Publicité
Publicité
Format du document : text/plain
Prévisualisation
Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 02-06-2017
Ran by igor (administrator) on IGAMES (04-06-2017 04:04:30)
Running from C:\Users\igor\Downloads
Loaded Profiles: igor (Available Profiles: igor & Administrator)
Platform: Microsoft Windows 10 Pro Version 1511 (X86) Language: Inglês (Estados Unidos)
Internet Explorer Version 11 (Default browser: Chrome)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(Advanced Micro Devices, Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe
(Hi-Rez Studios) C:\Program Files\Hi-Rez Studios\HiPatchService.exe
(AnchorFree Inc.) C:\Program Files\Hotspot Shield\bin\cmw_srv.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MsMpEng.exe
(TeamViewer GmbH) C:\Program Files\TeamViewer\TeamViewer_Service.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\NisSrv.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
(Skillbrains) C:\Program Files\Skillbrains\lightshot\5.4.0.10\Lightshot.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe
(Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jusched.exe
(Wondershare) C:\Program Files\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe
(Akamai Technologies, Inc.) C:\Users\igor\AppData\Local\Akamai\netsession_win.exe
(Akamai Technologies, Inc.) C:\Users\igor\AppData\Local\Akamai\netsession_win.exe
(Skype Technologies S.A.) C:\Program Files\Skype\Phone\Skype.exe
(Spotify Ltd) C:\Users\igor\AppData\Roaming\Spotify\SpotifyWebHelper.exe
(Advanced Micro Devices Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(ATI Technologies Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(LogMeIn, Inc.) C:\Program Files\LogMeIn Hamachi\LMIGuardianSvc.exe
(LogMeIn Inc.) C:\Program Files\LogMeIn Hamachi\hamachi-2.exe
(LogMeIn Inc.) C:\Program Files\LogMeIn Hamachi\hamachi-2-ui.exe
(Microsoft Corporation) C:\Windows\System32\InstallAgent.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jucheck.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
() C:\Program Files\WindowsApps\Microsoft.Messaging_2.15.20002.0_x86__8wekyb3d8bbwe\SkypeHost.exe
(Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ink\InputPersonalization.exe
(Skype Technologies) C:\Program Files\Skype\Browser\SkypeBrowserHost.exe
(Skype Technologies) C:\Program Files\Skype\Browser\SkypeBrowserHost.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
==================== Registry (Whitelisted) ====================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [Lightshot] => C:\Program Files\Skillbrains\lightshot\Lightshot.exe [225944 2016-07-11] ()
HKLM\...\Run: [GrooveMonitor] => C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe [31016 2006-10-27] (Microsoft Corporation)
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe [14688512 2016-03-31] (Realtek Semiconductor)
HKLM\...\Run: [StartCCC] => C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [642304 2013-04-24] (Advanced Micro Devices, Inc.)
HKLM\...\Run: [SunJavaUpdateSched] => C:\Program Files\Common Files\Java\Java Update\jusched.exe [587288 2016-09-22] (Oracle Corporation)
HKLM\...\Run: [Wondershare Helper Compact.exe] => C:\Program Files\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe [2137744 2016-10-08] (Wondershare)
HKLM\...\Run: [LogMeIn Hamachi Ui] => C:\Program Files\LogMeIn Hamachi\hamachi-2-ui.exe [6153128 2017-05-22] (LogMeIn Inc.)
HKU\S-1-5-21-3367511352-2360419363-1728341779-1001\...\Run: [uTorrent] => C:\Users\igor\AppData\Roaming\uTorrent\uTorrent.exe [1980608 2017-05-23] (BitTorrent Inc.)
HKU\S-1-5-21-3367511352-2360419363-1728341779-1001\...\Run: [DAEMON Tools Lite] => C:\Program Files\DAEMON Tools Lite\DTLite.exe [3696912 2014-03-04] (Disc Soft Ltd)
HKU\S-1-5-21-3367511352-2360419363-1728341779-1001\...\Run: [Akamai NetSession Interface] => C:\Users\igor\AppData\Local\Akamai\netsession_win.exe [4490200 2017-01-03] (Akamai Technologies, Inc.)
HKU\S-1-5-21-3367511352-2360419363-1728341779-1001\...\Run: [EvolveClient] => C:\Program Files\Echobit\Evolve\EvolveClient.exe [3334528 2016-12-30] (Echobit LLC)
HKU\S-1-5-21-3367511352-2360419363-1728341779-1001\...\Run: [Skype] => C:\Program Files\Skype\Phone\Skype.exe [27793888 2017-05-05] (Skype Technologies S.A.)
HKU\S-1-5-21-3367511352-2360419363-1728341779-1001\...\Run: [Spotify] => C:\Users\igor\AppData\Roaming\Spotify\Spotify.exe [7064176 2017-04-22] (Spotify Ltd)
HKU\S-1-5-21-3367511352-2360419363-1728341779-1001\...\Run: [Spotify Web Helper] => C:\Users\igor\AppData\Roaming\Spotify\SpotifyWebHelper.exe [1446000 2017-04-22] (Spotify Ltd)
HKU\S-1-5-21-3367511352-2360419363-1728341779-1001\...\Policies\Explorer: [NoLowDiskSpaceChecks] 1
HKU\S-1-5-21-3367511352-2360419363-1728341779-1001\...\MountPoints2: {77457b42-1083-11e4-9725-94de802e083d} - "F:\LGAutoRun.exe"
HKU\S-1-5-21-3367511352-2360419363-1728341779-1001\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\WINDOWS\System32\lol.scr
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\SketchBook Snapshot.lnk [2017-06-04]
ShortcutTarget: SketchBook Snapshot.lnk -> C:\Program Files\Autodesk\SketchBook Pro 6\SketchBookSnapshot.exe (Autodesk Inc)
Startup: C:\Users\igor\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Curse.lnk [2014-07-09]
ShortcutTarget: Curse.lnk -> C:\Users\igor\AppData\Roaming\Curse Client\Bin\Curse.exe (Curse, Inc)
Startup: C:\Users\igor\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Recorte de tela e Iniciador do OneNote 2007.lnk [2015-10-06]
ShortcutTarget: Recorte de tela e Iniciador do OneNote 2007.lnk -> C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE (Microsoft Corporation)
GroupPolicy: Restriction ? <======= ATTENTION
GroupPolicyScripts: Restriction <======= ATTENTION
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
Tcpip\Parameters: [DhcpNameServer] 177.154.192.2 177.154.192.3
Tcpip\..\Interfaces\{4b592e53-c0d0-4853-9fe3-60bff836d094}: [DhcpNameServer] 177.154.192.2 177.154.192.3
Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://go.microsoft.com/fwlink/?LinkID=617910&ResetID=131043062097701048&GUID=F093FC73-B5F1-4002-85D4-4C816B8C00D3
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.google.com
BHO: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll [2006-10-27] (Microsoft Corporation)
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_111\bin\ssv.dll [2016-12-30] (Oracle Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_111\bin\jp2ssv.dll [2016-12-30] (Oracle Corporation)
Handler: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll [2006-10-27] (Microsoft Corporation)
FireFox:
========
FF DefaultProfile: wf4mjr2x.default
FF ProfilePath: C:\Users\igor\AppData\Roaming\Mozilla\Firefox\Profiles\wf4mjr2x.default [2017-05-17]
FF Homepage: Mozilla\Firefox\Profiles\wf4mjr2x.default -> hxxp://maisdowns.com
FF Extension: (Video AdBlock) - C:\Users\igor\AppData\Roaming\Mozilla\Firefox\Profiles\wf4mjr2x.default\Extensions\{7b8a500a-a464-4624-bd4f-73eaafe0f766} [2016-12-10]
FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF32_25_0_0_171.dll [2017-05-11] ()
FF Plugin: @adobe.com/ShockwavePlayer -> C:\WINDOWS\system32\Adobe\Director\np32dsw_1228198.dll [2017-02-27] (Adobe Systems, Inc.)
FF Plugin: @java.com/DTPlugin,version=11.111.2 -> C:\Program Files\Java\jre1.8.0_111\bin\dtplugin\npDeployJava1.dll [2016-12-30] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.111.2 -> C:\Program Files\Java\jre1.8.0_111\bin\plugin2\npjp2.dll [2016-12-30] (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.41212.0\npctrl.dll [2015-12-11] ( Microsoft Corporation)
FF Plugin: @microsoft.com/WLPG,version=16.4.3528.0331 -> C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll [2014-03-31] (Microsoft Corporation)
FF Plugin: @ogplanet.com/npOGPPlugin -> C:\WINDOWS\system32\npOGPPlugin.dll [2009-11-19] (OGPlanet)
FF Plugin: @raidcall.en/RCplugin -> C:\Users\igor\AppData\Roaming\raidcall\plugins\nprcplugin.dll [2014-12-23] (Raidcall)
FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-04-29] (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-04-29] (Google Inc.)
FF Plugin: @virtools.com/3DviaPlayer -> C:\Program Files\Virtools\3D Life Player\npvirtools.dll [2012-04-05] (Dassault Systèmes)
FF Plugin HKU\S-1-5-21-3367511352-2360419363-1728341779-1001: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\igor\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll [2015-06-08] (Unity Technologies ApS)
Chrome:
=======
CHR HomePage: Default -> hxxp://search.babylon.com/?affID=110823&tt=120912_pcp_3912_3&babsrc=HP_ss&mntrId=ec5ed625000000000000001a3f58a79c
CHR StartupUrls: Default -> "hxxps://www.google.com.br/"
CHR Profile: C:\Users\igor\AppData\Local\Google\Chrome\User Data\Default [2017-06-04]
CHR Extension: (Google Apresentações) - C:\Users\igor\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2017-05-09]
CHR Extension: (Google Docs) - C:\Users\igor\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2017-05-09]
CHR Extension: (Google Drive) - C:\Users\igor\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2016-04-24]
CHR Extension: (YouTube) - C:\Users\igor\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2016-04-24]
CHR Extension: (Planilhas do Google) - C:\Users\igor\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2017-05-09]
CHR Extension: (Radiant Community Extension) - C:\Users\igor\AppData\Local\Google\Chrome\User Data\Default\Extensions\gfffnbhinkdleedlodeeodpaipoeonoa [2017-01-25]
CHR Extension: (AdBlock) - C:\Users\igor\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2017-04-13]
CHR Extension: (Pagamentos da Chrome Web Store) - C:\Users\igor\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2017-03-09]
CHR Extension: (Gmail) - C:\Users\igor\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2016-04-24]
CHR Extension: (Chrome Media Router) - C:\Users\igor\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2017-05-12]
CHR HKLM\...\Chrome\Extension: [hegneaniplmfjcmohoclabblbahcbjoe] - hxxp://clients2.google.com/service/update2/crx
CHR HKU\S-1-5-21-3367511352-2360419363-1728341779-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [hegneaniplmfjcmohoclabblbahcbjoe] - hxxp://clients2.google.com/service/update2/crx
Opera:
=======
OPR StartupUrls: "hxxp://maisdowns.com/"
==================== Services (Whitelisted) ====================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
R2 AMD FUEL Service; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [291840 2013-04-29] (Advanced Micro Devices, Inc.) [File not signed]
S3 EasyAntiCheat; C:\WINDOWS\system32\EasyAntiCheat.exe [243984 2016-02-19] (EasyAntiCheat Ltd)
S3 EvoSvc; C:\Program Files\Echobit\Evolve\EvoSvc.exe [1583488 2016-12-30] (Echobit LLC)
R2 Hamachi2Svc; C:\Program Files\LogMeIn Hamachi\hamachi-2.exe [2616744 2017-05-22] (LogMeIn Inc.)
U2 HiPatchService; C:\Program Files\Hi-Rez Studios\HiPatchService.exe [9728 2016-11-15] (Hi-Rez Studios) [File not signed]
R2 hshld; C:\Program Files\Hotspot Shield\bin\cmw_srv.exe [2718840 2016-10-13] (AnchorFree Inc.)
S3 HssTrayService; C:\Program Files\Hotspot Shield\bin\HssTrayService.exe [103168 2016-10-13] ()
S3 IDriverT; C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [69632 2005-04-04] (Macrovision Corporation) [File not signed]
R2 LMIGuardianSvc; C:\Program Files\LogMeIn Hamachi\LMIGuardianSvc.exe [405424 2016-05-27] (LogMeIn, Inc.)
S3 npggsvc; C:\WINDOWS\system32\GameMon.des [3367256 2014-11-23] (INCA Internet Co., Ltd.)
S3 Origin Client Service; C:\Program Files\Origin\OriginClientService.exe [2120712 2016-05-10] (Electronic Arts)
S2 Service KMSELDI; C:\Program Files\KMSpico\Service_KMS.exe [977088 2014-03-02] () [File not signed]
R2 TeamViewer; C:\Program Files\TeamViewer\TeamViewer_Service.exe [7032080 2016-05-12] (TeamViewer GmbH)
S3 TunngleService; C:\Program Files\Tunngle\TnglCtrl.exe [818672 2016-05-11] (Tunngle.net GmbH)
R3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [280376 2015-10-30] (Microsoft Corporation)
R2 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23264 2016-10-25] (Microsoft Corporation)
S2 LiveUpdateSvc; C:\Program Files\IObit\LiveUpdate\LiveUpdate.exe [X]
S2 SpyHunter 4 Service; C:\PROGRA~1\Enigma Software Group\SpyHunter\SH4Service.exe [X]
===================== Drivers (Whitelisted) ======================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
R3 AFTrafMgr1.1; C:\Program Files\Hotspot Shield\bin\TrafMgr_1_1_32.sys [47544 2016-10-04] (AnchorFree Inc.)
R0 amd_sata; C:\WINDOWS\System32\drivers\amd_sata.sys [70856 2016-03-31] (Advanced Micro Devices)
R0 amd_xata; C:\WINDOWS\System32\drivers\amd_xata.sys [20680 2016-03-31] (Advanced Micro Devices)
R2 AODDriver4.2.0; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\i386\AODDriver2.sys [45184 2012-03-05] (Advanced Micro Devices)
S3 DrvAgent32; C:\WINDOWS\system32\Drivers\DrvAgent32.sys [23456 2014-07-04] (Phoenix Technologies) [File not signed]
R1 dtsoftbus01; C:\WINDOWS\System32\drivers\dtsoftbus01.sys [243128 2016-03-31] (Disc Soft Ltd)
R1 ElRawDisk; C:\WINDOWS\system32\drivers\rsdrv.sys [22312 2009-02-12] (EldoS Corporation)
S3 EsgScanner; C:\WINDOWS\System32\DRIVERS\EsgScanner.sys [19984 2016-04-24] ()
R3 EvolveVirtualAdapter; C:\WINDOWS\System32\drivers\evolve.sys [18584 2016-12-19] (Echobit, LLC)
R3 Hamachi; C:\WINDOWS\system32\DRIVERS\Hamdrv.sys [38512 2016-03-22] (LogMeIn Inc.)
R1 HWiNFO32; C:\WINDOWS\system32\drivers\HWiNFO32.SYS [23840 2016-03-31] (REALiX(tm))
R3 rt640x86; C:\WINDOWS\System32\drivers\rt640x86.sys [789248 2016-03-31] (Realtek )
R2 SecDrv; C:\WINDOWS\system32\drivers\SECDRV.SYS [163644 2016-11-27] (Macrovision Corporation, Macrovision Europe Limited, and Macrovision Japan and Asia K.K.) [File not signed]
S3 SWDUMon; C:\WINDOWS\system32\DRIVERS\SWDUMon.sys [13464 2014-10-24] ()
S3 tap0901; C:\WINDOWS\system32\DRIVERS\tap0901.sys [35288 2013-08-22] (The OpenVPN Project)
S3 tap0901t; C:\WINDOWS\System32\drivers\tap0901t.sys [44216 2016-04-26] (Tunngle.net GmbH)
S3 taphss6; C:\WINDOWS\System32\drivers\taphss6.sys [36944 2016-06-28] (Anchorfree Inc.)
S3 TesSafe; C:\WINDOWS\system32\TesSafe.sys [964600 2014-07-05] (TENCENT)
R1 VBoxUSBMon; C:\WINDOWS\system32\DRIVERS\VBoxUSBMon.sys [104064 2016-07-29] (BigNox Corporation)
S0 WdBoot; C:\WINDOWS\System32\drivers\WdBoot.sys [37400 2015-10-30] (Microsoft Corporation)
R0 WdFilter; C:\WINDOWS\System32\drivers\WdFilter.sys [246104 2015-10-30] (Microsoft Corporation)
R3 WdNisDrv; C:\WINDOWS\System32\Drivers\WdNisDrv.sys [98648 2015-10-30] (Microsoft Corporation)
S3 WinDivert1.1; C:\Program Files\KMSpico\WinDivert.sys [30256 2015-08-26] (Basil Projects)
S3 WUDFWpdMtp; C:\WINDOWS\system32\DRIVERS\WUDFRd.sys [163328 2015-10-30] (Microsoft Corporation)
R1 XQHDrv; C:\WINDOWS\system32\DRIVERS\XQHDrv.sys [203392 2017-02-07] (BigNox Corporation)
==================== NetSvcs (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
==================== Three Months Created files and folders ========
(If an entry is included in the fixlist, the file/folder will be moved.)
2017-06-04 04:04 - 2017-06-04 04:06 - 00017579 _____ C:\Users\igor\Downloads\FRST.txt
2017-06-04 04:02 - 2017-06-04 04:04 - 00000000 ____D C:\FRST
2017-06-04 04:02 - 2017-06-04 04:02 - 01774080 _____ (Farbar) C:\Users\igor\Downloads\FRST.exe
2017-06-04 03:21 - 2017-06-04 03:21 - 00103858 _____ C:\Users\igor\Desktop\Image002.tif
2017-06-04 01:03 - 2017-06-04 01:03 - 00002136 _____ C:\Users\Public\Desktop\SketchBook Pro 6.lnk
2017-06-04 01:03 - 2017-06-04 01:03 - 00000000 ____D C:\Users\igor\AppData\Roaming\Autodesk
2017-06-04 01:03 - 2017-06-04 01:03 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Autodesk
2017-06-04 01:03 - 2017-06-04 01:03 - 00000000 ____D C:\ProgramData\Alias
2017-06-04 01:02 - 2017-06-04 01:02 - 00000000 ____D C:\Program Files\Autodesk
2017-06-04 00:58 - 2017-06-04 00:58 - 00000000 ____D C:\Autodesk
2017-06-04 00:56 - 2017-06-04 00:56 - 30339052 _____ C:\Users\igor\Downloads\AUTODESK_SKETCHBOOK_PRO_V6.0-XFORCE.rar
2017-06-03 20:20 - 2017-06-03 20:22 - 00000000 ____D C:\Users\igor\Desktop\IGG-Doodle.God.v3.1.52
2017-06-03 20:19 - 2017-06-03 20:19 - 275219697 _____ C:\Users\igor\Downloads\Doodllll33.Goddd.v3.1.52.rar
2017-06-03 17:03 - 2017-06-03 17:03 - 00000975 _____ C:\Users\Public\Desktop\LogMeIn Hamachi.lnk
2017-06-03 17:03 - 2017-06-03 17:03 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LogMeIn Hamachi
2017-06-03 17:03 - 2017-06-03 17:03 - 00000000 ____D C:\Program Files\LogMeIn Hamachi
2017-06-03 17:01 - 2017-06-03 17:04 - 00000170 _____ C:\Users\Default\BullseyeCoverageError.txt
2017-06-02 22:18 - 2017-06-02 22:18 - 19218703 _____ C:\Users\igor\Downloads\gcw_patch_manual_001.zip
2017-06-02 22:14 - 2017-06-02 22:14 - 00001105 _____ C:\Users\Public\Desktop\Grand Chase Way.lnk
2017-06-02 22:14 - 2017-06-02 22:14 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Grand Chase Way
2017-06-02 22:09 - 2017-06-02 22:09 - 00000000 ____D C:\Program Files\Grand Chase Way
2017-06-02 21:08 - 2017-06-02 21:08 - 00000000 ____D C:\Users\igor\AppData\LocalLow\uTorrent
2017-06-02 21:07 - 2017-06-02 21:08 - 00018775 _____ C:\Users\igor\Downloads\GrandChaseWay_v17052017.zip.torrent
2017-06-02 05:03 - 2017-03-30 22:54 - 00000000 ____D C:\Users\igor\Desktop\EarntoDie2_v1.04
2017-06-02 05:02 - 2017-06-02 05:02 - 182269476 _____ C:\Users\igor\Downloads\EarntoDie2_v1.04.zip
2017-05-31 12:11 - 2017-05-31 12:11 - 00001078 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Opera.lnk
2017-05-30 07:33 - 2017-05-30 07:34 - 00381189 _____ C:\Users\igor\Desktop\18794753_1702239700077940_1523053733112446976_n.mp4
2017-05-28 21:46 - 2017-05-28 21:46 - 00639711 _____ C:\Users\igor\Downloads\zsnesw142.zip
2017-05-28 21:30 - 2017-05-28 21:30 - 00750428 _____ C:\Users\igor\Downloads\Biker Mice from Mars (USA).zip
2017-05-27 21:29 - 2017-06-02 22:23 - 00000000 ____D C:\Users\igor\Desktop\Nova pasta (4)
2017-05-27 21:26 - 2017-05-27 21:29 - 73161572 _____ C:\Users\igor\Downloads\Wadanohara_103.zip
2017-05-26 21:20 - 2017-05-26 21:21 - 318228940 _____ C:\Users\igor\Downloads\Dead.Cells.v15.05.2017.zip
2017-05-26 04:56 - 2017-05-26 21:25 - 00000000 ____D C:\Program Files\XD Network Inc
2017-05-24 20:46 - 2017-05-24 20:46 - 00000000 ____D C:\Users\igor\Documents\Reus
2017-05-24 20:42 - 2017-05-26 05:24 - 00000000 ____D C:\Users\igor\Desktop\Reus
2017-05-24 20:39 - 2017-05-24 20:40 - 380252603 _____ C:\Users\igor\Downloads\Reus.v1.5.3.0.Multi9.Cracked-3DM.zip
2017-05-23 19:11 - 2017-05-23 19:11 - 00002017 _____ C:\Users\Public\Desktop\Shantae and the Pirate's Curse.lnk
2017-05-23 19:11 - 2017-05-23 19:11 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Shantae and the Pirate's Curse [GOG.com]
2017-05-23 19:02 - 2017-05-23 19:02 - 00036550 _____ C:\Users\igor\Downloads\Shantae.and.the.Pirates.Curse-GOG.torrent
2017-05-23 07:18 - 2017-05-23 07:18 - 00002509 _____ C:\Users\Public\Desktop\Life Is Strange Complete Season.lnk
2017-05-23 07:18 - 2017-05-23 07:18 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Life Is Strange Complete Season (EP. 1-5)
2017-05-23 07:00 - 2017-05-23 07:01 - 23518648 _____ (Disc Soft Ltd) C:\Users\igor\Downloads\DTLite1040-0190.exe
2017-05-23 06:58 - 2017-05-23 06:58 - 00017111 _____ C:\Users\igor\Downloads\[kickass.to]shantae.and.the.pirate.s.curse.torrent
2017-05-23 04:12 - 2017-05-23 04:12 - 00776291 _____ C:\Users\igor\Downloads\Trad-TodosEps-LIS-ByStiff.rar
2017-05-23 04:11 - 2017-05-23 04:11 - 00023975 _____ C:\Users\igor\Downloads\LIS-Final-ByStiff.torrent
2017-05-18 23:21 - 2017-05-18 23:21 - 00000000 ____D C:\Users\igor\AppData\LocalLow\SmashGames
2017-05-18 23:04 - 2017-05-18 23:04 - 26564772 _____ C:\Users\igor\Downloads\Kindergartev0.9.rar
2017-05-17 21:24 - 2017-05-17 21:24 - 00001290 _____ C:\Users\igor\Desktop\Freejack.lnk
2017-05-17 20:25 - 2017-05-17 20:46 - 823290827 _____ C:\Users\igor\Downloads\zenit_freejack.exe
2017-05-16 04:52 - 2017-05-16 04:52 - 57452324 _____ C:\Users\igor\Downloads\30-sai no Hoken Taiiku 01_YoshidaDownloads.mkv
2017-05-16 04:47 - 2017-05-16 04:47 - 00202849 _____ C:\Users\igor\Downloads\Não confirmado 446991.crdownload
2017-05-12 06:52 - 2017-05-12 06:54 - 00000000 ____D C:\Users\igor\AppData\Local\Adobe
2017-05-09 07:05 - 2017-05-09 07:05 - 00000000 ____D C:\Program Files\Common Files\Skype
2017-05-09 03:48 - 2017-05-09 03:48 - 00000000 ____D C:\Users\igor\AppData\Roaming\Google
2017-05-09 03:37 - 2017-05-09 03:38 - 00042558 _____ C:\native log.txt
2017-05-09 01:45 - 2017-05-09 03:37 - 00048093 _____ C:\spyhunter.fix
2017-05-09 01:45 - 2017-05-09 01:45 - 00000000 ___HD C:\9qvDTIamTSfpZzLf
2017-05-08 21:23 - 2017-05-09 03:37 - 00000000 ____D C:\Program Files\SpyHunter Malware Security Suite
2017-05-08 21:23 - 2017-05-08 21:23 - 00001250 _____ C:\Users\Public\Desktop\SpyHunter.lnk
2017-05-08 21:23 - 2017-05-08 21:23 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SpyHunter Malware
2017-05-08 21:22 - 2017-05-06 18:38 - 00000000 ____D C:\Users\igor\Desktop\SpyHunter.4.25.6.4782
2017-05-08 18:41 - 2017-05-08 20:13 - 00000000 ____D C:\Users\igor\Desktop\Nova pasta
2017-05-08 18:39 - 2017-05-08 18:39 - 01156640 _____ C:\Users\igor\Downloads\Bokou Resource Pack - Voodoo.rar
2017-05-08 17:08 - 2017-05-08 17:08 - 00000000 ____D C:\ProgramData\Wondershare
2017-05-08 04:14 - 2017-05-08 04:14 - 00000000 ____D C:\Users\igor\AppData\Local\Wondershare
2017-05-08 04:13 - 2017-05-08 04:13 - 00001276 _____ C:\Users\Public\Desktop\Wondershare Filmora.lnk
2017-05-08 04:13 - 2017-05-08 04:13 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Wondershare
2017-05-08 04:13 - 2017-05-08 04:13 - 00000000 ____D C:\Program Files\Common Files\Wondershare
2017-05-08 04:11 - 2017-05-08 04:13 - 00000000 ____D C:\Users\igor\Documents\Wondershare Filmora
2017-05-08 04:11 - 2017-05-08 04:11 - 00000000 ____D C:\ProgramData\Wondershare Video Editor
2017-05-08 04:11 - 2017-05-08 04:11 - 00000000 ____D C:\Program Files\Wondershare
2017-05-08 04:09 - 2017-05-08 04:10 - 00000000 ____D C:\Users\Public\Documents\Wondershare
2017-05-08 04:08 - 2017-05-08 04:08 - 01066128 _____ C:\Users\igor\Downloads\filmora_setup_full846.exe
2017-05-06 12:45 - 2017-05-06 12:45 - 29627205 _____ C:\Users\igor\Downloads\ShowMiseraviPC.7z
2017-05-06 09:15 - 2017-05-06 09:15 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Lightshot
2017-05-06 05:33 - 2017-05-06 05:33 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\RTP2003
2017-05-06 05:33 - 1999-12-17 10:13 - 00086016 _____ (MindVision Software) C:\WINDOWS\unvise32.exe
2017-05-06 05:31 - 2017-05-06 05:31 - 131069480 _____ C:\Users\igor\Downloads\OFF+Tradução+RTP.zip
2017-05-06 04:56 - 2017-05-06 04:58 - 57942102 _____ C:\Users\igor\Downloads\O Amigo Salgadinho.rar
2017-05-06 03:28 - 2017-05-06 03:31 - 72247338 _____ C:\Users\igor\Downloads\Guardiões da Netureza (sRTP).rar
2017-05-05 05:00 - 2017-05-05 05:02 - 28803134 _____ C:\Users\igor\Downloads\A Saga BR.rar
2017-05-05 04:56 - 2017-05-05 05:06 - 166621069 _____ C:\Users\igor\Downloads\CDS3 Dos Deuseus aos Humanos v1.2.rar
2017-05-04 19:38 - 2017-05-04 19:38 - 01978632 _____ C:\Users\igor\Downloads\25.ogg
2017-05-04 00:17 - 2017-05-04 00:17 - 00179898 _____ C:\Users\igor\Downloads\Undertale_-_Him_W_D_Gaster_zippy_audio_.ogg
2017-05-04 00:13 - 2017-05-04 00:13 - 01824499 _____ C:\Users\igor\Downloads\Yasunori_Mitsuda-Peaceful_Days_Chrono_Trigger_www_ (1).ogg
2017-05-03 23:35 - 2017-05-03 23:35 - 01824499 _____ C:\Users\igor\Downloads\Yasunori_Mitsuda-Peaceful_Days_Chrono_Trigger_www_.ogg
2017-05-03 23:28 - 2017-05-03 23:28 - 00217175 _____ C:\Users\igor\Downloads\_flowey_theme_Mp3xd_tv_.ogg
2017-05-01 10:47 - 2017-05-01 10:47 - 00000000 ____D C:\Users\igor\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\RTP VX
2017-05-01 10:45 - 2017-05-01 10:46 - 43030849 _____ C:\Users\igor\Downloads\RMVX10-RTP.rar
2017-05-01 10:44 - 2017-05-01 10:44 - 00806912 _____ C:\Users\igor\Downloads\RGSS200E.dll
2017-05-01 10:38 - 2017-05-01 10:41 - 37120292 _____ C:\Users\igor\Downloads\Orca - A lenda dos mares.exe
2017-04-28 22:27 - 2017-04-28 22:27 - 05928360 _____ C:\Users\igor\Downloads\Old Fiora.wxy
2017-04-28 22:26 - 2017-04-28 22:26 - 00000000 ____D C:\Spacekace
2017-04-28 22:24 - 2017-04-28 22:25 - 01838144 _____ (Solvusoft) C:\Users\igor\Downloads\Setup_FileViewPro_2016.exe
2017-04-28 13:22 - 2017-04-28 13:22 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
2017-04-28 13:13 - 2017-04-28 13:16 - 00355958 _____ C:\Users\igor\Downloads\7-7_BR1-1062946430_01.mp4.crdownload
2017-04-28 11:56 - 2017-04-28 11:56 - 00000000 ____D C:\Program Files\GUM7E0D.tmp
2017-04-27 00:37 - 2017-04-27 00:38 - 14421010 _____ C:\Users\igor\Downloads\Wooxy_1_6_Portable.zip
2017-04-27 00:29 - 2017-04-27 00:30 - 08490710 _____ C:\Users\igor\Downloads\Traditional Fiora Pack.zip
2017-04-26 22:06 - 2017-05-19 19:13 - 00000000 ____D C:\Users\igor\AppData\Roaming\StardewValley
2017-04-26 22:04 - 2017-05-06 03:32 - 00000000 ____D C:\Users\igor\Desktop\Stardew.Valley.v1.2.25
2017-04-26 21:43 - 2017-04-26 21:44 - 345004744 _____ C:\Users\igor\Downloads\Stardew.Valley.v1.2.25.zip
2017-04-26 20:47 - 2017-04-26 20:47 - 00204547 _____ C:\Users\igor\Downloads\lame_enc.zip
2017-04-26 20:45 - 2017-04-26 20:45 - 00000000 ____D C:\Users\igor\Documents\Audacity
2017-04-26 20:35 - 2017-04-26 20:38 - 00917854 _____ C:\Users\igor\Downloads\videoplayback.m4a (1).crdownload
2017-04-26 20:14 - 2017-04-26 20:18 - 00603182 _____ C:\Users\igor\Downloads\videoplayback.m4a.crdownload
2017-04-26 20:12 - 2017-04-26 20:50 - 00000000 ____D C:\Users\igor\AppData\Roaming\audacity
2017-04-26 20:12 - 2017-04-26 20:12 - 00001050 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Audacity.lnk
2017-04-26 20:12 - 2017-04-26 20:12 - 00001038 _____ C:\Users\Public\Desktop\Audacity.lnk
2017-04-26 20:12 - 2017-04-26 20:12 - 00000000 ____D C:\Users\igor\AppData\Local\Audacity
2017-04-26 20:11 - 2017-04-26 20:12 - 00000000 ____D C:\Program Files\Audacity
2017-04-26 20:08 - 2017-04-26 20:10 - 27113272 _____ (Audacity Team ) C:\Users\igor\Downloads\audacity-win-2.1.3.exe
2017-04-26 20:08 - 2017-04-26 20:10 - 27113272 _____ (Audacity Team ) C:\Users\igor\Downloads\audacity-win-2.1.3 (1).exe
2017-04-24 14:40 - 2017-04-24 14:40 - 00001216 _____ C:\Users\igor\Desktop\AIDA64 Extreme.lnk
2017-04-24 14:40 - 2017-04-24 14:40 - 00000000 ____D C:\Program Files\FinalWire
2017-04-24 14:38 - 2017-04-24 14:40 - 16335712 _____ (FinalWire Ltd. ) C:\Users\igor\Downloads\aida64extreme570.exe
2017-04-23 16:38 - 2017-04-23 16:38 - 00119774 _____ C:\Users\igor\Downloads\k10stat.zip
2017-04-23 16:30 - 2017-04-23 16:30 - 31843088 _____ (Advanced Micro Devices, Inc. ) C:\Users\igor\Downloads\aod_setup_4.3.1.0698.exe
2017-04-23 16:30 - 2017-04-23 16:30 - 00000000 ____D C:\Users\igor\AppData\Local\Downloaded Installations
2017-04-23 15:59 - 2017-04-23 15:59 - 00001038 _____ C:\Users\Public\Desktop\CCleaner.lnk
2017-04-23 15:59 - 2017-04-23 15:59 - 00001010 _____ C:\Users\Public\Desktop\Speccy.lnk
2017-04-23 15:59 - 2017-04-23 15:59 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Speccy
2017-04-23 15:59 - 2017-04-23 15:59 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
2017-04-23 15:59 - 2017-04-23 15:59 - 00000000 ____D C:\Program Files\Speccy
2017-04-23 15:59 - 2017-04-23 15:59 - 00000000 ____D C:\Program Files\CCleaner
2017-04-23 15:56 - 2017-04-23 15:57 - 06293184 _____ (Piriform Ltd) C:\Users\igor\Downloads\spsetup130.exe
2017-04-22 20:07 - 2017-05-17 17:21 - 00000000 ____D C:\Users\igor\AppData\Local\Spotify
2017-04-22 20:07 - 2017-04-22 20:07 - 00001845 _____ C:\Users\igor\Desktop\Spotify.lnk
2017-04-22 20:07 - 2017-04-22 20:07 - 00001831 _____ C:\Users\igor\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Spotify.lnk
2017-04-22 20:04 - 2017-06-03 17:05 - 00000000 ____D C:\Users\igor\AppData\Roaming\Spotify
2017-04-22 20:04 - 2017-04-22 20:04 - 00668880 _____ (Spotify Ltd) C:\Users\igor\Downloads\SpotifySetup.exe
2017-04-20 21:14 - 2017-05-06 12:46 - 00000000 ___RD C:\Users\igor\Desktop\Sword Art Online Levels
2017-04-20 20:28 - 2017-04-20 20:28 - 00011799 _____ C:\Users\igor\Downloads\Sword Art Online Levels.rar.torrent
2017-04-18 16:32 - 2017-04-18 16:32 - 03716848 _____ C:\Users\igor\Downloads\CRIANÇA COM RAIVA - VIDEO OFICIAL - HIDROFOBIA LEIAM A DESCRIÇÃO DO VIDEO.mp4
2017-04-18 16:24 - 2017-04-18 16:24 - 03591164 _____ C:\Users\igor\Downloads\CRIANÇA COM RAIVA - VIDEO OFICIAL - HIDROFOBIA LEIAM A DESCRIÇÃO DO VIDEO.webm
2017-04-18 16:17 - 2017-04-18 16:18 - 20116096 _____ C:\Users\igor\Downloads\Raiva.mp4
2017-04-18 16:07 - 2017-04-18 16:08 - 13285791 _____ C:\Users\igor\Downloads\Raiva.webm
2017-04-17 20:45 - 2017-04-17 20:45 - 00000000 ____D C:\Echobit
2017-04-17 20:45 - 2017-04-17 20:45 - 00000000 ____D C:\DAEMON Tools Lite
2017-04-17 20:14 - 2017-04-17 20:14 - 02855273 _____ C:\Users\igor\Desktop\7-7_BR1-1062946430_01.webm
2017-04-15 19:38 - 2017-04-15 19:38 - 00001793 _____ C:\Users\Public\Desktop\Prison Architect.lnk
2017-04-15 19:38 - 2017-04-15 19:38 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Prison Architect [GOG.com]
2017-04-15 19:37 - 2017-04-15 19:40 - 00000000 ____D C:\Users\igor\AppData\Local\Introversion
2017-04-15 19:30 - 2017-04-15 19:36 - 00000000 ____D C:\Program Files\Konami Digital Entertainment Inc
2017-04-15 19:19 - 2017-04-15 19:20 - 807374829 _____ C:\Users\igor\Downloads\Yu.Gi.Oh.Legacy.of.the.Duelist.REPACK-SKIDROW.zip
2017-04-15 19:12 - 2017-04-15 19:14 - 723757407 _____ C:\Users\igor\Downloads\Prison.Architect.v2.16.0.20.Incl.Aficionado.DLC-GOG.zip
2017-04-15 19:06 - 2017-04-16 04:36 - 00000000 ____D C:\Users\igor\Desktop\Jogos da steam
2017-04-15 19:01 - 2017-04-15 19:10 - 149445199 _____ C:\Users\igor\Downloads\Empire_TV_Tycoon_v1.6.0.zip
2017-04-15 16:54 - 2017-04-15 16:54 - 00000000 ____D C:\Users\igor\AppData\Roaming\xsrs
2017-04-15 16:54 - 2017-04-15 16:54 - 00000000 ____D C:\Users\igor\AppData\Roaming\MMFApplications
2017-04-15 16:50 - 2017-04-15 16:51 - 26771561 _____ C:\Users\igor\Downloads\Plantera.v1.5-ALiAS.zip
2017-04-15 03:19 - 2017-04-15 03:19 - 00000000 ____D C:\ProgramData\dbg
2017-04-15 03:14 - 2017-04-15 03:14 - 00001279 _____ C:\Users\Public\Desktop\Please, Don’t Touch Anything.lnk
2017-04-15 03:14 - 2017-04-15 03:14 - 00000000 ____D C:\Users\igor\AppData\Local\DontTouchAnything
2017-04-15 03:14 - 2017-04-15 03:14 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Please, Don’t Touch Anything
2017-04-15 03:13 - 2017-04-15 03:18 - 00000000 ____D C:\Program Files\Please, Don’t Touch Anything
2017-04-15 03:12 - 2017-04-15 03:12 - 46799340 _____ C:\Users\igor\Downloads\Dont.Touch.Anything.v1.6.6.6.rar
2017-04-12 20:46 - 2017-04-12 21:14 - 00000000 ____D C:\Users\igor\AppData\Roaming\Dungeonmans
2017-04-12 20:25 - 2017-04-12 20:25 - 00000000 ____D C:\Pixowl
2017-04-12 19:53 - 2017-04-12 20:12 - 00000000 ____D C:\Users\igor\AppData\Roaming\Domina
2017-04-06 09:46 - 2017-04-06 09:46 - 00000000 ____D C:\Users\igor\AppData\LocalLow\Pixel Crow
2017-04-06 01:56 - 2017-04-06 09:56 - 00000000 ____D C:\Program Files\11 bit studios
2017-04-05 20:14 - 2017-04-06 03:05 - 00000000 ____D C:\Users\igor\Documents\Planet Centauri
2017-04-03 17:26 - 2017-04-03 17:28 - 00149724 _____ C:\WINDOWS\Minidump\040317-30375-01.dmp
2017-03-25 02:05 - 2017-03-25 02:05 - 00000000 ____D C:\ProgramData\3DVIA
2017-03-25 02:05 - 2017-03-25 02:05 - 00000000 ____D C:\Program Files\Virtools
2017-03-09 12:31 - 2017-03-09 12:31 - 00002232 _____ C:\Users\igor\Desktop\Discord.lnk
2017-03-08 14:48 - 2017-03-08 14:48 - 00000000 ____D C:\Users\igor\AppData\Local\Townsmen
==================== Three Months Modified files and folders ========
(If an entry is included in the fixlist, the file/folder will be moved.)
2017-06-04 04:02 - 2014-07-04 20:05 - 00000000 ____D C:\Users\igor\AppData\Roaming\Skype
2017-06-04 03:31 - 2016-07-24 02:07 - 00000000 ____D C:\Users\Default\AppData\Local\LogMeIn Hamachi
2017-06-04 03:31 - 2016-07-24 02:07 - 00000000 ____D C:\Users\Default User\AppData\Local\LogMeIn Hamachi
2017-06-04 03:00 - 2015-03-08 21:35 - 00000388 _____ C:\WINDOWS\Tasks\update-sys.job
2017-06-04 01:24 - 2015-03-08 21:35 - 00000388 _____ C:\WINDOWS\Tasks\update-S-1-5-21-3367511352-2360419363-1728341779-1001.job
2017-06-03 20:26 - 2014-07-10 22:49 - 00000000 ____D C:\Program Files\Steam
2017-06-03 20:22 - 2017-02-28 00:01 - 00000000 ____D C:\Users\igor\Documents\SkidRow
2017-06-03 19:09 - 2015-10-30 02:48 - 00000000 ____D C:\WINDOWS\AppReadiness
2017-06-03 19:04 - 2016-03-31 21:03 - 00000000 ____D C:\Users\igor
2017-06-03 19:03 - 2014-07-04 00:12 - 00000000 ____D C:\Users\igor\AppData\Local\Packages
2017-06-03 18:59 - 2015-10-30 02:48 - 00000000 ___HD C:\Program Files\WindowsApps
2017-06-03 17:08 - 2014-07-10 22:49 - 00000000 ____D C:\Program Files\Common Files\Steam
2017-06-03 17:01 - 2016-12-19 15:37 - 00000000 ____D C:\Users\igor\AppData\Local\LogMeIn Hamachi
2017-06-03 16:59 - 2016-10-10 09:23 - 00000000 ____D C:\Program Files\Hi-Rez Studios
2017-06-03 16:58 - 2016-02-13 09:16 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT
2017-06-03 16:57 - 2015-10-30 02:13 - 01310720 ___SH C:\WINDOWS\system32\config\BBI
2017-06-02 22:24 - 2014-07-13 14:38 - 00000000 ____D C:\Users\igor\AppData\Roaming\uTorrent
2017-06-02 05:04 - 2016-06-11 02:11 - 00000000 ____D C:\Users\igor\AppData\Roaming\SmartSteamEmu
2017-05-31 12:11 - 2014-07-15 13:57 - 00000000 ____D C:\Program Files\Opera
2017-05-30 20:11 - 2016-10-30 01:19 - 00000317 _____ C:\Users\igor\Desktop\Novo Documento de Texto.txt
2017-05-30 17:45 - 2014-07-05 13:26 - 00456360 ____N (Microsoft Corporation) C:\WINDOWS\system32\MpSigStub.exe
2017-05-30 06:51 - 2016-09-03 01:51 - 00000000 ____D C:\ProgramData\Hotspot Shield
2017-05-30 06:51 - 2014-07-04 01:51 - 00000000 ____D C:\ProgramData\Package Cache
2017-05-28 22:18 - 2016-12-30 18:33 - 00000000 ____D C:\Users\igor\Desktop\Nova pasta (3)
2017-05-26 22:29 - 2017-02-23 04:32 - 00000000 ____D C:\Users\igor\AppData\Roaming\dungeon
2017-05-23 19:11 - 2016-03-21 20:32 - 00000000 ____D C:\GOG Games
2017-05-23 07:18 - 2016-05-10 15:28 - 00000000 ____D C:\Program Files\Life Is Strange Complete Season (EP. 1-5)
2017-05-23 04:28 - 2014-07-04 01:51 - 00000000 ___HD C:\Program Files\InstallShield Installation Information
2017-05-23 04:26 - 2015-04-29 23:35 - 00000000 ____D C:\Program Files\Electronic Arts
2017-05-23 04:13 - 2016-11-22 18:09 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Hi-Rez Studios
2017-05-17 21:24 - 2015-01-22 22:52 - 00000000 ____D C:\Users\igor\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Hazit
2017-05-17 21:21 - 2016-03-28 03:13 - 00000000 ____D C:\Program Files\Hazit
2017-05-17 20:47 - 2015-10-30 02:47 - 00000000 ____D C:\WINDOWS\INF
2017-05-17 19:37 - 2016-04-01 01:46 - 00785262 _____ C:\WINDOWS\system32\prfh0416.dat
2017-05-17 19:37 - 2016-04-01 01:46 - 00154048 _____ C:\WINDOWS\system32\prfc0416.dat
2017-05-17 19:37 - 2016-03-31 21:19 - 01819274 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2017-05-15 23:04 - 2016-04-24 16:29 - 00002218 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2017-05-15 23:04 - 2016-04-24 16:29 - 00002206 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2017-05-13 04:28 - 2015-10-30 02:48 - 00000000 ____D C:\WINDOWS\system32\NDF
2017-05-12 06:54 - 2015-10-30 02:48 - 00000000 ____D C:\WINDOWS\system32\Macromed
2017-05-09 07:05 - 2016-01-01 10:47 - 00000000 ___RD C:\Program Files\Skype
2017-05-09 07:05 - 2014-07-04 20:04 - 00000000 ____D C:\ProgramData\Skype
2017-05-08 20:21 - 2016-02-13 09:13 - 00389840 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2017-05-08 04:46 - 2014-10-13 18:20 - 00000000 ____D C:\KMPlayer
2017-05-06 09:15 - 2015-03-08 21:35 - 00000413 _____ C:\Users\igor\AppData\Local\UserProducts.xml
2017-05-06 05:33 - 2014-09-04 21:08 - 00000000 ____D C:\Program Files\Enterbrain
==================== Files in the root of some directories =======
2016-10-29 17:09 - 2015-08-16 10:53 - 0000431 _____ () C:\Program Files\update-GameOfThrones.bat
2016-10-29 17:09 - 2013-10-12 20:47 - 0000732 _____ () C:\Program Files\visit-www.nosteam.ro.html
2014-07-14 17:20 - 2014-07-14 17:20 - 0000318 _____ () C:\Users\igor\AppData\Roaming\aps.uninstall.scan.results
2016-07-23 03:02 - 2016-07-23 03:02 - 26671784 _____ () C:\Users\igor\AppData\Roaming\gameboxsetup.exe
2014-08-12 18:21 - 2014-08-19 19:19 - 0000096 _____ () C:\Users\igor\AppData\Roaming\LauncherSettings_live.cfg
2016-12-02 08:19 - 2016-12-13 18:04 - 0000132 _____ () C:\Users\igor\AppData\Roaming\Preferências do Formato PNG do Adobe CS6
2016-01-02 20:58 - 2016-01-02 20:58 - 0045270 _____ () C:\Users\igor\AppData\Roaming\room_v3.dat
2014-08-19 12:38 - 2014-08-19 13:07 - 0000039 _____ () C:\Users\igor\AppData\Roaming\TheHunterSettings_live.cfg
2016-10-09 18:34 - 2016-10-09 18:34 - 0000544 _____ () C:\Users\igor\AppData\Local\Nox_crash.log
2015-03-08 21:35 - 2015-03-08 21:35 - 0000003 _____ () C:\Users\igor\AppData\Local\updater.log
2015-03-08 21:35 - 2017-05-06 09:15 - 0000413 _____ () C:\Users\igor\AppData\Local\UserProducts.xml
2015-04-26 14:03 - 2015-04-26 14:03 - 0000000 _____ () C:\Users\igor\AppData\Local\{C3F94888-51B2-47FE-A0FF-C017A364122F}
2015-05-01 14:23 - 2015-05-01 14:23 - 0000000 ____H () C:\ProgramData\DP45977C.lfl
Files to move or delete:
====================
C:\ProgramData\C__Users_igor_Desktop_Nova pasta (2)_CRACK_SuperHideIP.exe
==================== Bamital & volsnap ======================
(There is no automatic fix for files that do not pass verification.)
C:\WINDOWS\explorer.exe => File is digitally signed
C:\WINDOWS\system32\winlogon.exe => File is digitally signed
C:\WINDOWS\system32\wininit.exe => File is digitally signed
C:\WINDOWS\system32\svchost.exe => File is digitally signed
C:\WINDOWS\system32\services.exe => File is digitally signed
C:\WINDOWS\system32\User32.dll => File is digitally signed
C:\WINDOWS\system32\userinit.exe => File is digitally signed
C:\WINDOWS\system32\rpcss.dll => File is digitally signed
C:\WINDOWS\system32\dnsapi.dll => File is digitally signed
C:\WINDOWS\system32\Drivers\volsnap.sys => File is digitally signed
LastRegBack: 2017-05-09 01:45
==================== End of FRST.txt ============================
Ran by igor (administrator) on IGAMES (04-06-2017 04:04:30)
Running from C:\Users\igor\Downloads
Loaded Profiles: igor (Available Profiles: igor & Administrator)
Platform: Microsoft Windows 10 Pro Version 1511 (X86) Language: Inglês (Estados Unidos)
Internet Explorer Version 11 (Default browser: Chrome)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(Advanced Micro Devices, Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe
(Hi-Rez Studios) C:\Program Files\Hi-Rez Studios\HiPatchService.exe
(AnchorFree Inc.) C:\Program Files\Hotspot Shield\bin\cmw_srv.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MsMpEng.exe
(TeamViewer GmbH) C:\Program Files\TeamViewer\TeamViewer_Service.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\NisSrv.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
(Skillbrains) C:\Program Files\Skillbrains\lightshot\5.4.0.10\Lightshot.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe
(Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jusched.exe
(Wondershare) C:\Program Files\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe
(Akamai Technologies, Inc.) C:\Users\igor\AppData\Local\Akamai\netsession_win.exe
(Akamai Technologies, Inc.) C:\Users\igor\AppData\Local\Akamai\netsession_win.exe
(Skype Technologies S.A.) C:\Program Files\Skype\Phone\Skype.exe
(Spotify Ltd) C:\Users\igor\AppData\Roaming\Spotify\SpotifyWebHelper.exe
(Advanced Micro Devices Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(ATI Technologies Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(LogMeIn, Inc.) C:\Program Files\LogMeIn Hamachi\LMIGuardianSvc.exe
(LogMeIn Inc.) C:\Program Files\LogMeIn Hamachi\hamachi-2.exe
(LogMeIn Inc.) C:\Program Files\LogMeIn Hamachi\hamachi-2-ui.exe
(Microsoft Corporation) C:\Windows\System32\InstallAgent.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jucheck.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
() C:\Program Files\WindowsApps\Microsoft.Messaging_2.15.20002.0_x86__8wekyb3d8bbwe\SkypeHost.exe
(Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ink\InputPersonalization.exe
(Skype Technologies) C:\Program Files\Skype\Browser\SkypeBrowserHost.exe
(Skype Technologies) C:\Program Files\Skype\Browser\SkypeBrowserHost.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
==================== Registry (Whitelisted) ====================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [Lightshot] => C:\Program Files\Skillbrains\lightshot\Lightshot.exe [225944 2016-07-11] ()
HKLM\...\Run: [GrooveMonitor] => C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe [31016 2006-10-27] (Microsoft Corporation)
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe [14688512 2016-03-31] (Realtek Semiconductor)
HKLM\...\Run: [StartCCC] => C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [642304 2013-04-24] (Advanced Micro Devices, Inc.)
HKLM\...\Run: [SunJavaUpdateSched] => C:\Program Files\Common Files\Java\Java Update\jusched.exe [587288 2016-09-22] (Oracle Corporation)
HKLM\...\Run: [Wondershare Helper Compact.exe] => C:\Program Files\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe [2137744 2016-10-08] (Wondershare)
HKLM\...\Run: [LogMeIn Hamachi Ui] => C:\Program Files\LogMeIn Hamachi\hamachi-2-ui.exe [6153128 2017-05-22] (LogMeIn Inc.)
HKU\S-1-5-21-3367511352-2360419363-1728341779-1001\...\Run: [uTorrent] => C:\Users\igor\AppData\Roaming\uTorrent\uTorrent.exe [1980608 2017-05-23] (BitTorrent Inc.)
HKU\S-1-5-21-3367511352-2360419363-1728341779-1001\...\Run: [DAEMON Tools Lite] => C:\Program Files\DAEMON Tools Lite\DTLite.exe [3696912 2014-03-04] (Disc Soft Ltd)
HKU\S-1-5-21-3367511352-2360419363-1728341779-1001\...\Run: [Akamai NetSession Interface] => C:\Users\igor\AppData\Local\Akamai\netsession_win.exe [4490200 2017-01-03] (Akamai Technologies, Inc.)
HKU\S-1-5-21-3367511352-2360419363-1728341779-1001\...\Run: [EvolveClient] => C:\Program Files\Echobit\Evolve\EvolveClient.exe [3334528 2016-12-30] (Echobit LLC)
HKU\S-1-5-21-3367511352-2360419363-1728341779-1001\...\Run: [Skype] => C:\Program Files\Skype\Phone\Skype.exe [27793888 2017-05-05] (Skype Technologies S.A.)
HKU\S-1-5-21-3367511352-2360419363-1728341779-1001\...\Run: [Spotify] => C:\Users\igor\AppData\Roaming\Spotify\Spotify.exe [7064176 2017-04-22] (Spotify Ltd)
HKU\S-1-5-21-3367511352-2360419363-1728341779-1001\...\Run: [Spotify Web Helper] => C:\Users\igor\AppData\Roaming\Spotify\SpotifyWebHelper.exe [1446000 2017-04-22] (Spotify Ltd)
HKU\S-1-5-21-3367511352-2360419363-1728341779-1001\...\Policies\Explorer: [NoLowDiskSpaceChecks] 1
HKU\S-1-5-21-3367511352-2360419363-1728341779-1001\...\MountPoints2: {77457b42-1083-11e4-9725-94de802e083d} - "F:\LGAutoRun.exe"
HKU\S-1-5-21-3367511352-2360419363-1728341779-1001\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\WINDOWS\System32\lol.scr
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\SketchBook Snapshot.lnk [2017-06-04]
ShortcutTarget: SketchBook Snapshot.lnk -> C:\Program Files\Autodesk\SketchBook Pro 6\SketchBookSnapshot.exe (Autodesk Inc)
Startup: C:\Users\igor\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Curse.lnk [2014-07-09]
ShortcutTarget: Curse.lnk -> C:\Users\igor\AppData\Roaming\Curse Client\Bin\Curse.exe (Curse, Inc)
Startup: C:\Users\igor\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Recorte de tela e Iniciador do OneNote 2007.lnk [2015-10-06]
ShortcutTarget: Recorte de tela e Iniciador do OneNote 2007.lnk -> C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE (Microsoft Corporation)
GroupPolicy: Restriction ? <======= ATTENTION
GroupPolicyScripts: Restriction <======= ATTENTION
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
Tcpip\Parameters: [DhcpNameServer] 177.154.192.2 177.154.192.3
Tcpip\..\Interfaces\{4b592e53-c0d0-4853-9fe3-60bff836d094}: [DhcpNameServer] 177.154.192.2 177.154.192.3
Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://go.microsoft.com/fwlink/?LinkID=617910&ResetID=131043062097701048&GUID=F093FC73-B5F1-4002-85D4-4C816B8C00D3
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.google.com
BHO: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll [2006-10-27] (Microsoft Corporation)
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_111\bin\ssv.dll [2016-12-30] (Oracle Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_111\bin\jp2ssv.dll [2016-12-30] (Oracle Corporation)
Handler: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll [2006-10-27] (Microsoft Corporation)
FireFox:
========
FF DefaultProfile: wf4mjr2x.default
FF ProfilePath: C:\Users\igor\AppData\Roaming\Mozilla\Firefox\Profiles\wf4mjr2x.default [2017-05-17]
FF Homepage: Mozilla\Firefox\Profiles\wf4mjr2x.default -> hxxp://maisdowns.com
FF Extension: (Video AdBlock) - C:\Users\igor\AppData\Roaming\Mozilla\Firefox\Profiles\wf4mjr2x.default\Extensions\{7b8a500a-a464-4624-bd4f-73eaafe0f766} [2016-12-10]
FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF32_25_0_0_171.dll [2017-05-11] ()
FF Plugin: @adobe.com/ShockwavePlayer -> C:\WINDOWS\system32\Adobe\Director\np32dsw_1228198.dll [2017-02-27] (Adobe Systems, Inc.)
FF Plugin: @java.com/DTPlugin,version=11.111.2 -> C:\Program Files\Java\jre1.8.0_111\bin\dtplugin\npDeployJava1.dll [2016-12-30] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.111.2 -> C:\Program Files\Java\jre1.8.0_111\bin\plugin2\npjp2.dll [2016-12-30] (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.41212.0\npctrl.dll [2015-12-11] ( Microsoft Corporation)
FF Plugin: @microsoft.com/WLPG,version=16.4.3528.0331 -> C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll [2014-03-31] (Microsoft Corporation)
FF Plugin: @ogplanet.com/npOGPPlugin -> C:\WINDOWS\system32\npOGPPlugin.dll [2009-11-19] (OGPlanet)
FF Plugin: @raidcall.en/RCplugin -> C:\Users\igor\AppData\Roaming\raidcall\plugins\nprcplugin.dll [2014-12-23] (Raidcall)
FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-04-29] (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-04-29] (Google Inc.)
FF Plugin: @virtools.com/3DviaPlayer -> C:\Program Files\Virtools\3D Life Player\npvirtools.dll [2012-04-05] (Dassault Systèmes)
FF Plugin HKU\S-1-5-21-3367511352-2360419363-1728341779-1001: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\igor\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll [2015-06-08] (Unity Technologies ApS)
Chrome:
=======
CHR HomePage: Default -> hxxp://search.babylon.com/?affID=110823&tt=120912_pcp_3912_3&babsrc=HP_ss&mntrId=ec5ed625000000000000001a3f58a79c
CHR StartupUrls: Default -> "hxxps://www.google.com.br/"
CHR Profile: C:\Users\igor\AppData\Local\Google\Chrome\User Data\Default [2017-06-04]
CHR Extension: (Google Apresentações) - C:\Users\igor\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2017-05-09]
CHR Extension: (Google Docs) - C:\Users\igor\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2017-05-09]
CHR Extension: (Google Drive) - C:\Users\igor\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2016-04-24]
CHR Extension: (YouTube) - C:\Users\igor\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2016-04-24]
CHR Extension: (Planilhas do Google) - C:\Users\igor\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2017-05-09]
CHR Extension: (Radiant Community Extension) - C:\Users\igor\AppData\Local\Google\Chrome\User Data\Default\Extensions\gfffnbhinkdleedlodeeodpaipoeonoa [2017-01-25]
CHR Extension: (AdBlock) - C:\Users\igor\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2017-04-13]
CHR Extension: (Pagamentos da Chrome Web Store) - C:\Users\igor\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2017-03-09]
CHR Extension: (Gmail) - C:\Users\igor\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2016-04-24]
CHR Extension: (Chrome Media Router) - C:\Users\igor\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2017-05-12]
CHR HKLM\...\Chrome\Extension: [hegneaniplmfjcmohoclabblbahcbjoe] - hxxp://clients2.google.com/service/update2/crx
CHR HKU\S-1-5-21-3367511352-2360419363-1728341779-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [hegneaniplmfjcmohoclabblbahcbjoe] - hxxp://clients2.google.com/service/update2/crx
Opera:
=======
OPR StartupUrls: "hxxp://maisdowns.com/"
==================== Services (Whitelisted) ====================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
R2 AMD FUEL Service; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [291840 2013-04-29] (Advanced Micro Devices, Inc.) [File not signed]
S3 EasyAntiCheat; C:\WINDOWS\system32\EasyAntiCheat.exe [243984 2016-02-19] (EasyAntiCheat Ltd)
S3 EvoSvc; C:\Program Files\Echobit\Evolve\EvoSvc.exe [1583488 2016-12-30] (Echobit LLC)
R2 Hamachi2Svc; C:\Program Files\LogMeIn Hamachi\hamachi-2.exe [2616744 2017-05-22] (LogMeIn Inc.)
U2 HiPatchService; C:\Program Files\Hi-Rez Studios\HiPatchService.exe [9728 2016-11-15] (Hi-Rez Studios) [File not signed]
R2 hshld; C:\Program Files\Hotspot Shield\bin\cmw_srv.exe [2718840 2016-10-13] (AnchorFree Inc.)
S3 HssTrayService; C:\Program Files\Hotspot Shield\bin\HssTrayService.exe [103168 2016-10-13] ()
S3 IDriverT; C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [69632 2005-04-04] (Macrovision Corporation) [File not signed]
R2 LMIGuardianSvc; C:\Program Files\LogMeIn Hamachi\LMIGuardianSvc.exe [405424 2016-05-27] (LogMeIn, Inc.)
S3 npggsvc; C:\WINDOWS\system32\GameMon.des [3367256 2014-11-23] (INCA Internet Co., Ltd.)
S3 Origin Client Service; C:\Program Files\Origin\OriginClientService.exe [2120712 2016-05-10] (Electronic Arts)
S2 Service KMSELDI; C:\Program Files\KMSpico\Service_KMS.exe [977088 2014-03-02] () [File not signed]
R2 TeamViewer; C:\Program Files\TeamViewer\TeamViewer_Service.exe [7032080 2016-05-12] (TeamViewer GmbH)
S3 TunngleService; C:\Program Files\Tunngle\TnglCtrl.exe [818672 2016-05-11] (Tunngle.net GmbH)
R3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [280376 2015-10-30] (Microsoft Corporation)
R2 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23264 2016-10-25] (Microsoft Corporation)
S2 LiveUpdateSvc; C:\Program Files\IObit\LiveUpdate\LiveUpdate.exe [X]
S2 SpyHunter 4 Service; C:\PROGRA~1\Enigma Software Group\SpyHunter\SH4Service.exe [X]
===================== Drivers (Whitelisted) ======================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
R3 AFTrafMgr1.1; C:\Program Files\Hotspot Shield\bin\TrafMgr_1_1_32.sys [47544 2016-10-04] (AnchorFree Inc.)
R0 amd_sata; C:\WINDOWS\System32\drivers\amd_sata.sys [70856 2016-03-31] (Advanced Micro Devices)
R0 amd_xata; C:\WINDOWS\System32\drivers\amd_xata.sys [20680 2016-03-31] (Advanced Micro Devices)
R2 AODDriver4.2.0; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\i386\AODDriver2.sys [45184 2012-03-05] (Advanced Micro Devices)
S3 DrvAgent32; C:\WINDOWS\system32\Drivers\DrvAgent32.sys [23456 2014-07-04] (Phoenix Technologies) [File not signed]
R1 dtsoftbus01; C:\WINDOWS\System32\drivers\dtsoftbus01.sys [243128 2016-03-31] (Disc Soft Ltd)
R1 ElRawDisk; C:\WINDOWS\system32\drivers\rsdrv.sys [22312 2009-02-12] (EldoS Corporation)
S3 EsgScanner; C:\WINDOWS\System32\DRIVERS\EsgScanner.sys [19984 2016-04-24] ()
R3 EvolveVirtualAdapter; C:\WINDOWS\System32\drivers\evolve.sys [18584 2016-12-19] (Echobit, LLC)
R3 Hamachi; C:\WINDOWS\system32\DRIVERS\Hamdrv.sys [38512 2016-03-22] (LogMeIn Inc.)
R1 HWiNFO32; C:\WINDOWS\system32\drivers\HWiNFO32.SYS [23840 2016-03-31] (REALiX(tm))
R3 rt640x86; C:\WINDOWS\System32\drivers\rt640x86.sys [789248 2016-03-31] (Realtek )
R2 SecDrv; C:\WINDOWS\system32\drivers\SECDRV.SYS [163644 2016-11-27] (Macrovision Corporation, Macrovision Europe Limited, and Macrovision Japan and Asia K.K.) [File not signed]
S3 SWDUMon; C:\WINDOWS\system32\DRIVERS\SWDUMon.sys [13464 2014-10-24] ()
S3 tap0901; C:\WINDOWS\system32\DRIVERS\tap0901.sys [35288 2013-08-22] (The OpenVPN Project)
S3 tap0901t; C:\WINDOWS\System32\drivers\tap0901t.sys [44216 2016-04-26] (Tunngle.net GmbH)
S3 taphss6; C:\WINDOWS\System32\drivers\taphss6.sys [36944 2016-06-28] (Anchorfree Inc.)
S3 TesSafe; C:\WINDOWS\system32\TesSafe.sys [964600 2014-07-05] (TENCENT)
R1 VBoxUSBMon; C:\WINDOWS\system32\DRIVERS\VBoxUSBMon.sys [104064 2016-07-29] (BigNox Corporation)
S0 WdBoot; C:\WINDOWS\System32\drivers\WdBoot.sys [37400 2015-10-30] (Microsoft Corporation)
R0 WdFilter; C:\WINDOWS\System32\drivers\WdFilter.sys [246104 2015-10-30] (Microsoft Corporation)
R3 WdNisDrv; C:\WINDOWS\System32\Drivers\WdNisDrv.sys [98648 2015-10-30] (Microsoft Corporation)
S3 WinDivert1.1; C:\Program Files\KMSpico\WinDivert.sys [30256 2015-08-26] (Basil Projects)
S3 WUDFWpdMtp; C:\WINDOWS\system32\DRIVERS\WUDFRd.sys [163328 2015-10-30] (Microsoft Corporation)
R1 XQHDrv; C:\WINDOWS\system32\DRIVERS\XQHDrv.sys [203392 2017-02-07] (BigNox Corporation)
==================== NetSvcs (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
==================== Three Months Created files and folders ========
(If an entry is included in the fixlist, the file/folder will be moved.)
2017-06-04 04:04 - 2017-06-04 04:06 - 00017579 _____ C:\Users\igor\Downloads\FRST.txt
2017-06-04 04:02 - 2017-06-04 04:04 - 00000000 ____D C:\FRST
2017-06-04 04:02 - 2017-06-04 04:02 - 01774080 _____ (Farbar) C:\Users\igor\Downloads\FRST.exe
2017-06-04 03:21 - 2017-06-04 03:21 - 00103858 _____ C:\Users\igor\Desktop\Image002.tif
2017-06-04 01:03 - 2017-06-04 01:03 - 00002136 _____ C:\Users\Public\Desktop\SketchBook Pro 6.lnk
2017-06-04 01:03 - 2017-06-04 01:03 - 00000000 ____D C:\Users\igor\AppData\Roaming\Autodesk
2017-06-04 01:03 - 2017-06-04 01:03 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Autodesk
2017-06-04 01:03 - 2017-06-04 01:03 - 00000000 ____D C:\ProgramData\Alias
2017-06-04 01:02 - 2017-06-04 01:02 - 00000000 ____D C:\Program Files\Autodesk
2017-06-04 00:58 - 2017-06-04 00:58 - 00000000 ____D C:\Autodesk
2017-06-04 00:56 - 2017-06-04 00:56 - 30339052 _____ C:\Users\igor\Downloads\AUTODESK_SKETCHBOOK_PRO_V6.0-XFORCE.rar
2017-06-03 20:20 - 2017-06-03 20:22 - 00000000 ____D C:\Users\igor\Desktop\IGG-Doodle.God.v3.1.52
2017-06-03 20:19 - 2017-06-03 20:19 - 275219697 _____ C:\Users\igor\Downloads\Doodllll33.Goddd.v3.1.52.rar
2017-06-03 17:03 - 2017-06-03 17:03 - 00000975 _____ C:\Users\Public\Desktop\LogMeIn Hamachi.lnk
2017-06-03 17:03 - 2017-06-03 17:03 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LogMeIn Hamachi
2017-06-03 17:03 - 2017-06-03 17:03 - 00000000 ____D C:\Program Files\LogMeIn Hamachi
2017-06-03 17:01 - 2017-06-03 17:04 - 00000170 _____ C:\Users\Default\BullseyeCoverageError.txt
2017-06-02 22:18 - 2017-06-02 22:18 - 19218703 _____ C:\Users\igor\Downloads\gcw_patch_manual_001.zip
2017-06-02 22:14 - 2017-06-02 22:14 - 00001105 _____ C:\Users\Public\Desktop\Grand Chase Way.lnk
2017-06-02 22:14 - 2017-06-02 22:14 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Grand Chase Way
2017-06-02 22:09 - 2017-06-02 22:09 - 00000000 ____D C:\Program Files\Grand Chase Way
2017-06-02 21:08 - 2017-06-02 21:08 - 00000000 ____D C:\Users\igor\AppData\LocalLow\uTorrent
2017-06-02 21:07 - 2017-06-02 21:08 - 00018775 _____ C:\Users\igor\Downloads\GrandChaseWay_v17052017.zip.torrent
2017-06-02 05:03 - 2017-03-30 22:54 - 00000000 ____D C:\Users\igor\Desktop\EarntoDie2_v1.04
2017-06-02 05:02 - 2017-06-02 05:02 - 182269476 _____ C:\Users\igor\Downloads\EarntoDie2_v1.04.zip
2017-05-31 12:11 - 2017-05-31 12:11 - 00001078 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Opera.lnk
2017-05-30 07:33 - 2017-05-30 07:34 - 00381189 _____ C:\Users\igor\Desktop\18794753_1702239700077940_1523053733112446976_n.mp4
2017-05-28 21:46 - 2017-05-28 21:46 - 00639711 _____ C:\Users\igor\Downloads\zsnesw142.zip
2017-05-28 21:30 - 2017-05-28 21:30 - 00750428 _____ C:\Users\igor\Downloads\Biker Mice from Mars (USA).zip
2017-05-27 21:29 - 2017-06-02 22:23 - 00000000 ____D C:\Users\igor\Desktop\Nova pasta (4)
2017-05-27 21:26 - 2017-05-27 21:29 - 73161572 _____ C:\Users\igor\Downloads\Wadanohara_103.zip
2017-05-26 21:20 - 2017-05-26 21:21 - 318228940 _____ C:\Users\igor\Downloads\Dead.Cells.v15.05.2017.zip
2017-05-26 04:56 - 2017-05-26 21:25 - 00000000 ____D C:\Program Files\XD Network Inc
2017-05-24 20:46 - 2017-05-24 20:46 - 00000000 ____D C:\Users\igor\Documents\Reus
2017-05-24 20:42 - 2017-05-26 05:24 - 00000000 ____D C:\Users\igor\Desktop\Reus
2017-05-24 20:39 - 2017-05-24 20:40 - 380252603 _____ C:\Users\igor\Downloads\Reus.v1.5.3.0.Multi9.Cracked-3DM.zip
2017-05-23 19:11 - 2017-05-23 19:11 - 00002017 _____ C:\Users\Public\Desktop\Shantae and the Pirate's Curse.lnk
2017-05-23 19:11 - 2017-05-23 19:11 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Shantae and the Pirate's Curse [GOG.com]
2017-05-23 19:02 - 2017-05-23 19:02 - 00036550 _____ C:\Users\igor\Downloads\Shantae.and.the.Pirates.Curse-GOG.torrent
2017-05-23 07:18 - 2017-05-23 07:18 - 00002509 _____ C:\Users\Public\Desktop\Life Is Strange Complete Season.lnk
2017-05-23 07:18 - 2017-05-23 07:18 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Life Is Strange Complete Season (EP. 1-5)
2017-05-23 07:00 - 2017-05-23 07:01 - 23518648 _____ (Disc Soft Ltd) C:\Users\igor\Downloads\DTLite1040-0190.exe
2017-05-23 06:58 - 2017-05-23 06:58 - 00017111 _____ C:\Users\igor\Downloads\[kickass.to]shantae.and.the.pirate.s.curse.torrent
2017-05-23 04:12 - 2017-05-23 04:12 - 00776291 _____ C:\Users\igor\Downloads\Trad-TodosEps-LIS-ByStiff.rar
2017-05-23 04:11 - 2017-05-23 04:11 - 00023975 _____ C:\Users\igor\Downloads\LIS-Final-ByStiff.torrent
2017-05-18 23:21 - 2017-05-18 23:21 - 00000000 ____D C:\Users\igor\AppData\LocalLow\SmashGames
2017-05-18 23:04 - 2017-05-18 23:04 - 26564772 _____ C:\Users\igor\Downloads\Kindergartev0.9.rar
2017-05-17 21:24 - 2017-05-17 21:24 - 00001290 _____ C:\Users\igor\Desktop\Freejack.lnk
2017-05-17 20:25 - 2017-05-17 20:46 - 823290827 _____ C:\Users\igor\Downloads\zenit_freejack.exe
2017-05-16 04:52 - 2017-05-16 04:52 - 57452324 _____ C:\Users\igor\Downloads\30-sai no Hoken Taiiku 01_YoshidaDownloads.mkv
2017-05-16 04:47 - 2017-05-16 04:47 - 00202849 _____ C:\Users\igor\Downloads\Não confirmado 446991.crdownload
2017-05-12 06:52 - 2017-05-12 06:54 - 00000000 ____D C:\Users\igor\AppData\Local\Adobe
2017-05-09 07:05 - 2017-05-09 07:05 - 00000000 ____D C:\Program Files\Common Files\Skype
2017-05-09 03:48 - 2017-05-09 03:48 - 00000000 ____D C:\Users\igor\AppData\Roaming\Google
2017-05-09 03:37 - 2017-05-09 03:38 - 00042558 _____ C:\native log.txt
2017-05-09 01:45 - 2017-05-09 03:37 - 00048093 _____ C:\spyhunter.fix
2017-05-09 01:45 - 2017-05-09 01:45 - 00000000 ___HD C:\9qvDTIamTSfpZzLf
2017-05-08 21:23 - 2017-05-09 03:37 - 00000000 ____D C:\Program Files\SpyHunter Malware Security Suite
2017-05-08 21:23 - 2017-05-08 21:23 - 00001250 _____ C:\Users\Public\Desktop\SpyHunter.lnk
2017-05-08 21:23 - 2017-05-08 21:23 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SpyHunter Malware
2017-05-08 21:22 - 2017-05-06 18:38 - 00000000 ____D C:\Users\igor\Desktop\SpyHunter.4.25.6.4782
2017-05-08 18:41 - 2017-05-08 20:13 - 00000000 ____D C:\Users\igor\Desktop\Nova pasta
2017-05-08 18:39 - 2017-05-08 18:39 - 01156640 _____ C:\Users\igor\Downloads\Bokou Resource Pack - Voodoo.rar
2017-05-08 17:08 - 2017-05-08 17:08 - 00000000 ____D C:\ProgramData\Wondershare
2017-05-08 04:14 - 2017-05-08 04:14 - 00000000 ____D C:\Users\igor\AppData\Local\Wondershare
2017-05-08 04:13 - 2017-05-08 04:13 - 00001276 _____ C:\Users\Public\Desktop\Wondershare Filmora.lnk
2017-05-08 04:13 - 2017-05-08 04:13 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Wondershare
2017-05-08 04:13 - 2017-05-08 04:13 - 00000000 ____D C:\Program Files\Common Files\Wondershare
2017-05-08 04:11 - 2017-05-08 04:13 - 00000000 ____D C:\Users\igor\Documents\Wondershare Filmora
2017-05-08 04:11 - 2017-05-08 04:11 - 00000000 ____D C:\ProgramData\Wondershare Video Editor
2017-05-08 04:11 - 2017-05-08 04:11 - 00000000 ____D C:\Program Files\Wondershare
2017-05-08 04:09 - 2017-05-08 04:10 - 00000000 ____D C:\Users\Public\Documents\Wondershare
2017-05-08 04:08 - 2017-05-08 04:08 - 01066128 _____ C:\Users\igor\Downloads\filmora_setup_full846.exe
2017-05-06 12:45 - 2017-05-06 12:45 - 29627205 _____ C:\Users\igor\Downloads\ShowMiseraviPC.7z
2017-05-06 09:15 - 2017-05-06 09:15 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Lightshot
2017-05-06 05:33 - 2017-05-06 05:33 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\RTP2003
2017-05-06 05:33 - 1999-12-17 10:13 - 00086016 _____ (MindVision Software) C:\WINDOWS\unvise32.exe
2017-05-06 05:31 - 2017-05-06 05:31 - 131069480 _____ C:\Users\igor\Downloads\OFF+Tradução+RTP.zip
2017-05-06 04:56 - 2017-05-06 04:58 - 57942102 _____ C:\Users\igor\Downloads\O Amigo Salgadinho.rar
2017-05-06 03:28 - 2017-05-06 03:31 - 72247338 _____ C:\Users\igor\Downloads\Guardiões da Netureza (sRTP).rar
2017-05-05 05:00 - 2017-05-05 05:02 - 28803134 _____ C:\Users\igor\Downloads\A Saga BR.rar
2017-05-05 04:56 - 2017-05-05 05:06 - 166621069 _____ C:\Users\igor\Downloads\CDS3 Dos Deuseus aos Humanos v1.2.rar
2017-05-04 19:38 - 2017-05-04 19:38 - 01978632 _____ C:\Users\igor\Downloads\25.ogg
2017-05-04 00:17 - 2017-05-04 00:17 - 00179898 _____ C:\Users\igor\Downloads\Undertale_-_Him_W_D_Gaster_zippy_audio_.ogg
2017-05-04 00:13 - 2017-05-04 00:13 - 01824499 _____ C:\Users\igor\Downloads\Yasunori_Mitsuda-Peaceful_Days_Chrono_Trigger_www_ (1).ogg
2017-05-03 23:35 - 2017-05-03 23:35 - 01824499 _____ C:\Users\igor\Downloads\Yasunori_Mitsuda-Peaceful_Days_Chrono_Trigger_www_.ogg
2017-05-03 23:28 - 2017-05-03 23:28 - 00217175 _____ C:\Users\igor\Downloads\_flowey_theme_Mp3xd_tv_.ogg
2017-05-01 10:47 - 2017-05-01 10:47 - 00000000 ____D C:\Users\igor\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\RTP VX
2017-05-01 10:45 - 2017-05-01 10:46 - 43030849 _____ C:\Users\igor\Downloads\RMVX10-RTP.rar
2017-05-01 10:44 - 2017-05-01 10:44 - 00806912 _____ C:\Users\igor\Downloads\RGSS200E.dll
2017-05-01 10:38 - 2017-05-01 10:41 - 37120292 _____ C:\Users\igor\Downloads\Orca - A lenda dos mares.exe
2017-04-28 22:27 - 2017-04-28 22:27 - 05928360 _____ C:\Users\igor\Downloads\Old Fiora.wxy
2017-04-28 22:26 - 2017-04-28 22:26 - 00000000 ____D C:\Spacekace
2017-04-28 22:24 - 2017-04-28 22:25 - 01838144 _____ (Solvusoft) C:\Users\igor\Downloads\Setup_FileViewPro_2016.exe
2017-04-28 13:22 - 2017-04-28 13:22 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
2017-04-28 13:13 - 2017-04-28 13:16 - 00355958 _____ C:\Users\igor\Downloads\7-7_BR1-1062946430_01.mp4.crdownload
2017-04-28 11:56 - 2017-04-28 11:56 - 00000000 ____D C:\Program Files\GUM7E0D.tmp
2017-04-27 00:37 - 2017-04-27 00:38 - 14421010 _____ C:\Users\igor\Downloads\Wooxy_1_6_Portable.zip
2017-04-27 00:29 - 2017-04-27 00:30 - 08490710 _____ C:\Users\igor\Downloads\Traditional Fiora Pack.zip
2017-04-26 22:06 - 2017-05-19 19:13 - 00000000 ____D C:\Users\igor\AppData\Roaming\StardewValley
2017-04-26 22:04 - 2017-05-06 03:32 - 00000000 ____D C:\Users\igor\Desktop\Stardew.Valley.v1.2.25
2017-04-26 21:43 - 2017-04-26 21:44 - 345004744 _____ C:\Users\igor\Downloads\Stardew.Valley.v1.2.25.zip
2017-04-26 20:47 - 2017-04-26 20:47 - 00204547 _____ C:\Users\igor\Downloads\lame_enc.zip
2017-04-26 20:45 - 2017-04-26 20:45 - 00000000 ____D C:\Users\igor\Documents\Audacity
2017-04-26 20:35 - 2017-04-26 20:38 - 00917854 _____ C:\Users\igor\Downloads\videoplayback.m4a (1).crdownload
2017-04-26 20:14 - 2017-04-26 20:18 - 00603182 _____ C:\Users\igor\Downloads\videoplayback.m4a.crdownload
2017-04-26 20:12 - 2017-04-26 20:50 - 00000000 ____D C:\Users\igor\AppData\Roaming\audacity
2017-04-26 20:12 - 2017-04-26 20:12 - 00001050 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Audacity.lnk
2017-04-26 20:12 - 2017-04-26 20:12 - 00001038 _____ C:\Users\Public\Desktop\Audacity.lnk
2017-04-26 20:12 - 2017-04-26 20:12 - 00000000 ____D C:\Users\igor\AppData\Local\Audacity
2017-04-26 20:11 - 2017-04-26 20:12 - 00000000 ____D C:\Program Files\Audacity
2017-04-26 20:08 - 2017-04-26 20:10 - 27113272 _____ (Audacity Team ) C:\Users\igor\Downloads\audacity-win-2.1.3.exe
2017-04-26 20:08 - 2017-04-26 20:10 - 27113272 _____ (Audacity Team ) C:\Users\igor\Downloads\audacity-win-2.1.3 (1).exe
2017-04-24 14:40 - 2017-04-24 14:40 - 00001216 _____ C:\Users\igor\Desktop\AIDA64 Extreme.lnk
2017-04-24 14:40 - 2017-04-24 14:40 - 00000000 ____D C:\Program Files\FinalWire
2017-04-24 14:38 - 2017-04-24 14:40 - 16335712 _____ (FinalWire Ltd. ) C:\Users\igor\Downloads\aida64extreme570.exe
2017-04-23 16:38 - 2017-04-23 16:38 - 00119774 _____ C:\Users\igor\Downloads\k10stat.zip
2017-04-23 16:30 - 2017-04-23 16:30 - 31843088 _____ (Advanced Micro Devices, Inc. ) C:\Users\igor\Downloads\aod_setup_4.3.1.0698.exe
2017-04-23 16:30 - 2017-04-23 16:30 - 00000000 ____D C:\Users\igor\AppData\Local\Downloaded Installations
2017-04-23 15:59 - 2017-04-23 15:59 - 00001038 _____ C:\Users\Public\Desktop\CCleaner.lnk
2017-04-23 15:59 - 2017-04-23 15:59 - 00001010 _____ C:\Users\Public\Desktop\Speccy.lnk
2017-04-23 15:59 - 2017-04-23 15:59 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Speccy
2017-04-23 15:59 - 2017-04-23 15:59 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
2017-04-23 15:59 - 2017-04-23 15:59 - 00000000 ____D C:\Program Files\Speccy
2017-04-23 15:59 - 2017-04-23 15:59 - 00000000 ____D C:\Program Files\CCleaner
2017-04-23 15:56 - 2017-04-23 15:57 - 06293184 _____ (Piriform Ltd) C:\Users\igor\Downloads\spsetup130.exe
2017-04-22 20:07 - 2017-05-17 17:21 - 00000000 ____D C:\Users\igor\AppData\Local\Spotify
2017-04-22 20:07 - 2017-04-22 20:07 - 00001845 _____ C:\Users\igor\Desktop\Spotify.lnk
2017-04-22 20:07 - 2017-04-22 20:07 - 00001831 _____ C:\Users\igor\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Spotify.lnk
2017-04-22 20:04 - 2017-06-03 17:05 - 00000000 ____D C:\Users\igor\AppData\Roaming\Spotify
2017-04-22 20:04 - 2017-04-22 20:04 - 00668880 _____ (Spotify Ltd) C:\Users\igor\Downloads\SpotifySetup.exe
2017-04-20 21:14 - 2017-05-06 12:46 - 00000000 ___RD C:\Users\igor\Desktop\Sword Art Online Levels
2017-04-20 20:28 - 2017-04-20 20:28 - 00011799 _____ C:\Users\igor\Downloads\Sword Art Online Levels.rar.torrent
2017-04-18 16:32 - 2017-04-18 16:32 - 03716848 _____ C:\Users\igor\Downloads\CRIANÇA COM RAIVA - VIDEO OFICIAL - HIDROFOBIA LEIAM A DESCRIÇÃO DO VIDEO.mp4
2017-04-18 16:24 - 2017-04-18 16:24 - 03591164 _____ C:\Users\igor\Downloads\CRIANÇA COM RAIVA - VIDEO OFICIAL - HIDROFOBIA LEIAM A DESCRIÇÃO DO VIDEO.webm
2017-04-18 16:17 - 2017-04-18 16:18 - 20116096 _____ C:\Users\igor\Downloads\Raiva.mp4
2017-04-18 16:07 - 2017-04-18 16:08 - 13285791 _____ C:\Users\igor\Downloads\Raiva.webm
2017-04-17 20:45 - 2017-04-17 20:45 - 00000000 ____D C:\Echobit
2017-04-17 20:45 - 2017-04-17 20:45 - 00000000 ____D C:\DAEMON Tools Lite
2017-04-17 20:14 - 2017-04-17 20:14 - 02855273 _____ C:\Users\igor\Desktop\7-7_BR1-1062946430_01.webm
2017-04-15 19:38 - 2017-04-15 19:38 - 00001793 _____ C:\Users\Public\Desktop\Prison Architect.lnk
2017-04-15 19:38 - 2017-04-15 19:38 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Prison Architect [GOG.com]
2017-04-15 19:37 - 2017-04-15 19:40 - 00000000 ____D C:\Users\igor\AppData\Local\Introversion
2017-04-15 19:30 - 2017-04-15 19:36 - 00000000 ____D C:\Program Files\Konami Digital Entertainment Inc
2017-04-15 19:19 - 2017-04-15 19:20 - 807374829 _____ C:\Users\igor\Downloads\Yu.Gi.Oh.Legacy.of.the.Duelist.REPACK-SKIDROW.zip
2017-04-15 19:12 - 2017-04-15 19:14 - 723757407 _____ C:\Users\igor\Downloads\Prison.Architect.v2.16.0.20.Incl.Aficionado.DLC-GOG.zip
2017-04-15 19:06 - 2017-04-16 04:36 - 00000000 ____D C:\Users\igor\Desktop\Jogos da steam
2017-04-15 19:01 - 2017-04-15 19:10 - 149445199 _____ C:\Users\igor\Downloads\Empire_TV_Tycoon_v1.6.0.zip
2017-04-15 16:54 - 2017-04-15 16:54 - 00000000 ____D C:\Users\igor\AppData\Roaming\xsrs
2017-04-15 16:54 - 2017-04-15 16:54 - 00000000 ____D C:\Users\igor\AppData\Roaming\MMFApplications
2017-04-15 16:50 - 2017-04-15 16:51 - 26771561 _____ C:\Users\igor\Downloads\Plantera.v1.5-ALiAS.zip
2017-04-15 03:19 - 2017-04-15 03:19 - 00000000 ____D C:\ProgramData\dbg
2017-04-15 03:14 - 2017-04-15 03:14 - 00001279 _____ C:\Users\Public\Desktop\Please, Don’t Touch Anything.lnk
2017-04-15 03:14 - 2017-04-15 03:14 - 00000000 ____D C:\Users\igor\AppData\Local\DontTouchAnything
2017-04-15 03:14 - 2017-04-15 03:14 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Please, Don’t Touch Anything
2017-04-15 03:13 - 2017-04-15 03:18 - 00000000 ____D C:\Program Files\Please, Don’t Touch Anything
2017-04-15 03:12 - 2017-04-15 03:12 - 46799340 _____ C:\Users\igor\Downloads\Dont.Touch.Anything.v1.6.6.6.rar
2017-04-12 20:46 - 2017-04-12 21:14 - 00000000 ____D C:\Users\igor\AppData\Roaming\Dungeonmans
2017-04-12 20:25 - 2017-04-12 20:25 - 00000000 ____D C:\Pixowl
2017-04-12 19:53 - 2017-04-12 20:12 - 00000000 ____D C:\Users\igor\AppData\Roaming\Domina
2017-04-06 09:46 - 2017-04-06 09:46 - 00000000 ____D C:\Users\igor\AppData\LocalLow\Pixel Crow
2017-04-06 01:56 - 2017-04-06 09:56 - 00000000 ____D C:\Program Files\11 bit studios
2017-04-05 20:14 - 2017-04-06 03:05 - 00000000 ____D C:\Users\igor\Documents\Planet Centauri
2017-04-03 17:26 - 2017-04-03 17:28 - 00149724 _____ C:\WINDOWS\Minidump\040317-30375-01.dmp
2017-03-25 02:05 - 2017-03-25 02:05 - 00000000 ____D C:\ProgramData\3DVIA
2017-03-25 02:05 - 2017-03-25 02:05 - 00000000 ____D C:\Program Files\Virtools
2017-03-09 12:31 - 2017-03-09 12:31 - 00002232 _____ C:\Users\igor\Desktop\Discord.lnk
2017-03-08 14:48 - 2017-03-08 14:48 - 00000000 ____D C:\Users\igor\AppData\Local\Townsmen
==================== Three Months Modified files and folders ========
(If an entry is included in the fixlist, the file/folder will be moved.)
2017-06-04 04:02 - 2014-07-04 20:05 - 00000000 ____D C:\Users\igor\AppData\Roaming\Skype
2017-06-04 03:31 - 2016-07-24 02:07 - 00000000 ____D C:\Users\Default\AppData\Local\LogMeIn Hamachi
2017-06-04 03:31 - 2016-07-24 02:07 - 00000000 ____D C:\Users\Default User\AppData\Local\LogMeIn Hamachi
2017-06-04 03:00 - 2015-03-08 21:35 - 00000388 _____ C:\WINDOWS\Tasks\update-sys.job
2017-06-04 01:24 - 2015-03-08 21:35 - 00000388 _____ C:\WINDOWS\Tasks\update-S-1-5-21-3367511352-2360419363-1728341779-1001.job
2017-06-03 20:26 - 2014-07-10 22:49 - 00000000 ____D C:\Program Files\Steam
2017-06-03 20:22 - 2017-02-28 00:01 - 00000000 ____D C:\Users\igor\Documents\SkidRow
2017-06-03 19:09 - 2015-10-30 02:48 - 00000000 ____D C:\WINDOWS\AppReadiness
2017-06-03 19:04 - 2016-03-31 21:03 - 00000000 ____D C:\Users\igor
2017-06-03 19:03 - 2014-07-04 00:12 - 00000000 ____D C:\Users\igor\AppData\Local\Packages
2017-06-03 18:59 - 2015-10-30 02:48 - 00000000 ___HD C:\Program Files\WindowsApps
2017-06-03 17:08 - 2014-07-10 22:49 - 00000000 ____D C:\Program Files\Common Files\Steam
2017-06-03 17:01 - 2016-12-19 15:37 - 00000000 ____D C:\Users\igor\AppData\Local\LogMeIn Hamachi
2017-06-03 16:59 - 2016-10-10 09:23 - 00000000 ____D C:\Program Files\Hi-Rez Studios
2017-06-03 16:58 - 2016-02-13 09:16 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT
2017-06-03 16:57 - 2015-10-30 02:13 - 01310720 ___SH C:\WINDOWS\system32\config\BBI
2017-06-02 22:24 - 2014-07-13 14:38 - 00000000 ____D C:\Users\igor\AppData\Roaming\uTorrent
2017-06-02 05:04 - 2016-06-11 02:11 - 00000000 ____D C:\Users\igor\AppData\Roaming\SmartSteamEmu
2017-05-31 12:11 - 2014-07-15 13:57 - 00000000 ____D C:\Program Files\Opera
2017-05-30 20:11 - 2016-10-30 01:19 - 00000317 _____ C:\Users\igor\Desktop\Novo Documento de Texto.txt
2017-05-30 17:45 - 2014-07-05 13:26 - 00456360 ____N (Microsoft Corporation) C:\WINDOWS\system32\MpSigStub.exe
2017-05-30 06:51 - 2016-09-03 01:51 - 00000000 ____D C:\ProgramData\Hotspot Shield
2017-05-30 06:51 - 2014-07-04 01:51 - 00000000 ____D C:\ProgramData\Package Cache
2017-05-28 22:18 - 2016-12-30 18:33 - 00000000 ____D C:\Users\igor\Desktop\Nova pasta (3)
2017-05-26 22:29 - 2017-02-23 04:32 - 00000000 ____D C:\Users\igor\AppData\Roaming\dungeon
2017-05-23 19:11 - 2016-03-21 20:32 - 00000000 ____D C:\GOG Games
2017-05-23 07:18 - 2016-05-10 15:28 - 00000000 ____D C:\Program Files\Life Is Strange Complete Season (EP. 1-5)
2017-05-23 04:28 - 2014-07-04 01:51 - 00000000 ___HD C:\Program Files\InstallShield Installation Information
2017-05-23 04:26 - 2015-04-29 23:35 - 00000000 ____D C:\Program Files\Electronic Arts
2017-05-23 04:13 - 2016-11-22 18:09 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Hi-Rez Studios
2017-05-17 21:24 - 2015-01-22 22:52 - 00000000 ____D C:\Users\igor\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Hazit
2017-05-17 21:21 - 2016-03-28 03:13 - 00000000 ____D C:\Program Files\Hazit
2017-05-17 20:47 - 2015-10-30 02:47 - 00000000 ____D C:\WINDOWS\INF
2017-05-17 19:37 - 2016-04-01 01:46 - 00785262 _____ C:\WINDOWS\system32\prfh0416.dat
2017-05-17 19:37 - 2016-04-01 01:46 - 00154048 _____ C:\WINDOWS\system32\prfc0416.dat
2017-05-17 19:37 - 2016-03-31 21:19 - 01819274 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2017-05-15 23:04 - 2016-04-24 16:29 - 00002218 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2017-05-15 23:04 - 2016-04-24 16:29 - 00002206 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2017-05-13 04:28 - 2015-10-30 02:48 - 00000000 ____D C:\WINDOWS\system32\NDF
2017-05-12 06:54 - 2015-10-30 02:48 - 00000000 ____D C:\WINDOWS\system32\Macromed
2017-05-09 07:05 - 2016-01-01 10:47 - 00000000 ___RD C:\Program Files\Skype
2017-05-09 07:05 - 2014-07-04 20:04 - 00000000 ____D C:\ProgramData\Skype
2017-05-08 20:21 - 2016-02-13 09:13 - 00389840 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2017-05-08 04:46 - 2014-10-13 18:20 - 00000000 ____D C:\KMPlayer
2017-05-06 09:15 - 2015-03-08 21:35 - 00000413 _____ C:\Users\igor\AppData\Local\UserProducts.xml
2017-05-06 05:33 - 2014-09-04 21:08 - 00000000 ____D C:\Program Files\Enterbrain
==================== Files in the root of some directories =======
2016-10-29 17:09 - 2015-08-16 10:53 - 0000431 _____ () C:\Program Files\update-GameOfThrones.bat
2016-10-29 17:09 - 2013-10-12 20:47 - 0000732 _____ () C:\Program Files\visit-www.nosteam.ro.html
2014-07-14 17:20 - 2014-07-14 17:20 - 0000318 _____ () C:\Users\igor\AppData\Roaming\aps.uninstall.scan.results
2016-07-23 03:02 - 2016-07-23 03:02 - 26671784 _____ () C:\Users\igor\AppData\Roaming\gameboxsetup.exe
2014-08-12 18:21 - 2014-08-19 19:19 - 0000096 _____ () C:\Users\igor\AppData\Roaming\LauncherSettings_live.cfg
2016-12-02 08:19 - 2016-12-13 18:04 - 0000132 _____ () C:\Users\igor\AppData\Roaming\Preferências do Formato PNG do Adobe CS6
2016-01-02 20:58 - 2016-01-02 20:58 - 0045270 _____ () C:\Users\igor\AppData\Roaming\room_v3.dat
2014-08-19 12:38 - 2014-08-19 13:07 - 0000039 _____ () C:\Users\igor\AppData\Roaming\TheHunterSettings_live.cfg
2016-10-09 18:34 - 2016-10-09 18:34 - 0000544 _____ () C:\Users\igor\AppData\Local\Nox_crash.log
2015-03-08 21:35 - 2015-03-08 21:35 - 0000003 _____ () C:\Users\igor\AppData\Local\updater.log
2015-03-08 21:35 - 2017-05-06 09:15 - 0000413 _____ () C:\Users\igor\AppData\Local\UserProducts.xml
2015-04-26 14:03 - 2015-04-26 14:03 - 0000000 _____ () C:\Users\igor\AppData\Local\{C3F94888-51B2-47FE-A0FF-C017A364122F}
2015-05-01 14:23 - 2015-05-01 14:23 - 0000000 ____H () C:\ProgramData\DP45977C.lfl
Files to move or delete:
====================
C:\ProgramData\C__Users_igor_Desktop_Nova pasta (2)_CRACK_SuperHideIP.exe
==================== Bamital & volsnap ======================
(There is no automatic fix for files that do not pass verification.)
C:\WINDOWS\explorer.exe => File is digitally signed
C:\WINDOWS\system32\winlogon.exe => File is digitally signed
C:\WINDOWS\system32\wininit.exe => File is digitally signed
C:\WINDOWS\system32\svchost.exe => File is digitally signed
C:\WINDOWS\system32\services.exe => File is digitally signed
C:\WINDOWS\system32\User32.dll => File is digitally signed
C:\WINDOWS\system32\userinit.exe => File is digitally signed
C:\WINDOWS\system32\rpcss.dll => File is digitally signed
C:\WINDOWS\system32\dnsapi.dll => File is digitally signed
C:\WINDOWS\system32\Drivers\volsnap.sys => File is digitally signed
LastRegBack: 2017-05-09 01:45
==================== End of FRST.txt ============================