cjoint

Publicité


Publicité

Format du document : text/plain

Prévisualisation

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version:21-08-2015
Ran by Avell B154 PLUS (administrator) on B153MAX (21-08-2015 14:19:46)
Running from C:\Users\Avell B154 PLUS\Desktop
Loaded Profiles: Avell B154 PLUS (Available Profiles: Avell B154 PLUS)
Platform: Windows 8.1 Single Language (X64) Language: Português (Brasil)
Internet Explorer Version 11 (Default browser: Opera)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

() C:\Program Files (x86)\Realtek\Realtek Bluetooth\SkypePlugin.exe
(Intel Corporation) C:\Program Files\PTC\Creo 3.0\M030\Common Files\x86e_win64\cma\Bin\IntelMPI\smpd-intel-4.0.3.009-x64.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Autodesk, Inc.) C:\Program Files (x86)\Autodesk\Content Service\Connect.Service.ContentService.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.28.1\GoogleCrashHandler.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.28.1\GoogleCrashHandler64.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Opera Software) C:\Program Files (x86)\Opera\31.0.1889.174\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\31.0.1889.174\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\31.0.1889.174\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\31.0.1889.174\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\31.0.1889.174\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\31.0.1889.174\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\31.0.1889.174\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\31.0.1889.174\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\31.0.1889.174\opera.exe
(Microsoft Corporation) C:\Windows\System32\GWX\GWXConfigManager.exe
(Microsoft Corporation) C:\Windows\System32\GWX\GWX.exe


==================== Registry (Whitelisted) ===========================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13530184 2013-04-22] (Realtek Semiconductor)
HKLM\...\Run: [IAStorIcon] => C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [287592 2013-07-02] (Intel Corporation)
HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2960896 2012-11-06] (Synaptics Incorporated)
HKLM\...\Run: [BtServer] => C:\Program Files (x86)\REALTEK\Realtek Bluetooth\BTServer.exe [215552 2013-12-03] (Realtek Semiconductor Corporation)
HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [558496 2014-02-27] (Adobe Systems Incorporated)
HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2754704 2015-06-24] (NVIDIA Corporation)
HKLM\...\Run: [ShadowPlay] => C:\Windows\system32\rundll32.exe C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1022152 2014-12-19] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [HotKeyOSD] => C:\Program Files (x86)\Hotkey OSD Driver\HotKeyOSD.exe [346224 2012-07-31] (Dritek System Inc.)
HKLM-x32\...\Run: [VirtualCloneDrive] => C:\Program Files (x86)\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe [88984 2013-03-10] (Elaborate Bytes AG)
HKLM-x32\...\Run: [ADSKAppManager] => C:\Program Files (x86)\Common Files\Autodesk Shared\AppManager\R1\AdAppMgr.exe [493960 2014-12-04] (Autodesk Inc.)
HKLM-x32\...\Run: [QuickTime Task] => C:\Program Files (x86)\QuickTime\qttask.exe [155648 2015-03-11] (Apple Computer, Inc.)
Winlogon\Notify\igfxcui: igfxdev.dll [X]
HKU\S-1-5-21-2513282143-1149749203-1196791184-1001\...\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] => C:\Program Files (x86)\Common Files\Ahead\Lib\NMBgMonitor.exe [153136 2007-05-16] (Nero AG)
HKU\S-1-5-21-2513282143-1149749203-1196791184-1001\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [30877280 2014-12-11] (Skype Technologies S.A.)
HKU\S-1-5-21-2513282143-1149749203-1196791184-1001\...\Run: [uTorrent] => C:\Users\Avell B154 PLUS\AppData\Roaming\uTorrent\uTorrent.exe [1693024 2015-08-01] (BitTorrent Inc.)
HKU\S-1-5-21-2513282143-1149749203-1196791184-1001\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [8202008 2015-04-08] (Piriform Ltd)
HKU\S-1-5-21-2513282143-1149749203-1196791184-1001\...\Run: [Lync] => "C:\Program Files\Microsoft Office\Office15\lync.exe" /fromrunkey
HKU\S-1-5-18\...\Run: [Autodesk Sync] => C:\Program Files\Autodesk\Autodesk Sync\AdSync.exe [1193352 2014-02-08] (Autodesk, Inc.)
AppInit_DLLs: C:\Windows\system32\nvinitx.dll => C:\Windows\system32\nvinitx.dll [174856 2015-02-04] (NVIDIA Corporation)
AppInit_DLLs-x32: C:\ProgramData\Kikblaster\Kikblaster32.dll => "C:\ProgramData\Kikblaster\Kikblaster32.dll" File not found
AppInit_DLLs-x32: C:\Windows\SysWOW64\nvinit.dll => C:\Windows\SysWOW64\nvinit.dll [156840 2015-02-04] (NVIDIA Corporation)
ShellIconOverlayIdentifiers: [AutoCAD Digital Signatures Icon Overlay Handler] -> {36A21736-36C2-4C11-8ACB-D4136F2B57BD} => C:\Windows\system32\AcSignIcon.dll [2014-02-07] (Autodesk, Inc.)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.google.com
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office15\URLREDIR.DLL [2012-10-01] (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre7\bin\jp2ssv.dll [2013-12-27] (Oracle Corporation)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office15\URLREDIR.DLL [2012-10-01] (Microsoft Corporation)
BHO-x32: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\Office15\GROOVEEX.DLL [2015-01-21] (Microsoft Corporation)
Handler: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office\Office15\MSOSB.DLL [2015-02-17] (Microsoft Corporation)
Hosts: Hosts file not detected in the default directory
Tcpip\Parameters: [DhcpNameServer] 189.4.0.148 189.4.0.152 189.4.0.178
Tcpip\..\Interfaces\{6A645DCB-69DC-4644-AEC9-8BAFB05AEE26}: [DhcpNameServer] 10.0.0.1
Tcpip\..\Interfaces\{7476954D-9CBD-4E93-A23C-79FA9AAE90A8}: [DhcpNameServer] 10.0.0.1
Tcpip\..\Interfaces\{B6A8D9AE-17D9-47E1-9E5E-B1087D8612DA}: [DhcpNameServer] 189.4.0.148 189.4.0.152 189.4.0.178
Tcpip\..\Interfaces\{EABC1F52-45EA-4D6E-A530-26CCEF93E342}: [DhcpNameServer] 8.8.8.8 8.8.4.4

FireFox:
========
FF Plugin: @java.com/JavaPlugin -> C:\Program Files\Java\jre7\bin\new_plugin\npjp2.dll [2013-12-27] (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.40728.0\npctrl.dll [2015-07-28] ( Microsoft Corporation)
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~1\MICROS~1\Office15\NPSPWRAP.DLL [2012-10-01] (Microsoft Corporation)
FF Plugin: @videolan.org/vlc,version=2.2.1 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2015-04-16] (VideoLAN)
FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect64.dll [2014-04-28] (Adobe Systems)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=3.0.72 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2013-03-12] (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2013-03-12] (Intel Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.40728.0\npctrl.dll [2015-07-28] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~2\Office15\NPSPWRAP.DLL [2012-10-01] (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.28.1\npGoogleUpdate3.dll [2015-07-16] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.28.1\npGoogleUpdate3.dll [2015-07-16] (Google Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll [2015-06-26] (Adobe Systems Inc.)
FF Plugin-x32: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect32.dll [2014-04-28] (Adobe Systems)

Chrome:
=======
CHR Profile: C:\Users\Avell B154 PLUS\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Slides) - C:\Users\Avell B154 PLUS\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-04-06]
CHR Extension: (Google Docs) - C:\Users\Avell B154 PLUS\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2013-12-27]
CHR Extension: (Google Drive) - C:\Users\Avell B154 PLUS\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2013-12-27]
CHR Extension: (YouTube) - C:\Users\Avell B154 PLUS\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2013-12-27]
CHR Extension: (Google Search) - C:\Users\Avell B154 PLUS\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2013-12-27]
CHR Extension: (Google Sheets) - C:\Users\Avell B154 PLUS\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-04-06]
CHR Extension: (Chrome Hotword Shared Module) - C:\Users\Avell B154 PLUS\AppData\Local\Google\Chrome\User Data\Default\Extensions\lccekmodgklaepjeofjdjpbminllajkg [2015-04-18]
CHR Extension: (Chrome Web Store Payments) - C:\Users\Avell B154 PLUS\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-12-27]
CHR Extension: (Gmail) - C:\Users\Avell B154 PLUS\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2013-12-27]

Opera:
=======
OPR Extension: (Shareaholic for Pinterest) - C:\Users\Avell B154 PLUS\AppData\Roaming\Opera Software\Opera Stable\Extensions\cfhohmfogghhjmmhnmfgdiinicebggjm [2015-04-18]
OPR Extension: (ZenMate for Opera™) - C:\Users\Avell B154 PLUS\AppData\Roaming\Opera Software\Opera Stable\Extensions\cnhbkkedmelfmalgjpkngiaoifpdfcnl [2015-06-30]
OPR Extension: (Adblock Plus) - C:\Users\Avell B154 PLUS\AppData\Roaming\Opera Software\Opera Stable\Extensions\oidhhegpmlfpoeialbgcdocjalghfpkp [2015-04-04]
OPR Extension: (No Name) - C:\Users\Avell B154 PLUS\AppData\Roaming\Opera Software\Opera Stable\Extensions\papbadoldddalgcjcicnikcfenodpghp [2015-08-20]

==================== Services (Whitelisted) ========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S2 AdAppMgrSvc; C:\Program Files (x86)\Common Files\Autodesk Shared\AppManager\R1\AdAppMgrSvc.exe [599944 2014-12-04] (Autodesk Inc.)
S2 AtherosSvc; C:\Windows\system32\AdminService.exe [208384 2012-08-29] (Atheros Commnucations)
R2 Autodesk Content Service; C:\Program Files (x86)\Autodesk\Content Service\Connect.Service.ContentService.exe [31192 2014-02-07] (Autodesk, Inc.)
S2 AvrcpService; C:\Program Files (x86)\REALTEK\Realtek Bluetooth\AvrcpService.exe [35328 2013-05-07] (Realtek Semiconductor Corporation) [File not signed]
S2 BTDevManager; C:\Program Files (x86)\REALTEK\Realtek Bluetooth\BTDevMgr.exe [66048 2013-11-15] () [File not signed]
S3 BthHFSrv; C:\Windows\System32\BthHFSrv.dll [324608 2014-10-28] (Microsoft Corporation)
S2 doenlcaddoupdatjuoon; C:\Users\Avell B154 PLUS\AppData\Local\Sailfase.exe [47616 2015-08-20] () [File not signed]
S2 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [1152656 2015-06-24] (NVIDIA Corporation)
S2 hkosdservice; C:\Program Files (x86)\Hotkey OSD Driver\hkosdsvis.exe [240240 2012-07-31] (Dritek System Inc.)
R2 IAStorDataMgrSvc; C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [15720 2013-07-02] (Intel Corporation)
S3 IDriverT; C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [69632 2005-04-04] (Macrovision Corporation) [File not signed]
S2 igfxCUIService1.0.0.0; C:\Windows\system32\igfxCUIService.exe [344976 2015-03-31] (Intel Corporation)
R2 impi_smpd; C:\Program Files\PTC\Creo 3.0\M030\Common Files\x86e_win64\cma\Bin\IntelMPI\smpd-intel-4.0.3.009-x64.exe [1611168 2015-04-16] (Intel Corporation)
R2 Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [731648 2013-02-13] (Intel(R) Corporation) [File not signed]
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [820184 2013-02-13] (Intel(R) Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [169432 2013-03-12] (Intel Corporation)
S2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [1133880 2015-06-18] (Malwarebytes Corporation)
S3 NMIndexingService; C:\Program Files (x86)\Common Files\Ahead\Lib\NMIndexingService.exe [271920 2007-05-16] (Nero AG)
S2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1868432 2015-06-24] (NVIDIA Corporation)
S2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [23007376 2015-06-24] (NVIDIA Corporation)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [366552 2015-07-07] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23824 2015-07-07] (Microsoft Corporation)

===================== Drivers (Whitelisted) ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S5 3ware; C:\Windows\System32\drivers\3ware.sys [108896 2013-08-22] (LSI)
R5 ACPI; C:\Windows\System32\drivers\ACPI.sys [533824 2014-10-07] (Microsoft Corporation)
R5 acpiex; C:\Windows\System32\Drivers\acpiex.sys [79712 2013-08-22] (Microsoft Corporation)
S5 ADP80XX; C:\Windows\System32\drivers\ADP80XX.SYS [782176 2013-08-22] (PMC-Sierra)
S5 agp440; C:\Windows\System32\drivers\agp440.sys [62304 2013-08-22] (Microsoft Corporation)
S5 amdsata; C:\Windows\System32\drivers\amdsata.sys [79200 2013-08-22] (Advanced Micro Devices)
S5 amdsbs; C:\Windows\System32\drivers\amdsbs.sys [259424 2013-08-22] (AMD Technologies Inc.)
S5 amdxata; C:\Windows\System32\drivers\amdxata.sys [25952 2013-08-22] (Advanced Micro Devices)
S5 arcsas; C:\Windows\System32\drivers\arcsas.sys [114016 2013-08-22] (PMC-Sierra, Inc.)
S5 atapi; C:\Windows\System32\drivers\atapi.sys [26464 2013-08-22] (Microsoft Corporation)
S5 b06bdrv; C:\Windows\System32\drivers\bxvbda.sys [531296 2013-08-22] (Broadcom Corporation)
R3 BthLEEnum; C:\Windows\System32\drivers\BthLEEnum.sys [226304 2013-12-04] (Microsoft Corporation)
R5 CLFS; C:\Windows\System32\drivers\CLFS.sys [377152 2015-03-04] (Microsoft Corporation)
R5 CNG; C:\Windows\System32\Drivers\cng.sys [561928 2015-03-30] (Microsoft Corporation)
R5 disk; C:\Windows\System32\drivers\disk.sys [100192 2013-08-22] (Microsoft Corporation)
S5 ebdrv; C:\Windows\System32\drivers\evbda.sys [3357024 2013-08-22] (Broadcom Corporation)
R5 EhStorClass; C:\Windows\System32\drivers\EhStorClass.sys [82784 2013-08-22] (Microsoft Corporation)
S5 EhStorTcgDrv; C:\Windows\System32\drivers\EhStorTcgDrv.sys [114016 2013-08-22] (Microsoft Corporation)
R5 FileInfo; C:\Windows\System32\drivers\fileinfo.sys [79192 2014-02-22] (Microsoft Corporation)
R5 FltMgr; C:\Windows\System32\drivers\fltmgr.sys [354112 2014-08-26] (Microsoft Corporation)
U5 Fs_Rec; C:\Windows\System32\Drivers\Fs_Rec.sys [30048 2013-08-22] (Microsoft Corporation)
R5 fvevol; C:\Windows\System32\DRIVERS\fvevol.sys [589656 2014-04-07] (Microsoft Corporation)
S5 gagp30kx; C:\Windows\System32\drivers\gagp30kx.sys [65888 2013-08-22] (Microsoft Corporation)
S5 HpSAMD; C:\Windows\System32\drivers\HpSAMD.sys [64352 2013-08-22] (Hewlett-Packard Company)
S5 hwpolicy; C:\Windows\System32\drivers\hwpolicy.sys [24416 2013-08-22] (Microsoft Corporation)
R5 iaStorA; C:\Windows\System32\drivers\iaStorA.sys [667496 2013-07-02] (Intel Corporation)
S5 iaStorAV; C:\Windows\System32\drivers\iaStorAV.sys [651248 2013-08-09] (Intel Corporation)
S5 iaStorV; C:\Windows\System32\drivers\iaStorV.sys [412000 2013-08-22] (Intel Corporation)
S5 intelide; C:\Windows\System32\drivers\intelide.sys [18272 2013-08-22] (Microsoft Corporation)
R5 intelpep; C:\Windows\System32\drivers\intelpep.sys [39744 2014-10-12] (Microsoft Corporation)
S5 isapnp; C:\Windows\System32\drivers\isapnp.sys [21856 2013-08-22] (Microsoft Corporation)
R5 KSecDD; C:\Windows\System32\Drivers\ksecdd.sys [100672 2014-10-29] (Microsoft Corporation)
R5 KSecPkg; C:\Windows\System32\Drivers\ksecpkg.sys [178008 2015-06-28] (Microsoft Corporation)
S5 LSI_SAS; C:\Windows\System32\drivers\lsi_sas.sys [109408 2013-08-22] (LSI Corporation)
S5 LSI_SAS2; C:\Windows\System32\drivers\lsi_sas2.sys [93536 2013-08-22] (LSI Corporation)
S5 LSI_SAS3; C:\Windows\System32\drivers\lsi_sas3.sys [81760 2013-08-22] (LSI Corporation)
S5 LSI_SSS; C:\Windows\System32\drivers\lsi_sss.sys [82784 2013-08-22] (LSI Corporation)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2015-06-18] (Malwarebytes Corporation)
S3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [64216 2015-06-18] (Malwarebytes Corporation)
S5 megasas; C:\Windows\System32\drivers\megasas.sys [56672 2013-08-22] (LSI Corporation)
S5 megasr; C:\Windows\System32\drivers\megasr.sys [575840 2013-08-22] (LSI Corporation, Inc.)
R5 mountmgr; C:\Windows\System32\drivers\mountmgr.sys [101720 2015-07-15] (Microsoft Corporation)
R5 msisadrv; C:\Windows\System32\drivers\msisadrv.sys [17248 2013-08-22] (Microsoft Corporation)
R5 Mup; C:\Windows\System32\Drivers\mup.sys [78688 2013-08-22] (Microsoft Corporation)
S5 mvumis; C:\Windows\System32\drivers\mvumis.sys [63840 2013-08-22] (Marvell Semiconductor, Inc.)
R5 NDIS; C:\Windows\System32\drivers\ndis.sys [1113944 2015-07-14] (Microsoft Corporation)
R5 nvpciflt; C:\Windows\System32\DRIVERS\nvpciflt.sys [31560 2015-02-04] (NVIDIA Corporation)
S5 nvraid; C:\Windows\System32\drivers\nvraid.sys [150368 2013-08-22] (NVIDIA Corporation)
S5 nvstor; C:\Windows\System32\drivers\nvstor.sys [168288 2013-08-22] (NVIDIA Corporation)
R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [19600 2015-06-24] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\Windows\system32\drivers\nvvad64v.sys [46768 2015-05-19] (NVIDIA Corporation)
S5 nv_agp; C:\Windows\System32\drivers\nv_agp.sys [124768 2013-08-22] (Microsoft Corporation)
R5 partmgr; C:\Windows\System32\drivers\partmgr.sys [88896 2014-10-15] (Microsoft Corporation)
R5 pci; C:\Windows\System32\drivers\pci.sys [280384 2014-07-24] (Microsoft Corporation)
S5 pciide; C:\Windows\System32\drivers\pciide.sys [14688 2013-08-22] (Microsoft Corporation)
S5 pcmcia; C:\Windows\System32\drivers\pcmcia.sys [114528 2013-08-22] (Microsoft Corporation)
R5 pcw; C:\Windows\System32\drivers\pcw.sys [50016 2013-08-22] (Microsoft Corporation)
R5 pdc; C:\Windows\System32\drivers\pdc.sys [86336 2014-10-12] (Microsoft Corporation)
R3 Ps2Kb2Hid; C:\Windows\System32\drivers\aPs2Kb2Hid.sys [26736 2013-12-27] (Dritek System Inc.)
R5 rdyboost; C:\Windows\System32\drivers\rdyboost.sys [249688 2014-02-22] (Microsoft Corporation)
R3 RtkBtFilter; C:\Windows\system32\DRIVERS\RtkBtfilter.sys [556248 2013-12-07] (Realtek Semiconductor Corporation)
R3 RTSPER; C:\Windows\system32\DRIVERS\RtsPer.sys [407112 2013-04-28] (Realsil Semiconductor Corporation)
R3 RTWlanE; C:\Windows\system32\DRIVERS\rtwlane.sys [3068120 2014-01-10] (Realtek Semiconductor Corporation )
S5 sbp2port; C:\Windows\System32\drivers\sbp2port.sys [107872 2013-08-22] (Microsoft Corporation)
R3 ScpVBus; C:\Windows\System32\drivers\ScpVBus.sys [39168 2013-05-19] (Scarlet.Crush Productions)
S5 SiSRaid2; C:\Windows\System32\drivers\SiSRaid2.sys [44896 2013-08-22] (Silicon Integrated Systems Corp.)
S5 SiSRaid4; C:\Windows\System32\drivers\sisraid4.sys [81760 2013-08-22] (Silicon Integrated Systems)
R5 spaceport; C:\Windows\System32\drivers\spaceport.sys [415040 2014-10-29] (Microsoft Corporation)
S5 stexstor; C:\Windows\System32\drivers\stexstor.sys [31072 2013-08-22] (Promise Technology, Inc.)
S5 storahci; C:\Windows\System32\drivers\storahci.sys [107872 2013-08-22] (Microsoft Corporation)
S5 storflt; C:\Windows\System32\drivers\vmstorfl.sys [49944 2014-10-29] (Microsoft Corporation)
S5 stornvme; C:\Windows\System32\drivers\stornvme.sys [57176 2013-10-05] (Microsoft Corporation)
S5 storvsc; C:\Windows\System32\drivers\storvsc.sys [45888 2013-08-22] (Microsoft Corporation)
R5 Tcpip; C:\Windows\System32\drivers\tcpip.sys [2476376 2015-06-11] (Microsoft Corporation)
S5 uagp35; C:\Windows\System32\drivers\uagp35.sys [64864 2013-08-22] (Microsoft Corporation)
S5 uliagpkx; C:\Windows\System32\drivers\uliagpkx.sys [65888 2013-08-22] (Microsoft Corporation)
R5 vdrvroot; C:\Windows\System32\drivers\vdrvroot.sys [37728 2013-08-22] (Microsoft Corporation)
S5 viaide; C:\Windows\System32\drivers\viaide.sys [19808 2013-08-22] (VIA Technologies, Inc.)
S5 vmbus; C:\Windows\System32\drivers\vmbus.sys [97048 2014-10-29] (Microsoft Corporation)
R5 volmgr; C:\Windows\System32\drivers\volmgr.sys [73568 2013-08-22] (Microsoft Corporation)
R5 volmgrx; C:\Windows\System32\drivers\volmgrx.sys [377696 2013-08-22] (Microsoft Corporation)
R5 volsnap; C:\Windows\System32\drivers\volsnap.sys [310080 2014-06-18] (Microsoft Corporation)
S5 vsmraid; C:\Windows\System32\drivers\vsmraid.sys [168800 2013-08-22] (VIA Technologies Inc.,Ltd)
S5 VSTXRAID; C:\Windows\System32\drivers\vstxraid.sys [305504 2013-08-22] (VIA Corporation)
R5 Wdf01000; C:\Windows\System32\drivers\Wdf01000.sys [839488 2013-08-22] (Microsoft Corporation)
R5 WdFilter; C:\Windows\System32\drivers\WdFilter.sys [270168 2015-07-07] (Microsoft Corporation)
R5 WFPLWFS; C:\Windows\System32\DRIVERS\wfplwfs.sys [136512 2014-10-29] (Microsoft Corporation)
R5 Wof; C:\Windows\System32\Drivers\Wof.sys [157016 2014-03-13] (Microsoft Corporation)
S3 catchme; \??\C:\Users\AVELLB~1\AppData\Local\Temp\catchme.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-08-21 14:19 - 2015-08-21 14:20 - 00024748 _____ C:\Users\Avell B154 PLUS\Desktop\FRST.txt
2015-08-21 14:19 - 2015-08-21 14:19 - 00000000 ____D C:\FRST
2015-08-21 14:18 - 2015-08-21 14:18 - 02173952 _____ (Farbar) C:\Users\Avell B154 PLUS\Desktop\FRST64.exe
2015-08-21 02:09 - 2015-08-21 02:09 - 00001367 _____ C:\Users\Avell B154 PLUS\Desktop\JRT.txt
2015-08-21 02:04 - 2015-08-21 02:04 - 01798576 _____ (Malwarebytes Corporation) C:\Users\Avell B154 PLUS\Desktop\JRT.exe
2015-08-20 22:22 - 2015-08-20 22:22 - 00005852 _____ C:\Users\Avell B154 PLUS\Desktop\ZHPFixReport.txt
2015-08-20 22:15 - 2015-08-20 22:15 - 00001865 _____ C:\Users\Public\Desktop\ZHPFix.lnk
2015-08-20 22:15 - 2015-08-20 22:15 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ZHP
2015-08-20 22:15 - 2015-08-20 22:15 - 00000000 ____D C:\Program Files (x86)\ZHPFix
2015-08-20 22:13 - 2015-08-20 22:14 - 03522334 _____ (Nicolas Coolman ) C:\Users\Avell B154 PLUS\Desktop\ZHPFix.exe
2015-08-20 20:47 - 2015-08-20 20:47 - 00109256 _____ C:\Users\Avell B154 PLUS\Desktop\ZHPDiag.txt
2015-08-20 20:45 - 2015-08-20 20:45 - 00000230 _____ C:\Users\Avell
2015-08-20 20:44 - 2015-08-20 22:22 - 00000000 ____D C:\Users\Avell B154 PLUS\AppData\Roaming\ZHP
2015-08-20 20:44 - 2015-08-20 20:44 - 01895424 _____ C:\Users\Avell B154 PLUS\Desktop\ZHPDiag3.exe
2015-08-20 20:44 - 2015-08-20 20:44 - 00000875 _____ C:\Users\Avell B154 PLUS\Desktop\ZHPDiag.lnk
2015-08-20 17:08 - 2015-08-20 17:08 - 00000000 ____D C:\Users\Usuário Padrão\AppData\Local\Microsoft Help
2015-08-20 17:08 - 2015-08-20 17:08 - 00000000 ____D C:\Users\Default\AppData\Local\Microsoft Help
2015-08-20 17:08 - 2015-08-20 17:08 - 00000000 ____D C:\Users\Default User\AppData\Local\Microsoft Help
2015-08-20 17:08 - 2015-08-20 17:08 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
2015-08-20 14:14 - 2015-08-20 14:15 - 00001118 _____ C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2015-08-20 14:13 - 2015-08-20 14:13 - 21545336 _____ (Malwarebytes Corporation ) C:\Users\Avell B154 PLUS\Downloads\mbam-setup-sem-2.1.6.1022.exe
2015-08-20 14:00 - 2015-08-20 20:31 - 00000000 ____D C:\Program Files\igfx32
2015-08-20 14:00 - 2015-08-20 14:00 - 00047616 _____ C:\Users\Avell B154 PLUS\AppData\Local\Sailfase.exe
2015-08-20 13:57 - 2015-08-20 13:57 - 00000004 _____ C:\Windows\SysWOW64\029B560A371F4E00AB32838EBC01B9E7
2015-08-20 13:56 - 2015-08-20 13:56 - 00000000 ____D C:\Users\Public\Documents\Baidu
2015-08-20 13:53 - 2015-08-21 02:52 - 00002320 _____ C:\Windows\setupact.log
2015-08-20 13:53 - 2015-08-20 13:53 - 00000000 _____ C:\Windows\setuperr.log
2015-08-20 13:52 - 2015-08-21 02:05 - 00119996 _____ C:\Windows\PFRO.log
2015-08-20 13:50 - 2015-08-21 14:19 - 01116603 _____ C:\Windows\WindowsUpdate.log
2015-08-20 13:27 - 2015-08-20 17:12 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2013
2015-08-20 13:27 - 2015-08-20 13:27 - 00000000 ____D C:\Program Files\Common Files\DESIGNER
2015-08-20 13:26 - 2015-08-20 13:26 - 00000000 __RHD C:\MSOCache
2015-08-20 13:26 - 2015-08-20 13:26 - 00000000 ____D C:\Program Files\Microsoft Analysis Services
2015-08-19 23:57 - 2015-08-19 23:57 - 00000000 ____D C:\Program Files (x86)\Microsoft ASP.NET
2015-08-19 23:07 - 2015-08-20 13:16 - 00000000 ____D C:\Users\Avell B154 PLUS\Downloads\MS PROJECT 2013 PRO - PTBR www.ricmessimasters.com
2015-08-19 23:02 - 2015-08-19 23:02 - 00000000 ____D C:\Users\Avell B154 PLUS\AppData\Roaming\Prodiance
2015-08-19 20:31 - 2015-04-18 02:01 - 03076096 _____ (Ratiborus, MSFree Inc.) C:\Windows\KMSAuto.exe
2015-08-18 23:19 - 2015-08-10 22:20 - 25191936 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2015-08-18 23:19 - 2015-08-10 21:20 - 19871232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2015-08-17 21:52 - 2015-08-17 21:52 - 00000000 ____D C:\Users\Todos os Usuários\Steam
2015-08-17 21:52 - 2015-08-17 21:52 - 00000000 ____D C:\ProgramData\Steam
2015-08-14 18:17 - 2015-08-20 14:06 - 00000787 _____ C:\Users\Public\Desktop\BioShock Infinite.lnk
2015-08-14 18:17 - 2015-08-20 14:06 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\BioShock Infinite
2015-08-14 16:40 - 2015-08-14 16:40 - 00000000 ____D C:\Users\Avell B154 PLUS\AppData\Local\Setup Integrity Check
2015-08-14 14:31 - 2015-08-14 15:24 - 00465028 _____ C:\Users\Avell B154 PLUS\Downloads\tratamento térmico.pptx
2015-08-12 00:28 - 2015-07-30 11:04 - 00124624 _____ (Microsoft Corporation) C:\Windows\system32\PresentationCFFRasterizerNative_v0300.dll
2015-08-12 00:28 - 2015-07-30 10:48 - 00103120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PresentationCFFRasterizerNative_v0300.dll
2015-08-11 23:44 - 2015-07-16 17:26 - 05923328 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2015-08-11 23:44 - 2015-07-16 16:34 - 14451200 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2015-08-11 23:44 - 2015-07-16 16:10 - 12856832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2015-08-11 23:43 - 2015-07-16 17:36 - 00584192 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2015-08-11 23:43 - 2015-07-16 17:36 - 00417792 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2015-08-11 23:43 - 2015-07-16 17:35 - 02885632 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2015-08-11 23:43 - 2015-07-16 17:23 - 00615936 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2015-08-11 23:43 - 2015-07-16 17:21 - 00816640 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2015-08-11 23:43 - 2015-07-16 16:53 - 00145408 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll
2015-08-11 23:43 - 2015-07-16 16:51 - 00504320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2015-08-11 23:43 - 2015-07-16 16:50 - 00341504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2015-08-11 23:43 - 2015-07-16 16:45 - 02279424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2015-08-11 23:43 - 2015-07-16 16:45 - 01032704 _____ (Microsoft Corporation) C:\Windows\system32\inetcomm.dll
2015-08-11 23:43 - 2015-07-16 16:41 - 00479232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2015-08-11 23:43 - 2015-07-16 16:39 - 00664064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2015-08-11 23:43 - 2015-07-16 16:38 - 00262144 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2015-08-11 23:43 - 2015-07-16 16:36 - 00801280 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2015-08-11 23:43 - 2015-07-16 16:32 - 02125824 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2015-08-11 23:43 - 2015-07-16 16:14 - 02880000 _____ (Microsoft Corporation) C:\Windows\system32\actxprxy.dll
2015-08-11 23:43 - 2015-07-16 16:13 - 00880128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcomm.dll
2015-08-11 23:43 - 2015-07-16 16:12 - 04520448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2015-08-11 23:43 - 2015-07-16 16:12 - 02427904 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2015-08-11 23:43 - 2015-07-16 16:06 - 00689152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2015-08-11 23:43 - 2015-07-16 16:01 - 01545728 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2015-08-11 23:43 - 2015-07-16 15:52 - 01048576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\actxprxy.dll
2015-08-11 23:43 - 2015-07-16 15:49 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2015-08-11 23:43 - 2015-07-16 15:42 - 01951232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2015-08-11 23:43 - 2015-07-16 15:38 - 01310720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2015-08-11 23:43 - 2015-07-16 15:37 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2015-08-11 23:42 - 2015-07-18 22:58 - 00136904 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2015-08-11 23:42 - 2015-07-18 15:51 - 03704320 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2015-08-11 23:42 - 2015-07-18 15:31 - 00140288 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
2015-08-11 23:42 - 2015-07-18 15:31 - 00095744 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
2015-08-11 23:42 - 2015-07-18 15:31 - 00035840 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
2015-08-11 23:42 - 2015-07-18 15:29 - 00409088 _____ (Microsoft Corporation) C:\Windows\system32\WUSettingsProvider.dll
2015-08-11 23:42 - 2015-07-18 15:29 - 00124928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll
2015-08-11 23:42 - 2015-07-18 15:29 - 00029696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe
2015-08-11 23:42 - 2015-07-18 15:28 - 00081920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll
2015-08-11 23:42 - 2015-07-18 15:12 - 02228736 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2015-08-11 23:42 - 2015-07-18 15:10 - 00891904 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2015-08-11 23:42 - 2015-07-18 15:09 - 00721920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll
2015-08-11 23:42 - 2015-07-15 21:29 - 07458648 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2015-08-11 23:42 - 2015-07-15 21:29 - 01735000 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2015-08-11 23:42 - 2015-07-15 21:29 - 00101720 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mountmgr.sys
2015-08-11 23:42 - 2015-07-15 21:28 - 01499920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2015-08-11 23:42 - 2015-07-10 14:54 - 01217024 _____ (Microsoft Corporation) C:\Windows\system32\sysmain.dll
2015-08-11 23:42 - 2015-06-09 15:27 - 00411133 _____ C:\Windows\system32\ApnDatabase.xml
2015-08-11 23:41 - 2015-07-28 20:24 - 00025776 _____ (Microsoft Corporation) C:\Windows\system32\CompatTelRunner.exe
2015-08-11 23:41 - 2015-07-28 11:24 - 01148416 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2015-08-11 23:41 - 2015-07-28 11:24 - 01116160 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll
2015-08-11 23:41 - 2015-07-28 11:24 - 00774144 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll
2015-08-11 23:41 - 2015-07-28 11:24 - 00743424 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
2015-08-11 23:41 - 2015-07-28 11:24 - 00437248 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll
2015-08-11 23:41 - 2015-07-28 11:24 - 00069120 _____ (Microsoft Corporation) C:\Windows\system32\acmigration.dll
2015-08-11 23:41 - 2015-07-07 06:40 - 00270168 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdFilter.sys
2015-08-11 23:41 - 2015-07-07 06:40 - 00114520 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdNisDrv.sys
2015-08-11 23:41 - 2015-07-07 06:40 - 00044560 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdBoot.sys
2015-08-11 23:41 - 2015-07-01 19:19 - 00228864 _____ (Microsoft Corporation) C:\Windows\system32\WebClnt.dll
2015-08-11 23:41 - 2015-07-01 19:16 - 00104448 _____ (Microsoft Corporation) C:\Windows\system32\davclnt.dll
2015-08-11 23:41 - 2015-07-01 18:37 - 00198656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WebClnt.dll
2015-08-11 23:41 - 2015-07-01 18:35 - 00087040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\davclnt.dll
2015-08-11 23:41 - 2015-06-12 14:03 - 18823680 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Xaml.dll
2015-08-11 23:41 - 2015-06-12 13:36 - 15159296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Xaml.dll
2015-08-11 23:40 - 2015-07-14 18:59 - 01113944 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ndis.sys
2015-08-11 23:40 - 2015-07-14 18:59 - 00487256 _____ (Microsoft Corporation) C:\Windows\system32\netcfgx.dll
2015-08-11 23:40 - 2015-07-14 18:59 - 00393560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netcfgx.dll
2015-08-11 23:40 - 2015-07-14 00:22 - 02529880 _____ (Microsoft Corporation) C:\Windows\system32\msxml6.dll
2015-08-11 23:40 - 2015-07-14 00:21 - 01901776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml6.dll
2015-08-11 23:40 - 2015-07-13 16:46 - 00059392 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll
2015-08-11 23:40 - 2015-07-13 16:45 - 00059392 _____ (Microsoft Corporation) C:\Windows\system32\basesrv.dll
2015-08-11 23:40 - 2015-07-10 14:42 - 02345472 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
2015-08-11 23:40 - 2015-07-09 14:13 - 00221184 _____ (Microsoft Corporation) C:\Windows\system32\notepad.exe
2015-08-11 23:40 - 2015-07-09 14:13 - 00221184 _____ (Microsoft Corporation) C:\Windows\notepad.exe
2015-08-11 23:40 - 2015-07-09 13:30 - 00212992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\notepad.exe
2015-08-11 23:40 - 2015-06-11 17:12 - 02476376 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2015-08-11 23:40 - 2015-06-11 17:12 - 00428888 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\FWPKCLNT.SYS
2015-08-11 23:40 - 2015-05-11 21:24 - 00536920 _____ (Microsoft Corporation) C:\Windows\system32\mcupdate_GenuineIntel.dll
2015-08-11 23:39 - 2015-07-29 11:37 - 01994752 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll
2015-08-11 23:39 - 2015-07-29 11:30 - 01381888 _____ (Microsoft Corporation) C:\Windows\system32\FntCache.dll
2015-08-11 23:39 - 2015-07-29 11:23 - 01559552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll
2015-08-11 23:39 - 2015-07-24 15:57 - 04177408 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2015-08-11 23:39 - 2015-07-24 15:57 - 00358912 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll
2015-08-11 23:39 - 2015-07-24 15:52 - 00044032 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll
2015-08-11 23:39 - 2015-07-24 14:27 - 00301568 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll
2015-08-11 23:39 - 2015-07-24 14:23 - 00035840 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll
2015-08-11 23:39 - 2015-07-10 15:19 - 01101824 _____ (Microsoft Corporation) C:\Windows\system32\rdvidcrl.dll
2015-08-11 23:39 - 2015-07-10 14:14 - 00856064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdvidcrl.dll
2015-08-11 23:39 - 2015-07-10 14:13 - 07032320 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll
2015-08-11 23:39 - 2015-07-10 13:47 - 01556992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll
2015-08-11 23:39 - 2015-07-10 13:31 - 06213120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstscax.dll
2015-08-09 16:10 - 2015-08-09 16:10 - 06609608 _____ (Piriform Ltd) C:\Users\Avell B154 PLUS\Downloads\ccsetup508.exe
2015-08-08 01:28 - 2015-08-21 02:04 - 00000000 ____D C:\Users\Avell B154 PLUS\Downloads\That Sugar Film (2014)
2015-08-08 01:26 - 2015-08-21 02:04 - 00000000 ____D C:\Users\Avell B154 PLUS\Downloads\Aloha (2015)
2015-08-06 20:12 - 2015-08-06 22:07 - 08507850 _____ C:\Users\Avell B154 PLUS\Desktop\Presentation2.pptx
2015-08-04 00:19 - 2015-08-04 00:19 - 00000000 ____D C:\Users\Avell B154 PLUS\AppData\Local\Blizzard
2015-08-03 23:33 - 2015-08-18 16:28 - 00000000 ____D C:\Program Files (x86)\Hearthstone
2015-08-03 23:33 - 2015-08-03 23:33 - 00001207 _____ C:\Users\Public\Desktop\Hearthstone.lnk
2015-08-03 23:33 - 2015-08-03 23:33 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Hearthstone
2015-08-03 23:28 - 2015-08-18 17:15 - 00000000 ____D C:\Users\Avell B154 PLUS\AppData\Local\Battle.net
2015-08-03 23:28 - 2015-08-18 16:25 - 00000000 ____D C:\Program Files (x86)\Battle.net
2015-08-03 23:28 - 2015-08-03 23:32 - 00000000 ____D C:\Users\Avell B154 PLUS\AppData\Roaming\Battle.net
2015-08-03 23:28 - 2015-08-03 23:28 - 00000000 ____D C:\Users\Todos os Usuários\Blizzard Entertainment
2015-08-03 23:28 - 2015-08-03 23:28 - 00000000 ____D C:\Users\Avell B154 PLUS\AppData\Local\Blizzard Entertainment
2015-08-03 23:28 - 2015-08-03 23:28 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Battle.net
2015-08-03 23:28 - 2015-08-03 23:28 - 00000000 ____D C:\ProgramData\Blizzard Entertainment
2015-08-03 23:24 - 2015-08-03 23:25 - 00000000 ____D C:\Users\Todos os Usuários\Battle.net
2015-08-03 23:24 - 2015-08-03 23:25 - 00000000 ____D C:\ProgramData\Battle.net
2015-07-24 22:40 - 2015-07-24 22:40 - 00001748 _____ C:\Users\Public\Desktop\This War of Mine.lnk
2015-07-24 22:40 - 2015-07-24 22:40 - 00000000 ____D C:\Users\Avell B154 PLUS\AppData\Roaming\11bitstudios
2015-07-24 22:40 - 2015-07-24 22:40 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\This War of Mine [GOG.com]
2015-07-24 22:39 - 2015-07-24 22:39 - 00000000 ____D C:\GOG Games

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-08-21 14:18 - 2015-03-10 22:12 - 00000000 ____D C:\Users\Avell B154 PLUS\Downloads\Jogos
2015-08-21 14:09 - 2015-03-14 00:32 - 00000000 ____D C:\Users\Avell B154 PLUS\AppData\Local\Popcorn-Time
2015-08-21 14:09 - 2013-08-22 12:36 - 00000000 ____D C:\Windows\system32\sru
2015-08-21 03:28 - 2013-12-27 10:44 - 00001092 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2015-08-21 02:22 - 2015-03-10 17:18 - 00000000 ____D C:\Users\Todos os Usuários\Microsoft Help
2015-08-21 02:22 - 2015-03-10 17:18 - 00000000 ____D C:\ProgramData\Microsoft Help
2015-08-21 02:10 - 2013-12-27 08:32 - 01800588 _____ C:\Windows\system32\PerfStringBackup.INI
2015-08-21 02:10 - 2013-08-22 19:59 - 00775938 _____ C:\Windows\system32\prfh0416.dat
2015-08-21 02:10 - 2013-08-22 19:59 - 00159030 _____ C:\Windows\system32\prfc0416.dat
2015-08-21 02:07 - 2015-03-10 02:39 - 00000000 ____D C:\Users\Avell B154 PLUS\AppData\Roaming\uTorrent
2015-08-21 02:07 - 2014-07-19 01:37 - 00653044 _____ C:\Users\Avell B154 PLUS\AppData\Local\BTServer.log
2015-08-21 02:07 - 2013-12-27 10:44 - 00001088 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2015-08-21 02:06 - 2013-08-22 11:45 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2015-08-21 02:04 - 2015-04-06 23:26 - 00166400 ___SH C:\Users\Avell B154 PLUS\Downloads\Thumbs.db
2015-08-21 02:00 - 2015-03-10 21:57 - 00000000 ____D C:\Users\Avell B154 PLUS\AppData\Local\Adobe
2015-08-20 23:17 - 2013-12-27 08:35 - 00003600 _____ C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-2513282143-1149749203-1196791184-1001
2015-08-20 22:17 - 2015-03-16 22:56 - 00000000 ____D C:\Program Files\KMSpico
2015-08-20 20:31 - 2013-08-22 12:36 - 00000000 ____D C:\Windows\schemas
2015-08-20 20:28 - 2015-04-07 13:36 - 00000000 ____D C:\Program Files (x86)\AGEIA Technologies
2015-08-20 20:28 - 2015-03-10 02:43 - 00000000 ____D C:\Users\Avell B154 PLUS\Downloads\Instaladores
2015-08-20 20:28 - 2013-12-27 10:42 - 00000000 ____D C:\Program Files (x86)\Adobe
2015-08-20 17:08 - 2013-12-27 11:06 - 00000000 ___RD C:\Program Files (x86)\Skype
2015-08-20 17:08 - 2013-12-27 11:06 - 00000000 ____D C:\Users\Todos os Usuários\Skype
2015-08-20 17:08 - 2013-12-27 11:06 - 00000000 ____D C:\ProgramData\Skype
2015-08-20 14:22 - 2015-03-11 00:37 - 00113880 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2015-08-20 14:15 - 2015-03-11 00:37 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2015-08-20 14:15 - 2015-03-11 00:37 - 00000000 ____D C:\Program Files (x86)\Malwarebytes Anti-Malware
2015-08-20 14:06 - 2015-03-11 12:23 - 00001036 _____ C:\Users\Avell B154 PLUS\Desktop\Play Dying Light.lnk
2015-08-20 14:06 - 2015-03-10 02:35 - 00001010 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Opera.lnk
2015-08-20 14:06 - 2013-12-27 10:44 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
2015-08-20 14:06 - 2013-12-27 08:30 - 00000997 _____ C:\Users\Avell B154 PLUS\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2015-08-20 13:53 - 2013-08-22 11:44 - 00730288 _____ C:\Windows\system32\FNTCACHE.DAT
2015-08-20 13:52 - 2015-03-17 22:44 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
2015-08-20 13:52 - 2015-03-17 22:44 - 00000000 ____D C:\Program Files\Microsoft Silverlight
2015-08-20 13:52 - 2015-03-17 22:44 - 00000000 ____D C:\Program Files (x86)\Microsoft Silverlight
2015-08-20 13:47 - 2015-03-10 22:31 - 00718336 ___SH C:\Users\Avell B154 PLUS\Desktop\Thumbs.db
2015-08-20 13:27 - 2013-12-27 10:59 - 00000000 ____D C:\Program Files\Microsoft Office
2015-08-20 13:27 - 2013-08-22 12:36 - 00000000 ____D C:\Program Files\Common Files\microsoft shared
2015-08-20 13:26 - 2013-12-27 10:59 - 00000000 ____D C:\Program Files (x86)\Microsoft Office
2015-08-20 13:24 - 2013-08-22 20:01 - 00000000 ____D C:\Windows\ShellNew
2015-08-20 13:22 - 2013-08-22 12:36 - 00000000 ____D C:\Program Files\Common Files\System
2015-08-20 13:22 - 2013-08-22 10:25 - 00000076 _____ C:\Windows\win.ini
2015-08-19 20:08 - 2015-03-10 17:21 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SharePoint
2015-08-19 20:08 - 2015-03-10 17:20 - 00000000 ____D C:\Program Files (x86)\MSBuild
2015-08-19 19:51 - 2013-12-27 11:10 - 00000000 ____D C:\Users\Avell B154 PLUS\AppData\Roaming\SoftGrid Client
2015-08-19 19:51 - 2013-12-27 10:59 - 00000000 ____D C:\Program Files (x86)\Microsoft Application Virtualization Client
2015-08-19 19:32 - 2013-08-22 10:25 - 00262144 ___SH C:\Windows\system32\config\BBI
2015-08-19 19:11 - 2015-03-10 02:36 - 00003834 _____ C:\Windows\System32\Tasks\Opera scheduled Autoupdate 1425965757
2015-08-19 19:11 - 2015-03-10 02:35 - 00000000 ____D C:\Program Files (x86)\Opera
2015-08-18 23:19 - 2013-08-22 12:20 - 00000000 ____D C:\Windows\CbsTemp
2015-08-17 21:52 - 2015-03-13 14:40 - 00000000 ____D C:\Users\Avell B154 PLUS\Documents\My Games
2015-08-16 16:41 - 2015-03-10 21:42 - 00000000 ____D C:\Users\Avell B154 PLUS\Downloads\Arquitetura
2015-08-16 00:03 - 2013-08-22 12:36 - 00000000 ____D C:\Windows\rescache
2015-08-15 02:30 - 2015-03-11 00:20 - 00000892 _____ C:\Windows\Tasks\Adobe Flash Player PPAPI Notifier.job
2015-08-15 00:29 - 2015-03-19 11:13 - 00000000 __SHD C:\Users\Avell B154 PLUS\AppData\Local\EmieBrowserModeList
2015-08-15 00:29 - 2014-07-17 16:34 - 00000000 __SHD C:\Users\Avell B154 PLUS\AppData\Local\EmieUserList
2015-08-15 00:29 - 2014-07-17 16:34 - 00000000 __SHD C:\Users\Avell B154 PLUS\AppData\Local\EmieSiteList
2015-08-15 00:24 - 2015-04-17 03:23 - 00000000 ___SD C:\Windows\system32\CompatTel
2015-08-15 00:24 - 2015-04-17 03:23 - 00000000 ____D C:\Windows\system32\appraiser
2015-08-15 00:24 - 2013-08-22 12:36 - 00000000 ___RD C:\Users\Usuário Padrão\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2015-08-15 00:24 - 2013-08-22 12:36 - 00000000 ___RD C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2015-08-15 00:24 - 2013-08-22 12:36 - 00000000 ___RD C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2015-08-15 00:24 - 2013-08-22 12:36 - 00000000 ____D C:\Program Files\Windows Defender
2015-08-15 00:24 - 2013-08-22 12:36 - 00000000 ____D C:\Program Files (x86)\Windows Defender
2015-08-14 17:39 - 2015-06-28 20:30 - 00000000 ____D C:\Games
2015-08-13 20:37 - 2013-08-22 12:36 - 00000000 ____D C:\Windows\AppReadiness
2015-08-13 17:01 - 2013-08-22 12:36 - 00000000 ____D C:\Windows\system32\NDF
2015-08-12 00:27 - 2013-12-27 10:36 - 00000000 ____D C:\Windows\system32\MRT
2015-08-12 00:09 - 2013-12-27 10:36 - 132483416 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2015-08-12 00:08 - 2013-08-22 12:36 - 00000000 ___RD C:\Users\Usuário Padrão\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2015-08-12 00:08 - 2013-08-22 12:36 - 00000000 ___RD C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2015-08-12 00:08 - 2013-08-22 12:36 - 00000000 ___RD C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2015-08-10 17:19 - 2015-04-17 01:24 - 00000000 ____D C:\Users\Avell B154 PLUS\Desktop\Creo Paramétric
2015-08-09 16:58 - 2013-12-27 08:30 - 00000000 ____D C:\Users\Avell B154 PLUS
2015-08-08 15:21 - 2013-12-27 10:42 - 00002457 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader X.lnk
2015-08-08 10:55 - 2013-08-22 12:38 - 00794088 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2015-08-08 10:55 - 2013-08-22 12:38 - 00179688 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2015-08-06 14:47 - 2013-12-27 08:30 - 00000000 ____D C:\Users\Avell B154 PLUS\AppData\Local\Packages
2015-08-05 17:26 - 2015-03-17 19:17 - 00003717 _____ C:\Users\Avell B154 PLUS\Documents\plot.log
2015-08-05 03:05 - 2015-07-06 00:39 - 00000000 ____D C:\Users\Avell B154 PLUS\AppData\Local\Popcorn Time
2015-08-01 16:54 - 2013-12-27 19:23 - 00000000 ____D C:\Windows\Panther
2015-08-01 16:51 - 2015-07-10 14:17 - 00000000 ___HD C:\$Windows.~BT
2015-07-25 13:56 - 2015-04-04 19:07 - 00000000 ___SD C:\Windows\system32\GWX
2015-07-24 22:59 - 2013-12-27 10:41 - 00000000 ____D C:\Users\Todos os Usuários\Adobe
2015-07-24 22:59 - 2013-12-27 10:41 - 00000000 ____D C:\ProgramData\Adobe

==================== Files in the root of some directories =======

2015-04-19 09:20 - 2015-04-19 09:20 - 0005872 _____ () C:\Users\Avell B154 PLUS\AppData\Roaming\vPZ50XazCCQpLDuEuCHx1Pbr3sA
2015-04-23 19:50 - 2015-04-23 19:50 - 182564492 _____ () C:\Users\Avell B154 PLUS\AppData\Local\ACCCx3_0_0_74.zip.aamdownload
2015-04-23 19:50 - 2015-04-23 19:50 - 0002194 _____ () C:\Users\Avell B154 PLUS\AppData\Local\ACCCx3_0_0_74.zip.aamdownload.aamd
2014-07-19 01:37 - 2015-08-21 02:07 - 0653044 _____ () C:\Users\Avell B154 PLUS\AppData\Local\BTServer.log
2015-08-20 14:00 - 2015-08-20 14:00 - 0047616 _____ () C:\Users\Avell B154 PLUS\AppData\Local\Sailfase.exe
2015-08-20 14:00 - 2015-08-20 14:00 - 0000187 _____ () C:\Users\Avell B154 PLUS\AppData\Local\Sailfase.exe.config
2015-03-10 21:00 - 2015-03-10 21:00 - 0000153 _____ () C:\ProgramData\Microsoft.SqlServer.Compact.351.32.bc

==================== Bamital & volsnap =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\dnsapi.dll => File is digitally signed
C:\Windows\SysWOW64\dnsapi.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2015-08-17 19:46

==================== End of log ============================

Publicité


Signaler le contenu de ce document

Publicité