Resultado do exame da Farbar Recovery Scan Tool (FRST) (x64) Versão: 16.05.2018 01
Executado por User (administrador) em SPACEBR (20-05-2018 19:48:14)
Executando a partir de C:\Users\User\Desktop
Perfis Carregados: User (Perfis Disponíveis: User)
Platform: Windows 7 Ultimate Service Pack 1 (X64) Idioma: Português (Brasil)
Internet Explorer Versão 11 (Navegador padrão: Chrome)
Modo da Inicialização: Normal
Tutorial da Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processos (Whitelisted) =================

(Se uma entrada for incluída na fixlist, o processo será fechado. O arquivo não será movido.)

(Microsoft Corporation) C:\Windows\System32\wisptis.exe
(Microsoft Corporation) C:\Windows\System32\wisptis.exe
(AO Kaspersky Lab) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 18.0.0\avp.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(AO Kaspersky Lab) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 18.0.0\avpui.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\ink\InputPersonalization.exe
(Discord Inc.) C:\Users\User\AppData\Local\Discord\app-0.0.301\Discord.exe
(Discord Inc.) C:\Users\User\AppData\Local\Discord\app-0.0.301\Discord.exe
(Discord Inc.) C:\Users\User\AppData\Local\Discord\app-0.0.301\Discord.exe
(Discord Inc.) C:\Users\User\AppData\Local\Discord\app-0.0.301\Discord.exe
() C:\Riot Games\League of Legends\League of Legends\RADS\projects\league_client\releases\0.0.0.144\deploy\LeagueClient.exe
() C:\Riot Games\League of Legends\League of Legends\RADS\projects\league_client\releases\0.0.0.144\deploy\LeagueClientUx.exe
() C:\Riot Games\League of Legends\League of Legends\RADS\projects\league_client\releases\0.0.0.144\deploy\LeagueClientUxRender.exe
() C:\Riot Games\League of Legends\League of Legends\RADS\projects\league_client\releases\0.0.0.144\deploy\LeagueClientUxRender.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Tonec Inc.) C:\Program Files (x86)\Internet Download Manager\IDMan.exe
(Tonec Inc.) C:\Program Files (x86)\Internet Download Manager\IEMonitor.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

==================== Registro (Whitelisted) ===========================

(Se uma entrada for incluída na fixlist, o ítem no Registro será restaurado para o padrão ou removido. O arquivo não será movido.)

HKU\S-1-5-21-976454829-4156036392-909821612-1001\...\Run: [IDMan] => C:\Program Files (x86)\Internet Download Manager\IDMan.exe [4005944 2017-04-07] (Tonec Inc.)
HKU\S-1-5-21-976454829-4156036392-909821612-1001\...\Policies\Explorer: [NolowDiskSpaceChecks] 1
HKU\S-1-5-21-976454829-4156036392-909821612-1001\...\Policies\Explorer: [NoAutoUpdate] 1
GroupPolicy: Restrição - Chrome <==== ATENÇÃO
GroupPolicy\User: Restrição ? <==== ATENÇÃO
CHR HKLM\SOFTWARE\Policies\Google: Restrição <==== ATENÇÃO

==================== Internet (Whitelisted) ====================

(Se um ítem for incluído na fixlist, sendo um ítem do Registro, será removido ou restaurado para o padrão.)

Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{07DBA9AC-54B9-46C4-AF9D-D43E39F7AEEF}: [DhcpNameServer] 8.8.8.8 8.8.4.4
Tcpip\..\Interfaces\{30073867-AB27-4B80-AFEF-66DB5495466F}: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{5C532463-8407-4EF6-A8C2-0D6AB6290B5C}: [DhcpNameServer] 192.168.1.1

Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://go.microsoft.com/fwlink/?LinkID=617911&ResetID=131671585042322511&GUID=FF1C52F0-9577-4BE8-9FC1-BF2CE2CC2D63
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://go.microsoft.com/fwlink/?LinkID=617911&ResetID=131671585042346925&GUID=FF1C52F0-9577-4BE8-9FC1-BF2CE2CC2D63
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=msnhome
HKU\S-1-5-21-976454829-4156036392-909821612-1001\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKU\S-1-5-21-976454829-4156036392-909821612-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.com.br/
SearchScopes: HKLM -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSSE
SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSSE
SearchScopes: HKLM-x32 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSSE
SearchScopes: HKLM-x32 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSSE
BHO: Sem Nome -> {0055C089-8582-441B-A0BF-17B458C2A3A8} -> Nenhum Arquivo
BHO: Kaspersky Protection -> {0E2877D3-2641-4970-B794-A553E295428D} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 18.0.0\x64\IEExt\ie_plugin.dll [2018-05-10] (AO Kaspersky Lab)
BHO: ExplorerWnd Helper -> {10921475-03CE-4E04-90CE-E2E7EF20C814} -> C:\Program Files (x86)\IObit\IObit Uninstaller\UninstallExplorer.dll [2018-01-25] (IObit)
BHO: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX64\Microsoft Office\Office16\OCHelper.dll [2018-05-17] (Microsoft Corporation)
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_171\bin\ssv.dll [2018-04-25] (Oracle Corporation)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX64\Microsoft Office\Office16\URLREDIR.DLL [2018-04-28] (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_171\bin\jp2ssv.dll [2018-04-25] (Oracle Corporation)
BHO-x32: Kaspersky Protection -> {0E2877D3-2641-4970-B794-A553E295428D} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 18.0.0\IEExt\ie_plugin.dll [2018-05-10] (AO Kaspersky Lab)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\root\Office16\URLREDIR.DLL [2018-04-28] (Microsoft Corporation)
BHO-x32: Sem Nome -> {FFCB3198-32F3-4E8B-9539-4324694ED664} -> Nenhum Arquivo
Toolbar: HKLM - Kaspersky Protection Toolbar - {4853DF44-7D6B-48E9-9258-D800EEE54AF6} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 18.0.0\x64\IEExt\ie_plugin.dll [2018-05-10] (AO Kaspersky Lab)
Toolbar: HKLM-x32 - Kaspersky Protection Toolbar - {4853DF44-7D6B-48E9-9258-D800EEE54AF6} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 18.0.0\IEExt\ie_plugin.dll [2018-05-10] (AO Kaspersky Lab)
Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2018-04-28] (Microsoft Corporation)
Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2018-04-28] (Microsoft Corporation)
Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2018-04-28] (Microsoft Corporation)
Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2018-04-28] (Microsoft Corporation)

FireFox:
========
FF DefaultProfile: 9u8z7zib.default
FF ProfilePath: C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\9u8z7zib.default [2018-05-19]
FF user.js: detected! => C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\9u8z7zib.default\user.js [2018-05-12]
FF Homepage: Mozilla\Firefox\Profiles\9u8z7zib.default -> hxxp://www.google.com.br/
FF Extension: (IObit Surfing Protection & Ads Removal) - C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\9u8z7zib.default\Extensions\ascsurfingprotectionnew@iobit.com.xpi [2017-10-18]
FF HKLM\...\Firefox\Extensions: [light_plugin_A07576A3CEBC4A72A8CF2C925907DB05@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 18.0.0\FFExt\light_plugin_firefox\addon.xpi
FF Extension: (Kaspersky Protection) - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 18.0.0\FFExt\light_plugin_firefox\addon.xpi [2018-05-10]
FF HKLM-x32\...\Firefox\Extensions: [light_plugin_A07576A3CEBC4A72A8CF2C925907DB05@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 18.0.0\FFExt\light_plugin_firefox\addon.xpi
FF HKU\S-1-5-21-976454829-4156036392-909821612-1001\...\Firefox\Extensions: [mozilla_cc2@internetdownloadmanager.com] - C:\Program Files (x86)\Internet Download Manager\idmmzcc2.xpi
FF Extension: (IDM integration) - C:\Program Files (x86)\Internet Download Manager\idmmzcc2.xpi [2017-01-26] [Legacy]
FF HKU\S-1-5-21-976454829-4156036392-909821612-1001\...\SeaMonkey\Extensions: [mozilla_cc2@internetdownloadmanager.com] - C:\Program Files (x86)\Internet Download Manager\idmmzcc2.xpi
FF HKU\S-1-5-21-976454829-4156036392-909821612-1001\...\SeaMonkey\Extensions: [mozilla_cc@internetdownloadmanager.com] - C:\Users\User\AppData\Roaming\IDM\idmmzcc5
FF Extension: (IDM CC) - C:\Users\User\AppData\Roaming\IDM\idmmzcc5 [2017-05-08] [Legacy] [não assinado]
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_29_0_0_171.dll [2018-05-08] ()
FF Plugin: @java.com/DTPlugin,version=11.171.2 -> C:\Program Files\Java\jre1.8.0_171\bin\dtplugin\npDeployJava1.dll [2018-04-25] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.171.2 -> C:\Program Files\Java\jre1.8.0_171\bin\plugin2\npjp2.dll [2018-04-25] (Oracle Corporation)
FF Plugin: @microsoft.com/GENUINE -> disabled [Nenhum Arquivo]
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_29_0_0_171.dll [2018-05-08] ()
FF Plugin-x32: @microsoft.com/GENUINE -> disabled [Nenhum Arquivo]
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~2\MICROS~3\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files (x86)\Microsoft Office\root\Office16\NPSPWRAP.DLL [2018-03-03] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2012-03-08] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3555.0308 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2012-03-08] (Microsoft Corporation)
FF Plugin-x32: @nexon.net/NxGame -> C:\ProgramData\NexonUS\NGM\npNxGameUS.dll [2018-03-30] (Nexon)
FF Plugin-x32: @ogplanet.com/npOGPPlugin -> C:\Windows\system32\npOGPPlugin.dll [Nenhum Arquivo]
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.33.7\npGoogleUpdate3.dll [2017-11-15] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.33.7\npGoogleUpdate3.dll [2017-11-15] (Google Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2018-05-10] (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Users\User\AppData\Roaming\mozilla\plugins\npatgpc.dll [2018-05-17] (Cisco WebEx LLC)

Chrome:
=======
CHR HomePage: Default -> hxxps://www.google.com.br/?gfe_rd=cr&ei=Vju2VsGJOaWX8Qfjm56oBA
CHR StartupUrls: Default -> "hxxps://www.google.com/"
CHR Profile: C:\Users\User\AppData\Local\Google\Chrome\User Data\Default [2018-05-20]
CHR Extension: (Documentos) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2018-05-19]
CHR Extension: (Google Drive) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2016-02-06]
CHR Extension: (YouTube) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2016-02-06]
CHR Extension: (Google Search) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2016-02-06]
CHR Extension: (LoL Stream Browser) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\edidfaijmhpefkbnobdcepampbncgejp [2016-06-13]
CHR Extension: (Kaspersky Protection) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\mchjnmdbdlkdbfliogedbnpnanfjnolk [2018-05-10]
CHR Extension: (Mais e-Sports Descontos) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\naipcbenhapgnfignkjddammcklgapfb [2018-05-14]
CHR Extension: (IDM Integration Module) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\ngpampappnmepgilojfohadhhmbhlaek [2018-05-19]
CHR Extension: (Pagamentos da Chrome Web Store) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2018-04-02]
CHR Extension: (Gmail) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-08-02]
CHR Extension: (Chrome Media Router) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2018-04-25]
CHR HKLM\...\Chrome\Extension: [mchjnmdbdlkdbfliogedbnpnanfjnolk] - hxxps://chrome.google.com/webstore/detail/mchjnmdbdlkdbfliogedbnpnanfjnolk
CHR HKLM\...\Chrome\Extension: [ngpampappnmepgilojfohadhhmbhlaek] - C:\Program Files (x86)\Internet Download Manager\IDMGCExt.crx [2017-04-07]
CHR HKLM-x32\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [mchjnmdbdlkdbfliogedbnpnanfjnolk] - hxxps://chrome.google.com/webstore/detail/mchjnmdbdlkdbfliogedbnpnanfjnolk
CHR HKLM-x32\...\Chrome\Extension: [ngpampappnmepgilojfohadhhmbhlaek] - C:\Program Files (x86)\Internet Download Manager\IDMGCExt.crx [2017-04-07]

Opera:
=======
OPR StartupUrls: "hxxp://www.google.com.br/"
OPR Extension: (Adblock Plus) - C:\Users\User\AppData\Roaming\Opera Software\Opera Stable\Extensions\oidhhegpmlfpoeialbgcdocjalghfpkp [2018-05-18]

==================== Serviços (Whitelisted) ====================

(Se uma entrada for incluída na fixlist, será removida do Registro. O arquivo não será movido, a menos que seja colocado separadamente.)

S4 AMD FUEL Service; c:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [344064 2013-11-19] (Advanced Micro Devices, Inc.) [Arquivo não assinado]
R2 AVP18.0.0; C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 18.0.0\avp.exe [354672 2017-01-24] (AO Kaspersky Lab)
S4 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [6971400 2018-02-18] ()
R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [8566448 2018-05-12] (Microsoft Corporation)
S4 IObitUnSvr; C:\Program Files (x86)\IObit\IObit Uninstaller\IUService.exe [206096 2018-01-25] (IObit)
S3 klvssbridge64_18.0.0; C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 18.0.0\x64\vssbridge64.exe [426416 2018-05-10] (AO Kaspersky Lab)
S3 KMService; C:\Windows\SysWOW64\srvany.exe [8192 2016-01-13] () [Arquivo não assinado]
S4 KSDE2.0.0; C:\Program Files (x86)\Kaspersky Lab\Kaspersky Secure Connection 2.0\ksde.exe [354672 2017-01-24] (AO Kaspersky Lab)
S4 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe [6541008 2018-05-09] (Malwarebytes)
S4 NGS; C:\Windows\NGService.exe [2994248 2018-05-13] (NEXON Korea Corporation)
S4 VIAKaraokeService; C:\Windows\system32\viakaraokesrv.exe [27768 2012-10-22] (VIA Technologies, Inc.)
S4 Win I Service; C:\Users\User\AppData\Roaming\sXe Injected\wininjsrv.exe [2065408 2016-12-13] (Developed by Alejandro Cortés) [Arquivo não assinado]
R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)

===================== Drivers (Whitelisted) ======================

(Se uma entrada for incluída na fixlist, será removida do Registro. O arquivo não será movido, a menos que seja colocado separadamente.)

R2 AODDriver4.2.0; c:\Program Files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys [42240 2013-07-31] (Advanced Micro Devices)
R0 cm_km; C:\Windows\System32\DRIVERS\cm_km.sys [247008 2016-12-26] (AO Kaspersky Lab)
R3 HHTHid; C:\Windows\System32\DRIVERS\HHTHid.sys [8192 2015-07-15] (HHT-Tech)
R3 HHTHid_ArtvhMouFiltr; C:\Windows\System32\DRIVERS\HHTHidMouFiltr.sys [7168 2015-07-15] (HHT-Tech)
S3 HpqKbFiltr; C:\Windows\System32\DRIVERS\HpqKbFiltr.sys [18432 2007-06-18] (Hewlett-Packard Development Company, L.P.) [Arquivo não assinado]
R1 HWiNFO32; C:\Windows\SysWOW64\drivers\HWiNFO64A.SYS [27552 2016-02-06] (REALiX(tm))
S3 IUFileFilter; C:\Program Files (x86)\IObit\IObit Uninstaller\drivers\win7_amd64\IUFileFilter.sys [21928 2017-06-06] (IObit.com)
S3 IURegProcessFilter; C:\Program Files (x86)\IObit\IObit Uninstaller\drivers\win7_amd64\IURegProcessFilter.sys [22416 2018-01-11] (IObit.com)
R3 KbCustom_Evision; C:\Windows\System32\DRIVERS\KbCustom.sys [21712 2015-07-15] (0)
R0 kl1; C:\Windows\System32\DRIVERS\kl1.sys [554408 2016-10-01] (AO Kaspersky Lab)
R0 klbackupdisk; C:\Windows\System32\DRIVERS\klbackupdisk.sys [70880 2017-12-24] (AO Kaspersky Lab)
R1 klbackupflt; C:\Windows\System32\DRIVERS\klbackupflt.sys [119496 2018-05-10] (AO Kaspersky Lab)
R2 kldisk; C:\Windows\System32\DRIVERS\kldisk.sys [78216 2016-05-31] (AO Kaspersky Lab)
R3 klflt; C:\Windows\System32\DRIVERS\klflt.sys [206024 2018-05-10] (AO Kaspersky Lab)
R1 KLHK; C:\Windows\System32\DRIVERS\klhk.sys [1192128 2018-05-10] (AO Kaspersky Lab)
R1 KLIF; C:\Windows\System32\DRIVERS\klif.sys [1073344 2018-05-10] (AO Kaspersky Lab)
R1 KLIM6; C:\Windows\System32\DRIVERS\klim6.sys [56520 2018-05-10] (AO Kaspersky Lab)
R3 klkbdflt; C:\Windows\System32\DRIVERS\klkbdflt.sys [57568 2016-12-23] (AO Kaspersky Lab)
R3 klmouflt; C:\Windows\System32\DRIVERS\klmouflt.sys [58592 2016-12-07] (AO Kaspersky Lab)
R1 klpd; C:\Windows\System32\DRIVERS\klpd.sys [50672 2017-12-24] (AO Kaspersky Lab)
R3 kltap; C:\Windows\System32\DRIVERS\kltap.sys [52152 2016-06-07] (The OpenVPN Project)
R1 kltdi; C:\Windows\System32\DRIVERS\kltdi.sys [81904 2017-12-24] (AO Kaspersky Lab)
R1 Klwtp; C:\Windows\System32\DRIVERS\klwtp.sys [142024 2018-05-10] (AO Kaspersky Lab)
R1 kneps; C:\Windows\System32\DRIVERS\kneps.sys [199392 2017-12-24] (AO Kaspersky Lab)
S3 MBAMSwissArmy; C:\Windows\System32\Drivers\mbamswissarmy.sys [253664 2018-05-19] (Malwarebytes)
S3 MTsensor; C:\Windows\System32\DRIVERS\ASACPI.sys [15416 2009-07-16] ()
S3 pcouffin; C:\Windows\System32\Drivers\pcouffin.sys [82816 2013-01-31] (VSO Software) [Arquivo não assinado]
R3 Serenum; C:\Windows\System32\DRIVERS\nuvserenum.sys [23552 2014-01-12] (Windows (R) Win 7 DDK provider)
R3 Serial; C:\Windows\System32\DRIVERS\nuvserial.sys [86016 2014-01-12] (Nuvoton Technology Corp.)
S3 smserial; C:\Windows\System32\DRIVERS\SmSerl64.sys [1227776 2009-06-10] (Motorola Inc.)
R0 sptd; C:\Windows\System32\Drivers\sptd.sys [834544 2013-01-30] ()
S3 taphss6; C:\Windows\System32\DRIVERS\taphss6.sys [42064 2016-04-19] (Anchorfree Inc.)
U3 arkmwdan; C:\Windows\System32\Drivers\arkmwdan.sys [0 ] (Microsoft Corporation) <==== ATENÇÃO (zero byte Arquivo/Pasta)
S3 catchme; \??\C:\ComboFix\catchme.sys [X]
S3 cpuz143; \??\C:\Windows\temp\cpuz143\cpuz143_x64.sys [X]

==================== NetSvcs (Whitelisted) ===================

(Se uma entrada for incluída na fixlist, será removida do Registro. O arquivo não será movido, a menos que seja colocado separadamente.)


==================== Três Meses Criados arquivos e pastas ========

(Se uma entrada for incluída na fixlist, o arquivo/pasta será movido.)

2018-05-20 19:47 - 2018-05-20 19:48 - 000021252 _____ C:\Users\User\Desktop\FRST.txt
2018-05-20 19:46 - 2018-05-20 19:47 - 000000000 ____D C:\FRST
2018-05-20 19:40 - 2018-05-20 19:40 - 002413056 _____ (Farbar) C:\Users\User\Desktop\FRST64.exe
2018-05-19 21:46 - 2018-05-19 21:46 - 000262144 _____ C:\Windows\system32\config\elam
2018-05-19 21:44 - 2018-05-19 21:46 - 000000000 ___SD C:\32788R22FWJFW
2018-05-19 21:30 - 2018-05-19 21:30 - 000003044 _____ C:\Windows\System32\Tasks\Aero
2018-05-19 20:25 - 2018-05-19 20:25 - 000000000 ____D C:\found.000
2018-05-19 19:21 - 2018-05-19 19:21 - 000119888 _____ C:\Users\User\AppData\Local\GDIPFONTCACHEV1.DAT
2018-05-19 15:48 - 2018-05-19 21:13 - 000000000 ____D C:\Users\User\AppData\Local\PrivaZer
2018-05-19 15:20 - 2018-05-19 15:20 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Revo Uninstaller
2018-05-19 15:20 - 2018-05-19 15:20 - 000000000 ____D C:\Program Files\VS Revo Group
2018-05-19 02:25 - 2018-05-19 02:25 - 000035128 _____ C:\ComboFix.txt
2018-05-19 01:14 - 2018-05-19 21:31 - 000253664 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbamswissarmy.sys
2018-05-19 01:14 - 2018-05-19 01:14 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes
2018-05-19 01:14 - 2018-04-26 05:36 - 000152184 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbae64.sys
2018-05-19 01:13 - 2018-05-19 01:13 - 000000000 ____D C:\Users\Todos os Usuários\Malwarebytes
2018-05-19 01:13 - 2018-05-19 01:13 - 000000000 ____D C:\ProgramData\Malwarebytes
2018-05-19 01:13 - 2018-05-19 01:13 - 000000000 ____D C:\Program Files\Malwarebytes
2018-05-18 18:53 - 2018-05-18 18:53 - 000017300 _____ C:\Users\User\Documents\cc_20180518_185325.reg
2018-05-18 12:37 - 2018-05-18 12:40 - 000000000 ____D C:\Users\User\Desktop\Aula 02 - NBIC
2018-05-17 21:36 - 2018-05-20 12:33 - 000000000 ____D C:\Users\User\AppData\LocalLow\uTorrent
2018-05-17 00:29 - 2018-05-17 16:45 - 000000000 __SHD C:\Users\User\Documents\cache
2018-05-17 00:29 - 2018-05-17 00:29 - 000000000 ____D C:\Users\User\AppData\Roaming\webex
2018-05-17 00:28 - 2018-05-17 16:45 - 000000000 ____D C:\Users\User\AppData\LocalLow\WebEx
2018-05-17 00:28 - 2018-05-17 00:28 - 000000000 ____D C:\Users\User\AppData\Local\WebEx
2018-05-17 00:28 - 2018-05-17 00:28 - 000000000 ____D C:\Users\Todos os Usuários\WebEx
2018-05-17 00:28 - 2018-05-17 00:28 - 000000000 ____D C:\ProgramData\WebEx
2018-05-16 20:53 - 2018-05-16 20:53 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\League of Legends
2018-05-16 17:50 - 2018-05-16 18:57 - 000000000 ____D C:\Users\User\Desktop\[OldAge Subs] Gin no Guardian 2nd - 01 [720p][8bits][22EEB936]
2018-05-13 20:58 - 2018-05-13 20:58 - 000000000 ____D C:\Users\User\Documents\maplestory2
2018-05-13 16:04 - 2018-05-13 16:03 - 002994248 _____ (NEXON Korea Corporation) C:\Windows\NGService.exe
2018-05-13 14:17 - 2018-05-14 00:05 - 000000000 ____D C:\Windows\rescache
2018-05-12 17:16 - 2018-05-12 17:16 - 025744896 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2018-05-12 17:16 - 2018-05-12 17:16 - 020286464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2018-05-12 17:16 - 2018-05-12 17:16 - 015283200 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2018-05-12 17:16 - 2018-05-12 17:16 - 013679616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2018-05-12 17:16 - 2018-05-12 17:16 - 005779456 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2018-05-12 17:16 - 2018-05-12 17:16 - 005583552 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2018-05-12 17:16 - 2018-05-12 17:16 - 004496896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2018-05-12 17:16 - 2018-05-12 17:16 - 004047040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2018-05-12 17:16 - 2018-05-12 17:16 - 003958464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2018-05-12 17:16 - 2018-05-12 17:16 - 003241472 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2018-05-12 17:16 - 2018-05-12 17:16 - 003226112 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2018-05-12 17:16 - 2018-05-12 17:16 - 002902016 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2018-05-12 17:16 - 2018-05-12 17:16 - 002767872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2018-05-12 17:16 - 2018-05-12 17:16 - 002724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2018-05-12 17:16 - 2018-05-12 17:16 - 002724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2018-05-12 17:16 - 2018-05-12 17:16 - 002295296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2018-05-12 17:16 - 2018-05-12 17:16 - 002135552 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2018-05-12 17:16 - 2018-05-12 17:16 - 002066432 _____ (Microsoft Corporation) C:\Windows\system32\ole32.dll
2018-05-12 17:16 - 2018-05-12 17:16 - 002059776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2018-05-12 17:16 - 2018-05-12 17:16 - 001735168 _____ (Microsoft Corporation) C:\Windows\system32\comsvcs.dll
2018-05-12 17:16 - 2018-05-12 17:16 - 001665336 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2018-05-12 17:16 - 2018-05-12 17:16 - 001546240 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2018-05-12 17:16 - 2018-05-12 17:16 - 001461248 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2018-05-12 17:16 - 2018-05-12 17:16 - 001417728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ole32.dll
2018-05-12 17:16 - 2018-05-12 17:16 - 001359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2018-05-12 17:16 - 2018-05-12 17:16 - 001314304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2018-05-12 17:16 - 2018-05-12 17:16 - 001314064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2018-05-12 17:16 - 2018-05-12 17:16 - 001241600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\comsvcs.dll
2018-05-12 17:16 - 2018-05-12 17:16 - 001212928 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2018-05-12 17:16 - 2018-05-12 17:16 - 001163264 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
2018-05-12 17:16 - 2018-05-12 17:16 - 001155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2018-05-12 17:16 - 2018-05-12 17:16 - 001114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll
2018-05-12 17:16 - 2018-05-12 17:16 - 000969216 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2018-05-12 17:16 - 2018-05-12 17:16 - 000880640 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll
2018-05-12 17:16 - 2018-05-12 17:16 - 000876032 _____ (Microsoft Corporation) C:\Windows\system32\oleaut32.dll
2018-05-12 17:16 - 2018-05-12 17:16 - 000814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2018-05-12 17:16 - 2018-05-12 17:16 - 000809472 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2018-05-12 17:16 - 2018-05-12 17:16 - 000800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2018-05-12 17:16 - 2018-05-12 17:16 - 000794624 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2018-05-12 17:16 - 2018-05-12 17:16 - 000731648 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2018-05-12 17:16 - 2018-05-12 17:16 - 000728064 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2018-05-12 17:16 - 2018-05-12 17:16 - 000710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2018-05-12 17:16 - 2018-05-12 17:16 - 000708288 _____ (Microsoft Corporation) C:\Windows\system32\winload.efi
2018-05-12 17:16 - 2018-05-12 17:16 - 000701952 _____ (Microsoft Corporation) C:\Windows\system32\hhctrl.ocx
2018-05-12 17:16 - 2018-05-12 17:16 - 000696320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2018-05-12 17:16 - 2018-05-12 17:16 - 000690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll
2018-05-12 17:16 - 2018-05-12 17:16 - 000690688 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2018-05-12 17:16 - 2018-05-12 17:16 - 000666112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll
2018-05-12 17:16 - 2018-05-12 17:16 - 000661504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2018-05-12 17:16 - 2018-05-12 17:16 - 000644096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\advapi32.dll
2018-05-12 17:16 - 2018-05-12 17:16 - 000634272 _____ (Microsoft Corporation) C:\Windows\system32\winload.exe
2018-05-12 17:16 - 2018-05-12 17:16 - 000631640 _____ (Microsoft Corporation) C:\Windows\system32\winresume.efi
2018-05-12 17:16 - 2018-05-12 17:16 - 000620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2018-05-12 17:16 - 2018-05-12 17:16 - 000615936 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2018-05-12 17:16 - 2018-05-12 17:16 - 000582144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleaut32.dll
2018-05-12 17:16 - 2018-05-12 17:16 - 000578048 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2018-05-12 17:16 - 2018-05-12 17:16 - 000554496 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2018-05-12 17:16 - 2018-05-12 17:16 - 000525824 _____ (Microsoft Corporation) C:\Windows\system32\catsrvut.dll
2018-05-12 17:16 - 2018-05-12 17:16 - 000523776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\hhctrl.ocx
2018-05-12 17:16 - 2018-05-12 17:16 - 000512512 _____ (Microsoft Corporation) C:\Windows\system32\rpcss.dll
2018-05-12 17:16 - 2018-05-12 17:16 - 000503808 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll
2018-05-12 17:16 - 2018-05-12 17:16 - 000499712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2018-05-12 17:16 - 2018-05-12 17:16 - 000489984 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2018-05-12 17:16 - 2018-05-12 17:16 - 000487936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\catsrvut.dll
2018-05-12 17:16 - 2018-05-12 17:16 - 000476160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2018-05-12 17:16 - 2018-05-12 17:16 - 000464384 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv.sys
2018-05-12 17:16 - 2018-05-12 17:16 - 000463872 _____ (Microsoft Corporation) C:\Windows\system32\certcli.dll
2018-05-12 17:16 - 2018-05-12 17:16 - 000419840 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2018-05-12 17:16 - 2018-05-12 17:16 - 000417280 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2018-05-12 17:16 - 2018-05-12 17:16 - 000416256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2018-05-12 17:16 - 2018-05-12 17:16 - 000406016 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv2.sys
2018-05-12 17:16 - 2018-05-12 17:16 - 000396960 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2018-05-12 17:16 - 2018-05-12 17:16 - 000371392 _____ (Microsoft Corporation) C:\Windows\system32\clfs.sys
2018-05-12 17:16 - 2018-05-12 17:16 - 000361984 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll
2018-05-12 17:16 - 2018-05-12 17:16 - 000348832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2018-05-12 17:16 - 2018-05-12 17:16 - 000345600 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2018-05-12 17:16 - 2018-05-12 17:16 - 000342528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certcli.dll
2018-05-12 17:16 - 2018-05-12 17:16 - 000341504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2018-05-12 17:16 - 2018-05-12 17:16 - 000338432 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe
2018-05-12 17:16 - 2018-05-12 17:16 - 000316928 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2018-05-12 17:16 - 2018-05-12 17:16 - 000315392 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2018-05-12 17:16 - 2018-05-12 17:16 - 000312320 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2018-05-12 17:16 - 2018-05-12 17:16 - 000296960 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe
2018-05-12 17:16 - 2018-05-12 17:16 - 000291328 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys
2018-05-12 17:16 - 2018-05-12 17:16 - 000279040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2018-05-12 17:16 - 2018-05-12 17:16 - 000275456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2018-05-12 17:16 - 2018-05-12 17:16 - 000262336 _____ (Microsoft Corporation) C:\Windows\system32\hal.dll
2018-05-12 17:16 - 2018-05-12 17:16 - 000262144 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2018-05-12 17:16 - 2018-05-12 17:16 - 000261120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2018-05-12 17:16 - 2018-05-12 17:16 - 000254464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2018-05-12 17:16 - 2018-05-12 17:16 - 000243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
2018-05-12 17:16 - 2018-05-12 17:16 - 000236032 _____ (Microsoft Corporation) C:\Windows\system32\srvsvc.dll
2018-05-12 17:16 - 2018-05-12 17:16 - 000230400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2018-05-12 17:16 - 2018-05-12 17:16 - 000223232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2018-05-12 17:16 - 2018-05-12 17:16 - 000215552 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll
2018-05-12 17:16 - 2018-05-12 17:16 - 000210432 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2018-05-12 17:16 - 2018-05-12 17:16 - 000199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2018-05-12 17:16 - 2018-05-12 17:16 - 000194048 _____ (Microsoft Corporation) C:\Windows\system32\itircl.dll
2018-05-12 17:16 - 2018-05-12 17:16 - 000190464 _____ (Microsoft Corporation) C:\Windows\system32\rpchttp.dll
2018-05-12 17:16 - 2018-05-12 17:16 - 000172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
2018-05-12 17:16 - 2018-05-12 17:16 - 000170496 _____ (Microsoft Corporation) C:\Windows\system32\itss.dll
2018-05-12 17:16 - 2018-05-12 17:16 - 000169984 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srvnet.sys
2018-05-12 17:16 - 2018-05-12 17:16 - 000168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2018-05-12 17:16 - 2018-05-12 17:16 - 000160256 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys
2018-05-12 17:16 - 2018-05-12 17:16 - 000158720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\itircl.dll
2018-05-12 17:16 - 2018-05-12 17:16 - 000154816 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2018-05-12 17:16 - 2018-05-12 17:16 - 000152064 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2018-05-12 17:16 - 2018-05-12 17:16 - 000148480 _____ (Microsoft Corporation) C:\Windows\system32\appidpolicyconverter.exe
2018-05-12 17:16 - 2018-05-12 17:16 - 000146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll
2018-05-12 17:16 - 2018-05-12 17:16 - 000146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2018-05-12 17:16 - 2018-05-12 17:16 - 000144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2018-05-12 17:16 - 2018-05-12 17:16 - 000142848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\itss.dll
2018-05-12 17:16 - 2018-05-12 17:16 - 000141312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpchttp.dll
2018-05-12 17:16 - 2018-05-12 17:16 - 000135680 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2018-05-12 17:16 - 2018-05-12 17:16 - 000130048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2018-05-12 17:16 - 2018-05-12 17:16 - 000129536 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\videoprt.sys
2018-05-12 17:16 - 2018-05-12 17:16 - 000129536 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys
2018-05-12 17:16 - 2018-05-12 17:16 - 000123904 _____ (Microsoft Corporation) C:\Windows\system32\bcrypt.dll
2018-05-12 17:16 - 2018-05-12 17:16 - 000116224 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2018-05-12 17:16 - 2018-05-12 17:16 - 000115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2018-05-12 17:16 - 2018-05-12 17:16 - 000112640 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe
2018-05-12 17:16 - 2018-05-12 17:16 - 000107520 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2018-05-12 17:16 - 2018-05-12 17:16 - 000096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2018-05-12 17:16 - 2018-05-12 17:16 - 000095424 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2018-05-12 17:16 - 2018-05-12 17:16 - 000094208 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2018-05-12 17:16 - 2018-05-12 17:16 - 000092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2018-05-12 17:16 - 2018-05-12 17:16 - 000091136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll
2018-05-12 17:16 - 2018-05-12 17:16 - 000088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2018-05-12 17:16 - 2018-05-12 17:16 - 000087552 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx
2018-05-12 17:16 - 2018-05-12 17:16 - 000082944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\bcrypt.dll
2018-05-12 17:16 - 2018-05-12 17:16 - 000077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2018-05-12 17:16 - 2018-05-12 17:16 - 000076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2018-05-12 17:16 - 2018-05-12 17:16 - 000073216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx
2018-05-12 17:16 - 2018-05-12 17:16 - 000070144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2018-05-12 17:16 - 2018-05-12 17:16 - 000066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2018-05-12 17:16 - 2018-05-12 17:16 - 000064512 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe
2018-05-12 17:16 - 2018-05-12 17:16 - 000064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2018-05-12 17:16 - 2018-05-12 17:16 - 000063488 _____ (Microsoft Corporation) C:\Windows\system32\setbcdlocale.dll
2018-05-12 17:16 - 2018-05-12 17:16 - 000062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2018-05-12 17:16 - 2018-05-12 17:16 - 000062464 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\appid.sys
2018-05-12 17:16 - 2018-05-12 17:16 - 000060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msobjs.dll
2018-05-12 17:16 - 2018-05-12 17:16 - 000060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2018-05-12 17:16 - 2018-05-12 17:16 - 000060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll
2018-05-12 17:16 - 2018-05-12 17:16 - 000059904 _____ (Microsoft Corporation) C:\Windows\system32\appidapi.dll
2018-05-12 17:16 - 2018-05-12 17:16 - 000054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2018-05-12 17:16 - 2018-05-12 17:16 - 000053248 _____ (Microsoft Corporation) C:\Windows\system32\hhsetup.dll
2018-05-12 17:16 - 2018-05-12 17:16 - 000050688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\auditpol.exe
2018-05-12 17:16 - 2018-05-12 17:16 - 000050688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\appidapi.dll
2018-05-12 17:16 - 2018-05-12 17:16 - 000050176 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll
2018-05-12 17:16 - 2018-05-12 17:16 - 000048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2018-05-12 17:16 - 2018-05-12 17:16 - 000047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2018-05-12 17:16 - 2018-05-12 17:16 - 000047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2018-05-12 17:16 - 2018-05-12 17:16 - 000044032 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll
2018-05-12 17:16 - 2018-05-12 17:16 - 000043520 _____ (Microsoft Corporation) C:\Windows\system32\cryptbase.dll
2018-05-12 17:16 - 2018-05-12 17:16 - 000043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll
2018-05-12 17:16 - 2018-05-12 17:16 - 000043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\hhsetup.dll
2018-05-12 17:16 - 2018-05-12 17:16 - 000036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptbase.dll
2018-05-12 17:16 - 2018-05-12 17:16 - 000034816 _____ (Microsoft Corporation) C:\Windows\system32\appidsvc.dll
2018-05-12 17:16 - 2018-05-12 17:16 - 000034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2018-05-12 17:16 - 2018-05-12 17:16 - 000030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2018-05-12 17:16 - 2018-05-12 17:16 - 000030720 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2018-05-12 17:16 - 2018-05-12 17:16 - 000028672 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2018-05-12 17:16 - 2018-05-12 17:16 - 000028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2018-05-12 17:16 - 2018-05-12 17:16 - 000026112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleres.dll
2018-05-12 17:16 - 2018-05-12 17:16 - 000026112 _____ (Microsoft Corporation) C:\Windows\system32\oleres.dll
2018-05-12 17:16 - 2018-05-12 17:16 - 000025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2018-05-12 17:16 - 2018-05-12 17:16 - 000022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2018-05-12 17:16 - 2018-05-12 17:16 - 000022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2018-05-12 17:16 - 2018-05-12 17:16 - 000017920 _____ (Microsoft Corporation) C:\Windows\system32\appidcertstorecheck.exe
2018-05-12 17:16 - 2018-05-12 17:16 - 000017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
2018-05-12 17:16 - 2018-05-12 17:16 - 000016896 _____ (Microsoft Corporation) C:\Windows\hh.exe
2018-05-12 17:16 - 2018-05-12 17:16 - 000016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll
2018-05-12 17:16 - 2018-05-12 17:16 - 000015360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\hh.exe
2018-05-12 17:16 - 2018-05-12 17:16 - 000014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2018-05-12 17:16 - 2018-05-12 17:16 - 000013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll
2018-05-12 17:16 - 2018-05-12 17:16 - 000013312 _____ (Microsoft Corporation) C:\Windows\system32\sscore.dll
2018-05-12 17:16 - 2018-05-12 17:16 - 000009728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sscore.dll
2018-05-12 17:16 - 2018-05-12 17:16 - 000008704 _____ (Microsoft Corporation) C:\Windows\system32\comcat.dll
2018-05-12 17:16 - 2018-05-12 17:16 - 000007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
2018-05-12 17:16 - 2018-05-12 17:16 - 000007168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\comcat.dll
2018-05-12 17:16 - 2018-05-12 17:16 - 000007168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll
2018-05-12 17:16 - 2018-05-12 17:16 - 000007168 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll
2018-05-12 17:16 - 2018-05-12 17:16 - 000006144 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll
2018-05-12 17:16 - 2018-05-12 17:16 - 000006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2018-05-12 17:16 - 2018-05-12 17:16 - 000005120 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll
2018-05-12 17:16 - 2018-05-12 17:16 - 000005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2018-05-12 17:16 - 2018-05-12 17:16 - 000005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2018-05-12 17:16 - 2018-05-12 17:16 - 000004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2018-05-12 17:16 - 2018-05-12 17:16 - 000004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2018-05-12 17:16 - 2018-05-12 17:16 - 000004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2018-05-12 17:16 - 2018-05-12 17:16 - 000004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2018-05-12 17:16 - 2018-05-12 17:16 - 000004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2018-05-12 17:16 - 2018-05-12 17:16 - 000004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll
2018-05-12 17:16 - 2018-05-12 17:16 - 000004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll
2018-05-12 17:16 - 2018-05-12 17:16 - 000004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2018-05-12 17:16 - 2018-05-12 17:16 - 000004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll
2018-05-12 17:16 - 2018-05-12 17:16 - 000004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2018-05-12 17:16 - 2018-05-12 17:16 - 000004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2018-05-12 17:16 - 2018-05-12 17:16 - 000004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2018-05-12 17:16 - 2018-05-12 17:16 - 000004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2018-05-12 17:16 - 2018-05-12 17:16 - 000004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2018-05-12 17:16 - 2018-05-12 17:16 - 000003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll
2018-05-12 17:16 - 2018-05-12 17:16 - 000003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2018-05-12 17:16 - 2018-05-12 17:16 - 000003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2018-05-12 17:16 - 2018-05-12 17:16 - 000003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll
2018-05-12 17:16 - 2018-05-12 17:16 - 000003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2018-05-12 17:16 - 2018-05-12 17:16 - 000003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2018-05-12 17:16 - 2018-05-12 17:16 - 000003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll
2018-05-12 17:16 - 2018-05-12 17:16 - 000003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2018-05-12 17:16 - 2018-05-12 17:16 - 000003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2018-05-12 17:16 - 2018-05-12 17:16 - 000003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2018-05-12 17:16 - 2018-05-12 17:16 - 000003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2018-05-12 17:16 - 2018-05-12 17:16 - 000003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2018-05-12 17:16 - 2018-05-12 17:16 - 000003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2018-05-12 17:16 - 2018-05-12 17:16 - 000003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2018-05-12 17:16 - 2018-05-12 17:16 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll
2018-05-12 17:16 - 2018-05-12 17:16 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll
2018-05-12 17:16 - 2018-05-12 17:16 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2018-05-12 17:16 - 2018-05-12 17:16 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll
2018-05-12 17:16 - 2018-05-12 17:16 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll
2018-05-12 17:16 - 2018-05-12 17:16 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll
2018-05-12 17:16 - 2018-05-12 17:16 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll
2018-05-12 17:16 - 2018-05-12 17:16 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2018-05-12 17:16 - 2018-05-12 17:16 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll
2018-05-12 17:16 - 2018-05-12 17:16 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll
2018-05-12 17:16 - 2018-05-12 17:16 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll
2018-05-12 17:16 - 2018-05-12 17:16 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll
2018-05-12 17:16 - 2018-05-12 17:16 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2018-05-12 17:16 - 2018-05-12 17:16 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2018-05-12 17:16 - 2018-05-12 17:16 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2018-05-12 17:16 - 2018-05-12 17:16 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2018-05-12 17:16 - 2018-05-12 17:16 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2018-05-12 17:16 - 2018-05-12 17:16 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2018-05-12 17:16 - 2018-05-12 17:16 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2018-05-12 17:16 - 2018-05-12 17:16 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2018-05-12 17:16 - 2018-05-12 17:16 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2018-05-12 17:16 - 2018-05-12 17:16 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2018-05-12 17:16 - 2018-05-12 17:16 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2018-05-12 17:16 - 2018-05-12 17:16 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2018-05-12 17:16 - 2018-05-12 17:16 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2018-05-12 17:16 - 2018-05-12 17:16 - 000002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
2018-05-12 16:34 - 2018-05-12 16:34 - 000000000 ____D C:\Users\User\AppData\Roaming\Python
2018-05-12 16:32 - 2018-05-14 16:11 - 000000000 ____D C:\Users\User\AppData\Roaming\NexonLauncher
2018-05-12 16:32 - 2018-05-12 16:32 - 000000000 ____D C:\Program Files (x86)\Nexon
2018-05-10 22:06 - 2018-05-10 22:06 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Kaspersky Secure Connection
2018-05-10 22:05 - 2018-05-10 22:05 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Kaspersky Anti-Virus
2018-05-10 22:04 - 2013-05-06 08:13 - 000110176 _____ (Kaspersky Lab ZAO) C:\Windows\system32\klfphc.dll
2018-05-10 22:03 - 2018-05-10 22:14 - 001073344 _____ (AO Kaspersky Lab) C:\Windows\system32\Drivers\klif.sys
2018-05-10 22:03 - 2018-05-10 22:10 - 000206024 _____ (AO Kaspersky Lab) C:\Windows\system32\Drivers\klflt.sys
2018-05-10 22:03 - 2018-05-10 22:10 - 000152360 _____ (AO Kaspersky Lab) C:\Windows\system32\klhkum.dll
2018-05-10 22:03 - 2018-05-10 22:05 - 000000000 ____D C:\Program Files (x86)\Kaspersky Lab
2018-05-05 12:49 - 2018-05-05 12:49 - 000001401 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\IObit Uninstaller.lnk
2018-05-05 12:49 - 2018-05-05 12:49 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\IObit Uninstaller
2018-04-28 22:12 - 2018-04-28 22:12 - 000000000 ____D C:\Users\User\AppData\Roaming\Google
2018-04-25 15:32 - 2018-04-25 15:32 - 000000000 ____D C:\Users\User\AppData\Roaming\Sun
2018-04-25 15:31 - 2018-04-25 15:31 - 000111048 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge-64.dll
2018-04-25 15:31 - 2018-04-25 15:31 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2018-04-25 15:30 - 2018-04-25 15:30 - 000000000 ____D C:\Program Files\Java
2018-04-20 19:21 - 2018-04-20 19:21 - 003165184 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2018-04-20 19:21 - 2018-04-20 19:21 - 002651648 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2018-04-20 19:21 - 2018-04-20 19:21 - 000709120 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2018-04-20 19:21 - 2018-04-20 19:21 - 000573440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll
2018-04-20 19:21 - 2018-04-20 19:21 - 000192512 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
2018-04-20 19:21 - 2018-04-20 19:21 - 000174080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll
2018-04-20 19:21 - 2018-04-20 19:21 - 000140288 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2018-04-20 19:21 - 2018-04-20 19:21 - 000098816 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
2018-04-20 19:21 - 2018-04-20 19:21 - 000093696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll
2018-04-20 19:21 - 2018-04-20 19:21 - 000091136 _____ (Microsoft Corporation) C:\Windows\system32\WinSetupUI.dll
2018-04-20 19:21 - 2018-04-20 19:21 - 000037888 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
2018-04-20 19:21 - 2018-04-20 19:21 - 000037888 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
2018-04-20 19:21 - 2018-04-20 19:21 - 000036864 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
2018-04-20 19:21 - 2018-04-20 19:21 - 000035328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe
2018-04-20 19:21 - 2018-04-20 19:21 - 000030208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wups.dll
2018-04-20 19:21 - 2018-04-20 19:21 - 000012288 _____ (Microsoft Corporation) C:\Windows\system32\wu.upgrade.ps.dll
2018-04-20 19:21 - 2018-04-20 19:21 - 000002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll
2018-04-20 19:21 - 2018-04-20 19:21 - 000002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2018-04-12 23:24 - 2018-04-12 23:24 - 000000956 _____ C:\Users\User\Documents\cc_20180412_232404.reg
2018-04-10 14:52 - 2018-03-10 14:11 - 000340480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msexcl40.dll
2018-04-10 14:52 - 2018-03-09 15:18 - 000309440 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll
2018-04-10 14:52 - 2018-03-09 15:12 - 000383680 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll
2018-04-10 14:52 - 2018-03-09 15:12 - 000111616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\t2embed.dll
2018-04-10 14:52 - 2018-03-09 15:12 - 000071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fontsub.dll
2018-04-10 14:52 - 2018-03-09 15:12 - 000025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\lpk.dll
2018-04-10 14:52 - 2018-03-09 15:11 - 000010240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dciman32.dll
2018-04-10 14:52 - 2018-03-09 15:07 - 000152064 _____ (Microsoft Corporation) C:\Windows\system32\t2embed.dll
2018-04-10 14:52 - 2018-03-09 15:07 - 000100864 _____ (Microsoft Corporation) C:\Windows\system32\fontsub.dll
2018-04-10 14:52 - 2018-03-09 15:07 - 000041472 _____ (Microsoft Corporation) C:\Windows\system32\lpk.dll
2018-04-10 14:52 - 2018-03-09 15:06 - 000014336 _____ (Microsoft Corporation) C:\Windows\system32\dciman32.dll
2018-04-10 14:52 - 2018-03-06 15:13 - 000148160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\basecsp.dll
2018-04-10 14:52 - 2018-03-06 15:11 - 000184320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\scksp.dll
2018-04-10 14:52 - 2018-03-06 15:11 - 000052224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wsnmp32.dll
2018-04-10 14:52 - 2018-03-06 15:10 - 000170176 _____ (Microsoft Corporation) C:\Windows\system32\basecsp.dll
2018-04-10 14:52 - 2018-03-06 15:07 - 000229376 _____ (Microsoft Corporation) C:\Windows\system32\scksp.dll
2018-04-10 14:52 - 2018-03-06 15:07 - 000067072 _____ (Microsoft Corporation) C:\Windows\system32\wsnmp32.dll
2018-04-10 14:51 - 2018-03-09 15:06 - 000046080 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll
2018-04-10 14:51 - 2018-03-09 14:31 - 000034304 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll
2018-04-10 14:46 - 2018-03-14 14:14 - 000135360 _____ (Microsoft Corporation) C:\Windows\system32\CompatTelRunner.exe
2018-04-10 14:46 - 2018-03-14 14:09 - 000656384 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2018-04-10 14:46 - 2018-03-14 10:05 - 001993728 _____ (Microsoft Corporation) C:\Windows\system32\aitstatic.exe
2018-04-10 14:46 - 2018-03-14 10:05 - 001559552 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll
2018-04-10 14:46 - 2018-03-14 10:05 - 000739840 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
2018-04-10 14:46 - 2018-03-14 10:05 - 000599552 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll
2018-04-10 14:46 - 2018-03-14 10:05 - 000450048 _____ (Microsoft Corporation) C:\Windows\system32\centel.dll
2018-04-10 14:46 - 2018-03-14 10:05 - 000414720 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll
2018-04-10 14:46 - 2018-03-14 10:05 - 000291840 _____ (Microsoft Corporation) C:\Windows\system32\acmigration.dll
2018-04-10 14:46 - 2018-03-14 10:05 - 000237056 _____ (Microsoft Corporation) C:\Windows\system32\aepic.dll
2018-04-06 01:47 - 2018-05-05 12:49 - 000000000 ____D C:\Users\User\AppData\LocalLow\IObit
2018-04-06 00:26 - 2018-04-06 00:26 - 000000000 ____D C:\Users\User\AppData\Local\{E7E02414-5EE7-4F0A-AE97-DC4A34980EEC}
2018-04-04 17:37 - 2018-04-04 17:37 - 000051958 _____ C:\Users\User\Documents\cc_20180404_173734.reg
2018-04-04 17:32 - 2018-05-19 21:30 - 000004128 _____ C:\Windows\System32\Tasks\CCleaner Update
2018-04-04 17:32 - 2018-04-04 17:32 - 000002786 _____ C:\Windows\System32\Tasks\CCleanerSkipUAC
2018-04-04 17:32 - 2018-04-04 17:32 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
2018-04-04 17:32 - 2018-04-04 17:32 - 000000000 ____D C:\Program Files\CCleaner
2018-04-04 12:58 - 2018-04-04 12:58 - 000723097 _____ C:\Users\User\Documents\favoritos_04_04_2018.html
2018-04-04 12:57 - 2018-04-04 12:57 - 000723097 _____ C:\Users\User\Desktop\favoritos_04_04_2018.html
2018-04-04 11:17 - 2018-05-20 19:17 - 000000000 ____D C:\Users\Todos os Usuários\Kaspersky Lab
2018-04-04 11:17 - 2018-05-20 19:17 - 000000000 ____D C:\ProgramData\Kaspersky Lab
2018-04-04 11:17 - 2018-04-04 11:17 - 000149304 _____ (AO Kaspersky Lab) C:\Windows\system32\SET2D3F.tmp
2018-04-04 10:46 - 2018-05-10 21:25 - 000000000 ____D C:\Users\Todos os Usuários\Kaspersky Lab Setup Files
2018-04-04 10:46 - 2018-05-10 21:25 - 000000000 ____D C:\ProgramData\Kaspersky Lab Setup Files
2018-04-03 22:26 - 2011-06-26 03:45 - 000256000 _____ C:\Windows\PEV.exe
2018-04-03 22:26 - 2010-11-07 14:20 - 000208896 _____ C:\Windows\MBR.exe
2018-04-03 22:26 - 2009-04-20 01:56 - 000060416 _____ (NirSoft) C:\Windows\NIRCMD.exe
2018-04-03 22:26 - 2000-08-30 21:00 - 000518144 _____ (SteelWerX) C:\Windows\SWREG.exe
2018-04-03 22:26 - 2000-08-30 21:00 - 000406528 _____ (SteelWerX) C:\Windows\SWSC.exe
2018-04-03 22:26 - 2000-08-30 21:00 - 000098816 _____ C:\Windows\sed.exe
2018-04-03 22:26 - 2000-08-30 21:00 - 000080412 _____ C:\Windows\grep.exe
2018-04-03 22:26 - 2000-08-30 21:00 - 000068096 _____ C:\Windows\zip.exe
2018-04-03 01:45 - 2018-04-03 22:04 - 000000000 ____D C:\Users\Todos os Usuários\Spybot - Search & Destroy
2018-04-03 01:45 - 2018-04-03 22:04 - 000000000 ____D C:\ProgramData\Spybot - Search & Destroy
2018-04-03 01:45 - 2018-04-03 22:04 - 000000000 ____D C:\Program Files (x86)\Spybot - Search & Destroy 2
2018-04-03 01:45 - 2018-04-03 01:45 - 000000000 ____D C:\Windows\System32\Tasks\Safer-Networking
2018-04-03 01:16 - 2018-04-03 01:16 - 000000000 ____D C:\SUPERDelete
2018-04-03 00:00 - 2018-04-03 00:04 - 000000000 ____D C:\AdwCleaner
2018-04-02 22:56 - 2018-05-19 21:46 - 000000000 ____D C:\Qoobox
2018-04-02 20:09 - 2018-05-19 01:46 - 000000000 ____D C:\Windows\erdnt
2018-04-02 16:10 - 2018-04-02 19:23 - 000000000 ____D C:\uD9Oolvx3ooiQRUt
2018-04-02 12:59 - 2018-04-02 13:00 - 000000000 ____D C:\Users\User\AppData\Roaming\1337
2018-04-02 12:59 - 2018-04-02 12:59 - 000000003 _____ C:\Users\User\AppData\Local\wbem.ini
2018-04-02 12:58 - 2018-04-02 12:58 - 000007863 _____ C:\Users\Todos os Usuários\check.txt
2018-04-02 12:58 - 2018-04-02 12:58 - 000007863 _____ C:\ProgramData\check.txt
2018-04-02 12:37 - 2018-04-02 12:43 - 000000000 ____D C:\Users\User\AppData\Local\BY8801
2018-04-02 12:37 - 2018-04-02 12:37 - 001185303 _____ C:\Windows\unins000.exe
2018-04-02 12:37 - 2018-04-02 12:37 - 000020659 _____ C:\Windows\unins000.dat
2018-04-02 12:37 - 2018-04-02 12:37 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GERBERUS
2018-04-02 12:37 - 2018-04-02 12:37 - 000000000 ____D C:\Program Files (x86)\GERBERUS
2018-04-01 14:06 - 2018-04-01 14:06 - 000037101 _____ C:\Windows\uninstaller.dat
2018-03-30 22:09 - 2018-03-31 18:28 - 000000000 ____D C:\Users\User\Desktop\Arw S03-Bluray [SériesinTorrent]
2018-03-30 20:28 - 2018-03-30 20:28 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Nexon
2018-03-30 20:26 - 2018-03-30 20:26 - 000000000 ____D C:\Users\Todos os Usuários\NexonUS
2018-03-30 20:26 - 2018-03-30 20:26 - 000000000 ____D C:\ProgramData\NexonUS
2018-03-29 22:05 - 2018-04-17 23:49 - 000000000 ____D C:\Users\User\Desktop\Notes
2018-03-29 19:45 - 2018-03-29 19:45 - 000995272 _____ (Microsoft Corporation) C:\Windows\system32\ucrtbase.dll
2018-03-29 19:45 - 2018-03-29 19:45 - 000922944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ucrtbase.dll
2018-03-29 19:45 - 2018-03-29 19:45 - 000066392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-private-l1-1-0.dll
2018-03-29 19:45 - 2018-03-29 19:45 - 000063832 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-private-l1-1-0.dll
2018-03-29 19:45 - 2018-03-29 19:45 - 000022360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-math-l1-1-0.dll
2018-03-29 19:45 - 2018-03-29 19:45 - 000020824 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-math-l1-1-0.dll
2018-03-29 19:45 - 2018-03-29 19:45 - 000019800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-multibyte-l1-1-0.dll
2018-03-29 19:45 - 2018-03-29 19:45 - 000019800 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-multibyte-l1-1-0.dll
2018-03-29 19:45 - 2018-03-29 19:45 - 000017752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-string-l1-1-0.dll
2018-03-29 19:45 - 2018-03-29 19:45 - 000017752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-stdio-l1-1-0.dll
2018-03-29 19:45 - 2018-03-29 19:45 - 000017752 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-string-l1-1-0.dll
2018-03-29 19:45 - 2018-03-29 19:45 - 000017752 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-stdio-l1-1-0.dll
2018-03-29 19:45 - 2018-03-29 19:45 - 000016216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-runtime-l1-1-0.dll
2018-03-29 19:45 - 2018-03-29 19:45 - 000016216 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-runtime-l1-1-0.dll
2018-03-29 19:45 - 2018-03-29 19:45 - 000015704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-convert-l1-1-0.dll
2018-03-29 19:45 - 2018-03-29 19:45 - 000015704 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-convert-l1-1-0.dll
2018-03-29 19:45 - 2018-03-29 19:45 - 000014168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-time-l1-1-0.dll
2018-03-29 19:45 - 2018-03-29 19:45 - 000014168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-2-0.dll
2018-03-29 19:45 - 2018-03-29 19:45 - 000014168 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-time-l1-1-0.dll
2018-03-29 19:45 - 2018-03-29 19:45 - 000014168 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-2-0.dll
2018-03-29 19:45 - 2018-03-29 19:45 - 000013656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-filesystem-l1-1-0.dll
2018-03-29 19:45 - 2018-03-29 19:45 - 000013656 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-filesystem-l1-1-0.dll
2018-03-29 19:45 - 2018-03-29 19:45 - 000012632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-process-l1-1-0.dll
2018-03-29 19:45 - 2018-03-29 19:45 - 000012632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-heap-l1-1-0.dll
2018-03-29 19:45 - 2018-03-29 19:45 - 000012632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-conio-l1-1-0.dll
2018-03-29 19:45 - 2018-03-29 19:45 - 000012632 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-process-l1-1-0.dll
2018-03-29 19:45 - 2018-03-29 19:45 - 000012632 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-heap-l1-1-0.dll
2018-03-29 19:45 - 2018-03-29 19:45 - 000012632 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-conio-l1-1-0.dll
2018-03-29 19:45 - 2018-03-29 19:45 - 000012120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-utility-l1-1-0.dll
2018-03-29 19:45 - 2018-03-29 19:45 - 000012120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-locale-l1-1-0.dll
2018-03-29 19:45 - 2018-03-29 19:45 - 000012120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-environment-l1-1-0.dll
2018-03-29 19:45 - 2018-03-29 19:45 - 000012120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-2-0.dll
2018-03-29 19:45 - 2018-03-29 19:45 - 000012120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-1.dll
2018-03-29 19:45 - 2018-03-29 19:45 - 000012120 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-utility-l1-1-0.dll
2018-03-29 19:45 - 2018-03-29 19:45 - 000012120 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-locale-l1-1-0.dll
2018-03-29 19:45 - 2018-03-29 19:45 - 000012120 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-environment-l1-1-0.dll
2018-03-29 19:45 - 2018-03-29 19:45 - 000012120 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-2-0.dll
2018-03-29 19:45 - 2018-03-29 19:45 - 000012120 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-1.dll
2018-03-29 19:45 - 2018-03-29 19:45 - 000011608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l2-1-0.dll
2018-03-29 19:45 - 2018-03-29 19:45 - 000011608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-timezone-l1-1-0.dll
2018-03-29 19:45 - 2018-03-29 19:45 - 000011608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l2-1-0.dll
2018-03-29 19:45 - 2018-03-29 19:45 - 000011608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-2-0.dll
2018-03-29 19:45 - 2018-03-29 19:45 - 000011608 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l2-1-0.dll
2018-03-29 19:45 - 2018-03-29 19:45 - 000011608 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-timezone-l1-1-0.dll
2018-03-29 19:45 - 2018-03-29 19:45 - 000011608 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l2-1-0.dll
2018-03-29 19:45 - 2018-03-29 19:45 - 000011608 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-2-0.dll
2018-03-28 18:07 - 2018-05-17 18:02 - 000000000 ____D C:\Users\User\Desktop\Contabilidade
2018-03-21 15:08 - 2018-03-21 15:08 - 000000165 ____H C:\Users\User\Desktop\~$To Do.xlsx
2018-03-14 15:52 - 2018-02-22 00:28 - 000217600 _____ (Microsoft Corporation) C:\Windows\system32\WinSCard.dll
2018-03-14 15:52 - 2018-02-22 00:06 - 000134656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WinSCard.dll
2018-03-14 15:52 - 2018-02-10 15:35 - 000367296 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\msrpc.sys
2018-03-14 15:52 - 2018-02-10 15:35 - 000334528 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\acpi.sys
2018-03-14 15:52 - 2018-02-10 15:35 - 000185024 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\pci.sys
2018-03-14 15:52 - 2018-02-10 15:35 - 000122560 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\NV_AGP.SYS
2018-03-14 15:52 - 2018-02-10 15:35 - 000068288 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\volmgr.sys
2018-03-14 15:52 - 2018-02-10 15:35 - 000064192 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ULIAGPKX.SYS
2018-03-14 15:52 - 2018-02-10 15:35 - 000063168 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\termdd.sys
2018-03-14 15:52 - 2018-02-10 15:35 - 000060608 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\AGP440.sys
2018-03-14 15:52 - 2018-02-10 15:35 - 000036032 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\vdrvroot.sys
2018-03-14 15:52 - 2018-02-10 15:35 - 000031936 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mssmbios.sys
2018-03-14 15:52 - 2018-02-10 15:35 - 000023744 _____ (Microsoft Corporation) C:\Windows\system32\streamci.dll
2018-03-14 15:52 - 2018-02-10 15:35 - 000020160 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\isapnp.sys
2018-03-14 15:52 - 2018-02-10 15:35 - 000015040 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\msisadrv.sys
2018-03-14 15:52 - 2018-02-10 15:35 - 000012096 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\swenum.sys
2018-03-14 15:52 - 2018-02-10 15:23 - 002292224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MSVidCtl.dll
2018-03-14 15:52 - 2018-02-10 15:23 - 000330240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\zipfldr.dll
2018-03-14 15:52 - 2018-02-10 15:23 - 000111616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\racpldlg.dll
2018-03-14 15:52 - 2018-02-10 15:11 - 003665920 _____ (Microsoft Corporation) C:\Windows\system32\MSVidCtl.dll
2018-03-14 15:52 - 2018-02-10 15:11 - 000369664 _____ (Microsoft Corporation) C:\Windows\system32\zipfldr.dll
2018-03-14 15:52 - 2018-02-10 15:11 - 000133120 _____ (Microsoft Corporation) C:\Windows\system32\msrahc.dll
2018-03-14 15:52 - 2018-02-10 15:11 - 000119296 _____ (Microsoft Corporation) C:\Windows\system32\racpldlg.dll
2018-03-14 15:52 - 2018-02-10 14:36 - 000108032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msra.exe
2018-03-14 15:52 - 2018-02-10 14:36 - 000040960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sdchange.exe
2018-03-14 15:52 - 2018-02-10 14:36 - 000007168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MsraLegacy.tlb
2018-03-14 15:52 - 2018-02-10 14:26 - 000653312 _____ (Microsoft Corporation) C:\Windows\system32\msra.exe
2018-03-14 15:52 - 2018-02-10 14:26 - 000051712 _____ (Microsoft Corporation) C:\Windows\system32\sdchange.exe
2018-03-14 15:52 - 2018-02-10 14:25 - 000014336 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\wmiacpi.sys
2018-03-14 15:52 - 2018-02-10 14:25 - 000009728 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\errdev.sys
2018-03-14 15:52 - 2018-02-10 14:25 - 000007168 _____ (Microsoft Corporation) C:\Windows\system32\MsraLegacy.tlb
2018-03-14 15:52 - 2018-02-02 15:40 - 000114368 _____ (Microsoft Corporation) C:\Windows\system32\consent.exe
2018-03-14 15:52 - 2018-02-02 15:29 - 002365952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msi.dll
2018-03-14 15:52 - 2018-02-02 15:29 - 000337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msihnd.dll
2018-03-14 15:52 - 2018-02-02 15:29 - 000025088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msimsg.dll
2018-03-14 15:52 - 2018-02-02 15:28 - 001806848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll
2018-03-14 15:52 - 2018-02-02 15:16 - 003246080 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll
2018-03-14 15:52 - 2018-02-02 15:16 - 000504320 _____ (Microsoft Corporation) C:\Windows\system32\msihnd.dll
2018-03-14 15:52 - 2018-02-02 15:16 - 000025088 _____ (Microsoft Corporation) C:\Windows\system32\msimsg.dll
2018-03-14 15:52 - 2018-02-02 15:14 - 001942016 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll
2018-03-14 15:52 - 2018-02-02 15:14 - 000070144 _____ (Microsoft Corporation) C:\Windows\system32\appinfo.dll
2018-03-14 15:52 - 2018-02-02 14:46 - 000073216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msiexec.exe
2018-03-14 15:52 - 2018-02-02 14:36 - 000128512 _____ (Microsoft Corporation) C:\Windows\system32\msiexec.exe
2018-03-14 15:52 - 2018-01-12 13:40 - 000407040 _____ (Microsoft Corporation) C:\Windows\system32\scesrv.dll
2018-03-14 15:52 - 2018-01-12 13:26 - 000308224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\scesrv.dll
2018-03-13 12:14 - 2018-05-08 16:14 - 000004530 _____ C:\Windows\System32\Tasks\Adobe Flash Player NPAPI Notifier
2018-03-11 14:34 - 2018-03-11 14:34 - 000000000 ____D C:\Users\User\AppData\Local\TeamViewer
2018-03-11 14:32 - 2018-03-11 14:32 - 000000000 ____D C:\Users\User\AppData\Roaming\TeamViewer
2018-03-11 14:31 - 2018-03-11 14:38 - 000000000 ____D C:\Program Files (x86)\TeamViewer
2018-02-26 23:20 - 2018-02-26 23:20 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TechSmith
2018-02-26 23:19 - 2018-02-26 23:19 - 000000000 ____D C:\Program Files\TechSmith
2018-02-25 20:02 - 2018-02-25 20:02 - 000000000 ____D C:\Users\User\AppData\Local\BeastsOfBermuda
2018-02-24 09:20 - 2018-02-24 09:20 - 000000000 ____D C:\Users\User\AppData\Roaming\SmartSteamEmu
2018-02-24 09:20 - 2018-02-24 09:20 - 000000000 ____D C:\Users\User\AppData\LocalLow\OldBlood Productions
2018-02-23 15:18 - 2018-02-23 15:18 - 000001299 _____ C:\Users\User\Documents\Nova Biblioteca.lnk
2018-02-19 20:04 - 2018-02-18 21:02 - 000000237 ___SH C:\Users\Public\Libraries.ini
2018-02-19 20:00 - 2018-02-19 20:00 - 000000000 ____D C:\Users\User\AppData\Local\NVIDIA Corporation
2018-02-19 19:58 - 2018-02-19 19:58 - 000000000 ____D C:\Users\User\AppData\Local\FortniteGame

==================== Três Meses Modificados arquivos e pastas ========

(Se uma entrada for incluída na fixlist, o arquivo/pasta será movido.)

2018-05-20 19:47 - 2016-02-06 16:50 - 000000000 ____D C:\Users\User\AppData\Roaming\DMCache
2018-05-20 19:40 - 2016-02-06 16:50 - 000000000 ____D C:\Users\User\AppData\Roaming\IDM
2018-05-20 16:29 - 2009-07-14 01:45 - 000021024 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2018-05-20 16:29 - 2009-07-14 01:45 - 000021024 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2018-05-20 16:19 - 2009-07-14 02:08 - 000000006 ____H C:\Windows\Tasks\SA.DAT
2018-05-20 16:18 - 2013-07-10 14:15 - 000000000 ____D C:\Users\User\AppData\Roaming\uTorrent
2018-05-20 16:16 - 2016-02-06 17:02 - 000000000 ____D C:\Users\User\AppData\Roaming\Spotify
2018-05-20 01:00 - 2009-07-14 00:20 - 000000000 ____D C:\Windows\inf
2018-05-19 21:56 - 2016-02-06 16:40 - 000000000 ____D C:\Program Files (x86)\IObit
2018-05-19 21:44 - 2016-07-19 00:05 - 000000000 ____D C:\Users\User\Desktop\Geral
2018-05-19 21:39 - 2009-07-14 00:20 - 000000000 ____D C:\Windows\system32\NDF
2018-05-19 21:36 - 2016-07-14 04:26 - 000000000 ____D C:\Users\User\AppData\Roaming\MPC-HC
2018-05-19 21:29 - 2016-02-06 16:40 - 000000000 ____D C:\Users\User\AppData\Roaming\IObit
2018-05-19 21:29 - 2016-02-06 16:40 - 000000000 ____D C:\Users\Todos os Usuários\IObit
2018-05-19 21:29 - 2016-02-06 16:40 - 000000000 ____D C:\ProgramData\IObit
2018-05-19 21:15 - 2017-06-23 22:39 - 000000000 ____D C:\Users\User\AppData\Roaming\discord
2018-05-19 21:14 - 2014-10-03 11:33 - 000000000 ____D C:\Users\User\AppData\Roaming\vlc
2018-05-19 21:13 - 2009-07-14 00:20 - 000000000 ____D C:\Windows\registration
2018-05-19 21:12 - 2017-12-27 09:53 - 000000000 ____D C:\found.001
2018-05-19 19:52 - 2014-05-03 14:54 - 000000000 ____D C:\Users\User\AppData\Local\ElevatedDiagnostics
2018-05-19 14:52 - 2018-02-14 18:26 - 000000068 __RSH C:\Windows\system32\Drivers\volsnap.winsecurity
2018-05-19 14:52 - 2018-02-14 18:25 - 000000068 __RSH C:\Windows\system32\Drivers\WUDFRd.winsecurity
2018-05-19 14:17 - 2018-02-14 18:26 - 000000068 __RSH C:\Windows\system32\Drivers\Wdf01000.winsecurity
2018-05-19 14:17 - 2018-02-14 18:25 - 000000068 __RSH C:\Windows\system32\Drivers\volmgrx.winsecurity
2018-05-19 02:04 - 2009-07-13 23:34 - 000000215 _____ C:\Windows\system.ini
2018-05-19 01:19 - 2017-12-14 22:51 - 000003158 _____ C:\Windows\System32\Tasks\{4A8C4A57-BE69-44C9-BF9B-45688CBBE39C}
2018-05-19 01:19 - 2017-06-18 16:31 - 000002970 _____ C:\Windows\System32\Tasks\{A982A235-A7B0-49DD-AC63-A4C2CF77D2FF}
2018-05-19 01:19 - 2017-06-18 16:30 - 000002970 _____ C:\Windows\System32\Tasks\{4AA24475-98DA-4843-AB24-B8A6A2E70324}
2018-05-19 01:19 - 2017-01-08 03:39 - 000003134 _____ C:\Windows\System32\Tasks\{0A54752F-E585-4232-95EA-69B815BAEF99}
2018-05-19 01:19 - 2016-02-10 11:21 - 000003228 _____ C:\Windows\System32\Tasks\{15310C99-6FD8-4B9B-B728-3D04964730C9}
2018-05-19 01:19 - 2016-02-06 16:59 - 000003176 _____ C:\Windows\System32\Tasks\{DE2EC5B8-B876-41BB-9F58-5822EAC71E1A}
2018-05-18 22:19 - 2017-04-19 14:51 - 000000000 ____D C:\Users\User\AppData\Local\CrashDumps
2018-05-18 18:07 - 2018-01-01 23:51 - 000000000 ____D C:\Users\User\Desktop\Shadow Works
2018-05-18 18:07 - 2017-11-17 15:34 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OBS Studio
2018-05-18 17:06 - 2017-03-31 14:48 - 000000000 ____D C:\Windows\Minidump
2018-05-18 17:06 - 2016-02-06 16:40 - 000000000 ____D C:\Users\Todos os Usuários\ProductData
2018-05-18 17:06 - 2016-02-06 16:40 - 000000000 ____D C:\ProgramData\ProductData
2018-05-18 12:38 - 2016-02-06 17:07 - 000000000 ____D C:\Users\User\AppData\Local\Spotify
2018-05-18 12:03 - 2016-08-05 21:14 - 000000000 ____D C:\Users\User\Desktop\luma
2018-05-17 21:48 - 2017-09-03 22:07 - 000000000 ____D C:\Users\User\Desktop\New Animes
2018-05-17 21:37 - 2016-02-06 18:19 - 000000000 ____D C:\Users\User\Desktop\Animes
2018-05-17 16:44 - 2017-11-10 17:24 - 000000000 ____D C:\Users\Todos os Usuários\regid.1991-06.com.microsoft
2018-05-17 16:44 - 2017-11-10 17:24 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2018-05-17 16:42 - 2013-01-31 10:42 - 000000000 ____D C:\Program Files (x86)\Microsoft Office
2018-05-17 00:28 - 2013-01-31 08:56 - 000000000 ____D C:\Users\User\AppData\Roaming\Mozilla
2018-05-17 00:17 - 2017-11-15 11:16 - 000004476 _____ C:\Windows\System32\Tasks\Adobe Acrobat Update Task
2018-05-17 00:16 - 2015-08-02 00:37 - 000002441 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk
2018-05-16 22:25 - 2016-07-18 23:57 - 000000000 ____D C:\Users\User\Desktop\Jogos
2018-05-15 23:53 - 2016-02-07 19:35 - 000000000 ____D C:\Users\User\Desktop\Músicas
2018-05-13 19:01 - 2016-02-06 16:59 - 000000000 ____D C:\Users\User\AppData\Local\Songr
2018-05-13 18:58 - 2016-02-14 17:13 - 000000000 ____D C:\Users\User\Desktop\Amv's
2018-05-13 16:00 - 2016-02-06 16:40 - 000000000 ____D C:\Windows\SysWOW64\directx
2018-05-13 13:17 - 2009-07-14 14:55 - 000708476 _____ C:\Windows\system32\prfh0416.dat
2018-05-13 13:17 - 2009-07-14 14:55 - 000148256 _____ C:\Windows\system32\prfc0416.dat
2018-05-13 13:17 - 2009-07-14 02:13 - 001642806 _____ C:\Windows\system32\PerfStringBackup.INI
2018-05-13 13:11 - 2009-07-14 01:45 - 002403400 _____ C:\Windows\system32\FNTCACHE.DAT
2018-05-12 23:18 - 2016-06-10 19:32 - 000000000 ____D C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Nexon
2018-05-12 21:00 - 2017-06-09 20:49 - 000000000 ____D C:\Program Files (x86)\Brasil MapleStory2
2018-05-12 20:59 - 2016-02-06 15:42 - 000000000 ____D C:\Users\User\Desktop\Imagens
2018-05-12 19:22 - 2017-05-08 14:02 - 000000000 ____D C:\AI_RecycleBin
2018-05-12 17:13 - 2016-02-06 16:55 - 000000000 ____D C:\Program Files (x86)\Steam
2018-05-12 17:07 - 2016-02-10 02:35 - 000000000 ____D C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam
2018-05-12 16:48 - 2017-12-18 14:10 - 000000000 ____D C:\Users\User\AppData\Local\Dxtory Software
2018-05-10 22:10 - 2017-12-24 08:46 - 001192128 _____ (AO Kaspersky Lab) C:\Windows\system32\Drivers\klhk.sys
2018-05-10 22:10 - 2017-12-24 08:46 - 000142024 _____ (AO Kaspersky Lab) C:\Windows\system32\Drivers\klwtp.sys
2018-05-10 22:10 - 2017-12-24 08:46 - 000119496 _____ (AO Kaspersky Lab) C:\Windows\system32\Drivers\klbackupflt.sys
2018-05-10 22:10 - 2016-10-11 14:14 - 000056520 _____ (AO Kaspersky Lab) C:\Windows\system32\Drivers\klim6.sys
2018-05-10 22:06 - 2015-08-01 23:54 - 000000000 ____D C:\Program Files\Common Files\AV
2018-05-08 17:14 - 2016-07-31 13:47 - 000004518 _____ C:\Windows\System32\Tasks\Adobe Flash Player PPAPI Notifier
2018-05-08 17:14 - 2013-01-31 10:45 - 000804864 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2018-05-08 17:14 - 2013-01-31 10:45 - 000144896 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2018-05-08 17:14 - 2013-01-31 10:45 - 000004384 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2018-05-08 17:14 - 2013-01-31 10:45 - 000000000 ____D C:\Windows\SysWOW64\Macromed
2018-05-08 17:14 - 2013-01-31 10:45 - 000000000 ____D C:\Windows\system32\Macromed
2018-05-01 20:19 - 2017-06-23 22:39 - 000000000 ____D C:\Users\User\AppData\Local\Discord
2018-04-28 15:56 - 2017-11-10 17:22 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Ferramentas do Microsoft Office 2016
2018-04-28 10:50 - 2009-07-14 02:08 - 000032608 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2018-04-26 18:48 - 2017-02-01 16:04 - 000000000 ___RD C:\Users\User\Documents\Scanned Documents
2018-04-26 16:05 - 2016-07-31 12:33 - 000000000 ____D C:\Program Files (x86)\Opera
2018-04-25 15:22 - 2013-01-31 10:44 - 000002341 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2018-04-21 20:14 - 2016-02-06 22:14 - 000000000 ____D C:\Users\User\AppData\Local\osu!

==================== Arquivos na raiz de alguns diretórios =======

1623-04-04 12:34 - 1623-04-04 12:34 - 000073216 ____N (Microsoft Corporation) C:\Program Files (x86)\Common Files\uyeLdRcU.exe
2016-07-30 21:27 - 2016-07-30 21:44 - 000032133 _____ () C:\Users\User\AppData\Roaming\net.telestream.producer.xml
2013-01-31 11:34 - 2014-10-03 11:51 - 000007859 _____ () C:\Users\User\AppData\Roaming\pcouffin.cat
2013-01-31 11:34 - 2014-10-03 11:51 - 000001167 _____ () C:\Users\User\AppData\Roaming\pcouffin.inf
2013-01-31 11:34 - 2014-10-03 11:51 - 000000033 _____ () C:\Users\User\AppData\Roaming\pcouffin.log
2013-01-31 11:34 - 2014-10-03 11:51 - 000082816 _____ (VSO Software) C:\Users\User\AppData\Roaming\pcouffin.sys
2017-05-14 12:22 - 2017-05-14 12:22 - 000000043 _____ () C:\Users\User\AppData\Roaming\WB.CFG
2017-10-13 20:44 - 2017-10-13 20:44 - 000007605 _____ () C:\Users\User\AppData\Local\Resmon.ResmonCfg
2018-04-02 12:59 - 2018-04-02 12:59 - 000000003 _____ () C:\Users\User\AppData\Local\wbem.ini

==================== Bamital & volsnap ======================

(Não há correção automática para arquivos que não passaram na verificação.)

C:\Windows\system32\winlogon.exe => O arquivo é assinado digitalmente
C:\Windows\system32\wininit.exe => O arquivo é assinado digitalmente
C:\Windows\SysWOW64\wininit.exe => O arquivo é assinado digitalmente
C:\Windows\explorer.exe => O arquivo é assinado digitalmente
C:\Windows\SysWOW64\explorer.exe => O arquivo é assinado digitalmente
C:\Windows\system32\svchost.exe => O arquivo é assinado digitalmente
C:\Windows\SysWOW64\svchost.exe => O arquivo é assinado digitalmente
C:\Windows\system32\services.exe => O arquivo é assinado digitalmente
C:\Windows\system32\User32.dll => O arquivo é assinado digitalmente
C:\Windows\SysWOW64\User32.dll => O arquivo é assinado digitalmente
C:\Windows\system32\userinit.exe => O arquivo é assinado digitalmente
C:\Windows\SysWOW64\userinit.exe => O arquivo é assinado digitalmente
C:\Windows\system32\rpcss.dll => O arquivo é assinado digitalmente
C:\Windows\system32\dnsapi.dll => O arquivo é assinado digitalmente
C:\Windows\SysWOW64\dnsapi.dll => O arquivo é assinado digitalmente
C:\Windows\system32\Drivers\volsnap.sys => O arquivo é assinado digitalmente

LastRegBack: 2018-05-18 14:21

==================== Fim de FRST.txt ============================