Resultado do exame da Farbar Recovery Scan Tool (FRST) (x86) Versão:03-06-2016 Executado por Victor Andrade (administrador) em VICTORANDRADE (04-06-2016 13:11:52) Executando a partir de C:\Users\Victor Andrade\Desktop Perfis Carregados: Victor Andrade (Perfis Disponíveis: Victor Andrade) Platform: Microsoft Windows 7 Ultimate (X86) Idioma: Português (Brasil) Internet Explorer Versão 8 (Navegador padrão: IE) Modo da Inicialização: Normal Tutorial da Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Processos (Whitelisted) ================= (Se uma entrada for incluída na fixlist, o processo será fechado. O arquivo não será movido.) (ESET) C:\Program Files\ESET\ESET Smart Security\ekrn.exe (BlueStack Systems, Inc.) C:\Program Files\BlueStacks\HD-UpdaterService.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe (Intel Corporation) C:\Windows\System32\igfxtray.exe (Intel Corporation) C:\Windows\System32\hkcmd.exe (Intel Corporation) C:\Windows\System32\igfxsrvc.exe (Intel Corporation) C:\Windows\System32\igfxpers.exe (Microsoft Corporation) C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe (Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jusched.exe (Piriform Ltd) C:\Program Files\CCleaner\CCleaner.exe (Microsoft Corporation) C:\Windows\System32\wbem\unsecapp.exe (ESET) C:\Program Files\ESET\ESET Smart Security\egui.exe (Microsoft Corporation) C:\Windows\System32\msiexec.exe (Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe ==================== Registro (Whitelisted) =========================== (Se uma entrada for incluída na fixlist, o ítem no Registro será restaurado para o padrão ou removido. O arquivo não será movido.) HKLM\...\Run: [Adobe ARM] => C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [926896 2012-09-23] (Adobe Systems Incorporated) HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe [11738184 2013-01-22] (Realtek Semiconductor) HKLM\...\Run: [GrooveMonitor] => C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe [31016 2006-10-27] (Microsoft Corporation) HKLM\...\Run: [SunJavaUpdateSched] => C:\Program Files\Common Files\Java\Java Update\jusched.exe [596504 2016-04-01] (Oracle Corporation) HKU\S-1-5-21-3421836223-1822299556-792071553-1000\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner.exe [6667992 2016-03-11] (Piriform Ltd) HKU\S-1-5-21-3421836223-1822299556-792071553-1000\...\Run: [BlueStacks Agent] => C:\Program Files\BlueStacks\HD-Agent.exe [957976 2016-04-26] (BlueStack Systems, Inc.) ==================== Internet (Whitelisted) ==================== (Se um ítem for incluído na fixlist, sendo um ítem do Registro, será removido ou restaurado para o padrão.) Hosts: Há mais de uma entrada no Hosts. Veja a seção Hosts do Addition.txt Tcpip\Parameters: [DhcpNameServer] 8.8.8.8 8.8.4.4 Tcpip\..\Interfaces\{41094A05-5911-4974-8CDA-761337B11723}: [DhcpNameServer] 8.8.8.8 8.8.4.4 Internet Explorer: ================== HKU\S-1-5-21-3421836223-1822299556-792071553-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www-searching.com/?pid=s&s=G5Kzamobl18576AP,3bddbd68-b14b-42f9-a3c4-c1f38be24046,&vp=ch&prd=set_ie SearchScopes: HKU\S-1-5-21-3421836223-1822299556-792071553-1000 -> {CB988078-D958-41CF-87D6-A43AFD8E4DF0} URL = hxxp://www-searching.com/s.ashx?prd=opensearch&q={searchTerms}&s=G5Kzamobl18576AP,3bddbd68-b14b-42f9-a3c4-c1f38be24046, BHO: Adobe PDF Link Helper -> {18DF081C-E8AD-4283-A596-FA578C2EBDC3} -> C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2012-09-23] (Adobe Systems Incorporated) BHO: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll [2006-10-27] (Microsoft Corporation) BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_91\bin\ssv.dll [2016-05-20] (Oracle Corporation) BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_91\bin\jp2ssv.dll [2016-05-20] (Oracle Corporation) Handler: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll [2006-10-27] (Microsoft Corporation) FireFox: ======== FF ProfilePath: C:\Users\Victor Andrade\AppData\Roaming\Mozilla\Firefox\Profiles\33zlczxy.default FF NewTab: hxxp://www-searching.com/?site=shyosffdefault&prd=set_ff&s=G5Kzamobl18576AP,3bddbd68-b14b-42f9-a3c4-c1f38be24046, FF Homepage: hxxp://www-searching.com/?site=shyosffdefault&prd=set_ff&s=G5Kzamobl18576AP,3bddbd68-b14b-42f9-a3c4-c1f38be24046, FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF32_21_0_0_197.dll [2016-05-17] () FF Plugin: @java.com/DTPlugin,version=11.91.2 -> C:\Program Files\Java\jre1.8.0_91\bin\dtplugin\npDeployJava1.dll [2016-05-20] (Oracle Corporation) FF Plugin: @java.com/JavaPlugin,version=11.91.2 -> C:\Program Files\Java\jre1.8.0_91\bin\plugin2\npjp2.dll [2016-05-20] (Oracle Corporation) FF Plugin: @microsoft.com/GENUINE -> disabled [Nenhum Arquivo] FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.30.3\npGoogleUpdate3.dll [2016-05-17] (Google Inc.) FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.30.3\npGoogleUpdate3.dll [2016-05-17] (Google Inc.) FF Plugin: Adobe Reader -> C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2012-09-23] (Adobe Systems Inc.) FF SearchPlugin: C:\Users\Victor Andrade\AppData\Roaming\Mozilla\Firefox\Profiles\33zlczxy.default\searchplugins\smod.xml [2016-05-20] Chrome: ======= CHR HomePage: Default -> hxxp://www.google.com.br/ CHR StartupUrls: Default -> "hxxp://www.google.com.br/" CHR DefaultSearchURL: Default -> hxxp://www-searching.com/search.aspx?site=shdefault1&prd=smw&pid=s&shr=d&q={searchTerms}&s=G5Kzamobl18576AP,3bddbd68-b14b-42f9-a3c4-c1f38be24046, CHR DefaultSearchKeyword: Default -> www-searching.com CHR DefaultSuggestURL: Default -> hxxp://api.searchpredict.com/api/?rqtype=ffplugin&siteID=8661&dbCode=1&command={searchTerms} CHR Profile: C:\Users\Victor Andrade\AppData\Local\Google\Chrome\User Data\Default CHR Extension: (Google Drive) - C:\Users\Victor Andrade\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2016-05-17] CHR Extension: (YouTube) - C:\Users\Victor Andrade\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2016-05-17] CHR Extension: (Pagamentos da Chrome Web Store) - C:\Users\Victor Andrade\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2016-05-17] CHR Extension: (Gmail) - C:\Users\Victor Andrade\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2016-05-17] ==================== Serviços (Whitelisted) ======================== (Se uma entrada for incluída na fixlist, será removida do Registro. O arquivo não será movido, a menos que seja colocado separadamente.) S3 BstHdAndroidSvc; C:\Program Files\BlueStacks\HD-Service.exe [437784 2016-04-26] (BlueStack Systems, Inc.) S2 BstHdLogRotatorSvc; C:\Program Files\BlueStacks\HD-LogRotatorService.exe [417304 2016-04-26] (BlueStack Systems, Inc.) S3 BstHdPlusAndroidSvc; C:\Program Files\BlueStacks\HD-Plus-Service.exe [437784 2016-04-26] (BlueStack Systems, Inc.) R2 BstHdUpdaterSvc; C:\Program Files\BlueStacks\HD-UpdaterService.exe [921112 2016-04-26] (BlueStack Systems, Inc.) R2 ekrn; C:\Program Files\ESET\ESET Smart Security\ekrn.exe [1982752 2016-04-13] (ESET) S3 WatAdminSvc; C:\Windows\system32\Wat\WatAdminSvc.exe [1343400 2016-05-17] () [Arquivo não assinado] R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [680960 2009-07-13] (Microsoft Corporation) ===================== Drivers (Whitelisted) ========================== (Se uma entrada for incluída na fixlist, será removida do Registro. O arquivo não será movido, a menos que seja colocado separadamente.) S2 BstHdDrv; C:\Program Files\BlueStacks\HD-Hypervisor-x86.sys [140856 2016-04-26] (BlueStack Systems) R2 BstkDrv; C:\Program Files\BlueStacks\BstkDrv.sys [220216 2016-04-06] (Bluestack System Inc. ) R1 eamonm; C:\Windows\System32\DRIVERS\eamonm.sys [206312 2016-04-13] (ESET) R0 edevmon; C:\Windows\System32\DRIVERS\edevmon.sys [154288 2016-04-13] (ESET) R1 ehdrv; C:\Windows\System32\DRIVERS\ehdrv.sys [146024 2016-04-13] (ESET) R2 ekbdflt; C:\Windows\System32\DRIVERS\ekbdflt.sys [111040 2016-04-13] (ESET) R1 epfw; C:\Windows\System32\DRIVERS\epfw.sys [152728 2016-04-13] (ESET) R1 EpfwLWF; C:\Windows\System32\DRIVERS\EpfwLWF.sys [44608 2016-04-13] (ESET) R0 epfwwfp; C:\Windows\System32\DRIVERS\epfwwfp.sys [71488 2016-04-13] (ESET) S3 SMUpdd; \??\C:\Program Files\Common Files\Doobzo\GSUpdate\smw.sys [X] ==================== NetSvcs (Whitelisted) =================== (Se uma entrada for incluída na fixlist, será removida do Registro. O arquivo não será movido, a menos que seja colocado separadamente.) ==================== Um Mês Criados arquivos e pastas ======== (Se uma entrada for incluída na fixlist, o arquivo/pasta será movido.) 2016-06-04 13:11 - 2016-06-04 13:12 - 00009630 _____ C:\Users\Victor Andrade\Desktop\FRST.txt 2016-06-04 13:11 - 2016-06-04 13:11 - 00000000 ____D C:\Users\Victor Andrade\Desktop\FRST-OlderVersion 2016-06-04 13:10 - 2016-06-04 13:11 - 00000000 ____D C:\FRST 2016-06-04 13:08 - 2016-06-04 13:11 - 01734656 _____ (Farbar) C:\Users\Victor Andrade\Desktop\FRST.exe 2016-06-04 13:02 - 2016-06-04 13:02 - 00000000 ____D C:\Users\Todos os Usuários\Package Cache 2016-06-04 13:02 - 2016-06-04 13:02 - 00000000 ____D C:\ProgramData\Package Cache 2016-06-04 12:53 - 2010-06-02 04:55 - 00527192 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_7.dll 2016-06-04 12:53 - 2010-06-02 04:55 - 00239960 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_7.dll 2016-06-04 12:53 - 2010-06-02 04:55 - 00074072 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_5.dll 2016-06-04 12:53 - 2010-05-26 11:41 - 02106216 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_43.dll 2016-06-04 12:53 - 2010-05-26 11:41 - 01998168 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_43.dll 2016-06-04 12:53 - 2010-05-26 11:41 - 01868128 _____ (Microsoft Corporation) C:\Windows\system32\d3dcsx_43.dll 2016-06-04 12:53 - 2010-05-26 11:41 - 00470880 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_43.dll 2016-06-04 12:53 - 2010-05-26 11:41 - 00248672 _____ (Microsoft Corporation) C:\Windows\system32\d3dx11_43.dll 2016-06-04 12:53 - 2010-02-04 10:01 - 00528216 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_6.dll 2016-06-04 12:53 - 2010-02-04 10:01 - 00238936 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_6.dll 2016-06-04 12:53 - 2010-02-04 10:01 - 00074072 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_4.dll 2016-06-04 12:53 - 2010-02-04 10:01 - 00022360 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_7.dll 2016-06-04 12:53 - 2009-09-04 17:44 - 00515416 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_5.dll 2016-06-04 12:53 - 2009-09-04 17:44 - 00238936 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_5.dll 2016-06-04 12:53 - 2009-09-04 17:44 - 00069464 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_3.dll 2016-06-04 12:53 - 2009-09-04 17:29 - 05501792 _____ (Microsoft Corporation) C:\Windows\system32\d3dcsx_42.dll 2016-06-04 12:53 - 2009-09-04 17:29 - 01974616 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_42.dll 2016-06-04 12:53 - 2009-09-04 17:29 - 01892184 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_42.dll 2016-06-04 12:53 - 2009-09-04 17:29 - 00453456 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_42.dll 2016-06-04 12:53 - 2009-09-04 17:29 - 00235344 _____ (Microsoft Corporation) C:\Windows\system32\d3dx11_42.dll 2016-06-04 12:53 - 2009-03-16 14:18 - 00517448 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_4.dll 2016-06-04 12:53 - 2009-03-16 14:18 - 00235352 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_4.dll 2016-06-04 12:53 - 2009-03-16 14:18 - 00022360 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_6.dll 2016-06-04 12:53 - 2009-03-09 15:27 - 04178264 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_41.dll 2016-06-04 12:53 - 2009-03-09 15:27 - 01846632 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_41.dll 2016-06-04 12:53 - 2009-03-09 15:27 - 00453456 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_41.dll 2016-06-04 12:53 - 2008-10-27 10:04 - 00514384 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_3.dll 2016-06-04 12:53 - 2008-10-27 10:04 - 00235856 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_3.dll 2016-06-04 12:53 - 2008-10-27 10:04 - 00070992 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_2.dll 2016-06-04 12:53 - 2008-10-27 10:04 - 00023376 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_5.dll 2016-06-04 12:53 - 2008-10-10 04:52 - 04379984 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_40.dll 2016-06-04 12:53 - 2008-10-10 04:52 - 02036576 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_40.dll 2016-06-04 12:53 - 2008-10-10 04:52 - 00452440 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_40.dll 2016-06-04 12:53 - 2008-07-31 10:41 - 00238088 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_2.dll 2016-06-04 12:53 - 2008-07-31 10:41 - 00068616 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_1.dll 2016-06-04 12:53 - 2008-07-31 10:40 - 00509448 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_2.dll 2016-06-04 12:53 - 2008-07-10 11:01 - 00467984 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_39.dll 2016-06-04 12:53 - 2008-07-10 11:00 - 03851784 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_39.dll 2016-06-04 12:53 - 2008-07-10 11:00 - 01493528 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_39.dll 2016-06-04 12:53 - 2008-05-30 14:19 - 00507400 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_1.dll 2016-06-04 12:53 - 2008-05-30 14:18 - 00238088 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_1.dll 2016-06-04 12:53 - 2008-05-30 14:17 - 00065032 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_0.dll 2016-06-04 12:53 - 2008-05-30 14:17 - 00025608 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_4.dll 2016-06-04 12:53 - 2008-05-30 14:11 - 03850760 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_38.dll 2016-06-04 12:53 - 2008-05-30 14:11 - 01491992 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_38.dll 2016-06-04 12:53 - 2008-05-30 14:11 - 00467984 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_38.dll 2016-06-04 12:53 - 2008-03-05 16:03 - 00479752 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_0.dll 2016-06-04 12:53 - 2008-03-05 16:03 - 00238088 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_0.dll 2016-06-04 12:53 - 2008-03-05 16:00 - 00025608 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_3.dll 2016-06-04 12:53 - 2008-03-05 15:56 - 03786760 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_37.dll 2016-06-04 12:53 - 2008-03-05 15:56 - 01420824 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_37.dll 2016-06-04 12:53 - 2008-02-05 23:07 - 00462864 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_37.dll 2016-06-04 12:53 - 2007-10-22 03:39 - 00267272 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_10.dll 2016-06-04 12:53 - 2007-10-22 03:37 - 00017928 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_2.dll 2016-06-04 12:53 - 2007-10-12 15:14 - 03734536 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_36.dll 2016-06-04 12:53 - 2007-10-12 15:14 - 01374232 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_36.dll 2016-06-04 12:53 - 2007-10-02 09:56 - 00444776 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_36.dll 2016-06-04 12:53 - 2007-07-20 00:57 - 00267112 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_9.dll 2016-06-04 12:53 - 2007-07-19 18:14 - 03727720 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_35.dll 2016-06-04 12:53 - 2007-07-19 18:14 - 01358192 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_35.dll 2016-06-04 12:53 - 2007-07-19 18:14 - 00444776 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_35.dll 2016-06-04 12:53 - 2007-06-20 20:46 - 00266088 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_8.dll 2016-06-04 12:53 - 2007-05-16 16:45 - 03497832 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_34.dll 2016-06-04 12:53 - 2007-05-16 16:45 - 01124720 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_34.dll 2016-06-04 12:53 - 2007-05-16 16:45 - 00443752 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_34.dll 2016-06-04 12:53 - 2007-04-04 18:55 - 00261480 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_7.dll 2016-06-04 12:53 - 2007-04-04 18:53 - 00081768 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_3.dll 2016-06-04 12:53 - 2007-03-15 16:57 - 00443752 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_33.dll 2016-06-04 12:53 - 2007-03-12 16:42 - 03495784 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_33.dll 2016-06-04 12:53 - 2007-03-12 16:42 - 01123696 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_33.dll 2016-06-04 12:53 - 2007-03-05 12:42 - 00015128 _____ (Microsoft Corporation) C:\Windows\system32\x3daudio1_1.dll 2016-06-04 12:53 - 2007-01-24 15:27 - 00255848 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_6.dll 2016-06-04 12:53 - 2006-12-08 12:02 - 00251672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_5.dll 2016-06-04 12:53 - 2006-11-29 13:06 - 03426072 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_32.dll 2016-06-04 12:53 - 2006-11-29 13:06 - 00440080 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10.dll 2016-06-04 12:53 - 2006-09-28 16:05 - 02414360 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_31.dll 2016-06-04 12:53 - 2006-09-28 16:05 - 00237848 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_4.dll 2016-06-04 12:53 - 2006-07-28 09:30 - 00236824 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_3.dll 2016-06-04 12:53 - 2006-07-28 09:30 - 00062744 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_2.dll 2016-06-04 12:53 - 2006-05-31 07:24 - 00230168 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_2.dll 2016-06-04 12:53 - 2006-03-31 12:40 - 02388176 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_30.dll 2016-06-04 12:53 - 2006-03-31 12:39 - 00229584 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_1.dll 2016-06-04 12:53 - 2006-03-31 12:39 - 00062672 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_1.dll 2016-06-04 12:53 - 2006-02-03 08:43 - 02332368 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_29.dll 2016-06-04 12:53 - 2006-02-03 08:42 - 00230096 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_0.dll 2016-06-04 12:53 - 2006-02-03 08:41 - 00014032 _____ (Microsoft Corporation) C:\Windows\system32\x3daudio1_0.dll 2016-06-04 12:53 - 2005-12-05 18:09 - 02323664 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_28.dll 2016-06-04 12:53 - 2005-07-22 19:59 - 02319568 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_27.dll 2016-06-04 12:53 - 2005-05-26 15:34 - 02297552 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_26.dll 2016-06-04 12:53 - 2005-03-18 17:19 - 02337488 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_25.dll 2016-06-04 12:53 - 2005-02-05 19:45 - 02222800 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_24.dll 2016-06-04 12:45 - 2016-06-04 12:53 - 00000000 ____D C:\Windows\system32\directx 2016-06-04 12:44 - 2016-06-04 12:45 - 13767776 _____ (Microsoft Corporation) C:\Users\Victor Andrade\Downloads\vc_redist.x86.exe 2016-06-04 12:23 - 2016-06-04 12:23 - 00001885 _____ C:\Users\Public\Desktop\PCSX2 1.4.0.lnk 2016-06-04 12:23 - 2016-06-04 12:23 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PCSX2 2016-06-04 12:22 - 2016-06-04 12:23 - 00000000 ____D C:\Program Files\PCSX2 1.4.0 2016-06-04 12:18 - 2016-06-04 12:22 - 17837152 _____ C:\Users\Victor Andrade\Downloads\pcsx2-1.4.0-setup.exe 2016-06-02 14:58 - 2016-06-02 14:59 - 06781586 _____ C:\Users\Victor Andrade\Downloads\Ccleaner 5.13 Professional - LefyTutors.rar 2016-06-02 11:25 - 2016-06-02 11:25 - 05376257 _____ C:\Users\Victor Andrade\Downloads\WebcamAV319-1600W-UVCDriver.rar 2016-06-01 16:11 - 2016-06-01 16:12 - 00000000 ____D C:\Users\Victor Andrade\Desktop\revouninstaller-portable 2016-06-01 16:10 - 2016-06-01 16:11 - 03007700 _____ C:\Users\Victor Andrade\Downloads\revouninstaller.zip 2016-06-01 15:35 - 2016-06-01 15:42 - 45089705 _____ C:\Users\Victor Andrade\Downloads\Resident Evil _4_mobile(MDA).zip 2016-06-01 15:19 - 2016-06-01 15:21 - 04614258 _____ C:\Users\Victor Andrade\Downloads\ResidentEvil4_1.00.04.apk 2016-06-01 15:05 - 2013-04-22 11:02 - 00000000 ____D C:\Users\Victor Andrade\Downloads\jjp.co.capcom.android.googleplay.Evil4 2016-06-01 14:59 - 2016-06-01 15:04 - 35351809 _____ C:\Users\Victor Andrade\Downloads\2_biohazard_4_mobile.apk 2016-06-01 14:54 - 2016-06-01 14:59 - 45089705 _____ C:\Users\Victor Andrade\Downloads\3_biohazard_4_mobile.zip 2016-05-31 11:12 - 2016-05-31 11:12 - 00000000 ____D C:\Users\Victor Andrade\AppData\Roaming\Macromedia 2016-05-31 11:06 - 2016-05-31 11:06 - 00001701 _____ C:\Users\Victor Andrade\AppData\Roaming\Microsoft\Windows\Start Menu\BlueStacks.lnk 2016-05-31 11:06 - 2016-05-31 11:06 - 00001677 _____ C:\Users\Public\Desktop\BlueStacks.lnk 2016-05-31 11:05 - 2016-05-31 11:12 - 00000000 ____D C:\Users\Todos os Usuários\BlueStacksGameManager 2016-05-31 11:05 - 2016-05-31 11:12 - 00000000 ____D C:\ProgramData\BlueStacksGameManager 2016-05-31 11:03 - 2016-05-31 11:04 - 00000000 ____D C:\Program Files\BlueStacks 2016-05-31 11:03 - 2016-05-31 11:03 - 00000000 ____D C:\Users\Todos os Usuários\BlueStacks 2016-05-31 11:03 - 2016-05-31 11:03 - 00000000 ____D C:\ProgramData\BlueStacks 2016-05-31 11:02 - 2016-06-01 16:01 - 00000000 ____D C:\Users\Victor Andrade\Desktop\BlueStacks 2016-05-31 11:01 - 2016-06-04 13:04 - 00000000 ____D C:\Users\Todos os Usuários\BlueStacksSetup 2016-05-31 11:01 - 2016-06-04 13:04 - 00000000 ____D C:\ProgramData\BlueStacksSetup 2016-05-31 11:01 - 2016-05-31 11:01 - 00000000 ____D C:\Users\Victor Andrade\AppData\Local\Bluestacks 2016-05-31 10:26 - 2016-05-31 10:57 - 312530592 _____ (BlueStack Systems Inc.) C:\Users\Victor Andrade\Downloads\BlueStacks2_native_10f41a471d008c4eaaeff184d9cadc96.exe 2016-05-30 14:55 - 2016-05-30 14:55 - 00491086 _____ C:\Users\Victor Andrade\Downloads\Xbox_Image_Browse_v2.9.0.350.rar 2016-05-30 14:33 - 2016-05-30 14:37 - 04590389 _____ C:\Users\Victor Andrade\Downloads\Resident Evil 4.7z 2016-05-26 09:28 - 2016-05-26 09:30 - 07537259 _____ C:\Users\Victor Andrade\Downloads\XM.v5.6.5.29033.160515.2119 (1).bin 2016-05-25 19:01 - 2016-05-25 19:07 - 79722009 _____ C:\Users\Victor Andrade\Downloads\FORRO DO BALANCADO AO VIVO - PALHANO.rar 2016-05-25 18:48 - 2016-05-25 18:56 - 163013225 _____ C:\Users\Victor Andrade\Downloads\CD PROMOCIONAL (1).zip 2016-05-25 18:36 - 2016-05-25 18:39 - 71399957 _____ C:\Users\Victor Andrade\Downloads\FORRO CANGACO REPERTORIO NOVO FEV 2016.rar 2016-05-25 18:23 - 2016-05-25 18:28 - 95301954 _____ C:\Users\Victor Andrade\Downloads\DJ IVIS - SERESTA DE LUXO - 2K16.zip 2016-05-25 17:36 - 2016-05-25 17:36 - 02530304 _____ (BitTorrent Inc.) C:\Users\Victor Andrade\Downloads\uTorrent.exe 2016-05-25 17:32 - 2016-05-25 17:32 - 00692072 _____ (Disc Soft Ltd.) C:\Users\Victor Andrade\Downloads\DTLiteInstaller.exe 2016-05-25 17:28 - 2016-05-25 17:30 - 30503216 _____ C:\Users\Victor Andrade\Downloads\vlc-2.2.3-win32.exe 2016-05-25 17:27 - 2016-05-25 17:27 - 06893688 _____ (Piriform Ltd) C:\Users\Victor Andrade\Downloads\ccsetup518.exe 2016-05-25 16:30 - 2016-05-25 16:30 - 00000000 ____D C:\Users\Victor Andrade\Downloads\Nova pasta 2016-05-25 16:10 - 2016-05-25 16:18 - 146726568 _____ C:\Users\Victor Andrade\Downloads\11099814_VIDEO_W7_X64.zip 2016-05-25 16:10 - 2016-05-25 16:18 - 144744247 _____ C:\Users\Victor Andrade\Downloads\11099814_TOUCHPAD_W7_X64.zip 2016-05-25 16:10 - 2016-05-25 16:13 - 44266993 _____ C:\Users\Victor Andrade\Downloads\11099814_WIRELESS_W7_X64.zip 2016-05-25 16:10 - 2016-05-25 16:11 - 10821912 _____ C:\Users\Victor Andrade\Downloads\11099814_CARDREADER_W7_X64.zip 2016-05-25 16:10 - 2016-05-25 16:11 - 05992752 _____ C:\Users\Victor Andrade\Downloads\11099814_ETHERNET_W7_X64.zip 2016-05-25 16:10 - 2016-05-25 16:10 - 02449670 _____ C:\Users\Victor Andrade\Downloads\11099814_CHIPSET_W7_X64.zip 2016-05-25 16:10 - 2016-05-25 16:10 - 01444339 _____ C:\Users\Victor Andrade\Downloads\11099814_WEBCAM_W7_X64.zip 2016-05-25 15:53 - 2016-05-25 16:09 - 137683742 _____ C:\Users\Victor Andrade\Downloads\kurumin-7.0.iso 2016-05-25 15:43 - 2016-05-25 15:43 - 00000000 ____D C:\Users\Public\Documents\Baidu 2016-05-25 15:32 - 2016-05-25 15:32 - 00000000 ____D C:\Users\Victor Andrade\Desktop\Imagens 2016-05-25 15:31 - 2016-05-25 15:31 - 00000000 ____D C:\Users\Victor Andrade\Desktop\DCIM 2016-05-25 14:44 - 2015-04-18 13:02 - 00000000 ____D C:\Users\Victor Andrade\Downloads\testdisk-7.0 2016-05-25 14:42 - 2016-05-25 14:44 - 12444088 _____ C:\Users\Victor Andrade\Downloads\testdisk-7.0.win.zip 2016-05-24 16:10 - 2016-05-24 16:12 - 07537259 _____ C:\Users\Victor Andrade\Downloads\XM.v5.6.5.29033.160515.2119.bin 2016-05-23 16:19 - 2016-05-23 16:19 - 04825600 _____ C:\Users\Victor Andrade\Downloads\Photorescue.Pro.4.4.3.197.keygen.zip 2016-05-23 16:07 - 2016-05-23 16:08 - 00905216 _____ C:\Users\Victor Andrade\Downloads\XparkGenerk.serial_2.exe 2016-05-23 15:38 - 2016-05-23 15:40 - 59522908 _____ C:\Users\Victor Andrade\Downloads\JUNIOR VIANA REP-NOVO JUNHO 2016 DOUGLASCDS.rar 2016-05-23 15:31 - 2016-05-23 15:37 - 163013225 _____ C:\Users\Victor Andrade\Downloads\CD PROMOCIONAL.zip 2016-05-23 14:21 - 2016-05-23 14:25 - 58231768 _____ C:\Users\Victor Andrade\Downloads\Ritmo_Perfeito.rar 2016-05-20 16:37 - 2016-05-20 16:38 - 00000000 ____D C:\Users\Victor Andrade\AppData\Roaming\systweak 2016-05-20 16:35 - 2016-05-20 16:58 - 00000000 ____D C:\Users\Victor Andrade\AppData\Roaming\Software Tool 2016-05-20 16:33 - 2016-05-20 16:33 - 00616142 _____ C:\Users\Victor Andrade\Downloads\Crack Tool v15.33 - Razor-1911.zip 2016-05-20 16:31 - 2016-05-20 19:31 - 00256512 _____ C:\Users\Victor Andrade\Downloads\Download Essential Data Tools Photorescue Pro 6.9.947 Full Crack.exe 2016-05-20 16:31 - 2016-05-20 16:31 - 00113725 _____ C:\Users\Victor Andrade\Downloads\Download Essential Data Tools Photorescue Pro 6.9.947 Full Crack.rar 2016-05-20 16:28 - 2016-05-20 16:28 - 00000000 _____ C:\Users\Victor Andrade\Downloads\Installer_(Right Click and select extract)+.zip 2016-05-20 16:24 - 2016-05-20 16:24 - 00000908 _____ C:\Windows\system32\${LOGFILE} 2016-05-20 16:24 - 2016-05-20 16:24 - 00000000 ____D C:\Users\Public\Documents\Guid 2016-05-20 16:22 - 2016-05-20 16:22 - 00000000 ____H C:\Windows\system32\BITCCC1.tmp 2016-05-20 16:22 - 2016-05-20 16:22 - 00000000 ____H C:\Windows\system32\BITCA50.tmp 2016-05-20 16:22 - 2016-05-20 16:22 - 00000000 ____D C:\Users\Todos os Usuários\SearchModule 2016-05-20 16:22 - 2016-05-20 16:22 - 00000000 ____D C:\ProgramData\SearchModule 2016-05-20 16:22 - 2016-05-20 16:22 - 00000000 ____D C:\Program Files\Common Files\Doobzo 2016-05-20 15:14 - 2016-05-20 15:14 - 00000000 ____D C:\Users\Victor Andrade\AppData\Roaming\Sun 2016-05-20 15:14 - 2016-05-20 15:14 - 00000000 ____D C:\Users\Victor Andrade\AppData\LocalLow\Sun 2016-05-20 15:14 - 2016-05-20 15:14 - 00000000 ____D C:\Users\Victor Andrade\.oracle_jre_usage 2016-05-20 15:14 - 2016-05-20 15:14 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java 2016-05-20 15:14 - 2016-05-20 15:14 - 00000000 ____D C:\Program Files\Common Files\Java 2016-05-20 15:14 - 2016-05-20 15:13 - 00095808 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge.dll 2016-05-20 15:13 - 2016-05-20 15:13 - 00000000 ____D C:\Users\Todos os Usuários\Oracle 2016-05-20 15:13 - 2016-05-20 15:13 - 00000000 ____D C:\ProgramData\Oracle 2016-05-20 15:13 - 2016-05-20 15:13 - 00000000 ____D C:\Program Files\Java 2016-05-20 15:11 - 2016-05-20 15:11 - 00738368 _____ (Oracle Corporation) C:\Users\Victor Andrade\Downloads\chromeinstall-8u91.exe 2016-05-20 15:11 - 2016-05-20 15:11 - 00000000 ____D C:\Users\Victor Andrade\AppData\LocalLow\Oracle 2016-05-20 15:10 - 2016-05-20 15:10 - 00000622 _____ C:\Users\Victor Andrade\Desktop\Brasfoot 2016.lnk 2016-05-20 15:10 - 2016-05-20 15:10 - 00000000 ____D C:\Users\Victor Andrade\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Brasfoot 2016 2016-05-20 15:10 - 2016-05-20 15:10 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Brasfoot 2016 2016-05-20 15:10 - 2016-05-20 15:10 - 00000000 ____D C:\Brasfoot2016 2016-05-20 15:07 - 2016-05-20 15:08 - 08458940 _____ C:\Users\Victor Andrade\Downloads\brasfoot2016.exe 2016-05-20 14:57 - 2016-05-20 14:53 - 00001103 _____ C:\Windows\system32\Drivers\etc\hp.bak 2016-05-20 14:54 - 2016-05-20 16:24 - 00000000 ____D C:\Users\Victor Andrade\AppData\Roaming\Nosibay 2016-05-20 14:52 - 2016-05-20 16:24 - 00000000 ____D C:\Users\Victor Andrade\AppData\Roaming\Checkers 2016-05-20 14:52 - 2016-05-20 16:24 - 00000000 ____D C:\Program Files\HomePageDefender 2016-05-20 14:52 - 2016-05-20 14:52 - 00621568 _____ (The OpenSSL Project, hxxp://www.openssl.org/) C:\Users\Victor Andrade\Downloads\libeay32.dll 2016-05-20 14:52 - 2016-05-20 14:52 - 00162304 _____ (The OpenSSL Project, hxxp://www.openssl.org/) C:\Users\Victor Andrade\Downloads\ssleay32.dll 2016-05-20 14:50 - 2016-05-20 14:50 - 00000042 _____ C:\Users\Victor Andrade\Documents\serial photo rescue.txt 2016-05-20 14:50 - 2016-05-20 14:50 - 00000000 _____ C:\Users\Victor Andrade\Downloads\PhotoRescue 2016-05-20 08:17 - 2016-05-20 08:17 - 00000958 _____ C:\Users\Victor Andrade\Desktop\PhotoRescue PC 3.4.0.lnk 2016-05-20 08:17 - 2016-05-20 08:17 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PhotoRescue PC 2016-05-20 08:16 - 2016-05-20 08:18 - 00000000 ____D C:\Program Files\PhotoRescue PC 2016-05-20 08:16 - 2016-05-20 08:16 - 03332800 _____ (DataRescue sa/nv ) C:\Users\Victor Andrade\Downloads\setupv3.exe 2016-05-19 16:03 - 2016-05-19 16:03 - 00001156 _____ C:\Users\Victor Andrade\Desktop\Format Factory.lnk 2016-05-19 16:03 - 2016-05-19 16:03 - 00000000 ____D C:\Users\Victor Andrade\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\FormatFactory 2016-05-19 16:03 - 2016-05-19 16:03 - 00000000 ____D C:\Users\Todos os Usuários\Baidu 2016-05-19 16:03 - 2016-05-19 16:03 - 00000000 ____D C:\ProgramData\Baidu 2016-05-19 16:02 - 2016-05-19 16:02 - 00000000 ____D C:\Program Files\FreeTime 2016-05-19 16:00 - 2016-05-19 16:02 - 54561512 _____ (Free Time) C:\Users\Victor Andrade\Downloads\formatfactory-3-6-0-0-multi-win.exe 2016-05-19 12:08 - 2016-05-19 12:09 - 00000000 ____D C:\Program Files\Recuva 2016-05-19 12:08 - 2016-05-19 12:08 - 00001795 _____ C:\Users\Public\Desktop\Recuva.lnk 2016-05-19 12:08 - 2016-05-19 12:08 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Recuva 2016-05-19 12:05 - 2016-05-19 12:07 - 04426120 _____ (Piriform Ltd) C:\Users\Victor Andrade\Downloads\rcsetup152.exe 2016-05-18 10:20 - 2016-05-18 10:20 - 26999535 _____ C:\Users\Victor Andrade\Downloads\Luis Marcelo e Gabriel - Por que foi embora (Clipe Oficial).mp4 2016-05-18 10:13 - 2013-08-23 20:51 - 00000000 ____D C:\Users\Victor Andrade\Downloads\SELEÇÃO TOP MASTRUZ COM LEITE PRA PAREDÃO 2016-05-18 10:12 - 2013-06-13 10:47 - 00000000 ____D C:\Users\Victor Andrade\Downloads\Top 20 Forró Das Antigas 2016-05-18 09:45 - 2016-05-18 09:48 - 97664893 _____ C:\Users\Victor Andrade\Downloads\Top 20 Forro Das Antigas.rar 2016-05-18 09:43 - 2016-05-18 09:45 - 69132700 _____ C:\Users\Victor Andrade\Downloads\SELECAO TOP MASTRUZ COM LEITE PRA PAREDAO.zip 2016-05-18 09:41 - 2016-05-18 09:43 - 84981003 _____ C:\Users\Victor Andrade\Downloads\Mastruz Com Leite as melhores.rar 2016-05-17 19:58 - 2016-05-17 15:05 - 00000000 ____D C:\Windows\Panther 2016-05-17 17:59 - 2016-05-17 18:06 - 179178751 _____ C:\Users\Victor Andrade\Downloads\ZE SANFONEIRO ZE FILHO - PROMOCIONAL DE MARCO 2016.rar 2016-05-17 17:36 - 2016-05-17 17:37 - 00000000 ____D C:\Users\Victor Andrade\AppData\Roaming\PhotoScape 2016-05-17 17:33 - 2016-05-17 17:33 - 00000000 ____D C:\Users\Victor Andrade\Desktop\Media 2016-05-17 17:07 - 2016-05-17 17:07 - 00000000 ____H C:\Windows\system32\Drivers\Msft_User_WpdMtpDr_01_09_00.Wdf 2016-05-17 17:00 - 2016-05-17 17:04 - 109058002 _____ C:\Users\Victor Andrade\Downloads\'Estações' Marcelo Lima e Alessandro participação Gusttavo Lima.mp4 2016-05-17 16:57 - 2016-05-17 17:00 - 52228692 _____ C:\Users\Victor Andrade\Downloads\Not This Time (Vou Me Encontrar) - Laura S. Feat. Gusttavo Lima.mp4 2016-05-17 16:55 - 2016-05-17 16:57 - 42240948 _____ C:\Users\Victor Andrade\Downloads\Gusttavo Lima Nossa Preferida Sertaneja - 2016.mp4 2016-05-17 16:55 - 2016-05-17 16:55 - 09992511 _____ C:\Users\Victor Andrade\Downloads\Gusttavo Lima - A Cor da Esperança Momentos.mp4 2016-05-17 16:53 - 2016-05-17 16:53 - 11531820 _____ C:\Users\Victor Andrade\Downloads\Leandro & Gusttavo Lima - Eu Mudei (Official Video).mp4 2016-05-17 16:52 - 2016-05-17 16:54 - 79651018 _____ C:\Users\Victor Andrade\Downloads\Edy Britto e Samuel part. Gusttavo Lima - Homem Chora Sim.mp4 2016-05-17 16:50 - 2016-05-17 16:51 - 59297219 _____ C:\Users\Victor Andrade\Downloads\Zé Neto e Cristiano - Seu Polícia (DVD Zé Neto e Cristiano Ao vivo em São José do Rio Preto).mp4 2016-05-17 16:45 - 2016-05-17 16:47 - 58345379 _____ C:\Users\Victor Andrade\Downloads\Michel Teló part Gusttavo Lima - Implorando Pra Trair (CLIPE OFICIAL).mp4 2016-05-17 16:44 - 2016-05-17 16:45 - 17642034 _____ C:\Users\Victor Andrade\Downloads\Gusttavo Lima - Cheiro de Shampoo Part Esp Eduardo Costa - [Ao Vivo Em São Paulo] (Clipe Oficial).mp4 2016-05-17 16:35 - 2016-05-17 16:38 - 91394886 _____ C:\Users\Victor Andrade\Downloads\CD_Gusttavo_Lima_e_Voce_-_Patos_de_Minas_2011.rar 2016-05-17 16:28 - 2016-05-17 16:35 - 153246879 _____ C:\Users\Victor Andrade\Downloads\CD_Gusttavo_Lima_-_Ao_Vivo_Em_Sao_Paulo.rar 2016-05-17 16:21 - 2016-05-17 16:24 - 59618273 _____ C:\Users\Victor Andrade\Downloads\CD_Amado_Batista_-_40_Anos.zip 2016-05-17 16:13 - 2016-05-17 16:13 - 00000000 ____H C:\Windows\system32\Drivers\Msft_User_WpdFs_01_09_00.Wdf 2016-05-17 16:04 - 2016-04-21 15:05 - 00374944 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe 2016-05-17 15:59 - 2016-05-17 15:59 - 00000000 ____D C:\Users\Victor Andrade\AppData\Local\ESET 2016-05-17 15:57 - 2016-05-17 15:57 - 00002027 _____ C:\Users\Public\Desktop\ESET Proteção de pagamento bancário.lnk 2016-05-17 15:57 - 2016-05-17 15:57 - 00000000 ____D C:\Users\Todos os Usuários\ESET 2016-05-17 15:57 - 2016-05-17 15:57 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ESET 2016-05-17 15:57 - 2016-05-17 15:57 - 00000000 ____D C:\ProgramData\ESET 2016-05-17 15:57 - 2016-05-17 15:57 - 00000000 ____D C:\Program Files\ESET 2016-05-17 15:54 - 2016-05-17 15:54 - 00000000 ____D C:\Users\Victor Andrade\AppData\Roaming\Mikrotik 2016-05-17 15:52 - 2016-05-17 15:52 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2016-05-17 15:52 - 2006-10-26 19:56 - 00032592 _____ (Microsoft Corporation) C:\Windows\system32\msonpmon.dll 2016-05-17 15:49 - 2016-05-17 15:49 - 00000000 ____D C:\Windows\PCHEALTH 2016-05-17 15:49 - 2016-05-17 15:49 - 00000000 ____D C:\Program Files\Microsoft Works 2016-05-17 15:49 - 2016-05-17 15:49 - 00000000 ____D C:\Program Files\Microsoft Visual Studio 2016-05-17 15:49 - 2016-05-17 15:49 - 00000000 ____D C:\Program Files\Common Files\DESIGNER 2016-05-17 15:47 - 2016-05-17 15:47 - 00000000 ____D C:\Program Files\Microsoft Visual Studio 8 2016-05-17 15:46 - 2016-05-17 15:52 - 00000000 ____D C:\Users\Todos os Usuários\Microsoft Help 2016-05-17 15:46 - 2016-05-17 15:49 - 00000000 ____D C:\Program Files\Microsoft Office 2016-05-17 15:46 - 2016-05-17 15:46 - 00000000 __RHD C:\MSOCache 2016-05-17 15:46 - 2016-05-17 15:46 - 00000000 ____D C:\Users\Victor Andrade\AppData\Local\Microsoft Help 2016-05-17 15:43 - 2016-05-17 15:43 - 00113543 _____ C:\Windows\system32\slmgr.vbs 2016-05-17 15:38 - 2016-05-17 17:12 - 00108824 _____ C:\Users\Victor Andrade\AppData\Local\GDIPFONTCACHEV1.DAT 2016-05-17 15:38 - 2016-05-17 15:38 - 00000000 ____D C:\Users\Victor Andrade\AppData\Roaming\WinRAR 2016-05-17 15:37 - 2016-05-31 11:03 - 00000000 ____D C:\Outros 2016-05-17 15:35 - 2016-05-17 15:35 - 00000000 ____D C:\Windows\system32\x64 2016-05-17 15:35 - 2016-05-17 15:35 - 00000000 ____D C:\Windows\system32\Lang 2016-05-17 15:35 - 2011-04-20 03:39 - 01006360 _____ (Intel Corporation) C:\Windows\system32\igxpun.exe 2016-05-17 15:34 - 2011-04-12 01:28 - 00039540 _____ C:\Windows\system32\iglhxs32.vp 2016-05-17 15:34 - 2011-04-12 01:08 - 00155648 _____ (Intel Corporation) C:\Windows\system32\igfxCoIn_v2364.dll 2016-05-17 15:34 - 2011-04-12 00:58 - 04815872 _____ (Intel Corporation) C:\Windows\system32\Drivers\igdkmd32.sys 2016-05-17 15:34 - 2011-04-12 00:43 - 00310784 _____ (Intel Corporation) C:\Windows\system32\igfxrell.lrc 2016-05-17 15:34 - 2011-04-12 00:43 - 00304640 _____ (Intel Corporation) C:\Windows\system32\igfxrita.lrc 2016-05-17 15:34 - 2011-04-12 00:43 - 00303616 _____ (Intel Corporation) C:\Windows\system32\igfxrfra.lrc 2016-05-17 15:34 - 2011-04-12 00:43 - 00303104 _____ (Intel Corporation) C:\Windows\system32\igfxresp.lrc 2016-05-17 15:34 - 2011-04-12 00:43 - 00299520 _____ (Intel Corporation) C:\Windows\system32\igfxrnld.lrc 2016-05-17 15:34 - 2011-04-12 00:43 - 00294912 _____ (Intel Corporation) C:\Windows\system32\igfxrptg.lrc 2016-05-17 15:34 - 2011-04-12 00:43 - 00291328 _____ (Intel Corporation) C:\Windows\system32\igfxrrus.lrc 2016-05-17 15:34 - 2011-04-12 00:43 - 00289280 _____ (Intel Corporation) C:\Windows\system32\igfxrptb.lrc 2016-05-17 15:34 - 2011-04-12 00:43 - 00288256 _____ (Intel Corporation) C:\Windows\system32\igfxrhun.lrc 2016-05-17 15:34 - 2011-04-12 00:43 - 00287744 _____ (Intel Corporation) C:\Windows\system32\igfxrplk.lrc 2016-05-17 15:34 - 2011-04-12 00:43 - 00282624 _____ (Intel Corporation) C:\Windows\system32\igfxrsve.lrc 2016-05-17 15:34 - 2011-04-12 00:43 - 00282624 _____ (Intel Corporation) C:\Windows\system32\igfxrsky.lrc 2016-05-17 15:34 - 2011-04-12 00:43 - 00281088 _____ (Intel Corporation) C:\Windows\system32\igfxrfin.lrc 2016-05-17 15:34 - 2011-04-12 00:43 - 00280064 _____ (Intel Corporation) C:\Windows\system32\igfxrnor.lrc 2016-05-17 15:34 - 2011-04-12 00:43 - 00279040 _____ (Intel Corporation) C:\Windows\system32\igfxrtrk.lrc 2016-05-17 15:34 - 2011-04-12 00:43 - 00277504 _____ (Intel Corporation) C:\Windows\system32\igfxrslv.lrc 2016-05-17 15:34 - 2011-04-12 00:43 - 00262656 _____ (Intel Corporation) C:\Windows\system32\igfxrtha.lrc 2016-05-17 15:34 - 2011-04-12 00:43 - 00249856 _____ (Intel Corporation) C:\Windows\system32\igfxrheb.lrc 2016-05-17 15:34 - 2011-04-12 00:43 - 00206848 _____ (Intel Corporation) C:\Windows\system32\igfxrjpn.lrc 2016-05-17 15:34 - 2011-04-12 00:43 - 00205312 _____ (Intel Corporation) C:\Windows\system32\igfxrkor.lrc 2016-05-17 15:34 - 2011-04-12 00:42 - 00303616 _____ (Intel Corporation) C:\Windows\system32\igfxrdeu.lrc 2016-05-17 15:34 - 2011-04-12 00:42 - 00282624 _____ (Intel Corporation) C:\Windows\system32\igfxrcsy.lrc 2016-05-17 15:34 - 2011-04-12 00:42 - 00280576 _____ (Intel Corporation) C:\Windows\system32\igfxrdan.lrc 2016-05-17 15:34 - 2011-04-12 00:42 - 00252416 _____ (Intel Corporation) C:\Windows\system32\igfxrara.lrc 2016-05-17 15:34 - 2011-04-12 00:42 - 00179712 _____ (Intel Corporation) C:\Windows\system32\igfxrcht.lrc 2016-05-17 15:34 - 2011-04-12 00:42 - 00178176 _____ (Intel Corporation) C:\Windows\system32\igfxrchs.lrc 2016-05-17 15:34 - 2011-04-12 00:40 - 00257536 _____ (Intel Corporation) C:\Windows\system32\igfxTMM.dll 2016-05-17 15:34 - 2011-04-12 00:40 - 00119296 _____ (Intel Corporation) C:\Windows\system32\igfxcpl.cpl 2016-05-17 15:34 - 2011-04-12 00:40 - 00059392 _____ (Intel Corporation) C:\Windows\system32\oemdspif.dll 2016-05-17 15:34 - 2011-04-12 00:39 - 00275968 _____ (Intel Corporation) C:\Windows\system32\igfxrenu.lrc 2016-05-17 15:34 - 2011-04-12 00:39 - 00051712 _____ (Intel Corporation) C:\Windows\system32\igfxsrvc.dll 2016-05-17 15:34 - 2011-04-12 00:33 - 01921265 _____ C:\Windows\system32\iglhxa32.cpa 2016-05-17 15:34 - 2011-04-12 00:33 - 00060254 _____ C:\Windows\system32\iglhxg32.vp 2016-05-17 15:34 - 2011-04-12 00:33 - 00060226 _____ C:\Windows\system32\iglhxc32.vp 2016-05-17 15:34 - 2011-04-12 00:33 - 00060015 _____ C:\Windows\system32\iglhxo32.vp 2016-05-17 15:34 - 2011-04-12 00:33 - 00001090 _____ C:\Windows\system32\iglhxa32.vp 2016-05-17 15:33 - 2011-04-20 03:39 - 00253208 _____ (Intel Corporation) C:\Windows\system32\igfxsrvc.exe 2016-05-17 15:33 - 2011-04-20 03:39 - 00150808 _____ (Intel Corporation) C:\Windows\system32\igfxpers.exe 2016-05-17 15:33 - 2011-04-20 03:39 - 00142104 _____ (Intel Corporation) C:\Windows\system32\igfxtray.exe 2016-05-17 15:33 - 2011-04-12 00:59 - 03829760 _____ (Intel Corporation) C:\Windows\system32\igdumd32.dll 2016-05-17 15:33 - 2011-04-12 00:56 - 00536576 _____ (Intel Corporation) C:\Windows\system32\igdumdx32.dll 2016-05-17 15:33 - 2011-04-12 00:49 - 04104192 _____ (Intel Corporation) C:\Windows\system32\ig4icd32.dll 2016-05-17 15:33 - 2011-04-12 00:49 - 02686976 _____ (Intel Corporation) C:\Windows\system32\ig4dev32.dll 2016-05-17 15:33 - 2011-04-12 00:40 - 00199680 _____ (Intel Corporation) C:\Windows\system32\igfxpph.dll 2016-05-17 15:33 - 2011-04-12 00:40 - 00023552 _____ (Intel Corporation) C:\Windows\system32\igfxexps.dll 2016-05-17 15:33 - 2011-04-12 00:39 - 05702656 _____ (Intel Corporation) C:\Windows\system32\igfxress.dll 2016-05-17 15:33 - 2011-04-12 00:39 - 00218112 _____ (Intel Corporation) C:\Windows\system32\igfxdev.dll 2016-05-17 15:33 - 2011-04-12 00:39 - 00130048 _____ (Intel Corporation) C:\Windows\system32\igfxdo.dll 2016-05-17 15:33 - 2011-04-12 00:39 - 00094208 _____ (Intel Corporation) C:\Windows\system32\hccutils.dll 2016-05-17 15:32 - 2016-05-17 15:32 - 00000000 ____D C:\Windows\system32\RTCOM 2016-05-17 15:32 - 2016-05-17 15:32 - 00000000 ____D C:\Program Files\Realtek 2016-05-17 15:32 - 2013-01-22 10:43 - 02591496 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\Drivers\RTKVHDA.sys 2016-05-17 15:32 - 2013-01-22 02:12 - 15577600 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RCoRes.dat 2016-05-17 15:32 - 2013-01-21 05:29 - 00407889 _____ C:\Windows\system32\Drivers\RTAIODAT.DAT 2016-05-17 15:32 - 2013-01-15 06:21 - 03585776 _____ C:\Windows\system32\Drivers\rtvienna.dat 2016-05-17 15:32 - 2012-12-12 07:50 - 01592544 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RTSndMgr.cpl 2016-05-17 15:32 - 2012-08-31 08:17 - 07162128 _____ (Dolby Laboratories) C:\Windows\system32\R4EEP32A.dll 2016-05-17 15:32 - 2012-08-31 08:17 - 00352016 _____ (Dolby Laboratories) C:\Windows\system32\R4EED32A.dll 2016-05-17 15:32 - 2012-08-31 08:17 - 00106768 _____ (Dolby Laboratories) C:\Windows\system32\R4EEL32A.dll 2016-05-17 15:32 - 2012-08-31 08:17 - 00091920 _____ (Dolby Laboratories) C:\Windows\system32\R4EEA32A.dll 2016-05-17 15:32 - 2012-08-31 08:17 - 00062224 _____ (Dolby Laboratories) C:\Windows\system32\R4EEG32A.dll 2016-05-17 15:32 - 2011-04-20 03:39 - 00673048 _____ (Intel Corporation) C:\Windows\system32\igfxcfg.exe 2016-05-17 15:32 - 2011-04-20 03:39 - 00174360 _____ (Intel Corporation) C:\Windows\system32\hkcmd.exe 2016-05-17 15:32 - 2011-04-20 03:39 - 00173336 _____ (Intel Corporation) C:\Windows\system32\igfxext.exe 2016-05-17 15:31 - 2013-01-21 05:40 - 00106568 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkCoInstII.dll 2016-05-17 15:31 - 2013-01-21 00:22 - 03228744 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkAPO.dll 2016-05-17 15:31 - 2013-01-17 08:38 - 00774936 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPOShell.dll 2016-05-17 15:31 - 2013-01-17 04:26 - 13119256 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioRealtek.dll 2016-05-17 15:31 - 2013-01-17 04:26 - 01652504 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioRealtek2.dll 2016-05-17 15:31 - 2013-01-16 03:51 - 02488904 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkPgExt.dll 2016-05-17 15:31 - 2013-01-14 23:33 - 02376736 _____ (Fortemedia Corporation) C:\Windows\system32\FMAPO.dll 2016-05-17 15:31 - 2013-01-09 05:01 - 01821976 _____ (Waves Audio Ltd.) C:\Windows\system32\WavesGUILib.dll 2016-05-17 15:31 - 2013-01-04 06:21 - 00765152 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkApoApi.dll 2016-05-17 15:31 - 2012-12-26 04:33 - 00802520 _____ (Sony Corporation) C:\Windows\system32\SFSS_APO.dll 2016-05-17 15:31 - 2012-12-17 06:49 - 01931208 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioEQ.dll 2016-05-17 15:31 - 2012-12-12 00:17 - 00350664 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO30.dll 2016-05-17 15:31 - 2012-10-02 03:39 - 00426952 _____ (DTS) C:\Windows\system32\DTSU2PLFX32.dll 2016-05-17 15:31 - 2012-10-02 03:39 - 00402888 _____ (DTS) C:\Windows\system32\DTSU2PGFX32.dll 2016-05-17 15:31 - 2012-10-02 03:39 - 00346056 _____ (DTS) C:\Windows\system32\DTSU2PREC32.dll 2016-05-17 15:31 - 2012-07-15 10:13 - 00349048 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxVolumeSDAPO.dll 2016-05-17 15:31 - 2012-06-20 06:26 - 00090624 _____ (Real Sound Lab SIA) C:\Windows\system32\CONEQMSAPOGUILibrary.dll 2016-05-17 15:31 - 2012-03-08 00:47 - 00176736 _____ (Andrea Electronics Corporation) C:\Windows\system32\AERTACap.dll 2016-05-17 15:31 - 2012-03-08 00:47 - 00095840 _____ (Andrea Electronics Corporation) C:\Windows\system32\AERTARen.dll 2016-05-17 15:31 - 2012-01-30 00:42 - 00819648 _____ (TOSHIBA Corporation) C:\Windows\system32\tadefxapo2.dll 2016-05-17 15:31 - 2012-01-09 23:20 - 00058264 _____ (TOSHIBA CORPORATION.) C:\Windows\system32\TepeqAPO.dll 2016-05-17 15:31 - 2011-11-22 05:28 - 00013416 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkCoLDR.dll 2016-05-17 15:31 - 2011-09-02 03:21 - 00214368 _____ (Synopsys, Inc.) C:\Windows\system32\SFNHK.dll 2016-05-17 15:31 - 2011-09-02 03:21 - 00074080 _____ (Synopsys, Inc.) C:\Windows\system32\SFCOM.dll 2016-05-17 15:31 - 2011-09-02 03:21 - 00068960 _____ (Synopsys, Inc.) C:\Windows\system32\SFAPO.dll 2016-05-17 15:31 - 2011-08-23 06:00 - 00357712 _____ (Knowles Acoustics ) C:\Windows\system32\KAAPORT.dll 2016-05-17 15:31 - 2011-05-30 22:42 - 01509480 _____ (DTS) C:\Windows\system32\DTSS2SpeakerDLL.dll 2016-05-17 15:31 - 2011-05-30 22:42 - 01292904 _____ (DTS) C:\Windows\system32\DTSS2HeadphoneDLL.dll 2016-05-17 15:31 - 2011-05-30 22:42 - 01220200 _____ (DTS) C:\Windows\system32\DTSBoostDLL.dll 2016-05-17 15:31 - 2011-05-30 22:42 - 00654952 _____ (DTS) C:\Windows\system32\DTSBassEnhancementDLL.dll 2016-05-17 15:31 - 2011-05-30 22:42 - 00631400 _____ (DTS) C:\Windows\system32\DTSSymmetryDLL.dll 2016-05-17 15:31 - 2011-05-30 22:42 - 00601704 _____ (DTS) C:\Windows\system32\DTSVoiceClarityDLL.dll 2016-05-17 15:31 - 2011-05-30 22:42 - 00458344 _____ (DTS) C:\Windows\system32\DTSNeoPCDLL.dll 2016-05-17 15:31 - 2011-05-30 22:42 - 00389736 _____ (DTS) C:\Windows\system32\DTSGainCompensatorDLL.dll 2016-05-17 15:31 - 2011-05-30 22:42 - 00375400 _____ (DTS) C:\Windows\system32\DTSLimiterDLL.dll 2016-05-17 15:31 - 2011-05-30 22:42 - 00218728 _____ (DTS) C:\Windows\system32\DTSGFXAPONS.dll 2016-05-17 15:31 - 2011-05-30 22:42 - 00218728 _____ (DTS) C:\Windows\system32\DTSGFXAPO.dll 2016-05-17 15:31 - 2011-05-30 22:42 - 00218216 _____ (DTS) C:\Windows\system32\DTSLFXAPO.dll 2016-05-17 15:31 - 2011-03-17 01:16 - 01379760 _____ (TOSHIBA Corporation) C:\Windows\system32\tosade.dll 2016-05-17 15:31 - 2011-03-07 06:03 - 00134584 _____ (TOSHIBA Corporation) C:\Windows\system32\tadefxapo.dll 2016-05-17 15:31 - 2010-11-07 20:31 - 00359768 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEP32A.dll 2016-05-17 15:31 - 2010-11-07 20:31 - 00295768 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RP3DHT32.dll 2016-05-17 15:31 - 2010-11-07 20:31 - 00295768 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RP3DAA32.dll 2016-05-17 15:31 - 2010-11-07 20:31 - 00170840 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEED32A.dll 2016-05-17 15:31 - 2010-11-07 20:31 - 00078680 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEL32A.dll 2016-05-17 15:31 - 2010-11-07 20:31 - 00064856 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEG32A.dll 2016-05-17 15:31 - 2010-09-26 22:34 - 00232792 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO20.dll 2016-05-17 15:31 - 2009-12-04 04:43 - 00132368 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO.dll 2016-05-17 15:31 - 2009-11-23 22:55 - 00345328 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSTSXT.dll 2016-05-17 15:31 - 2009-11-23 22:55 - 00185584 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSTSHD.dll 2016-05-17 15:31 - 2009-11-23 22:55 - 00173296 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSHP360.dll 2016-05-17 15:31 - 2009-11-23 22:55 - 00140528 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSWOW.dll 2016-05-17 15:31 - 2009-11-18 07:42 - 01783056 _____ (Waves Audio Ltd.) C:\Windows\system32\WavesLib.dll 2016-05-17 15:30 - 2012-12-26 21:26 - 00614624 _____ (Realtek ) C:\Windows\system32\Drivers\Rt86win7.sys 2016-05-17 15:30 - 2012-12-26 21:26 - 00100896 _____ (Realtek Semiconductor Corporation) C:\Windows\system32\RTNUninst32.dll 2016-05-17 15:30 - 2012-12-26 21:26 - 00080488 _____ (Realtek Semiconductor Corporation) C:\Windows\system32\RtNicProp32.dll 2016-05-17 15:27 - 2016-05-17 15:27 - 00000000 ____D C:\Users\Victor Andrade\AppData\Roaming\Adobe 2016-05-17 15:26 - 2016-05-17 15:26 - 00000000 ____D C:\Users\Victor Andrade\AppData\Local\ElevatedDiagnostics 2016-05-17 15:25 - 2016-05-17 15:25 - 00000989 _____ C:\Users\Victor Andrade\Desktop\PhotoScape.lnk 2016-05-17 15:25 - 2016-05-17 15:25 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PhotoScape 2016-05-17 15:25 - 2016-05-17 15:25 - 00000000 ____D C:\Program Files\PhotoScape 2016-05-17 15:23 - 2016-05-17 15:24 - 00000000 ____D C:\Program Files\CCleaner 2016-05-17 15:23 - 2016-05-17 15:23 - 00000965 _____ C:\Users\Public\Desktop\CCleaner.lnk 2016-05-17 15:23 - 2016-05-17 15:23 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner 2016-05-17 15:21 - 2016-06-01 16:17 - 00000000 ____D C:\Program Files\Opera 2016-05-17 15:21 - 2016-05-17 15:21 - 00001093 _____ C:\Users\Public\Desktop\Opera.lnk 2016-05-17 15:21 - 2016-05-17 15:21 - 00001093 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Opera.lnk 2016-05-17 15:21 - 2016-05-17 15:21 - 00000000 ____D C:\Users\Victor Andrade\AppData\Roaming\Opera Software 2016-05-17 15:21 - 2016-05-17 15:21 - 00000000 ____D C:\Users\Victor Andrade\AppData\Local\Opera Software 2016-05-17 15:18 - 2016-05-20 16:24 - 00001965 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk 2016-05-17 15:18 - 2016-05-20 16:24 - 00001953 _____ C:\Users\Public\Desktop\Mozilla Firefox.lnk 2016-05-17 15:18 - 2016-05-17 15:18 - 00000000 ____D C:\Users\Victor Andrade\AppData\Roaming\Mozilla 2016-05-17 15:18 - 2016-05-17 15:18 - 00000000 ____D C:\Users\Victor Andrade\AppData\Local\Mozilla 2016-05-17 15:18 - 2016-05-17 15:18 - 00000000 ____D C:\Program Files\Mozilla Firefox 2016-05-17 15:15 - 2016-06-04 12:59 - 00001054 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job 2016-05-17 15:15 - 2016-06-04 12:25 - 00001058 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job 2016-05-17 15:15 - 2016-05-20 16:24 - 00002262 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk 2016-05-17 15:15 - 2016-05-20 16:24 - 00002250 _____ C:\Users\Public\Desktop\Google Chrome.lnk 2016-05-17 15:15 - 2016-05-17 16:52 - 00000000 ____D C:\Users\Victor Andrade\AppData\Local\Google 2016-05-17 15:15 - 2016-05-17 15:15 - 00000000 ____D C:\Program Files\Google 2016-05-17 15:14 - 2016-05-17 15:14 - 00000000 ____D C:\Users\Victor Andrade\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR 2016-05-17 15:14 - 2016-05-17 15:14 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR 2016-05-17 15:14 - 2016-05-17 15:14 - 00000000 ____D C:\Program Files\WinRAR 2016-05-17 15:13 - 2016-05-17 15:13 - 00002441 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader XI.lnk 2016-05-17 15:13 - 2016-05-17 15:13 - 00001989 _____ C:\Users\Public\Desktop\Adobe Reader XI.lnk 2016-05-17 15:13 - 2016-05-17 15:13 - 00000000 ____D C:\Program Files\Common Files\Adobe 2016-05-17 15:13 - 2016-05-17 15:13 - 00000000 ____D C:\Program Files\Adobe 2016-05-17 15:12 - 2016-05-17 15:13 - 00000000 ____D C:\Users\Todos os Usuários\Adobe 2016-05-17 15:12 - 2016-05-17 15:13 - 00000000 ____D C:\ProgramData\Adobe 2016-05-17 15:11 - 2016-05-17 15:11 - 00797376 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe 2016-05-17 15:11 - 2016-05-17 15:11 - 00142528 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl 2016-05-17 15:11 - 2016-05-17 15:11 - 00000000 ____D C:\Windows\system32\Macromed 2016-05-17 15:09 - 2016-06-04 13:04 - 01491932 _____ C:\Windows\system32\PerfStringBackup.INI 2016-05-17 15:06 - 2016-05-20 16:24 - 00002245 _____ C:\Users\Victor Andrade\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk 2016-05-17 15:06 - 2016-05-17 15:06 - 00000000 ____D C:\Users\Victor Andrade\AppData\Local\VirtualStore 2016-05-17 15:05 - 2016-05-20 15:14 - 00000000 ____D C:\Users\Victor Andrade 2016-05-17 15:05 - 2016-05-17 15:05 - 00000020 ___SH C:\Users\Victor Andrade\ntuser.ini 2016-05-17 15:05 - 2016-05-17 15:05 - 00000000 _SHDL C:\Users\Victor Andrade\Modelos 2016-05-17 15:05 - 2016-05-17 15:05 - 00000000 _SHDL C:\Users\Victor Andrade\Meus documentos 2016-05-17 15:05 - 2016-05-17 15:05 - 00000000 _SHDL C:\Users\Victor Andrade\Menu Iniciar 2016-05-17 15:05 - 2016-05-17 15:05 - 00000000 _SHDL C:\Users\Victor Andrade\Documents\Minhas músicas 2016-05-17 15:05 - 2016-05-17 15:05 - 00000000 _SHDL C:\Users\Victor Andrade\Documents\Minhas imagens 2016-05-17 15:05 - 2016-05-17 15:05 - 00000000 _SHDL C:\Users\Victor Andrade\Documents\Meus vídeos 2016-05-17 15:05 - 2016-05-17 15:05 - 00000000 _SHDL C:\Users\Victor Andrade\Dados de aplicativos 2016-05-17 15:05 - 2016-05-17 15:05 - 00000000 _SHDL C:\Users\Victor Andrade\Configurações locais 2016-05-17 15:05 - 2016-05-17 15:05 - 00000000 _SHDL C:\Users\Victor Andrade\AppData\Roaming\Microsoft\Windows\Start Menu\Programas 2016-05-17 15:05 - 2016-05-17 15:05 - 00000000 _SHDL C:\Users\Victor Andrade\AppData\Local\Histórico 2016-05-17 15:05 - 2016-05-17 15:05 - 00000000 _SHDL C:\Users\Victor Andrade\AppData\Local\Dados de aplicativos 2016-05-17 15:05 - 2016-05-17 15:05 - 00000000 _SHDL C:\Users\Victor Andrade\Ambiente de rede 2016-05-17 15:05 - 2016-05-17 15:05 - 00000000 _SHDL C:\Users\Victor Andrade\Ambiente de impressão 2016-05-17 15:05 - 2016-05-17 15:05 - 00000000 _SHDL C:\Users\Usuário Padrão\Documents\Minhas músicas 2016-05-17 15:05 - 2016-05-17 15:05 - 00000000 _SHDL C:\Users\Usuário Padrão\Documents\Minhas imagens 2016-05-17 15:05 - 2016-05-17 15:05 - 00000000 _SHDL C:\Users\Usuário Padrão\Documents\Meus vídeos 2016-05-17 15:05 - 2016-05-17 15:05 - 00000000 _SHDL C:\Users\Usuário Padrão\AppData\Roaming\Microsoft\Windows\Start Menu\Programas 2016-05-17 15:05 - 2016-05-17 15:05 - 00000000 _SHDL C:\Users\Usuário Padrão\AppData\Local\Histórico 2016-05-17 15:05 - 2016-05-17 15:05 - 00000000 _SHDL C:\Users\Usuário Padrão\AppData\Local\Dados de aplicativos 2016-05-17 15:05 - 2016-05-17 15:05 - 00000000 _SHDL C:\Users\Usuário Padrão 2016-05-17 15:05 - 2016-05-17 15:05 - 00000000 _SHDL C:\Users\Todos os Usuários\Modelos 2016-05-17 15:05 - 2016-05-17 15:05 - 00000000 _SHDL C:\Users\Todos os Usuários\Menu Iniciar 2016-05-17 15:05 - 2016-05-17 15:05 - 00000000 _SHDL C:\Users\Todos os Usuários\Favoritos 2016-05-17 15:05 - 2016-05-17 15:05 - 00000000 _SHDL C:\Users\Todos os Usuários\Documentos 2016-05-17 15:05 - 2016-05-17 15:05 - 00000000 _SHDL C:\Users\Todos os Usuários\Dados de aplicativos 2016-05-17 15:05 - 2016-05-17 15:05 - 00000000 _SHDL C:\Users\Todos os Usuários 2016-05-17 15:05 - 2016-05-17 15:05 - 00000000 _SHDL C:\Users\Public\Documents\Minhas músicas 2016-05-17 15:05 - 2016-05-17 15:05 - 00000000 _SHDL C:\Users\Public\Documents\Minhas imagens 2016-05-17 15:05 - 2016-05-17 15:05 - 00000000 _SHDL C:\Users\Public\Documents\Meus vídeos 2016-05-17 15:05 - 2016-05-17 15:05 - 00000000 _SHDL C:\Users\Default\Modelos 2016-05-17 15:05 - 2016-05-17 15:05 - 00000000 _SHDL C:\Users\Default\Meus documentos 2016-05-17 15:05 - 2016-05-17 15:05 - 00000000 _SHDL C:\Users\Default\Menu Iniciar 2016-05-17 15:05 - 2016-05-17 15:05 - 00000000 _SHDL C:\Users\Default\Documents\Minhas músicas 2016-05-17 15:05 - 2016-05-17 15:05 - 00000000 _SHDL C:\Users\Default\Documents\Minhas imagens 2016-05-17 15:05 - 2016-05-17 15:05 - 00000000 _SHDL C:\Users\Default\Documents\Meus vídeos 2016-05-17 15:05 - 2016-05-17 15:05 - 00000000 _SHDL C:\Users\Default\Dados de aplicativos 2016-05-17 15:05 - 2016-05-17 15:05 - 00000000 _SHDL C:\Users\Default\Configurações locais 2016-05-17 15:05 - 2016-05-17 15:05 - 00000000 _SHDL C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programas 2016-05-17 15:05 - 2016-05-17 15:05 - 00000000 _SHDL C:\Users\Default\AppData\Local\Histórico 2016-05-17 15:05 - 2016-05-17 15:05 - 00000000 _SHDL C:\Users\Default\AppData\Local\Dados de aplicativos 2016-05-17 15:05 - 2016-05-17 15:05 - 00000000 _SHDL C:\Users\Default\Ambiente de rede 2016-05-17 15:05 - 2016-05-17 15:05 - 00000000 _SHDL C:\Users\Default\Ambiente de impressão 2016-05-17 15:05 - 2016-05-17 15:05 - 00000000 _SHDL C:\Users\Default User\Documents\Minhas músicas 2016-05-17 15:05 - 2016-05-17 15:05 - 00000000 _SHDL C:\Users\Default User\Documents\Minhas imagens 2016-05-17 15:05 - 2016-05-17 15:05 - 00000000 _SHDL C:\Users\Default User\Documents\Meus vídeos 2016-05-17 15:05 - 2016-05-17 15:05 - 00000000 _SHDL C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programas 2016-05-17 15:05 - 2016-05-17 15:05 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Histórico 2016-05-17 15:05 - 2016-05-17 15:05 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Dados de aplicativos 2016-05-17 15:05 - 2016-05-17 15:05 - 00000000 _SHDL C:\ProgramData\Modelos 2016-05-17 15:05 - 2016-05-17 15:05 - 00000000 _SHDL C:\ProgramData\Microsoft\Windows\Start Menu\Programas 2016-05-17 15:05 - 2016-05-17 15:05 - 00000000 _SHDL C:\ProgramData\Menu Iniciar 2016-05-17 15:05 - 2016-05-17 15:05 - 00000000 _SHDL C:\ProgramData\Favoritos 2016-05-17 15:05 - 2016-05-17 15:05 - 00000000 _SHDL C:\ProgramData\Documentos 2016-05-17 15:05 - 2016-05-17 15:05 - 00000000 _SHDL C:\ProgramData\Dados de aplicativos 2016-05-17 15:05 - 2016-05-17 15:05 - 00000000 _SHDL C:\Program Files\Common Files\Sistema 2016-05-17 15:05 - 2016-05-17 15:05 - 00000000 _SHDL C:\Program Files\Arquivos Comuns 2016-05-17 15:05 - 2016-05-17 15:05 - 00000000 _SHDL C:\Arquivos de Programas 2016-05-17 15:05 - 2009-07-14 04:48 - 00000000 ____D C:\Users\Victor Andrade\AppData\Roaming\Media Center Programs 2016-05-17 15:03 - 2016-05-17 15:03 - 00001345 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Media Center.lnk 2016-05-17 15:03 - 2016-05-17 15:03 - 00001326 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows DVD Maker.lnk ==================== Um Mês Modificados arquivos e pastas ======== (Se uma entrada for incluída na fixlist, o arquivo/pasta será movido.) 2016-06-04 13:04 - 2009-07-29 15:46 - 00654272 _____ C:\Windows\system32\prfh0416.dat 2016-06-04 13:04 - 2009-07-29 15:46 - 00124724 _____ C:\Windows\system32\prfc0416.dat 2016-06-04 13:04 - 2009-07-13 23:37 - 00000000 ____D C:\Windows\inf 2016-06-04 12:59 - 2009-07-14 01:53 - 00000006 ____H C:\Windows\Tasks\SA.DAT 2016-06-04 12:58 - 2009-07-14 01:34 - 00009584 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2016-06-04 12:58 - 2009-07-14 01:34 - 00009584 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2016-05-31 11:04 - 2009-07-13 23:37 - 00000000 __RHD C:\Users\Public\Libraries 2016-05-17 19:58 - 2009-07-14 01:52 - 00028672 _____ C:\Windows\system32\config\BCD-Template 2016-05-17 16:11 - 2009-07-14 01:33 - 00413368 _____ C:\Windows\system32\FNTCACHE.DAT 2016-05-17 15:49 - 2009-07-14 04:49 - 00000000 ____D C:\Windows\ShellNew 2016-05-17 15:49 - 2009-07-14 01:52 - 00000000 ____D C:\Program Files\MSBuild 2016-05-17 15:49 - 2009-07-13 23:37 - 00000000 ____D C:\Program Files\Common Files\microsoft shared 2016-05-17 15:47 - 2009-07-13 23:37 - 00000000 ____D C:\Program Files\Common Files\System 2016-05-17 15:47 - 2009-07-13 23:04 - 00000478 _____ C:\Windows\win.ini 2016-05-17 15:39 - 2009-07-13 20:40 - 00410624 _____ (Microsoft Corporation) C:\Windows\system32\systemcpl.dll 2016-05-17 15:39 - 2009-07-13 20:36 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\slwga.dll 2016-05-17 15:38 - 2009-07-13 20:24 - 00811520 _____ (Microsoft Corporation) C:\Windows\system32\user32.dll 2016-05-17 15:06 - 2009-07-13 23:37 - 00000000 ____D C:\Windows\rescache 2016-05-17 15:05 - 2009-07-13 23:37 - 00000000 ____D C:\Program Files\Windows NT 2016-05-17 15:03 - 2009-07-14 01:52 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games 2016-05-17 15:02 - 2009-07-13 23:37 - 00000000 ____D C:\Windows\system32\sysprep 2016-05-17 15:01 - 2009-07-14 04:49 - 00000000 ____D C:\Windows\CSC ==================== Arquivos na raiz de alguns diretórios ======= 2016-05-20 14:53 - 2016-05-20 14:54 - 0001356 _____ () C:\Users\Victor Andrade\AppData\Roaming\Bubble Dock.boostrap.log 2016-05-20 14:54 - 2016-05-20 14:54 - 0005765 _____ () C:\Users\Victor Andrade\AppData\Roaming\Bubble Dock.installation.log 2016-05-20 14:53 - 2016-05-20 14:53 - 0000097 _____ () C:\Users\Victor Andrade\AppData\Roaming\WindApp.boostrap.log Alguns arquivos em TEMP: ==================== C:\Users\Victor Andrade\AppData\Local\Temp\Uninstall.exe C:\Users\Victor Andrade\AppData\Local\Temp\vcredist_2015_Update_1_x86.exe ==================== Bamital & volsnap ================= (Não há correção automática para arquivos que não passaram na verificação.) C:\Windows\explorer.exe => O arquivo é assinado digitalmente C:\Windows\system32\winlogon.exe => O arquivo é assinado digitalmente C:\Windows\system32\wininit.exe => O arquivo é assinado digitalmente C:\Windows\system32\svchost.exe => O arquivo é assinado digitalmente C:\Windows\system32\services.exe => O arquivo é assinado digitalmente C:\Windows\system32\User32.dll [2009-07-13 20:24] - [2016-05-17 15:38] - 0811520 ____A (Microsoft Corporation) 8626F0C30D4E3564FFDD25C90F4426F1 C:\Windows\system32\userinit.exe => O arquivo é assinado digitalmente C:\Windows\system32\rpcss.dll => O arquivo é assinado digitalmente C:\Windows\system32\dnsapi.dll => O arquivo é assinado digitalmente C:\Windows\system32\Drivers\volsnap.sys => O arquivo é assinado digitalmente LastRegBack: 2016-05-28 08:10 ==================== Fim de FRST.txt ============================