Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version:31-08-2015
Ran by Windows7 (administrator) on WINDOWS7-PC (01-09-2015 18:35:19)
Running from C:\Users\Windows7\Downloads
Loaded Profiles: Windows7 (Available Profiles: Windows7)
Platform: Windows 7 Ultimate Service Pack 1 (X64) Language: Português (Brasil)
Internet Explorer Version 11 (Default browser: FF)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(IObit) C:\Program Files (x86)\IObit\Advanced SystemCare 8\ASCService.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(GAS Tecnologia) C:\Program Files (x86)\GbPlugin\gbpsv.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\MsMpEng.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(IObit) C:\Program Files (x86)\IObit\IObit Malware Fighter\IMFsrv.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe
() C:\Users\Windows7\AppData\Roaming\NetService\netservice.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.28.13\GoogleCrashHandler.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
() C:\Program Files (x86)\IObit\LiveUpdate\IObitLauncher.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.28.13\GoogleCrashHandler64.exe
(GAS Tecnologia LTDA) C:\Program Files\Diebold\Warsaw\core.exe
(IObit) C:\Program Files (x86)\IObit\Advanced SystemCare 8\ASCTray.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(GAS Tecnologia LTDA) C:\Program Files\Diebold\Warsaw\core.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\NisSrv.exe
(GAS Tecnologia) C:\Program Files (x86)\GbPlugin\gbpsv.exe
(IObit) C:\Program Files (x86)\IObit\IObit Uninstaller\UninstallMonitor.exe
(IObit) C:\Program Files (x86)\IObit\IObit Malware Fighter\IMF.exe
() C:\Program Files (x86)\IObit\Advanced SystemCare 8\RealTimeProtector.exe
(IObit) C:\Program Files (x86)\IObit\IObit Malware Fighter\IMFTips.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe


==================== Registry (Whitelisted) ===========================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [MSC] => c:\Program Files\Microsoft Security Client\msseces.exe [1337000 2015-04-30] (Microsoft Corporation)
HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2754704 2015-06-03] (NVIDIA Corporation)
HKLM\...\Run: [ShadowPlay] => C:\Windows\system32\rundll32.exe C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [14040792 2015-08-05] (Realtek Semiconductor)
HKLM\...\Run: [Diebold - Warsaw] => C:\Program Files\Diebold\Warsaw\core.exe [858424 2015-06-19] (GAS Tecnologia LTDA)
HKLM-x32\...\Run: [IObit Malware Fighter] => C:\Program Files (x86)\IObit\IObit Malware Fighter\IMF.exe [5889824 2015-07-28] (IObit)
Winlogon\Notify\ GbPluginBb: C:\Program Files (x86)\GbPlugin\gbieh.dll [2015-08-19] (Banco do Brasil)
HKU\S-1-5-21-3065008795-3308820500-1365078935-1000\...\Run: [Advanced SystemCare 8] => C:\Program Files (x86)\IObit\Advanced SystemCare 8\ASCTray.exe [2429728 2015-04-08] (IObit)
HKU\S-1-5-21-3065008795-3308820500-1365078935-1000\...\Run: [uTorrent] => C:\Users\Windows7\AppData\Roaming\uTorrent\uTorrent.exe [1696096 2015-08-17] (BitTorrent Inc.)
HKU\S-1-5-21-3065008795-3308820500-1365078935-1000\...\Run: [DAEMON Tools Lite] => C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3696912 2014-03-04] (Disc Soft Ltd)
HKU\S-1-5-18\...\Run: [Advanced SystemCare 8] => C:\Program Files (x86)\IObit\Advanced SystemCare 8\ASCTray.exe [2429728 2015-04-08] (IObit)
ShellExecuteHooks-x32: GbPluginObj Class - {E37CB5F0-51F5-4395-A808-5FA49E399F83} - C:\PROGRAM FILES (X86)\GbPlugin\gbieh.dll [1896320 2015-08-19] (Banco do Brasil)
ShellIconOverlayIdentifiers: [ AccExtIco1] -> {AB9CF9F8-8A96-4F9D-BF21-CE85714C3A47} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSync\CoreSync_x64.dll [2014-07-16] ()
ShellIconOverlayIdentifiers: [ AccExtIco2] -> {853B7E05-C47D-4985-909A-D0DC5C6D7303} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSync\CoreSync_x64.dll [2014-07-16] ()
ShellIconOverlayIdentifiers: [ AccExtIco3] -> {42D38F2E-98E9-4382-B546-E24E4D6D04BB} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSync\CoreSync_x64.dll [2014-07-16] ()
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => No File
ShellIconOverlayIdentifiers: [BaiduAntivirusIconLock] -> {0A93904A-BB1E-4a0c-9753-B57B9AE272CC} => No File
BootExecute: autocheck autochk * ROBoot64 \??\C:\Windows\system32\ASOROSet.bin

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

ProxyEnable: [.DEFAULT] => Proxy is enabled.
ProxyServer: [.DEFAULT] => http=127.0.0.1:50847;https=127.0.0.1:50847
Tcpip\Parameters: [DhcpNameServer] 189.7.112.15 189.7.112.31
Tcpip\..\Interfaces\{A6E3EA72-3922-4114-BC67-B010A84EF609}: [NameServer] 189.7.112.31 189.7.112.15 201.6.4.116
Tcpip\..\Interfaces\{A6E3EA72-3922-4114-BC67-B010A84EF609}: [DhcpNameServer] 189.7.112.15 189.7.112.31

Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = www.top8844.com?oem=mbtkv5&uid=S1RMJ50S308690_SAMSUNGHD502IJ&tm=1441025959
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = www.top8844.com?oem=mbtkv5&uid=S1RMJ50S308690_SAMSUNGHD502IJ&tm=1441025959
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = www.top8844.com?oem=mbtkv5&uid=S1RMJ50S308690_SAMSUNGHD502IJ&tm=1441025959
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = www.top8844.com?oem=mbtkv5&uid=S1RMJ50S308690_SAMSUNGHD502IJ&tm=1441025959
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.google.com
HKU\S-1-5-21-3065008795-3308820500-1365078935-1000\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://br.msn.com/?ocid=iehp
HKU\S-1-5-21-3065008795-3308820500-1365078935-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.msn.com/?ocid=iehp
HKU\S-1-5-21-3065008795-3308820500-1365078935-1000\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = www.top8844.com?oem=mbtkv5&uid=S1RMJ50S308690_SAMSUNGHD502IJ&tm=1441025959
URLSearchHook: HKLM-x32 -> Default = {CCC7B151-1D8C-11E3-B2AD-F3EF3D58318D}
SearchScopes: HKLM-x32 -> {FDC320A9-B4B2-491E-B140-815C11613CB6} URL = hxxp://search.yahoo.com/search?p={searchTerms}
SearchScopes: HKU\.DEFAULT -> {425ED333-6083-428a-92C9-0CFC28B9D1BF} URL = hxxp://search.yac.mx/web/?q={searchTerms}&type=ds&from=yac&uid=samsungxhd502ij_s1rmj50s308690&ts=1437623146
SearchScopes: HKU\.DEFAULT -> {FDC320A9-B4B2-491E-B140-815C11613CB6} URL = hxxp://search.yahoo.com/search?p={searchTerms}
SearchScopes: HKU\S-1-5-19 -> {425ED333-6083-428a-92C9-0CFC28B9D1BF} URL = hxxp://search.yac.mx/web/?q={searchTerms}&type=ds&from=yac&uid=samsungxhd502ij_s1rmj50s308690&ts=1437623146
SearchScopes: HKU\S-1-5-19 -> {FDC320A9-B4B2-491E-B140-815C11613CB6} URL = hxxp://search.yahoo.com/search?p={searchTerms}
SearchScopes: HKU\S-1-5-20 -> {425ED333-6083-428a-92C9-0CFC28B9D1BF} URL = hxxp://search.yac.mx/web/?q={searchTerms}&type=ds&from=yac&uid=samsungxhd502ij_s1rmj50s308690&ts=1437623146
SearchScopes: HKU\S-1-5-20 -> {FDC320A9-B4B2-491E-B140-815C11613CB6} URL = hxxp://search.yahoo.com/search?p={searchTerms}
SearchScopes: HKU\S-1-5-21-3065008795-3308820500-1365078935-1000 -> {012E1000-F331-11DB-8314-0800200C9A66} URL = hxxp://www.google.com/search?q={searchTerms}
BHO: No Name -> {11111111-1111-1111-1111-110611791113} -> No File
BHO: No Name -> {11111111-1111-1111-1111-110611801167} -> No File
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_60\bin\ssv.dll [2015-08-21] (Oracle Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_60\bin\jp2ssv.dll [2015-08-21] (Oracle Corporation)
BHO-x32: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-26] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_60\bin\ssv.dll [2015-08-21] (Oracle Corporation)
BHO-x32: GbIehObj Class -> {C41A1C0E-EA6C-11D4-B1B8-444553540000} -> C:\PROGRAM FILES (X86)\GBPLUGIN\gbieh.dll [2015-08-19] (Banco do Brasil)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_60\bin\jp2ssv.dll [2015-08-21] (Oracle Corporation)
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe www.321oyun.com?oem=mbtkv5&uid=S1RMJ50S308690_SAMSUNGHD502IJ&tm=1438889137

FireFox:
========
FF ProfilePath: C:\Users\Windows7\AppData\Roaming\Mozilla\Firefox\Profiles\4y5hwhzy.default
FF NewTab: www.top8844.com?oem=mbtkv5&uid=S1RMJ50S308690_SAMSUNGHD502IJ&tm=1441025959
FF Homepage: www.google.com.br
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_18_0_0_232.dll [2015-08-14] ()
FF Plugin: @java.com/DTPlugin,version=11.60.2 -> C:\Program Files\Java\jre1.8.0_60\bin\dtplugin\npDeployJava1.dll [2015-08-21] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.60.2 -> C:\Program Files\Java\jre1.8.0_60\bin\plugin2\npjp2.dll [2015-08-21] (Oracle Corporation)
FF Plugin: @microsoft.com/GENUINE -> disabled [No File]
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.40416.0\npctrl.dll [2015-04-16] ( Microsoft Corporation)
FF Plugin: adobe.com/AdobeAAMDetect_x86_64 -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect64.dll [2014-07-22] (Adobe Systems)
FF Plugin: adobe.com/AdobeExManDetect -> C:\Program Files (x86)\Adobe\Adobe Extension Manager CS6\Win64Plugin\npAdobeExManDetectX64.dll [2013-12-02] (Adobe Systems)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_18_0_0_232.dll [2015-08-14] ()
FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\Windows\SysWOW64\Adobe\Director\np32dsw.dll [2015-04-17] (Adobe Systems, Inc.)
FF Plugin-x32: @java.com/DTPlugin,version=11.60.2 -> C:\Program Files (x86)\Java\jre1.8.0_60\bin\dtplugin\npDeployJava1.dll [2015-08-21] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.60.2 -> C:\Program Files (x86)\Java\jre1.8.0_60\bin\plugin2\npjp2.dll [2015-08-21] (Oracle Corporation)
FF Plugin-x32: @microsoft.com/GENUINE -> disabled [No File]
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.40416.0\npctrl.dll [2015-04-15] ( Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.28.13\npGoogleUpdate3.dll [2015-08-28] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.28.13\npGoogleUpdate3.dll [2015-08-28] (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.1.3 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2014-07-22] (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.5 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2014-07-22] (VideoLAN)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2014-12-03] (Adobe Systems Inc.)
FF Plugin-x32: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect32.dll [2014-07-22] (Adobe Systems)
FF Plugin-x32: adobe.com/AdobeExManDetect -> C:\Program Files (x86)\Adobe\Adobe Extension Manager CS6\npAdobeExManDetectX86.dll [2013-12-02] (Adobe Systems)
FF Plugin HKU\S-1-5-21-3065008795-3308820500-1365078935-1000: gastecnologia.com.br/sf/bb -> C:\Users\Windows7\AppData\Local\GAS Tecnologia\GBBD\npsf_bb.dll [2015-03-06] (GAS Tecnologia)
FF Plugin HKU\S-1-5-21-3065008795-3308820500-1365078935-1000: gastecnologia.com.br/sf/bb64 -> C:\Users\Windows7\AppData\Local\GAS Tecnologia\GBBD\npsf_bb_64.dll [2015-03-06] (GAS Tecnologia)
FF Extension: Advanced SystemCare Surfing Protection - C:\Users\Windows7\AppData\Roaming\Mozilla\Firefox\Profiles\4y5hwhzy.default\Extensions\iobitascsurfingprotection@iobit.com [2015-07-10]
FF HKU\S-1-5-21-3065008795-3308820500-1365078935-1000\...\Firefox\Extensions: [{87F8774F-B485-47E2-A755-A40A8A5E886C}] - C:\Users\Windows7\AppData\Local\GAS Tecnologia\GBBD\bb\xpi
FF Extension: GBBD Banco do Brasil - C:\Users\Windows7\AppData\Local\GAS Tecnologia\GBBD\bb\xpi [2015-07-01]
StartMenuInternet: FIREFOX.EXE - C:\Program Files (x86)\Mozilla Firefox\firefox.exe www.top8844.com?oem=mbtkv5&uid=S1RMJ50S308690_SAMSUNGHD502IJ&tm=1441025959

Chrome:
=======
CHR Profile: C:\Users\Windows7\AppData\Local\Google\Chrome\User Data\Profile 1
CHR Extension: (aapbdbdomjkkjkaonfhkkikfgjllcleb) - C:\Users\Windows7\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\aapbdbdomjkkjkaonfhkkikfgjllcleb [2015-04-15]
CHR Extension: (Google Slides) - C:\Users\Windows7\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-03-01]
CHR Extension: (Google Docs) - C:\Users\Windows7\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\aohghmighlieiainnegkcijnfilokake [2015-03-01]
CHR Extension: (Google Drive) - C:\Users\Windows7\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-03-01]
CHR Extension: (YouTube) - C:\Users\Windows7\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-03-01]
CHR Extension: (Conteudo Especial) - C:\Users\Windows7\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\chfjpjnfmdgpiklinonfclgakfofpfoe [2015-03-01]
CHR Extension: (Google Search) - C:\Users\Windows7\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-03-01]
CHR Extension: (I - Cinema) - C:\Users\Windows7\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\dimfohdigjaffdaanhmbocfkpolglnjk [2015-04-03]
CHR Extension: (The Social Poker) - C:\Users\Windows7\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\dkpfmkipgpfhmenjnoaokbdkoeiclolc [2015-03-01]
CHR Extension: (Google Sheets) - C:\Users\Windows7\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-03-01]
CHR Extension: (Avast Online Security) - C:\Users\Windows7\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\gomekmidlodglbbmalcneegieacbdmki [2015-03-01]
CHR Extension: (Top 10 Wordpress Feed) - C:\Users\Windows7\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\hfbcbbpdnkagncfaimiakkkpcgbhjaih [2015-05-17]
CHR Extension: (Auto HD For YouTube™) - C:\Users\Windows7\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\koiaokdomkpjdgniimnkhgbilbjgpeak [2015-03-01]
CHR Extension: (Chrome Hotword Shared Module) - C:\Users\Windows7\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\lccekmodgklaepjeofjdjpbminllajkg [2015-04-18]
CHR Extension: (GBBD Banco do Brasil) - C:\Users\Windows7\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\mkeabchhfifpaaoefpockjhaphjmoapp [2015-03-01]
CHR Extension: (monhkdcehmbdgkhgpccaccbbcgcfpjkd) - C:\Users\Windows7\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\monhkdcehmbdgkhgpccaccbbcgcfpjkd [2015-04-14]
CHR Extension: (Stop Autoplay for Youtube™ Extended) - C:\Users\Windows7\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\nilnpbhnhmmjioijfgilcohbknkgfmpa [2015-03-01]
CHR Extension: (Google Wallet) - C:\Users\Windows7\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-03-06]
CHR Extension: (My Chrome Theme) - C:\Users\Windows7\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\oehpjpccmlcalbenfhnacjeocbjdonic [2015-03-01]
CHR Extension: (CogniFit Brain Fitness) - C:\Users\Windows7\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\pckogiikkcdjefncaekfjbdkmlfniagf [2015-03-01]
CHR Extension: (Gmail) - C:\Users\Windows7\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-03-01]
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] -
StartMenuInternet: Google Chrome - C:\Program Files (x86)\Google\Chrome\Application\chrome.exe www.top8844.com?oem=mbtkv5&uid=S1RMJ50S308690_SAMSUNGHD502IJ&tm=1441025959

==================== Services (Whitelisted) ========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 AdvancedSystemCareService8; C:\Program Files (x86)\IObit\Advanced SystemCare 8\ASCService.exe [821024 2015-08-05] (IObit)
R2 GbpSv; C:\Program Files (x86)\GbPlugin\gbpsv.exe [587576 2015-08-12] (GAS Tecnologia)
R2 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [1152656 2015-05-22] (NVIDIA Corporation)
R2 IMFservice; C:\Program Files (x86)\IObit\IObit Malware Fighter\IMFsrv.exe [882464 2015-07-17] (IObit)
S2 LiveUpdateSvc; C:\Program Files (x86)\IObit\LiveUpdate\LiveUpdate.exe [2909472 2015-07-30] (IObit)
R2 MsMpSvc; c:\Program Files\Microsoft Security Client\MsMpEng.exe [23816 2015-04-30] (Microsoft Corporation)
R2 NetTcpHandler; C:\Users\Windows7\AppData\Roaming\NetService\netservice.exe [173088 2015-07-08] ()
R3 NisSrv; c:\Program Files\Microsoft Security Client\NisSrv.exe [366544 2015-04-30] (Microsoft Corporation)
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1893008 2015-06-03] (NVIDIA Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [23007376 2015-06-03] (NVIDIA Corporation)
R2 Warsaw Technology; C:\Program Files\Diebold\Warsaw\core.exe [858424 2015-06-19] (GAS Tecnologia LTDA)
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2014-06-10] (Microsoft Corporation)
S2 cybusyro; no ImagePath
S2 mopydevu; no ImagePath
S2 timuneqi; no ImagePath

===================== Drivers (Whitelisted) ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S1 afkmgfel; no ImagePath
R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [29208 2014-07-11] ()
S0 aswNdisFlt; C:\Windows\System32\DRIVERS\aswNdisFlt.sys [448400 2014-07-11] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65776 2014-07-11] ()
R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [92008 2014-07-11] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [224896 2014-07-11] ()
R3 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283064 2015-01-06] (Disc Soft Ltd)
S3 ebdrv; C:\Windows\system32\drivers\evbda.sys [3286016 2009-06-10] (Broadcom Corporation)
S3 EsgScanner; C:\Windows\System32\DRIVERS\EsgScanner.sys [22704 2014-12-09] ()
R3 FileMonitor; C:\Program Files (x86)\IObit\IObit Malware Fighter\Drivers\win7_amd64\FileMonitor.sys [23048 2015-03-25] (IObit)
R1 gbpddfac; C:\Windows\System32\drivers\gbpddfac64.sys [28888 2015-09-01] (GAS Tecnologia)
R1 gbpddfac; C:\Windows\SysWOW64\drivers\gbpddfac64.sys [28888 2015-08-26] (GAS Tecnologia)
R3 GBPRCM; C:\PROGRAM FILES (X86)\GBPLUGIN\gbprcm64.sys [29912 2015-08-26] (GAS Tecnologia)
S3 hid7906; C:\Windows\SysWOW64\drivers\hid7906.sys [34963 2007-12-12] (Compuware Corporation) [File not signed]
S3 hid8101; C:\Windows\SysWOW64\drivers\hid8101.sys [37024 2007-12-03] (Compuware Corporation) [File not signed]
S3 hid8103; C:\Windows\SysWOW64\drivers\hid8103.sys [34587 2007-11-28] (Compuware Corporation) [File not signed]
R1 HWiNFO32; C:\Windows\SysWOW64\drivers\HWiNFO64A.SYS [26528 2015-01-19] (REALiX(tm))
S3 MBAMSwissArmy; no ImagePath
R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [280376 2015-03-04] (Microsoft Corporation)
R2 NisDrv; C:\Windows\System32\DRIVERS\NisDrvWFP.sys [124568 2015-03-04] (Microsoft Corporation)
R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [19600 2015-06-03] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [46768 2015-05-19] (NVIDIA Corporation)
R3 RegFilter; C:\Program Files (x86)\IObit\IObit Malware Fighter\drivers\win7_amd64\regfilter.sys [34848 2015-03-25] (IObit.com)
R0 SmartDefragDriver; C:\Windows\System32\Drivers\SmartDefragDriver.sys [21184 2014-06-04] (IObit)
R3 UrlFilter; C:\Program Files (x86)\IObit\IObit Malware Fighter\drivers\win7_amd64\UrlFilter.sys [23016 2015-03-25] (IObit.com)
R3 Warsaw_PP; C:\Program Files (x86)\GbPlugin\wsftprp64.sys [24792 2014-10-31] (GAS Tecnologia LTDA)
R4 WinDivert1.1; C:\Program Files\Diebold\Warsaw\WinDivert64.sys [38104 2015-04-01] (Basil)
S3 WinRing0_1_2_0; C:\Program Files (x86)\IObit\Game Booster 3\Driver\WinRing0x64.sys [14544 2010-11-01] (OpenLibSys.org)
S3 VGPU; System32\drivers\rdvgkmd.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-09-01 18:35 - 2015-09-01 18:35 - 00022662 _____ C:\Users\Windows7\Downloads\FRST.txt
2015-09-01 18:34 - 2015-09-01 18:35 - 00000000 ____D C:\FRST
2015-09-01 18:34 - 2015-09-01 18:34 - 02188800 _____ (Farbar) C:\Users\Windows7\Downloads\FRST64.exe
2015-09-01 17:12 - 2015-09-01 17:13 - 03237248 _____ (Enigma Software Group USA, LLC.) C:\Users\Windows7\Downloads\SpyHunter-Installer.exe
2015-08-31 21:37 - 2015-09-01 16:11 - 00000336 _____ C:\Windows\setupact.log
2015-08-31 21:37 - 2015-08-31 21:37 - 00000356 _____ C:\Windows\PFRO.log
2015-08-31 21:37 - 2015-08-31 21:37 - 00000000 _____ C:\Windows\setuperr.log
2015-08-31 21:30 - 2015-08-31 21:30 - 00091136 ___SH C:\Users\Windows7\Thumbs.db
2015-08-31 10:22 - 2015-08-31 19:11 - 00002985 _____ C:\runcheck.txt
2015-08-31 10:02 - 2015-08-31 10:02 - 25191936 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2015-08-31 10:02 - 2015-08-31 10:02 - 19871232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2015-08-31 10:02 - 2015-08-31 10:02 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2015-08-31 10:02 - 2015-08-31 10:02 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2015-08-30 20:54 - 2015-08-30 20:54 - 00000000 ____D C:\Users\Windows7\AppData\Roaming\NVIDIA
2015-08-30 20:54 - 2015-08-30 20:54 - 00000000 ____D C:\Users\Windows7\AppData\Local\SKIDROW
2015-08-30 20:54 - 2015-08-30 20:54 - 00000000 ____D C:\Users\Windows7\AppData\Local\2K Games
2015-08-30 20:48 - 2015-08-30 20:48 - 00000000 ____D C:\Users\Windows7\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\GameVicio
2015-08-30 20:48 - 2015-08-30 20:48 - 00000000 ____D C:\Program Files (x86)\GameVicio
2015-08-30 20:30 - 2015-08-30 20:30 - 00002137 _____ C:\Users\Windows7\Desktop\Play Mafia II.lnk
2015-08-30 20:22 - 2015-08-30 20:30 - 00000000 ____D C:\Program Files (x86)\MAFIA II
2015-08-30 00:04 - 2015-08-30 00:33 - 00281688 _____ C:\Windows\SysWOW64\PnkBstrB.xtr
2015-08-30 00:04 - 2015-08-30 00:04 - 00000000 ____D C:\Users\Windows7\AppData\Local\PunkBuster
2015-08-30 00:03 - 2015-08-30 00:51 - 00000000 ____D C:\Users\Windows7\Documents\My Games
2015-08-30 00:03 - 2015-08-30 00:03 - 00000000 ____D C:\Users\Todos os Usuários\Orbit
2015-08-30 00:03 - 2015-08-30 00:03 - 00000000 ____D C:\ProgramData\Orbit
2015-08-29 23:54 - 2015-08-30 00:32 - 00281688 _____ C:\Windows\SysWOW64\PnkBstrB.ex0
2015-08-29 23:53 - 2010-06-02 04:55 - 00518488 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_7.dll
2015-08-29 23:53 - 2010-06-02 04:55 - 00176984 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_7.dll
2015-08-29 23:53 - 2010-06-02 04:55 - 00077656 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_5.dll
2015-08-29 23:53 - 2010-05-26 11:41 - 01907552 _____ (Microsoft Corporation) C:\Windows\system32\d3dcsx_43.dll
2015-08-29 23:53 - 2010-05-26 11:41 - 00511328 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_43.dll
2015-08-29 23:53 - 2010-05-26 11:41 - 00276832 _____ (Microsoft Corporation) C:\Windows\system32\d3dx11_43.dll
2015-08-29 23:53 - 2010-02-04 10:01 - 00530776 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_6.dll
2015-08-29 23:53 - 2010-02-04 10:01 - 00176984 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_6.dll
2015-08-29 23:53 - 2010-02-04 10:01 - 00078680 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_4.dll
2015-08-29 23:53 - 2010-02-04 10:01 - 00024920 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_7.dll
2015-08-29 23:53 - 2009-09-04 17:44 - 00517960 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_5.dll
2015-08-29 23:53 - 2009-09-04 17:44 - 00176968 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_5.dll
2015-08-29 23:53 - 2009-09-04 17:44 - 00073544 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_3.dll
2015-08-29 23:53 - 2009-03-16 14:18 - 00521560 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_4.dll
2015-08-29 23:53 - 2009-03-16 14:18 - 00174936 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_4.dll
2015-08-29 23:53 - 2009-03-16 14:18 - 00024920 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_6.dll
2015-08-29 23:53 - 2009-03-09 15:27 - 05425496 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_41.dll
2015-08-29 23:53 - 2009-03-09 15:27 - 02430312 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_41.dll
2015-08-29 23:53 - 2009-03-09 15:27 - 00520544 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_41.dll
2015-08-29 23:53 - 2008-10-27 10:04 - 00518480 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_3.dll
2015-08-29 23:53 - 2008-10-27 10:04 - 00175440 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_3.dll
2015-08-29 23:53 - 2008-10-27 10:04 - 00074576 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_2.dll
2015-08-29 23:53 - 2008-10-27 10:04 - 00025936 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_5.dll
2015-08-29 23:53 - 2008-10-15 06:22 - 05631312 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_40.dll
2015-08-29 23:53 - 2008-10-15 06:22 - 02605920 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_40.dll
2015-08-29 23:53 - 2008-10-15 06:22 - 00519000 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_40.dll
2015-08-29 23:53 - 2008-07-31 10:41 - 00177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_2.dll
2015-08-29 23:53 - 2008-07-31 10:41 - 00072200 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_1.dll
2015-08-29 23:53 - 2008-07-31 10:40 - 00513544 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_2.dll
2015-08-29 23:53 - 2008-05-30 14:19 - 00511496 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_1.dll
2015-08-29 23:53 - 2008-05-30 14:11 - 04991496 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_38.dll
2015-08-29 23:53 - 2008-05-30 14:11 - 01941528 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_38.dll
2015-08-29 23:53 - 2008-05-30 14:11 - 00540688 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_38.dll
2015-08-29 23:53 - 2008-03-05 16:04 - 00489480 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_0.dll
2015-08-29 23:53 - 2008-03-05 16:00 - 00028168 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_3.dll
2015-08-29 23:53 - 2008-03-05 15:56 - 04910088 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_37.dll
2015-08-29 23:53 - 2008-03-05 15:56 - 01860120 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_37.dll
2015-08-29 23:53 - 2007-10-22 03:40 - 00411656 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_10.dll
2015-08-29 23:53 - 2007-10-12 15:14 - 05081608 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_36.dll
2015-08-29 23:53 - 2007-10-12 15:14 - 02006552 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_36.dll
2015-08-29 23:53 - 2007-07-20 00:57 - 00411496 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_9.dll
2015-08-29 23:53 - 2007-07-19 18:14 - 05073256 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_35.dll
2015-08-29 23:53 - 2007-07-19 18:14 - 01985904 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_35.dll
2015-08-29 23:53 - 2007-07-19 18:14 - 00508264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_35.dll
2015-08-29 23:53 - 2007-06-20 20:49 - 00409960 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_8.dll
2015-08-29 23:53 - 2007-05-16 16:45 - 04496232 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_34.dll
2015-08-29 23:53 - 2007-05-16 16:45 - 01401200 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_34.dll
2015-08-29 23:53 - 2007-05-16 16:45 - 00506728 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_34.dll
2015-08-29 23:53 - 2007-04-04 18:55 - 00403304 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_7.dll
2015-08-29 23:53 - 2007-03-15 16:57 - 00506728 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_33.dll
2015-08-29 23:53 - 2007-03-12 16:42 - 04494184 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_33.dll
2015-08-29 23:53 - 2007-03-12 16:42 - 01400176 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_33.dll
2015-08-29 23:53 - 2007-03-05 12:42 - 00017688 _____ (Microsoft Corporation) C:\Windows\system32\x3daudio1_1.dll
2015-08-29 23:53 - 2007-01-24 15:27 - 00393576 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_6.dll
2015-08-28 16:48 - 2015-08-28 16:48 - 01941504 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll
2015-08-28 16:48 - 2015-08-28 16:48 - 01805824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll
2015-08-28 16:48 - 2015-08-28 16:48 - 01632256 _____ (Microsoft Corporation) C:\Windows\system32\dwmcore.dll
2015-08-28 16:48 - 2015-08-28 16:48 - 01372160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dwmcore.dll
2015-08-28 16:48 - 2015-08-28 16:48 - 00115136 _____ (Microsoft Corporation) C:\Windows\system32\consent.exe
2015-08-28 16:48 - 2015-08-28 16:48 - 00082944 _____ (Microsoft Corporation) C:\Windows\system32\dwmapi.dll
2015-08-28 16:48 - 2015-08-28 16:48 - 00070656 _____ (Microsoft Corporation) C:\Windows\system32\appinfo.dll
2015-08-28 16:48 - 2015-08-28 16:48 - 00067584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dwmapi.dll
2015-08-28 16:46 - 2015-08-28 16:46 - 05568960 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2015-08-28 16:46 - 2015-08-28 16:46 - 03989952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2015-08-28 16:46 - 2015-08-28 16:46 - 03934656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2015-08-28 16:46 - 2015-08-28 16:46 - 01730496 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2015-08-28 16:46 - 2015-08-28 16:46 - 01461760 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2015-08-28 16:46 - 2015-08-28 16:46 - 01390592 _____ (Microsoft Corporation) C:\Windows\system32\diagtrack.dll
2015-08-28 16:46 - 2015-08-28 16:46 - 01311768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2015-08-28 16:46 - 2015-08-28 16:46 - 01216512 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2015-08-28 16:46 - 2015-08-28 16:46 - 01163264 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
2015-08-28 16:46 - 2015-08-28 16:46 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll
2015-08-28 16:46 - 2015-08-28 16:46 - 00879104 _____ (Microsoft Corporation) C:\Windows\system32\tdh.dll
2015-08-28 16:46 - 2015-08-28 16:46 - 00879104 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll
2015-08-28 16:46 - 2015-08-28 16:46 - 00729088 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2015-08-28 16:46 - 2015-08-28 16:46 - 00686080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll
2015-08-28 16:46 - 2015-08-28 16:46 - 00686080 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2015-08-28 16:46 - 2015-08-28 16:46 - 00665088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll
2015-08-28 16:46 - 2015-08-28 16:46 - 00641536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\advapi32.dll
2015-08-28 16:46 - 2015-08-28 16:46 - 00635392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdh.dll
2015-08-28 16:46 - 2015-08-28 16:46 - 00552960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2015-08-28 16:46 - 2015-08-28 16:46 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll
2015-08-28 16:46 - 2015-08-28 16:46 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2015-08-28 16:46 - 2015-08-28 16:46 - 00362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll
2015-08-28 16:46 - 2015-08-28 16:46 - 00342016 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2015-08-28 16:46 - 2015-08-28 16:46 - 00338432 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe
2015-08-28 16:46 - 2015-08-28 16:46 - 00315392 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2015-08-28 16:46 - 2015-08-28 16:46 - 00309760 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2015-08-28 16:46 - 2015-08-28 16:46 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe
2015-08-28 16:46 - 2015-08-28 16:46 - 00290816 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys
2015-08-28 16:46 - 2015-08-28 16:46 - 00274944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2015-08-28 16:46 - 2015-08-28 16:46 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2015-08-28 16:46 - 2015-08-28 16:46 - 00248832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2015-08-28 16:46 - 2015-08-28 16:46 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
2015-08-28 16:46 - 2015-08-28 16:46 - 00221184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2015-08-28 16:46 - 2015-08-28 16:46 - 00215040 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll
2015-08-28 16:46 - 2015-08-28 16:46 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2015-08-28 16:46 - 2015-08-28 16:46 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
2015-08-28 16:46 - 2015-08-28 16:46 - 00159232 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys
2015-08-28 16:46 - 2015-08-28 16:46 - 00155584 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2015-08-28 16:46 - 2015-08-28 16:46 - 00146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll
2015-08-28 16:46 - 2015-08-28 16:46 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2015-08-28 16:46 - 2015-08-28 16:46 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2015-08-28 16:46 - 2015-08-28 16:46 - 00129024 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys
2015-08-28 16:46 - 2015-08-28 16:46 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe
2015-08-28 16:46 - 2015-08-28 16:46 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2015-08-28 16:46 - 2015-08-28 16:46 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2015-08-28 16:46 - 2015-08-28 16:46 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2015-08-28 16:46 - 2015-08-28 16:46 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2015-08-28 16:46 - 2015-08-28 16:46 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe
2015-08-28 16:46 - 2015-08-28 16:46 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msobjs.dll
2015-08-28 16:46 - 2015-08-28 16:46 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll
2015-08-28 16:46 - 2015-08-28 16:46 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\auditpol.exe
2015-08-28 16:46 - 2015-08-28 16:46 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll
2015-08-28 16:46 - 2015-08-28 16:46 - 00044032 _____ (Microsoft Corporation) C:\Windows\system32\cryptbase.dll
2015-08-28 16:46 - 2015-08-28 16:46 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll
2015-08-28 16:46 - 2015-08-28 16:46 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll
2015-08-28 16:46 - 2015-08-28 16:46 - 00041984 _____ (Microsoft Corporation) C:\Windows\system32\UtcResources.dll
2015-08-28 16:46 - 2015-08-28 16:46 - 00036864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptbase.dll
2015-08-28 16:46 - 2015-08-28 16:46 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2015-08-28 16:46 - 2015-08-28 16:46 - 00029184 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2015-08-28 16:46 - 2015-08-28 16:46 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2015-08-28 16:46 - 2015-08-28 16:46 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2015-08-28 16:46 - 2015-08-28 16:46 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2015-08-28 16:46 - 2015-08-28 16:46 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2015-08-28 16:46 - 2015-08-28 16:46 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
2015-08-28 16:46 - 2015-08-28 16:46 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll
2015-08-28 16:46 - 2015-08-28 16:46 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2015-08-28 16:46 - 2015-08-28 16:46 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll
2015-08-28 16:46 - 2015-08-28 16:46 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
2015-08-28 16:46 - 2015-08-28 16:46 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll
2015-08-28 16:46 - 2015-08-28 16:46 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll
2015-08-28 16:46 - 2015-08-28 16:46 - 00006144 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll
2015-08-28 16:46 - 2015-08-28 16:46 - 00006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2015-08-28 16:46 - 2015-08-28 16:46 - 00005120 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll
2015-08-28 16:46 - 2015-08-28 16:46 - 00005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2015-08-28 16:46 - 2015-08-28 16:46 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2015-08-28 16:46 - 2015-08-28 16:46 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2015-08-28 16:46 - 2015-08-28 16:46 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2015-08-28 16:46 - 2015-08-28 16:46 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2015-08-28 16:46 - 2015-08-28 16:46 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2015-08-28 16:46 - 2015-08-28 16:46 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2015-08-28 16:46 - 2015-08-28 16:46 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll
2015-08-28 16:46 - 2015-08-28 16:46 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll
2015-08-28 16:46 - 2015-08-28 16:46 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2015-08-28 16:46 - 2015-08-28 16:46 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll
2015-08-28 16:46 - 2015-08-28 16:46 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2015-08-28 16:46 - 2015-08-28 16:46 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2015-08-28 16:46 - 2015-08-28 16:46 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2015-08-28 16:46 - 2015-08-28 16:46 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2015-08-28 16:46 - 2015-08-28 16:46 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll
2015-08-28 16:46 - 2015-08-28 16:46 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2015-08-28 16:46 - 2015-08-28 16:46 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2015-08-28 16:46 - 2015-08-28 16:46 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll
2015-08-28 16:46 - 2015-08-28 16:46 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2015-08-28 16:46 - 2015-08-28 16:46 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2015-08-28 16:46 - 2015-08-28 16:46 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll
2015-08-28 16:46 - 2015-08-28 16:46 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2015-08-28 16:46 - 2015-08-28 16:46 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2015-08-28 16:46 - 2015-08-28 16:46 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2015-08-28 16:46 - 2015-08-28 16:46 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2015-08-28 16:46 - 2015-08-28 16:46 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2015-08-28 16:46 - 2015-08-28 16:46 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2015-08-28 16:46 - 2015-08-28 16:46 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2015-08-28 16:46 - 2015-08-28 16:46 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll
2015-08-28 16:46 - 2015-08-28 16:46 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll
2015-08-28 16:46 - 2015-08-28 16:46 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2015-08-28 16:46 - 2015-08-28 16:46 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll
2015-08-28 16:46 - 2015-08-28 16:46 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll
2015-08-28 16:46 - 2015-08-28 16:46 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll
2015-08-28 16:46 - 2015-08-28 16:46 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll
2015-08-28 16:46 - 2015-08-28 16:46 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2015-08-28 16:46 - 2015-08-28 16:46 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll
2015-08-28 16:46 - 2015-08-28 16:46 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll
2015-08-28 16:46 - 2015-08-28 16:46 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll
2015-08-28 16:46 - 2015-08-28 16:46 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll
2015-08-28 16:46 - 2015-08-28 16:46 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2015-08-28 16:46 - 2015-08-28 16:46 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2015-08-28 16:46 - 2015-08-28 16:46 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2015-08-28 16:46 - 2015-08-28 16:46 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2015-08-28 16:46 - 2015-08-28 16:46 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2015-08-28 16:46 - 2015-08-28 16:46 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2015-08-28 16:46 - 2015-08-28 16:46 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2015-08-28 16:46 - 2015-08-28 16:46 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2015-08-28 16:46 - 2015-08-28 16:46 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2015-08-28 16:46 - 2015-08-28 16:46 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2015-08-28 16:46 - 2015-08-28 16:46 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2015-08-28 16:46 - 2015-08-28 16:46 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2015-08-28 16:46 - 2015-08-28 16:46 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2015-08-28 16:46 - 2015-08-28 16:46 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
2015-08-28 16:44 - 2015-08-28 16:44 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll
2015-08-28 16:44 - 2015-08-28 16:44 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2015-08-28 16:43 - 2015-08-28 16:43 - 03208192 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2015-08-28 16:43 - 2015-08-28 16:43 - 02565120 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll
2015-08-28 16:43 - 2015-08-28 16:43 - 01987584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10warp.dll
2015-08-28 16:43 - 2015-08-28 16:43 - 01648128 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll
2015-08-28 16:43 - 2015-08-28 16:43 - 01251328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll
2015-08-28 16:43 - 2015-08-28 16:43 - 01180160 _____ (Microsoft Corporation) C:\Windows\system32\FntCache.dll
2015-08-28 16:43 - 2015-08-28 16:43 - 00372736 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll
2015-08-28 16:43 - 2015-08-28 16:43 - 00299520 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll
2015-08-28 16:43 - 2015-08-28 16:43 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\fontsub.dll
2015-08-28 16:43 - 2015-08-28 16:43 - 00070656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fontsub.dll
2015-08-28 16:43 - 2015-08-28 16:43 - 00046080 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll
2015-08-28 16:43 - 2015-08-28 16:43 - 00041984 _____ (Microsoft Corporation) C:\Windows\system32\lpk.dll
2015-08-28 16:43 - 2015-08-28 16:43 - 00034304 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll
2015-08-28 16:43 - 2015-08-28 16:43 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\lpk.dll
2015-08-28 16:43 - 2015-08-28 16:43 - 00014336 _____ (Microsoft Corporation) C:\Windows\system32\dciman32.dll
2015-08-28 16:43 - 2015-08-28 16:43 - 00010240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dciman32.dll
2015-08-28 16:42 - 2015-08-28 16:42 - 02004992 _____ (Microsoft Corporation) C:\Windows\system32\msxml6.dll
2015-08-28 16:42 - 2015-08-28 16:42 - 01887232 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
2015-08-28 16:42 - 2015-08-28 16:42 - 01390592 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml6.dll
2015-08-28 16:42 - 2015-08-28 16:42 - 01241088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll
2015-08-28 16:42 - 2015-08-28 16:42 - 00260096 _____ (Microsoft Corporation) C:\Windows\system32\WebClnt.dll
2015-08-28 16:42 - 2015-08-28 16:42 - 00206848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WebClnt.dll
2015-08-28 16:42 - 2015-08-28 16:42 - 00102912 _____ (Microsoft Corporation) C:\Windows\system32\davclnt.dll
2015-08-28 16:42 - 2015-08-28 16:42 - 00082432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\davclnt.dll
2015-08-28 16:42 - 2015-08-28 16:42 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml6r.dll
2015-08-28 16:42 - 2015-08-28 16:42 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3r.dll
2015-08-28 16:42 - 2015-08-28 16:42 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml6r.dll
2015-08-28 16:42 - 2015-08-28 16:42 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll
2015-08-28 16:40 - 2015-08-28 16:40 - 01743360 _____ (Microsoft Corporation) C:\Windows\system32\sysmain.dll
2015-08-28 16:40 - 2015-08-28 16:40 - 00094656 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mountmgr.sys
2015-08-28 16:40 - 2015-08-28 16:40 - 00011264 _____ (Microsoft Corporation) C:\Windows\system32\msmmsp.dll
2015-08-28 16:37 - 2015-08-28 16:37 - 00052736 _____ (Microsoft Corporation) C:\Windows\system32\basesrv.dll
2015-08-28 16:36 - 2015-08-28 16:36 - 00193536 _____ (Microsoft Corporation) C:\Windows\system32\notepad.exe
2015-08-28 16:36 - 2015-08-28 16:36 - 00193536 _____ (Microsoft Corporation) C:\Windows\notepad.exe
2015-08-28 16:36 - 2015-08-28 16:36 - 00179712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\notepad.exe
2015-08-28 16:35 - 2015-08-28 16:35 - 00124624 _____ (Microsoft Corporation) C:\Windows\system32\PresentationCFFRasterizerNative_v0300.dll
2015-08-28 16:35 - 2015-08-28 16:35 - 00103120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PresentationCFFRasterizerNative_v0300.dll
2015-08-28 16:34 - 2015-08-28 16:34 - 14177280 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2015-08-28 16:34 - 2015-08-28 16:34 - 12875776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2015-08-28 16:34 - 2015-08-28 16:34 - 07077376 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll
2015-08-28 16:34 - 2015-08-28 16:34 - 06131200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstscax.dll
2015-08-28 16:34 - 2015-08-28 16:34 - 01057792 _____ (Microsoft Corporation) C:\Windows\system32\rdvidcrl.dll
2015-08-28 16:34 - 2015-08-28 16:34 - 00856064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdvidcrl.dll
2015-08-28 16:34 - 2015-08-28 16:34 - 00429568 _____ (Microsoft Corporation) C:\Windows\system32\wksprt.exe
2015-08-28 16:34 - 2015-08-28 16:34 - 00062976 _____ (Microsoft Corporation) C:\Windows\system32\tsgqec.dll
2015-08-28 16:34 - 2015-08-28 16:34 - 00053248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tsgqec.dll
2015-08-28 16:33 - 2015-08-28 16:33 - 14451200 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2015-08-28 16:33 - 2015-08-28 16:33 - 12856832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2015-08-28 16:33 - 2015-08-28 16:33 - 05923328 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2015-08-28 16:33 - 2015-08-28 16:33 - 04520448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2015-08-28 16:33 - 2015-08-28 16:33 - 02885632 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2015-08-28 16:33 - 2015-08-28 16:33 - 02427904 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2015-08-28 16:33 - 2015-08-28 16:33 - 02279424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2015-08-28 16:33 - 2015-08-28 16:33 - 02125824 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2015-08-28 16:33 - 2015-08-28 16:33 - 02052608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2015-08-28 16:33 - 2015-08-28 16:33 - 01951232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2015-08-28 16:33 - 2015-08-28 16:33 - 01545728 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2015-08-28 16:33 - 2015-08-28 16:33 - 01359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2015-08-28 16:33 - 2015-08-28 16:33 - 01310720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2015-08-28 16:33 - 2015-08-28 16:33 - 01155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2015-08-28 16:33 - 2015-08-28 16:33 - 00968704 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2015-08-28 16:33 - 2015-08-28 16:33 - 00816640 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2015-08-28 16:33 - 2015-08-28 16:33 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2015-08-28 16:33 - 2015-08-28 16:33 - 00801280 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2015-08-28 16:33 - 2015-08-28 16:33 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2015-08-28 16:33 - 2015-08-28 16:33 - 00720384 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2015-08-28 16:33 - 2015-08-28 16:33 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2015-08-28 16:33 - 2015-08-28 16:33 - 00689152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2015-08-28 16:33 - 2015-08-28 16:33 - 00664064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2015-08-28 16:33 - 2015-08-28 16:33 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2015-08-28 16:33 - 2015-08-28 16:33 - 00615936 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2015-08-28 16:33 - 2015-08-28 16:33 - 00584192 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2015-08-28 16:33 - 2015-08-28 16:33 - 00504320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2015-08-28 16:33 - 2015-08-28 16:33 - 00490496 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2015-08-28 16:33 - 2015-08-28 16:33 - 00479232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2015-08-28 16:33 - 2015-08-28 16:33 - 00418304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2015-08-28 16:33 - 2015-08-28 16:33 - 00417792 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2015-08-28 16:33 - 2015-08-28 16:33 - 00389840 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2015-08-28 16:33 - 2015-08-28 16:33 - 00342736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2015-08-28 16:33 - 2015-08-28 16:33 - 00341504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2015-08-28 16:33 - 2015-08-28 16:33 - 00316928 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2015-08-28 16:33 - 2015-08-28 16:33 - 00285696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2015-08-28 16:33 - 2015-08-28 16:33 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2015-08-28 16:33 - 2015-08-28 16:33 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2015-08-28 16:33 - 2015-08-28 16:33 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2015-08-28 16:33 - 2015-08-28 16:33 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2015-08-28 16:33 - 2015-08-28 16:33 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2015-08-28 16:33 - 2015-08-28 16:33 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2015-08-28 16:33 - 2015-08-28 16:33 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2015-08-28 16:33 - 2015-08-28 16:33 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2015-08-28 16:33 - 2015-08-28 16:33 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2015-08-28 16:33 - 2015-08-28 16:33 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2015-08-28 16:33 - 2015-08-28 16:33 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2015-08-28 16:33 - 2015-08-28 16:33 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2015-08-28 16:33 - 2015-08-28 16:33 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2015-08-28 16:33 - 2015-08-28 16:33 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2015-08-28 16:33 - 2015-08-28 16:33 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2015-08-28 16:33 - 2015-08-28 16:33 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2015-08-28 16:33 - 2015-08-28 16:33 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2015-08-28 16:33 - 2015-08-28 16:33 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2015-08-28 16:33 - 2015-08-28 16:33 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2015-08-28 16:33 - 2015-08-28 16:33 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2015-08-28 16:21 - 2015-08-28 16:21 - 00000000 ____D C:\Users\Todos os Usuários\{BAF091CA-86C4-4627-ADA1-897E2621C1B0}
2015-08-28 16:21 - 2015-08-28 16:21 - 00000000 ____D C:\ProgramData\{BAF091CA-86C4-4627-ADA1-897E2621C1B0}
2015-08-27 16:16 - 2015-08-27 16:46 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2015-08-27 15:20 - 2015-09-01 18:35 - 00028888 _____ (GAS Tecnologia) C:\Windows\system32\Drivers\gbpddfac64.sys
2015-08-26 19:32 - 2015-08-26 14:35 - 00028888 _____ (GAS Tecnologia) C:\Windows\SysWOW64\Drivers\gbpddfac64.sys
2015-08-26 02:43 - 2015-08-26 02:43 - 00000000 ____D C:\Users\Windows7\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Advanced RAR Repair
2015-08-26 02:43 - 2015-08-26 02:43 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Advanced RAR Repair
2015-08-26 02:43 - 2015-08-26 02:43 - 00000000 ____D C:\Program Files (x86)\ARAR
2015-08-21 14:14 - 2015-08-21 14:15 - 00000000 ____D C:\Users\Windows7\.oracle_jre_usage
2015-08-21 14:14 - 2015-08-21 14:14 - 00000000 ____D C:\Users\Windows7\AppData\Roaming\Sun
2015-08-18 15:32 - 2015-08-18 15:32 - 00000095 _____ C:\Users\Windows7\Documents\Conta Luz AES Sul agost 2015.txt
2015-08-17 08:25 - 2015-08-17 08:25 - 03154944 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2015-08-17 08:25 - 2015-08-17 08:25 - 02606080 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2015-08-17 08:25 - 2015-08-17 08:25 - 00696320 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2015-08-17 08:25 - 2015-08-17 08:25 - 00566784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll
2015-08-17 08:25 - 2015-08-17 08:25 - 00192000 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
2015-08-17 08:25 - 2015-08-17 08:25 - 00173056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll
2015-08-17 08:25 - 2015-08-17 08:25 - 00139776 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2015-08-17 08:25 - 2015-08-17 08:25 - 00098304 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
2015-08-17 08:25 - 2015-08-17 08:25 - 00093184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll
2015-08-17 08:25 - 2015-08-17 08:25 - 00091136 _____ (Microsoft Corporation) C:\Windows\system32\WinSetupUI.dll
2015-08-17 08:25 - 2015-08-17 08:25 - 00037888 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
2015-08-17 08:25 - 2015-08-17 08:25 - 00037376 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
2015-08-17 08:25 - 2015-08-17 08:25 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
2015-08-17 08:25 - 2015-08-17 08:25 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe
2015-08-17 08:25 - 2015-08-17 08:25 - 00030208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wups.dll
2015-08-17 08:25 - 2015-08-17 08:25 - 00012288 _____ (Microsoft Corporation) C:\Windows\system32\wu.upgrade.ps.dll
2015-08-15 14:15 - 2015-08-15 14:15 - 00000051 _____ C:\Users\Windows7\Documents\Ativador serial IObit Malware Fighter.txt
2015-08-14 17:10 - 2015-01-10 15:32 - 00128288 _____ (IObit) C:\Windows\SysWOW64\IObitSmartDefragExtension.dll
2015-08-11 23:33 - 2015-08-11 23:33 - 00003050 _____ C:\Windows\System32\Tasks\{2E1FFA1D-2E04-474C-8935-763BB09E5418}
2015-08-07 21:48 - 2015-08-07 21:48 - 00000000 ____D C:\Users\Windows7\Downloads\zoek
2015-08-06 21:57 - 2015-08-06 21:57 - 00054133 _____ C:\Users\Windows7\Documents\zoek-results agost 2015 quinta dia 06.txt
2015-08-06 21:54 - 2015-08-29 20:06 - 00000000 ____D C:\Users\Todos os Usuários\ProductData
2015-08-06 21:54 - 2015-08-29 20:06 - 00000000 ____D C:\ProgramData\ProductData
2015-08-06 21:54 - 2015-08-06 21:54 - 00000000 ____D C:\Users\Windows7\AppData\Roaming\ProductData
2015-08-06 20:35 - 2015-08-31 21:24 - 00000000 ____D C:\zoek_backup
2015-08-06 16:25 - 2015-08-06 16:25 - 00000000 ____D C:\Users\Windows7\AppData\Roaming\shortCutStore
2015-08-05 15:17 - 2015-08-05 15:17 - 00000209 _____ C:\Users\Windows7\Documents\processo trabalhista dados.txt
2015-08-05 10:22 - 2015-08-05 10:22 - 35222128 _____ C:\Windows\system32\Drivers\RTAIODAT.DAT
2015-08-05 10:22 - 2015-08-05 10:22 - 06255888 _____ (Dolby Laboratories) C:\Windows\system32\DDPP64AF3.dll
2015-08-05 10:22 - 2015-08-05 10:22 - 05714880 _____ (Nahimic Inc) C:\Windows\system32\NAHIMICV2apo.dll
2015-08-05 10:22 - 2015-08-05 10:22 - 04514008 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\Drivers\RTKVHD64.sys
2015-08-05 10:22 - 2015-08-05 10:22 - 02930904 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RltkAPO64.dll
2015-08-05 10:22 - 2015-08-05 10:22 - 02702552 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RTSnMg64.cpl
2015-08-05 10:22 - 2015-08-05 10:22 - 02585816 _____ (Realtek Semiconductor Corp.) C:\Windows\SysWOW64\RltkAPO.dll
2015-08-05 10:22 - 2015-08-05 10:22 - 02461528 _____ (Dolby Laboratories) C:\Windows\system32\DolbyDAX2APOv211.dll
2015-08-05 10:22 - 2015-08-05 10:22 - 02393432 _____ (Dolby Laboratories) C:\Windows\system32\DolbyDAX2APOv201.dll
2015-08-05 10:22 - 2015-08-05 10:22 - 01933584 _____ (Dolby Laboratories) C:\Windows\system32\DDPD64AF3.dll
2015-08-05 10:22 - 2015-08-05 10:22 - 01749208 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RCoInstII64.dll
2015-08-05 10:22 - 2015-08-05 10:22 - 01310936 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RTCOM64.dll
2015-08-05 10:22 - 2015-08-05 10:22 - 00944984 _____ (Dolby Laboratories) C:\Windows\system32\DolbyDAX2APOProp.dll
2015-08-05 10:22 - 2015-08-05 10:22 - 00349968 _____ (Dolby Laboratories) C:\Windows\system32\DDPO64AF3.dll
2015-08-05 10:22 - 2015-08-05 10:22 - 00349528 _____ (Dolby Laboratories) C:\Windows\system32\HiFiDAX2API.dll
2015-08-05 10:22 - 2015-08-05 10:22 - 00298768 _____ (Dolby Laboratories) C:\Windows\system32\DDPA64F3.dll
2015-08-05 10:22 - 2015-08-05 10:22 - 00184688 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkCfg64.dll
2015-08-05 10:18 - 2015-08-05 10:18 - 42730128 _____ C:\Windows\system32\nvcompiler.dll
2015-08-05 10:18 - 2015-08-05 10:18 - 37748880 _____ C:\Windows\SysWOW64\nvcompiler.dll
2015-08-05 10:18 - 2015-08-05 10:18 - 30487880 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll
2015-08-05 10:18 - 2015-08-05 10:18 - 22950544 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll
2015-08-05 10:18 - 2015-08-05 10:18 - 17615408 _____ (NVIDIA Corporation) C:\Windows\system32\nvwgf2umx.dll
2015-08-05 10:18 - 2015-08-05 10:18 - 16151688 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll
2015-08-05 10:18 - 2015-08-05 10:18 - 15892200 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dumx.dll
2015-08-05 10:18 - 2015-08-05 10:18 - 15129192 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvwgf2um.dll
2015-08-05 10:18 - 2015-08-05 10:18 - 14503880 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll
2015-08-05 10:18 - 2015-08-05 10:18 - 13268712 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll
2015-08-05 10:18 - 2015-08-05 10:18 - 12876336 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvd3dum.dll
2015-08-05 10:18 - 2015-08-05 10:18 - 11836680 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll
2015-08-05 10:18 - 2015-08-05 10:18 - 11055248 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys
2015-08-05 10:18 - 2015-08-05 10:18 - 03008880 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvapi.dll
2015-08-05 10:18 - 2015-08-05 10:18 - 02933576 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll
2015-08-05 10:18 - 2015-08-05 10:18 - 02600592 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll
2015-08-05 10:18 - 2015-08-05 10:18 - 01898128 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6435362.dll
2015-08-05 10:18 - 2015-08-05 10:18 - 01557648 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6435362.dll
2015-08-05 10:18 - 2015-08-05 10:18 - 01061008 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll
2015-08-05 10:18 - 2015-08-05 10:18 - 01053000 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll
2015-08-05 10:18 - 2015-08-05 10:18 - 00983368 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll
2015-08-05 10:18 - 2015-08-05 10:18 - 00976528 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll
2015-08-05 10:18 - 2015-08-05 10:18 - 00940104 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvumdshim.dll
2015-08-05 10:18 - 2015-08-05 10:18 - 00176904 _____ (NVIDIA Corporation) C:\Windows\system32\nvinitx.dll
2015-08-05 10:18 - 2015-08-05 10:18 - 00155280 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvinit.dll
2015-08-05 10:18 - 2015-08-05 10:18 - 00150832 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglshim64.dll
2015-08-05 10:18 - 2015-08-05 10:18 - 00128512 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglshim32.dll
2015-08-02 14:08 - 2015-08-02 14:08 - 00000752 _____ C:\Users\Windows7\Desktop\FIFA 14.lnk
2015-08-02 14:00 - 2015-08-31 20:33 - 00000000 ____D C:\Users\Windows7\Documents\FIFA 14
2015-08-02 14:00 - 2015-08-02 14:00 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FIFA 14
2015-08-02 03:18 - 2015-08-02 13:05 - 00000000 ____D C:\Games

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-09-01 18:27 - 2014-12-14 01:09 - 00001070 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2015-09-01 17:21 - 2014-12-09 17:31 - 00002916 _____ C:\Windows\System32\Tasks\Uninstaller_SkipUac_Windows7
2015-09-01 17:21 - 2009-07-14 00:20 - 00000000 ____D C:\Windows\system
2015-09-01 16:34 - 2009-07-14 01:45 - 00021280 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-09-01 16:34 - 2009-07-14 01:45 - 00021280 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-09-01 16:25 - 2014-06-10 10:47 - 01620312 _____ C:\Windows\WindowsUpdate.log
2015-09-01 16:21 - 2014-06-10 15:12 - 00000000 ____D C:\Users\Todos os Usuários\GbPlugin
2015-09-01 16:21 - 2014-06-10 15:12 - 00000000 ____D C:\ProgramData\GbPlugin
2015-09-01 16:17 - 2014-06-10 23:14 - 00000000 ____D C:\Users\Windows7\AppData\Roaming\uTorrent
2015-09-01 16:11 - 2014-06-11 16:21 - 00002886 _____ C:\Windows\System32\Tasks\Driver Booster SkipUAC (Windows7)
2015-09-01 16:11 - 2014-06-10 15:12 - 00000000 ____D C:\Program Files (x86)\GbPlugin
2015-09-01 16:10 - 2014-12-14 01:09 - 00001066 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2015-09-01 16:10 - 2009-07-14 02:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2015-08-31 21:36 - 2014-08-04 17:49 - 00000000 ____D C:\AdwCleaner
2015-08-31 21:30 - 2014-06-10 10:52 - 00000000 ____D C:\Users\Windows7
2015-08-31 21:25 - 2015-07-18 00:09 - 00000000 ____D C:\Users\Windows7\Documents\Euro Truck Simulator 2
2015-08-31 21:24 - 2015-03-01 18:30 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2015-08-31 10:12 - 2014-06-10 21:45 - 88309760 _____ C:\Windows\system32\config\SOFTWARE.iodefrag.bak
2015-08-31 10:12 - 2014-06-10 21:45 - 00307200 _____ C:\Windows\system32\config\DEFAULT.iodefrag.bak
2015-08-31 10:12 - 2014-06-10 21:45 - 00065536 _____ C:\Windows\system32\config\SAM.iodefrag.bak
2015-08-31 10:12 - 2014-06-10 21:45 - 00024576 _____ C:\Windows\system32\config\SECURITY.iodefrag.bak
2015-08-31 10:12 - 2014-06-10 21:44 - 44130304 _____ C:\Windows\system32\config\COMPONENTS.iodefrag.bak
2015-08-31 10:02 - 2014-12-09 17:38 - 00002185 _____ C:\Users\Public\Desktop\Advanced SystemCare 8.lnk
2015-08-31 10:01 - 2014-06-11 14:58 - 00000000 ____D C:\Users\Windows7\AppData\Roaming\DAEMON Tools Lite
2015-08-31 09:59 - 2015-07-22 22:57 - 00000000 ____D C:\Users\Windows7\AppData\Roaming\RunDir
2015-08-30 19:57 - 2010-11-21 06:37 - 00705474 _____ C:\Windows\system32\prfh0416.dat
2015-08-30 19:57 - 2010-11-21 06:37 - 00147314 _____ C:\Windows\system32\prfc0416.dat
2015-08-30 19:57 - 2009-07-14 02:13 - 01634498 _____ C:\Windows\system32\PerfStringBackup.INI
2015-08-30 19:45 - 2014-06-22 17:55 - 00000000 ____D C:\Users\Windows7\Downloads\.Gaveta Arquivos Provisórios Imagens
2015-08-30 19:45 - 2014-06-12 15:27 - 00000000 ____D C:\Users\Windows7\Downloads\.Gaveta Progam Executaveis 2014 e 2015
2015-08-30 00:50 - 2014-06-13 21:49 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2015-08-30 00:50 - 2009-07-14 02:32 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
2015-08-29 22:31 - 2009-07-14 00:20 - 00000000 ____D C:\Windows\rescache
2015-08-29 21:00 - 2009-07-14 00:20 - 00000000 ____D C:\Windows\system32\NDF
2015-08-29 20:00 - 2009-07-14 00:20 - 00000000 __RSD C:\Windows\Media
2015-08-29 16:15 - 2009-07-14 01:45 - 05032408 _____ C:\Windows\system32\FNTCACHE.DAT
2015-08-28 21:22 - 2014-12-14 01:09 - 00004066 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2015-08-28 21:22 - 2014-12-14 01:09 - 00003814 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2015-08-28 16:21 - 2014-12-09 17:52 - 00002884 _____ C:\Windows\System32\Tasks\ASC8_SkipUac_Windows7
2015-08-28 16:21 - 2014-12-09 17:38 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Advanced SystemCare 8
2015-08-27 21:40 - 2014-12-20 02:55 - 00000000 ____D C:\Users\Windows7\Downloads\.FILMES 2014
2015-08-23 06:01 - 2014-06-10 11:48 - 00000000 ____D C:\Users\Windows7\AppData\Roaming\vlc
2015-08-22 20:39 - 2014-07-15 23:51 - 00000000 ____D C:\Windows\System32\Tasks\Games
2015-08-22 19:18 - 2014-06-10 11:00 - 00000000 ____D C:\Program Files (x86)\NVIDIA Corporation
2015-08-22 18:42 - 2014-11-27 15:57 - 00000000 ____D C:\Users\Windows7\Downloads\.TS3 lots
2015-08-21 21:30 - 2009-07-14 02:08 - 00032608 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2015-08-21 14:16 - 2015-04-20 10:41 - 00002150 _____ C:\Users\Public\Desktop\Driver Booster 2.lnk
2015-08-21 14:15 - 2014-12-09 17:57 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2015-08-21 14:15 - 2014-06-15 09:45 - 00000000 ____D C:\Program Files (x86)\Java
2015-08-21 14:13 - 2015-06-22 23:58 - 00110688 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge-64.dll
2015-08-21 14:13 - 2015-06-22 23:58 - 00000000 ____D C:\Program Files\Java
2015-08-17 12:32 - 2015-04-02 21:18 - 00000000 ____D C:\Users\Windows7\Desktop\DC's cache e backup
2015-08-15 13:05 - 2014-06-10 18:45 - 00000902 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2015-08-14 17:13 - 2014-06-10 18:45 - 00778440 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2015-08-14 17:13 - 2014-06-10 18:45 - 00142536 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2015-08-14 17:13 - 2014-06-10 18:45 - 00003842 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2015-08-14 17:10 - 2015-04-03 21:20 - 00001098 _____ C:\Users\Public\Desktop\Smart Defrag 4.lnk
2015-08-14 17:10 - 2015-04-01 17:07 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Smart Defrag 4
2015-08-11 23:32 - 2015-07-25 17:00 - 00001559 _____ C:\Users\Windows7\Desktop\eurotrucks2 - Atalho.lnk
2015-08-11 20:32 - 2015-07-01 17:07 - 00000000 ____D C:\Users\Windows7\Downloads\.mods ETS 2
2015-08-08 01:30 - 2014-06-10 15:11 - 00000000 ____D C:\Users\Todos os Usuários\GAS Tecnologia
2015-08-08 01:30 - 2014-06-10 15:11 - 00000000 ____D C:\ProgramData\GAS Tecnologia
2015-08-06 21:53 - 2014-08-22 22:37 - 00000008 __RSH C:\Users\Todos os Usuários\ntuser.pol
2015-08-06 21:53 - 2014-08-22 22:37 - 00000008 __RSH C:\ProgramData\ntuser.pol
2015-08-06 21:44 - 2009-07-14 00:20 - 00000000 ___HD C:\Windows\system32\GroupPolicy
2015-08-06 19:50 - 2015-05-19 18:20 - 00000000 ____D C:\Users\Todos os Usuários\NVIDIA
2015-08-06 19:50 - 2015-05-19 18:20 - 00000000 ____D C:\ProgramData\NVIDIA
2015-08-06 16:25 - 2015-07-23 00:18 - 00000997 _____ C:\Users\Windows7\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2015-08-06 16:25 - 2014-06-11 15:00 - 00000997 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2015-08-06 16:25 - 2014-06-11 15:00 - 00000997 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Internet Explorer (64-bit).lnk
2015-08-05 10:24 - 2015-06-29 11:14 - 00000000 ____D C:\Windows\system32\DAX2
2015-08-05 10:24 - 2014-06-11 17:04 - 00000000 ____D C:\Windows\SysWOW64\RTCOM
2015-08-05 10:21 - 2015-03-27 18:33 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation
2015-08-05 10:21 - 2014-06-10 11:00 - 00000000 ____D C:\Users\Todos os Usuários\NVIDIA Corporation
2015-08-05 10:21 - 2014-06-10 11:00 - 00000000 ____D C:\ProgramData\NVIDIA Corporation
2015-08-05 10:20 - 2014-06-10 15:11 - 00000000 ____D C:\Users\Todos os Usuários\boost_interprocess
2015-08-05 10:20 - 2014-06-10 15:11 - 00000000 ____D C:\ProgramData\boost_interprocess
2015-08-05 10:18 - 2015-06-23 00:15 - 01101856 _____ (NVIDIA Corporation) C:\Windows\system32\nvumdshimx.dll
2015-08-05 10:18 - 2015-05-19 18:13 - 03407144 _____ (NVIDIA Corporation) C:\Windows\system32\nvapi64.dll
2015-08-05 10:18 - 2015-05-19 18:13 - 00030966 _____ C:\Windows\system32\nvinfo.pb

==================== Files in the root of some directories =======

2015-07-01 16:50 - 2015-07-01 16:50 - 0018393 _____ () C:\Users\Windows7\AppData\Roaming\unins000.dat
2014-11-28 02:31 - 2015-03-01 01:44 - 0007600 _____ () C:\Users\Windows7\AppData\Local\Resmon.ResmonCfg
2014-12-09 16:10 - 2014-12-09 16:10 - 0000227 _____ () C:\ProgramData\bc.ini
2014-06-11 17:05 - 2014-06-11 17:05 - 0000000 ____H () C:\ProgramData\DP45977C.lfl

Some files in TEMP:
====================
C:\Users\Windows7\AppData\Local\Temp\7za.exe
C:\Users\Windows7\AppData\Local\Temp\DaS_21.exe
C:\Users\Windows7\AppData\Local\Temp\hijackthis.exe
C:\Users\Windows7\AppData\Local\Temp\NirCmd.exe
C:\Users\Windows7\AppData\Local\Temp\PEVZ.EXE
C:\Users\Windows7\AppData\Local\Temp\Quarantine.exe
C:\Users\Windows7\AppData\Local\Temp\remove.exe
C:\Users\Windows7\AppData\Local\Temp\sed.exe
C:\Users\Windows7\AppData\Local\Temp\shortcut.exe
C:\Users\Windows7\AppData\Local\Temp\sqlite3.dll
C:\Users\Windows7\AppData\Local\Temp\swreg.exe
C:\Users\Windows7\AppData\Local\Temp\swxcacls.exe
C:\Users\Windows7\AppData\Local\Temp\wget.exe
C:\Users\Windows7\AppData\Local\Temp\zoek-delete.exe


==================== Bamital & volsnap =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\dnsapi.dll => File is digitally signed
C:\Windows\SysWOW64\dnsapi.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2015-08-22 13:41

==================== End of FRST.txt ============================