:32 - 00000000 ____D C:\Program Files\Java
2016-03-07 08:12 - 2015-11-17 14:26 - 00000000 ____D C:\Users\lucas\.oracle_jre_usage
2016-03-07 08:10 - 2015-03-10 09:33 - 00095840 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge.dll
2016-03-06 20:34 - 2009-07-13 23:37 - 00000000 ____D C:\Windows\inf
2016-03-06 15:59 - 2015-11-15 12:13 - 00000000 ____D C:\Users\Paulo Ferreira\AppData\Roaming\.minecraft
2016-03-06 15:37 - 2015-08-08 21:17 - 00000000 ____D C:\Users\Paulo Ferreira\AppData\Roaming\Skype
2016-03-06 08:58 - 2015-08-08 21:14 - 00000000 ____D C:\Users\Paulo Ferreira\AppData\Local\CrashDumps
2016-03-06 02:45 - 2015-08-07 11:22 - 00000000 ____D C:\Users\Paulo Ferreira\AppData\Local\Battle.net
2016-03-06 02:25 - 2015-04-13 02:04 - 00000000 ____D C:\Program Files\Battle.net
2016-03-05 03:32 - 2015-04-13 02:04 - 00000000 ____D C:\Users\lucas\AppData\Local\Battle.net
2016-03-03 16:48 - 2015-03-09 17:46 - 00000000 ____D C:\Users\lucas\AppData\Local\Deployment
2016-03-03 12:12 - 2016-01-15 07:20 - 00000000 ____D C:\Users\André\AppData\Local\CrashDumps
2016-03-02 23:19 - 2015-05-05 19:56 - 00000000 ____D C:\Users\Todos os Usuários\Package Cache
2016-03-02 23:19 - 2015-05-05 19:56 - 00000000 ____D C:\ProgramData\Package Cache
2016-03-02 23:02 - 2015-12-01 22:23 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\EA Games
2016-03-02 18:23 - 2015-05-05 19:59 - 00000000 ____D C:\Users\lucas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Games
2016-03-02 14:30 - 2015-03-26 16:58 - 00000000 ___HD C:\Program Files\Common Files\EAInstaller
2016-03-02 14:30 - 2009-07-14 01:52 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
2016-03-02 12:54 - 2015-03-10 02:32 - 00000000 ____D C:\Program Files\Origin
2016-03-02 11:53 - 2013-11-03 12:07 - 00710050 _____ C:\Windows\system32\prfh0416.dat
2016-03-02 11:53 - 2013-11-03 12:07 - 00151698 _____ C:\Windows\system32\prfc0416.dat
2016-03-02 11:53 - 2010-11-20 18:01 - 01617508 _____ C:\Windows\system32\PerfStringBackup.INI
2016-03-01 14:03 - 2015-05-14 11:17 - 00000000 ____D C:\Users\lucas\Documents\FIFA 14
2016-02-27 22:39 - 2015-11-13 16:08 - 00000000 ____D C:\Users\lucas\Downloads\11 - Ilha dos Tritoes [517 ao 574]
2016-02-26 13:54 - 2015-10-23 11:50 - 00000000 ____D C:\Users\Paulo Ferreira\Documents\GTA San Andreas User Files
2016-02-26 13:36 - 2015-10-23 11:08 - 00000000 ____D C:\Users\Paulo Ferreira\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Games
2016-02-25 16:35 - 2015-05-03 00:02 - 00000000 ____D C:\Program Files\Diablo III
2016-02-24 12:38 - 2015-08-21 21:43 - 00000100 _____ C:\Users\lucas\Documents\jogadores para comprar fifa14.txt
2016-02-24 11:35 - 2009-07-13 23:37 - 00000000 ____D C:\Windows\LiveKernelReports
2016-02-23 14:31 - 2015-11-16 18:01 - 00000000 ___HD C:\Program Files\InstallShield Installation Information
2016-02-23 14:29 - 2015-11-16 17:58 - 00000000 ____D C:\Program Files\Common Files\InstallShield
2016-02-23 08:05 - 2015-09-22 07:10 - 00000000 ____D C:\Users\André\Documents\ANDRÉ PROJETOS PRAIA
2016-02-22 17:15 - 2016-02-04 13:28 - 00000000 ____D C:\Users\Paulo Ferreira\Desktop\Canal2
2016-02-21 17:33 - 2015-03-10 02:45 - 00000000 ____D C:\Windows\system32\directx
2016-02-20 12:40 - 2015-12-01 18:27 - 00000000 ____D C:\Users\lucas\Desktop\PPopcorntime
2016-02-19 08:06 - 2015-07-26 20:55 - 00000000 ____D C:\Users\lucas\Desktop\OptiFine
2016-02-18 20:59 - 2015-03-09 17:48 - 00002156 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2016-02-18 00:21 - 2015-04-13 02:04 - 00000000 ____D C:\Users\lucas\AppData\Roaming\Battle.net
2016-02-17 17:01 - 2015-08-07 11:22 - 00000000 ____D C:\Users\Paulo Ferreira\AppData\Roaming\Battle.net
2016-02-17 17:01 - 2015-04-13 02:01 - 00000000 ____D C:\Users\Todos os Usuários\Battle.net
2016-02-17 17:01 - 2015-04-13 02:01 - 00000000 ____D C:\ProgramData\Battle.net
2016-02-17 10:31 - 2015-07-07 09:05 - 00002441 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk
2016-02-14 04:21 - 2015-12-01 18:30 - 00000000 ____D C:\Users\lucas\AppData\Local\Popcorn-Time-Community
2016-02-14 02:38 - 2015-11-29 23:38 - 00000000 ____D C:\Users\lucas\Downloads\animesextremetorrent.blogspot.com.br - Hunter X Hunter 2011 Completo + Filmes 1 e 2
2016-02-13 17:52 - 2015-12-01 19:51 - 00000000 ____D C:\Users\Paulo Ferreira\Desktop\Arquivos&Jogos
2016-02-13 17:25 - 2016-02-03 14:36 - 00000348 _____ C:\Users\Paulo Ferreira\Documents\CyberSVBR.txt
2016-02-10 08:58 - 2016-01-20 09:51 - 08230080 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerInstaller.exe
2016-02-10 08:58 - 2015-11-30 11:46 - 00796864 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2016-02-10 08:58 - 2015-11-30 11:46 - 00142528 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl
2016-02-09 10:36 - 2015-12-01 20:38 - 00018185 _____ C:\Users\Paulo Ferreira\Documents\REBECA PEDIDO DEZEMBRO 2.xlsx

==================== Arquivos na raiz de alguns diretórios =======

2015-09-10 23:13 - 2016-03-08 20:19 - 0007615 _____ () C:\Users\lucas\AppData\Local\Resmon.ResmonCfg
2015-03-21 00:39 - 2015-03-21 00:39 - 0000000 _____ () C:\Users\lucas\AppData\Local\{47E972FA-8248-479D-8420-1A2CB1934766}
2015-09-06 09:46 - 2015-10-12 01:47 - 0000102 _____ () C:\ProgramData\{262E20B8-6E20-4CEF-B1FD-D022AB1085F5}.dat

Arquivos para serem movidos ou deletados:
====================
C:\ProgramData\{262E20B8-6E20-4CEF-B1FD-D022AB1085F5}.dat
C:\Users\Todos os Usuários\{262E20B8-6E20-4CEF-B1FD-D022AB1085F5}.dat


Alguns arquivos em TEMP:
====================
C:\Users\André\AppData\Local\Temp\aplicativoitau.exe
C:\Users\lucas\AppData\Local\Temp\AutoDetectUtilApp.exe
C:\Users\lucas\AppData\Local\Temp\AutoRun.exe
C:\Users\lucas\AppData\Local\Temp\AutoRunGUI.dll
C:\Users\lucas\AppData\Local\Temp\jre-8u73-windows-au.exe
C:\Users\lucas\AppData\Local\Temp\ose00000.exe
C:\Users\lucas\AppData\Local\Temp\Uninstall.exe
C:\Users\Paulo Ferreira\AppData\Local\Temp\8a13fc006ef480a3113231a9d7d35365.dll
C:\Users\Paulo Ferreira\AppData\Local\Temp\dd838741e8a8ea1157c3558ccd304515.dll
C:\Users\Paulo Ferreira\AppData\Local\Temp\i4jdel0.exe
C:\Users\Paulo Ferreira\AppData\Local\Temp\i4jdel1.exe
C:\Users\Paulo Ferreira\AppData\Local\Temp\i4jdel2.exe
C:\Users\Paulo Ferreira\AppData\Local\Temp\i4jdel3.exe
C:\Users\Paulo Ferreira\AppData\Local\Temp\i4jdel4.exe
C:\Users\Paulo Ferreira\AppData\Local\Temp\i4jdel5.exe
C:\Users\Paulo Ferreira\AppData\Local\Temp\i4jdel6.exe
C:\Users\Paulo Ferreira\AppData\Local\Temp\i4jdel7.exe
C:\Users\Paulo Ferreira\AppData\Local\Temp\i4jdel8.exe
C:\Users\Paulo Ferreira\AppData\Local\Temp\SkypeSetup.exe


==================== Bamital & volsnap =================

(Não há correção automática para arquivos que não passaram na verificação.)

C:\Windows\explorer.exe => O arquivo é assinado digitalmente
C:\Windows\system32\winlogon.exe => O arquivo é assinado digitalmente
C:\Windows\system32\wininit.exe => O arquivo é assinado digitalmente
C:\Windows\system32\svchost.exe => O arquivo é assinado digitalmente
C:\Windows\system32\services.exe => O arquivo é assinado digitalmente
C:\Windows\system32\User32.dll => O arquivo é assinado digitalmente
C:\Windows\system32\userinit.exe => O arquivo é assinado digitalmente
C:\Windows\system32\rpcss.dll => O arquivo é assinado digitalmente
C:\Windows\system32\dnsapi.dll => O arquivo é assinado digitalmente
C:\Windows\system32\Drivers\volsnap.sys => O arquivo é assinado digitalmente


LastRegBack: 2016-02-28 16:40

==================== Fim de FRST.txt ============================