istart webssearches abrindo no lugar da pag inicial parte 2

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 13-03-2014 (ATTENTION: ====> FRST version is 26 days old and could be outdated)
Ran by Cassiano (administrator) on ISABELA on 08-04-2014 17:15:17
Running from C:\Users\Cassiano\Downloads
Windows 8.1 Single Language (X64) OS Language: Portuguese Brazilian
Internet Explorer Version 11
Boot Mode: Normal

The only official download link for FRST:
Download link for 32-Bit version: [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
Download link for 64-Bit Version: [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
Download link from any site other than Bleeping Computer is unpermitted or outdated.
See tutorial for FRST: [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]

==================== Processes (Whitelisted) =================

(Microsoft Corporation) C:\WINDOWS\system32\WLANExt.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office 15\ClientX64\OfficeClickToRun.exe
(Conexant Systems Inc.) C:\WINDOWS\system32\CxAudMsg64.exe
(Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\ibtrksrv.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(McAfee, Inc.) C:\WINDOWS\system32\mfevtps.exe
(Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
(Intel® Corporation) C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe
(McAfee, Inc.) C:\Program Files\McAfee\MSC\McAPExe.exe
(McAfee, Inc.) C:\Program Files\Common Files\McAfee\AMCore\mcshield.exe
(McAfee, Inc.) C:\Program Files\Common Files\McAfee\SystemCore\mfefire.exe
(McAfee, Inc.) C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.5.9600.20413_x64__8wekyb3d8bbwe\LiveComm.exe
(Dolby Laboratories Inc.) C:\Program Files (x86)\Dolby Advanced Audio v2\pcee4.exe
(Realtek semiconductor) C:\Windows\RTFTrack.exe
(Conexant Systems, Inc.) C:\Program Files\CONEXANT\cAudioFilterAgent\CAudioFilterAgent64.exe
(Lenovo (Beijing) Limited) C:\Program Files (x86)\Lenovo\Energy Management\Energy Management.exe
(Motorola Solutions, Inc.) C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe
(Motorola Solutions, Inc.) C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe
(Lenovo(beijing) Limited) C:\Program Files (x86)\Lenovo\Energy Management\utility.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\WINDOWS\system32\igfxsrvc.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe
(CyberLink Corp.) C:\Program Files (x86)\Lenovo\YouCam\YouCamTray.exe
(CyberLink Corp.) C:\Program Files (x86)\Lenovo\PowerDVD10\PDVD10Serv.exe
(McAfee, Inc.) C:\Program Files\Common Files\McAfee\Platform\mcuicnt.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(Intel Corporation) C:\Program Files\Intel\BluetoothHS\BTHSAmpPalService.exe
(Intel(R) Corporation) C:\Program Files\Intel\BluetoothHS\BTHSSecurityMgr.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Microsoft Corporation) C:\WINDOWS\system32\wwahost.exe
(Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Microsoft Corporation) C:\Windows\System32\WWAHost.exe
(Adobe Systems, Inc.) C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerPlugin_12_0_0_77.exe
(Adobe Systems, Inc.) C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerPlugin_12_0_0_77.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [RtsFT] - C:\WINDOWS\RTFTrack.exe [6339656 2013-04-10] (Realtek semiconductor)
HKLM\...\Run: [IAStorIcon] - C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [286192 2013-01-31] (Intel Corporation)
HKLM\...\Run: [cAudioFilterAgent] - C:\Program Files\Conexant\cAudioFilterAgent\cAudioFilterAgent64.exe [900704 2013-03-15] (Conexant Systems, Inc.)
HKLM\...\Run: [SmartAudio] - C:\Program Files\CONEXANT\SAII\SACpl.exe [1647616 2012-06-13] (Conexant Systems, Inc.)
HKLM\...\Run: [BTMTrayAgent] - C:\Program Files (x86)\Intel\Bluetooth\btmshellex.dll [7770936 2013-04-12] (Motorola Solutions, Inc.)
HKLM\...\Run: [Energy Management] - C:\Program Files (x86)\Lenovo\Energy Management\Energy Management.exe [17097200 2013-11-05] (Lenovo (Beijing) Limited)
HKLM\...\Run: [EnergyUtility] - C:\Program Files (x86)\Lenovo\Energy Management\Utility.exe [193008 2013-11-05] (Lenovo(beijing) Limited)
HKLM-x32\...\Run: [YouCam Tray] - C:\Program Files (x86)\Lenovo\YouCam\YouCamTray.exe [168464 2012-10-30] (CyberLink Corp.)
HKLM-x32\...\Run: [UpdateP2GShortCut] - C:\Program Files (x86)\Lenovo\Power2Go\MUITransfer\MUIStartMenu.exe [217088 2012-04-18] (CyberLink Corp.)
HKLM-x32\...\Run: [RemoteControl10] - C:\Program Files (x86)\Lenovo\PowerDVD10\PDVD10Serv.exe [91432 2012-03-28] (CyberLink Corp.)
HKLM-x32\...\Run: [mcui_exe] - C:\Program Files\McAfee.com\Agent\mcagent.exe [537992 2014-01-28] (McAfee, Inc.)
HKLM-x32\...\Run: [Intel AppUp(SM) center] - C:\Program Files (x86)\Intel\IntelAppStore\bin\ismagent.exe [155488 2012-07-12] (Intel Corporation)
HKLM-x32\...\Run: [mcpltui_exe] - C:\Program Files\McAfee.com\Agent\mcagent.exe [537992 2014-01-28] (McAfee, Inc.)
Winlogon\Notify\igfxcui: C:\WINDOWS\system32\igfxdev.dll (Intel Corporation)
HKLM\...\Policies\Explorer: [NoControlPanel] 0

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKLM - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL =
SearchScopes: HKCU - DefaultScope {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
SearchScopes: HKCU - Web URL = [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
SearchScopes: HKCU - {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
BHO: No Name - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - No File
BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\URLREDIR.DLL (Microsoft Corporation)
BHO: Microsoft SkyDrive Pro Browser Helper - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)
BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office 15\root\Office15\URLREDIR.DLL (Microsoft Corporation)
Handler-x32: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office 15\root\Office15\MSOSB.DLL (Microsoft Corporation)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Filter: application/x-mfe-ipt - {3EF5086B-5478-4598-A054-786C45D75692} - C:\Program Files\mcafee\msc\McSnIePl64.dll (McAfee, Inc.)
Filter-x32: application/x-mfe-ipt - {3EF5086B-5478-4598-A054-786C45D75692} - C:\Program Files (x86)\McAfee\msc\McSnIePl.dll (McAfee, Inc.)
Tcpip\Parameters: [DhcpNameServer] 189.4.0.152 189.4.0.157

FireFox:
========
FF ProfilePath: C:\Users\Cassiano\AppData\Roaming\Mozilla\Firefox\Profiles\mhzxax0o.default
FF NewTab: chrome://quick_start/content/index.html
FF Homepage: [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
FF Plugin: @adobe.com/FlashPlayer - C:\WINDOWS\system32\Macromed\Flash\NPSWF64_12_0_0_77.dll ()
FF Plugin: @mcafee.com/MSC,version=10 - c:\PROGRA~1\mcafee\msc\NPMCSN~1.DLL ()
FF Plugin-x32: @adobe.com/FlashPlayer - C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_77.dll ()
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.1.42 - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
FF Plugin-x32: @mcafee.com/MSC,version=10 - c:\PROGRA~2\mcafee\msc\NPMCSN~1.DLL ()
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\Program Files\Microsoft Office 15\root\Office15\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @tools.updatepm.com/PriceMeterLiveUpdate Update;version=3 - C:\Program Files (x86)\PriceMeterLiveUpdate\Update\1.3.23.0\npGoogleUpdate3.dll (PriceMeter)
FF Plugin-x32: @tools.updatepm.com/PriceMeterLiveUpdate Update;version=9 - C:\Program Files (x86)\PriceMeterLiveUpdate\Update\1.3.23.0\npGoogleUpdate3.dll (PriceMeter)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\buscape.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\mercadolivre.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-br.xml
FF Extension: Freeven Pro 1.4 - C:\Users\Cassiano\AppData\Roaming\Mozilla\Firefox\Profiles\mhzxax0o.default\Extensions\a69a8c34-f103-4384-bb03-61e6f2997d07@5273998b-c268-422e-b0ea-5c8e02755d20.com [2014-04-07]
FF Extension: MediaPlayerplus - C:\Users\Cassiano\AppData\Roaming\Mozilla\Firefox\Profiles\mhzxax0o.default\Extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com [2014-04-08]
FF HKLM-x32\...\Thunderbird\Extensions: [msktbird@mcafee.com] - C:\Program Files\McAfee\MSK
FF Extension: McAfee Anti-Spam Thunderbird Extension - C:\Program Files\McAfee\MSK [2013-11-05]

==================== Services (Whitelisted) =================

R2 ClickToRunSvc; C:\Program Files\Microsoft Office 15\ClientX64\OfficeClickToRun.exe [2169016 2014-03-01] (Microsoft Corporation)
R2 HomeNetSvc; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [328928 2013-07-30] (McAfee, Inc.)
R2 IAStorDataMgrSvc; C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [15344 2013-01-31] (Intel Corporation)
R2 Intel(R) Wireless Bluetooth(R) 4.0 Radio Management; C:\Program Files (x86)\Intel\Bluetooth\ibtrksrv.exe [161736 2013-04-15] (Intel Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [165760 2012-11-06] (Intel Corporation)
R2 McAPExe; C:\Program Files\McAfee\MSC\McAPExe.exe [178528 2014-01-28] (McAfee, Inc.)
S3 McAWFwk; C:\Program Files\mcafee\msc\McAWFwk.exe [332080 2012-01-26] (McAfee, Inc.)
R2 McMPFSvc; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [328928 2013-07-30] (McAfee, Inc.)
R2 McNaiAnn; C:\Program Files\Common Files\mcafee\Platform\McSvcHost\McSvHost.exe [328928 2013-07-30] (McAfee, Inc.)
S3 McODS; C:\Program Files\mcafee\VirusScan\mcods.exe [602944 2013-08-02] (McAfee, Inc.)
S2 McOobeSv; C:\Program Files\Common Files\mcafee\McSvcHost\McSvHost.exe [200728 2012-05-11] (McAfee, Inc.)
R2 mcpltsvc; C:\Program Files\Common Files\mcafee\Platform\McSvcHost\McSvHost.exe [328928 2013-07-30] (McAfee, Inc.)
R2 McProxy; C:\Program Files\Common Files\mcafee\Platform\McSvcHost\McSvHost.exe [328928 2013-07-30] (McAfee, Inc.)
R2 mfecore; C:\Program Files\Common Files\McAfee\AMCore\mcshield.exe [1025712 2014-01-21] (McAfee, Inc.)
R2 mfefire; C:\Program Files\Common Files\McAfee\SystemCore\\mfefire.exe [219752 2014-01-27] (McAfee, Inc.)
R2 mfevtp; C:\WINDOWS\system32\mfevtps.exe [185792 2014-01-27] (McAfee, Inc.)
R2 MSK80Service; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [328928 2013-07-30] (McAfee, Inc.)
S3 MyWiFiDHCPDNS; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [273136 2013-04-18] ()
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [348392 2013-10-30] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23824 2013-10-30] (Microsoft Corporation)
R2 ZeroConfigService; C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe [3388144 2013-04-18] (Intel® Corporation)

==================== Drivers (Whitelisted) ====================

S0 ADP80XX; C:\Windows\System32\drivers\ADP80XX.SYS [782176 2013-08-22] (PMC-Sierra)
S3 bcmfn2; C:\Windows\System32\drivers\bcmfn2.sys [17624 2013-08-12] (Windows (R) Win 7 DDK provider)
R3 btmhsf; C:\Windows\system32\DRIVERS\btmhsf.sys [1366328 2013-03-28] (Motorola Solutions, Inc.)
R3 cfwids; C:\Windows\System32\drivers\cfwids.sys [70592 2014-01-27] (McAfee, Inc.)
S3 HipShieldK; C:\Windows\System32\drivers\HipShieldK.sys [197704 2013-09-23] (McAfee, Inc.)
S3 iaLPSSi_GPIO; C:\Windows\System32\drivers\iaLPSSi_GPIO.sys [24568 2013-07-30] (Intel Corporation)
S3 iaLPSSi_I2C; C:\Windows\System32\drivers\iaLPSSi_I2C.sys [99320 2013-07-25] (Intel Corporation)
S0 iaStorAV; C:\Windows\System32\drivers\iaStorAV.sys [651248 2013-08-09] (Intel Corporation)
R0 intelpep; C:\Windows\System32\drivers\intelpep.sys [39768 2013-11-10] (Microsoft Corporation)
S0 LSI_SAS3; C:\Windows\System32\drivers\lsi_sas3.sys [81760 2013-08-22] (LSI Corporation)
R2 mfeapfk; C:\Windows\System32\drivers\mfeapfk.sys [180272 2014-01-27] (McAfee, Inc.)
R2 mfeavfk; C:\Windows\System32\drivers\mfeavfk.sys [311600 2014-01-27] (McAfee, Inc.)
S0 mfeelamk; C:\Windows\System32\drivers\mfeelamk.sys [69352 2014-01-27] (McAfee, Inc.)
R3 mfefirek; C:\Windows\System32\drivers\mfefirek.sys [520696 2014-01-27] (McAfee, Inc.)
R2 mfehidk; C:\Windows\System32\drivers\mfehidk.sys [783864 2014-01-27] (McAfee, Inc.)
R3 mfencbdc; C:\Windows\system32\DRIVERS\mfencbdc.sys [422712 2014-01-21] (McAfee, Inc.)
S3 mfencrk; C:\Windows\system32\DRIVERS\mfencrk.sys [96592 2014-01-21] (McAfee, Inc.)
R2 mfewfpk; C:\Windows\System32\drivers\mfewfpk.sys [344688 2014-01-27] (McAfee, Inc.)
R3 NdisVirtualBus; C:\Windows\System32\drivers\NdisVirtualBus.sys [16384 2013-08-22] (Microsoft Corporation)
S3 netvsc; C:\Windows\system32\DRIVERS\netvsc63.sys [87040 2013-08-22] (Microsoft Corporation)
R3 NETwNe64; C:\Windows\system32\DRIVERS\NETwew00.sys [3344352 2013-07-08] (Intel Corporation)
S3 ReFS; C:\Windows\System32\Drivers\ReFS.sys [924512 2013-08-22] (Microsoft Corporation)
R3 rtsuvc; C:\Windows\system32\DRIVERS\rtsuvc.sys [8243272 2013-04-10] (Realtek Semiconductor Corp.)
S3 SerCx2; C:\Windows\System32\drivers\SerCx2.sys [146776 2013-10-25] (Microsoft Corporation)
S0 stornvme; C:\Windows\System32\drivers\stornvme.sys [57176 2013-11-14] (Microsoft Corporation)
S3 UEFI; C:\Windows\System32\drivers\UEFI.sys [26976 2013-08-22] (Microsoft Corporation)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [124760 2013-10-30] (Microsoft Corporation)
S3 wsvd; C:\Windows\system32\DRIVERS\wsvd.sys [102376 2012-06-13] ("CyberLink)
S3 BdApiUtil; \??\C:\Program Files (x86)\Baidu Security\Baidu Antivirus\BdApiUtil64.sys [X]
S3 BdCameraProtect; \??\C:\Program Files (x86)\Baidu Security\Baidu Antivirus\BdCameraProtect64.sys [X]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-04-08 17:15 - 2014-04-08 17:15 - 00016092 _____ () C:\Users\Cassiano\Downloads\FRST.txt
2014-04-08 17:15 - 2014-04-08 17:15 - 00000000 ____D () C:\FRST
2014-04-08 17:14 - 2014-04-08 17:14 - 02157056 _____ (Farbar) C:\Users\Cassiano\Downloads\FRST64.exe
2014-04-08 15:11 - 2014-04-08 14:50 - 00001720 _____ () C:\Users\Cassiano\Desktop\ZHPFixReport.txt
2014-04-08 15:01 - 2014-04-08 15:01 - 00411028 ____T () C:\Users\Cassiano\Desktop\Etiqueta correios1.oxps
2014-04-08 15:00 - 2014-04-08 15:00 - 00452226 ____T () C:\Users\Cassiano\Desktop\Etiqueta correios.oxps
2014-04-08 12:48 - 2014-04-08 12:48 - 00028197 _____ () C:\Users\Cassiano\Desktop\ZHPDiag.txt
2014-04-08 01:04 - 2014-04-08 15:11 - 00000000 ____D () C:\Users\Cassiano\AppData\Roaming\ZHP
2014-04-08 01:04 - 2014-04-08 12:45 - 00000000 ____D () C:\Program Files (x86)\ZHPDiag
2014-04-08 01:04 - 2014-04-08 01:04 - 00002018 _____ () C:\Users\Cassiano\Desktop\ZHPFix.lnk
2014-04-08 01:04 - 2014-04-08 01:04 - 00001887 _____ () C:\Users\Cassiano\Desktop\ZHPDiag.lnk
2014-04-08 01:02 - 2014-04-08 01:04 - 06857733 _____ (Nicolas Coolman ) C:\Users\Cassiano\Downloads\ZHPDiag2.exe
2014-04-08 00:52 - 2014-04-08 00:52 - 00001248 _____ () C:\Users\Cassiano\Desktop\JRT.txt
2014-04-08 00:45 - 2014-04-08 00:45 - 00000000 ____D () C:\WINDOWS\ERUNT
2014-04-08 00:43 - 2014-04-08 00:43 - 01016261 _____ (Thisisu) C:\Users\Cassiano\Downloads\JRT.exe
2014-04-07 23:48 - 2014-04-07 23:48 - 00037746 _____ () C:\Users\Cassiano\Desktop\zoek-results.txt
2014-04-07 23:39 - 2014-04-07 23:31 - 00024064 _____ () C:\WINDOWS\zoek-delete.exe
2014-04-07 23:32 - 2014-04-07 23:41 - 00037746 _____ () C:\zoek-results.log
2014-04-07 23:28 - 2014-04-08 00:21 - 00000000 ____D () C:\zoek_backup
2014-04-06 18:47 - 2014-02-22 09:16 - 00139776 _____ (Microsoft Corporation) C:\WINDOWS\system32\poqexec.exe
2014-04-06 18:47 - 2014-02-22 08:24 - 00124416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\poqexec.exe
2014-04-06 18:13 - 2014-03-04 19:53 - 00693240 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2014-04-06 18:13 - 2014-03-04 19:53 - 00105464 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl
2014-04-05 19:25 - 2013-12-08 21:34 - 01227264 _____ (Microsoft Corporation) C:\WINDOWS\system32\mispace.dll
2014-04-05 19:25 - 2013-12-08 21:04 - 00980480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mispace.dll
2014-04-05 19:25 - 2013-11-27 12:34 - 03210528 _____ (Microsoft Corporation) C:\WINDOWS\system32\msmpeg2vdec.dll
2014-04-05 19:25 - 2013-11-27 12:27 - 00809872 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmp4srcsnk.dll
2014-04-05 19:25 - 2013-11-27 11:00 - 00663680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmp4srcsnk.dll
2014-04-05 19:25 - 2013-11-27 10:47 - 02804528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msmpeg2vdec.dll
2014-04-05 19:25 - 2013-11-27 09:02 - 00142848 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ipnat.sys
2014-04-05 19:25 - 2013-11-27 07:24 - 00306688 _____ (Microsoft Corporation) C:\WINDOWS\system32\msieftp.dll
2014-04-05 19:25 - 2013-11-27 06:46 - 00273920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msieftp.dll
2014-04-05 19:25 - 2013-11-27 06:41 - 00136704 _____ (Microsoft Corporation) C:\WINDOWS\system32\psmsrv.dll
2014-04-05 19:25 - 2013-11-27 06:17 - 00263168 _____ (Microsoft Corporation) C:\WINDOWS\system32\bisrv.dll
2014-04-05 19:25 - 2013-11-27 06:10 - 00273408 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Graphics.dll
2014-04-05 19:25 - 2013-11-27 05:58 - 01503232 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlansvc.dll
2014-04-05 19:25 - 2013-11-27 05:56 - 00218112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Graphics.dll
2014-04-05 19:25 - 2013-11-26 10:20 - 01399176 _____ (Microsoft Corporation) C:\WINDOWS\system32\winmde.dll
2014-04-05 19:25 - 2013-11-26 10:20 - 01374384 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmpmde.dll
2014-04-05 19:25 - 2013-11-26 08:44 - 01204968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winmde.dll
2014-04-05 19:25 - 2013-11-24 22:45 - 00142680 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBSTOR.SYS
2014-04-05 19:25 - 2013-11-24 22:32 - 01119064 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ndis.sys
2014-04-05 19:25 - 2013-11-24 20:30 - 00513536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rastls.dll
2014-04-05 19:25 - 2013-11-24 20:28 - 00589824 _____ (Microsoft Corporation) C:\WINDOWS\system32\rastls.dll
2014-04-05 19:25 - 2013-11-23 09:47 - 00032088 _____ (Microsoft Corporation) C:\WINDOWS\system32\ploptin.dll
2014-04-05 19:25 - 2013-11-23 04:13 - 00024064 _____ (Microsoft Corporation) C:\WINDOWS\system32\bi.dll
2014-04-05 19:25 - 2013-11-23 04:13 - 00019456 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\BtaMPM.sys
2014-04-05 19:25 - 2013-11-23 04:08 - 00403456 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb.sys
2014-04-05 19:25 - 2013-11-23 01:50 - 00282112 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemEventsBrokerServer.dll
2014-04-05 19:25 - 2013-11-23 00:19 - 02617344 _____ (Microsoft Corporation) C:\WINDOWS\system32\authui.dll
2014-04-05 19:25 - 2013-11-23 00:15 - 02295808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\authui.dll
2014-04-05 19:25 - 2013-11-21 03:58 - 00207872 _____ (Microsoft Corporation) C:\WINDOWS\system32\deviceregistration.dll
2014-04-05 19:25 - 2013-11-21 03:26 - 01415680 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll
2014-04-05 19:25 - 2013-11-15 11:59 - 00470016 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfds.dll
2014-04-05 19:25 - 2013-11-15 11:25 - 00433664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfds.dll
2014-04-05 19:25 - 2013-11-15 11:08 - 00202240 _____ (Microsoft Corporation) C:\WINDOWS\system32\ubpm.dll
2014-04-05 19:25 - 2013-11-15 10:24 - 00834048 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll
2014-04-05 19:25 - 2013-10-30 21:29 - 00745336 _____ (Microsoft Corporation) C:\WINDOWS\system32\oleaut32.dll
2014-04-05 19:25 - 2013-10-30 20:41 - 00552624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\oleaut32.dll
2014-04-05 19:22 - 2013-11-10 23:48 - 00039768 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\intelpep.sys
2014-04-05 19:22 - 2013-11-09 03:37 - 01756160 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMPDMC.exe
2014-04-05 19:22 - 2013-11-09 02:56 - 01391104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMPDMC.exe
2014-04-05 19:22 - 2013-11-08 07:26 - 00358896 _____ (Microsoft Corporation) C:\WINDOWS\system32\dcomp.dll
2014-04-05 19:22 - 2013-11-08 01:43 - 00254464 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentClient.dll
2014-04-05 19:22 - 2013-11-08 01:16 - 00225792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dcomp.dll
2014-04-05 19:22 - 2013-11-08 01:15 - 00198656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppXDeploymentClient.dll
2014-04-05 19:22 - 2013-11-08 00:41 - 01302528 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll
2014-04-05 19:22 - 2013-11-08 00:14 - 00922624 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.dll
2014-04-05 19:22 - 2013-11-05 11:19 - 00566784 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpncore.dll
2014-04-05 19:22 - 2013-11-04 10:07 - 01843712 _____ (Microsoft Corporation) C:\WINDOWS\system32\Display.dll
2014-04-05 19:22 - 2013-11-04 07:32 - 02570240 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers.dll
2014-04-05 19:22 - 2013-11-03 23:28 - 01816576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Display.dll
2014-04-05 19:22 - 2013-11-01 08:39 - 00086872 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\pdc.sys
2014-04-05 19:22 - 2013-11-01 03:08 - 00747008 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlidcli.dll
2014-04-05 19:22 - 2013-11-01 02:57 - 00544768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlidcli.dll
2014-04-05 19:22 - 2013-10-30 21:58 - 00372568 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\spaceport.sys
2014-04-05 19:22 - 2013-10-30 21:42 - 07399256 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2014-04-05 19:22 - 2013-10-30 21:33 - 01476184 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.efi
2014-04-05 19:22 - 2013-10-30 21:33 - 01345536 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.exe
2014-04-05 19:22 - 2013-10-25 22:54 - 00146776 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\SerCx2.sys
2014-04-05 19:22 - 2013-10-24 06:31 - 00030208 _____ (Microsoft Corporation) C:\WINDOWS\system32\CredentialMigrationHandler.dll
2014-04-05 19:22 - 2013-10-24 06:12 - 00027136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CredentialMigrationHandler.dll
2014-04-05 19:22 - 2013-10-17 08:21 - 02896896 _____ (Microsoft Corporation) C:\WINDOWS\system32\msftedit.dll
2014-04-05 19:22 - 2013-10-17 07:36 - 02266624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msftedit.dll
2014-04-05 19:20 - 2013-12-09 05:05 - 21199256 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll
2014-04-05 19:19 - 2014-01-07 22:46 - 00325464 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBXHCI.SYS
2014-04-05 19:19 - 2014-01-07 22:41 - 01530712 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys
2014-04-05 19:19 - 2014-01-07 22:41 - 00382808 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms1.sys
2014-04-05 19:19 - 2014-01-04 12:54 - 00138240 _____ () C:\WINDOWS\system32\OEMLicense.dll
2014-04-05 19:19 - 2014-01-04 12:08 - 00103936 _____ () C:\WINDOWS\SysWOW64\OEMLicense.dll
2014-04-05 19:19 - 2014-01-04 11:08 - 00206336 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSClient.dll
2014-04-05 19:19 - 2014-01-04 10:53 - 00174592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WSClient.dll
2014-04-05 19:19 - 2014-01-02 20:54 - 00461312 _____ (Microsoft Corporation) C:\WINDOWS\system32\XpsGdiConverter.dll
2014-04-05 19:19 - 2014-01-02 20:48 - 00336896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XpsGdiConverter.dll
2014-04-05 19:19 - 2013-12-31 22:55 - 01720560 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntdll.dll
2014-04-05 19:19 - 2013-12-31 22:52 - 00481944 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsvr.dll
2014-04-05 19:19 - 2013-12-31 21:56 - 01472048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntdll.dll
2014-04-05 19:19 - 2013-12-31 21:55 - 00381168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfsvr.dll
2014-04-05 19:19 - 2013-12-31 20:59 - 00802816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFMediaEngine.dll
2014-04-05 19:19 - 2013-12-31 20:57 - 01214976 _____ (Microsoft Corporation) C:\WINDOWS\system32\schedsvc.dll
2014-04-05 19:19 - 2013-12-31 20:56 - 00960512 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFMediaEngine.dll
2014-04-05 19:19 - 2013-12-30 20:34 - 00218112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sti.dll
2014-04-05 19:19 - 2013-12-30 20:33 - 00770560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ReAgent.dll
2014-04-05 19:19 - 2013-12-30 20:32 - 00303616 _____ (Microsoft Corporation) C:\WINDOWS\system32\sti.dll
2014-04-05 19:19 - 2013-12-30 20:31 - 00947712 _____ (Microsoft Corporation) C:\WINDOWS\system32\reseteng.dll
2014-04-05 19:19 - 2013-12-30 20:31 - 00914944 _____ (Microsoft Corporation) C:\WINDOWS\system32\ReAgent.dll
2014-04-05 19:19 - 2013-12-27 12:09 - 00419160 _____ (Microsoft Corporation) C:\WINDOWS\system32\hal.dll
2014-04-05 19:19 - 2013-12-27 05:57 - 00842752 _____ (Microsoft Corporation) C:\WINDOWS\system32\MsSpellCheckingFacility.dll
2014-04-05 19:19 - 2013-12-27 05:57 - 00628736 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncHost.exe
2014-04-05 19:19 - 2013-12-27 05:23 - 00749056 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncCore.dll
2014-04-05 19:19 - 2013-12-27 04:03 - 00630272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MsSpellCheckingFacility.dll
2014-04-05 19:19 - 2013-12-27 04:03 - 00478208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSyncHost.exe
2014-04-05 19:19 - 2013-12-27 03:37 - 00588800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSyncCore.dll
2014-04-05 19:19 - 2013-12-21 04:21 - 00376320 _____ (Microsoft Corporation) C:\WINDOWS\system32\pnrpsvc.dll
2014-04-05 19:19 - 2013-12-17 04:21 - 00408576 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rdbss.sys
2014-04-05 19:19 - 2013-12-14 03:31 - 13949440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.dll
2014-04-05 19:19 - 2013-12-14 03:19 - 18576384 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll
2014-04-05 19:19 - 2013-12-13 07:54 - 00131160 _____ (Microsoft Corporation) C:\WINDOWS\system32\easinvoker.exe
2014-04-05 19:19 - 2013-12-13 03:36 - 00178176 _____ (Microsoft Corporation) C:\WINDOWS\system32\easwrt.dll
2014-04-05 19:19 - 2013-12-13 02:32 - 00140800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\easwrt.dll
2014-04-05 19:19 - 2013-12-09 01:51 - 18643560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll
2014-04-05 19:19 - 2013-11-04 08:50 - 02143744 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmcore.dll
2014-04-05 19:19 - 2013-11-03 22:30 - 01765376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dwmcore.dll
2014-04-05 19:19 - 2013-10-05 11:21 - 02140888 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d11.dll
2014-04-05 19:19 - 2013-10-05 11:21 - 00516496 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxgi.dll
2014-04-05 19:19 - 2013-10-05 09:05 - 01765384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d11.dll
2014-04-05 19:19 - 2013-10-05 09:05 - 00406400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxgi.dll
2014-04-05 19:16 - 2014-03-01 03:05 - 23133696 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2014-04-05 19:16 - 2014-03-01 01:58 - 02765824 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2014-04-05 19:16 - 2014-03-01 01:30 - 17074688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2014-04-05 19:16 - 2014-03-01 01:17 - 00218624 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe
2014-04-05 19:16 - 2014-03-01 00:54 - 05768704 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2014-04-05 19:16 - 2014-03-01 00:47 - 02168320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2014-04-05 19:16 - 2014-03-01 00:42 - 00627200 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll
2014-04-05 19:16 - 2014-03-01 00:18 - 13051904 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2014-04-05 19:16 - 2014-03-01 00:14 - 04244480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2014-04-05 19:16 - 2014-03-01 00:10 - 02334208 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2014-04-05 19:16 - 2014-03-01 00:03 - 00524288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll
2014-04-05 19:16 - 2014-02-28 23:57 - 11266048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2014-04-05 19:16 - 2014-02-28 23:38 - 01393664 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2014-04-05 19:16 - 2014-02-28 23:32 - 01820160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
2014-04-05 19:16 - 2014-02-28 23:27 - 01156096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2014-04-05 19:16 - 2014-02-28 23:25 - 00817664 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieapfltr.dll
2014-04-05 19:16 - 2014-02-28 23:25 - 00703488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieapfltr.dll
2014-04-05 19:16 - 2014-02-06 08:30 - 02724864 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.tlb
2014-04-05 19:16 - 2014-02-06 08:30 - 00004096 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieetwcollectorres.dll
2014-04-05 19:16 - 2014-02-06 08:07 - 00066048 _____ (Microsoft Corporation) C:\WINDOWS\system32\iesetup.dll
2014-04-05 19:16 - 2014-02-06 08:06 - 00048640 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieetwproxystub.dll
2014-04-05 19:16 - 2014-02-06 07:57 - 00053760 _____ (Microsoft Corporation) C:\WINDOWS\system32\jsproxy.dll
2014-04-05 19:16 - 2014-02-06 07:56 - 00033792 _____ (Microsoft Corporation) C:\WINDOWS\system32\iernonce.dll
2014-04-05 19:16 - 2014-02-06 07:49 - 00139264 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieUnatt.exe
2014-04-05 19:16 - 2014-02-06 07:48 - 00708608 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9diag.dll
2014-04-05 19:16 - 2014-02-06 07:48 - 00111616 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieetwcollector.exe
2014-04-05 19:16 - 2014-02-06 07:20 - 02724864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.tlb
2014-04-05 19:16 - 2014-02-06 07:17 - 00195584 _____ (Microsoft Corporation) C:\WINDOWS\system32\msrating.dll
2014-04-05 19:16 - 2014-02-06 07:01 - 00061952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iesetup.dll
2014-04-05 19:16 - 2014-02-06 07:00 - 00051200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieetwproxystub.dll
2014-04-05 19:16 - 2014-02-06 06:52 - 00043008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jsproxy.dll
2014-04-05 19:16 - 2014-02-06 06:52 - 00032768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iernonce.dll
2014-04-05 19:16 - 2014-02-06 06:50 - 02041856 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl
2014-04-05 19:16 - 2014-02-06 06:47 - 00112128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieUnatt.exe
2014-04-05 19:16 - 2014-02-06 06:46 - 00553472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9diag.dll
2014-04-05 19:16 - 2014-02-06 06:25 - 00164864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msrating.dll
2014-04-05 19:16 - 2014-02-06 06:09 - 01964032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl
2014-04-05 19:15 - 2013-12-20 07:18 - 01643584 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.efi
2014-04-05 19:15 - 2013-12-20 07:18 - 01507704 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.exe
2014-04-05 19:15 - 2013-12-08 21:27 - 02152448 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml3.dll
2014-04-05 19:15 - 2013-12-08 21:19 - 00570880 _____ (Microsoft Corporation) C:\WINDOWS\system32\msdrm.dll
2014-04-05 19:15 - 2013-12-08 20:55 - 00444928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msdrm.dll
2014-04-05 19:15 - 2013-12-08 20:54 - 01317376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml3.dll
2014-04-05 19:15 - 2013-10-19 05:53 - 00075360 _____ (Microsoft Corporation) C:\WINDOWS\system32\imagehlp.dll
2014-04-05 19:15 - 2013-10-19 04:14 - 00070680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\imagehlp.dll
2014-04-05 19:10 - 2014-01-31 13:15 - 00311640 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\volsnap.sys
2014-04-05 19:10 - 2014-01-31 13:07 - 00233920 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfps.dll
2014-04-05 19:10 - 2014-01-31 13:06 - 02133208 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfcore.dll
2014-04-05 19:10 - 2014-01-31 10:47 - 02143960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfcore.dll
2014-04-05 19:10 - 2014-01-31 06:06 - 00716288 _____ (Microsoft Corporation) C:\WINDOWS\system32\swprv.dll
2014-04-05 19:10 - 2014-01-29 06:55 - 01287064 _____ (Microsoft Corporation) C:\WINDOWS\system32\kernel32.dll
2014-04-05 19:10 - 2014-01-29 05:53 - 00458616 _____ (Microsoft Corporation) C:\WINDOWS\system32\WerFault.exe
2014-04-05 19:10 - 2014-01-29 05:53 - 00407024 _____ (Microsoft Corporation) C:\WINDOWS\system32\Faultrep.dll
2014-04-05 19:10 - 2014-01-29 05:49 - 01928144 _____ (Microsoft Corporation) C:\WINDOWS\system32\combase.dll
2014-04-05 19:10 - 2014-01-29 05:47 - 02543960 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpip.sys
2014-04-05 19:10 - 2014-01-29 04:44 - 01371824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\combase.dll
2014-04-05 19:10 - 2014-01-29 04:44 - 00408480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WerFault.exe
2014-04-05 19:10 - 2014-01-29 04:44 - 00369280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Faultrep.dll
2014-04-05 19:10 - 2014-01-29 03:41 - 00208896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdpencom.dll
2014-04-05 19:10 - 2014-01-28 21:36 - 00249856 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpencom.dll
2014-04-05 19:10 - 2014-01-27 16:07 - 04175360 _____ (Microsoft Corporation) C:\WINDOWS\system32\dbgeng.dll
2014-04-05 19:10 - 2014-01-27 16:06 - 00064512 _____ (Microsoft Corporation) C:\WINDOWS\system32\tsgqec.dll
2014-04-05 19:10 - 2014-01-27 16:04 - 00160256 _____ (Microsoft Corporation) C:\WINDOWS\system32\DWWIN.EXE
2014-04-05 19:10 - 2014-01-27 15:52 - 01036288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kernel32.dll
2014-04-05 19:10 - 2014-01-27 15:23 - 02873344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dbgeng.dll
2014-04-05 19:10 - 2014-01-27 15:21 - 00053248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tsgqec.dll
2014-04-05 19:10 - 2014-01-27 15:20 - 00138752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DWWIN.EXE
2014-04-05 19:10 - 2014-01-27 15:15 - 01057280 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdvidcrl.dll
2014-04-05 19:10 - 2014-01-27 14:43 - 00855552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdvidcrl.dll
2014-04-05 19:10 - 2014-01-27 14:18 - 01486848 _____ (Microsoft Corporation) C:\WINDOWS\system32\dbghelp.dll
2014-04-05 19:10 - 2014-01-27 14:00 - 01238016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dbghelp.dll
2014-04-05 19:10 - 2014-01-27 12:58 - 05770752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mstscax.dll
2014-04-05 19:10 - 2014-01-27 12:50 - 06640640 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstscax.dll
2014-04-05 19:10 - 2014-01-27 08:45 - 00386722 _____ () C:\WINDOWS\system32\ApnDatabase.xml
2014-04-05 19:10 - 2014-01-17 20:04 - 00764864 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmpeg2srcsnk.dll
2014-04-05 19:10 - 2014-01-17 18:54 - 00669352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmpeg2srcsnk.dll
2014-04-05 19:10 - 2014-01-07 02:00 - 02397184 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d10warp.dll
2014-04-05 19:10 - 2014-01-07 01:30 - 02071552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d10warp.dll
2014-04-05 19:10 - 2013-12-21 11:51 - 06353960 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppsvc.exe
2014-04-05 19:10 - 2013-12-21 05:54 - 00447488 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppcomapi.dll
2014-04-05 19:10 - 2013-11-23 01:34 - 00393216 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMPhoto.dll
2014-04-05 19:10 - 2013-11-23 01:13 - 00348160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMPhoto.dll
2014-04-05 19:10 - 2013-11-21 03:42 - 04604416 _____ (Microsoft Corporation) C:\WINDOWS\system32\d2d1.dll
2014-04-05 19:10 - 2013-11-21 02:44 - 03936256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d2d1.dll
2014-04-05 19:09 - 2013-10-30 21:29 - 00236888 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdFilter.sys
2014-04-05 19:09 - 2013-10-30 21:29 - 00124760 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdNisDrv.sys
2014-04-05 19:09 - 2013-10-30 21:28 - 00035856 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdBoot.sys
2014-04-05 19:08 - 2014-01-04 17:50 - 01462216 _____ (Microsoft Corporation) C:\WINDOWS\system32\propsys.dll
2014-04-05 19:08 - 2014-01-04 16:22 - 01202888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\propsys.dll
2014-04-05 19:08 - 2014-01-04 11:30 - 13209088 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll
2014-04-05 19:08 - 2014-01-04 11:23 - 11702272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll
2014-04-05 19:08 - 2014-01-04 10:42 - 01105408 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchFolder.dll
2014-04-05 19:08 - 2014-01-04 10:40 - 07416832 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Search.dll
2014-04-05 19:08 - 2014-01-04 10:36 - 00830976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchFolder.dll
2014-04-05 19:08 - 2014-01-04 10:28 - 04961792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Search.dll
2014-04-05 19:08 - 2013-12-20 23:10 - 00009701 _____ () C:\WINDOWS\SysWOW64\connectedsearch-results.searchconnector-ms
2014-04-05 19:08 - 2013-12-20 23:10 - 00009701 _____ () C:\WINDOWS\system32\connectedsearch-results.searchconnector-ms
2014-04-05 19:08 - 2013-12-08 23:57 - 00548864 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll
2014-04-05 19:08 - 2013-12-08 22:51 - 00454656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll
2014-04-05 19:08 - 2013-11-27 12:36 - 03395920 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSService.dll
2014-04-05 19:08 - 2013-11-27 08:41 - 00084480 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSCollect.exe
2014-04-05 19:08 - 2013-11-27 05:48 - 00249856 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2014-04-05 19:08 - 2013-11-27 05:40 - 00189952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2014-04-05 19:08 - 2013-11-27 05:17 - 00695808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WSShared.dll
2014-04-05 19:08 - 2013-11-27 05:12 - 00848384 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSShared.dll
2014-04-05 19:07 - 2014-02-11 00:04 - 04189184 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys
2014-04-05 19:07 - 2014-02-10 23:43 - 00488448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\qedit.dll
2014-04-05 19:07 - 2014-02-10 23:04 - 00586240 _____ (Microsoft Corporation) C:\WINDOWS\system32\qedit.dll
2014-04-05 19:07 - 2014-01-07 04:03 - 00018944 _____ (Microsoft Corporation) C:\WINDOWS\system32\pcaui.exe
2014-04-05 19:07 - 2014-01-07 02:59 - 00017408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\pcaui.exe
2014-04-05 19:07 - 2013-12-20 07:10 - 01113040 _____ (Microsoft Corporation) C:\WINDOWS\system32\KernelBase.dll
2014-04-05 19:07 - 2013-12-20 03:13 - 00835584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KernelBase.dll
2014-04-05 19:07 - 2013-12-08 21:15 - 00787968 _____ (Microsoft Corporation) C:\WINDOWS\system32\uDWM.dll
2014-04-05 19:07 - 2013-11-09 03:34 - 00615936 _____ (Microsoft Corporation) C:\WINDOWS\system32\MDMAgent.exe
2014-04-05 19:07 - 2013-11-09 03:34 - 00287744 _____ (Microsoft Corporation) C:\WINDOWS\system32\mdmregistration.dll
2014-04-05 19:07 - 2013-11-09 02:52 - 00240128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mdmregistration.dll
2014-04-05 19:07 - 2013-10-15 05:54 - 00197120 _____ (Microsoft Corporation) C:\WINDOWS\system32\scrrun.dll
2014-04-05 19:07 - 2013-10-15 05:03 - 00156672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\scrrun.dll
2014-04-05 19:05 - 2014-01-09 05:25 - 02804224 _____ (Microsoft Corporation) C:\WINDOWS\system32\actxprxy.dll
2014-04-05 19:05 - 2014-01-09 04:59 - 01020928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\actxprxy.dll
2014-04-05 19:05 - 2014-01-09 04:59 - 00115712 _____ (Microsoft Corporation) C:\WINDOWS\system32\winbici.dll
2014-04-05 19:05 - 2014-01-09 04:49 - 00919040 _____ (Microsoft Corporation) C:\WINDOWS\system32\MrmCoreR.dll
2014-04-05 19:05 - 2014-01-09 04:44 - 00720384 _____ (Microsoft Corporation) C:\WINDOWS\system32\SkyDriveTelemetry.dll
2014-04-05 19:05 - 2014-01-09 04:43 - 00121344 _____ (Microsoft Corporation) C:\WINDOWS\system32\SkyDriveShell.dll
2014-04-05 19:05 - 2014-01-09 04:29 - 00105984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SkyDriveShell.dll
2014-04-05 19:05 - 2014-01-09 04:28 - 04217344 _____ (Microsoft Corporation) C:\WINDOWS\system32\SyncEngine.dll
2014-04-05 19:05 - 2014-01-09 04:28 - 00628736 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MrmCoreR.dll
2014-04-05 19:05 - 2014-01-09 04:18 - 00870912 _____ (Microsoft Corporation) C:\WINDOWS\system32\SkyDrive.exe
2014-04-05 00:58 - 2014-04-05 01:30 - 00000000 ____D () C:\AdwCleaner
2014-04-05 00:55 - 2014-04-05 00:57 - 01426178 _____ () C:\Users\Cassiano\Downloads\AdwCleaner.exe
2014-04-04 22:50 - 2014-04-08 17:14 - 00003950 _____ () C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{742F6630-E6FB-4F9B-BF75-3F8AE5886FD4}
2014-04-04 16:09 - 2014-04-04 16:09 - 00000000 ____D () C:\Users\Cassiano\AppData\Local\com
2014-04-04 16:02 - 2014-04-04 16:02 - 00000000 ____D () C:\Program Files (x86)\MediaPlayerplus
2014-04-04 15:34 - 2014-04-08 15:01 - 00037376 ___SH () C:\Users\Cassiano\Desktop\Thumbs.db
2014-04-04 15:34 - 2014-04-08 09:59 - 00000000 __RDO () C:\Users\Cassiano\SkyDrive
2014-04-04 15:30 - 2014-04-05 00:59 - 00000994 _____ () C:\Users\Cassiano\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-04-04 15:29 - 2014-04-04 15:29 - 00000020 ___SH () C:\Users\Cassiano\ntuser.ini
2014-04-04 15:27 - 2014-04-04 15:27 - 00000000 _SHDL () C:\Users\Usuário Padrão\Documents\Minhas Músicas
2014-04-04 15:27 - 2014-04-04 15:27 - 00000000 _SHDL () C:\Users\Usuário Padrão\Documents\Minhas Imagens
2014-04-04 15:27 - 2014-04-04 15:27 - 00000000 _SHDL () C:\Users\Usuário Padrão\Documents\Meus Vídeos
2014-04-04 15:27 - 2014-04-04 15:27 - 00000000 _SHDL () C:\Users\Usuário Padrão\AppData\Roaming\Microsoft\Windows\Start Menu\Programas
2014-04-04 15:27 - 2014-04-04 15:27 - 00000000 _SHDL () C:\Users\Usuário Padrão\AppData\Local\Histórico
2014-04-04 15:27 - 2014-04-04 15:27 - 00000000 _SHDL () C:\Users\Usuário Padrão\AppData\Local\Dados de Aplicativos
2014-04-04 15:27 - 2014-04-04 15:27 - 00000000 _SHDL () C:\Users\Default\Modelos
2014-04-04 15:27 - 2014-04-04 15:27 - 00000000 _SHDL () C:\Users\Default\Meus Documentos
2014-04-04 15:27 - 2014-04-04 15:27 - 00000000 _SHDL () C:\Users\Default\Menu Iniciar
2014-04-04 15:27 - 2014-04-04 15:27 - 00000000 _SHDL () C:\Users\Default\Documents\Minhas Músicas
2014-04-04 15:27 - 2014-04-04 15:27 - 00000000 _SHDL () C:\Users\Default\Documents\Minhas Imagens
2014-04-04 15:27 - 2014-04-04 15:27 - 00000000 _SHDL () C:\Users\Default\Documents\Meus Vídeos
2014-04-04 15:27 - 2014-04-04 15:27 - 00000000 _SHDL () C:\Users\Default\Dados de Aplicativos
2014-04-04 15:27 - 2014-04-04 15:27 - 00000000 _SHDL () C:\Users\Default\Configurações Locais
2014-04-04 15:27 - 2014-04-04 15:27 - 00000000 _SHDL () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programas
2014-04-04 15:27 - 2014-04-04 15:27 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Histórico
2014-04-04 15:27 - 2014-04-04 15:27 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Dados de Aplicativos
2014-04-04 15:27 - 2014-04-04 15:27 - 00000000 _SHDL () C:\Users\Default\Ambiente de Rede
2014-04-04 15:27 - 2014-04-04 15:27 - 00000000 _SHDL () C:\Users\Default\Ambiente de Impressão
2014-04-04 15:27 - 2014-04-04 15:27 - 00000000 _SHDL () C:\Users\Default User\Documents\Minhas Músicas
2014-04-04 15:27 - 2014-04-04 15:27 - 00000000 _SHDL () C:\Users\Default User\Documents\Minhas Imagens
2014-04-04 15:27 - 2014-04-04 15:27 - 00000000 _SHDL () C:\Users\Default User\Documents\Meus Vídeos
2014-04-04 15:27 - 2014-04-04 15:27 - 00000000 _SHDL () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programas
2014-04-04 15:27 - 2014-04-04 15:27 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Histórico
2014-04-04 15:27 - 2014-04-04 15:27 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Dados de Aplicativos
2014-04-04 15:26 - 2014-04-08 17:11 - 01558081 _____ () C:\WINDOWS\WindowsUpdate.log
2014-04-04 15:26 - 2014-04-04 15:26 - 00022956 _____ () C:\WINDOWS\system32\emptyregdb.dat
2014-04-04 15:15 - 2014-04-04 15:15 - 00000000 ____D () C:\Users\Usuário Padrão\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Lenovo
2014-04-04 15:15 - 2014-04-04 15:15 - 00000000 ____D () C:\Users\Usuário Padrão\AppData\Roaming\Macromedia
2014-04-04 15:15 - 2014-04-04 15:15 - 00000000 ____D () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Lenovo
2014-04-04 15:15 - 2014-04-04 15:15 - 00000000 ____D () C:\Users\Default\AppData\Roaming\Macromedia
2014-04-04 15:15 - 2014-04-04 15:15 - 00000000 ____D () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Lenovo
2014-04-04 15:15 - 2014-04-04 15:15 - 00000000 ____D () C:\Users\Default User\AppData\Roaming\Macromedia
2014-04-04 15:12 - 2014-04-04 15:12 - 00000000 ____D () C:\WINDOWS\system32\config\bbimigrate
2014-04-04 15:11 - 2014-04-04 15:34 - 00000000 ____D () C:\Users\Cassiano
2014-04-04 15:11 - 2014-04-04 15:26 - 00020958 _____ () C:\WINDOWS\diagwrn.xml
2014-04-04 15:11 - 2014-04-04 15:26 - 00020958 _____ () C:\WINDOWS\diagerr.xml
2014-04-04 15:11 - 2014-04-04 15:12 - 00000000 ___RD () C:\Users\Cassiano\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2014-04-04 15:11 - 2014-04-04 15:12 - 00000000 ___RD () C:\Users\Cassiano\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
2014-04-04 15:11 - 2014-04-04 15:11 - 00000000 _SHDL () C:\Users\Cassiano\Modelos
2014-04-04 15:11 - 2014-04-04 15:11 - 00000000 _SHDL () C:\Users\Cassiano\Meus Documentos
2014-04-04 15:11 - 2014-04-04 15:11 - 00000000 _SHDL () C:\Users\Cassiano\Menu Iniciar
2014-04-04 15:11 - 2014-04-04 15:11 - 00000000 _SHDL () C:\Users\Cassiano\Documents\Minhas Músicas
2014-04-04 15:11 - 2014-04-04 15:11 - 00000000 _SHDL () C:\Users\Cassiano\Documents\Minhas Imagens
2014-04-04 15:11 - 2014-04-04 15:11 - 00000000 _SHDL () C:\Users\Cassiano\Documents\Meus Vídeos
2014-04-04 15:11 - 2014-04-04 15:11 - 00000000 _SHDL () C:\Users\Cassiano\Dados de Aplicativos
2014-04-04 15:11 - 2014-04-04 15:11 - 00000000 _SHDL () C:\Users\Cassiano\Configurações Locais
2014-04-04 15:11 - 2014-04-04 15:11 - 00000000 _SHDL () C:\Users\Cassiano\AppData\Roaming\Microsoft\Windows\Start Menu\Programas
2014-04-04 15:11 - 2014-04-04 15:11 - 00000000 _SHDL () C:\Users\Cassiano\AppData\Local\Histórico
2014-04-04 15:11 - 2014-04-04 15:11 - 00000000 _SHDL () C:\Users\Cassiano\AppData\Local\Dados de Aplicativos
2014-04-04 15:11 - 2014-04-04 15:11 - 00000000 _SHDL () C:\Users\Cassiano\Ambiente de Rede
2014-04-04 15:11 - 2014-04-04 15:11 - 00000000 _SHDL () C:\Users\Cassiano\Ambiente de Impressão
2014-04-04 15:11 - 2013-08-22 12:36 - 00000000 ___RD () C:\Users\Cassiano\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2014-04-04 15:11 - 2013-08-22 12:36 - 00000000 ____D () C:\Users\Cassiano\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2014-04-04 15:08 - 2014-04-04 15:08 - 00000000 ____H () C:\WINDOWS\system32\Drivers\Msft_Kernel_iBtFltCoex_01009.Wdf
2014-04-04 15:07 - 2014-04-04 15:14 - 00000000 ____D () C:\Users\Todos os Usuários\Conexant
2014-04-04 15:07 - 2014-04-04 15:14 - 00000000 ____D () C:\ProgramData\Conexant
2014-04-04 15:07 - 2014-04-04 15:14 - 00000000 ____D () C:\Program Files\CONEXANT
2014-04-04 15:07 - 2014-04-04 15:07 - 00000000 ____D () C:\Program Files\Elantech
2014-04-04 15:07 - 2014-01-25 02:23 - 00064000 _____ (Khronos Group) C:\WINDOWS\system32\OpenCL.DLL
2014-04-04 15:07 - 2014-01-25 02:23 - 00060416 _____ (Khronos Group) C:\WINDOWS\SysWOW64\OpenCL.DLL
2014-04-04 15:06 - 2014-04-05 14:27 - 00000000 ___DC () C:\WINDOWS\Panther
2014-04-04 15:06 - 2014-04-04 15:06 - 00000000 __SHD () C:\Recovery
2014-04-04 15:05 - 2014-04-04 15:05 - 00262144 _____ () C:\WINDOWS\system32\config\userdiff
2014-04-04 15:03 - 2014-04-04 15:03 - 00000000 ____D () C:\WINDOWS\SysWOW64\XPSViewer
2014-04-04 15:03 - 2014-04-04 15:03 - 00000000 ____D () C:\Program Files\Reference Assemblies
2014-04-04 15:03 - 2014-04-04 15:03 - 00000000 ____D () C:\Program Files\MSBuild
2014-04-04 15:03 - 2014-04-04 15:03 - 00000000 ____D () C:\Program Files (x86)\Reference Assemblies
2014-04-04 15:03 - 2014-04-04 15:03 - 00000000 ____D () C:\Program Files (x86)\MSBuild
2014-04-04 15:03 - 2013-08-03 01:48 - 01166520 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationNative_v0300.dll
2014-04-04 15:03 - 2013-08-03 01:48 - 00124112 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationCFFRasterizerNative_v0300.dll
2014-04-04 15:03 - 2013-08-03 01:48 - 00035480 _____ (Microsoft Corporation) C:\WINDOWS\system32\TsWpfWrp.exe
2014-04-04 15:03 - 2013-08-03 01:41 - 00778936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationNative_v0300.dll
2014-04-04 15:03 - 2013-08-03 01:41 - 00102608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationCFFRasterizerNative_v0300.dll
2014-04-04 15:03 - 2013-08-03 01:41 - 00035480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TsWpfWrp.exe
2014-04-04 14:36 - 2014-04-04 15:26 - 00006578 _____ () C:\WINDOWS\comsetup.log
2014-04-04 14:20 - 2014-04-04 14:20 - 00371468 _____ () C:\Users\Cassiano\Desktop\boleto.pdf.oxps
2014-04-04 11:07 - 2014-04-04 11:07 - 00000000 ____D () C:\Users\Cassiano\Documents\Modelos Personalizados do Office
2014-04-04 10:20 - 2014-04-04 10:20 - 00000000 __RHD () C:\MSOCache
2014-04-04 10:12 - 2014-04-04 10:12 - 00000000 ____D () C:\Users\Cassiano\AppData\Local\Macromedia
2014-04-04 10:11 - 2014-04-04 15:34 - 00000000 ___RD () C:\Users\Cassiano\SkyDrive.old
2014-04-04 10:11 - 2014-04-04 10:11 - 00000000 ____D () C:\Users\Todos os Usuários\Microsoft SkyDrive
2014-04-04 10:11 - 2014-04-04 10:11 - 00000000 ____D () C:\ProgramData\Microsoft SkyDrive
2014-04-04 10:11 - 2014-04-04 10:11 - 00000000 ____D () C:\Program Files (x86)\Microsoft SkyDrive
2014-04-04 10:04 - 2014-04-04 10:04 - 00868464 _____ () C:\WINDOWS\CalibriLI.tt2
2014-04-04 10:04 - 2014-04-04 10:04 - 00758196 _____ () C:\WINDOWS\CalibriL.tt2
2014-04-04 10:02 - 2014-04-05 15:17 - 00000000 ____D () C:\Program Files\Microsoft Office 15
2014-04-04 10:01 - 2014-04-04 10:01 - 00959704 _____ (Microsoft Corporation) C:\Users\Cassiano\Downloads\Setup.X86.pt-BR_O365HomePremRetail_9d3585d6-7717-4f76-a644-54af6277e3a8_TX_PR_.exe
2014-04-04 09:58 - 2014-04-08 15:07 - 00000902 _____ () C:\WINDOWS\Tasks\Adobe Flash Player Updater.job
2014-04-04 09:58 - 2014-04-04 09:58 - 00003790 _____ () C:\WINDOWS\System32\Tasks\Adobe Flash Player Updater
2014-04-04 09:48 - 2014-04-05 00:59 - 00001076 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk
2014-04-04 09:48 - 2014-04-04 09:48 - 00000000 ____D () C:\Users\Todos os Usuários\Mozilla
2014-04-04 09:48 - 2014-04-04 09:48 - 00000000 ____D () C:\Users\Cassiano\AppData\Roaming\Mozilla
2014-04-04 09:48 - 2014-04-04 09:48 - 00000000 ____D () C:\Users\Cassiano\AppData\Local\Mozilla
2014-04-04 09:48 - 2014-04-04 09:48 - 00000000 ____D () C:\ProgramData\Mozilla
2014-04-04 09:48 - 2014-04-04 09:48 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-04-04 09:47 - 2014-04-04 09:48 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-04-04 00:28 - 2014-04-04 00:29 - 00000000 ____D () C:\WINDOWS\system32\MRT
2014-04-04 00:28 - 2014-03-02 14:05 - 90015360 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2014-04-03 23:57 - 2014-04-08 01:02 - 00000000 ____D () C:\Users\Cassiano\AppData\Local\LSC
2014-04-03 23:40 - 2014-04-03 23:40 - 00000043 _____ () C:\Users\Cassiano\AppData\Roaming\WB.CFG
2014-04-03 22:46 - 2014-04-03 22:46 - 00003544 _____ () C:\WINDOWS\System32\Tasks\060184C3-9766-46a0-B258-F4518A0B2633
2014-04-03 22:46 - 2014-04-03 22:46 - 00000029 _____ () C:\WINDOWS\SysWOW64\config.ini
2014-04-03 22:46 - 2014-01-21 07:01 - 00128992 _____ (Baidu, Inc.) C:\WINDOWS\system32\Drivers\Bprotect.sys
2014-04-03 22:45 - 2014-01-21 11:14 - 00052032 _____ (Baidu, Inc.) C:\WINDOWS\system32\Drivers\Bfilter.sys
2014-04-03 22:45 - 2014-01-21 11:14 - 00034624 _____ (Baidu, Inc.) C:\WINDOWS\system32\Drivers\Bfmon.sys
2014-04-03 22:44 - 2014-04-06 00:22 - 00000000 ____D () C:\Users\Cassiano\AppData\Roaming\Skype
2014-04-03 22:44 - 2014-04-03 22:44 - 00002699 _____ () C:\Users\Public\Desktop\Skype.lnk
2014-04-03 22:44 - 2014-04-03 22:44 - 00000000 ___RD () C:\Program Files (x86)\Skype
2014-04-03 22:44 - 2014-04-03 22:44 - 00000000 ____D () C:\Users\Cassiano\AppData\Local\Skype
2014-04-03 22:43 - 2014-04-03 22:44 - 00000000 ____D () C:\Users\Todos os Usuários\Skype
2014-04-03 22:43 - 2014-04-03 22:44 - 00000000 ____D () C:\ProgramData\Skype
2014-04-03 22:42 - 2014-04-03 22:42 - 00000000 ____D () C:\Users\Cassiano\AppData\Roaming\0D1F2W1G1I1F1T1QyE2W1L1G1Q1F2W1B
2014-04-03 22:38 - 2014-04-03 22:38 - 00000000 ____D () C:\Users\Todos os Usuários\PriceMeterLiveUpdate
2014-04-03 22:38 - 2014-04-03 22:38 - 00000000 ____D () C:\Users\Cassiano\AppData\Local\PriceMeterLiveUpdate

2014-04-03 22:38 - 2014-04-03 22:38 - 00000000 ____D () C:\ProgramData\PriceMeterLiveUpdate
2014-04-03 22:38 - 2014-04-03 22:38 - 00000000 ____D () C:\Program Files (x86)\PriceMeterLiveUpdate
2014-04-03 19:48 - 2014-04-08 15:14 - 00416540 _____ () C:\Users\Public\CAFADEBUG.log
2014-04-03 17:23 - 2014-04-08 09:53 - 00000000 ____D () C:\Program Files\003
2014-04-03 17:22 - 2014-04-03 17:29 - 00001552 _____ () C:\Users\Cassiano\Desktop\Continue Skype.lnk
2014-04-03 17:21 - 2014-04-03 22:42 - 34827424 _____ (Skype Technologies S.A.) C:\Users\Cassiano\Downloads\Skype.exe
2014-04-03 17:19 - 2014-04-03 17:19 - 00000000 ____D () C:\Users\Cassiano\Documents\Avatar
2014-04-03 17:17 - 2014-04-03 17:17 - 00000000 ____D () C:\Users\Cassiano\Documents\Youcam
2014-04-03 17:17 - 2014-04-03 17:17 - 00000000 ____D () C:\Users\Cassiano\AppData\Roaming\CyberLink
2014-04-03 17:17 - 2014-04-03 17:17 - 00000000 ____D () C:\Users\Cassiano\AppData\Local\CyberLink
2014-04-03 17:15 - 2013-09-23 13:49 - 00197704 _____ (McAfee, Inc.) C:\WINDOWS\system32\Drivers\HipShieldK.sys
2014-04-03 14:31 - 2014-04-08 15:21 - 00003598 _____ () C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-4032315922-2193373217-1692392771-1001
2014-04-03 11:59 - 2014-04-03 11:59 - 00000000 ____H () C:\WINDOWS\system32\Drivers\Msft_User_WpdMtpDr_01_11_00.Wdf
2014-04-03 09:32 - 2014-04-03 09:32 - 00000000 ____H () C:\WINDOWS\system32\Drivers\Msft_User_LocationProvider_01_11_00.Wdf
2014-04-03 09:26 - 2014-04-03 09:35 - 00000000 ____D () C:\ldiag
2014-04-03 09:26 - 2014-04-03 09:26 - 00000000 ____D () C:\Users\Cassiano\AppData\Local\Adobe
2014-04-03 09:25 - 2014-04-03 09:25 - 00000000 ____D () C:\Users\Cassiano\AppData\Roaming\LSC
2014-04-03 09:21 - 2014-04-03 09:21 - 00000000 ____D () C:\Users\Cassiano\AppData\Roaming\Intel Corporation
2014-04-03 09:20 - 2014-04-06 18:43 - 00000000 ___RD () C:\Users\Cassiano\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-04-03 09:20 - 2014-04-06 18:43 - 00000000 ___RD () C:\Users\Cassiano\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2014-04-03 09:20 - 2014-04-03 09:25 - 00000000 ____D () C:\Users\Cassiano\AppData\Roaming\Adobe
2014-04-03 09:20 - 2014-04-03 09:20 - 00000000 ____D () C:\WINDOWS\System32\Tasks\WPD
2014-04-03 09:20 - 2014-04-03 09:20 - 00000000 ____D () C:\Users\Cassiano\AppData\Roaming\Lenovo
2014-04-03 09:18 - 2014-04-04 15:44 - 00000000 ____D () C:\Users\Cassiano\AppData\Local\Packages
2014-04-03 09:18 - 2014-04-04 15:12 - 00000000 ____D () C:\Users\Cassiano\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Lenovo
2014-04-03 09:18 - 2014-04-04 10:02 - 00000000 ____D () C:\Users\Cassiano\AppData\Local\VirtualStore
2014-04-03 09:18 - 2014-04-03 09:21 - 00001133 _____ () C:\Users\Cassiano\Desktop\Cyberlink Power2Go.lnk
2014-04-03 09:18 - 2014-04-03 09:18 - 00000000 ____D () C:\Users\Cassiano\AppData\Roaming\Intel
2014-04-03 09:18 - 2013-11-05 10:35 - 00000000 ____D () C:\Users\Cassiano\AppData\Roaming\Macromedia
2014-04-03 09:18 - 2013-02-04 19:18 - 00000189 _____ () C:\Users\Cassiano\Desktop\Lenovo Telephony Start Now.url
2014-04-03 09:15 - 2014-04-03 09:15 - 00000000 _SHDL () C:\Users\Usuário Padrão
2014-04-03 09:15 - 2014-04-03 09:15 - 00000000 _SHDL () C:\Users\Todos os Usuários\Modelos
2014-04-03 09:15 - 2014-04-03 09:15 - 00000000 _SHDL () C:\Users\Todos os Usuários\Menu Iniciar
2014-04-03 09:15 - 2014-04-03 09:15 - 00000000 _SHDL () C:\Users\Todos os Usuários\Documentos
2014-04-03 09:15 - 2014-04-03 09:15 - 00000000 _SHDL () C:\Users\Todos os Usuários\Dados de Aplicativos
2014-04-03 09:15 - 2014-04-03 09:15 - 00000000 _SHDL () C:\Users\Todos os Usuários
2014-04-03 09:15 - 2014-04-03 09:15 - 00000000 _SHDL () C:\Users\Public\Documents\Minhas Músicas
2014-04-03 09:15 - 2014-04-03 09:15 - 00000000 _SHDL () C:\Users\Public\Documents\Minhas Imagens
2014-04-03 09:15 - 2014-04-03 09:15 - 00000000 _SHDL () C:\Users\Public\Documents\Meus Vídeos
2014-04-03 09:15 - 2014-04-03 09:15 - 00000000 _SHDL () C:\Users\Default.migrated\Modelos
2014-04-03 09:15 - 2014-04-03 09:15 - 00000000 _SHDL () C:\Users\Default.migrated\Meus Documentos
2014-04-03 09:15 - 2014-04-03 09:15 - 00000000 _SHDL () C:\Users\Default.migrated\Menu Iniciar
2014-04-03 09:15 - 2014-04-03 09:15 - 00000000 _SHDL () C:\Users\Default.migrated\Documents\Minhas Músicas
2014-04-03 09:15 - 2014-04-03 09:15 - 00000000 _SHDL () C:\Users\Default.migrated\Documents\Minhas Imagens
2014-04-03 09:15 - 2014-04-03 09:15 - 00000000 _SHDL () C:\Users\Default.migrated\Documents\Meus Vídeos
2014-04-03 09:15 - 2014-04-03 09:15 - 00000000 _SHDL () C:\Users\Default.migrated\Dados de Aplicativos
2014-04-03 09:15 - 2014-04-03 09:15 - 00000000 _SHDL () C:\Users\Default.migrated\Configurações Locais
2014-04-03 09:15 - 2014-04-03 09:15 - 00000000 _SHDL () C:\Users\Default.migrated\AppData\Roaming\Microsoft\Windows\Start Menu\Programas
2014-04-03 09:15 - 2014-04-03 09:15 - 00000000 _SHDL () C:\Users\Default.migrated\AppData\Local\Histórico
2014-04-03 09:15 - 2014-04-03 09:15 - 00000000 _SHDL () C:\Users\Default.migrated\AppData\Local\Dados de Aplicativos
2014-04-03 09:15 - 2014-04-03 09:15 - 00000000 _SHDL () C:\Users\Default.migrated\Ambiente de Rede
2014-04-03 09:15 - 2014-04-03 09:15 - 00000000 _SHDL () C:\Users\Default.migrated\Ambiente de Impressão
2014-04-03 09:15 - 2014-04-03 09:15 - 00000000 _SHDL () C:\ProgramData\Modelos
2014-04-03 09:15 - 2014-04-03 09:15 - 00000000 _SHDL () C:\ProgramData\Menu Iniciar
2014-04-03 09:15 - 2014-04-03 09:15 - 00000000 _SHDL () C:\ProgramData\Documentos
2014-04-03 09:15 - 2014-04-03 09:15 - 00000000 _SHDL () C:\ProgramData\Dados de Aplicativos
2014-04-03 09:15 - 2014-04-03 09:15 - 00000000 _SHDL () C:\Program Files\Common Files\Sistema
2014-04-03 09:15 - 2014-04-03 09:15 - 00000000 _SHDL () C:\Program Files\Arquivos Comuns
2014-04-03 09:15 - 2014-04-03 09:15 - 00000000 _SHDL () C:\Arquivos de Programas
2014-03-21 11:46 - 2014-03-21 11:46 - 01081616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mscomctl.ocx
2014-03-21 11:46 - 2014-03-21 11:46 - 00152848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\comdlg32.ocx

==================== One Month Modified Files and Folders =======

2014-04-08 17:15 - 2014-04-08 17:15 - 00016092 _____ () C:\Users\Cassiano\Downloads\FRST.txt
2014-04-08 17:15 - 2014-04-08 17:15 - 00000000 ____D () C:\FRST
2014-04-08 17:14 - 2014-04-08 17:14 - 02157056 _____ (Farbar) C:\Users\Cassiano\Downloads\FRST64.exe
2014-04-08 17:14 - 2014-04-04 22:50 - 00003950 _____ () C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{742F6630-E6FB-4F9B-BF75-3F8AE5886FD4}
2014-04-08 17:11 - 2014-04-04 15:26 - 01558081 _____ () C:\WINDOWS\WindowsUpdate.log
2014-04-08 17:10 - 2013-08-22 12:36 - 00000000 ____D () C:\WINDOWS\system32\sru
2014-04-08 15:21 - 2014-04-03 14:31 - 00003598 _____ () C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-4032315922-2193373217-1692392771-1001
2014-04-08 15:20 - 2013-11-05 10:40 - 00001871 _____ () C:\Users\Public\Desktop\McAfee Internet Security.lnk
2014-04-08 15:15 - 2013-11-13 22:18 - 00011642 _____ () C:\WINDOWS\PFRO.log
2014-04-08 15:15 - 2013-08-22 11:45 - 00000006 ____H () C:\WINDOWS\Tasks\SA.DAT
2014-04-08 15:14 - 2014-04-03 19:48 - 00416540 _____ () C:\Users\Public\CAFADEBUG.log
2014-04-08 15:14 - 2013-08-22 10:25 - 00262144 ___SH () C:\WINDOWS\system32\config\BBI
2014-04-08 15:11 - 2014-04-08 01:04 - 00000000 ____D () C:\Users\Cassiano\AppData\Roaming\ZHP
2014-04-08 15:07 - 2014-04-04 09:58 - 00000902 _____ () C:\WINDOWS\Tasks\Adobe Flash Player Updater.job
2014-04-08 15:01 - 2014-04-08 15:01 - 00411028 ____T () C:\Users\Cassiano\Desktop\Etiqueta correios1.oxps
2014-04-08 15:01 - 2014-04-04 15:34 - 00037376 ___SH () C:\Users\Cassiano\Desktop\Thumbs.db
2014-04-08 15:00 - 2014-04-08 15:00 - 00452226 ____T () C:\Users\Cassiano\Desktop\Etiqueta correios.oxps
2014-04-08 14:50 - 2014-04-08 15:11 - 00001720 _____ () C:\Users\Cassiano\Desktop\ZHPFixReport.txt
2014-04-08 12:48 - 2014-04-08 12:48 - 00028197 _____ () C:\Users\Cassiano\Desktop\ZHPDiag.txt
2014-04-08 12:45 - 2014-04-08 01:04 - 00000000 ____D () C:\Program Files (x86)\ZHPDiag
2014-04-08 09:59 - 2014-04-04 15:34 - 00000000 __RDO () C:\Users\Cassiano\SkyDrive
2014-04-08 09:55 - 2013-08-22 12:36 - 00000000 ____D () C:\WINDOWS\AppReadiness
2014-04-08 09:53 - 2014-04-03 17:23 - 00000000 ____D () C:\Program Files\003
2014-04-08 01:04 - 2014-04-08 01:04 - 00002018 _____ () C:\Users\Cassiano\Desktop\ZHPFix.lnk
2014-04-08 01:04 - 2014-04-08 01:04 - 00001887 _____ () C:\Users\Cassiano\Desktop\ZHPDiag.lnk
2014-04-08 01:04 - 2014-04-08 01:02 - 06857733 _____ (Nicolas Coolman ) C:\Users\Cassiano\Downloads\ZHPDiag2.exe
2014-04-08 01:02 - 2014-04-03 23:57 - 00000000 ____D () C:\Users\Cassiano\AppData\Local\LSC
2014-04-08 00:52 - 2014-04-08 00:52 - 00001248 _____ () C:\Users\Cassiano\Desktop\JRT.txt
2014-04-08 00:45 - 2014-04-08 00:45 - 00000000 ____D () C:\WINDOWS\ERUNT
2014-04-08 00:43 - 2014-04-08 00:43 - 01016261 _____ (Thisisu) C:\Users\Cassiano\Downloads\JRT.exe
2014-04-08 00:21 - 2014-04-07 23:28 - 00000000 ____D () C:\zoek_backup
2014-04-07 23:48 - 2014-04-07 23:48 - 00037746 _____ () C:\Users\Cassiano\Desktop\zoek-results.txt
2014-04-07 23:48 - 2013-11-14 04:26 - 01800588 _____ () C:\WINDOWS\system32\PerfStringBackup.INI
2014-04-07 23:48 - 2013-11-14 04:14 - 00775938 _____ () C:\WINDOWS\system32\prfh0416.dat
2014-04-07 23:48 - 2013-11-14 04:14 - 00159030 _____ () C:\WINDOWS\system32\prfc0416.dat
2014-04-07 23:41 - 2014-04-07 23:32 - 00037746 _____ () C:\zoek-results.log
2014-04-07 23:31 - 2014-04-07 23:39 - 00024064 _____ () C:\WINDOWS\zoek-delete.exe
2014-04-07 11:23 - 2013-08-22 12:36 - 00000000 ____D () C:\WINDOWS\rescache
2014-04-06 18:43 - 2014-04-03 09:20 - 00000000 ___RD () C:\Users\Cassiano\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-04-06 18:43 - 2014-04-03 09:20 - 00000000 ___RD () C:\Users\Cassiano\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2014-04-06 18:12 - 2013-08-22 11:44 - 00482264 _____ () C:\WINDOWS\system32\FNTCACHE.DAT
2014-04-06 00:36 - 2013-08-22 12:36 - 00000000 ___RD () C:\WINDOWS\ToastData
2014-04-06 00:36 - 2013-08-22 12:36 - 00000000 ___RD () C:\Users\Usuário Padrão\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2014-04-06 00:36 - 2013-08-22 12:36 - 00000000 ___RD () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2014-04-06 00:36 - 2013-08-22 12:36 - 00000000 ___RD () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2014-04-06 00:36 - 2013-08-22 12:36 - 00000000 ____D () C:\WINDOWS\WinStore
2014-04-06 00:36 - 2013-08-22 12:36 - 00000000 ____D () C:\WINDOWS\MediaViewer
2014-04-06 00:36 - 2013-08-22 12:36 - 00000000 ____D () C:\WINDOWS\FileManager
2014-04-06 00:36 - 2013-08-22 12:36 - 00000000 ____D () C:\WINDOWS\Camera
2014-04-06 00:36 - 2013-08-22 12:36 - 00000000 ____D () C:\Program Files\Windows Defender
2014-04-06 00:36 - 2013-08-22 12:36 - 00000000 ____D () C:\Program Files (x86)\Windows Defender
2014-04-06 00:36 - 2013-08-22 10:36 - 00000000 ____D () C:\WINDOWS\SysWOW64\Dism
2014-04-06 00:36 - 2013-08-22 10:36 - 00000000 ____D () C:\WINDOWS\system32\Dism
2014-04-06 00:22 - 2014-04-03 22:44 - 00000000 ____D () C:\Users\Cassiano\AppData\Roaming\Skype
2014-04-05 21:40 - 2013-08-22 11:46 - 00287441 _____ () C:\WINDOWS\setupact.log
2014-04-05 19:57 - 2013-08-22 12:36 - 00000000 ____D () C:\WINDOWS\system32\restore
2014-04-05 15:17 - 2014-04-04 10:02 - 00000000 ____D () C:\Program Files\Microsoft Office 15
2014-04-05 14:27 - 2014-04-04 15:06 - 00000000 ___DC () C:\WINDOWS\Panther
2014-04-05 01:30 - 2014-04-05 00:58 - 00000000 ____D () C:\AdwCleaner
2014-04-05 01:29 - 2013-11-05 10:08 - 00000000 ____D () C:\Program Files\Intel
2014-04-05 00:59 - 2014-04-04 15:30 - 00000994 _____ () C:\Users\Cassiano\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-04-05 00:59 - 2014-04-04 09:48 - 00001076 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk
2014-04-05 00:57 - 2014-04-05 00:55 - 01426178 _____ () C:\Users\Cassiano\Downloads\AdwCleaner.exe
2014-04-04 16:09 - 2014-04-04 16:09 - 00000000 ____D () C:\Users\Cassiano\AppData\Local\com
2014-04-04 16:02 - 2014-04-04 16:02 - 00000000 ____D () C:\Program Files (x86)\MediaPlayerplus
2014-04-04 15:44 - 2014-04-03 09:18 - 00000000 ____D () C:\Users\Cassiano\AppData\Local\Packages
2014-04-04 15:34 - 2014-04-04 15:11 - 00000000 ____D () C:\Users\Cassiano
2014-04-04 15:34 - 2014-04-04 10:11 - 00000000 ___RD () C:\Users\Cassiano\SkyDrive.old
2014-04-04 15:29 - 2014-04-04 15:29 - 00000020 ___SH () C:\Users\Cassiano\ntuser.ini
2014-04-04 15:27 - 2014-04-04 15:27 - 00000000 _SHDL () C:\Users\Usuário Padrão\Documents\Minhas Músicas
2014-04-04 15:27 - 2014-04-04 15:27 - 00000000 _SHDL () C:\Users\Usuário Padrão\Documents\Minhas Imagens
2014-04-04 15:27 - 2014-04-04 15:27 - 00000000 _SHDL () C:\Users\Usuário Padrão\Documents\Meus Vídeos
2014-04-04 15:27 - 2014-04-04 15:27 - 00000000 _SHDL () C:\Users\Usuário Padrão\AppData\Roaming\Microsoft\Windows\Start Menu\Programas
2014-04-04 15:27 - 2014-04-04 15:27 - 00000000 _SHDL () C:\Users\Usuário Padrão\AppData\Local\Histórico
2014-04-04 15:27 - 2014-04-04 15:27 - 00000000 _SHDL () C:\Users\Usuário Padrão\AppData\Local\Dados de Aplicativos
2014-04-04 15:27 - 2014-04-04 15:27 - 00000000 _SHDL () C:\Users\Default\Modelos
2014-04-04 15:27 - 2014-04-04 15:27 - 00000000 _SHDL () C:\Users\Default\Meus Documentos
2014-04-04 15:27 - 2014-04-04 15:27 - 00000000 _SHDL () C:\Users\Default\Menu Iniciar
2014-04-04 15:27 - 2014-04-04 15:27 - 00000000 _SHDL () C:\Users\Default\Documents\Minhas Músicas
2014-04-04 15:27 - 2014-04-04 15:27 - 00000000 _SHDL () C:\Users\Default\Documents\Minhas Imagens
2014-04-04 15:27 - 2014-04-04 15:27 - 00000000 _SHDL () C:\Users\Default\Documents\Meus Vídeos
2014-04-04 15:27 - 2014-04-04 15:27 - 00000000 _SHDL () C:\Users\Default\Dados de Aplicativos
2014-04-04 15:27 - 2014-04-04 15:27 - 00000000 _SHDL () C:\Users\Default\Configurações Locais
2014-04-04 15:27 - 2014-04-04 15:27 - 00000000 _SHDL () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programas
2014-04-04 15:27 - 2014-04-04 15:27 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Histórico
2014-04-04 15:27 - 2014-04-04 15:27 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Dados de Aplicativos
2014-04-04 15:27 - 2014-04-04 15:27 - 00000000 _SHDL () C:\Users\Default\Ambiente de Rede
2014-04-04 15:27 - 2014-04-04 15:27 - 00000000 _SHDL () C:\Users\Default\Ambiente de Impressão
2014-04-04 15:27 - 2014-04-04 15:27 - 00000000 _SHDL () C:\Users\Default User\Documents\Minhas Músicas
2014-04-04 15:27 - 2014-04-04 15:27 - 00000000 _SHDL () C:\Users\Default User\Documents\Minhas Imagens
2014-04-04 15:27 - 2014-04-04 15:27 - 00000000 _SHDL () C:\Users\Default User\Documents\Meus Vídeos
2014-04-04 15:27 - 2014-04-04 15:27 - 00000000 _SHDL () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programas
2014-04-04 15:27 - 2014-04-04 15:27 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Histórico
2014-04-04 15:27 - 2014-04-04 15:27 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Dados de Aplicativos
2014-04-04 15:27 - 2013-08-22 12:36 - 00000000 ____D () C:\Program Files\Windows NT
2014-04-04 15:27 - 2013-08-22 10:36 - 00000000 __RHD () C:\Users\Default
2014-04-04 15:26 - 2014-04-04 15:26 - 00022956 _____ () C:\WINDOWS\system32\emptyregdb.dat
2014-04-04 15:26 - 2014-04-04 15:11 - 00020958 _____ () C:\WINDOWS\diagwrn.xml
2014-04-04 15:26 - 2014-04-04 15:11 - 00020958 _____ () C:\WINDOWS\diagerr.xml
2014-04-04 15:26 - 2014-04-04 14:36 - 00006578 _____ () C:\WINDOWS\comsetup.log
2014-04-04 15:26 - 2013-08-22 12:36 - 00000000 ____D () C:\WINDOWS\Registration
2014-04-04 15:21 - 2013-11-05 10:08 - 01813972 _____ () C:\WINDOWS\SysWOW64\PerfStringBackup.INI
2014-04-04 15:20 - 2013-08-22 12:36 - 00000000 __RSD () C:\WINDOWS\Media
2014-04-04 15:20 - 2013-08-22 12:36 - 00000000 __RHD () C:\Users\Public\Libraries
2014-04-04 15:15 - 2014-04-04 15:15 - 00000000 ____D () C:\Users\Usuário Padrão\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Lenovo
2014-04-04 15:15 - 2014-04-04 15:15 - 00000000 ____D () C:\Users\Usuário Padrão\AppData\Roaming\Macromedia
2014-04-04 15:15 - 2014-04-04 15:15 - 00000000 ____D () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Lenovo
2014-04-04 15:15 - 2014-04-04 15:15 - 00000000 ____D () C:\Users\Default\AppData\Roaming\Macromedia
2014-04-04 15:15 - 2014-04-04 15:15 - 00000000 ____D () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Lenovo
2014-04-04 15:15 - 2014-04-04 15:15 - 00000000 ____D () C:\Users\Default User\AppData\Roaming\Macromedia
2014-04-04 15:15 - 2013-11-14 04:13 - 00000000 ____D () C:\WINDOWS\SysWOW64\WCN
2014-04-04 15:15 - 2013-11-14 04:13 - 00000000 ____D () C:\WINDOWS\SysWOW64\sysprep
2014-04-04 15:15 - 2013-11-14 04:13 - 00000000 ____D () C:\WINDOWS\system32\WCN
2014-04-04 15:15 - 2013-11-05 10:07 - 00000000 ____D () C:\WINDOWS\SysWOW64\sda
2014-04-04 15:15 - 2013-11-05 10:07 - 00000000 ____D () C:\WINDOWS\SysWOW64\Atheros_L1e
2014-04-04 15:15 - 2013-08-22 12:37 - 00004893 _____ () C:\WINDOWS\DtcInstall.log
2014-04-04 15:15 - 2013-08-22 12:36 - 00000000 ____D () C:\WINDOWS\SysWOW64\MUI
2014-04-04 15:15 - 2013-08-22 12:36 - 00000000 ____D () C:\WINDOWS\SysWOW64\migwiz
2014-04-04 15:15 - 2013-08-22 12:36 - 00000000 ____D () C:\WINDOWS\SysWOW64\IME
2014-04-04 15:15 - 2013-08-22 12:36 - 00000000 ____D () C:\WINDOWS\system32\spool
2014-04-04 15:15 - 2013-08-22 12:36 - 00000000 ____D () C:\WINDOWS\system32\MUI
2014-04-04 15:15 - 2013-08-22 12:36 - 00000000 ____D () C:\WINDOWS\system32\IME
2014-04-04 15:15 - 2013-08-22 10:36 - 00000000 ____D () C:\WINDOWS\SysWOW64\SMI
2014-04-04 15:15 - 2013-08-22 10:36 - 00000000 ____D () C:\WINDOWS\system32\Sysprep
2014-04-04 15:15 - 2013-08-22 10:36 - 00000000 ____D () C:\WINDOWS\system32\oobe
2014-04-04 15:15 - 2013-08-22 10:25 - 00262144 ___SH () C:\WINDOWS\system32\config\ELAM
2014-04-04 15:15 - 2012-07-26 02:37 - 00000000 ____D () C:\Users\Default.migrated
2014-04-04 15:14 - 2014-04-04 15:07 - 00000000 ____D () C:\Users\Todos os Usuários\Conexant
2014-04-04 15:14 - 2014-04-04 15:07 - 00000000 ____D () C:\ProgramData\Conexant
2014-04-04 15:14 - 2014-04-04 15:07 - 00000000 ____D () C:\Program Files\CONEXANT
2014-04-04 15:14 - 2013-08-22 12:43 - 00000000 ____D () C:\WINDOWS\DigitalLocker
2014-04-04 15:14 - 2013-08-22 12:36 - 00000000 __SHD () C:\Program Files\Windows Sidebar
2014-04-04 15:14 - 2013-08-22 12:36 - 00000000 __SHD () C:\Program Files (x86)\Windows Sidebar
2014-04-04 15:14 - 2013-08-22 12:36 - 00000000 ____D () C:\WINDOWS\IME
2014-04-04 15:14 - 2013-08-22 12:36 - 00000000 ____D () C:\WINDOWS\Help
2014-04-04 15:14 - 2013-08-22 12:36 - 00000000 ____D () C:\Program Files\Common Files\microsoft shared
2014-04-04 15:14 - 2013-03-25 18:03 - 00000000 ____D () C:\Users\Todos os Usuários\PRICache
2014-04-04 15:14 - 2013-03-25 18:03 - 00000000 ____D () C:\ProgramData\PRICache
2014-04-04 15:12 - 2014-04-04 15:12 - 00000000 ____D () C:\WINDOWS\system32\config\bbimigrate
2014-04-04 15:12 - 2014-04-04 15:11 - 00000000 ___RD () C:\Users\Cassiano\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2014-04-04 15:12 - 2014-04-04 15:11 - 00000000 ___RD () C:\Users\Cassiano\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
2014-04-04 15:12 - 2014-04-03 09:18 - 00000000 ____D () C:\Users\Cassiano\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Lenovo
2014-04-04 15:12 - 2013-08-22 12:36 - 00000000 ____D () C:\WINDOWS\system32\Recovery
2014-04-04 15:11 - 2014-04-04 15:11 - 00000000 _SHDL () C:\Users\Cassiano\Modelos
2014-04-04 15:11 - 2014-04-04 15:11 - 00000000 _SHDL () C:\Users\Cassiano\Meus Documentos
2014-04-04 15:11 - 2014-04-04 15:11 - 00000000 _SHDL () C:\Users\Cassiano\Menu Iniciar
2014-04-04 15:11 - 2014-04-04 15:11 - 00000000 _SHDL () C:\Users\Cassiano\Documents\Minhas Músicas
2014-04-04 15:11 - 2014-04-04 15:11 - 00000000 _SHDL () C:\Users\Cassiano\Documents\Minhas Imagens
2014-04-04 15:11 - 2014-04-04 15:11 - 00000000 _SHDL () C:\Users\Cassiano\Documents\Meus Vídeos
2014-04-04 15:11 - 2014-04-04 15:11 - 00000000 _SHDL () C:\Users\Cassiano\Dados de Aplicativos
2014-04-04 15:11 - 2014-04-04 15:11 - 00000000 _SHDL () C:\Users\Cassiano\Configurações Locais
2014-04-04 15:11 - 2014-04-04 15:11 - 00000000 _SHDL () C:\Users\Cassiano\AppData\Roaming\Microsoft\Windows\Start Menu\Programas
2014-04-04 15:11 - 2014-04-04 15:11 - 00000000 _SHDL () C:\Users\Cassiano\AppData\Local\Histórico
2014-04-04 15:11 - 2014-04-04 15:11 - 00000000 _SHDL () C:\Users\Cassiano\AppData\Local\Dados de Aplicativos
2014-04-04 15:11 - 2014-04-04 15:11 - 00000000 _SHDL () C:\Users\Cassiano\Ambiente de Rede
2014-04-04 15:11 - 2014-04-04 15:11 - 00000000 _SHDL () C:\Users\Cassiano\Ambiente de Impressão
2014-04-04 15:08 - 2014-04-04 15:08 - 00000000 ____H () C:\WINDOWS\system32\Drivers\Msft_Kernel_iBtFltCoex_01009.Wdf
2014-04-04 15:08 - 2013-08-22 11:46 - 00000082 _____ () C:\WINDOWS\setuperr.log
2014-04-04 15:07 - 2014-04-04 15:07 - 00000000 ____D () C:\Program Files\Elantech
2014-04-04 15:06 - 2014-04-04 15:06 - 00000000 __SHD () C:\Recovery
2014-04-04 15:05 - 2014-04-04 15:05 - 00262144 _____ () C:\WINDOWS\system32\config\userdiff
2014-04-04 15:05 - 2013-08-22 12:36 - 00262144 _____ () C:\WINDOWS\system32\config\BCD-Template
2014-04-04 15:03 - 2014-04-04 15:03 - 00000000 ____D () C:\WINDOWS\SysWOW64\XPSViewer
2014-04-04 15:03 - 2014-04-04 15:03 - 00000000 ____D () C:\Program Files\Reference Assemblies
2014-04-04 15:03 - 2014-04-04 15:03 - 00000000 ____D () C:\Program Files\MSBuild
2014-04-04 15:03 - 2014-04-04 15:03 - 00000000 ____D () C:\Program Files (x86)\Reference Assemblies
2014-04-04 15:03 - 2014-04-04 15:03 - 00000000 ____D () C:\Program Files (x86)\MSBuild
2014-04-04 14:56 - 2013-11-05 09:52 - 01224194 _____ () C:\WINDOWS\WindowsUpdate (1).log
2014-04-04 14:20 - 2014-04-04 14:20 - 00371468 _____ () C:\Users\Cassiano\Desktop\boleto.pdf.oxps
2014-04-04 13:52 - 2012-07-26 05:12 - 00000000 ____D () C:\WINDOWS\AUInstallAgent
2014-04-04 12:51 - 2013-11-05 10:38 - 00000000 ____D () C:\Users\Todos os Usuários\McAfee
2014-04-04 12:51 - 2013-11-05 10:38 - 00000000 ____D () C:\ProgramData\McAfee
2014-04-04 11:07 - 2014-04-04 11:07 - 00000000 ____D () C:\Users\Cassiano\Documents\Modelos Personalizados do Office
2014-04-04 10:20 - 2014-04-04 10:20 - 00000000 __RHD () C:\MSOCache
2014-04-04 10:12 - 2014-04-04 10:12 - 00000000 ____D () C:\Users\Cassiano\AppData\Local\Macromedia
2014-04-04 10:11 - 2014-04-04 10:11 - 00000000 ____D () C:\Users\Todos os Usuários\Microsoft SkyDrive
2014-04-04 10:11 - 2014-04-04 10:11 - 00000000 ____D () C:\ProgramData\Microsoft SkyDrive
2014-04-04 10:11 - 2014-04-04 10:11 - 00000000 ____D () C:\Program Files (x86)\Microsoft SkyDrive
2014-04-04 10:04 - 2014-04-04 10:04 - 00868464 _____ () C:\WINDOWS\CalibriLI.tt2
2014-04-04 10:04 - 2014-04-04 10:04 - 00758196 _____ () C:\WINDOWS\CalibriL.tt2
2014-04-04 10:02 - 2014-04-03 09:18 - 00000000 ____D () C:\Users\Cassiano\AppData\Local\VirtualStore
2014-04-04 10:01 - 2014-04-04 10:01 - 00959704 _____ (Microsoft Corporation) C:\Users\Cassiano\Downloads\Setup.X86.pt-BR_O365HomePremRetail_9d3585d6-7717-4f76-a644-54af6277e3a8_TX_PR_.exe
2014-04-04 09:58 - 2014-04-04 09:58 - 00003790 _____ () C:\WINDOWS\System32\Tasks\Adobe Flash Player Updater
2014-04-04 09:48 - 2014-04-04 09:48 - 00000000 ____D () C:\Users\Todos os Usuários\Mozilla
2014-04-04 09:48 - 2014-04-04 09:48 - 00000000 ____D () C:\Users\Cassiano\AppData\Roaming\Mozilla
2014-04-04 09:48 - 2014-04-04 09:48 - 00000000 ____D () C:\Users\Cassiano\AppData\Local\Mozilla
2014-04-04 09:48 - 2014-04-04 09:48 - 00000000 ____D () C:\ProgramData\Mozilla
2014-04-04 09:48 - 2014-04-04 09:48 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-04-04 09:48 - 2014-04-04 09:47 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-04-04 00:29 - 2014-04-04 00:28 - 00000000 ____D () C:\WINDOWS\system32\MRT
2014-04-03 23:40 - 2014-04-03 23:40 - 00000043 _____ () C:\Users\Cassiano\AppData\Roaming\WB.CFG
2014-04-03 23:29 - 2013-11-05 10:38 - 00000000 ____D () C:\Program Files (x86)\McAfee
2014-04-03 22:46 - 2014-04-03 22:46 - 00003544 _____ () C:\WINDOWS\System32\Tasks\060184C3-9766-46a0-B258-F4518A0B2633
2014-04-03 22:46 - 2014-04-03 22:46 - 00000029 _____ () C:\WINDOWS\SysWOW64\config.ini
2014-04-03 22:44 - 2014-04-03 22:44 - 00002699 _____ () C:\Users\Public\Desktop\Skype.lnk
2014-04-03 22:44 - 2014-04-03 22:44 - 00000000 ___RD () C:\Program Files (x86)\Skype
2014-04-03 22:44 - 2014-04-03 22:44 - 00000000 ____D () C:\Users\Cassiano\AppData\Local\Skype
2014-04-03 22:44 - 2014-04-03 22:43 - 00000000 ____D () C:\Users\Todos os Usuários\Skype
2014-04-03 22:44 - 2014-04-03 22:43 - 00000000 ____D () C:\ProgramData\Skype
2014-04-03 22:42 - 2014-04-03 22:42 - 00000000 ____D () C:\Users\Cassiano\AppData\Roaming\0D1F2W1G1I1F1T1QyE2W1L1G1Q1F2W1B
2014-04-03 22:42 - 2014-04-03 17:21 - 34827424 _____ (Skype Technologies S.A.) C:\Users\Cassiano\Downloads\Skype.exe
2014-04-03 22:38 - 2014-04-03 22:38 - 00000000 ____D () C:\Users\Todos os Usuários\PriceMeterLiveUpdate
2014-04-03 22:38 - 2014-04-03 22:38 - 00000000 ____D () C:\Users\Cassiano\AppData\Local\PriceMeterLiveUpdate
2014-04-03 22:38 - 2014-04-03 22:38 - 00000000 ____D () C:\ProgramData\PriceMeterLiveUpdate
2014-04-03 22:38 - 2014-04-03 22:38 - 00000000 ____D () C:\Program Files (x86)\PriceMeterLiveUpdate
2014-04-03 18:34 - 2013-11-05 10:38 - 00000000 ____D () C:\Program Files\Common Files\mcafee
2014-04-03 17:29 - 2014-04-03 17:22 - 00001552 _____ () C:\Users\Cassiano\Desktop\Continue Skype.lnk
2014-04-03 17:19 - 2014-04-03 17:19 - 00000000 ____D () C:\Users\Cassiano\Documents\Avatar
2014-04-03 17:18 - 2013-11-05 10:33 - 00000000 ____D () C:\Users\Todos os Usuários\CyberLink
2014-04-03 17:18 - 2013-11-05 10:33 - 00000000 ____D () C:\ProgramData\CyberLink
2014-04-03 17:17 - 2014-04-03 17:17 - 00000000 ____D () C:\Users\Cassiano\Documents\Youcam
2014-04-03 17:17 - 2014-04-03 17:17 - 00000000 ____D () C:\Users\Cassiano\AppData\Roaming\CyberLink
2014-04-03 17:17 - 2014-04-03 17:17 - 00000000 ____D () C:\Users\Cassiano\AppData\Local\CyberLink
2014-04-03 17:13 - 2012-07-26 05:12 - 00000000 ___HD () C:\WINDOWS\ELAMBKUP
2014-04-03 11:59 - 2014-04-03 11:59 - 00000000 ____H () C:\WINDOWS\system32\Drivers\Msft_User_WpdMtpDr_01_11_00.Wdf
2014-04-03 09:35 - 2014-04-03 09:26 - 00000000 ____D () C:\ldiag
2014-04-03 09:32 - 2014-04-03 09:32 - 00000000 ____H () C:\WINDOWS\system32\Drivers\Msft_User_LocationProvider_01_11_00.Wdf
2014-04-03 09:26 - 2014-04-03 09:26 - 00000000 ____D () C:\Users\Cassiano\AppData\Local\Adobe
2014-04-03 09:25 - 2014-04-03 09:25 - 00000000 ____D () C:\Users\Cassiano\AppData\Roaming\LSC
2014-04-03 09:25 - 2014-04-03 09:20 - 00000000 ____D () C:\Users\Cassiano\AppData\Roaming\Adobe
2014-04-03 09:23 - 2013-11-05 10:35 - 00000000 ____D () C:\WINDOWS\System32\Tasks\Lenovo
2014-04-03 09:21 - 2014-04-03 09:21 - 00000000 ____D () C:\Users\Cassiano\AppData\Roaming\Intel Corporation
2014-04-03 09:21 - 2014-04-03 09:18 - 00001133 _____ () C:\Users\Cassiano\Desktop\Cyberlink Power2Go.lnk
2014-04-03 09:20 - 2014-04-03 09:20 - 00000000 ____D () C:\WINDOWS\System32\Tasks\WPD
2014-04-03 09:20 - 2014-04-03 09:20 - 00000000 ____D () C:\Users\Cassiano\AppData\Roaming\Lenovo
2014-04-03 09:20 - 2013-11-05 15:30 - 00112434 ____H () C:\WINDOWS\modules.log
2014-04-03 09:18 - 2014-04-03 09:18 - 00000000 ____D () C:\Users\Cassiano\AppData\Roaming\Intel
2014-04-03 09:15 - 2014-04-03 09:15 - 00000000 _SHDL () C:\Users\Usuário Padrão
2014-04-03 09:15 - 2014-04-03 09:15 - 00000000 _SHDL () C:\Users\Todos os Usuários\Modelos
2014-04-03 09:15 - 2014-04-03 09:15 - 00000000 _SHDL () C:\Users\Todos os Usuários\Menu Iniciar
2014-04-03 09:15 - 2014-04-03 09:15 - 00000000 _SHDL () C:\Users\Todos os Usuários\Documentos
2014-04-03 09:15 - 2014-04-03 09:15 - 00000000 _SHDL () C:\Users\Todos os Usuários\Dados de Aplicativos
2014-04-03 09:15 - 2014-04-03 09:15 - 00000000 _SHDL () C:\Users\Todos os Usuários
2014-04-03 09:15 - 2014-04-03 09:15 - 00000000 _SHDL () C:\Users\Public\Documents\Minhas Músicas
2014-04-03 09:15 - 2014-04-03 09:15 - 00000000 _SHDL () C:\Users\Public\Documents\Minhas Imagens
2014-04-03 09:15 - 2014-04-03 09:15 - 00000000 _SHDL () C:\Users\Public\Documents\Meus Vídeos
2014-04-03 09:15 - 2014-04-03 09:15 - 00000000 _SHDL () C:\Users\Default.migrated\Modelos
2014-04-03 09:15 - 2014-04-03 09:15 - 00000000 _SHDL () C:\Users\Default.migrated\Meus Documentos
2014-04-03 09:15 - 2014-04-03 09:15 - 00000000 _SHDL () C:\Users\Default.migrated\Menu Iniciar
2014-04-03 09:15 - 2014-04-03 09:15 - 00000000 _SHDL () C:\Users\Default.migrated\Documents\Minhas Músicas
2014-04-03 09:15 - 2014-04-03 09:15 - 00000000 _SHDL () C:\Users\Default.migrated\Documents\Minhas Imagens
2014-04-03 09:15 - 2014-04-03 09:15 - 00000000 _SHDL () C:\Users\Default.migrated\Documents\Meus Vídeos
2014-04-03 09:15 - 2014-04-03 09:15 - 00000000 _SHDL () C:\Users\Default.migrated\Dados de Aplicativos
2014-04-03 09:15 - 2014-04-03 09:15 - 00000000 _SHDL () C:\Users\Default.migrated\Configurações Locais
2014-04-03 09:15 - 2014-04-03 09:15 - 00000000 _SHDL () C:\Users\Default.migrated\AppData\Roaming\Microsoft\Windows\Start Menu\Programas
2014-04-03 09:15 - 2014-04-03 09:15 - 00000000 _SHDL () C:\Users\Default.migrated\AppData\Local\Histórico
2014-04-03 09:15 - 2014-04-03 09:15 - 00000000 _SHDL () C:\Users\Default.migrated\AppData\Local\Dados de Aplicativos
2014-04-03 09:15 - 2014-04-03 09:15 - 00000000 _SHDL () C:\Users\Default.migrated\Ambiente de Rede
2014-04-03 09:15 - 2014-04-03 09:15 - 00000000 _SHDL () C:\Users\Default.migrated\Ambiente de Impressão
2014-04-03 09:15 - 2014-04-03 09:15 - 00000000 _SHDL () C:\ProgramData\Modelos
2014-04-03 09:15 - 2014-04-03 09:15 - 00000000 _SHDL () C:\ProgramData\Menu Iniciar
2014-04-03 09:15 - 2014-04-03 09:15 - 00000000 _SHDL () C:\ProgramData\Documentos
2014-04-03 09:15 - 2014-04-03 09:15 - 00000000 _SHDL () C:\ProgramData\Dados de Aplicativos
2014-04-03 09:15 - 2014-04-03 09:15 - 00000000 _SHDL () C:\Program Files\Common Files\Sistema
2014-04-03 09:15 - 2014-04-03 09:15 - 00000000 _SHDL () C:\Program Files\Arquivos Comuns
2014-04-03 09:15 - 2014-04-03 09:15 - 00000000 _SHDL () C:\Arquivos de Programas
2014-03-21 11:46 - 2014-03-21 11:46 - 01081616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mscomctl.ocx
2014-03-21 11:46 - 2014-03-21 11:46 - 00152848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\comdlg32.ocx

==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys
[2014-04-05 19:10] - [2014-01-31 13:15] - 0311640 ____A (Microsoft Corporation) C85C075DE5B6D0FE116043054DE8EE02



LastRegBack: 2014-04-04 15:06

==================== End Of Log ============================

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 13-03-2014
Ran by Cassiano at 2014-04-08 17:16:45
Running from C:\Users\Cassiano\Downloads
Boot Mode: Normal
==========================================================


==================== Security Center ========================

AV: McAfee Anti-Virus and Anti-Spyware (Enabled - Up to date) {ADA629C7-7F48-5689-624A-3B76997E0892}
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: McAfee Anti-Virus and Anti-Spyware (Enabled - Up to date) {16C7C823-5972-5907-58FA-0004E2F9422F}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
FW: McAfee Firewall (Enabled) {959DA8E2-3527-57D1-4915-924367AD4FE9}

==================== Installed Programs ======================

Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 3.4.0.2710 - Adobe Systems Incorporated)
Adobe AIR (x32 Version: 3.4.0.2710 - Adobe Systems Incorporated) Hidden
Adobe Flash Player 12 Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 12.0.0.77 - Adobe Systems Incorporated)
Conexant HD Audio (HKLM\...\CNXT_AUDIO_HDA) (Version: 8.64.52.0 - Conexant)
Dolby Advanced Audio v2 (HKLM-x32\...\{B9E70C7A-9F85-4A39-A4A3-BFA3C3BF7613}) (Version: 7.2.8000.17 - Dolby Laboratories Inc)
Download & Install Packages (HKCU\...\Download & Install Packages) (Version: - ) <==== ATTENTION
Energy Management (HKLM-x32\...\InstallShield_{D0956C11-0F60-43FE-99AD-524E833471BB}) (Version: 8.0.2.11 - Lenovo)
Energy Management (x32 Version: 8.0.2.11 - Lenovo) Hidden
Google Update Helper (x32 Version: 1.3.23.0 - PriceMeter) Hidden
Guia de Usuário (x32 Version: 1.0.0.15 - Lenovo) Hidden
Intel AppUp(SM) center (HKLM-x32\...\Intel AppUp(SM) center 33057) (Version: 3.6.1.33057.10 - Intel)
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 8.1.0.1281 - Intel Corporation)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 10.18.10.3412 - Intel Corporation)
Intel(R) PROSet/Wireless for Bluetooth(R) + High Speed (Version: 15.8.0.0548 - Intel Corporation) Hidden
Intel(R) PROSet/Wireless Software for Bluetooth(R) Technology (HKLM\...\{302600C1-6BDF-4FD1-1305-148929CC1385}) (Version: 3.0.1305.0340 - Intel Corporation)
Intel(R) PROSet/Wireless WiFi Software Driver (Version: 15.08.0000.0249 - Intel Corporation) Hidden
Intel(R) Rapid Storage Technology (HKLM\...\{409CB30E-E457-4008-9B1A-ED1B9EA21140}) (Version: 12.0.0.1083 - Intel Corporation)
Intel(R) Rapid Storage Technology (Version: 12.0.0.1083 - Intel Corporation) Hidden
Intel(R) SDK for OpenCL - CPU Only Runtime Package (HKLM-x32\...\{FCB3772C-B7D0-4933-B1A9-3707EBACC573}) (Version: 2.0.0.37149 - Intel Corporation)
Intel® PROSet/Wireless WiFi Software (Version: 15.08.0000.0172 - Intel Corporation) Hidden
Intel® Trusted Connect Service Client (Version: 1.24.738.1 - Intel Corporation) Hidden
Lenovo EasyCamera (HKLM-x32\...\{E0A7ED39-8CD6-4351-93C3-69CCA00D12B4}) (Version: 6.2.9200.10227 - Realtek Semiconductor Corp.)
Lenovo Experience Improvement (HKLM\...\LenovoExperienceImprovement) (Version: 1.0.4.0 - Lenovo)
Lenovo OneKey Recovery (HKLM-x32\...\InstallShield_{46F4D124-20E5-4D12-BE52-EC177A7A4B42}) (Version: 8.0.0.1219 - CyberLink Corp.)
Lenovo OneKey Recovery (Version: 8.0.0.1219 - CyberLink Corp.) Hidden
Lenovo pointing device (HKLM\...\Elantech) (Version: 11.4.14.1 - ELAN Microelectronic Corp.)
Lenovo PowerDVD10 (HKLM-x32\...\InstallShield_{DEC235ED-58A4-4517-A278-C41E8DAEAB3B}) (Version: 10.0.4331.52 - CyberLink Corp.)
Lenovo PowerDVD10 (x32 Version: 10.0.4331.52 - CyberLink Corp.) Hidden
Lenovo Solution Center (HKLM\...\{F02F4A8B-1A5F-45B8-9B74-AAF21A2B1BCC}) (Version: 2.1.002.00 - Lenovo Group Limited)
Lenovo YouCam (HKLM-x32\...\InstallShield_{01FB4998-33C4-4431-85ED-079E3EEFE75D}) (Version: 4.1.3423 - CyberLink Corp.)
Lenovo YouCam (x32 Version: 4.1.3423 - CyberLink Corp.) Hidden
McAfee Internet Security (HKLM-x32\...\MSC) (Version: 12.8.934 - McAfee, Inc.)
MediaPlayerplus (HKLM-x32\...\MediaPlayerplus) (Version: 1.34.3.28 - Freeven)
Microsoft Office 365 Home Premium - pt-br (HKLM\...\O365HomePremRetail - pt-br) (Version: 15.0.4569.1508 - Microsoft Corporation)
Microsoft SkyDrive (HKCU\...\SkyDriveSetup.exe) (Version: 16.4.6013.0910 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Mozilla Firefox 28.0 (x86 pt-BR) (HKLM-x32\...\Mozilla Firefox 28.0 (x86 pt-BR)) (Version: 28.0 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 28.0 - Mozilla)
Office 15 Click-to-Run Extensibility Component (x32 Version: 15.0.4569.1508 - Microsoft Corporation) Hidden
Office 15 Click-to-Run Licensing Component (Version: 15.0.4569.1508 - Microsoft Corporation) Hidden
Office 15 Click-to-Run Localization Component (x32 Version: 15.0.4569.1508 - Microsoft Corporation) Hidden
Pacote de Driver do Windows - Lenovo (ACPIVPC) System (06/15/2012 8.1.0.1) (HKLM\...\71BC3FD63F450BA0A957AAECBDB4A000C4F2BE42) (Version: 06/15/2012 8.1.0.1 - Lenovo)
Pacote de Driver do Windows - Lenovo (WUDFRd) LenovoVhid (06/19/2012 10.13.29.733) (HKLM\...\8A223E56FB1ED4F697B54E5BF96F1EB63B512684) (Version: 06/19/2012 10.13.29.733 - Lenovo)
Power2Go (HKLM-x32\...\{40BF1E83-20EB-11D8-97C5-0009C5020658}) (Version: 5.6.0.9109 - CyberLink Corp.)
Qualcomm Atheros Communications Inc.(R) AR81Family Gigabit/Fast Ethernet Driver (HKLM-x32\...\{3108C217-BE83-42E4-AE9E-A56A2A92E549}) (Version: 2.1.0.15 - Qualcomm Atheros Communications Inc.)
Realtek USB Card Reader (HKLM-x32\...\{96AE7E41-E34E-47D0-AC07-1091A8127911}) (Version: 6.2.9200.39036 - Realtek Semiconductor Corp.)
Shared C Run-time for x64 (HKLM\...\{EF79C448-6946-4D71-8134-03407888C054}) (Version: 10.0.0 - McAfee)
Skype™ 6.14 (HKLM-x32\...\{7A3C7E05-EE37-47D6-99E1-2EB05A3DA3F7}) (Version: 6.14.104 - Skype Technologies S.A.)
Software Intel® PROSet/Wireless (HKLM-x32\...\{e6d17d96-ddaa-476f-bb07-db601024ffb1}) (Version: 15.8.0 - Intel Corporation)
SugarSync Manager (HKLM-x32\...\SugarSync) (Version: 1.9.61.90905 - SugarSync, Inc.)
UserGuide (HKLM-x32\...\InstallShield_{F07C2CF8-4C53-4EC3-8162-A6221E36EB88}) (Version: 1.0.0.15 - Lenovo)
ZHPDiag 2014 (HKLM-x32\...\ZHPDiag_is1) (Version: 2014 - Nicolas Coolman)

==================== Restore Points =========================

06-04-2014 00:32:40 Instalador de Módulos do Windows
08-04-2014 02:32:20 zoek.exe restore point

==================== Hosts content: ==========================

2013-08-22 10:25 - 2014-04-07 23:32 - 00000753 ____A C:\WINDOWS\system32\Drivers\etc\hosts

127.0.0.1 localhost

==================== Scheduled Tasks (whitelisted) =============

Task: {05293577-D647-4185-B859-C94839A0B2E3} - System32\Tasks\Microsoft\Windows\SettingSync\NetworkStateChangeTask
Task: {0B545118-B563-42FC-8D07-B78F602FCF34} - System32\Tasks\Microsoft\Windows\WS\WSRefreshBannedAppsListTask => Rundll32.exe WSClient.dll,RefreshBannedAppsList
Task: {1EF3CB73-9174-4752-AA17-AB025A01A022} - System32\Tasks\Adobe Flash Player Updater => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-04-04] (Adobe Systems Incorporated)
Task: {2085BF56-520D-4951-B7C0-DF34AF90CC6A} - System32\Tasks\Microsoft\Windows\Sysmain\WsSwapAssessmentTask => Rundll32.exe sysmain.dll,PfSvWsSwapAssessmentTask
Task: {2C9C0C6C-2A74-46F2-858A-4389D253EAD0} - System32\Tasks\Microsoft\Windows\Sysmain\HybridDriveCachePrepopulate
Task: {2FD71261-517D-4970-9F45-82C69DDF4864} - System32\Tasks\Lenovo\Lenovo Customer Feedback Program => C:\Program Files\Lenovo\Customer Feedback Program\Lenovo.TVT.CustomerFeedback.Agent.exe [2013-05-15] (Lenovo)
Task: {352E6CA0-7314-4DF4-89C4-682368D80D57} - System32\Tasks\Microsoft\Windows\Workplace Join\Automatic-Workplace-Join => C:\Windows\System32\AutoWorkplace.exe [2013-08-22] (Microsoft Corporation)
Task: {3B6D8A73-F20B-4C93-B8FB-56A154F172D2} - System32\Tasks\Microsoft\Windows\Time Zone\SynchronizeTimeZone => C:\Windows\system32\tzsync.exe [2013-08-22] (Microsoft Corporation)
Task: {41BFC6E1-6CBA-4914-98AE-5A16CAB9CD3B} - System32\Tasks\060184C3-9766-46a0-B258-F4518A0B2633 => Cscript.exe "C:\ProgramData\Baidu Security\Duplicaterecord.js"
Task: {49754026-21E1-41FC-94FD-727AFE414FE7} - System32\Tasks\Microsoft\Windows\Sysmain\HybridDriveCacheRebalance
Task: {4B695BAF-CFEC-47C3-857B-B03EAA0461F1} - System32\Tasks\Microsoft\Office\Office Subscription Maintenance => C:\Program Files\Microsoft Office 15\root\vfs\ProgramFilesCommonx86\Microsoft Shared\OFFICE15\OLicenseHeartbeat.exe [2014-04-05] (Microsoft Corporation)
Task: {58BBFA55-D66F-4B91-8006-4D6DF58F5AAF} - System32\Tasks\Lenovo\LSC\LSCHardwareScan => C:\Program Files\Lenovo\Lenovo Solution Center\LSC.exe [2013-05-15] ()
Task: {59197F72-41F0-4227-B0A4-6D70A08C6CA9} - System32\Tasks\Lenovo\Lenovo Solution Center Launcher => C:\Program Files\lenovo\lenovo solution center\App\LSCService.exe [2013-05-15] (Lenovo)
Task: {68FB5724-FB94-463A-8F01-12720B4BAF46} - System32\Tasks\Dolby Selector => C:\Program Files (x86)\Dolby Advanced Audio v2\pcee4.exe [2012-08-31] (Dolby Laboratories Inc.)
Task: {6AA91E8C-DDBD-4979-8464-4062F7681A19} - System32\Tasks\Microsoft\Windows\Plug and Play\Plug and Play Cleanup
Task: {6DFCB649-0769-4F83-BB10-F60F235F6D3D} - System32\Tasks\Microsoft\Windows\SkyDrive\Idle Sync Maintenance Task
Task: {73B1B253-CE67-4501-AE1A-377DD1D68B65} - System32\Tasks\Microsoft\Windows\Application Experience\StartupAppTask => Rundll32.exe Startupscan.dll,SusRunTask
Task: {77F1D869-6E65-4079-A2A0-E2023408EF97} - System32\Tasks\Microsoft\Windows\ApplicationData\CleanupTemporaryState => Rundll32.exe Windows.Storage.ApplicationData.dll,CleanupTemporaryState
Task: {872D0E53-FD2E-41E3-B431-698AF82882CE} - System32\Tasks\Microsoft\Windows\SkyDrive\Routine Maintenance Task
Task: {8C6D4B5C-672B-4AE8-AE60-8A87597B7CC0} - \MySearchDial No Task File
Task: {8CC813C9-712A-41EF-9512-B233444FC669} - System32\Tasks\Microsoft\Windows\AppxDeploymentClient\Pre-staged app cleanup => Rundll32.exe %windir%\system32\AppxDeploymentClient.dll,AppxPreStageCleanupRunTask
Task: {9FF4C139-5234-410C-B7FA-23EE2FD2AB53} - System32\Tasks\Microsoft\Windows\Work Folders\Work Folders Maintenance Work
Task: {B4C88CB4-636C-449F-A203-9444B4BEF92B} - System32\Tasks\Lenovo\Experience Improvement => C:\Program Files\Lenovo\ExperienceImprovement\LenovoExperienceImprovement.exe [2013-06-03] (Lenovo)
Task: {C92E12B2-A0CF-4D37-A472-57A5F6B87240} - System32\Tasks\Microsoft\Office\Office Automatic Updates => C:\Program Files\Microsoft Office 15\ClientX64\OfficeC2RClient.exe [2013-12-17] (Microsoft Corporation)
Task: {CFD7C21A-808B-487B-A6EC-8A10E44E8360} - System32\Tasks\Microsoft\Windows\SettingSync\BackupTask
Task: {D88FEC9E-A82A-46F9-87E2-B6B97B301C1A} - System32\Tasks\Microsoft\Windows\WS\License Validation => Rundll32.exe WSClient.dll,WSpTLR licensing
Task: {DA46820F-FF8A-4B5E-A6B2-B12185DCFFFB} - System32\Tasks\Microsoft\Windows\Work Folders\Work Folders Logon Synchronization
Task: {E6D378FA-E068-4BCB-80DE-56D43A249507} - System32\Tasks\Microsoft\Windows\RecoveryEnvironment\VerifyWinRE
Task: C:\WINDOWS\Tasks\Adobe Flash Player Updater.job => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe

==================== Loaded Modules (whitelisted) =============

2014-04-05 14:21 - 2013-10-31 17:13 - 00102568 _____ () C:\Program Files\Microsoft Office 15\ClientX64\ApiClient.dll
2014-04-04 10:02 - 2014-01-02 18:41 - 00621736 _____ () C:\Program Files\Microsoft Office 15\ClientX64\StreamServer.dll
2013-04-01 02:59 - 2013-01-16 01:27 - 00094208 _____ () C:\Windows\System32\IccLibDll_x64.dll
2013-11-05 10:08 - 2012-11-06 02:31 - 01198912 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\ACE.dll
2014-04-04 09:48 - 2014-03-15 05:40 - 03642480 _____ () C:\Program Files (x86)\Mozilla Firefox\mozjs.dll

==================== Alternate Data Streams (whitelisted) =========

AlternateDataStreams: C:\WINDOWS\system32\Drivers\btmhsf.sys:Microsoft_Appcompat_ReinstallUpgrade
AlternateDataStreams: C:\Users\Cassiano\SkyDrive:ms-properties

==================== Safe Mode (whitelisted) ===================

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\mcpltsvc => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\McMPFSvc => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MCODS => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mcpltsvc => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfefire => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfefirek => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfefirek.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfehidk => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfehidk.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfevtp => ""="Driver"

==================== Disabled items from MSCONFIG ==============


==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================
Error: (04/08/2014 01:26:53 AM) (Source: Microsoft-Windows-Immersive-Shell) (User: ISABELA)
Description: Falha na ativação do aplicativo WinStore_cw5n1h2txyewy!Windows.Store com o erro: -2144927151. Veja o log Microsoft-Windows-TWinUI/Operational para obter informações adicionais.

Error: (04/08/2014 01:12:01 AM) (Source: Microsoft-Windows-Immersive-Shell) (User: ISABELA)
Description: Falha na ativação do aplicativo WinStore_cw5n1h2txyewy!Windows.Store com o erro: -2144927151. Veja o log Microsoft-Windows-TWinUI/Operational para obter informações adicionais.

Error: (04/08/2014 00:57:37 AM) (Source: Microsoft-Windows-Immersive-Shell) (User: ISABELA)
Description: Falha na ativação do aplicativo WinStore_cw5n1h2txyewy!Windows.Store com o erro: -2144927151. Veja o log Microsoft-Windows-TWinUI/Operational para obter informações adicionais.

Error: (04/08/2014 00:54:30 AM) (Source: Microsoft-Windows-Immersive-Shell) (User: ISABELA)
Description: Falha na ativação do aplicativo microsoft.windowscommunicationsapps_8wekyb3d8bbwe!Microsoft.WindowsLive.Mail com o erro: -2144927151. Veja o log Microsoft-Windows-TWinUI/Operational para obter informações adicionais.

Error: (04/08/2014 00:54:13 AM) (Source: Microsoft-Windows-Immersive-Shell) (User: ISABELA)
Description: Falha na ativação do aplicativo microsoft.windowscommunicationsapps_8wekyb3d8bbwe!Microsoft.WindowsLive.Mail com o erro: -2144927151. Veja o log Microsoft-Windows-TWinUI/Operational para obter informações adicionais.

Error: (04/08/2014 00:54:02 AM) (Source: Microsoft-Windows-Immersive-Shell) (User: ISABELA)
Description: Falha na ativação do aplicativo microsoft.windowscommunicationsapps_8wekyb3d8bbwe!Microsoft.WindowsLive.Mail com o erro: -2144927151. Veja o log Microsoft-Windows-TWinUI/Operational para obter informações adicionais.

Error: (04/08/2014 00:53:55 AM) (Source: Application Error) (User: )
Description: Nome do aplicativo com falha: wwahost.exe, versão: 6.3.9600.16431, carimbo de data/hora: 0x525e5d4e
Nome do módulo com falha: KERNELBASE.dll, versão: 6.3.9600.16496, carimbo de data/hora: 0x52b3f283
Código de exceção: 0x00000004
Deslocamento da falha: 0x0000000000005a88
ID do processo com falha: 0x1cc
Hora de início do aplicativo com falha: 0xwwahost.exe0
Caminho do aplicativo com falha: wwahost.exe1
Caminho do módulo com falha: wwahost.exe2
ID do Relatório: wwahost.exe3
Nome completo do pacote com falha: wwahost.exe4
ID do aplicativo relativo ao pacote com falha: wwahost.exe5


System errors:
=============
Error: (04/08/2014 03:15:27 PM) (Source: Service Control Manager) (User: )
Description: Não foi possível iniciar o serviço McAfee Inc. mfeapfk devido ao seguinte erro:
%%1243

Error: (04/08/2014 03:15:13 PM) (Source: BTHUSB) (User: )
Description: O adaptador local não dá suporte a um estado importante de controlador de Baixo Consumo. O valor mínimo necessário com suporte para a máscara de estado é 0x1f7fffff. O valor 0x1f3fffff foi obtido. A funcionalidade de Baixo Consumo será desabilitada.

Error: (04/08/2014 02:50:30 PM) (Source: DCOM) (User: ISABELA)
Description: c:\PROGRA~1\mcafee\msc\mcmscsub.dll -Embedding193{9B3BEB4E-1C5E-4A5F-BB36-2F6587DD34E2}

Error: (04/08/2014 09:57:49 AM) (Source: Service Control Manager) (User: )
Description: Não foi possível iniciar o serviço McAfee Inc. mfeapfk devido ao seguinte erro:
%%1243

Error: (04/08/2014 09:57:33 AM) (Source: BTHUSB) (User: )
Description: O adaptador local não dá suporte a um estado importante de controlador de Baixo Consumo. O valor mínimo necessário com suporte para a máscara de estado é 0x1f7fffff. O valor 0x1f3fffff foi obtido. A funcionalidade de Baixo Consumo será desabilitada.

Error: (04/08/2014 09:48:39 AM) (Source: DCOM) (User: ISABELA)
Description: c:\PROGRA~1\mcafee\msc\mcmscsub.dll -Embedding193{9B3BEB4E-1C5E-4A5F-BB36-2F6587DD34E2}


Microsoft Office Sessions:
=========================
Error: (04/08/2014 01:26:53 AM) (Source: Microsoft-Windows-Immersive-Shell)(User: ISABELA)
Description: WinStore_cw5n1h2txyewy!Windows.Store-2144927151

Error: (04/08/2014 01:12:01 AM) (Source: Microsoft-Windows-Immersive-Shell)(User: ISABELA)
Description: WinStore_cw5n1h2txyewy!Windows.Store-2144927151

Error: (04/08/2014 00:57:37 AM) (Source: Microsoft-Windows-Immersive-Shell)(User: ISABELA)
Description: WinStore_cw5n1h2txyewy!Windows.Store-2144927151

Error: (04/08/2014 00:54:30 AM) (Source: Microsoft-Windows-Immersive-Shell)(User: ISABELA)
Description: microsoft.windowscommunicationsapps_8wekyb3d8bbwe!Microsoft.WindowsLive.Mail-2144927151

Error: (04/08/2014 00:54:13 AM) (Source: Microsoft-Windows-Immersive-Shell)(User: ISABELA)
Description: microsoft.windowscommunicationsapps_8wekyb3d8bbwe!Microsoft.WindowsLive.Mail-2144927151

Error: (04/08/2014 00:54:02 AM) (Source: Microsoft-Windows-Immersive-Shell)(User: ISABELA)
Description: microsoft.windowscommunicationsapps_8wekyb3d8bbwe!Microsoft.WindowsLive.Mail-2144927151

Error: (04/08/2014 00:53:55 AM) (Source: Application Error)(User: )
Description: wwahost.exe6.3.9600.16431525e5d4eKERNELBASE.dll6.3.9600.1649652b3f283000000040000000000005a881cc01cf52dc56b32cc4C:\WINDOWS\system32\wwahost.exeC:\WINDOWS\system32\KERNELBASE.dll67c3dca8-bed1-11e3-be81-0cd292939378microsoft.windowscommunicationsapps_17.5.9600.20413_x64__8wekyb3d8bbweMicrosoft.WindowsLive.Mail


==================== Memory info ===========================

Percentage of memory in use: 52%
Total physical RAM: 3993.77 MB
Available physical RAM: 1908.33 MB
Total Pagefile: 5401.77 MB
Available Pagefile: 3154.07 MB
Total Virtual: 131072 MB
Available Virtual: 131071.79 MB

==================== Drives ================================

Drive c: (Windows8_OS) (Fixed) (Total:890.54 GB) (Free:863.91 GB) NTFS ==>[System with boot components (obtained from reading drive)]
Drive d: (LENOVO) (Fixed) (Total:25 GB) (Free:22.48 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (Size: 932 GB) (Disk ID: D14439FF)

Partition: GPT Partition Type.

==================== End Of Log ============================

 Baixe o arquivo fixlist.txt que está anexado nesta postagem e salve-o no mesmo lugar onde você deixou o Farbar (FRST) que é este local abaixo:
C:\Users\Cassiano\Downloads

Execute o FRST. Clique no botão Fix.

Aguarde e ao final, o log Fixlog.txt será salvo.

Selecione, copie e cole o conteúdo deste Fixlog.txt em sua próxima resposta.

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 13-03-2014
Ran by Cassiano at 2014-04-08 19:55:53 Run:1
Running from C:\Users\Cassiano\Downloads
Boot Mode: Normal
==============================================

Content of fixlist:
*****************
start
HKLM\...\Policies\Explorer: [NoControlPanel] 0
SearchScopes: HKLM - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL =
SearchScopes: HKCU - Web URL = [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
BHO: No Name - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - No File
FF Plugin-x32: @tools.updatepm.com/PriceMeterLiveUpdate Update;version=3 - C:\Program Files (x86)\PriceMeterLiveUpdate\Update\1.3.23.0\npGoogleUpdate3.dll (PriceMeter)
FF Plugin-x32: @tools.updatepm.com/PriceMeterLiveUpdate Update;version=9 - C:\Program Files (x86)\PriceMeterLiveUpdate\Update\1.3.23.0\npGoogleUpdate3.dll (PriceMeter)
FF Extension: Freeven Pro 1.4 - C:\Users\Cassiano\AppData\Roaming\Mozilla\Firefox\Profiles\mhzxax0o.default\Extensions\a69a8c34-f103-4384-bb03-61e6f2997d07@5273998b-c268-422e-b0ea-5c8e02755d20.com [2014-04-07]
FF Extension: MediaPlayerplus - C:\Users\Cassiano\AppData\Roaming\Mozilla\Firefox\Profiles\mhzxax0o.default\Extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com [2014-04-08]
S3 BdApiUtil; \??\C:\Program Files (x86)\Baidu Security\Baidu Antivirus\BdApiUtil64.sys [X]
S3 BdCameraProtect; \??\C:\Program Files (x86)\Baidu Security\Baidu Antivirus\BdCameraProtect64.sys [X]
2014-04-04 16:02 - 2014-04-04 16:02 - 00000000 ____D () C:\Program Files (x86)\MediaPlayerplus
2014-04-03 22:46 - 2014-01-21 07:01 - 00128992 _____ (Baidu, Inc.) C:\WINDOWS\system32\Drivers\Bprotect.sys
2014-04-03 22:45 - 2014-01-21 11:14 - 00052032 _____ (Baidu, Inc.) C:\WINDOWS\system32\Drivers\Bfilter.sys
2014-04-03 22:45 - 2014-01-21 11:14 - 00034624 _____ (Baidu, Inc.) C:\WINDOWS\system32\Drivers\Bfmon.sys
2014-04-03 22:38 - 2014-04-03 22:38 - 00000000 ____D () C:\Users\Todos os Usuários\PriceMeterLiveUpdate
2014-04-03 22:38 - 2014-04-03 22:38 - 00000000 ____D () C:\Users\Cassiano\AppData\Local\PriceMeterLiveUpdate
2014-04-03 22:38 - 2014-04-03 22:38 - 00000000 ____D () C:\ProgramData\PriceMeterLiveUpdate
2014-04-03 22:38 - 2014-04-03 22:38 - 00000000 ____D () C:\Program Files (x86)\PriceMeterLiveUpdate
2014-04-03 17:23 - 2014-04-08 09:53 - 00000000 ____D () C:\Program Files\003
2014-04-03 22:38 - 2014-04-03 22:38 - 00000000 ____D () C:\Users\Todos os Usuários\PriceMeterLiveUpdate
2014-04-03 22:38 - 2014-04-03 22:38 - 00000000 ____D () C:\Users\Cassiano\AppData\Local\PriceMeterLiveUpdate
2014-04-03 22:38 - 2014-04-03 22:38 - 00000000 ____D () C:\ProgramData\PriceMeterLiveUpdate
2014-04-03 22:38 - 2014-04-03 22:38 - 00000000 ____D () C:\Program Files (x86)\PriceMeterLiveUpdate
MediaPlayerplus (HKLM-x32\...\MediaPlayerplus) (Version: 1.34.3.28 - Freeven)
Task: {41BFC6E1-6CBA-4914-98AE-5A16CAB9CD3B} - System32\Tasks\060184C3-9766-46a0-B258-F4518A0B2633
Task: {8C6D4B5C-672B-4AE8-AE60-8A87597B7CC0} - \MySearchDial No Task File
end
*****************

HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\\NoControlPanel => Value deleted successfully.
HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => Value was restored successfully.
HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\Web => Key deleted successfully.
HKCR\CLSID\Web => Key not found.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{31D09BA0-12F5-4CCE-BE8A-2923E76605DA} => Key deleted successfully.
HKCR\CLSID\{31D09BA0-12F5-4CCE-BE8A-2923E76605DA} => Key not found.
HKLM\Software\Wow6432Node\MozillaPlugins\@tools.updatepm.com/PriceMeterLiveUpdate Update;version=3 => Key deleted successfully.
C:\Program Files (x86)\PriceMeterLiveUpdate\Update\1.3.23.0\npGoogleUpdate3.dll => Moved successfully.
HKLM\Software\Wow6432Node\MozillaPlugins\@tools.updatepm.com/PriceMeterLiveUpdate Update;version=9 => Key deleted successfully.
C:\Program Files (x86)\PriceMeterLiveUpdate\Update\1.3.23.0\npGoogleUpdate3.dll not found.
C:\Users\Cassiano\AppData\Roaming\Mozilla\Firefox\Profiles\mhzxax0o.default\Extensions\a69a8c34-f103-4384-bb03-61e6f2997d07@5273998b-c268-422e-b0ea-5c8e02755d20.com => Moved successfully.
C:\Users\Cassiano\AppData\Roaming\Mozilla\Firefox\Profiles\mhzxax0o.default\Extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com => Moved successfully.
BdApiUtil => Service deleted successfully.
BdCameraProtect => Service deleted successfully.
C:\Program Files (x86)\MediaPlayerplus => Moved successfully.
C:\WINDOWS\system32\Drivers\Bprotect.sys => Moved successfully.
C:\WINDOWS\system32\Drivers\Bfilter.sys => Moved successfully.
C:\WINDOWS\system32\Drivers\Bfmon.sys => Moved successfully.
C:\Users\Todos os Usuários\PriceMeterLiveUpdate => Moved successfully.
C:\Users\Cassiano\AppData\Local\PriceMeterLiveUpdate => Moved successfully.
"C:\ProgramData\PriceMeterLiveUpdate" => File/Directory not found.
C:\Program Files (x86)\PriceMeterLiveUpdate => Moved successfully.
C:\Program Files\003 => Moved successfully.
"C:\Users\Todos os Usuários\PriceMeterLiveUpdate" => File/Directory not found.
"C:\Users\Cassiano\AppData\Local\PriceMeterLiveUpdate" => File/Directory not found.
"C:\ProgramData\PriceMeterLiveUpdate" => File/Directory not found.
"C:\Program Files (x86)\PriceMeterLiveUpdate" => File/Directory not found.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{41BFC6E1-6CBA-4914-98AE-5A16CAB9CD3B} => Key deleted successfully.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{41BFC6E1-6CBA-4914-98AE-5A16CAB9CD3B} => Key deleted successfully.
C:\Windows\System32\Tasks\060184C3-9766-46a0-B258-F4518A0B2633 => Moved successfully.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\060184C3-9766-46a0-B258-F4518A0B2633 => Key deleted successfully.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{8C6D4B5C-672B-4AE8-AE60-8A87597B7CC0} => Key deleted successfully.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{8C6D4B5C-672B-4AE8-AE60-8A87597B7CC0} => Key deleted successfully.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\MySearchDial => Key deleted successfully.

==== End of Fixlog ====

Como está o PC após estes procedimentos?

Boa Noite Max.

Cara, sumiu todas aquelas propagandas e páginas indesejáveis :rindo_atoa: :rindo_atoa: :rindo_atoa: :rindo_atoa: :rindo_atoa: .

Max, muito obrigado mesmo.

Você é o cara.

  Fico feliz que o problema tenha sido resolvido.

 Só para finalizar siga estes tutoriais abaixo, por gentileza:

[Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
_______________________________________________________________________________________________________________________

 Para remover os programas usados na limpeza deste PC e criar um novo ponto de restauração seguro e sem problemas, utilize o DelFix seguindo as dicas [Tens de ter uma conta e sessão iniciada para poderes visualizar este link].
_______________________________________________________________________________________________________________________

  Foi um prazer ajudar. Conte sempre conosco!

CASO RESOLVIDO

Caso o autor do tópico necessite, o mesmo será reaberto, para isso deverá entrar em contato com um dos membros da [Tens de ter uma conta e sessão iniciada para poderes visualizar este link] solicitando o desbloqueio.