cjoint

Publicité


Publicité

Format du document : text/plain

Prévisualisation

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version:06-08-2015
Ran by Wendling (administrator) on WENDLING-PC (06-08-2015 22:34:19)
Running from C:\Users\Wendling\Desktop
Loaded Profiles: Wendling (Available Profiles: Wendling)
Platform: Windows 7 Professional Service Pack 1 (X64) Language: Português (Brasil)
Internet Explorer Version 11 (Default browser: FF)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Advanced Micro Devices, Inc.) C:\Program Files\AMD\ATI.ACE\Fuel\Fuel.Service.exe
(Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 15.0.2\avp.exe
(Seiko Epson Corporation) C:\Windows\System32\escsvc64.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Exploit\mbae-svc.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Exploit\mbae64.exe
() C:\Windows\System32\PnkBstrA.exe
(Microsoft Corporation) C:\Users\Wendling\AppData\Local\Microsoft\OneDrive\OneDrive.exe
(Dropbox, Inc.) C:\Program Files (x86)\Dropbox\Client\Dropbox.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Exploit\mbae.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\AMD\ATI.ACE\Core-Static\MOM.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\AMD\ATI.ACE\Core-Static\CCC.exe
(Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 15.0.2\avpui.exe
(Raptr, Inc) C:\Program Files (x86)\Raptr\raptr.exe
(Raptr, Inc) C:\Program Files (x86)\Raptr\raptr_im.exe
(Raptr Inc.) C:\Program Files (x86)\Raptr\raptr_ep64.exe
(Microsoft Corporation) C:\Windows\System32\GWX\GWX.exe
(Electronic Arts) C:\Program Files (x86)\Origin\Origin.exe
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
() C:\Windows\SysWOW64\PnkBstrB.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\SysWOW64\cmd.exe
(Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 15.0.2\plugin-nm-server.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM-x32\...\Run: [Raptr] => C:\Program Files (x86)\Raptr\raptrstub.exe [56080 2015-07-27] (Raptr, Inc)
HKLM-x32\...\Run: [Dropbox] => C:\Program Files (x86)\Dropbox\Client\Dropbox.exe [39179912 2015-07-23] (Dropbox, Inc.)
HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\AMD\ATI.ACE\Core-Static\amd64\CLIStart.exe [767176 2015-07-15] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [Malwarebytes Anti-Exploit] => C:\Program Files (x86)\Malwarebytes Anti-Exploit\mbae.exe [2620728 2015-07-22] (Malwarebytes Corporation)
HKU\S-1-5-21-1735972694-2679632832-3279594583-1000\...\Run: [OneDrive] => C:\Users\Wendling\AppData\Local\Microsoft\OneDrive\OneDrive.exe [402632 2015-07-23] (Microsoft Corporation)
ShellIconOverlayIdentifiers: [ DropboxExt1] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.27.dll [2015-07-23] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt2] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.27.dll [2015-07-23] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt3] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.27.dll [2015-07-23] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt4] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.27.dll [2015-07-23] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt5] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.27.dll [2015-07-23] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt6] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.27.dll [2015-07-23] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt7] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.27.dll [2015-07-23] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt8] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.27.dll [2015-07-23] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ OneDrive1] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => C:\Users\Wendling\AppData\Local\Microsoft\OneDrive\17.3.5907.0716\amd64\FileSyncShell64.dll [2015-07-23] (Microsoft Corporation)
ShellIconOverlayIdentifiers: [ OneDrive2] -> {5AB7172C-9C11-405C-8DD5-AF20F3606282} => C:\Users\Wendling\AppData\Local\Microsoft\OneDrive\17.3.5907.0716\amd64\FileSyncShell64.dll [2015-07-23] (Microsoft Corporation)
ShellIconOverlayIdentifiers: [ OneDrive3] -> {A78ED123-AB77-406B-9962-2A5D9D2F7F30} => C:\Users\Wendling\AppData\Local\Microsoft\OneDrive\17.3.5907.0716\amd64\FileSyncShell64.dll [2015-07-23] (Microsoft Corporation)
ShellIconOverlayIdentifiers: [ OneDrive4] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => C:\Users\Wendling\AppData\Local\Microsoft\OneDrive\17.3.5907.0716\amd64\FileSyncShell64.dll [2015-07-23] (Microsoft Corporation)
ShellIconOverlayIdentifiers: [ OneDrive5] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => C:\Users\Wendling\AppData\Local\Microsoft\OneDrive\17.3.5907.0716\amd64\FileSyncShell64.dll [2015-07-23] (Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ DropboxExt1] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.27.dll [2015-07-23] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt2] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.27.dll [2015-07-23] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt3] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.27.dll [2015-07-23] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt4] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.27.dll [2015-07-23] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt5] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.27.dll [2015-07-23] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt6] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.27.dll [2015-07-23] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt7] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.27.dll [2015-07-23] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt8] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.27.dll [2015-07-23] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ OneDrive1] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => C:\Users\Wendling\AppData\Local\Microsoft\OneDrive\17.3.5907.0716\FileSyncShell.dll [2015-07-23] (Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive2] -> {5AB7172C-9C11-405C-8DD5-AF20F3606282} => C:\Users\Wendling\AppData\Local\Microsoft\OneDrive\17.3.5907.0716\FileSyncShell.dll [2015-07-23] (Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive3] -> {A78ED123-AB77-406B-9962-2A5D9D2F7F30} => C:\Users\Wendling\AppData\Local\Microsoft\OneDrive\17.3.5907.0716\FileSyncShell.dll [2015-07-23] (Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive4] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => C:\Users\Wendling\AppData\Local\Microsoft\OneDrive\17.3.5907.0716\FileSyncShell.dll [2015-07-23] (Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive5] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => C:\Users\Wendling\AppData\Local\Microsoft\OneDrive\17.3.5907.0716\FileSyncShell.dll [2015-07-23] (Microsoft Corporation)
GroupPolicy: Group Policy on Chrome detected <======= ATTENTION
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=msnhome
HKU\S-1-5-21-1735972694-2679632832-3279594583-1000\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKU\S-1-5-21-1735972694-2679632832-3279594583-1000\Software\Microsoft\Internet Explorer\Main,Start Page = http://google.com.br/
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-1735972694-2679632832-3279594583-1000 -> {600FB4BB-3F3B-4CDE-BFCB-496E4C6EE5D1} URL = https://www.google.com/search?q={searchTerms}
BHO: Virtual Keyboard Plugin -> {4A66AD60-A03D-4D01-86F0-5F0F7C0EF1AD} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 15.0.2\x64\IEExt\ie_plugin.dll [2014-12-23] (Kaspersky Lab ZAO)
BHO: SteadyVideoBHO Class -> {6C680BAE-655C-4E3D-8FC4-E6A520C3D928} -> C:\Program Files\AMD\SteadyVideo\SteadyVideo.dll [2012-02-14] (Advanced Micro Devices)
BHO: Content Blocker Plugin -> {93BC2EA7-2F17-4729-948A-D2E03FFB2412} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 15.0.2\x64\IEExt\ie_plugin.dll [2014-12-23] (Kaspersky Lab ZAO)
BHO: Safe Money Plugin -> {AB379017-4C03-4E00-8EDF-E6D6AF7CCF82} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 15.0.2\x64\IEExt\ie_plugin.dll [2014-12-23] (Kaspersky Lab ZAO)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation)
BHO-x32: Virtual Keyboard Plugin -> {4A66AD60-A03D-4D01-86F0-5F0F7C0EF1AD} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 15.0.2\IEExt\ie_plugin.dll [2014-12-23] (Kaspersky Lab ZAO)
BHO-x32: SteadyVideoBHO Class -> {6C680BAE-655C-4E3D-8FC4-E6A520C3D928} -> C:\Program Files (x86)\amd\SteadyVideo\SteadyVideo.dll [2012-02-14] (Advanced Micro Devices)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_45\bin\ssv.dll [2015-06-23] (Oracle Corporation)
BHO-x32: Content Blocker Plugin -> {93BC2EA7-2F17-4729-948A-D2E03FFB2412} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 15.0.2\IEExt\ie_plugin.dll [2014-12-23] (Kaspersky Lab ZAO)
BHO-x32: Safe Money Plugin -> {AB379017-4C03-4E00-8EDF-E6D6AF7CCF82} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 15.0.2\IEExt\ie_plugin.dll [2014-12-23] (Kaspersky Lab ZAO)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_45\bin\jp2ssv.dll [2015-06-23] (Oracle Corporation)
Filter: video/mp4 - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files\AMD\SteadyVideo\VideoMIMEFilter.dll [2011-06-08] (Advanced Micro Devices)
Filter-x32: video/mp4 - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files (x86)\amd\SteadyVideo\VideoMIMEFilter.dll [2011-06-08] (Advanced Micro Devices)
Filter: video/x-flv - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files\AMD\SteadyVideo\VideoMIMEFilter.dll [2011-06-08] (Advanced Micro Devices)
Filter-x32: video/x-flv - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files (x86)\amd\SteadyVideo\VideoMIMEFilter.dll [2011-06-08] (Advanced Micro Devices)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{DA42C821-601D-451E-98A1-3FBE7B3DE25E}: [DhcpNameServer] 192.168.1.1

FireFox:
========
FF ProfilePath: C:\Users\Wendling\AppData\Roaming\Mozilla\Firefox\Profiles\yvb04pta.default-1422655926814
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_18_0_0_209.dll [2015-07-18] ()
FF Plugin: @esn/npbattlelog,version=2.7.1 -> C:\Program Files (x86)\Battlelog Web Plugins\2.7.1\npbattlelogx64.dll [2015-04-30] (EA Digital Illusions CE AB)
FF Plugin: @microsoft.com/GENUINE -> disabled [No File]
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.40416.0\npctrl.dll [2015-04-16] ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin-x32: @adobe.com/AuthorwarePlayer -> C:\Windows\system32\Macromed\AUTHORWA\np32asw.dll [No File]
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_18_0_0_209.dll [2015-07-18] ()
FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\Windows\system32\Adobe\Director\np32dsw_1217157.dll [No File]
FF Plugin-x32: @esn.me/esnsonar,version=0.70.4 -> C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.4\npesnsonar.dll [2011-11-03] (ESN Social Software AB)
FF Plugin-x32: @esn/esnlaunch,version=2.3.0 -> C:\Program Files (x86)\Battlelog Web Plugins\2.3.0\npesnlaunch.dll [2013-09-16] (ESN Social Software AB)
FF Plugin-x32: @esn/npbattlelog,version=2.7.1 -> C:\Program Files (x86)\Battlelog Web Plugins\2.7.1\npbattlelog.dll [2015-04-30] (EA Digital Illusions CE AB)
FF Plugin-x32: @java.com/DTPlugin,version=11.45.2 -> C:\Program Files (x86)\Java\jre1.8.0_45\bin\dtplugin\npDeployJava1.dll [2015-06-23] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.45.2 -> C:\Program Files (x86)\Java\jre1.8.0_45\bin\plugin2\npjp2.dll [2015-06-23] (Oracle Corporation)
FF Plugin-x32: @kaspersky.com/content_blocker_663BE84DBCC949E88C7600F63CA7F098 -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 15.0.2\FFExt\content_blocker@kaspersky.com [2015-08-03] ()
FF Plugin-x32: @kaspersky.com/virtual_keyboard_07402848C2F6470194F131B0F3DE025E -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 15.0.2\FFExt\virtual_keyboard@kaspersky.com [2015-08-03] ()
FF Plugin-x32: @microsoft.com/GENUINE -> disabled [No File]
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.40416.0\npctrl.dll [2015-04-15] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~2\MICROS~2\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~2\Office14\NPSPWRAP.DLL [2010-03-24] (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.28.1\npGoogleUpdate3.dll [2015-07-15] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.28.1\npGoogleUpdate3.dll [2015-07-15] (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.2.1 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2015-07-03] (Adobe Systems Inc.)
FF user.js: detected! => C:\Users\Wendling\AppData\Roaming\Mozilla\Firefox\Profiles\yvb04pta.default-1422655926814\user.js [2015-08-04]
FF Plugin ProgramFiles/Appdata: C:\Users\Wendling\AppData\Roaming\mozilla\plugins\npgoogletalk.dll [2015-04-17] (Google)
FF Plugin ProgramFiles/Appdata: C:\Users\Wendling\AppData\Roaming\mozilla\plugins\npo1d.dll [2015-04-17] (Google)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\buscape.xml [2015-05-25]
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\mercadolivre.xml [2015-05-25]
FF Extension: Adblock Plus - C:\Users\Wendling\AppData\Roaming\Mozilla\Firefox\Profiles\yvb04pta.default-1422655926814\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2015-06-22]
FF HKLM-x32\...\Firefox\Extensions: [content_blocker_663BE84DBCC949E88C7600F63CA7F098@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 15.0.2\FFExt\content_blocker@kaspersky.com
FF Extension: Dangerous Websites Blocker - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 15.0.2\FFExt\content_blocker@kaspersky.com [2015-08-03]
FF HKLM-x32\...\Firefox\Extensions: [virtual_keyboard_07402848C2F6470194F131B0F3DE025E@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 15.0.2\FFExt\virtual_keyboard@kaspersky.com
FF Extension: Virtual Keyboard - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 15.0.2\FFExt\virtual_keyboard@kaspersky.com [2015-08-03]

Chrome:
=======
CHR Profile: C:\Users\Wendling\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Slides) - C:\Users\Wendling\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-06-22]
CHR Extension: (Google Docs) - C:\Users\Wendling\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-06-22]
CHR Extension: (Google Drive) - C:\Users\Wendling\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-06-22]
CHR Extension: (YouTube) - C:\Users\Wendling\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-06-22]
CHR Extension: (Google Search) - C:\Users\Wendling\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-06-22]
CHR Extension: (Kaspersky Protection) - C:\Users\Wendling\AppData\Local\Google\Chrome\User Data\Default\Extensions\dbhjdbfgekjfcfkkfjjmlmojhbllhbho [2015-08-03]
CHR Extension: (Google Sheets) - C:\Users\Wendling\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-06-22]
CHR Extension: (AdBlock) - C:\Users\Wendling\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2015-06-22]
CHR Extension: (Chrome Hotword Shared Module) - C:\Users\Wendling\AppData\Local\Google\Chrome\User Data\Default\Extensions\lccekmodgklaepjeofjdjpbminllajkg [2015-06-22]
CHR Extension: (Chrome Web Store Payments) - C:\Users\Wendling\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-06-22]
CHR Extension: (Pically - Calendar Creator) - C:\Users\Wendling\AppData\Local\Google\Chrome\User Data\Default\Extensions\ogmlicblmiajmhbdggemakpjjeghfhka [2015-06-22]
CHR Extension: (Gmail) - C:\Users\Wendling\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-06-22]
CHR HKLM\...\Chrome\Extension: [dbhjdbfgekjfcfkkfjjmlmojhbllhbho] - https://chrome.google.com/webstore/detail/dbhjdbfgekjfcfkkfjjmlmojhbllhbho
CHR HKLM-x32\...\Chrome\Extension: [dbhjdbfgekjfcfkkfjjmlmojhbllhbho] - https://chrome.google.com/webstore/detail/dbhjdbfgekjfcfkkfjjmlmojhbllhbho

==================== Services (Whitelisted) ========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 AMD FUEL Service; C:\Program Files\AMD\ATI.ACE\Fuel\Fuel.Service.exe [344064 2015-07-15] (Advanced Micro Devices, Inc.) [File not signed]
R2 AVP15.0.2; C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 15.0.2\avp.exe [194000 2015-07-04] (Kaspersky Lab ZAO)
S2 dbupdate; C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [134512 2015-07-06] (Dropbox, Inc.)
S3 dbupdatem; C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [134512 2015-07-06] (Dropbox, Inc.)
R2 EpsonScanSvc; C:\Windows\system32\EscSvc64.exe [144560 2012-05-17] (Seiko Epson Corporation)
S4 EPSON_PM_RPCV4_06; C:\Program Files\Common Files\EPSON\EPW!3 SSRP\E_S60RPB.EXE [152640 2013-04-15] (SEIKO EPSON CORPORATION)
R2 MbaeSvc; C:\Program Files (x86)\Malwarebytes Anti-Exploit\mbae-svc.exe [713016 2015-07-22] (Malwarebytes Corporation)
S4 Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [2007048 2015-07-27] (Electronic Arts)
R2 PnkBstrA; C:\Windows\system32\PnkBstrA.exe [76152 2015-07-13] ()
R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [76888 2015-07-13] ()
R2 PnkBstrB; C:\Windows\SysWOW64\PnkBstrB.exe [226168 2015-08-06] ()
S4 SwitchBoard; C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated) [File not signed]
R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)

===================== Drivers (Whitelisted) ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R0 amdide64; C:\Windows\System32\DRIVERS\amdide64.sys [11944 2012-12-03] (Advanced Micro Devices Inc.)
R2 AODDriver4.3; C:\Program Files\AMD\ATI.ACE\Fuel\amd64\AODDriver2.sys [59616 2014-02-11] (Advanced Micro Devices)
R0 cm_km_w; C:\Windows\System32\DRIVERS\cm_km_w.sys [247016 2015-07-04] (Kaspersky Lab UK Ltd)
R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283064 2015-07-11] (Disc Soft Ltd)
R1 ESProtectionDriver; C:\Program Files (x86)\Malwarebytes Anti-Exploit\mbae64.sys [63064 2015-07-22] ()
R1 HWiNFO32; C:\Windows\SysWOW64\drivers\HWiNFO64A.SYS [26528 2015-06-23] (REALiX(tm))
R0 kl1; C:\Windows\System32\DRIVERS\kl1.sys [478392 2015-07-04] (Kaspersky Lab ZAO)
R2 kldisk; C:\Windows\System32\DRIVERS\kldisk.sys [64368 2015-07-04] (Kaspersky Lab ZAO)
R3 klflt; C:\Windows\System32\DRIVERS\klflt.sys [159960 2015-07-04] (Kaspersky Lab ZAO)
R1 klhk; C:\Windows\System32\DRIVERS\klhk.sys [225976 2015-07-04] (Kaspersky Lab ZAO)
R1 KLIF; C:\Windows\System32\DRIVERS\klif.sys [850608 2015-07-04] (Kaspersky Lab ZAO)
R1 KLIM6; C:\Windows\System32\DRIVERS\klim6.sys [39280 2015-07-04] (Kaspersky Lab ZAO)
R3 klkbdflt; C:\Windows\System32\DRIVERS\klkbdflt.sys [40304 2015-07-04] (Kaspersky Lab ZAO)
R3 klmouflt; C:\Windows\System32\DRIVERS\klmouflt.sys [39280 2015-07-04] (Kaspersky Lab ZAO)
R1 klpd; C:\Windows\System32\DRIVERS\klpd.sys [24944 2015-07-04] (Kaspersky Lab ZAO)
R1 kltdi; C:\Windows\System32\DRIVERS\kltdi.sys [65208 2015-07-04] (Kaspersky Lab ZAO)
R1 Klwtp; C:\Windows\System32\DRIVERS\klwtp.sys [85360 2015-07-04] (Kaspersky Lab ZAO)
R1 kneps; C:\Windows\System32\DRIVERS\kneps.sys [190648 2015-07-04] (Kaspersky Lab ZAO)
R3 VUSB3HUB; C:\Windows\System32\DRIVERS\ViaHub3.sys [225792 2014-10-31] (VIA Technologies, Inc.)
R3 xhcdrv; C:\Windows\System32\DRIVERS\xhcdrv.sys [305664 2014-10-31] (VIA Technologies, Inc.)
S3 catchme; \??\C:\ComboFix\catchme.sys [X]
S3 IntcAzAudAddService; system32\drivers\RTKVHD64.sys [X]
U4 klkbdflt2; system32\DRIVERS\klkbdflt2.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-08-06 22:34 - 2015-08-06 22:34 - 02170368 _____ (Farbar) C:\Users\Wendling\Desktop\FRST64.exe
2015-08-06 22:34 - 2015-08-06 22:34 - 00024246 _____ C:\Users\Wendling\Desktop\FRST.txt
2015-08-06 22:34 - 2015-08-06 22:34 - 00000000 ____D C:\FRST
2015-08-03 22:27 - 2015-08-03 22:28 - 00000000 ____D C:\AdwCleaner
2015-08-03 22:24 - 2015-08-03 22:24 - 00043168 _____ C:\ComboFix.txt
2015-08-03 22:18 - 2011-06-26 03:45 - 00256000 _____ C:\Windows\PEV.exe
2015-08-03 22:18 - 2010-11-07 14:20 - 00208896 _____ C:\Windows\MBR.exe
2015-08-03 22:18 - 2009-04-20 01:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe
2015-08-03 22:18 - 2000-08-30 21:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe
2015-08-03 22:18 - 2000-08-30 21:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe
2015-08-03 22:18 - 2000-08-30 21:00 - 00098816 _____ C:\Windows\sed.exe
2015-08-03 22:18 - 2000-08-30 21:00 - 00080412 _____ C:\Windows\grep.exe
2015-08-03 22:18 - 2000-08-30 21:00 - 00068096 _____ C:\Windows\zip.exe
2015-08-03 22:17 - 2015-08-03 22:24 - 00000000 ____D C:\Qoobox
2015-08-03 22:17 - 2015-08-03 22:23 - 00000000 ____D C:\Windows\erdnt
2015-08-03 22:04 - 2015-08-03 22:04 - 00000000 ____D C:\TDSSKiller_Quarantine
2015-08-03 22:02 - 2015-08-03 22:03 - 04404952 _____ (Kaspersky Lab ZAO) C:\Users\Wendling\Desktop\tdsskiller.exe
2015-08-03 21:45 - 2015-08-03 21:45 - 02248704 _____ C:\Users\Wendling\Desktop\AdwCleaner.exe
2015-08-03 21:43 - 2015-08-03 22:17 - 00000000 ____D C:\Users\Todos os Usuários\Malwarebytes Anti-Exploit
2015-08-03 21:43 - 2015-08-03 22:17 - 00000000 ____D C:\ProgramData\Malwarebytes Anti-Exploit
2015-08-03 21:43 - 2015-08-03 21:43 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Exploit
2015-08-03 21:43 - 2015-08-03 21:43 - 00000000 ____D C:\Program Files (x86)\Malwarebytes Anti-Exploit
2015-08-03 21:41 - 2015-08-03 22:20 - 00000000 ____D C:\Users\Todos os Usuários\TEMP
2015-08-03 21:41 - 2015-08-03 22:20 - 00000000 ____D C:\ProgramData\TEMP
2015-08-03 21:41 - 2015-08-03 21:42 - 00000000 ____D C:\Program Files (x86)\SpywareBlaster
2015-08-03 21:41 - 2015-08-03 21:41 - 00001083 _____ C:\Users\Public\Desktop\SpywareBlaster.lnk
2015-08-03 21:41 - 2015-08-03 21:41 - 00000000 ____D C:\Users\Todos os Usuários\Licenses
2015-08-03 21:41 - 2015-08-03 21:41 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SpywareBlaster
2015-08-03 21:41 - 2015-08-03 21:41 - 00000000 ____D C:\ProgramData\Licenses
2015-08-03 21:41 - 2012-05-02 12:17 - 01070152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MSCOMCTL.OCX
2015-08-03 21:41 - 2009-03-24 13:52 - 00129872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MSSTDFMT.DLL
2015-08-03 21:40 - 2015-08-03 21:41 - 04184064 _____ (BrightFort LLC ) C:\Program Files (x86)\spywareblastersetup52.exe
2015-08-03 19:31 - 2015-08-06 19:58 - 00000000 ____D C:\Users\Todos os Usuários\Kaspersky Lab
2015-08-03 19:31 - 2015-08-06 19:58 - 00000000 ____D C:\ProgramData\Kaspersky Lab
2015-08-03 19:31 - 2015-08-03 19:31 - 00002093 _____ C:\Users\Public\Desktop\Kaspersky Anti-Virus.lnk
2015-08-03 19:31 - 2015-08-03 19:31 - 00000000 ____D C:\Windows\ELAMBKUP
2015-08-03 19:31 - 2015-08-03 19:31 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Kaspersky Anti-Virus
2015-08-03 19:31 - 2015-08-03 19:31 - 00000000 ____D C:\Program Files (x86)\Kaspersky Lab
2015-08-03 19:31 - 2015-07-04 07:41 - 00850608 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\klif.sys
2015-08-03 19:31 - 2015-07-04 07:41 - 00225976 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\klhk.sys
2015-08-03 19:31 - 2015-07-04 07:41 - 00159960 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\klflt.sys
2015-08-03 19:31 - 2013-05-06 08:13 - 00110176 _____ (Kaspersky Lab ZAO) C:\Windows\system32\klfphc.dll
2015-08-03 19:20 - 2015-08-03 19:20 - 00058661 _____ C:\Windows\SysWOW64\CCCInstall_201508031920501099.log
2015-08-03 19:20 - 2015-08-03 19:20 - 00000000 ____D C:\Users\Todos os Usuários\ATI
2015-08-03 19:20 - 2015-08-03 19:20 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AMD Catalyst Control Center
2015-08-03 19:20 - 2015-08-03 19:20 - 00000000 ____D C:\ProgramData\ATI
2015-08-02 20:58 - 2015-08-02 20:58 - 00000058 _____ C:\Windows\JQHApp.dat
2015-08-02 20:57 - 2015-08-02 20:57 - 00001111 _____ C:\Users\Wendling\Desktop\MK LOL.lnk
2015-08-02 20:57 - 2015-08-02 20:57 - 00000000 ____D C:\Users\Wendling\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MKJogo
2015-08-02 20:57 - 2015-08-02 20:57 - 00000000 ____D C:\Program Files (x86)\MKJogo
2015-07-30 18:30 - 2015-07-30 18:30 - 00000673 _____ C:\Users\Wendling\Desktop\LOL HUE.lnk
2015-07-30 18:30 - 2015-07-30 18:30 - 00000000 ____D C:\Users\Wendling\AppData\Roaming\LolClient
2015-07-30 18:30 - 2015-07-30 18:30 - 00000000 ____D C:\Users\Todos os Usuários\Riot Games
2015-07-30 18:30 - 2015-07-30 18:30 - 00000000 ____D C:\ProgramData\Riot Games
2015-07-30 18:28 - 2015-07-30 18:28 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dropbox
2015-07-28 21:38 - 2015-07-25 15:07 - 00017856 _____ (Microsoft Corporation) C:\Windows\system32\CompatTelRunner.exe
2015-07-28 21:38 - 2015-07-25 15:04 - 00765440 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll
2015-07-28 21:38 - 2015-07-25 15:04 - 00726528 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
2015-07-28 21:38 - 2015-07-25 15:03 - 01085440 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll
2015-07-28 21:38 - 2015-07-25 15:03 - 00433664 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll
2015-07-28 21:38 - 2015-07-25 15:03 - 00227328 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2015-07-28 21:38 - 2015-07-25 15:03 - 00067584 _____ (Microsoft Corporation) C:\Windows\system32\acmigration.dll
2015-07-28 21:38 - 2015-07-25 14:55 - 01145856 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2015-07-22 18:50 - 2015-07-22 18:50 - 00058661 _____ C:\Windows\SysWOW64\CCCInstall_201507221850580863.log
2015-07-20 20:06 - 2015-07-20 20:06 - 00000000 ____D C:\Users\Wendling\AppData\Local\CEF
2015-07-20 19:15 - 2015-08-03 22:23 - 00001210 _____ C:\Windows\PFRO.log
2015-07-20 19:11 - 2015-07-15 00:19 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\fontsub.dll
2015-07-20 19:11 - 2015-07-15 00:19 - 00046080 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll
2015-07-20 19:11 - 2015-07-15 00:19 - 00041984 _____ (Microsoft Corporation) C:\Windows\system32\lpk.dll
2015-07-20 19:11 - 2015-07-15 00:19 - 00014336 _____ (Microsoft Corporation) C:\Windows\system32\dciman32.dll
2015-07-20 19:11 - 2015-07-14 23:55 - 00070656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fontsub.dll
2015-07-20 19:11 - 2015-07-14 23:55 - 00034304 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll
2015-07-20 19:11 - 2015-07-14 23:55 - 00010240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dciman32.dll
2015-07-20 19:11 - 2015-07-14 23:54 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\lpk.dll
2015-07-20 19:11 - 2015-07-14 22:59 - 00372224 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll
2015-07-20 19:11 - 2015-07-14 22:52 - 00299008 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll
2015-07-20 14:15 - 2015-07-20 14:15 - 00003886 _____ C:\Windows\System32\Tasks\Adobe Acrobat Update Task
2015-07-19 14:30 - 2015-07-19 16:56 - 00000000 ____D C:\Program Files (x86)\RivaTuner Statistics Server
2015-07-19 14:30 - 2015-07-19 14:30 - 00000000 ____D C:\Windows\SysWOW64\directx
2015-07-19 14:30 - 2015-07-19 14:30 - 00000000 ____D C:\Users\Wendling\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\RivaTuner Statistics Server
2015-07-19 14:29 - 2015-07-19 16:56 - 00000000 ____D C:\Program Files (x86)\MSI Afterburner
2015-07-19 14:29 - 2015-07-19 14:29 - 00000000 ____D C:\Users\Wendling\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MSI Afterburner
2015-07-19 14:26 - 2015-07-19 14:26 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Speccy
2015-07-19 14:26 - 2015-07-19 14:26 - 00000000 ____D C:\Program Files\Speccy
2015-07-17 18:36 - 2015-07-22 21:08 - 00000000 ____D C:\Users\Wendling\AppData\Roaming\TS3Client
2015-07-17 18:36 - 2015-07-17 18:36 - 00000967 _____ C:\Users\Public\Desktop\TeamSpeak 3 Client.lnk
2015-07-17 18:36 - 2015-07-17 18:36 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamSpeak 3 Client
2015-07-17 18:36 - 2015-07-17 18:36 - 00000000 ____D C:\Program Files\TeamSpeak 3 Client
2015-07-17 18:33 - 2015-07-17 18:33 - 00000000 ____D C:\Users\Wendling\Tracing
2015-07-15 23:12 - 2015-07-15 23:12 - 00141792 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\amdhcp64.dll
2015-07-15 23:12 - 2015-07-15 23:12 - 00128384 _____ (Advanced Micro Devices, Inc.) C:\Windows\SysWOW64\amdhcp32.dll
2015-07-15 23:12 - 2015-07-15 23:12 - 00107784 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\amdave64.dll
2015-07-15 23:12 - 2015-07-15 23:12 - 00078432 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atimpc64.dll
2015-07-15 23:12 - 2015-07-15 23:12 - 00078432 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\amdpcom64.dll
2015-07-15 23:12 - 2015-07-15 23:12 - 00071704 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atimpc32.dll
2015-07-15 23:12 - 2015-07-15 23:12 - 00071704 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\amdpcom32.dll
2015-07-15 23:11 - 2015-07-15 23:11 - 08893160 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atiumd6a.dll
2015-07-15 23:11 - 2015-07-15 23:11 - 08779872 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atiumd64.dll
2015-07-15 23:11 - 2015-07-15 23:11 - 00120144 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atiu9p64.dll
2015-07-15 23:09 - 2015-07-15 23:09 - 00297672 _____ (Advanced Micro Devices) C:\Windows\system32\Drivers\amdacpksd.sys
2015-07-15 23:06 - 2015-07-15 23:06 - 21622272 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\Drivers\atikmdag.sys
2015-07-15 23:01 - 2015-07-15 23:01 - 47785472 _____ (Advanced Micro Devices Inc.) C:\Windows\system32\amdocl64.dll
2015-07-15 23:01 - 2015-07-15 23:01 - 00235008 _____ C:\Windows\system32\clinfo.exe
2015-07-15 22:59 - 2015-07-15 22:59 - 00065024 _____ (Khronos Group) C:\Windows\system32\OpenCL.dll
2015-07-15 22:59 - 2015-07-15 22:59 - 00059392 _____ (Khronos Group) C:\Windows\SysWOW64\OpenCL.dll
2015-07-15 22:58 - 2015-07-15 22:58 - 27535872 _____ (Advanced Micro Devices Inc.) C:\Windows\system32\amdocl12cl64.dll
2015-07-15 22:35 - 2015-07-15 22:35 - 06477312 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\amdmantle64.dll
2015-07-15 22:35 - 2015-07-15 22:35 - 00127488 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\mantle64.dll
2015-07-15 22:35 - 2015-07-15 22:35 - 00113664 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\mantle32.dll
2015-07-15 22:30 - 2015-07-15 22:30 - 05068288 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\amdmantle32.dll
2015-07-15 22:28 - 2015-07-15 22:28 - 30752256 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\atio6axx.dll
2015-07-15 22:26 - 2015-07-15 22:26 - 00093184 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\mantleaxl64.dll
2015-07-15 22:26 - 2015-07-15 22:26 - 00086528 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\mantleaxl32.dll
2015-07-15 22:25 - 2015-07-15 22:25 - 00050688 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\amdmmcl6.dll
2015-07-15 22:25 - 2015-07-15 22:25 - 00039424 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\amdmmcl.dll
2015-07-15 22:23 - 2015-07-15 22:23 - 03437632 _____ C:\Windows\system32\atiumd6a.cap
2015-07-15 22:22 - 2015-07-15 22:22 - 25299968 _____ (Advanced Micro Devices, Inc.) C:\Windows\SysWOW64\atioglxx.dll
2015-07-15 22:21 - 2015-07-15 22:21 - 15716864 _____ (Advanced Micro Devices Inc.) C:\Windows\system32\aticaldd64.dll
2015-07-15 22:21 - 2015-07-15 22:21 - 00660912 _____ C:\Windows\SysWOW64\atiapfxx.blb
2015-07-15 22:21 - 2015-07-15 22:21 - 00660912 _____ C:\Windows\system32\atiapfxx.blb
2015-07-15 22:21 - 2015-07-15 22:21 - 00367104 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\atiapfxx.exe
2015-07-15 22:21 - 2015-07-15 22:21 - 00062464 _____ (Advanced Micro Devices Inc.) C:\Windows\system32\aticalrt64.dll
2015-07-15 22:21 - 2015-07-15 22:21 - 00055808 _____ (Advanced Micro Devices Inc.) C:\Windows\system32\aticalcl64.dll
2015-07-15 22:21 - 2015-07-15 22:21 - 00052224 _____ (Advanced Micro Devices Inc.) C:\Windows\SysWOW64\aticalrt.dll
2015-07-15 22:21 - 2015-07-15 22:21 - 00049152 _____ (Advanced Micro Devices Inc.) C:\Windows\SysWOW64\aticalcl.dll
2015-07-15 22:20 - 2015-07-15 22:20 - 14302208 _____ (Advanced Micro Devices Inc.) C:\Windows\SysWOW64\aticaldd.dll
2015-07-15 22:18 - 2015-07-15 22:18 - 03471376 _____ C:\Windows\SysWOW64\atiumdva.cap
2015-07-15 22:17 - 2015-07-15 22:17 - 00672768 _____ (AMD) C:\Windows\system32\atieclxx.exe
2015-07-15 22:17 - 2015-07-15 22:17 - 00442368 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\atidemgy.dll
2015-07-15 22:17 - 2015-07-15 22:17 - 00246784 _____ (AMD) C:\Windows\system32\atiesrxx.exe
2015-07-15 22:17 - 2015-07-15 22:17 - 00204800 _____ C:\Windows\system32\amdgfxinfo64.dll
2015-07-15 22:17 - 2015-07-15 22:17 - 00190976 _____ (AMD) C:\Windows\system32\atitmm64.dll
2015-07-15 22:17 - 2015-07-15 22:17 - 00189952 _____ C:\Windows\SysWOW64\amdgfxinfo32.dll
2015-07-15 22:17 - 2015-07-15 22:17 - 00160256 _____ C:\Windows\system32\atieah64.exe
2015-07-15 22:17 - 2015-07-15 22:17 - 00143872 _____ C:\Windows\SysWOW64\atieah32.exe
2015-07-15 22:17 - 2015-07-15 22:17 - 00029696 _____ (AMD) C:\Windows\system32\atimuixx.dll
2015-07-15 22:15 - 2015-07-15 22:15 - 00089088 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atisamu64.dll
2015-07-15 22:15 - 2015-07-15 22:15 - 00080896 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atisamu32.dll
2015-07-15 22:14 - 2015-07-15 22:14 - 00043520 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\Drivers\ati2erec.dll
2015-07-15 22:13 - 2015-07-15 22:13 - 01247744 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\atiadlxx.dll
2015-07-15 22:13 - 2015-07-15 22:13 - 00926720 _____ (Advanced Micro Devices, Inc.) C:\Windows\SysWOW64\atiadlxx.dll
2015-07-15 22:13 - 2015-07-15 22:13 - 00665088 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\Drivers\atikmpag.sys
2015-07-15 22:13 - 2015-07-15 22:13 - 00156672 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atig6txx.dll
2015-07-15 22:13 - 2015-07-15 22:13 - 00075264 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atig6pxx.dll
2015-07-15 22:13 - 2015-07-15 22:13 - 00069632 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atiglpxx.dll
2015-07-15 22:13 - 2015-07-15 22:13 - 00069632 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atiglpxx.dll
2015-07-15 22:12 - 2015-07-15 22:12 - 00102912 _____ C:\Windows\system32\hsa-thunk64.dll
2015-07-15 22:12 - 2015-07-15 22:12 - 00102400 _____ C:\Windows\SysWOW64\hsa-thunk.dll
2015-07-15 07:20 - 2015-07-15 07:20 - 00103424 _____ (Advanced Micro Devices) C:\Windows\system32\DelayAPO.dll
2015-07-15 07:20 - 2015-07-15 07:20 - 00096256 _____ (Advanced Micro Devices) C:\Windows\system32\Drivers\AtihdW76.sys
2015-07-14 23:18 - 2015-08-06 19:57 - 02000005 _____ C:\Windows\WindowsUpdate.log
2015-07-14 23:18 - 2015-08-06 17:55 - 00011173 _____ C:\Windows\setupact.log
2015-07-14 23:18 - 2015-07-14 23:18 - 00000000 _____ C:\Windows\setuperr.log
2015-07-14 20:32 - 2015-07-09 14:58 - 03154944 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2015-07-14 20:32 - 2015-07-09 14:58 - 02603008 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2015-07-14 20:32 - 2015-07-09 14:58 - 00696320 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2015-07-14 20:32 - 2015-07-09 14:58 - 00192000 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
2015-07-14 20:32 - 2015-07-09 14:58 - 00139776 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2015-07-14 20:32 - 2015-07-09 14:58 - 00098304 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
2015-07-14 20:32 - 2015-07-09 14:58 - 00091136 _____ (Microsoft Corporation) C:\Windows\system32\WinSetupUI.dll
2015-07-14 20:32 - 2015-07-09 14:58 - 00037888 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
2015-07-14 20:32 - 2015-07-09 14:58 - 00037376 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
2015-07-14 20:32 - 2015-07-09 14:58 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
2015-07-14 20:32 - 2015-07-09 14:58 - 00012288 _____ (Microsoft Corporation) C:\Windows\system32\wu.upgrade.ps.dll
2015-07-14 20:32 - 2015-07-09 14:43 - 00566784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll
2015-07-14 20:32 - 2015-07-09 14:43 - 00173056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll
2015-07-14 20:32 - 2015-07-09 14:43 - 00093184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll
2015-07-14 20:32 - 2015-07-09 14:43 - 00030208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wups.dll
2015-07-14 20:32 - 2015-07-09 14:42 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe
2015-07-14 20:32 - 2015-06-26 23:47 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2015-07-14 20:32 - 2015-06-26 23:43 - 05923840 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2015-07-14 20:32 - 2015-06-26 22:58 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2015-07-14 20:32 - 2015-06-26 22:39 - 04520448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2015-07-14 20:32 - 2015-06-25 05:57 - 03207168 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2015-07-14 20:32 - 2015-06-17 14:47 - 00404992 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2015-07-14 20:32 - 2015-06-17 14:37 - 00312320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll
2015-07-14 20:32 - 2015-06-09 15:03 - 03180544 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorets.dll
2015-07-14 20:32 - 2015-06-09 15:03 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\RdpGroupPolicyExtension.dll
2015-07-14 20:32 - 2015-06-01 21:07 - 00254976 _____ (Microsoft Corporation) C:\Windows\system32\cewmdm.dll
2015-07-14 20:32 - 2015-06-01 20:47 - 00210432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cewmdm.dll
2015-07-14 20:31 - 2015-07-02 18:21 - 19877376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2015-07-14 20:31 - 2015-07-02 18:08 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2015-07-14 20:31 - 2015-07-02 17:50 - 02279424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2015-07-14 20:31 - 2015-07-02 17:49 - 25193984 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2015-07-14 20:31 - 2015-07-02 17:46 - 00479232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2015-07-14 20:31 - 2015-07-02 17:40 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2015-07-14 20:31 - 2015-07-02 17:23 - 02885632 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2015-07-14 20:31 - 2015-07-02 17:19 - 12855296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2015-07-14 20:31 - 2015-07-02 17:12 - 00615936 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2015-07-14 20:31 - 2015-07-02 16:55 - 01310720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2015-07-14 20:31 - 2015-07-02 16:20 - 14453248 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2015-07-14 20:31 - 2015-07-02 15:59 - 01545728 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2015-07-14 20:29 - 2015-06-25 15:09 - 00389832 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2015-07-14 20:29 - 2015-06-25 14:43 - 00342736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2015-07-14 20:29 - 2015-06-20 17:06 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2015-07-14 20:29 - 2015-06-20 16:50 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2015-07-14 20:29 - 2015-06-20 16:49 - 00584192 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2015-07-14 20:29 - 2015-06-20 16:49 - 00417792 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2015-07-14 20:29 - 2015-06-20 16:49 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2015-07-14 20:29 - 2015-06-20 16:48 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2015-07-14 20:29 - 2015-06-20 16:40 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2015-07-14 20:29 - 2015-06-20 16:39 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2015-07-14 20:29 - 2015-06-20 16:34 - 00816640 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2015-07-14 20:29 - 2015-06-20 16:34 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2015-07-14 20:29 - 2015-06-20 16:34 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2015-07-14 20:29 - 2015-06-20 16:25 - 00968704 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2015-07-14 20:29 - 2015-06-20 16:21 - 00490496 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2015-07-14 20:29 - 2015-06-20 16:13 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2015-07-14 20:29 - 2015-06-20 16:08 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2015-07-14 20:29 - 2015-06-20 16:07 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2015-07-14 20:29 - 2015-06-20 16:05 - 00316928 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2015-07-14 20:29 - 2015-06-20 15:48 - 00801280 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2015-07-14 20:29 - 2015-06-20 15:48 - 00720384 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2015-07-14 20:29 - 2015-06-20 15:46 - 02125824 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2015-07-14 20:29 - 2015-06-20 15:46 - 01359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2015-07-14 20:29 - 2015-06-20 15:26 - 02427392 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2015-07-14 20:29 - 2015-06-20 15:02 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2015-07-14 20:29 - 2015-06-19 15:25 - 00504320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2015-07-14 20:29 - 2015-06-19 15:25 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2015-07-14 20:29 - 2015-06-19 15:24 - 00341504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2015-07-14 20:29 - 2015-06-19 15:24 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2015-07-14 20:29 - 2015-06-19 15:23 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2015-07-14 20:29 - 2015-06-19 15:17 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2015-07-14 20:29 - 2015-06-19 15:16 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2015-07-14 20:29 - 2015-06-19 15:13 - 00664064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2015-07-14 20:29 - 2015-06-19 15:13 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2015-07-14 20:29 - 2015-06-19 15:03 - 00418304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2015-07-14 20:29 - 2015-06-19 14:57 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2015-07-14 20:29 - 2015-06-19 14:53 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2015-07-14 20:29 - 2015-06-19 14:52 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2015-07-14 20:29 - 2015-06-19 14:51 - 00285696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2015-07-14 20:29 - 2015-06-19 14:40 - 02052608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2015-07-14 20:29 - 2015-06-19 14:40 - 00689152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2015-07-14 20:29 - 2015-06-19 14:39 - 01155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2015-07-14 20:29 - 2015-06-19 14:15 - 01951232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2015-07-14 20:29 - 2015-06-19 14:11 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2015-07-14 20:25 - 2015-07-04 15:07 - 02087424 _____ (Microsoft Corporation) C:\Windows\system32\ole32.dll
2015-07-14 20:25 - 2015-07-04 14:48 - 01414656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ole32.dll
2015-07-14 20:25 - 2015-07-01 17:56 - 00155584 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2015-07-14 20:25 - 2015-07-01 17:56 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2015-07-14 20:25 - 2015-07-01 17:49 - 01461760 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2015-07-14 20:25 - 2015-07-01 17:49 - 01216512 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2015-07-14 20:25 - 2015-07-01 17:49 - 00729088 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2015-07-14 20:25 - 2015-07-01 17:49 - 00342016 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2015-07-14 20:25 - 2015-07-01 17:49 - 00315392 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2015-07-14 20:25 - 2015-07-01 17:49 - 00309760 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2015-07-14 20:25 - 2015-07-01 17:49 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2015-07-14 20:25 - 2015-07-01 17:49 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2015-07-14 20:25 - 2015-07-01 17:49 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2015-07-14 20:25 - 2015-07-01 17:49 - 00029184 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2015-07-14 20:25 - 2015-07-01 17:49 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2015-07-14 20:25 - 2015-07-01 17:48 - 00044032 _____ (Microsoft Corporation) C:\Windows\system32\cryptbase.dll
2015-07-14 20:25 - 2015-07-01 17:48 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2015-07-14 20:25 - 2015-07-01 17:47 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe
2015-07-14 20:25 - 2015-07-01 17:47 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2015-07-14 20:25 - 2015-07-01 17:43 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2015-07-14 20:25 - 2015-07-01 17:43 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll
2015-07-14 20:25 - 2015-07-01 17:39 - 00686080 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2015-07-14 20:25 - 2015-07-01 17:30 - 00552960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2015-07-14 20:25 - 2015-07-01 17:30 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2015-07-14 20:25 - 2015-07-01 17:30 - 00248832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2015-07-14 20:25 - 2015-07-01 17:30 - 00221184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2015-07-14 20:25 - 2015-07-01 17:30 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
2015-07-14 20:25 - 2015-07-01 17:30 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2015-07-14 20:25 - 2015-07-01 17:30 - 00036864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptbase.dll
2015-07-14 20:25 - 2015-07-01 17:30 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2015-07-14 20:25 - 2015-07-01 17:30 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
2015-07-14 20:25 - 2015-07-01 17:29 - 00665088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll
2015-07-14 20:25 - 2015-07-01 17:29 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2015-07-14 20:25 - 2015-07-01 17:29 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\auditpol.exe
2015-07-14 20:25 - 2015-07-01 17:27 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msobjs.dll
2015-07-14 20:25 - 2015-07-01 17:26 - 00146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll
2015-07-14 20:25 - 2015-07-01 17:24 - 00686080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll
2015-07-14 20:25 - 2015-07-01 16:27 - 00159232 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys
2015-07-14 20:25 - 2015-07-01 16:26 - 00290816 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys
2015-07-14 20:25 - 2015-07-01 16:26 - 00129024 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys
2015-07-14 20:25 - 2015-06-15 18:50 - 00112064 _____ (Microsoft Corporation) C:\Windows\system32\consent.exe
2015-07-14 20:25 - 2015-06-15 18:45 - 03242496 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll
2015-07-14 20:25 - 2015-06-15 18:45 - 01941504 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll
2015-07-14 20:25 - 2015-06-15 18:45 - 00504320 _____ (Microsoft Corporation) C:\Windows\system32\msihnd.dll
2015-07-14 20:25 - 2015-06-15 18:45 - 00070656 _____ (Microsoft Corporation) C:\Windows\system32\appinfo.dll
2015-07-14 20:25 - 2015-06-15 18:44 - 00128000 _____ (Microsoft Corporation) C:\Windows\system32\msiexec.exe
2015-07-14 20:25 - 2015-06-15 18:43 - 02364416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msi.dll
2015-07-14 20:25 - 2015-06-15 18:43 - 01805824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll
2015-07-14 20:25 - 2015-06-15 18:43 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msihnd.dll
2015-07-14 20:25 - 2015-06-15 18:42 - 00073216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msiexec.exe
2015-07-14 20:25 - 2015-06-15 18:42 - 00025088 _____ (Microsoft Corporation) C:\Windows\system32\msimsg.dll
2015-07-14 20:25 - 2015-06-15 18:37 - 00025088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msimsg.dll
2015-07-14 20:25 - 2015-06-11 14:57 - 06131200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstscax.dll
2015-07-14 20:25 - 2015-06-11 14:57 - 00856064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdvidcrl.dll
2015-07-14 20:25 - 2015-06-11 14:57 - 00053248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tsgqec.dll
2015-07-14 20:25 - 2015-06-11 14:56 - 07077376 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll
2015-07-14 20:25 - 2015-06-11 14:56 - 01057792 _____ (Microsoft Corporation) C:\Windows\system32\rdvidcrl.dll
2015-07-14 20:25 - 2015-06-11 14:56 - 00062976 _____ (Microsoft Corporation) C:\Windows\system32\tsgqec.dll
2015-07-14 20:25 - 2015-06-11 10:15 - 00429568 _____ (Microsoft Corporation) C:\Windows\system32\wksprt.exe
2015-07-13 15:08 - 2015-08-06 21:54 - 00226168 _____ C:\Windows\SysWOW64\PnkBstrB.exe
2015-07-13 15:08 - 2015-07-13 15:12 - 00076888 _____ C:\Windows\SysWOW64\PnkBstrA.exe
2015-07-13 12:19 - 2015-07-13 12:19 - 00169152 _____ C:\Windows\system32\ativce03.dat
2015-07-13 12:19 - 2015-07-13 12:19 - 00167456 _____ C:\Windows\system32\amde31a.dat
2015-07-12 00:54 - 2015-07-14 23:18 - 00000000 ____D C:\Users\Wendling\AppData\Roaming\uTorrent
2015-07-12 00:54 - 2015-07-12 00:54 - 00000857 _____ C:\Users\Wendling\Desktop\µTorrent.lnk
2015-07-12 00:54 - 2015-07-12 00:54 - 00000837 _____ C:\Users\Wendling\AppData\Roaming\Microsoft\Windows\Start Menu\µTorrent.lnk
2015-07-11 21:15 - 2015-07-11 21:15 - 00000000 ____D C:\Users\Wendling\AppData\Local\Native Instruments
2015-07-11 21:13 - 2015-07-11 21:13 - 00000000 ____D C:\Users\Wendling\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\ASIO4ALL v2
2015-07-11 21:13 - 2015-07-11 21:13 - 00000000 ____D C:\Program Files (x86)\ASIO4ALL v2
2015-07-11 21:11 - 2015-07-11 21:11 - 00001044 _____ C:\Users\Public\Desktop\Guitar Rig 5.lnk
2015-07-11 21:11 - 2015-07-11 21:11 - 00000000 __HDC C:\Users\Todos os Usuários\{B7072B15-6E80-42FF-A9AE-4E62AF2B2418}
2015-07-11 21:11 - 2015-07-11 21:11 - 00000000 __HDC C:\ProgramData\{B7072B15-6E80-42FF-A9AE-4E62AF2B2418}
2015-07-11 21:10 - 2015-07-11 21:10 - 00000000 __HDC C:\Users\Todos os Usuários\{CB28D9D3-6B5D-4AFA-BA37-B4AFAAAF71B9}
2015-07-11 21:10 - 2015-07-11 21:10 - 00000000 __HDC C:\Users\Todos os Usuários\{B0CAD5CC-867E-473E-B55F-339F9635A45D}
2015-07-11 21:10 - 2015-07-11 21:10 - 00000000 __HDC C:\ProgramData\{CB28D9D3-6B5D-4AFA-BA37-B4AFAAAF71B9}
2015-07-11 21:10 - 2015-07-11 21:10 - 00000000 __HDC C:\ProgramData\{B0CAD5CC-867E-473E-B55F-339F9635A45D}
2015-07-11 21:09 - 2015-07-11 21:11 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Native Instruments
2015-07-11 21:09 - 2015-07-11 21:11 - 00000000 ____D C:\Program Files\Native Instruments
2015-07-11 21:09 - 2015-07-11 21:11 - 00000000 ____D C:\Program Files\Common Files\Native Instruments
2015-07-11 21:09 - 2015-07-11 21:09 - 00000000 __HDC C:\Users\Todos os Usuários\{95B4F0ED-951F-4D36-B068-5EC1C4C19C14}
2015-07-11 21:09 - 2015-07-11 21:09 - 00000000 __HDC C:\Users\Todos os Usuários\{5A23829C-A66E-47B0-AD50-21A3FFE6C325}
2015-07-11 21:09 - 2015-07-11 21:09 - 00000000 __HDC C:\Users\Todos os Usuários\{30FA7941-4170-4C83-A9A8-FDF01C431704}
2015-07-11 21:09 - 2015-07-11 21:09 - 00000000 __HDC C:\ProgramData\{95B4F0ED-951F-4D36-B068-5EC1C4C19C14}
2015-07-11 21:09 - 2015-07-11 21:09 - 00000000 __HDC C:\ProgramData\{5A23829C-A66E-47B0-AD50-21A3FFE6C325}
2015-07-11 21:09 - 2015-07-11 21:09 - 00000000 __HDC C:\ProgramData\{30FA7941-4170-4C83-A9A8-FDF01C431704}
2015-07-11 21:09 - 2015-07-11 21:09 - 00000000 ____D C:\Users\Todos os Usuários\Native Instruments
2015-07-11 21:09 - 2015-07-11 21:09 - 00000000 ____D C:\ProgramData\Native Instruments
2015-07-11 21:08 - 2015-07-16 18:08 - 00000000 ____D C:\Users\Wendling\AppData\Roaming\DAEMON Tools Lite
2015-07-11 21:08 - 2015-07-11 21:08 - 00283064 _____ (Disc Soft Ltd) C:\Windows\system32\Drivers\dtsoftbus01.sys
2015-07-11 21:08 - 2015-07-11 21:08 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DAEMON Tools Lite
2015-07-11 21:08 - 2015-07-11 21:08 - 00000000 ____D C:\Program Files (x86)\DAEMON Tools Lite
2015-07-11 13:23 - 2015-07-11 13:23 - 00000132 _____ C:\Users\Wendling\AppData\Roaming\Adobe PNG Format CS5 Prefs
2015-07-11 10:38 - 2015-07-11 10:39 - 00001232 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Photoshop CS5 (64 Bit).lnk
2015-07-11 10:38 - 2015-07-11 10:38 - 00001266 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Device Central CS5.lnk
2015-07-11 10:38 - 2015-07-11 10:38 - 00001173 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Bridge CS5.lnk
2015-07-11 10:37 - 2015-07-11 10:37 - 00000000 ____D C:\Program Files (x86)\Adobe Media Player
2015-07-11 10:36 - 2015-07-11 10:36 - 00001523 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe ExtendScript Toolkit CS5.lnk
2015-07-11 10:36 - 2015-07-11 10:36 - 00001357 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Extension Manager CS5.exe.lnk
2015-07-11 10:33 - 2015-07-11 10:33 - 00000000 ____D C:\Users\Wendling\AppData\Roaming\Apple Computer
2015-07-11 10:18 - 2015-07-11 10:18 - 00000000 ____D C:\Users\Todos os Usuários\Apple Computer
2015-07-11 10:18 - 2015-07-11 10:18 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\QuickTime
2015-07-11 10:18 - 2015-07-11 10:18 - 00000000 ____D C:\ProgramData\Apple Computer
2015-07-11 10:18 - 2015-07-11 10:18 - 00000000 ____D C:\Program Files (x86)\QuickTime
2015-07-11 10:04 - 2015-01-30 20:56 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\rdpudd.dll
2015-07-11 10:04 - 2014-12-11 14:47 - 00087040 _____ (Microsoft Corporation) C:\Windows\system32\TSWbPrxy.exe
2015-07-11 10:00 - 2015-07-11 10:00 - 00000000 ____D C:\Windows\system32\appmgmt
2015-07-11 00:15 - 2015-08-06 22:26 - 00000000 ____D C:\Users\Wendling\AppData\Roaming\Skype
2015-07-11 00:15 - 2015-07-17 18:36 - 00000000 ___RD C:\Program Files (x86)\Skype
2015-07-11 00:15 - 2015-07-17 18:36 - 00000000 ____D C:\Users\Todos os Usuários\Skype
2015-07-11 00:15 - 2015-07-17 18:36 - 00000000 ____D C:\ProgramData\Skype
2015-07-11 00:15 - 2015-07-11 00:15 - 00000000 ____D C:\Users\Wendling\AppData\Local\Skype
2015-07-11 00:15 - 2015-07-11 00:15 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
2015-07-11 00:15 - 2013-10-01 23:22 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\TsUsbFlt.sys
2015-07-11 00:15 - 2013-10-01 23:11 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbRedirectionGroupPolicyControl.exe
2015-07-11 00:15 - 2013-10-01 23:08 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbRedirectionGroupPolicyExtension.dll
2015-07-11 00:15 - 2013-10-01 22:48 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\MsRdpWebAccess.dll
2015-07-11 00:15 - 2013-10-01 22:48 - 00018944 _____ (Microsoft Corporation) C:\Windows\system32\wksprtPS.dll
2015-07-11 00:15 - 2013-10-01 22:10 - 00044544 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbGDCoInstaller.dll
2015-07-11 00:15 - 2013-10-01 21:14 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MsRdpWebAccess.dll
2015-07-11 00:15 - 2013-10-01 21:14 - 00017920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wksprtPS.dll
2015-07-11 00:15 - 2013-10-01 20:31 - 01147392 _____ (Microsoft Corporation) C:\Windows\system32\mstsc.exe
2015-07-11 00:15 - 2013-10-01 19:34 - 01068544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstsc.exe
2015-07-11 00:14 - 2015-08-03 19:07 - 00001912 _____ C:\Windows\epplauncher.mif
2015-07-11 00:14 - 2012-08-23 11:10 - 00019456 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdpvideominiport.sys
2015-07-11 00:14 - 2012-08-23 11:08 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\TsUsbGD.sys
2015-07-11 00:14 - 2012-08-23 08:12 - 00192000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdpendp_winip.dll
2015-07-11 00:14 - 2012-08-23 07:51 - 00228864 _____ (Microsoft Corporation) C:\Windows\system32\rdpendp_winip.dll
2015-07-11 00:10 - 2015-04-27 16:23 - 01480192 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2015-07-11 00:10 - 2015-04-27 16:23 - 00229376 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll
2015-07-11 00:10 - 2015-04-27 16:23 - 00188416 _____ (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll
2015-07-11 00:10 - 2015-04-27 16:23 - 00140288 _____ (Microsoft Corporation) C:\Windows\system32\cryptnet.dll
2015-07-11 00:10 - 2015-04-27 16:05 - 00179200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wintrust.dll
2015-07-11 00:10 - 2015-04-27 16:04 - 01174528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll
2015-07-11 00:10 - 2015-04-27 16:04 - 00143872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptsvc.dll
2015-07-11 00:10 - 2015-04-27 16:04 - 00103936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptnet.dll
2015-07-11 00:09 - 2015-05-09 15:26 - 00493504 _____ (Microsoft Corporation) C:\Windows\system32\mcupdate_GenuineIntel.dll
2015-07-11 00:09 - 2015-03-14 00:21 - 01632768 _____ (Microsoft Corporation) C:\Windows\system32\dwmcore.dll
2015-07-11 00:09 - 2015-03-14 00:21 - 00082944 _____ (Microsoft Corporation) C:\Windows\system32\dwmapi.dll
2015-07-11 00:09 - 2015-03-14 00:04 - 01372160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dwmcore.dll
2015-07-11 00:09 - 2015-03-14 00:04 - 00067584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dwmapi.dll
2015-07-10 22:01 - 2015-07-10 22:01 - 00447752 _____ (On2.com) C:\Windows\SysWOW64\vp6vfw.dll
2015-07-10 22:01 - 2015-07-10 22:01 - 00001009 _____ C:\Users\Public\Desktop\The Sims™ 3.lnk
2015-07-10 20:21 - 2015-07-10 20:21 - 00000222 _____ C:\Users\Wendling\Desktop\Hitman Absolution.url
2015-07-10 18:34 - 2015-07-10 18:34 - 00003086 _____ C:\Windows\System32\Tasks\{3AACD3F9-AAF0-4355-AAC2-1896EF527A0E}
2015-07-10 14:36 - 2015-07-31 19:20 - 00000000 ____D C:\$Windows.~BT
2015-07-10 04:40 - 2015-07-10 04:40 - 00833798 _____ C:\Windows\system32\amdicdxx.dat
2015-07-08 16:06 - 2015-07-08 16:42 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-08-06 22:27 - 2015-06-22 22:28 - 00000902 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2015-08-06 22:20 - 2015-06-25 12:20 - 00000913 _____ C:\Windows\Tasks\EPSON XP-211 214 216 Series Update {438ADD9C-7DBA-462A-A4E1-DB3AEBE91D95}.job
2015-08-06 22:20 - 2015-06-25 12:20 - 00000727 _____ C:\Windows\Tasks\EPSON XP-211 214 216 Series Invitation {438ADD9C-7DBA-462A-A4E1-DB3AEBE91D95}.job
2015-08-06 22:20 - 2009-07-14 02:32 - 00000000 ____D C:\Windows\system32\FxsTmp
2015-08-06 21:46 - 2015-07-06 12:35 - 00001024 _____ C:\Windows\Tasks\DropboxUpdateTaskMachineUA.job
2015-08-06 21:42 - 2015-06-22 22:23 - 00001070 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2015-08-06 20:58 - 2015-06-24 13:10 - 00226168 _____ C:\Windows\SysWOW64\PnkBstrB.ex0
2015-08-06 20:48 - 2009-07-14 01:45 - 00031312 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-08-06 20:48 - 2009-07-14 01:45 - 00031312 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-08-06 17:55 - 2015-06-23 19:16 - 00000000 ____D C:\Users\Todos os Usuários\Origin
2015-08-06 17:55 - 2015-06-23 19:16 - 00000000 ____D C:\ProgramData\Origin
2015-08-06 17:48 - 2010-11-21 06:37 - 00705474 _____ C:\Windows\system32\prfh0416.dat
2015-08-06 17:48 - 2010-11-21 06:37 - 00147314 _____ C:\Windows\system32\prfc0416.dat
2015-08-06 17:48 - 2009-07-14 02:13 - 01634498 _____ C:\Windows\system32\PerfStringBackup.INI
2015-08-06 17:43 - 2015-07-06 12:39 - 00000000 ___RD C:\Users\Wendling\Dropbox
2015-08-06 17:43 - 2015-07-06 12:35 - 00000000 ____D C:\Users\Wendling\AppData\Local\Dropbox
2015-08-06 17:43 - 2015-06-23 13:33 - 00000000 ____D C:\Users\Wendling\AppData\Roaming\Raptr
2015-08-06 17:42 - 2015-07-06 12:35 - 00001020 _____ C:\Windows\Tasks\DropboxUpdateTaskMachineCore.job
2015-08-06 17:42 - 2015-06-22 22:23 - 00001066 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2015-08-06 17:42 - 2009-07-14 02:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2015-08-05 20:47 - 2015-06-24 20:19 - 00348360 _____ C:\Windows\SysWOW64\PnkBstrB.xtr
2015-08-03 22:24 - 2009-07-14 00:20 - 00000000 __RHD C:\Users\Default
2015-08-03 22:23 - 2009-07-13 23:34 - 00000215 _____ C:\Windows\system.ini
2015-08-03 21:42 - 2009-07-14 00:20 - 00000000 ___HD C:\Windows\system32\GroupPolicy
2015-08-03 21:42 - 2009-07-14 00:20 - 00000000 ____D C:\Windows\SysWOW64\GroupPolicy
2015-08-03 20:55 - 2015-06-22 22:07 - 00000000 ____D C:\Windows\SysWOW64\RTCOM
2015-08-03 19:20 - 2015-06-23 13:33 - 00000000 ____D C:\Users\Todos os Usuários\AMD
2015-08-03 19:20 - 2015-06-23 13:33 - 00000000 ____D C:\ProgramData\AMD
2015-08-03 19:20 - 2015-06-23 13:31 - 00000000 ____D C:\Program Files\AMD
2015-08-03 19:18 - 2015-06-23 13:30 - 00000000 ____D C:\AMD
2015-07-31 18:51 - 2015-06-22 21:54 - 00000000 ____D C:\Windows\Panther
2015-07-30 18:28 - 2015-07-06 12:35 - 00000000 ____D C:\Program Files (x86)\Dropbox
2015-07-29 16:21 - 2015-06-23 22:37 - 00000000 ___SD C:\Windows\system32\CompatTel
2015-07-28 21:32 - 2015-06-23 13:33 - 00000000 ____D C:\Program Files (x86)\Raptr
2015-07-27 18:14 - 2015-06-24 13:01 - 00000000 ____D C:\Program Files (x86)\Origin
2015-07-25 12:24 - 2009-07-14 00:20 - 00000000 ____D C:\Windows\rescache
2015-07-25 09:27 - 2015-06-24 13:31 - 00000000 ___SD C:\Windows\system32\GWX
2015-07-25 09:17 - 2009-07-14 00:20 - 00000000 ____D C:\Windows\SysWOW64\Dism
2015-07-25 09:17 - 2009-07-14 00:20 - 00000000 ____D C:\Windows\system32\Dism
2015-07-23 18:16 - 2015-06-25 12:58 - 00002178 _____ C:\Users\Wendling\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Microsoft OneDrive.lnk
2015-07-22 18:51 - 2015-06-23 13:33 - 00000000 ____D C:\Program Files (x86)\AMD
2015-07-20 19:15 - 2009-07-14 01:45 - 04959656 _____ C:\Windows\system32\FNTCACHE.DAT
2015-07-20 14:15 - 2015-06-22 22:31 - 00002441 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk
2015-07-19 11:41 - 2015-07-06 12:35 - 00004020 _____ C:\Windows\System32\Tasks\DropboxUpdateTaskMachineUA
2015-07-19 11:41 - 2015-07-06 12:35 - 00003768 _____ C:\Windows\System32\Tasks\DropboxUpdateTaskMachineCore
2015-07-18 12:46 - 2015-06-22 22:25 - 00000000 ____D C:\Users\Wendling\AppData\Local\Adobe
2015-07-18 12:45 - 2015-06-22 22:28 - 00003840 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2015-07-18 12:45 - 2015-06-22 22:11 - 00778416 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2015-07-18 12:45 - 2015-06-22 22:11 - 00142512 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2015-07-18 03:13 - 2015-06-29 13:24 - 00000000 ____D C:\Users\Wendling\AppData\Roaming\vlc
2015-07-17 18:33 - 2015-06-22 22:02 - 00000000 ____D C:\Users\Wendling
2015-07-15 23:12 - 2014-11-20 23:09 - 00100568 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\amdave32.dll
2015-07-15 23:11 - 2015-06-22 23:08 - 10094152 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atidxx32.dll
2015-07-15 23:11 - 2015-06-22 23:08 - 07408936 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atiumdag.dll
2015-07-15 23:11 - 2015-06-22 23:08 - 01193904 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\aticfx32.dll
2015-07-15 23:11 - 2015-06-22 23:08 - 00133016 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atiuxpag.dll
2015-07-15 23:11 - 2015-06-22 23:08 - 00102616 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atiu9pag.dll
2015-07-15 23:11 - 2014-11-20 23:44 - 11948704 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atidxx64.dll
2015-07-15 23:11 - 2014-11-20 23:44 - 01445224 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\aticfx64.dll
2015-07-15 23:11 - 2014-11-20 23:44 - 00152056 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atiuxp64.dll
2015-07-15 23:11 - 2014-11-20 23:43 - 07929616 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atiumdva.dll
2015-07-15 23:00 - 2014-11-20 23:32 - 39714816 _____ (Advanced Micro Devices Inc.) C:\Windows\SysWOW64\amdocl.dll
2015-07-15 22:57 - 2015-06-22 22:55 - 22318592 _____ (Advanced Micro Devices Inc.) C:\Windows\SysWOW64\amdocl12cl.dll
2015-07-15 22:37 - 2015-06-22 22:23 - 00004066 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2015-07-15 22:37 - 2015-06-22 22:23 - 00003814 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2015-07-15 22:13 - 2014-11-20 23:09 - 00926720 _____ (Advanced Micro Devices, Inc.) C:\Windows\SysWOW64\atiadlxy.dll
2015-07-15 22:13 - 2014-11-20 23:08 - 00141824 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atigktxx.dll
2015-07-15 22:12 - 2015-06-22 22:21 - 00865792 _____ (AMD) C:\Windows\system32\coinst_15.20.dll
2015-07-15 00:14 - 2015-06-22 22:30 - 00000000 ____D C:\Users\Todos os Usuários\Microsoft Help
2015-07-15 00:14 - 2015-06-22 22:30 - 00000000 ____D C:\ProgramData\Microsoft Help
2015-07-15 00:10 - 2015-06-23 23:10 - 00000000 ____D C:\Windows\system32\MRT
2015-07-14 23:18 - 2015-06-23 19:25 - 00000000 ____D C:\Program Files (x86)\Steam
2015-07-14 13:32 - 2009-07-14 02:08 - 00032586 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2015-07-13 15:22 - 2015-07-03 22:54 - 00076152 _____ C:\Windows\system32\PnkBstrA.exe
2015-07-11 21:08 - 2015-06-22 22:39 - 00000000 ____D C:\Users\Todos os Usuários\DAEMON Tools Lite
2015-07-11 21:08 - 2015-06-22 22:39 - 00000000 ____D C:\ProgramData\DAEMON Tools Lite
2015-07-11 13:03 - 2015-06-22 22:13 - 00000000 ____D C:\Users\Wendling\AppData\Roaming\Adobe
2015-07-11 10:39 - 2015-07-01 22:04 - 00000000 ____D C:\Program Files\Adobe
2015-07-11 10:39 - 2015-06-22 22:31 - 00000000 ____D C:\Program Files (x86)\Adobe
2015-07-11 10:38 - 2015-07-01 22:06 - 00000000 ____D C:\Users\Todos os Usuários\regid.1986-12.com.adobe
2015-07-11 10:38 - 2015-07-01 22:06 - 00000000 ____D C:\ProgramData\regid.1986-12.com.adobe
2015-07-11 10:38 - 2015-07-01 22:04 - 00000000 ____D C:\Program Files\Common Files\Adobe
2015-07-11 10:38 - 2015-06-22 22:31 - 00000000 ____D C:\Users\Todos os Usuários\Adobe
2015-07-11 10:38 - 2015-06-22 22:31 - 00000000 ____D C:\ProgramData\Adobe
2015-07-11 10:37 - 2015-07-01 22:04 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe
2015-07-11 00:32 - 2009-07-14 00:20 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories
2015-07-11 00:31 - 2015-06-23 22:37 - 00000000 ____D C:\Windows\system32\appraiser
2015-07-11 00:31 - 2009-07-14 00:20 - 00000000 ____D C:\Windows\PolicyDefinitions
2015-07-11 00:17 - 2015-06-23 13:32 - 01598884 _____ C:\Windows\SysWOW64\PerfStringBackup.INI
2015-07-11 00:07 - 2015-06-24 13:31 - 00000000 ___SD C:\Windows\SysWOW64\GWX
2015-07-10 22:01 - 2015-06-25 12:20 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2015-07-10 22:01 - 2009-07-14 02:32 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
2015-07-10 20:21 - 2015-07-02 12:33 - 00000000 ____D C:\Users\Wendling\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam
2015-07-08 19:09 - 2015-06-22 22:21 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service

==================== Files in the root of some directories =======

2015-08-03 21:40 - 2015-08-03 21:41 - 4184064 _____ (BrightFort LLC ) C:\Program Files (x86)\spywareblastersetup52.exe
2015-07-11 13:23 - 2015-07-11 13:23 - 0000132 _____ () C:\Users\Wendling\AppData\Roaming\Adobe PNG Format CS5 Prefs
2015-07-01 22:08 - 2015-07-01 22:08 - 0007605 _____ () C:\Users\Wendling\AppData\Local\Resmon.ResmonCfg

Some files in TEMP:
====================
C:\Users\Wendling\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmp5wo1gc.dll
C:\Users\Wendling\AppData\Local\Temp\Quarantine.exe
C:\Users\Wendling\AppData\Local\Temp\sqlite3.dll


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\dnsapi.dll => File is digitally signed
C:\Windows\SysWOW64\dnsapi.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2015-08-06 19:15

==================== End of log ============================

Publicité


Signaler le contenu de ce document

Publicité