cjoint

Publicité


Publicité

Format du document : text/plain

Prévisualisation

ÿþOTL logfile created on: 14/08/2015 01:58:52 - Run 1
OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\Gsnak\Downloads
64bit- Professional (Version = 6.2.9200) - Type = NTWorkstation
Internet Explorer (Version = 9.11.10240.16384)
Locale: 00000416 | Country: Brasil | Language: PTB | Date Format: dd/MM/yyyy

3,95 Gb Total Physical Memory | 2,43 Gb Available Physical Memory | 61,44% Memory free
4,64 Gb Paging File | 3,15 Gb Available in Paging File | 67,86% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 170,30 Gb Total Space | 34,26 Gb Free Space | 20,12% Space Free | Partition Type: NTFS
Drive D: | 278,96 Gb Total Space | 20,15 Gb Free Space | 7,22% Space Free | Partition Type: NTFS

Computer Name: GSNAKY | User Name: Gsnak | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users | Include 64bit Scans
Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days

[color=#E56717]========== Processes (SafeList) ==========[/color]

PRC - File not found --
PRC - [2015/08/14 01:56:29 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\Gsnak\Downloads\OTL.exe
PRC - [2015/08/08 16:42:09 | 006,109,776 | ---- | M] (AVAST Software) -- C:\Arquivos de Programas\AVAST Software\Avast\AvastUI.exe
PRC - [2015/08/08 16:41:58 | 000,146,600 | ---- | M] (AVAST Software) -- C:\Arquivos de Programas\AVAST Software\Avast\AvastSvc.exe
PRC - [2015/08/07 17:27:46 | 003,907,152 | ---- | M] (Tonec Inc.) -- C:\Program Files (x86)\Internet Download Manager\IDMan.exe
PRC - [2015/08/07 00:59:26 | 000,377,000 | ---- | M] (Mozilla Corporation) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe
PRC - [2015/07/22 15:33:12 | 000,680,112 | ---- | M] (Adobe Systems Incorporated) -- C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ElevationManager\AdobeUpdateService.exe
PRC - [2015/07/07 20:12:28 | 000,082,128 | ---- | M] (Adobe Systems Incorporated) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
PRC - [2015/02/04 07:05:36 | 000,269,848 | ---- | M] (Tonec Inc.) -- C:\Program Files (x86)\Internet Download Manager\IEMonitor.exe


[color=#E56717]========== Modules (No Company Name) ==========[/color]

MOD - [2015/08/08 16:42:17 | 040,540,672 | ---- | M] () -- C:\Arquivos de Programas\AVAST Software\Avast\libcef.dll
MOD - [2015/08/08 16:42:04 | 000,102,864 | ---- | M] () -- C:\Arquivos de Programas\AVAST Software\Avast\log.dll
MOD - [2015/08/08 16:41:59 | 000,123,976 | ---- | M] () -- C:\Arquivos de Programas\AVAST Software\Avast\JsonRpcServer.dll


[color=#E56717]========== Services (SafeList) ==========[/color]

SRV:[b]64bit:[/b] - File not found [Auto | Stopped] -- C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe -- (RtkAudioService)
SRV:[b]64bit:[/b] - [2015/08/04 09:00:50 | 001,031,680 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\SensorDataService.exe -- (SensorDataService)
SRV:[b]64bit:[/b] - [2015/08/04 09:00:24 | 001,203,200 | ---- | M] (Microsoft Corporation) [On_Demand | Unknown] -- C:\Windows\SysNative\Unistore.dll -- (UnistoreSvc)
SRV:[b]64bit:[/b] - [2015/08/04 09:00:24 | 001,169,408 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\SysNative\dosvc.dll -- (DoSvc)
SRV:[b]64bit:[/b] - [2015/08/04 09:00:24 | 000,343,040 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\usocore.dll -- (UsoSvc)
SRV:[b]64bit:[/b] - [2015/08/04 09:00:24 | 000,148,992 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\tetheringservice.dll -- (icssvc)
SRV:[b]64bit:[/b] - [2015/08/04 09:00:23 | 000,808,856 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\CoreMessaging.dll -- (CoreMessagingRegistrar)
SRV:[b]64bit:[/b] - [2015/08/04 09:00:23 | 000,658,568 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\ClipSVC.dll -- (ClipSVC)
SRV:[b]64bit:[/b] - [2015/07/30 01:42:34 | 001,643,872 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\diagtrack.dll -- (DiagTrack)
SRV:[b]64bit:[/b] - [2015/07/30 00:53:46 | 000,503,808 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\tileobjserver.dll -- (tiledatamodelsvc)
SRV:[b]64bit:[/b] - [2015/07/30 00:46:28 | 000,593,920 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\wcmsvc.dll -- (Wcmsvc)
SRV:[b]64bit:[/b] - [2015/07/30 00:44:49 | 000,280,064 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\AudioEndpointBuilder.dll -- (AudioEndpointBuilder)
SRV:[b]64bit:[/b] - [2015/07/30 00:44:28 | 000,229,376 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\SensorService.dll -- (SensorService)
SRV:[b]64bit:[/b] - [2015/07/30 00:41:58 | 000,988,672 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\RDXService.dll -- (RetailDemo)
SRV:[b]64bit:[/b] - [2015/07/30 00:40:37 | 002,178,560 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\AppXDeploymentServer.dll -- (AppXSvc)
SRV:[b]64bit:[/b] - [2015/07/30 00:38:27 | 001,420,288 | ---- | M] (Microsoft Corporation) [On_Demand | Unknown] -- C:\Windows\SysNative\UserDataService.dll -- (UserDataSvc)
SRV:[b]64bit:[/b] - [2015/07/10 13:48:58 | 000,200,192 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\appmgmts.dll -- (AppMgmt)
SRV:[b]64bit:[/b] - [2015/07/10 08:01:10 | 000,621,056 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\AppReadiness.dll -- (AppReadiness)
SRV:[b]64bit:[/b] - [2015/07/10 08:01:10 | 000,504,320 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\WalletService.dll -- (WalletService)
SRV:[b]64bit:[/b] - [2015/07/10 08:01:10 | 000,074,752 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\wiarpc.dll -- (WiaRpc)
SRV:[b]64bit:[/b] - [2015/07/10 08:00:41 | 000,167,424 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\NcaSvc.dll -- (NcaSvc)
SRV:[b]64bit:[/b] - [2015/07/10 08:00:38 | 001,844,736 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\workfolderssvc.dll -- (workfolderssvc)
SRV:[b]64bit:[/b] - [2015/07/10 08:00:36 | 000,115,200 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\WINDOWS\SysNative\IEEtwCollector.exe -- (IEEtwCollectorService)
SRV:[b]64bit:[/b] - [2015/07/10 08:00:20 | 000,749,056 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\lsm.dll -- (LSM)
SRV:[b]64bit:[/b] - [2015/07/10 08:00:16 | 000,075,264 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\NcdAutoSetup.dll -- (NcdAutoSetup)
SRV:[b]64bit:[/b] - [2015/07/10 08:00:10 | 000,186,368 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\NetSetupSvc.dll -- (NetSetupSvc)
SRV:[b]64bit:[/b] - [2015/07/10 08:00:09 | 000,526,336 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\bisrv.dll -- (BrokerInfrastructure)
SRV:[b]64bit:[/b] - [2015/07/10 08:00:09 | 000,337,408 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\ncbservice.dll -- (NcbService)
SRV:[b]64bit:[/b] - [2015/07/10 08:00:09 | 000,289,280 | ---- | M] (Microsoft Corporation) [On_Demand | Unknown] -- C:\Windows\SysNative\PimIndexMaintenance.dll -- (PimIndexMaintenanceSvc)
SRV:[b]64bit:[/b] - [2015/07/10 08:00:09 | 000,049,152 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\wpnservice.dll -- (WpnService)
SRV:[b]64bit:[/b] - [2015/07/10 08:00:09 | 000,033,280 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\DevQueryBroker.dll -- (DevQueryBroker)
SRV:[b]64bit:[/b] - [2015/07/10 08:00:09 | 000,027,136 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\lfsvc.dll -- (lfsvc)
SRV:[b]64bit:[/b] - [2015/07/10 08:00:07 | 002,674,176 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\Windows.StateRepository.dll -- (StateRepository)
SRV:[b]64bit:[/b] - [2015/07/10 08:00:07 | 001,149,440 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\XblGameSave.dll -- (XblGameSave)
SRV:[b]64bit:[/b] - [2015/07/10 08:00:07 | 001,019,392 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\XboxNetApiSvc.dll -- (XboxNetApiSvc)
SRV:[b]64bit:[/b] - [2015/07/10 08:00:07 | 000,512,000 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\ngcsvc.dll -- (NgcSvc)
SRV:[b]64bit:[/b] - [2015/07/10 08:00:07 | 000,268,800 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\NgcCtnrSvc.dll -- (NgcCtnrSvc)
SRV:[b]64bit:[/b] - [2015/07/10 08:00:07 | 000,062,464 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\SysNative\moshost.dll -- (MapsBroker)
SRV:[b]64bit:[/b] - [2015/07/10 08:00:07 | 000,023,040 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\AJRouter.dll -- (AJRouter)
SRV:[b]64bit:[/b] - [2015/07/10 08:00:07 | 000,021,504 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\LicenseManagerSvc.dll -- (LicenseManager)
SRV:[b]64bit:[/b] - [2015/07/10 08:00:06 | 000,134,144 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\cdpsvc.dll -- (CDPSvc)
SRV:[b]64bit:[/b] - [2015/07/10 08:00:06 | 000,087,040 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\embeddedmodesvc.dll -- (embeddedmode)
SRV:[b]64bit:[/b] - [2015/07/10 08:00:03 | 003,467,784 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\WSService.dll -- (WSService)
SRV:[b]64bit:[/b] - [2015/07/10 08:00:02 | 000,918,016 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\XblAuthManager.dll -- (XblAuthManager)
SRV:[b]64bit:[/b] - [2015/07/10 08:00:02 | 000,836,096 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\netlogon.dll -- (Netlogon)
SRV:[b]64bit:[/b] - [2015/07/10 08:00:02 | 000,322,048 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\vaultsvc.dll -- (VaultSvc)
SRV:[b]64bit:[/b] - [2015/07/10 08:00:02 | 000,055,808 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\efssvc.dll -- (EFS)
SRV:[b]64bit:[/b] - [2015/07/10 08:00:01 | 002,093,056 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\wlidsvc.dll -- (wlidsvc)
SRV:[b]64bit:[/b] - [2015/07/10 08:00:01 | 000,096,256 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\keyiso.dll -- (KeyIso)
SRV:[b]64bit:[/b] - [2015/07/10 08:00:01 | 000,027,648 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\wephostsvc.dll -- (WEPHOSTSVC)
SRV:[b]64bit:[/b] - [2015/07/10 08:00:00 | 000,717,312 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\usermgr.dll -- (UserManager)
SRV:[b]64bit:[/b] - [2015/07/10 08:00:00 | 000,181,760 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\ScDeviceEnum.dll -- (ScDeviceEnum)
SRV:[b]64bit:[/b] - [2015/07/10 07:59:59 | 000,296,960 | ---- | M] (Microsoft Corporation) [Auto | Unknown] -- C:\Windows\SysNative\APHostService.dll -- (OneSyncSvc)
SRV:[b]64bit:[/b] - [2015/07/10 07:59:59 | 000,196,096 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\dcpsvc.dll -- (DcpSvc)
SRV:[b]64bit:[/b] - [2015/07/10 07:59:59 | 000,027,136 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe -- (diagnosticshub.standardcollector.service)
SRV:[b]64bit:[/b] - [2015/07/10 07:59:58 | 000,143,872 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\dssvc.dll -- (DsSvc)
SRV:[b]64bit:[/b] - [2015/07/10 07:59:58 | 000,039,856 | ---- | M] (Microsoft Corporation) [On_Demand | Unknown] -- C:\Windows\SysNative\svchost.exe -- (UserDataSvc_Session1)
SRV:[b]64bit:[/b] - [2015/07/10 07:59:58 | 000,039,856 | ---- | M] (Microsoft Corporation) [On_Demand | Unknown] -- C:\Windows\SysNative\svchost.exe -- (UnistoreSvc_Session1)
SRV:[b]64bit:[/b] - [2015/07/10 07:59:58 | 000,039,856 | ---- | M] (Microsoft Corporation) [On_Demand | Unknown] -- C:\Windows\SysNative\svchost.exe -- (PimIndexMaintenanceSvc_Session1)
SRV:[b]64bit:[/b] - [2015/07/10 07:59:58 | 000,039,856 | ---- | M] (Microsoft Corporation) [Auto | Unknown] -- C:\Windows\SysNative\svchost.exe -- (OneSyncSvc_Session1)
SRV:[b]64bit:[/b] - [2015/07/10 07:59:57 | 000,405,504 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\das.dll -- (DeviceAssociationService)
SRV:[b]64bit:[/b] - [2015/07/10 07:59:57 | 000,237,568 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\DeviceSetupManager.dll -- (DsmSvc)
SRV:[b]64bit:[/b] - [2015/07/10 07:59:56 | 000,019,968 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\smphost.dll -- (smphost)
SRV:[b]64bit:[/b] - [2015/07/10 07:59:55 | 000,118,784 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\fhsvc.dll -- (fhsvc)
SRV:[b]64bit:[/b] - [2015/07/10 07:59:55 | 000,013,824 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\svsvc.dll -- (svsvc)
SRV:[b]64bit:[/b] - [2015/07/10 07:59:54 | 000,275,456 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\EnterpriseAppMgmtSvc.dll -- (EntAppSvc)
SRV:[b]64bit:[/b] - [2015/07/10 07:59:53 | 000,267,776 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\Windows.Internal.Management.dll -- (DmEnrollmentSvc)
SRV:[b]64bit:[/b] - [2015/07/10 07:59:53 | 000,063,488 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\SysNative\dmwappushsvc.dll -- (dmwappushservice)
SRV:[b]64bit:[/b] - [2015/07/10 07:59:51 | 000,583,680 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\SmsRouterSvc.dll -- (SmsRouter)
SRV:[b]64bit:[/b] - [2015/07/10 07:59:50 | 000,550,400 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\netprofmsvc.dll -- (netprofm)
SRV:[b]64bit:[/b] - [2015/07/10 07:59:50 | 000,379,904 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\SystemEventsBrokerServer.dll -- (SystemEventsBroker)
SRV:[b]64bit:[/b] - [2015/07/10 07:59:50 | 000,167,936 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\TimeBrokerServer.dll -- (TimeBroker)
SRV:[b]64bit:[/b] - [2015/07/10 07:59:48 | 000,506,880 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\icsvc.dll -- (vmicvss)
SRV:[b]64bit:[/b] - [2015/07/10 07:59:48 | 000,506,880 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\icsvc.dll -- (vmicvmsession)
SRV:[b]64bit:[/b] - [2015/07/10 07:59:48 | 000,506,880 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\icsvc.dll -- (vmictimesync)
SRV:[b]64bit:[/b] - [2015/07/10 07:59:48 | 000,506,880 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\icsvc.dll -- (vmicshutdown)
SRV:[b]64bit:[/b] - [2015/07/10 07:59:48 | 000,506,880 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\icsvc.dll -- (vmicrdv)
SRV:[b]64bit:[/b] - [2015/07/10 07:59:48 | 000,506,880 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\icsvc.dll -- (vmickvpexchange)
SRV:[b]64bit:[/b] - [2015/07/10 07:59:48 | 000,506,880 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\icsvc.dll -- (vmicheartbeat)
SRV:[b]64bit:[/b] - [2015/07/10 07:59:48 | 000,506,880 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\icsvc.dll -- (vmicguestinterface)
SRV:[b]64bit:[/b] - [2015/07/10 07:59:37 | 003,337,728 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\spool\drivers\x64\3\PrintConfig.dll -- (PrintNotify)
SRV:[b]64bit:[/b] - [2015/07/10 07:59:36 | 000,326,144 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\BthHFSrv.dll -- (BthHFSrv)
SRV - [2015/08/08 16:41:58 | 000,146,600 | ---- | M] (AVAST Software) [Auto | Running] -- C:\Arquivos de Programas\AVAST Software\Avast\AvastSvc.exe -- (avast! Antivirus)
SRV - [2015/08/07 00:59:25 | 000,148,136 | ---- | M] (Mozilla Foundation) [On_Demand | Stopped] -- C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance)
SRV - [2015/08/04 10:28:54 | 000,237,736 | ---- | M] (Synaptics Incorporated) [Auto | Running] -- C:\Arquivos de Programas\Synaptics\SynTP\SynTPEnhService.exe -- (SynTPEnhService)
SRV - [2015/08/04 09:00:24 | 000,925,696 | ---- | M] (Microsoft Corporation) [On_Demand | Unknown] -- C:\Windows\syswow64\Unistore.dll -- (UnistoreSvc)
SRV - [2015/08/04 09:00:23 | 000,510,976 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\syswow64\CoreMessaging.dll -- (CoreMessagingRegistrar)
SRV - [2015/07/22 15:33:12 | 000,680,112 | ---- | M] (Adobe Systems Incorporated) [Auto | Running] -- C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ElevationManager\AdobeUpdateService.exe -- (AdobeUpdateService)
SRV - [2015/07/10 08:00:30 | 000,022,528 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\syswow64\lfsvc.dll -- (lfsvc)
SRV - [2015/07/10 08:00:29 | 002,049,024 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\syswow64\Windows.StateRepository.dll -- (StateRepository)
SRV - [2015/07/10 08:00:24 | 000,017,920 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\syswow64\smphost.dll -- (smphost)
SRV - [2015/07/10 08:00:23 | 000,193,024 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\syswow64\Windows.Internal.Management.dll -- (DmEnrollmentSvc)
SRV - [2015/07/10 07:59:37 | 003,337,728 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\WINDOWS\system32\spool\drivers\x64\3\PrintConfig.dll -- (PrintNotify)
SRV - [2015/07/07 20:12:28 | 000,082,128 | ---- | M] (Adobe Systems Incorporated) [Auto | Running] -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe -- (AdobeARMservice)
SRV - [2015/06/18 09:57:18 | 001,268,568 | ---- | M] (Disc Soft Ltd) [On_Demand | Stopped] -- C:\Arquivos de Programas\DAEMON Tools Lite\DiscSoftBusService.exe -- (Disc Soft Lite Bus Service)
SRV - [2015/06/01 21:00:40 | 000,290,224 | ---- | M] (Intel Corporation) [On_Demand | Stopped] -- C:\Windows\syswow64\IntelCpHeciSvc.exe -- (cphs)


[color=#E56717]========== Driver Services (SafeList) ==========[/color]

DRV:[b]64bit:[/b] - [2015/08/13 14:40:15 | 001,048,344 | ---- | M] (AVAST Software) [File_System | System | Running] -- C:\Windows\SysNative\drivers\aswsnx.sys -- (aswSnx)
DRV:[b]64bit:[/b] - [2015/08/09 20:37:51 | 000,206,080 | ---- | M] (DEVGURU Co., LTD.(www.devguru.co.kr)) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ssudserd.sys -- (ssudserd)
DRV:[b]64bit:[/b] - [2015/08/08 16:42:20 | 000,447,944 | ---- | M] (AVAST Software) [File_System | System | Running] -- C:\Windows\SysNative\drivers\aswSP.sys -- (aswSP)
DRV:[b]64bit:[/b] - [2015/08/08 16:42:20 | 000,274,808 | ---- | M] (AVAST Software) [Kernel | Boot | Running] -- C:\WINDOWS\SysNative\drivers\aswVmm.sys -- (aswVmm)
DRV:[b]64bit:[/b] - [2015/08/08 16:42:20 | 000,150,672 | ---- | M] (AVAST Software) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\aswStm.sys -- (aswStm)
DRV:[b]64bit:[/b] - [2015/08/08 16:42:20 | 000,090,968 | ---- | M] (AVAST Software) [File_System | Auto | Running] -- C:\Windows\SysNative\drivers\aswMonFlt.sys -- (aswMonFlt)
DRV:[b]64bit:[/b] - [2015/08/08 16:42:20 | 000,065,224 | ---- | M] (AVAST Software) [Kernel | Boot | Running] -- C:\WINDOWS\SysNative\drivers\aswRvrt.sys -- (aswRvrt)
DRV:[b]64bit:[/b] - [2015/08/08 16:42:20 | 000,028,656 | ---- | M] (AVAST Software) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\aswHwid.sys -- (aswHwid)
DRV:[b]64bit:[/b] - [2015/08/08 16:42:19 | 000,093,528 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\aswRdr2.sys -- (aswRdr)
DRV:[b]64bit:[/b] - [2015/08/08 01:06:15 | 000,030,264 | ---- | M] (Disc Soft Ltd) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\dtlitescsibus.sys -- (dtlitescsibus)
DRV:[b]64bit:[/b] - [2015/08/04 10:28:52 | 000,606,376 | ---- | M] (Synaptics Incorporated) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\SynTP.sys -- (SynTP)
DRV:[b]64bit:[/b] - [2015/08/04 10:28:45 | 000,033,960 | ---- | M] (Synaptics Incorporated) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Smb_driver_Intel.sys -- (SmbDrvI)
DRV:[b]64bit:[/b] - [2015/08/04 10:28:45 | 000,033,448 | ---- | M] (Synaptics Incorporated) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\Smb_driver_AMDASF.sys -- (SmbDrv)
DRV:[b]64bit:[/b] - [2015/08/04 09:00:24 | 000,934,752 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\WINDOWS\SysNative\drivers\refsv1.sys -- (ReFSv1)
DRV:[b]64bit:[/b] - [2015/08/04 09:00:24 | 000,061,280 | ---- | M] (Microsoft Corporation) [Kernel | System | Stopped] -- C:\Windows\SysNative\drivers\dam.sys -- (dam)
DRV:[b]64bit:[/b] - [2015/08/04 09:00:23 | 000,516,960 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\USBHUB3.SYS -- (USBHUB3)
DRV:[b]64bit:[/b] - [2015/08/04 09:00:23 | 000,067,072 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\usbser.sys -- (usbser)
DRV:[b]64bit:[/b] - [2015/08/04 09:00:23 | 000,046,080 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\UcmUcsi.sys -- (UcmUcsi)
DRV:[b]64bit:[/b] - [2015/07/30 00:44:26 | 000,065,536 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bthhfenum.sys -- (BthHFEnum)
DRV:[b]64bit:[/b] - [2015/07/10 13:49:44 | 000,038,752 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\terminpt.sys -- (terminpt)
DRV:[b]64bit:[/b] - [2015/07/10 13:49:00 | 000,029,536 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\rdpvideominiport.sys -- (RdpVideoMiniport)
DRV:[b]64bit:[/b] - [2015/07/10 08:01:20 | 000,029,536 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\WpdUpFltr.sys -- (WpdUpFltr)
DRV:[b]64bit:[/b] - [2015/07/10 08:00:36 | 000,052,264 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\wpcfltr.sys -- (wpcfltr)
DRV:[b]64bit:[/b] - [2015/07/10 08:00:14 | 000,380,768 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\clfs.sys -- (CLFS)
DRV:[b]64bit:[/b] - [2015/07/10 08:00:14 | 000,215,552 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\ahcache.sys -- (ahcache)
DRV:[b]64bit:[/b] - [2015/07/10 08:00:10 | 000,106,520 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\WindowsTrustedRT.sys -- (WindowsTrustedRT)
DRV:[b]64bit:[/b] - [2015/07/10 08:00:10 | 000,061,952 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\UcmCx.sys -- (UcmCx0101)
DRV:[b]64bit:[/b] - [2015/07/10 08:00:10 | 000,031,072 | ---- | M] (Microsoft Corporation) [Recognizer | Boot | Unknown] -- C:\WINDOWS\SysNative\drivers\fs_rec.sys -- (Fs_Rec)
DRV:[b]64bit:[/b] - [2015/07/10 08:00:09 | 000,200,544 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\VerifierExt.sys -- (VerifierExt)
DRV:[b]64bit:[/b] - [2015/07/10 08:00:09 | 000,153,440 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\wfplwfs.sys -- (WFPLWFS)
DRV:[b]64bit:[/b] - [2015/07/10 08:00:09 | 000,061,952 | ---- | M] (Microsoft Corporation) [File_System | Auto | Running] -- C:\Windows\SysNative\drivers\storqosflt.sys -- (storqosflt)
DRV:[b]64bit:[/b] - [2015/07/10 08:00:09 | 000,041,984 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\condrv.sys -- (condrv)
DRV:[b]64bit:[/b] - [2015/07/10 08:00:09 | 000,026,624 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ioqos.sys -- (IoQos)
DRV:[b]64bit:[/b] - [2015/07/10 08:00:04 | 000,048,128 | ---- | M] (Microsoft Corporation) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\mmcss.sys -- (MMCSS)
DRV:[b]64bit:[/b] - [2015/07/10 08:00:00 | 000,245,088 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ufx01000.sys -- (Ufx01000)
DRV:[b]64bit:[/b] - [2015/07/10 08:00:00 | 000,159,072 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\msgpioclx.sys -- (GPIOClx0101)
DRV:[b]64bit:[/b] - [2015/07/10 08:00:00 | 000,077,664 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\SpbCx.sys -- (SpbCx)
DRV:[b]64bit:[/b] - [2015/07/10 08:00:00 | 000,074,592 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\SerCx.sys -- (SerCx)
DRV:[b]64bit:[/b] - [2015/07/10 08:00:00 | 000,057,696 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\urscx01000.sys -- (UrsCx01000)
DRV:[b]64bit:[/b] - [2015/07/10 08:00:00 | 000,039,264 | ---- | M] (Microsoft Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\SysNative\drivers\cnghwassist.sys -- (cnghwassist)
DRV:[b]64bit:[/b] - [2015/07/10 07:59:59 | 000,155,488 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\SerCx2.sys -- (SerCx2)
DRV:[b]64bit:[/b] - [2015/07/10 07:59:59 | 000,088,928 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\EhStorClass.sys -- (EhStorClass)
DRV:[b]64bit:[/b] - [2015/07/10 07:59:59 | 000,011,776 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\mshidumdf.sys -- (mshidumdf)
DRV:[b]64bit:[/b] - [2015/07/10 07:59:58 | 000,199,008 | ---- | M] (Microsoft Corporation) [File_System | Boot | Running] -- C:\WINDOWS\SysNative\drivers\wof.sys -- (Wof)
DRV:[b]64bit:[/b] - [2015/07/10 07:59:56 | 000,008,192 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\gpuenergydrv.sys -- (GpuEnergyDrv)
DRV:[b]64bit:[/b] - [2015/07/10 07:59:53 | 000,129,024 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\NdisImPlatform.sys -- (NdisImPlatform)
DRV:[b]64bit:[/b] - [2015/07/10 07:59:53 | 000,124,928 | ---- | M] (Microsoft Corporation) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\Ndu.sys -- (Ndu)
DRV:[b]64bit:[/b] - [2015/07/10 07:59:52 | 000,020,992 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\NdisVirtualBus.sys -- (NdisVirtualBus)
DRV:[b]64bit:[/b] - [2015/07/10 07:59:51 | 000,685,056 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\WdiWiFi.sys -- (wdiwifi)
DRV:[b]64bit:[/b] - [2015/07/10 07:59:50 | 000,119,648 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\WdNisDrv.sys -- (WdNisDrv)
DRV:[b]64bit:[/b] - [2015/07/10 07:59:50 | 000,082,432 | ---- | M] (Microsoft Corporation) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\mslldp.sys -- (MsLldp)
DRV:[b]64bit:[/b] - [2015/07/10 07:59:48 | 000,291,680 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\WdFilter.sys -- (WdFilter)
DRV:[b]64bit:[/b] - [2015/07/10 07:59:48 | 000,209,760 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\Ucx01000.sys -- (Ucx01000)
DRV:[b]64bit:[/b] - [2015/07/10 07:59:48 | 000,127,840 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\acpiex.sys -- (acpiex)
DRV:[b]64bit:[/b] - [2015/07/10 07:59:48 | 000,098,144 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\pdc.sys -- (pdc)
DRV:[b]64bit:[/b] - [2015/07/10 07:59:48 | 000,083,968 | ---- | M] (Microsoft Corporation) [File_System | System | Running] -- C:\Windows\SysNative\drivers\filecrypt.sys -- (FileCrypt)
DRV:[b]64bit:[/b] - [2015/07/10 07:59:48 | 000,061,440 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbFlt.sys -- (TsUsbFlt)
DRV:[b]64bit:[/b] - [2015/07/10 07:59:48 | 000,044,568 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\WdBoot.sys -- (WdBoot)
DRV:[b]64bit:[/b] - [2015/07/10 07:59:48 | 000,044,032 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\Udecx.sys -- (UdeCx)
DRV:[b]64bit:[/b] - [2015/07/10 07:59:48 | 000,031,744 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\vhf.sys -- (vhf)
DRV:[b]64bit:[/b] - [2015/07/10 07:59:40 | 000,046,432 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\msgpiowin32.sys -- (msgpiowin32)
DRV:[b]64bit:[/b] - [2015/07/10 07:59:40 | 000,033,280 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbGD.sys -- (TsUsbGD)
DRV:[b]64bit:[/b] - [2015/07/10 07:59:40 | 000,028,512 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\urschipidea.sys -- (UrsChipidea)
DRV:[b]64bit:[/b] - [2015/07/10 07:59:40 | 000,027,488 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\urssynopsys.sys -- (UrsSynopsys)
DRV:[b]64bit:[/b] - [2015/07/10 07:59:40 | 000,026,624 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\npsvctrig.sys -- (npsvctrig)
DRV:[b]64bit:[/b] - [2015/07/10 07:59:40 | 000,017,944 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\WindowsTrustedRTProxy.sys -- (WindowsTrustedRTProxy)
DRV:[b]64bit:[/b] - [2015/07/10 07:59:39 | 000,705,376 | ---- | M] (Mellanox) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\mlx4_bus.sys -- (mlx4_bus)
DRV:[b]64bit:[/b] - [2015/07/10 07:59:39 | 000,474,464 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\spaceport.sys -- (spaceport)
DRV:[b]64bit:[/b] - [2015/07/10 07:59:39 | 000,424,800 | ---- | M] (Mellanox) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ibbus.sys -- (ibbus)
DRV:[b]64bit:[/b] - [2015/07/10 07:59:39 | 000,371,552 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\USBXHCI.SYS -- (USBXHCI)
DRV:[b]64bit:[/b] - [2015/07/10 07:59:39 | 000,305,504 | ---- | M] (VIA Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\VSTXRAID.SYS -- (VSTXRAID)
DRV:[b]64bit:[/b] - [2015/07/10 07:59:39 | 000,133,984 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\storahci.sys -- (storahci)
DRV:[b]64bit:[/b] - [2015/07/10 07:59:39 | 000,129,224 | ---- | M] (Qualcomm Atheros Co., Ltd.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\L1C63x64.sys -- (L1C)
DRV:[b]64bit:[/b] - [2015/07/10 07:59:39 | 000,127,840 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ufxsynopsys.sys -- (ufxsynopsys)
DRV:[b]64bit:[/b] - [2015/07/10 07:59:39 | 000,094,048 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\UfxChipidea.sys -- (UfxChipidea)
DRV:[b]64bit:[/b] - [2015/07/10 07:59:39 | 000,078,688 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\stornvme.sys -- (stornvme)
DRV:[b]64bit:[/b] - [2015/07/10 07:59:39 | 000,077,664 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\uaspstor.sys -- (UASPStor)
DRV:[b]64bit:[/b] - [2015/07/10 07:59:39 | 000,076,128 | ---- | M] (Mellanox) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ndfltr.sys -- (ndfltr)
DRV:[b]64bit:[/b] - [2015/07/10 07:59:39 | 000,063,840 | ---- | M] (Marvell Semiconductor, Inc.) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\mvumis.sys -- (mvumis)
DRV:[b]64bit:[/b] - [2015/07/10 07:59:39 | 000,059,232 | ---- | M] (Mellanox) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\winverbs.sys -- (WinVerbs)
DRV:[b]64bit:[/b] - [2015/07/10 07:59:39 | 000,058,720 | ---- | M] (Avago Technologies) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\percsas3i.sys -- (percsas3i)
DRV:[b]64bit:[/b] - [2015/07/10 07:59:39 | 000,058,208 | ---- | M] (LSI Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\percsas2i.sys -- (percsas2i)
DRV:[b]64bit:[/b] - [2015/07/10 07:59:39 | 000,055,296 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\BasicDisplay.sys -- (BasicDisplay)
DRV:[b]64bit:[/b] - [2015/07/10 07:59:39 | 000,041,472 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\BasicRender.sys -- (BasicRender)
DRV:[b]64bit:[/b] - [2015/07/10 07:59:39 | 000,040,288 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\storufs.sys -- (storufs)
DRV:[b]64bit:[/b] - [2015/07/10 07:59:39 | 000,031,072 | ---- | M] (Promise Technology, Inc.) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor)
DRV:[b]64bit:[/b] - [2015/07/10 07:59:39 | 000,028,512 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\uefi.sys -- (UEFI)
DRV:[b]64bit:[/b] - [2015/07/10 07:59:39 | 000,026,976 | ---- | M] (Mellanox) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\winmad.sys -- (WinMad)
DRV:[b]64bit:[/b] - [2015/07/10 07:59:39 | 000,017,760 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\DriverStore\FileRepository\swenum.inf_amd64_2a699e44676b7781\swenum.sys -- (swenum)
DRV:[b]64bit:[/b] - [2015/07/10 07:59:38 | 003,436,896 | ---- | M] (QLogic Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv)
DRV:[b]64bit:[/b] - [2015/07/10 07:59:38 | 001,135,456 | ---- | M] (PMC-Sierra) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\adp80xx.sys -- (ADP80XX)
DRV:[b]64bit:[/b] - [2015/07/10 07:59:38 | 000,673,120 | ---- | M] (Intel Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\iaStorAV.sys -- (iaStorAV)
DRV:[b]64bit:[/b] - [2015/07/10 07:59:38 | 000,531,296 | ---- | M] (Broadcom Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv)
DRV:[b]64bit:[/b] - [2015/07/10 07:59:38 | 000,259,424 | ---- | M] (AMD Technologies Inc.) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs)
DRV:[b]64bit:[/b] - [2015/07/10 07:59:38 | 000,222,720 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\xboxgip.sys -- (xboxgip)
DRV:[b]64bit:[/b] - [2015/07/10 07:59:38 | 000,207,712 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\tpm.sys -- (TPM)
DRV:[b]64bit:[/b] - [2015/07/10 07:59:38 | 000,116,736 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\capimg.sys -- (CapImg)
DRV:[b]64bit:[/b] - [2015/07/10 07:59:38 | 000,107,360 | ---- | M] (LSI) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\3ware.sys -- (3ware)
DRV:[b]64bit:[/b] - [2015/07/10 07:59:38 | 000,104,800 | ---- | M] (LSI Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2i.sys -- (LSI_SAS2i)
DRV:[b]64bit:[/b] - [2015/07/10 07:59:38 | 000,099,168 | ---- | M] (Avago Technologies) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas3i.sys -- (LSI_SAS3i)
DRV:[b]64bit:[/b] - [2015/07/10 07:59:38 | 000,083,296 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata)
DRV:[b]64bit:[/b] - [2015/07/10 07:59:38 | 000,082,784 | ---- | M] (LSI Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\lsi_sss.sys -- (LSI_SSS)
DRV:[b]64bit:[/b] - [2015/07/10 07:59:38 | 000,064,352 | ---- | M] (Hewlett-Packard Company) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD)
DRV:[b]64bit:[/b] - [2015/07/10 07:59:38 | 000,050,016 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hidinterrupt.sys -- (hidinterrupt)
DRV:[b]64bit:[/b] - [2015/07/10 07:59:38 | 000,032,256 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\buttonconverter.sys -- (buttonconverter)
DRV:[b]64bit:[/b] - [2015/07/10 07:59:38 | 000,026,976 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata)
DRV:[b]64bit:[/b] - [2015/07/10 07:59:38 | 000,025,600 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\xinputhid.sys -- (xinputhid)
DRV:[b]64bit:[/b] - [2015/07/10 07:59:38 | 000,023,040 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\kdnic.sys -- (kdnic)
DRV:[b]64bit:[/b] - [2015/07/10 07:59:38 | 000,022,528 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\WSDPrint.sys -- (WSDPrintDevice)
DRV:[b]64bit:[/b] - [2015/07/10 07:59:38 | 000,020,992 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\genericusbfn.sys -- (genericusbfn)
DRV:[b]64bit:[/b] - [2015/07/10 07:59:38 | 000,017,624 | ---- | M] (Windows (R) Win 7 DDK provider) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bcmfn2.sys -- (bcmfn2)
DRV:[b]64bit:[/b] - [2015/07/10 07:59:38 | 000,012,800 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\acpitime.sys -- (acpitime)
DRV:[b]64bit:[/b] - [2015/07/10 07:59:38 | 000,012,288 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\acpipagr.sys -- (acpipagr)
DRV:[b]64bit:[/b] - [2015/07/10 07:59:37 | 000,024,576 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\WSDScan.sys -- (WSDScan)
DRV:[b]64bit:[/b] - [2015/07/10 07:59:37 | 000,012,800 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\serscan.sys -- (StillCam)
DRV:[b]64bit:[/b] - [2015/07/10 07:59:36 | 000,276,832 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\sdbus.sys -- (sdbus)
DRV:[b]64bit:[/b] - [2015/07/10 07:59:36 | 000,122,608 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\iaLPSSi_I2C.sys -- (iaLPSSi_I2C)
DRV:[b]64bit:[/b] - [2015/07/10 07:59:36 | 000,116,576 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\EhStorTcgDrv.sys -- (EhStorTcgDrv)
DRV:[b]64bit:[/b] - [2015/07/10 07:59:36 | 000,092,512 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\sdstor.sys -- (sdstor)
DRV:[b]64bit:[/b] - [2015/07/10 07:59:36 | 000,074,080 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\vpci.sys -- (vpci)
DRV:[b]64bit:[/b] - [2015/07/10 07:59:36 | 000,064,000 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\Synth3dVsc.sys -- (Synth3dVsc)
DRV:[b]64bit:[/b] - [2015/07/10 07:59:36 | 000,051,200 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hidi2c.sys -- (hidi2c)
DRV:[b]64bit:[/b] - [2015/07/10 07:59:36 | 000,043,872 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\intelpep.sys -- (intelpep)
DRV:[b]64bit:[/b] - [2015/07/10 07:59:36 | 000,042,496 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\BthAvrcpTg.sys -- (BthAvrcpTg)
DRV:[b]64bit:[/b] - [2015/07/10 07:59:36 | 000,039,936 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\DriverStore\FileRepository\compositebus.inf_amd64_98334ba6e76853ba\CompositeBus.sys -- (CompositeBus)
DRV:[b]64bit:[/b] - [2015/07/10 07:59:36 | 000,038,128 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\iaLPSSi_GPIO.sys -- (iaLPSSi_GPIO)
DRV:[b]64bit:[/b] - [2015/07/10 07:59:36 | 000,033,792 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\dmvsc.sys -- (dmvsc)
DRV:[b]64bit:[/b] - [2015/07/10 07:59:36 | 000,031,232 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\fcvsc.sys -- (fcvsc)
DRV:[b]64bit:[/b] - [2015/07/10 07:59:36 | 000,030,720 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\BthhfHid.sys -- (bthhfhid)
DRV:[b]64bit:[/b] - [2015/07/10 07:59:36 | 000,016,384 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hyperkbd.sys -- (hyperkbd)
DRV:[b]64bit:[/b] - [2015/07/10 07:59:36 | 000,013,312 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\vmgencounter.sys -- (gencounter)
DRV:[b]64bit:[/b] - [2015/06/12 04:59:24 | 002,554,528 | ---- | M] (MediaTek Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\netr28x.sys -- (netr28x)
DRV:[b]64bit:[/b] - [2015/06/11 23:00:58 | 000,197,616 | ---- | M] (Tonec Inc.) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\idmwfp.sys -- (IDMWFP)
DRV:[b]64bit:[/b] - [2015/06/03 07:41:50 | 000,374,016 | ---- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\RtsPStor.sys -- (RSPCIESTOR)
DRV:[b]64bit:[/b] - [2015/06/01 21:00:18 | 005,384,176 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\igdkmd64.sys -- (igfx)
DRV:[b]64bit:[/b] - [2014/01/22 08:52:10 | 000,206,080 | ---- | M] (DEVGURU Co., LTD.(www.devguru.co.kr)) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ssudmdm.sys -- (ssudmdm)
DRV:[b]64bit:[/b] - [2014/01/22 08:52:10 | 000,108,800 | ---- | M] (DEVGURU Co., LTD.(www.devguru.co.kr)) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ssudbus.sys -- (dg_ssudbus)
DRV:[b]64bit:[/b] - [2010/10/19 23:34:26 | 000,056,344 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\HECIx64.sys -- (MEIx64)
DRV:[b]64bit:[/b] - [2009/08/14 20:58:04 | 000,015,920 | ---- | M] (Windows (R) Codename Longhorn DDK provider) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\i8042HDR.sys -- (i8042HDR)
DRV - [2015/07/10 07:59:39 | 000,017,760 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\System32\DriverStore\FileRepository\swenum.inf_amd64_2a699e44676b7781\swenum.sys -- (swenum)
DRV - [2015/07/10 07:59:36 | 000,039,936 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\System32\DriverStore\FileRepository\compositebus.inf_amd64_98334ba6e76853ba\CompositeBus.sys -- (CompositeBus)
DRV - [2010/07/01 14:11:24 | 000,012,352 | ---- | M] () [Kernel | Unavailable | Unknown] -- C:\Arquivos de Programas\Unlocker\UnlockerDriver5.sys -- (UnlockerDriver5)


[color=#E56717]========== Standard Registry (SafeList) ==========[/color]


[color=#E56717]========== Internet Explorer ==========[/color]

IE:[b]64bit:[/b] - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE:[b]64bit:[/b] - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
IE:[b]64bit:[/b] - HKLM\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
IE - HKLM\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 1
IE - HKLM\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = <startmenu>


IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-19\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %11%\blank.htm

IE - HKU\S-1-5-20\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %11%\blank.htm

IE - HKU\S-1-5-21-319184472-2727750391-658723216-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = Preserve
IE - HKU\S-1-5-21-319184472-2727750391-658723216-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://google.com/
IE - HKU\S-1-5-21-319184472-2727750391-658723216-1001\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKU\S-1-5-21-319184472-2727750391-658723216-1001\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IESR02
IE - HKU\S-1-5-21-319184472-2727750391-658723216-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

[color=#E56717]========== FireFox ==========[/color]

FF - prefs.js..browser.search.countryCode: "BR"
FF - prefs.js..browser.search.region: "BR"
FF - prefs.js..extensions.enabledAddons: s3torrent%40tornado:2.08
FF - prefs.js..extensions.enabledAddons: translator%40zoli.bod:2.1.0.5.1
FF - prefs.js..extensions.enabledAddons: mozilla_cc2%40internetdownloadmanager.com:6.23.18
FF - prefs.js..extensions.enabledAddons: %7B972ce4c6-7e08-4474-a285-3208198ce6fd%7D:39.0.3
FF - prefs.js..network.proxy.type: 0
FF - user.js - File not found

FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\WINDOWS\system32\Macromed\Flash\NPSWF64_18_0_0_209.dll File not found
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_18_0_0_209.dll ()
FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=11.51.2: C:\Program Files (x86)\Java\jre1.8.0_51\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=11.51.2: C:\Program Files (x86)\Java\jre1.8.0_51\bin\plugin2\npjp2.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/SharePoint,version=14.0: C:\PROGRA~2\MICROS~2\Office15\NPSPWRAP.DLL (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=16.4.3528.0331: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@videolan.org/vlc,version=2.2.1: C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)

FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\wrc@avast.com: C:\Program Files\AVAST Software\Avast\WebRep\FF [2015/08/08 16:42:24 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 39.0.3\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 39.0.3\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins
FF - HKEY_CURRENT_USER\software\mozilla\Firefox\Extensions\\mozilla_cc2@internetdownloadmanager.com: C:\Users\Gsnak\AppData\Roaming\IDM\idmmzcc7 [2015/08/07 17:26:22 | 000,000,000 | ---D | M]
FF - HKEY_CURRENT_USER\software\mozilla\Mozilla Firefox 39.0.3\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components
FF - HKEY_CURRENT_USER\software\mozilla\Mozilla Firefox 39.0.3\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins

[2015/08/06 00:31:08 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Gsnak\AppData\Roaming\mozilla\Extensions
[2015/08/06 23:34:39 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Gsnak\AppData\Roaming\mozilla\Firefox\Profiles\fe97rykp.default\extensions
[2015/08/06 23:34:39 | 006,750,006 | ---- | M] () (No name found) -- C:\Users\Gsnak\AppData\Roaming\mozilla\firefox\profiles\fe97rykp.default\extensions\firefox@mega.co.nz.xpi
[2015/08/06 01:16:43 | 000,154,614 | ---- | M] () (No name found) -- C:\Users\Gsnak\AppData\Roaming\mozilla\firefox\profiles\fe97rykp.default\extensions\s3torrent@tornado.xpi
[2015/08/06 01:20:25 | 000,074,654 | ---- | M] () (No name found) -- C:\Users\Gsnak\AppData\Roaming\mozilla\firefox\profiles\fe97rykp.default\extensions\translator@zoli.bod.xpi
[2015/08/06 01:19:40 | 000,589,166 | ---- | M] () (No name found) -- C:\Users\Gsnak\AppData\Roaming\mozilla\firefox\profiles\fe97rykp.default\extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}.xpi
[2015/08/06 01:15:29 | 000,963,213 | ---- | M] () (No name found) -- C:\Users\Gsnak\AppData\Roaming\mozilla\firefox\profiles\fe97rykp.default\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi
[2015/08/07 00:59:14 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files (x86)\mozilla firefox\browser\extensions
[2015/08/07 00:59:27 | 000,000,000 | ---D | M] (Default) -- C:\Program Files (x86)\mozilla firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
[2015/08/07 17:26:22 | 000,000,000 | ---D | M] (IDM integration) -- C:\USERS\GSNAK\APPDATA\ROAMING\IDM\IDMMZCC7

O1 HOSTS File: ([2015/08/04 23:52:14 | 000,000,824 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts
O2:[b]64bit:[/b] - BHO: (IDM integration (IDMIEHlprObj Class)) - {0055C089-8582-441B-A0BF-17B458C2A3A8} - C:\Program Files (x86)\Internet Download Manager\IDMIECC64.dll (Internet Download Manager, Tonec Inc.)
O2:[b]64bit:[/b] - BHO: (avast! Online Security) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Arquivos de Programas\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
O2:[b]64bit:[/b] - BHO: (Office Document Cache Handler) - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Arquivos de Programas\Microsoft Office\Office15\URLREDIR.DLL (Microsoft Corporation)
O2:[b]64bit:[/b] - BHO: (Microsoft SkyDrive Pro Browser Helper) - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\Arquivos de Programas\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)
O2 - BHO: (IDM integration (IDMIEHlprObj Class)) - {0055C089-8582-441B-A0BF-17B458C2A3A8} - C:\Program Files (x86)\Internet Download Manager\IDMIECC.dll (Internet Download Manager, Tonec Inc.)
O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre1.8.0_51\bin\ssv.dll (Oracle Corporation)
O2 - BHO: (avast! Online Security) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Arquivos de Programas\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
O2 - BHO: (Office Document Cache Handler) - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~2\Office15\URLREDIR.DLL (Microsoft Corporation)
O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre1.8.0_51\bin\jp2ssv.dll (Oracle Corporation)
O4:[b]64bit:[/b] - HKLM..\Run: [AdobeAAMUpdater-1.0] "C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe" File not found
O4:[b]64bit:[/b] - HKLM..\Run: [HotKeysCmds] C:\WINDOWS\SysNative\hkcmd.exe (Intel Corporation)
O4:[b]64bit:[/b] - HKLM..\Run: [IgfxTray] C:\WINDOWS\SysNative\igfxtray.exe (Intel Corporation)
O4:[b]64bit:[/b] - HKLM..\Run: [Persistence] C:\WINDOWS\SysNative\igfxpers.exe (Intel Corporation)
O4:[b]64bit:[/b] - HKLM..\Run: [RtHDVCpl] C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (Realtek Semiconductor)
O4 - HKLM..\Run: [] File not found
O4 - HKLM..\Run: [Adobe Creative Cloud] "C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe" --showwindow=false --onOSstartup=true File not found
O4 - HKLM..\Run: [AvastUI.exe] C:\Program Files\AVAST Software\Avast\AvastUI.exe (AVAST Software)
O4 - HKU\S-1-5-19..\Run: [OneDriveSetup] C:\Windows\SysWOW64\OneDriveSetup.exe (Microsoft Corporation)
O4 - HKU\S-1-5-20..\Run: [OneDriveSetup] C:\Windows\SysWOW64\OneDriveSetup.exe (Microsoft Corporation)
O4 - HKU\S-1-5-21-319184472-2727750391-658723216-1001..\Run: [CCleaner Monitoring] C:\Program Files\CCleaner\CCleaner64.exe (Piriform Ltd)
O4 - HKU\S-1-5-21-319184472-2727750391-658723216-1001..\Run: [DAEMON Tools Lite Automount] C:\Program Files\DAEMON Tools Lite\DTAgent.exe (Disc Soft Ltd)
O4 - HKU\S-1-5-21-319184472-2727750391-658723216-1001..\Run: [IDMan] C:\Program Files (x86)\Internet Download Manager\IDMan.exe (Tonec Inc.)
O4 - HKU\S-1-5-21-319184472-2727750391-658723216-1001..\Run: [OneDrive] C:\Users\Gsnak\AppData\Local\Microsoft\OneDrive\OneDrive.exe (Microsoft Corporation)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DSCAutomationHostEnabled = 2
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableCursorSuppression = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: SoftwareSASGeneration = 1
O7 - HKU\S-1-5-21-319184472-2727750391-658723216-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O8:[b]64bit:[/b] - Extra context menu item: E&xportar para o Microsoft Excel - res://C:\PROGRA~2\MICROS~2\Office15\EXCEL.EXE/3000 File not found
O8:[b]64bit:[/b] - Extra context menu item: Fazer o download de todos os links usando o IDM - C:\Program Files (x86)\Internet Download Manager\IEGetAll.htm ()
O8:[b]64bit:[/b] - Extra context menu item: Fazer o download usando o IDM - C:\Program Files (x86)\Internet Download Manager\IEExt.htm ()
O8 - Extra context menu item: E&xportar para o Microsoft Excel - res://C:\PROGRA~2\MICROS~2\Office15\EXCEL.EXE/3000 File not found
O8 - Extra context menu item: Fazer o download de todos os links usando o IDM - C:\Program Files (x86)\Internet Download Manager\IEGetAll.htm ()
O8 - Extra context menu item: Fazer o download usando o IDM - C:\Program Files (x86)\Internet Download Manager\IEExt.htm ()
O9:[b]64bit:[/b] - Extra Button: HP Smart Print - {22CC3EBD-C286-43aa-B8E6-06B115F74162} - C:\Program Files (x86)\Hewlett-Packard\Smart Print\SmartPrintSetup.exe (Hewlett-Packard)
O9:[b]64bit:[/b] - Extra 'Tools' menuitem : HP Smart Print - {22CC3EBD-C286-43aa-B8E6-06B115F74162} - C:\Program Files (x86)\Hewlett-Packard\Smart Print\SmartPrintSetup.exe (Hewlett-Packard)
O9 - Extra Button: HP Smart Print - {22CC3EBD-C286-43aa-B8E6-06B115F74162} - C:\Program Files (x86)\Hewlett-Packard\Smart Print\SmartPrintSetup.exe (Hewlett-Packard)
O9 - Extra 'Tools' menuitem : HP Smart Print - {22CC3EBD-C286-43aa-B8E6-06B115F74162} - C:\Program Files (x86)\Hewlett-Packard\Smart Print\SmartPrintSetup.exe (Hewlett-Packard)
O13[b]64bit:[/b] - gopher Prefix: missing
O13 - gopher Prefix: missing
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 8.8.8.8 8.8.4.4
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{16728375-9d20-48bf-bc70-7c43d09ff2fc}: DhcpNameServer = 8.8.8.8 8.8.4.4
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{16728375-9d20-48bf-bc70-7c43d09ff2fc}: NameServer = 8.8.8.8,8.8.4.4
O18:[b]64bit:[/b] - Protocol\Handler\ms-help - No CLSID value found
O18:[b]64bit:[/b] - Protocol\Handler\osf - No CLSID value found
O18:[b]64bit:[/b] - Protocol\Handler\tbauth {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\SysNative\tbauth.dll (Microsoft Corporation)
O18:[b]64bit:[/b] - Protocol\Handler\wlpg - No CLSID value found
O18 - Protocol\Handler\tbauth {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\syswow64\tbauth.dll (Microsoft Corporation)
O18:[b]64bit:[/b] - Protocol\Filter\text/xml {807583E5-5146-11D5-A672-00B0D022E945} - C:\Arquivos de Programas\Common Files\microsoft shared\OFFICE15\MSOXMLMF.DLL (Microsoft Corporation)
O20:[b]64bit:[/b] - HKLM Winlogon: Shell - (explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O20:[b]64bit:[/b] - HKLM Winlogon: UserInit - (C:\WINDOWS\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\WINDOWS\SysWow64\explorer.exe (Microsoft Corporation)
O20:[b]64bit:[/b] - Winlogon\Notify\igfxcui: DllName - (igfxdev.dll) - C:\WINDOWS\SysNative\igfxdev.dll (Intel Corporation)
O21:[b]64bit:[/b] - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2015/08/08 03:33:48 | 000,000,000 | ---- | M] () - C:\autoexec.bat -- [ NTFS ]
O33 - MountPoints2\{db873977-3d40-11e5-9c96-0008ca57afbb}\Shell - "" = AutoRun
O33 - MountPoints2\{db873977-3d40-11e5-9c96-0008ca57afbb}\Shell\AutoRun\command - "" = "G:\SETUP.EXE"
O33 - MountPoints2\{db873977-3d40-11e5-9c96-0008ca57afbb}\Shell\configure\command - "" = G:\SETUP.EXE
O33 - MountPoints2\{db873977-3d40-11e5-9c96-0008ca57afbb}\Shell\install\command - "" = G:\SETUP.EXE
O34 - HKLM BootExecute: (autocheck autochk *)
O35:[b]64bit:[/b] - HKLM\..comfile [open] -- "%1" %*
O35:[b]64bit:[/b] - HKLM\..exefile [open] -- "%1" %*
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37:[b]64bit:[/b] - HKLM\...com [@ = comfile] -- "%1" %*
O37:[b]64bit:[/b] - HKLM\...exe [@ = exefile] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)

[color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color]

[2015/08/13 23:54:57 | 000,000,000 | ---D | C] -- C:\WINDOWS\pss
[2015/08/13 20:51:04 | 000,000,000 | ---D | C] -- C:\FRST
[2015/08/13 20:09:15 | 000,000,000 | ---D | C] -- C:\ProgramData\Baidu
[2015/08/13 20:08:50 | 000,000,000 | ---D | C] -- C:\Users\Gsnak\AppData\Roaming\Baidu
[2015/08/13 20:08:49 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\baidu
[2015/08/13 03:21:48 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Google
[2015/08/13 03:21:44 | 000,000,000 | ---D | C] -- C:\Users\Gsnak\AppData\Local\Google
[2015/08/11 23:10:27 | 000,000,000 | ---D | C] -- C:\Users\Gsnak\Desktop\Cortar SIMCard para Micro e nano SIM
[2015/08/11 03:06:40 | 000,000,000 | ---D | C] -- C:\Users\Gsnak\Documents\KONAMI
[2015/08/11 02:52:04 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\KONAMI
[2015/08/11 02:50:50 | 000,000,000 | ---D | C] -- C:\Users\Gsnak\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\KONAMI
[2015/08/11 02:48:37 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\InstallShield
[2015/08/11 00:18:39 | 000,000,000 | ---D | C] -- C:\Users\Gsnak\Documents\Modelos Personalizados do Office
[2015/08/10 20:06:22 | 000,000,000 | ---D | C] -- C:\ProgramData\regid.1986-12.com.adobe
[2015/08/10 17:43:33 | 000,000,000 | ---D | C] -- C:\WINDOWS\XSxS
[2015/08/09 20:37:51 | 000,206,080 | ---- | C] (DEVGURU Co., LTD.(www.devguru.co.kr)) -- C:\WINDOWS\SysNative\drivers\ssudserd.sys
[2015/08/09 18:18:08 | 000,000,000 | R--D | C] -- C:\Users\Gsnak\Documents\Concursos
[2015/08/09 16:37:40 | 000,000,000 | ---D | C] -- C:\Users\Gsnak\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\GameVicio
[2015/08/09 16:37:40 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\GameVicio
[2015/08/09 14:28:22 | 000,000,000 | ---D | C] -- C:\ProgramData\ALM
[2015/08/09 02:53:04 | 000,000,000 | ---D | C] -- C:\Users\Gsnak\Documents\Adobe
[2015/08/09 02:42:00 | 000,000,000 | ---D | C] -- C:\ProgramData\boost_interprocess
[2015/08/09 01:43:54 | 000,000,000 | ---D | C] -- C:\Program Files\Adobe
[2015/08/09 01:43:35 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Adobe
[2015/08/09 00:57:49 | 000,000,000 | ---D | C] -- C:\ProgramData\DAEMON Tools Ultra
[2015/08/09 00:57:49 | 000,000,000 | ---D | C] -- C:\Users\Gsnak\AppData\Roaming\DAEMON Tools Ult
[2015/08/08 18:19:34 | 000,000,000 | ---D | C] -- C:\Users\Gsnak\Documents\NFS Carbon
[2015/08/08 16:44:27 | 000,000,000 | ---D | C] -- C:\Users\Gsnak\AppData\Roaming\AVAST Software
[2015/08/08 16:43:20 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVAST Software
[2015/08/08 16:42:29 | 001,048,344 | ---- | C] (AVAST Software) -- C:\WINDOWS\SysNative\drivers\aswsnx.sys
[2015/08/08 16:42:29 | 000,447,944 | ---- | C] (AVAST Software) -- C:\WINDOWS\SysNative\drivers\aswSP.sys
[2015/08/08 16:42:29 | 000,274,808 | ---- | C] (AVAST Software) -- C:\WINDOWS\SysNative\drivers\aswVmm.sys
[2015/08/08 16:42:29 | 000,150,672 | ---- | C] (AVAST Software) -- C:\WINDOWS\SysNative\drivers\aswStm.sys
[2015/08/08 16:42:29 | 000,093,528 | ---- | C] (AVAST Software) -- C:\WINDOWS\SysNative\drivers\aswRdr2.sys
[2015/08/08 16:42:29 | 000,090,968 | ---- | C] (AVAST Software) -- C:\WINDOWS\SysNative\drivers\aswMonFlt.sys
[2015/08/08 16:42:29 | 000,065,224 | ---- | C] (AVAST Software) -- C:\WINDOWS\SysNative\drivers\aswRvrt.sys
[2015/08/08 16:42:29 | 000,028,656 | ---- | C] (AVAST Software) -- C:\WINDOWS\SysNative\drivers\aswHwid.sys
[2015/08/08 16:42:25 | 000,378,880 | ---- | C] (AVAST Software) -- C:\WINDOWS\SysNative\aswBoot.exe
[2015/08/08 16:42:04 | 000,043,112 | ---- | C] (AVAST Software) -- C:\WINDOWS\avastSS.scr
[2015/08/08 16:28:37 | 000,000,000 | -H-D | C] -- C:\Program Files (x86)\InstallShield Installation Information
[2015/08/08 16:28:37 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\EaGames
[2015/08/08 16:28:37 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\EaGames
[2015/08/08 16:28:24 | 000,000,000 | ---D | C] -- C:\Users\Gsnak\AppData\Roaming\InstallShield
[2015/08/08 16:25:43 | 000,000,000 | ---D | C] -- C:\Program Files\AVAST Software
[2015/08/08 16:23:59 | 000,000,000 | ---D | C] -- C:\ProgramData\AVAST Software
[2015/08/08 14:31:37 | 000,000,000 | ---D | C] -- C:\Users\Gsnak\Documents\NeroVideo
[2015/08/08 14:31:37 | 000,000,000 | ---D | C] -- C:\Users\Gsnak\AppData\Local\Nero
[2015/08/08 14:30:50 | 000,000,000 | ---D | C] -- C:\Users\Gsnak\AppData\Roaming\Nero
[2015/08/08 14:23:24 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Nero
[2015/08/08 14:04:41 | 000,000,000 | ---D | C] -- C:\ProgramData\Package Cache
[2015/08/08 13:01:10 | 000,000,000 | ---D | C] -- C:\Users\Gsnak\AppData\Local\CEF
[2015/08/08 12:34:38 | 000,000,000 | ---D | C] -- C:\WINDOWS\AutoKMS
[2015/08/08 12:33:07 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft Toolkit
[2015/08/08 12:10:42 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2013
[2015/08/08 12:10:06 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\DESIGNER
[2015/08/08 12:08:44 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Microsoft SQL Server
[2015/08/08 12:07:41 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Microsoft Analysis Services
[2015/08/08 12:06:54 | 000,000,000 | ---D | C] -- C:\Users\Gsnak\AppData\Local\Microsoft Help
[2015/08/08 12:06:48 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft Help
[2015/08/08 12:06:39 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Microsoft Office
[2015/08/08 12:06:20 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft Office
[2015/08/08 12:04:42 | 000,000,000 | RH-D | C] -- C:\MSOCache
[2015/08/08 03:53:44 | 000,000,000 | ---D | C] -- C:\Users\Gsnak\AppData\Roaming\fltk.org
[2015/08/08 03:33:01 | 000,000,000 | ---D | C] -- C:\Users\Gsnak\Start Menu
[2015/08/08 03:30:41 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\MSECache
[2015/08/08 03:27:23 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Project 64 2.2
[2015/08/08 03:27:14 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Project64 2.2
[2015/08/08 03:00:25 | 000,000,000 | ---D | C] -- C:\Users\Gsnak\AppData\Roaming\TechSmith
[2015/08/08 02:59:39 | 000,000,000 | ---D | C] -- C:\Users\Gsnak\Documents\Camtasia Studio
[2015/08/08 02:59:29 | 000,000,000 | ---D | C] -- C:\ProgramData\TechSmith
[2015/08/08 02:27:34 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Resource Hacker
[2015/08/08 02:27:33 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Resource Hacker
[2015/08/08 02:23:32 | 000,000,000 | ---D | C] -- C:\Users\Gsnak\AppData\Roaming\IcoFX
[2015/08/08 02:23:29 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\IcoFX 1.6
[2015/08/08 02:23:25 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\IcoFX 1.6
[2015/08/08 02:21:39 | 000,125,952 | ---- | C] (Aladdin Knowledge Systems) -- C:\WINDOWS\SysWow64\drivers\hardlock.sys
[2015/08/08 02:21:39 | 000,023,040 | ---- | C] (Aladdin Knowledge Systems) -- C:\WINDOWS\SysWow64\drivers\aksusb.sys
[2015/08/08 02:21:35 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OPTPiX iMageStudio 3
[2015/08/08 02:21:23 | 000,000,000 | ---D | C] -- C:\Program Files\web technology
[2015/08/08 02:12:08 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\DkZ Studio
[2015/08/08 02:09:31 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Game Graphic Studio
[2015/08/08 02:09:27 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Game Graphic Studio
[2015/08/08 02:05:11 | 000,000,000 | ---D | C] -- C:\Users\Gsnak\AppData\Local\ElevatedDiagnostics
[2015/08/08 02:04:53 | 000,000,000 | ---D | C] -- C:\ProgramData\Sun
[2015/08/08 02:04:51 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Java
[2015/08/08 02:04:39 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
[2015/08/08 02:04:18 | 000,000,000 | ---D | C] -- C:\ProgramData\Oracle
[2015/08/08 02:04:13 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Java
[2015/08/08 01:40:20 | 000,000,000 | ---D | C] -- C:\Users\Gsnak\AppData\Roaming\Audacity
[2015/08/08 01:39:47 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Audacity
[2015/08/08 01:39:34 | 000,000,000 | ---D | C] -- C:\Users\Gsnak\AppData\Local\Programs
[2015/08/08 01:16:00 | 000,000,000 | ---D | C] -- C:\Users\Gsnak\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Unlocker
[2015/08/08 01:15:59 | 000,000,000 | ---D | C] -- C:\Program Files\Unlocker
[2015/08/08 01:10:50 | 000,000,000 | ---D | C] -- C:\Users\Gsnak\AppData\Local\Disc_Soft_Ltd
[2015/08/08 01:08:56 | 000,000,000 | ---D | C] -- C:\Users\Public\Documents\Daemon Tools Images
[2015/08/08 01:06:15 | 000,030,264 | ---- | C] (Disc Soft Ltd) -- C:\WINDOWS\SysNative\drivers\dtlitescsibus.sys
[2015/08/08 01:06:14 | 000,000,000 | ---D | C] -- C:\Users\Gsnak\AppData\Roaming\DAEMON Tools Lite
[2015/08/08 01:06:14 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DAEMON Tools Lite
[2015/08/08 01:05:49 | 000,000,000 | ---D | C] -- C:\Program Files\DAEMON Tools Lite
[2015/08/08 01:04:52 | 000,000,000 | ---D | C] -- C:\ProgramData\DAEMON Tools Lite
[2015/08/08 01:03:01 | 000,000,000 | ---D | C] -- C:\Users\Gsnak\AppData\Roaming\vlc
[2015/08/08 01:02:45 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN
[2015/08/08 01:02:16 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\VideoLAN
[2015/08/08 00:04:46 | 000,000,000 | ---D | C] -- C:\Users\Gsnak\AppData\Roaming\CatchYouTube
[2015/08/08 00:04:46 | 000,000,000 | ---D | C] -- C:\ProgramData\Catch Video
[2015/08/08 00:04:12 | 000,000,000 | ---D | C] -- C:\Users\Public\Documents\Guid
[2015/08/08 00:00:56 | 000,000,000 | ---D | C] -- C:\Users\Gsnak\AppData\Local\MiniService
[2015/08/08 00:00:56 | 000,000,000 | ---D | C] -- C:\Users\Public\Documents\Baidu
[2015/08/07 23:19:43 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Microsoft SQL Server Compact Edition
[2015/08/07 23:18:46 | 000,000,000 | ---D | C] -- C:\WINDOWS\PCHEALTH
[2015/08/07 23:18:39 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Windows Live
[2015/08/07 23:15:30 | 000,000,000 | ---D | C] -- C:\Users\Gsnak\AppData\Local\Windows Live
[2015/08/07 23:15:13 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Windows Live
[2015/08/07 23:10:49 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\XPSViewer
[2015/08/07 23:10:40 | 000,000,000 | ---D | C] -- C:\Program Files\Reference Assemblies
[2015/08/07 23:10:40 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Reference Assemblies
[2015/08/07 23:10:40 | 000,000,000 | ---D | C] -- C:\Program Files\MSBuild
[2015/08/07 23:10:40 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\MSBuild
[2015/08/07 21:37:44 | 000,000,000 | ---D | C] -- C:\Users\Gsnak\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\FormatFactory
[2015/08/07 21:36:54 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\FormatFactory
[2015/08/07 20:17:34 | 000,000,000 | ---D | C] -- C:\Users\Gsnak\AppData\Local\Macromedia
[2015/08/07 20:17:34 | 000,000,000 | ---D | C] -- C:\Users\Gsnak\AppData\Roaming\Adobe
[2015/08/07 20:16:33 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Adobe
[2015/08/07 20:16:08 | 000,000,000 | ---D | C] -- C:\ProgramData\Adobe
[2015/08/07 19:52:45 | 000,000,000 | ---D | C] -- C:\Users\Gsnak\AppData\Local\Adobe
[2015/08/07 18:44:36 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Adobe
[2015/08/07 18:42:59 | 000,000,000 | ---D | C] -- C:\Navisko]
[2015/08/07 17:26:35 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Hewlett-Packard
[2015/08/07 17:26:16 | 000,000,000 | ---D | C] -- C:\Users\Gsnak\AppData\Roaming\IDM
[2015/08/07 17:26:16 | 000,000,000 | ---D | C] -- C:\ProgramData\IDM
[2015/08/07 17:26:16 | 000,000,000 | ---D | C] -- C:\Users\Gsnak\AppData\Roaming\DMCache
[2015/08/07 17:26:14 | 000,000,000 | ---D | C] -- C:\Users\Gsnak\AppData\Roaming\HpUpdate
[2015/08/07 17:26:08 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HP
[2015/08/07 17:26:05 | 000,000,000 | ---D | C] -- C:\Users\Gsnak\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Download Manager
[2015/08/07 17:26:05 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Internet Download Manager
[2015/08/07 17:25:55 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Internet Download Manager
[2015/08/07 17:25:49 | 000,000,000 | ---D | C] -- C:\ProgramData\HP
[2015/08/07 17:25:45 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\HP
[2015/08/07 17:25:40 | 000,000,000 | ---D | C] -- C:\Program Files\HP
[2015/08/07 17:22:42 | 000,000,000 | ---D | C] -- C:\Users\Gsnak\AppData\Local\HP
[2015/08/07 16:17:56 | 000,000,000 | ---D | C] -- C:\Users\Gsnak\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\CCleaner
[2015/08/07 16:17:36 | 000,000,000 | ---D | C] -- C:\Program Files\CCleaner
[2015/08/07 15:33:49 | 000,000,000 | ---D | C] -- C:\Users\Gsnak\AppData\Local\Diagnostics
[2015/08/07 04:46:55 | 000,000,000 | ---D | C] -- C:\Users\Gsnak\AppData\Local\MegaDownloader
[2015/08/07 00:59:14 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Mozilla Firefox
[2015/08/06 19:47:36 | 000,000,000 | ---D | C] -- C:\Users\Gsnak\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Revo Uninstaller
[2015/08/06 19:47:35 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\VS Revo Group
[2015/08/06 16:53:02 | 000,000,000 | ---D | C] -- C:\Users\Gsnak\dwhelper
[2015/08/06 16:11:41 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\SleepStudy
[2015/08/06 12:08:48 | 000,000,000 | ---D | C] -- C:\Users\Gsnak\AppData\Local\PeerDistRepub
[2015/08/06 00:30:51 | 000,000,000 | ---D | C] -- C:\Users\Gsnak\AppData\Roaming\Mozilla
[2015/08/06 00:30:51 | 000,000,000 | ---D | C] -- C:\Users\Gsnak\AppData\Local\Mozilla
[2015/08/06 00:30:44 | 000,000,000 | ---D | C] -- C:\ProgramData\Mozilla
[2015/08/06 00:30:43 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Mozilla Maintenance Service
[2015/08/06 00:11:03 | 000,000,000 | R--D | C] -- C:\Users\Gsnak\Documents\Scanned Documents
[2015/08/06 00:11:02 | 000,000,000 | ---D | C] -- C:\Users\Gsnak\Documents\Fax
[2015/08/05 23:21:46 | 000,000,000 | ---D | C] -- C:\Users\Gsnak\AppData\Local\Apps
[2015/08/05 23:16:20 | 000,000,000 | ---D | C] -- C:\Users\Gsnak\AppData\Roaming\WinRAR
[2015/08/05 23:15:37 | 000,000,000 | ---D | C] -- C:\Users\Gsnak\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
[2015/08/05 23:15:37 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
[2015/08/05 23:14:21 | 000,000,000 | ---D | C] -- C:\Program Files\WinRAR
[2015/08/05 23:12:03 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\appmgmt
[2015/08/05 06:33:21 | 000,000,000 | ---D | C] -- C:\WINDOWS\SoftwareDistribution
[2015/08/05 05:56:06 | 000,000,000 | -H-D | C] -- C:\Program Files\Uninstall Information
[2015/08/05 05:56:00 | 000,000,000 | ---D | C] -- C:\ProgramData\USOShared
[2015/08/05 05:54:35 | 000,000,000 | -HSD | C] -- C:\Program Files\Common Files\Sistema
[2015/08/05 05:54:35 | 000,000,000 | -HSD | C] -- C:\ProgramData\Modelos
[2015/08/05 05:54:35 | 000,000,000 | -HSD | C] -- C:\Users\Public\Documents\Minhas Músicas
[2015/08/05 05:54:35 | 000,000,000 | -HSD | C] -- C:\Users\Public\Documents\Minhas Imagens
[2015/08/05 05:54:35 | 000,000,000 | -HSD | C] -- C:\Users\Public\Documents\Meus Vídeos
[2015/08/05 05:54:35 | 000,000,000 | -HSD | C] -- C:\ProgramData\Menu Iniciar
[2015/08/05 05:54:35 | 000,000,000 | -HSD | C] -- C:\ProgramData\Documentos
[2015/08/05 05:54:35 | 000,000,000 | -HSD | C] -- C:\ProgramData\Desktop
[2015/08/05 05:54:35 | 000,000,000 | -HSD | C] -- C:\ProgramData\Dados de Aplicativos
[2015/08/05 05:54:35 | 000,000,000 | -HSD | C] -- C:\Arquivos de Programas
[2015/08/05 05:54:35 | 000,000,000 | -HSD | C] -- C:\Program Files\Arquivos Comuns
[2015/08/05 05:54:34 | 000,000,000 | -HSD | C] -- C:\Documents and Settings
[2015/08/05 05:48:01 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\sda
[2015/08/05 05:48:01 | 000,000,000 | ---D | C] -- C:\Intel
[2015/08/05 05:47:26 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\SRSLabs
[2015/08/05 05:47:22 | 000,000,000 | ---D | C] -- C:\Program Files\Realtek
[2015/08/05 05:47:21 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\RTCOM
[2015/08/05 05:43:57 | 000,000,000 | ---D | C] -- C:\WINDOWS\ServiceProfiles
[2015/08/05 05:43:32 | 000,000,000 | --SD | C] -- C:\WINDOWS\SysNative\Microsoft
[2015/08/05 03:53:26 | 000,000,000 | ---D | C] -- C:\Users\Gsnak\AppData\Roaming\Macromedia
[2015/08/05 03:48:48 | 000,000,000 | ---D | C] -- C:\Users\Gsnak\AppData\Local\MicrosoftEdge
[2015/08/05 02:52:10 | 000,000,000 | ---D | C] -- C:\Users\Gsnak\AppData\Local\NetworkTiles
[2015/08/05 02:47:18 | 000,000,000 | R--D | C] -- C:\Users\Gsnak\OneDrive
[2015/08/05 02:46:40 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft OneDrive
[2015/08/05 02:45:24 | 000,000,000 | ---D | C] -- C:\Users\Gsnak\AppData\Local\Comms
[2015/08/05 02:44:51 | 000,000,000 | ---D | C] -- C:\Users\Gsnak\AppData\Local\Publishers
[2015/08/05 02:44:21 | 000,000,000 | ---D | C] -- C:\Users\Gsnak\AppData\Local\PackageStaging
[2015/08/05 02:43:19 | 000,000,000 | R--D | C] -- C:\Users\Gsnak\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
[2015/08/05 02:43:19 | 000,000,000 | R--D | C] -- C:\Users\Gsnak\Searches
[2015/08/05 02:43:19 | 000,000,000 | R--D | C] -- C:\Users\Gsnak\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
[2015/08/05 02:43:18 | 000,000,000 | R--D | C] -- C:\Users\Gsnak\Contacts
[2015/08/05 02:43:15 | 000,000,000 | ---D | C] -- C:\Users\Gsnak\AppData\Local\VirtualStore
[2015/08/05 02:43:13 | 000,000,000 | ---D | C] -- C:\Users\Gsnak\AppData\Local\Packages
[2015/08/05 02:43:12 | 000,000,000 | ---D | C] -- C:\Users\Gsnak\AppData\Local\TileDataLayer
[2015/08/05 02:39:24 | 000,000,000 | -HSD | C] -- C:\Users\Gsnak\AppData\Local\Temporary Internet Files
[2015/08/05 02:39:24 | 000,000,000 | -HSD | C] -- C:\Users\Gsnak\SendTo
[2015/08/05 02:39:24 | 000,000,000 | -HSD | C] -- C:\Users\Gsnak\Recent
[2015/08/05 02:39:24 | 000,000,000 | -HSD | C] -- C:\Users\Gsnak\Modelos
[2015/08/05 02:39:24 | 000,000,000 | -HSD | C] -- C:\Users\Gsnak\Documents\Minhas Músicas
[2015/08/05 02:39:24 | 000,000,000 | -HSD | C] -- C:\Users\Gsnak\Documents\Minhas Imagens
[2015/08/05 02:39:24 | 000,000,000 | -HSD | C] -- C:\Users\Gsnak\Documents\Meus Vídeos
[2015/08/05 02:39:24 | 000,000,000 | -HSD | C] -- C:\Users\Gsnak\Meus Documentos
[2015/08/05 02:39:24 | 000,000,000 | -HSD | C] -- C:\Users\Gsnak\Menu Iniciar
[2015/08/05 02:39:24 | 000,000,000 | -HSD | C] -- C:\Users\Gsnak\AppData\Local\Histórico
[2015/08/05 02:39:24 | 000,000,000 | -HSD | C] -- C:\Users\Gsnak\Dados de Aplicativos
[2015/08/05 02:39:24 | 000,000,000 | -HSD | C] -- C:\Users\Gsnak\AppData\Local\Dados de Aplicativos
[2015/08/05 02:39:24 | 000,000,000 | -HSD | C] -- C:\Users\Gsnak\Cookies
[2015/08/05 02:39:24 | 000,000,000 | -HSD | C] -- C:\Users\Gsnak\Configurações Locais
[2015/08/05 02:39:24 | 000,000,000 | -HSD | C] -- C:\Users\Gsnak\Ambiente de Rede
[2015/08/05 02:39:24 | 000,000,000 | -HSD | C] -- C:\Users\Gsnak\Ambiente de Impressão
[2015/08/05 02:39:23 | 000,000,000 | --SD | C] -- C:\Users\Gsnak\AppData\Roaming\Microsoft
[2015/08/05 02:39:23 | 000,000,000 | R-SD | C] -- C:\Users\Gsnak\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows PowerShell
[2015/08/05 02:39:23 | 000,000,000 | R--D | C] -- C:\Users\Gsnak\Videos
[2015/08/05 02:39:23 | 000,000,000 | R--D | C] -- C:\Users\Gsnak\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
[2015/08/05 02:39:23 | 000,000,000 | R--D | C] -- C:\Users\Gsnak\Saved Games
[2015/08/05 02:39:23 | 000,000,000 | R--D | C] -- C:\Users\Gsnak\Pictures
[2015/08/05 02:39:23 | 000,000,000 | R--D | C] -- C:\Users\Gsnak\Music
[2015/08/05 02:39:23 | 000,000,000 | R--D | C] -- C:\Users\Gsnak\Links
[2015/08/05 02:39:23 | 000,000,000 | R--D | C] -- C:\Users\Gsnak\Favorites
[2015/08/05 02:39:23 | 000,000,000 | R--D | C] -- C:\Users\Gsnak\Downloads
[2015/08/05 02:39:23 | 000,000,000 | R--D | C] -- C:\Users\Gsnak\Documents
[2015/08/05 02:39:23 | 000,000,000 | R--D | C] -- C:\Users\Gsnak\Desktop
[2015/08/05 02:39:23 | 000,000,000 | R--D | C] -- C:\Users\Gsnak\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
[2015/08/05 02:39:23 | 000,000,000 | R--D | C] -- C:\Users\Gsnak\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
[2015/08/05 02:39:23 | 000,000,000 | -H-D | C] -- C:\Users\Gsnak\AppData
[2015/08/05 02:39:23 | 000,000,000 | ---D | C] -- C:\Users\Gsnak\AppData\Local\Temp
[2015/08/05 02:39:23 | 000,000,000 | ---D | C] -- C:\Users\Gsnak\AppData\Local\Microsoft
[2015/08/05 02:39:23 | 000,000,000 | ---D | C] -- C:\Users\Gsnak\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
[2015/08/05 02:36:02 | 000,000,000 | -HSD | C] -- C:\$RECYCLE.BIN
[2015/08/05 00:09:49 | 000,000,000 | ---D | C] -- C:\WINDOWS\Panther
[2015/08/05 00:09:13 | 000,000,000 | ---D | C] -- C:\WINDOWS\InfusedApps
[2015/08/05 00:08:22 | 000,000,000 | ---D | C] -- C:\Program Files\Synaptics
[2015/08/05 00:07:37 | 000,000,000 | ---D | C] -- C:\WINDOWS\Setup
[2015/08/05 00:06:24 | 000,000,000 | ---D | C] -- C:\WINDOWS\OCR
[2015/08/05 00:04:55 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\winrm
[2015/08/05 00:04:55 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\WCN
[2015/08/05 00:04:55 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\sysprep
[2015/08/05 00:04:55 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\slmgr
[2015/08/05 00:04:53 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\winrm
[2015/08/05 00:04:53 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\WCN
[2015/08/05 00:04:53 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\drivers\UMDF
[2015/08/05 00:04:53 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\slmgr
[2015/08/05 00:04:53 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\drivers\UMDF\pt-BR
[2015/08/05 00:04:53 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\drivers\pt-BR
[2015/08/05 00:04:53 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\Printing_Admin_Scripts
[2015/08/05 00:04:53 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\drivers\UMDF\en-US
[2015/08/05 00:04:53 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\drivers\en-US
[2015/08/05 00:04:53 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\en
[2015/08/05 00:04:53 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\0409
[2015/08/05 00:04:51 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\Printing_Admin_Scripts
[2015/08/05 00:04:50 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\drivers\UMDF\pt-BR
[2015/08/05 00:04:50 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\drivers\UMDF\en-US
[2015/08/05 00:04:50 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\en
[2015/08/05 00:04:49 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\drivers\pt-BR
[2015/08/05 00:04:49 | 000,000,000 | ---D | C] -- C:\WINDOWS\pt-BR
[2015/08/05 00:04:49 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\drivers\en-US
[2015/08/05 00:04:49 | 000,000,000 | ---D | C] -- C:\WINDOWS\en-US
[2015/08/05 00:04:49 | 000,000,000 | ---D | C] -- C:\WINDOWS\DigitalLocker
[2015/08/05 00:04:49 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\0409
[2015/08/04 23:56:18 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\zh-TW
[2015/08/04 23:56:18 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\zh-HK
[2015/08/04 23:56:18 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\zh-CN
[2015/08/04 23:56:18 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\WinMetadata
[2015/08/04 23:56:18 | 000,000,000 | ---D | C] -- C:\WINDOWS\Web
[2015/08/04 23:56:18 | 000,000,000 | ---D | C] -- C:\WINDOWS\Vss
[2015/08/04 23:56:18 | 000,000,000 | ---D | C] -- C:\WINDOWS\twain_32
[2015/08/04 23:56:18 | 000,000,000 | ---D | C] -- C:\WINDOWS\tracing
[2015/08/04 23:56:18 | 000,000,000 | ---D | C] -- C:\WINDOWS\Temp
[2015/08/04 23:56:18 | 000,000,000 | ---D | C] -- C:\WINDOWS\Tasks
[2015/08/04 23:56:18 | 000,000,000 | ---D | C] -- C:\WINDOWS\TAPI
[2015/08/04 23:56:17 | 000,000,000 | --SD | C] -- C:\WINDOWS\SysWow64\Nui
[2015/08/04 23:56:17 | 000,000,000 | --SD | C] -- C:\WINDOWS\SysNative\Nui
[2015/08/04 23:56:17 | 000,000,000 | --SD | C] -- C:\WINDOWS\SysWow64\F12
[2015/08/04 23:56:17 | 000,000,000 | --SD | C] -- C:\WINDOWS\SysNative\F12
[2015/08/04 23:56:17 | 000,000,000 | --SD | C] -- C:\WINDOWS\SysNative\dsc
[2015/08/04 23:56:17 | 000,000,000 | --SD | C] -- C:\WINDOWS\SysWow64\DiagSvcs
[2015/08/04 23:56:17 | 000,000,000 | --SD | C] -- C:\WINDOWS\SysNative\DiagSvcs
[2015/08/04 23:56:17 | 000,000,000 | --SD | C] -- C:\WINDOWS\SysWow64\Configuration
[2015/08/04 23:56:17 | 000,000,000 | --SD | C] -- C:\WINDOWS\SysNative\Configuration
[2015/08/04 23:56:17 | 000,000,000 | R-SD | C] -- C:\WINDOWS\Media
[2015/08/04 23:56:17 | 000,000,000 | R--D | C] -- C:\WINDOWS\PurchaseDialog
[2015/08/04 23:56:17 | 000,000,000 | R--D | C] -- C:\WINDOWS\PrintDialog
[2015/08/04 23:56:17 | 000,000,000 | R--D | C] -- C:\WINDOWS\Offline Web Pages
[2015/08/04 23:56:17 | 000,000,000 | R--D | C] -- C:\WINDOWS\MiracastView
[2015/08/04 23:56:17 | 000,000,000 | -HSD | C] -- C:\WINDOWS\Installer
[2015/08/04 23:56:17 | 000,000,000 | -H-D | C] -- C:\WINDOWS\SysNative\GroupPolicy
[2015/08/04 23:56:17 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\zh-TW
[2015/08/04 23:56:17 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\zh-HK
[2015/08/04 23:56:17 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\zh-CN
[2015/08/04 23:56:17 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\WinMetadata
[2015/08/04 23:56:17 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\winevt
[2015/08/04 23:56:17 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\WindowsPowerShell
[2015/08/04 23:56:17 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\WindowsPowerShell
[2015/08/04 23:56:17 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\WinBioPlugIns
[2015/08/04 23:56:17 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\WinBioDatabase
[2015/08/04 23:56:17 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\wfp
[2015/08/04 23:56:17 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\WDI
[2015/08/04 23:56:17 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\wbem
[2015/08/04 23:56:17 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\wbem
[2015/08/04 23:56:17 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\uk-UA
[2015/08/04 23:56:17 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\uk-UA
[2015/08/04 23:56:17 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\tr-TR
[2015/08/04 23:56:17 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\tr-TR
[2015/08/04 23:56:17 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\th-TH
[2015/08/04 23:56:17 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\th-TH
[2015/08/04 23:56:17 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\Tasks
[2015/08/04 23:56:17 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\Tasks
[2015/08/04 23:56:17 | 000,000,000 | ---D | C] -- C:\WINDOWS\syswow64
[2015/08/04 23:56:17 | 000,000,000 | ---D | C] -- C:\WINDOWS\SystemResources
[2015/08/04 23:56:17 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\SystemResetPlatform
[2015/08/04 23:56:17 | 000,000,000 | ---D | C] -- C:\WINDOWS\SystemApps
[2015/08/04 23:56:17 | 000,000,000 | ---D | C] -- C:\WINDOWS\System
[2015/08/04 23:56:17 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\sv-SE
[2015/08/04 23:56:17 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\sv-SE
[2015/08/04 23:56:17 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\sru
[2015/08/04 23:56:17 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\sru
[2015/08/04 23:56:17 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\sr-Latn-RS
[2015/08/04 23:56:17 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\sr-Latn-RS
[2015/08/04 23:56:17 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\sr-Latn-CS
[2015/08/04 23:56:17 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\sr-Latn-CS
[2015/08/04 23:56:17 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\sppui
[2015/08/04 23:56:17 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\sppui
[2015/08/04 23:56:17 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\spp
[2015/08/04 23:56:17 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\spp
[2015/08/04 23:56:17 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\spool
[2015/08/04 23:56:17 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\Speech_OneCore
[2015/08/04 23:56:17 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\Speech_OneCore
[2015/08/04 23:56:17 | 000,000,000 | ---D | C] -- C:\WINDOWS\Speech_OneCore
[2015/08/04 23:56:17 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\Speech
[2015/08/04 23:56:17 | 000,000,000 | ---D | C] -- C:\WINDOWS\System\Speech
[2015/08/04 23:56:17 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\Speech
[2015/08/04 23:56:17 | 000,000,000 | ---D | C] -- C:\WINDOWS\Speech
[2015/08/04 23:56:17 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\SMI
[2015/08/04 23:56:17 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\sl-SI
[2015/08/04 23:56:17 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\sl-SI
[2015/08/04 23:56:17 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\sk-SK
[2015/08/04 23:56:17 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\sk-SK
[2015/08/04 23:56:17 | 000,000,000 | ---D | C] -- C:\WINDOWS\SKB
[2015/08/04 23:56:17 | 000,000,000 | ---D | C] -- C:\WINDOWS\ShellNew
[2015/08/04 23:56:17 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\setup
[2015/08/04 23:56:17 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\setup
[2015/08/04 23:56:17 | 000,000,000 | ---D | C] -- C:\WINDOWS\security
[2015/08/04 23:56:17 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\SecureBootUpdates
[2015/08/04 23:56:17 | 000,000,000 | ---D | C] -- C:\WINDOWS\schemas
[2015/08/04 23:56:17 | 000,000,000 | ---D | C] -- C:\WINDOWS\SchCache
[2015/08/04 23:56:17 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\ru-RU
[2015/08/04 23:56:17 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\ru-RU
[2015/08/04 23:56:17 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\ro-RO
[2015/08/04 23:56:17 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\ro-RO
[2015/08/04 23:56:17 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\restore
[2015/08/04 23:56:17 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\restore
[2015/08/04 23:56:17 | 000,000,000 | ---D | C] -- C:\WINDOWS\Resources
[2015/08/04 23:56:17 | 000,000,000 | ---D | C] -- C:\WINDOWS\rescache
[2015/08/04 23:56:17 | 000,000,000 | ---D | C] -- C:\WINDOWS\registration
[2015/08/04 23:56:17 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\Recovery
[2015/08/04 23:56:17 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\Recovery
[2015/08/04 23:56:17 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\RasToast
[2015/08/04 23:56:17 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\RasToast
[2015/08/04 23:56:17 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\ras
[2015/08/04 23:56:17 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\ras
[2015/08/04 23:56:17 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\pt-PT
[2015/08/04 23:56:17 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\pt-PT
[2015/08/04 23:56:17 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\pt-BR
[2015/08/04 23:56:17 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\pt-BR
[2015/08/04 23:56:17 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\ProximityToast
[2015/08/04 23:56:17 | 000,000,000 | ---D | C] -- C:\WINDOWS\Provisioning
[2015/08/04 23:56:17 | 000,000,000 | ---D | C] -- C:\WINDOWS\prefetch
[2015/08/04 23:56:17 | 000,000,000 | ---D | C] -- C:\WINDOWS\PolicyDefinitions
[2015/08/04 23:56:17 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\PointOfService
[2015/08/04 23:56:17 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\pl-PL
[2015/08/04 23:56:17 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\pl-PL
[2015/08/04 23:56:17 | 000,000,000 | ---D | C] -- C:\WINDOWS\PLA
[2015/08/04 23:56:17 | 000,000,000 | ---D | C] -- C:\WINDOWS\Performance
[2015/08/04 23:56:17 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\oobe
[2015/08/04 23:56:17 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\oobe
[2015/08/04 23:56:17 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\nl-NL
[2015/08/04 23:56:17 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\nl-NL
[2015/08/04 23:56:17 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\networklist
[2015/08/04 23:56:17 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\networklist
[2015/08/04 23:56:17 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\NDF
[2015/08/04 23:56:17 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\NDF
[2015/08/04 23:56:17 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\nb-NO
[2015/08/04 23:56:17 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\nb-NO
[2015/08/04 23:56:17 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\MUI
[2015/08/04 23:56:17 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\MUI
[2015/08/04 23:56:17 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\MsDtc
[2015/08/04 23:56:17 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\MsDtc
[2015/08/04 23:56:17 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\MSDRM
[2015/08/04 23:56:17 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\MSDRM
[2015/08/04 23:56:17 | 000,000,000 | ---D | C] -- C:\WINDOWS\ModemLogs
[2015/08/04 23:56:17 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\migwiz
[2015/08/04 23:56:17 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\migwiz
[2015/08/04 23:56:17 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\migration
[2015/08/04 23:56:17 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\migration
[2015/08/04 23:56:17 | 000,000,000 | ---D | C] -- C:\WINDOWS\Migration
[2015/08/04 23:56:17 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\MailContactsCalendarSync
[2015/08/04 23:56:17 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\Macromed
[2015/08/04 23:56:17 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\Macromed
[2015/08/04 23:56:17 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\lv-LV
[2015/08/04 23:56:17 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\lv-LV
[2015/08/04 23:56:17 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\lt-LT
[2015/08/04 23:56:17 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\lt-LT
[2015/08/04 23:56:17 | 000,000,000 | ---D | C] -- C:\WINDOWS\Logs
[2015/08/04 23:56:17 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\LogFiles
[2015/08/04 23:56:17 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\LogFiles
[2015/08/04 23:56:17 | 000,000,000 | ---D | C] -- C:\WINDOWS\LiveKernelReports
[2015/08/04 23:56:17 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\Licenses
[2015/08/04 23:56:17 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\Licenses
[2015/08/04 23:56:17 | 000,000,000 | ---D | C] -- C:\WINDOWS\L2Schemas
[2015/08/04 23:56:17 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\ko-KR
[2015/08/04 23:56:17 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\ko-KR
[2015/08/04 23:56:17 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\ja-JP
[2015/08/04 23:56:17 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\ja-JP
[2015/08/04 23:56:17 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\it-IT
[2015/08/04 23:56:17 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\it-IT
[2015/08/04 23:56:17 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\Ipmi
[2015/08/04 23:56:17 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\Ipmi
[2015/08/04 23:56:17 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\InstallShield
[2015/08/04 23:56:17 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\InputMethod
[2015/08/04 23:56:17 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\InputMethod
[2015/08/04 23:56:17 | 000,000,000 | ---D | C] -- C:\WINDOWS\InputMethod
[2015/08/04 23:56:17 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\inetsrv
[2015/08/04 23:56:17 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\inetsrv
[2015/08/04 23:56:17 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\IME
[2015/08/04 23:56:17 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\IME
[2015/08/04 23:56:17 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\icsxml
[2015/08/04 23:56:17 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\icsxml
[2015/08/04 23:56:17 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\hu-HU
[2015/08/04 23:56:17 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\hu-HU
[2015/08/04 23:56:17 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\hr-HR
[2015/08/04 23:56:17 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\hr-HR
[2015/08/04 23:56:17 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\he-IL
[2015/08/04 23:56:17 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\he-IL
[2015/08/04 23:56:17 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\GroupPolicyUsers
[2015/08/04 23:56:17 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\GroupPolicyUsers
[2015/08/04 23:56:17 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\GroupPolicy
[2015/08/04 23:56:17 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\FxsTmp
[2015/08/04 23:56:17 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\FxsTmp
[2015/08/04 23:56:17 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\fr-FR
[2015/08/04 23:56:17 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\fr-FR
[2015/08/04 23:56:17 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\fr-CA
[2015/08/04 23:56:17 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\fr-CA
[2015/08/04 23:56:17 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\fi-FI
[2015/08/04 23:56:17 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\fi-FI
[2015/08/04 23:56:17 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\et-EE
[2015/08/04 23:56:17 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\et-EE
[2015/08/04 23:56:17 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\drivers\etc
[2015/08/04 23:56:17 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\es-MX
[2015/08/04 23:56:17 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\es-MX
[2015/08/04 23:56:17 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\es-ES
[2015/08/04 23:56:17 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\es-ES
[2015/08/04 23:56:17 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\en-US
[2015/08/04 23:56:17 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\en-US
[2015/08/04 23:56:17 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\en-GB
[2015/08/04 23:56:17 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\en-GB
[2015/08/04 23:56:17 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\el-GR
[2015/08/04 23:56:17 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\el-GR
[2015/08/04 23:56:17 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\DriverStore
[2015/08/04 23:56:17 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\drivers
[2015/08/04 23:56:17 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\downlevel
[2015/08/04 23:56:17 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\downlevel
[2015/08/04 23:56:17 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\Dism
[2015/08/04 23:56:17 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\Dism
[2015/08/04 23:56:17 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\de-DE
[2015/08/04 23:56:17 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\de-DE
[2015/08/04 23:56:17 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\da-DK
[2015/08/04 23:56:17 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\da-DK
[2015/08/04 23:56:17 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\cs-CZ
[2015/08/04 23:56:17 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\cs-CZ
[2015/08/04 23:56:17 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\config
[2015/08/04 23:56:17 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\Com
[2015/08/04 23:56:17 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\Com
[2015/08/04 23:56:17 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\CodeIntegrity
[2015/08/04 23:56:17 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\catroot2
[2015/08/04 23:56:17 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\catroot
[2015/08/04 23:56:17 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\Bthprops
[2015/08/04 23:56:17 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\Bthprops
[2015/08/04 23:56:17 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\Boot
[2015/08/04 23:56:17 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\bg-BG
[2015/08/04 23:56:17 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\bg-BG
[2015/08/04 23:56:17 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\ar-SA
[2015/08/04 23:56:17 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\ar-SA
[2015/08/04 23:56:17 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\appraiser
[2015/08/04 23:56:17 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\AppLocker
[2015/08/04 23:56:17 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\AppLocker
[2015/08/04 23:56:17 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\AdvancedInstallers
[2015/08/04 23:56:17 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\AdvancedInstallers
[2015/08/04 23:56:16 | 000,000,000 | --SD | C] -- C:\Program Files\WindowsPowerShell
[2015/08/04 23:56:16 | 000,000,000 | --SD | C] -- C:\Program Files (x86)\WindowsPowerShell
[2015/08/04 23:56:16 | 000,000,000 | --SD | C] -- C:\ProgramData\Microsoft
[2015/08/04 23:56:16 | 000,000,000 | --SD | C] -- C:\WINDOWS\Downloaded Program Files
[2015/08/04 23:56:16 | 000,000,000 | R-SD | C] -- C:\WINDOWS\Fonts
[2015/08/04 23:56:16 | 000,000,000 | RH-D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Tablet PC
[2015/08/04 23:56:16 | 000,000,000 | R--D | C] -- C:\Program Files (x86)\Windows Photo Viewer
[2015/08/04 23:56:16 | 000,000,000 | R--D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\System Tools
[2015/08/04 23:56:16 | 000,000,000 | R--D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\StartUp
[2015/08/04 23:56:16 | 000,000,000 | R--D | C] -- C:\WINDOWS\ImmersiveControlPanel
[2015/08/04 23:56:16 | 000,000,000 | R--D | C] -- C:\WINDOWS\DevicesFlow
[2015/08/04 23:56:16 | 000,000,000 | R--D | C] -- C:\WINDOWS\DesktopTileResources
[2015/08/04 23:56:16 | 000,000,000 | R--D | C] -- C:\WINDOWS\assembly
[2015/08/04 23:56:16 | 000,000,000 | R--D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools
[2015/08/04 23:56:16 | 000,000,000 | R--D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories
[2015/08/04 23:56:16 | 000,000,000 | R--D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessibility
[2015/08/04 23:56:16 | 000,000,000 | -HSD | C] -- C:\Program Files\Windows Sidebar
[2015/08/04 23:56:16 | 000,000,000 | -HSD | C] -- C:\Program Files (x86)\Windows Sidebar
[2015/08/04 23:56:16 | 000,000,000 | -HSD | C] -- C:\WINDOWS\BitLockerDiscoveryVolumeContents
[2015/08/04 23:56:16 | 000,000,000 | -H-D | C] -- C:\Program Files\WindowsApps
[2015/08/04 23:56:16 | 000,000,000 | -H-D | C] -- C:\ProgramData
[2015/08/04 23:56:16 | 000,000,000 | -H-D | C] -- C:\WINDOWS\ELAMBKUP
[2015/08/04 23:56:16 | 000,000,000 | ---D | C] -- C:\Program Files\Windows Portable Devices
[2015/08/04 23:56:16 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Windows Portable Devices
[2015/08/04 23:56:16 | 000,000,000 | ---D | C] -- C:\Program Files\Windows Photo Viewer
[2015/08/04 23:56:16 | 000,000,000 | ---D | C] -- C:\Program Files\Windows NT
[2015/08/04 23:56:16 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Windows NT
[2015/08/04 23:56:16 | 000,000,000 | ---D | C] -- C:\Program Files\Windows Multimedia Platform
[2015/08/04 23:56:16 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Windows Multimedia Platform
[2015/08/04 23:56:16 | 000,000,000 | ---D | C] -- C:\Program Files\Windows Media Player
[2015/08/04 23:56:16 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Windows Media Player
[2015/08/04 23:56:16 | 000,000,000 | ---D | C] -- C:\Program Files\Windows Mail
[2015/08/04 23:56:16 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Windows Mail
[2015/08/04 23:56:16 | 000,000,000 | ---D | C] -- C:\Program Files\Windows Journal
[2015/08/04 23:56:16 | 000,000,000 | ---D | C] -- C:\Program Files\Windows Defender
[2015/08/04 23:56:16 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Windows Defender
[2015/08/04 23:56:16 | 000,000,000 | ---D | C] -- C:\ProgramData\USOPrivate
[2015/08/04 23:56:16 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\System
[2015/08/04 23:56:16 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\System
[2015/08/04 23:56:16 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\Sysprep
[2015/08/04 23:56:16 | 000,000,000 | ---D | C] -- C:\ProgramData\SoftwareDistribution
[2015/08/04 23:56:16 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Services
[2015/08/04 23:56:16 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Services
[2015/08/04 23:56:16 | 000,000,000 | ---D | C] -- C:\ProgramData\regid.1991-06.com.microsoft
[2015/08/04 23:56:16 | 000,000,000 | ---D | C] -- C:\PerfLogs
[2015/08/04 23:56:16 | 000,000,000 | ---D | C] -- C:\WINDOWS\Microsoft.NET
[2015/08/04 23:56:16 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Microsoft.NET
[2015/08/04 23:56:16 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\microsoft shared
[2015/08/04 23:56:16 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Microsoft Shared
[2015/08/04 23:56:16 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Maintenance
[2015/08/04 23:56:16 | 000,000,000 | ---D | C] -- C:\Program Files\Internet Explorer
[2015/08/04 23:56:16 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Internet Explorer
[2015/08/04 23:56:16 | 000,000,000 | ---D | C] -- C:\WINDOWS\IME
[2015/08/04 23:56:16 | 000,000,000 | ---D | C] -- C:\WINDOWS\Help
[2015/08/04 23:56:16 | 000,000,000 | ---D | C] -- C:\WINDOWS\Globalization
[2015/08/04 23:56:16 | 000,000,000 | ---D | C] -- C:\WINDOWS\diagnostics
[2015/08/04 23:56:16 | 000,000,000 | ---D | C] -- C:\WINDOWS\debug
[2015/08/04 23:56:16 | 000,000,000 | ---D | C] -- C:\WINDOWS\Cursors
[2015/08/04 23:56:16 | 000,000,000 | ---D | C] -- C:\WINDOWS\CSC
[2015/08/04 23:56:16 | 000,000,000 | ---D | C] -- C:\ProgramData\Comms
[2015/08/04 23:56:16 | 000,000,000 | ---D | C] -- C:\WINDOWS\Branding
[2015/08/04 23:56:16 | 000,000,000 | ---D | C] -- C:\WINDOWS\Boot
[2015/08/04 23:56:16 | 000,000,000 | ---D | C] -- C:\WINDOWS\AppReadiness
[2015/08/04 23:56:16 | 000,000,000 | ---D | C] -- C:\WINDOWS\AppPatch
[2015/08/04 23:56:16 | 000,000,000 | ---D | C] -- C:\WINDOWS\appcompat
[2015/08/04 23:56:16 | 000,000,000 | ---D | C] -- C:\WINDOWS\addins
[2015/08/04 23:55:39 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\drivers\UMDF
[2015/08/04 23:55:36 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\drivers
[2015/08/04 23:53:27 | 000,000,000 | ---D | C] -- C:\WINDOWS\INF
[2015/08/04 23:43:00 | 000,000,000 | ---D | C] -- C:\WINDOWS\CbsTemp
[2015/08/04 23:37:39 | 000,000,000 | R--D | C] -- C:\Users
[2015/08/04 23:37:39 | 000,000,000 | R--D | C] -- C:\Program Files
[2015/08/04 23:37:39 | 000,000,000 | R--D | C] -- C:\Program Files (x86)
[2015/08/04 23:37:39 | 000,000,000 | ---D | C] -- C:\WINDOWS\WinSxS
[2015/08/04 23:37:39 | 000,000,000 | ---D | C] -- C:\Windows
[2015/08/04 23:37:39 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32
[2015/08/04 23:37:39 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\SMI
[2015/08/04 23:37:39 | 000,000,000 | ---D | C] -- C:\WINDOWS\servicing
[2015/08/04 23:37:39 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\DriverStore
[2015/08/04 23:37:39 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\config
[2015/08/04 23:37:39 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files
[2015/08/04 23:37:39 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files
[2015/08/04 23:37:39 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\CatRoot
[2015/08/04 10:30:06 | 000,033,960 | ---- | C] (Synaptics Incorporated) -- C:\WINDOWS\SysNative\drivers\Smb_driver_Intel.sys
[2015/08/04 10:30:06 | 000,033,448 | ---- | C] (Synaptics Incorporated) -- C:\WINDOWS\SysNative\drivers\Smb_driver_AMDASF.sys
[2015/08/04 10:28:52 | 000,260,264 | ---- | C] (Synaptics Incorporated) -- C:\WINDOWS\SysNative\SynTPAPI.dll
[2015/08/04 10:28:52 | 000,246,952 | ---- | C] (Synaptics Incorporated) -- C:\WINDOWS\SysNative\SynTPCo31.dll
[2015/08/04 10:28:51 | 000,606,376 | ---- | C] (Synaptics Incorporated) -- C:\WINDOWS\SysNative\drivers\SynTP.sys
[2015/08/04 10:28:48 | 000,755,880 | ---- | C] (Synaptics Incorporated) -- C:\WINDOWS\SysNative\SynCOM.dll
[2015/08/04 10:28:48 | 000,410,792 | ---- | C] (Synaptics Incorporated) -- C:\WINDOWS\SysWow64\SynCom.dll
[2015/08/04 10:28:45 | 000,033,960 | ---- | C] (Synaptics Incorporated) -- C:\WINDOWS\SysNative\drivers\Smb_driver_Intel_Aux.sys
[2015/08/04 10:28:45 | 000,033,448 | ---- | C] (Synaptics Incorporated) -- C:\WINDOWS\SysNative\drivers\Smb_driver_AMDASF_Aux.sys
[2015/08/04 09:10:46 | 000,000,000 | -HSD | C] -- C:\Recovery
[2015/08/04 08:51:32 | 000,015,920 | ---- | C] (Windows (R) Codename Longhorn DDK provider) -- C:\WINDOWS\SysNative\drivers\i8042HDR.sys
[2015/08/03 09:07:52 | 000,197,616 | ---- | C] (Tonec Inc.) -- C:\WINDOWS\SysNative\drivers\idmwfp.sys
[2015/07/31 13:57:53 | 000,000,000 | -H-D | C] -- C:\$SysReset

[color=#E56717]========== Files - Modified Within 30 Days ==========[/color]

[2015/08/14 01:37:30 | 000,016,148 | ---- | M] () -- C:\WINDOWS\SysNative\GSNAKY_Gsnak_HistoryPrediction.bin
[2015/08/14 01:35:56 | 001,810,446 | ---- | M] () -- C:\WINDOWS\SysNative\PerfStringBackup.INI
[2015/08/14 01:35:56 | 000,782,022 | ---- | M] () -- C:\WINDOWS\SysNative\prfh0416.dat
[2015/08/14 01:35:56 | 000,731,332 | ---- | M] () -- C:\WINDOWS\SysNative\perfh009.dat
[2015/08/14 01:35:56 | 000,153,010 | ---- | M] () -- C:\WINDOWS\SysNative\prfc0416.dat
[2015/08/14 01:35:56 | 000,138,162 | ---- | M] () -- C:\WINDOWS\SysNative\perfc009.dat
[2015/08/14 01:33:25 | 000,067,584 | --S- | M] () -- C:\WINDOWS\bootstat.dat
[2015/08/14 01:31:23 | 268,435,456 | -HS- | M] () -- C:\swapfile.sys
[2015/08/14 01:31:15 | 1696,108,544 | -HS- | M] () -- C:\hiberfil.sys
[2015/08/14 01:10:36 | 000,008,192 | ---- | M] () -- C:\WINDOWS\SysNative\edb.chk
[2015/08/14 00:21:44 | 000,000,214 | ---- | M] () -- C:\WINDOWS\tasks\CreateExplorerShellUnelevatedTask.job
[2015/08/14 00:13:44 | 000,075,549 | ---- | M] () -- C:\Users\Gsnak\Desktop\Sem título.png
[2015/08/13 23:25:53 | 000,000,008 | RHS- | M] () -- C:\Users\Gsnak\ntuser.pol
[2015/08/13 14:40:15 | 001,048,344 | ---- | M] (AVAST Software) -- C:\WINDOWS\SysNative\drivers\aswsnx.sys
[2015/08/11 23:54:22 | 002,675,819 | ---- | M] () -- C:\Users\Gsnak\Desktop\Turma do Pagode - Tô Amando Você.mp3
[2015/08/10 22:32:12 | 000,456,192 | ---- | M] () -- C:\WINDOWS\SetACL.exe
[2015/08/10 16:29:05 | 000,000,040 | -H-- | M] () -- C:\718BE7146928
[2015/08/09 20:37:51 | 000,206,080 | ---- | M] (DEVGURU Co., LTD.(www.devguru.co.kr)) -- C:\WINDOWS\SysNative\drivers\ssudserd.sys
[2015/08/09 14:48:00 | 000,000,034 | ---- | M] () -- C:\Users\Gsnak\AppData\Roaming\AdobeWLCMCache.dat
[2015/08/09 11:39:29 | 000,459,456 | ---- | M] () -- C:\WINDOWS\SysNative\FNTCACHE.DAT
[2015/08/08 16:42:20 | 000,447,944 | ---- | M] (AVAST Software) -- C:\WINDOWS\SysNative\drivers\aswSP.sys
[2015/08/08 16:42:20 | 000,274,808 | ---- | M] (AVAST Software) -- C:\WINDOWS\SysNative\drivers\aswVmm.sys
[2015/08/08 16:42:20 | 000,150,672 | ---- | M] (AVAST Software) -- C:\WINDOWS\SysNative\drivers\aswStm.sys
[2015/08/08 16:42:20 | 000,090,968 | ---- | M] (AVAST Software) -- C:\WINDOWS\SysNative\drivers\aswMonFlt.sys
[2015/08/08 16:42:20 | 000,065,224 | ---- | M] (AVAST Software) -- C:\WINDOWS\SysNative\drivers\aswRvrt.sys
[2015/08/08 16:42:20 | 000,028,656 | ---- | M] (AVAST Software) -- C:\WINDOWS\SysNative\drivers\aswHwid.sys
[2015/08/08 16:42:19 | 000,378,880 | ---- | M] (AVAST Software) -- C:\WINDOWS\SysNative\aswBoot.exe
[2015/08/08 16:42:19 | 000,093,528 | ---- | M] (AVAST Software) -- C:\WINDOWS\SysNative\drivers\aswRdr2.sys
[2015/08/08 16:42:04 | 000,043,112 | ---- | M] (AVAST Software) -- C:\WINDOWS\avastSS.scr
[2015/08/08 03:33:48 | 000,000,000 | ---- | M] () -- C:\autoexec.bat
[2015/08/08 02:46:45 | 000,065,536 | ---- | M] () -- C:\WINDOWS\SysNative\edbres00002.jrs
[2015/08/08 02:46:45 | 000,065,536 | ---- | M] () -- C:\WINDOWS\SysNative\edbres00001.jrs
[2015/08/08 02:21:41 | 000,000,047 | ---- | M] () -- C:\WINDOWS\SysWow64\config.nt
[2015/08/08 02:21:39 | 000,125,952 | ---- | M] (Aladdin Knowledge Systems) -- C:\WINDOWS\SysWow64\drivers\hardlock.sys
[2015/08/08 02:21:39 | 000,023,040 | ---- | M] (Aladdin Knowledge Systems) -- C:\WINDOWS\SysWow64\drivers\aksusb.sys
[2015/08/08 01:06:15 | 000,030,264 | ---- | M] (Disc Soft Ltd) -- C:\WINDOWS\SysNative\drivers\dtlitescsibus.sys
[2015/08/07 17:24:35 | 000,000,057 | ---- | M] () -- C:\ProgramData\Ament.ini
[2015/08/06 00:58:51 | 000,016,148 | ---- | M] () -- C:\WINDOWS\SysNative\DESKTOP-ERRBSK7_Gsnak_HistoryPrediction.bin
[2015/08/05 05:48:32 | 000,000,000 | -H-- | M] () -- C:\WINDOWS\SysNative\drivers\Msft_Kernel_SynTP_01011.Wdf
[2015/08/05 05:47:44 | 000,000,000 | -H-- | M] () -- C:\WINDOWS\SysNative\drivers\Msft_Kernel_Smb_driver_Intel_01011.Wdf
[2015/08/05 03:35:46 | 000,000,017 | ---- | M] () -- C:\Users\Gsnak\AppData\Local\resmon.resmoncfg
[2015/08/05 03:10:34 | 000,000,000 | -H-- | M] () -- C:\WINDOWS\SysNative\drivers\Msft_User_WpdFs_01_11_00.Wdf
[2015/08/05 02:43:09 | 000,016,148 | ---- | M] () -- C:\WINDOWS\SysNative\DESKTOP-ERRBSK7_defaultuser0_HistoryPrediction.bin
[2015/08/05 02:42:37 | 000,000,000 | -H-- | M] () -- C:\WINDOWS\SysNative\drivers\Msft_User_WpdMtpDr_01_11_00.Wdf
[2015/08/05 00:04:10 | 000,328,354 | ---- | M] () -- C:\WINDOWS\SysNative\prfi0416.dat
[2015/08/05 00:04:10 | 000,040,752 | ---- | M] () -- C:\WINDOWS\SysNative\prfd0416.dat
[2015/08/04 23:52:20 | 000,001,988 | ---- | M] () -- C:\WINDOWS\SysWow64\ticrf.rat
[2015/08/04 23:52:20 | 000,000,741 | ---- | M] () -- C:\WINDOWS\SysWow64\NOISE.DAT
[2015/08/04 23:52:19 | 000,215,943 | ---- | M] () -- C:\WINDOWS\SysWow64\dssec.dat
[2015/08/04 23:52:19 | 000,008,798 | ---- | M] () -- C:\WINDOWS\SysWow64\icrav03.rat
[2015/08/04 23:52:14 | 000,017,463 | ---- | M] () -- C:\WINDOWS\SysNative\drivers\etc\services
[2015/08/04 23:52:14 | 000,003,683 | ---- | M] () -- C:\WINDOWS\SysNative\drivers\etc\lmhosts.sam
[2015/08/04 23:52:14 | 000,001,358 | ---- | M] () -- C:\WINDOWS\SysNative\drivers\etc\protocol
[2015/08/04 23:52:14 | 000,000,824 | ---- | M] () -- C:\WINDOWS\SysNative\drivers\etc\hosts
[2015/08/04 23:52:14 | 000,000,407 | ---- | M] () -- C:\WINDOWS\SysNative\drivers\etc\networks
[2015/08/04 23:52:13 | 000,015,462 | ---- | M] () -- C:\WINDOWS\SysNative\OEMDefaultAssociations.xml
[2015/08/04 23:52:13 | 000,001,988 | ---- | M] () -- C:\WINDOWS\SysNative\ticrf.rat
[2015/08/04 23:52:13 | 000,000,741 | ---- | M] () -- C:\WINDOWS\SysNative\NOISE.DAT
[2015/08/04 23:52:12 | 000,215,943 | ---- | M] () -- C:\WINDOWS\SysNative\dssec.dat
[2015/08/04 23:52:12 | 000,008,798 | ---- | M] () -- C:\WINDOWS\SysNative\icrav03.rat
[2015/08/04 23:52:12 | 000,000,858 | ---- | M] () -- C:\WINDOWS\SysNative\DefaultQuestions.json
[2015/08/04 23:52:12 | 000,000,389 | ---- | M] () -- C:\WINDOWS\SysNative\AutoWorkplace.exe.config
[2015/08/04 23:52:08 | 000,296,742 | ---- | M] () -- C:\WINDOWS\SysNative\perfi009.dat
[2015/08/04 23:52:08 | 000,033,362 | ---- | M] () -- C:\WINDOWS\SysNative\perfd009.dat
[2015/08/04 10:28:52 | 000,606,376 | ---- | M] (Synaptics Incorporated) -- C:\WINDOWS\SysNative\drivers\SynTP.sys
[2015/08/04 10:28:52 | 000,260,264 | ---- | M] (Synaptics Incorporated) -- C:\WINDOWS\SysNative\SynTPAPI.dll
[2015/08/04 10:28:52 | 000,246,952 | ---- | M] (Synaptics Incorporated) -- C:\WINDOWS\SysNative\SynTPCo31.dll
[2015/08/04 10:28:48 | 000,755,880 | ---- | M] (Synaptics Incorporated) -- C:\WINDOWS\SysNative\SynCOM.dll
[2015/08/04 10:28:48 | 000,410,792 | ---- | M] (Synaptics Incorporated) -- C:\WINDOWS\SysWow64\SynCom.dll
[2015/08/04 10:28:45 | 000,231,456 | ---- | M] () -- C:\WINDOWS\SysNative\pca-manta.bin
[2015/08/04 10:28:45 | 000,033,960 | ---- | M] (Synaptics Incorporated) -- C:\WINDOWS\SysNative\drivers\Smb_driver_Intel_Aux.sys
[2015/08/04 10:28:45 | 000,033,960 | ---- | M] (Synaptics Incorporated) -- C:\WINDOWS\SysNative\drivers\Smb_driver_Intel.sys
[2015/08/04 10:28:45 | 000,033,448 | ---- | M] (Synaptics Incorporated) -- C:\WINDOWS\SysNative\drivers\Smb_driver_AMDASF_Aux.sys
[2015/08/04 10:28:45 | 000,033,448 | ---- | M] (Synaptics Incorporated) -- C:\WINDOWS\SysNative\drivers\Smb_driver_AMDASF.sys
[2015/08/04 10:28:44 | 000,000,092 | ---- | M] () -- C:\WINDOWS\SysNative\calibration.bin
[2015/08/04 09:00:52 | 000,403,968 | ---- | M] () -- C:\WINDOWS\SysNative\diagtrack_wininternal.dll
[2015/08/04 09:00:24 | 002,446,336 | ---- | M] () -- C:\WINDOWS\SysNative\InputService.dll
[2015/08/04 09:00:24 | 001,823,232 | ---- | M] () -- C:\WINDOWS\SysWow64\InputService.dll
[2015/08/04 09:00:24 | 000,505,344 | ---- | M] () -- C:\WINDOWS\SysNative\EditionUpgradeManagerObj.dll
[2015/08/04 09:00:24 | 000,412,672 | ---- | M] () -- C:\WINDOWS\SysNative\diagtrack_win.dll
[2015/08/04 09:00:24 | 000,032,768 | ---- | M] () -- C:\WINDOWS\SysNative\LicenseManagerApi.dll
[2015/07/30 03:05:18 | 002,498,808 | ---- | M] () -- C:\WINDOWS\SysNative\CoreUIComponents.dll
[2015/07/30 01:24:07 | 001,769,056 | ---- | M] () -- C:\WINDOWS\SysWow64\CoreUIComponents.dll

[color=#E56717]========== Files Created - No Company Name ==========[/color]

[2015/08/14 01:37:30 | 000,016,148 | ---- | C] () -- C:\WINDOWS\SysNative\GSNAKY_Gsnak_HistoryPrediction.bin
[2015/08/14 00:13:44 | 000,075,549 | ---- | C] () -- C:\Users\Gsnak\Desktop\Sem título.png
[2015/08/13 23:56:30 | 000,000,214 | ---- | C] () -- C:\WINDOWS\tasks\CreateExplorerShellUnelevatedTask.job
[2015/08/13 23:24:41 | 000,000,008 | RHS- | C] () -- C:\Users\Gsnak\ntuser.pol
[2015/08/12 03:33:49 | 000,001,386 | ---- | C] () -- C:\Users\Gsnak\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\GDBManager.lnk
[2015/08/12 03:00:02 | 000,001,520 | ---- | C] () -- C:\Users\Gsnak\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Fireworks.lnk
[2015/08/11 23:53:55 | 002,675,819 | ---- | C] () -- C:\Users\Gsnak\Desktop\Turma do Pagode - Tô Amando Você.mp3
[2015/08/11 20:47:57 | 000,000,947 | ---- | C] () -- C:\Users\Gsnak\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\VisualBoyAdvance.lnk
[2015/08/11 20:47:47 | 000,000,860 | ---- | C] () -- C:\Users\Gsnak\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\zsnesw.lnk
[2015/08/10 22:32:12 | 000,456,192 | ---- | C] () -- C:\WINDOWS\SetACL.exe
[2015/08/10 16:29:05 | 000,000,040 | -H-- | C] () -- C:\718BE7146928
[2015/08/09 14:48:00 | 000,000,034 | ---- | C] () -- C:\Users\Gsnak\AppData\Roaming\AdobeWLCMCache.dat
[2015/08/09 14:28:26 | 000,001,540 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Illustrator CC 2015.lnk
[2015/08/09 02:52:59 | 000,001,085 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Photoshop CC 2015.lnk
[2015/08/08 04:14:55 | 000,001,146 | ---- | C] () -- C:\Users\Gsnak\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\PPSSPPWindows64.lnk
[2015/08/08 03:57:09 | 000,001,365 | ---- | C] () -- C:\Users\Gsnak\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\ePSXe.lnk
[2015/08/08 03:46:43 | 000,001,094 | ---- | C] () -- C:\Users\Gsnak\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SpyHunterPortable.lnk
[2015/08/08 03:33:48 | 000,000,000 | ---- | C] () -- C:\autoexec.bat
[2015/08/08 03:03:34 | 000,001,237 | ---- | C] () -- C:\Users\Gsnak\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Camtasia Studio 8.4 Portable by AntonyTutoriales.lnk
[2015/08/08 02:46:45 | 000,065,536 | ---- | C] () -- C:\WINDOWS\SysNative\edbres00002.jrs
[2015/08/08 02:46:45 | 000,065,536 | ---- | C] () -- C:\WINDOWS\SysNative\edbres00001.jrs
[2015/08/08 02:46:45 | 000,008,192 | ---- | C] () -- C:\WINDOWS\SysNative\edb.chk
[2015/08/08 02:21:39 | 000,000,047 | ---- | C] () -- C:\WINDOWS\SysWow64\config.nt
[2015/08/08 02:08:36 | 000,001,126 | ---- | C] () -- C:\Users\Gsnak\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\PES Editor 6.lnk
[2015/08/08 01:40:14 | 000,001,088 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Audacity.lnk
[2015/08/07 23:22:08 | 000,001,378 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Movie Maker.lnk
[2015/08/07 23:22:01 | 000,001,447 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Photo Gallery.lnk
[2015/08/07 22:51:12 | 000,001,030 | ---- | C] () -- C:\Users\Gsnak\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MegaDownloader.lnk
[2015/08/07 20:16:47 | 000,002,457 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk
[2015/08/07 17:24:35 | 000,000,057 | ---- | C] () -- C:\ProgramData\Ament.ini
[2015/08/06 00:58:51 | 000,016,148 | ---- | C] () -- C:\WINDOWS\SysNative\DESKTOP-ERRBSK7_Gsnak_HistoryPrediction.bin
[2015/08/06 00:30:45 | 000,001,228 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
[2015/08/05 23:36:42 | 000,000,405 | ---- | C] () -- C:\Users\Gsnak\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Sistema.lnk
[2015/08/05 20:12:02 | 002,498,808 | ---- | C] () -- C:\WINDOWS\SysNative\CoreUIComponents.dll
[2015/08/05 20:11:59 | 001,769,056 | ---- | C] () -- C:\WINDOWS\SysWow64\CoreUIComponents.dll
[2015/08/05 06:33:08 | 000,043,409 | ---- | C] () -- C:\WINDOWS\SysWow64\license.rtf
[2015/08/05 06:33:08 | 000,043,409 | ---- | C] () -- C:\WINDOWS\SysNative\license.rtf
[2015/08/05 05:59:54 | 001,810,446 | ---- | C] () -- C:\WINDOWS\SysNative\PerfStringBackup.INI
[2015/08/05 05:53:38 | 1696,108,544 | -HS- | C] () -- C:\hiberfil.sys
[2015/08/05 05:48:41 | 000,067,584 | --S- | C] () -- C:\WINDOWS\bootstat.dat
[2015/08/05 05:48:32 | 000,000,000 | -H-- | C] () -- C:\WINDOWS\SysNative\drivers\Msft_Kernel_SynTP_01011.Wdf
[2015/08/05 05:47:44 | 000,000,000 | -H-- | C] () -- C:\WINDOWS\SysNative\drivers\Msft_Kernel_Smb_driver_Intel_01011.Wdf
[2015/08/05 05:43:17 | 000,459,456 | ---- | C] () -- C:\WINDOWS\SysNative\FNTCACHE.DAT
[2015/08/05 05:43:11 | 268,435,456 | -HS- | C] () -- C:\swapfile.sys
[2015/08/05 03:35:46 | 000,000,017 | ---- | C] () -- C:\Users\Gsnak\AppData\Local\resmon.resmoncfg
[2015/08/05 03:10:34 | 000,000,000 | -H-- | C] () -- C:\WINDOWS\SysNative\drivers\Msft_User_WpdFs_01_11_00.Wdf
[2015/08/05 02:47:18 | 000,002,340 | ---- | C] () -- C:\Users\Gsnak\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
[2015/08/05 02:43:09 | 000,016,148 | ---- | C] () -- C:\WINDOWS\SysNative\DESKTOP-ERRBSK7_defaultuser0_HistoryPrediction.bin
[2015/08/05 02:42:37 | 000,000,000 | -H-- | C] () -- C:\WINDOWS\SysNative\drivers\Msft_User_WpdMtpDr_01_11_00.Wdf
[2015/08/05 00:05:30 | 000,782,022 | ---- | C] () -- C:\WINDOWS\SysNative\prfh0416.dat
[2015/08/05 00:05:30 | 000,328,354 | ---- | C] () -- C:\WINDOWS\SysNative\prfi0416.dat
[2015/08/05 00:05:30 | 000,153,010 | ---- | C] () -- C:\WINDOWS\SysNative\prfc0416.dat
[2015/08/05 00:05:30 | 000,040,752 | ---- | C] () -- C:\WINDOWS\SysNative\prfd0416.dat
[2015/08/04 23:59:52 | 000,731,332 | ---- | C] () -- C:\WINDOWS\SysNative\perfh009.dat
[2015/08/04 23:59:52 | 000,296,742 | ---- | C] () -- C:\WINDOWS\SysNative\perfi009.dat
[2015/08/04 23:59:52 | 000,138,162 | ---- | C] () -- C:\WINDOWS\SysNative\perfc009.dat
[2015/08/04 23:59:52 | 000,033,362 | ---- | C] () -- C:\WINDOWS\SysNative\perfd009.dat
[2015/08/04 23:56:42 | 000,001,988 | ---- | C] () -- C:\WINDOWS\SysWow64\ticrf.rat
[2015/08/04 23:56:41 | 000,008,798 | ---- | C] () -- C:\WINDOWS\SysWow64\icrav03.rat
[2015/08/04 23:56:41 | 000,000,741 | ---- | C] () -- C:\WINDOWS\SysWow64\NOISE.DAT
[2015/08/04 23:56:40 | 000,215,943 | ---- | C] () -- C:\WINDOWS\SysWow64\dssec.dat
[2015/08/04 23:56:33 | 000,017,463 | ---- | C] () -- C:\WINDOWS\SysNative\drivers\etc\services
[2015/08/04 23:56:33 | 000,003,683 | ---- | C] () -- C:\WINDOWS\SysNative\drivers\etc\lmhosts.sam
[2015/08/04 23:56:33 | 000,001,358 | ---- | C] () -- C:\WINDOWS\SysNative\drivers\etc\protocol
[2015/08/04 23:56:33 | 000,000,824 | ---- | C] () -- C:\WINDOWS\SysNative\drivers\etc\hosts
[2015/08/04 23:56:33 | 000,000,407 | ---- | C] () -- C:\WINDOWS\SysNative\drivers\etc\networks
[2015/08/04 23:56:31 | 000,001,988 | ---- | C] () -- C:\WINDOWS\SysNative\ticrf.rat
[2015/08/04 23:56:30 | 000,015,462 | ---- | C] () -- C:\WINDOWS\SysNative\OEMDefaultAssociations.xml
[2015/08/04 23:56:30 | 000,000,741 | ---- | C] () -- C:\WINDOWS\SysNative\NOISE.DAT
[2015/08/04 23:56:29 | 000,215,943 | ---- | C] () -- C:\WINDOWS\SysNative\dssec.dat
[2015/08/04 23:56:29 | 000,008,798 | ---- | C] () -- C:\WINDOWS\SysNative\icrav03.rat
[2015/08/04 23:56:28 | 000,000,858 | ---- | C] () -- C:\WINDOWS\SysNative\DefaultQuestions.json
[2015/08/04 23:56:28 | 000,000,389 | ---- | C] () -- C:\WINDOWS\SysNative\AutoWorkplace.exe.config
[2015/08/04 10:28:45 | 000,231,456 | ---- | C] () -- C:\WINDOWS\SysNative\pca-manta.bin
[2015/08/04 10:28:44 | 000,000,092 | ---- | C] () -- C:\WINDOWS\SysNative\calibration.bin
[2015/08/04 09:00:52 | 000,403,968 | ---- | C] () -- C:\WINDOWS\SysNative\diagtrack_wininternal.dll
[2015/08/04 09:00:24 | 002,446,336 | ---- | C] () -- C:\WINDOWS\SysNative\InputService.dll
[2015/08/04 09:00:24 | 001,823,232 | ---- | C] () -- C:\WINDOWS\SysWow64\InputService.dll
[2015/08/04 09:00:24 | 000,505,344 | ---- | C] () -- C:\WINDOWS\SysNative\EditionUpgradeManagerObj.dll
[2015/08/04 09:00:24 | 000,412,672 | ---- | C] () -- C:\WINDOWS\SysNative\diagtrack_win.dll
[2015/08/04 09:00:24 | 000,032,768 | ---- | C] () -- C:\WINDOWS\SysNative\LicenseManagerApi.dll
[2015/07/10 08:00:35 | 000,161,632 | ---- | C] () -- C:\WINDOWS\SysWow64\weretw.dll
[2015/07/10 08:00:33 | 000,673,088 | ---- | C] () -- C:\WINDOWS\SysWow64\mlang.dat
[2015/07/10 08:00:32 | 000,047,104 | ---- | C] () -- C:\WINDOWS\SysWow64\BWContextHandler.dll
[2015/07/10 08:00:31 | 000,156,672 | ---- | C] () -- C:\WINDOWS\SysWow64\MTF.dll
[2015/07/10 08:00:30 | 000,028,672 | ---- | C] () -- C:\WINDOWS\SysWow64\dtdump.exe
[2015/07/10 08:00:29 | 000,200,704 | ---- | C] () -- C:\WINDOWS\SysWow64\TextInputFramework.dll
[2015/07/10 08:00:29 | 000,081,408 | ---- | C] () -- C:\WINDOWS\SysWow64\InputLocaleManager.dll
[2015/07/10 08:00:29 | 000,057,344 | ---- | C] () -- C:\WINDOWS\SysWow64\EditBufferTestHook.dll
[2015/07/10 08:00:29 | 000,053,760 | ---- | C] () -- C:\WINDOWS\SysWow64\WpKbdLayout.dll
[2015/07/10 08:00:29 | 000,022,016 | ---- | C] () -- C:\WINDOWS\SysWow64\WordBreakers.dll
[2015/07/10 08:00:28 | 000,270,848 | ---- | C] () -- C:\WINDOWS\SysWow64\HrtfApo.dll
[2015/07/10 08:00:27 | 000,364,544 | ---- | C] () -- C:\WINDOWS\SysWow64\msjetoledb40.dll
[2015/07/10 08:00:26 | 000,022,528 | ---- | C] () -- C:\WINDOWS\SysWow64\efsext.dll
[2015/07/10 08:00:25 | 000,002,269 | ---- | C] () -- C:\WINDOWS\SysWow64\WimBootCompress.ini
[2015/07/10 08:00:24 | 000,167,640 | ---- | C] () -- C:\WINDOWS\SysWow64\chs_singlechar_pinyin.dat
[2015/07/10 07:59:51 | 000,043,131 | ---- | C] () -- C:\WINDOWS\mib.bin
[2015/06/01 21:00:18 | 000,090,112 | ---- | C] () -- C:\WINDOWS\SysWow64\igdde32.dll
[2015/06/01 19:46:58 | 000,272,928 | ---- | C] () -- C:\WINDOWS\SysWow64\igvpkrng600.bin
[2015/06/01 19:45:24 | 000,963,452 | ---- | C] () -- C:\WINDOWS\SysWow64\igcodeckrng600.bin

[color=#E56717]========== ZeroAccess Check ==========[/color]


[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64

[HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]

[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] /64

[HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64
"" = C:\Windows\SysNative\windows.storage.dll -- [2015/08/04 09:00:23 | 006,488,312 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
"" = %SystemRoot%\system32\windows.storage.dll -- [2015/08/04 09:00:23 | 005,118,024 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] /64
"" = C:\Windows\SysNative\wbem\fastprox.dll -- [2015/07/10 07:59:53 | 000,995,328 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
"" = %systemroot%\system32\wbem\fastprox.dll -- [2015/07/10 08:00:23 | 000,754,688 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] /64
"" = C:\Windows\SysNative\wbem\wbemess.dll -- [2015/07/10 07:59:55 | 000,516,096 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Both

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]

[color=#E56717]========== Purity Check ==========[/color]



[color=#E56717]========== Custom Scans ==========[/color]

[color=#A23BEC]< HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections >[/color]
"DefaultConnectionSettings" = 46 00 00 00 03 00 00 00 09 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [binary data]
"SavedLegacySettings" = 46 00 00 00 EE 00 00 00 09 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [binary data]

< End of report >

Publicité


Signaler le contenu de ce document

Publicité