Resultado do exame da Farbar Recovery Scan Tool (FRST) (x64) Versão: 20-08-2017
Executado por 3green (administrador) em 3GREEN-PC (19-08-2017 18:42:36)
Executando a partir de C:\Users\3green\Downloads
Perfis Carregados: 3green (Perfis Disponíveis: 3green)
Platform: Windows 7 Professional (X64) Idioma: Português (Brasil)
Internet Explorer Versão 8 (Navegador padrão: Chrome)
Modo da Inicialização: Normal
Tutorial da Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processos (Whitelisted) =================

(Se uma entrada for incluída na fixlist, o processo será fechado. O arquivo não será movido.)

(Intel Corporation) C:\Windows\System32\igfxCUIService.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Autodesk Inc.) C:\Program Files (x86)\Common Files\Autodesk Shared\AppManager\R1\AdAppMgrSvc.exe
(Byte Technologies LLC) C:\Program Files\ByteFence\ByteFenceService.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Intel(R) Corporation) C:\Program Files\Intel\TXE Components\TCS\HeciServer.exe
() C:\Program Files\ByteFence\rtop\bin\rtop_svc.exe
(AVAST Software s.r.o.) C:\Program Files\AVAST Software\Avast\x64\aswidsagenta.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe
() C:\Program Files\ByteFence\rtop\bin\rtop_bg.exe
(Intel Corporation) C:\Windows\System32\igfxEM.exe
(Intel Corporation) C:\Windows\System32\igfxHK.exe
(Intel Corporation) C:\Windows\System32\igfxTray.exe
(Akamai Technologies, Inc.) C:\Users\3green\AppData\Local\Akamai\netsession_win.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\avastui.exe
(Akamai Technologies, Inc.) C:\Users\3green\AppData\Local\Akamai\netsession_win.exe
(Valve Corporation) C:\Program Files (x86)\Steam\Steam.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe
(Wondershare) C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe
(Valve Corporation) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe
(Valve Corporation) C:\Program Files (x86)\Common Files\Steam\SteamService.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Byte Technologies LLC) C:\Program Files\ByteFence\ByteFence.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\ClickToRun\AppVShNotify.exe
() C:\Program Files\ByteFence\rsLggr.exe
(Autodesk) C:\Program Files\Autodesk\Maya2016\bin\maya.exe
(Flexera Software LLC) C:\Program Files\Common Files\Macrovision Shared\FlexNet Publisher\FNPLicensingService64.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\System32\msiexec.exe

==================== Registro (Whitelisted) ====================

(Se uma entrada for incluída na fixlist, o ítem no Registro será restaurado para o padrão ou removido. O arquivo não será movido.)

HKLM\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvLaunch.exe [213832 2017-07-24] (AVAST Software)
HKLM\...\Run: [Wondershare Helper Compact.exe] => C:\Program Files\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe
HKLM-x32\...\Run: [USB3MON] => C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [292848 2014-03-06] (Intel Corporation)
HKLM-x32\...\Run: [ADSKAppManager] => C:\Program Files (x86)\Common Files\Autodesk Shared\AppManager\R1\AdAppMgr.exe [529480 2016-02-24] (Autodesk Inc.)
HKLM-x32\...\Run: [AdobeCS4ServiceManager] => C:\Program Files (x86)\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe [611712 2008-08-14] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [Wondershare Helper Compact.exe] => C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe [2137744 2016-10-08] (Wondershare)
HKLM\SOFTWARE\Policies\Microsoft\Windows Defender: Restrição <==== ATENÇÃO
HKU\S-1-5-21-769174121-3863827471-3536820067-1000\...\Run: [EA Core] => "C:\Program Files (x86)\Electronic Arts\EADM\Core.exe" -silent
HKU\S-1-5-21-769174121-3863827471-3536820067-1000\...\Run: [Akamai NetSession Interface] => C:\Users\3green\AppData\Local\Akamai\netsession_win.exe [4490200 2017-01-03] (Akamai Technologies, Inc.)
HKU\S-1-5-21-769174121-3863827471-3536820067-1000\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [27815896 2017-07-28] (Skype Technologies S.A.)
HKU\S-1-5-21-769174121-3863827471-3536820067-1000\...\Run: [Chromium] => c:\users\3green\appdata\local\chromium\application\chrome.exe --auto-launch-at-startup --profile-directory=Default --restore-last-session
HKU\S-1-5-21-769174121-3863827471-3536820067-1000\...\Run: [Steam] => C:\Program Files (x86)\Steam\steam.exe [3062560 2017-07-17] (Valve Corporation)
HKU\S-1-5-21-769174121-3863827471-3536820067-1000\...\Run: [AdobeBridge] => [X]
GroupPolicy: Restrição <==== ATENÇÃO
CHR HKLM\SOFTWARE\Policies\Google: Restrição <==== ATENÇÃO

==================== Internet (Whitelisted) ====================

(Se um ítem for incluído na fixlist, sendo um ítem do Registro, será removido ou restaurado para o padrão.)

Hosts: Há mais de uma entrada no Hosts. Veja a seção Hosts do Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.168.15.1
Tcpip\..\Interfaces\{9C10E0F1-8329-40E6-8B7C-D3349F417FDC}: [DhcpNameServer] 10.0.10.1
Tcpip\..\Interfaces\{ACD546E2-1863-4FDD-8F1E-CEEC728DA9EF}: [DhcpNameServer] 192.168.15.1

Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxps://br.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wbf_sprdnldn_17_22¶m1=1¶m2=f%3D1%26b%3DIE%26cc%3Dbr%26pa%3Dwincy%26cd%3D2XzuyEtN2Y1L1Qzu0FyEyE0DtAtDzztByD0A0E0C0FzytBzytN0D0Tzu0StCzyyBtCtN1L2XzutAtFtBzytFtAtFyByDtN1L1Czu1ByEtN1L1G1B1V1N2Y1L1Qzu2SyByEyB0FtBtB0CyDtGtDyDtC0CtGyDtB0EtAtGtB0EyEyEtGyByByB0FyC0C0FtDtCtAyB0D2QtN1M1F1B2Z1V1N2Y1L1Qzu2StA0BtAtC0FtBzzyBtG0E0B0ByBtGyE0AyDzztGzytCtC0AtGzyzztCzy0B0AyBtD0F0DtByC2QtN0A0LzuyEtN1B2Z1V1T1S1NzutCtBzyyDyB%26cr%3D1188064429%26a%3Dwbf_sprdnldn_17_22%26os_ver%3D6.1%26os%3DWindows%2B7%2BProfessional
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxps://br.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wbf_sprdnldn_17_22¶m1=1¶m2=f%3D1%26b%3DIE%26cc%3Dbr%26pa%3Dwincy%26cd%3D2XzuyEtN2Y1L1Qzu0FyEyE0DtAtDzztByD0A0E0C0FzytBzytN0D0Tzu0StCzyyBtCtN1L2XzutAtFtBzytFtAtFyByDtN1L1Czu1ByEtN1L1G1B1V1N2Y1L1Qzu2SyByEyB0FtBtB0CyDtGtDyDtC0CtGyDtB0EtAtGtB0EyEyEtGyByByB0FyC0C0FtDtCtAyB0D2QtN1M1F1B2Z1V1N2Y1L1Qzu2StA0BtAtC0FtBzzyBtG0E0B0ByBtGyE0AyDzztGzytCtC0AtGzyzztCzy0B0AyBtD0F0DtByC2QtN0A0LzuyEtN1B2Z1V1T1S1NzutCtBzyyDyB%26cr%3D1188064429%26a%3Dwbf_sprdnldn_17_22%26os_ver%3D6.1%26os%3DWindows%2B7%2BProfessional
HKU\S-1-5-21-769174121-3863827471-3536820067-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxps://br.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wbf_sprdnldn_17_22¶m1=1¶m2=f%3D1%26b%3DIE%26cc%3Dbr%26pa%3Dwincy%26cd%3D2XzuyEtN2Y1L1Qzu0FyEyE0DtAtDzztByD0A0E0C0FzytBzytN0D0Tzu0StCzyyBtCtN1L2XzutAtFtBzytFtAtFyByDtN1L1Czu1ByEtN1L1G1B1V1N2Y1L1Qzu2SyByEyB0FtBtB0CyDtGtDyDtC0CtGyDtB0EtAtGtB0EyEyEtGyByByB0FyC0C0FtDtCtAyB0D2QtN1M1F1B2Z1V1N2Y1L1Qzu2StA0BtAtC0FtBzzyBtG0E0B0ByBtGyE0AyDzztGzytCtC0AtGzyzztCzy0B0AyBtD0F0DtByC2QtN0A0LzuyEtN1B2Z1V1T1S1NzutCtBzyyDyB%26cr%3D1188064429%26a%3Dwbf_sprdnldn_17_22%26os_ver%3D6.1%26os%3DWindows%2B7%2BProfessional
HKU\S-1-5-21-769174121-3863827471-3536820067-1000\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://www.msn.com/pt-br/?ocid=iehp
SearchScopes: HKLM -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxps://br.search.yahoo.com/yhs/search?hspart=iry&hsimp=yhs-fullyhosted_003&type=wbf_sprdnldn_17_22¶m1=1¶m2=f%3D4%26b%3DIE%26cc%3Dbr%26pa%3Dwincy%26cd%3D2XzuyEtN2Y1L1Qzu0FyEyE0DtAtDzztByD0A0E0C0FzytBzytN0D0Tzu0StCzyyBtCtN1L2XzutAtFtBzytFtAtFyByDtN1L1Czu1ByEtN1L1G1B1V1N2Y1L1Qzu2SyByEyB0FtBtB0CyDtGtDyDtC0CtGyDtB0EtAtGtB0EyEyEtGyByByB0FyC0C0FtDtCtAyB0D2QtN1M1F1B2Z1V1N2Y1L1Qzu2StA0BtAtC0FtBzzyBtG0E0B0ByBtGyE0AyDzztGzytCtC0AtGzyzztCzy0B0AyBtD0F0DtByC2QtN0A0LzuyEtN1B2Z1V1T1S1NzutCtBzyyDyB%26cr%3D1188064429%26a%3Dwbf_sprdnldn_17_22%26os_ver%3D6.1%26os%3DWindows%2B7%2BProfessional&p={searchTerms}
SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxps://br.search.yahoo.com/yhs/search?hspart=iry&hsimp=yhs-fullyhosted_003&type=wbf_sprdnldn_17_22¶m1=1¶m2=f%3D4%26b%3DIE%26cc%3Dbr%26pa%3Dwincy%26cd%3D2XzuyEtN2Y1L1Qzu0FyEyE0DtAtDzztByD0A0E0C0FzytBzytN0D0Tzu0StCzyyBtCtN1L2XzutAtFtBzytFtAtFyByDtN1L1Czu1ByEtN1L1G1B1V1N2Y1L1Qzu2SyByEyB0FtBtB0CyDtGtDyDtC0CtGyDtB0EtAtGtB0EyEyEtGyByByB0FyC0C0FtDtCtAyB0D2QtN1M1F1B2Z1V1N2Y1L1Qzu2StA0BtAtC0FtBzzyBtG0E0B0ByBtGyE0AyDzztGzytCtC0AtGzyzztCzy0B0AyBtD0F0DtByC2QtN0A0LzuyEtN1B2Z1V1T1S1NzutCtBzyyDyB%26cr%3D1188064429%26a%3Dwbf_sprdnldn_17_22%26os_ver%3D6.1%26os%3DWindows%2B7%2BProfessional&p={searchTerms}
SearchScopes: HKLM-x32 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxps://br.search.yahoo.com/yhs/search?hspart=iry&hsimp=yhs-fullyhosted_003&type=wbf_sprdnldn_17_22¶m1=1¶m2=f%3D4%26b%3DIE%26cc%3Dbr%26pa%3Dwincy%26cd%3D2XzuyEtN2Y1L1Qzu0FyEyE0DtAtDzztByD0A0E0C0FzytBzytN0D0Tzu0StCzyyBtCtN1L2XzutAtFtBzytFtAtFyByDtN1L1Czu1ByEtN1L1G1B1V1N2Y1L1Qzu2SyByEyB0FtBtB0CyDtGtDyDtC0CtGyDtB0EtAtGtB0EyEyEtGyByByB0FyC0C0FtDtCtAyB0D2QtN1M1F1B2Z1V1N2Y1L1Qzu2StA0BtAtC0FtBzzyBtG0E0B0ByBtGyE0AyDzztGzytCtC0AtGzyzztCzy0B0AyBtD0F0DtByC2QtN0A0LzuyEtN1B2Z1V1T1S1NzutCtBzyyDyB%26cr%3D1188064429%26a%3Dwbf_sprdnldn_17_22%26os_ver%3D6.1%26os%3DWindows%2B7%2BProfessional&p={searchTerms}
SearchScopes: HKLM-x32 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxps://br.search.yahoo.com/yhs/search?hspart=iry&hsimp=yhs-fullyhosted_003&type=wbf_sprdnldn_17_22¶m1=1¶m2=f%3D4%26b%3DIE%26cc%3Dbr%26pa%3Dwincy%26cd%3D2XzuyEtN2Y1L1Qzu0FyEyE0DtAtDzztByD0A0E0C0FzytBzytN0D0Tzu0StCzyyBtCtN1L2XzutAtFtBzytFtAtFyByDtN1L1Czu1ByEtN1L1G1B1V1N2Y1L1Qzu2SyByEyB0FtBtB0CyDtGtDyDtC0CtGyDtB0EtAtGtB0EyEyEtGyByByB0FyC0C0FtDtCtAyB0D2QtN1M1F1B2Z1V1N2Y1L1Qzu2StA0BtAtC0FtBzzyBtG0E0B0ByBtGyE0AyDzztGzytCtC0AtGzyzztCzy0B0AyBtD0F0DtByC2QtN0A0LzuyEtN1B2Z1V1T1S1NzutCtBzyyDyB%26cr%3D1188064429%26a%3Dwbf_sprdnldn_17_22%26os_ver%3D6.1%26os%3DWindows%2B7%2BProfessional&p={searchTerms}
SearchScopes: HKU\S-1-5-21-769174121-3863827471-3536820067-1000 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxps://br.search.yahoo.com/yhs/search?hspart=iry&hsimp=yhs-fullyhosted_003&type=wbf_sprdnldn_17_22¶m1=1¶m2=f%3D4%26b%3DIE%26cc%3Dbr%26pa%3Dwincy%26cd%3D2XzuyEtN2Y1L1Qzu0FyEyE0DtAtDzztByD0A0E0C0FzytBzytN0D0Tzu0StCzyyBtCtN1L2XzutAtFtBzytFtAtFyByDtN1L1Czu1ByEtN1L1G1B1V1N2Y1L1Qzu2SyByEyB0FtBtB0CyDtGtDyDtC0CtGyDtB0EtAtGtB0EyEyEtGyByByB0FyC0C0FtDtCtAyB0D2QtN1M1F1B2Z1V1N2Y1L1Qzu2StA0BtAtC0FtBzzyBtG0E0B0ByBtGyE0AyDzztGzytCtC0AtGzyzztCzy0B0AyBtD0F0DtByC2QtN0A0LzuyEtN1B2Z1V1T1S1NzutCtBzyyDyB%26cr%3D1188064429%26a%3Dwbf_sprdnldn_17_22%26os_ver%3D6.1%26os%3DWindows%2B7%2BProfessional&p={searchTerms}
SearchScopes: HKU\S-1-5-21-769174121-3863827471-3536820067-1000 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxps://br.search.yahoo.com/yhs/search?hspart=iry&hsimp=yhs-fullyhosted_003&type=wbf_sprdnldn_17_22¶m1=1¶m2=f%3D4%26b%3DIE%26cc%3Dbr%26pa%3Dwincy%26cd%3D2XzuyEtN2Y1L1Qzu0FyEyE0DtAtDzztByD0A0E0C0FzytBzytN0D0Tzu0StCzyyBtCtN1L2XzutAtFtBzytFtAtFyByDtN1L1Czu1ByEtN1L1G1B1V1N2Y1L1Qzu2SyByEyB0FtBtB0CyDtGtDyDtC0CtGyDtB0EtAtGtB0EyEyEtGyByByB0FyC0C0FtDtCtAyB0D2QtN1M1F1B2Z1V1N2Y1L1Qzu2StA0BtAtC0FtBzzyBtG0E0B0ByBtGyE0AyDzztGzytCtC0AtGzyzztCzy0B0AyBtD0F0DtByC2QtN0A0LzuyEtN1B2Z1V1T1S1NzutCtBzyyDyB%26cr%3D1188064429%26a%3Dwbf_sprdnldn_17_22%26os_ver%3D6.1%26os%3DWindows%2B7%2BProfessional&p={searchTerms}
BHO: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX64\Microsoft Office\Office16\OCHelper.dll [2017-08-19] (Microsoft Corporation)
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2017-07-04] (AVAST Software)
BHO: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2017-03-07] (Google Inc.)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX64\Microsoft Office\Office16\URLREDIR.DLL [2017-08-19] (Microsoft Corporation)
BHO: Microsoft OneDrive for Business Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX64\Microsoft Office\Office16\GROOVEEX.DLL [2017-08-19] (Microsoft Corporation)
BHO-x32: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\root\Office16\OCHelper.dll [2017-08-15] (Microsoft Corporation)
BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2017-07-04] (AVAST Software)
BHO-x32: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [2017-03-07] (Google Inc.)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\root\Office16\URLREDIR.DLL [2017-08-19] (Microsoft Corporation)
BHO-x32: Microsoft OneDrive for Business Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\root\Office16\GROOVEEX.DLL [2017-08-19] (Microsoft Corporation)
Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2017-03-07] (Google Inc.)
Toolbar: HKLM-x32 - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [2017-03-07] (Google Inc.)
Toolbar: HKU\S-1-5-21-769174121-3863827471-3536820067-1000 -> Google Toolbar - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2017-03-07] (Google Inc.)
Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2017-08-19] (Microsoft Corporation)
Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2017-08-19] (Microsoft Corporation)
Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2017-08-19] (Microsoft Corporation)
Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2017-08-19] (Microsoft Corporation)
Filter: deflate - {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\Windows\system32\urlmon.dll [2009-07-13] (Microsoft Corporation)
Filter-x32: deflate - {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\Windows\SysWOW64\urlmon.dll [2009-07-13] (Microsoft Corporation)
Filter: gzip - {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\Windows\system32\urlmon.dll [2009-07-13] (Microsoft Corporation)
Filter-x32: gzip - {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\Windows\SysWOW64\urlmon.dll [2009-07-13] (Microsoft Corporation)
StartMenuInternet: IEXPLORE.EXE - iexplore.exe

FireFox:
========
FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX86\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2017-08-15] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files (x86)\Microsoft Office\root\Office16\NPSPWRAP.DLL [2017-08-15] (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-04-27] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-04-27] (Google Inc.)

Chrome:
=======
CHR HomePage: Default -> hxxp://www.google.com
CHR DefaultSearchURL: Default -> hxxp://srch.bar/{searchTerms}
CHR DefaultSuggestURL: Default -> hxxp://srch.bar/?s={searchTerms}
CHR Profile: C:\Users\3green\AppData\Local\Google\Chrome\User Data\Default [2017-08-19]
CHR Extension: (Google Docs) - C:\Users\3green\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2017-03-07]
CHR Extension: (Google Drive) - C:\Users\3green\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2017-03-07]
CHR Extension: (YouTube) - C:\Users\3green\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2017-03-07]
CHR Extension: (Avast SafePrice) - C:\Users\3green\AppData\Local\Google\Chrome\User Data\Default\Extensions\eofcbnmajmjmplflapaojjnihcjkigck [2017-08-15]
CHR Extension: (Documentos Google off-line) - C:\Users\3green\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2017-03-07]
CHR Extension: (Avast Online Security) - C:\Users\3green\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2017-06-09]
CHR Extension: (Pagamentos da Chrome Web Store) - C:\Users\3green\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2017-03-08]
CHR Extension: (Gmail) - C:\Users\3green\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2017-03-08]
CHR Extension: (Chrome Media Router) - C:\Users\3green\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2017-08-13]
CHR HKLM\...\Chrome\Extension: [nahhmpbckpgdidfnmfkfgiflpjijilce] - hxxps://clients2.google.com/service/update2/crx
CHR HKU\S-1-5-21-769174121-3863827471-3536820067-1000\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [nahhmpbckpgdidfnmfkfgiflpjijilce] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [eofcbnmajmjmplflapaojjnihcjkigck] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [nahhmpbckpgdidfnmfkfgiflpjijilce] - hxxps://clients2.google.com/service/update2/crx

==================== Serviços (Whitelisted) ====================

(Se uma entrada for incluída na fixlist, será removida do Registro. O arquivo não será movido, a menos que seja colocado separadamente.)

R2 AdAppMgrSvc; C:\Program Files (x86)\Common Files\Autodesk Shared\AppManager\R1\AdAppMgrSvc.exe [1145928 2016-02-24] (Autodesk Inc.)
R3 aswbIDSAgent; C:\Program Files\AVAST Software\Avast\x64\aswidsagenta.exe [7430992 2017-07-24] (AVAST Software s.r.o.)
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [263312 2017-07-24] (AVAST Software)
R2 ByteFenceService; C:\Program Files\ByteFence\ByteFenceService.exe [145888 2017-04-19] (Byte Technologies LLC)
R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [4424392 2017-08-10] (Microsoft Corporation)
R2 igfxCUIService1.0.0.0; C:\Windows\system32\igfxCUIService.exe [282096 2014-03-12] (Intel Corporation)
R2 Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\TXE Components\TCS\HeciServer.exe [733696 2013-07-01] (Intel(R) Corporation) [Arquivo não assinado]
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\TXE Components\TCS\SocketHeciServer.exe [822232 2013-07-01] (Intel(R) Corporation)
R2 rtop; C:\Program Files\ByteFence\rtop\bin\rtop_svc.exe [304456 2017-05-25] ()
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2009-07-13] (Microsoft Corporation)

===================== Drivers (Whitelisted) ======================

(Se uma entrada for incluída na fixlist, será removida do Registro. O arquivo não será movido, a menos que seja colocado separadamente.)

R1 aswbidsdriver; C:\Windows\system32\drivers\aswbidsdrivera.sys [320008 2017-07-24] (AVAST Software s.r.o.)
R0 aswbidsh; C:\Windows\system32\drivers\aswbidsha.sys [198976 2017-07-24] (AVAST Software s.r.o.)
R0 aswblog; C:\Windows\system32\drivers\aswbloga.sys [343288 2017-07-24] (AVAST Software s.r.o.)
R0 aswbuniv; C:\Windows\system32\drivers\aswbuniva.sys [57728 2017-07-24] (AVAST Software s.r.o.)
S3 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [46984 2017-07-04] (AVAST Software)
R1 aswKbd; C:\Windows\system32\drivers\aswKbd.sys [41800 2017-07-04] (AVAST Software)
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [146704 2017-08-09] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [110352 2017-07-04] (AVAST Software)
R0 aswRvrt; C:\Windows\system32\drivers\aswRvrt.sys [84392 2017-07-04] (AVAST Software)
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1015880 2017-08-09] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [585608 2017-07-04] (AVAST Software)
R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [198768 2017-07-04] (AVAST Software)
R0 aswVmm; C:\Windows\system32\drivers\aswVmm.sys [361336 2017-07-04] (AVAST Software)
R3 TXEIx64; C:\Windows\System32\DRIVERS\TXEIx64.sys [88592 2014-01-15] (Intel Corporation)

==================== NetSvcs (Whitelisted) ===================

(Se uma entrada for incluída na fixlist, será removida do Registro. O arquivo não será movido, a menos que seja colocado separadamente.)


==================== Três Meses Criados arquivos e pastas ========

(Se uma entrada for incluída na fixlist, o arquivo/pasta será movido.)

2017-08-19 18:42 - 2017-08-19 18:43 - 000022597 _____ C:\Users\3green\Downloads\FRST.txt
2017-08-19 18:41 - 2017-08-19 18:42 - 000000000 ____D C:\FRST
2017-08-19 18:39 - 2017-08-19 18:39 - 002395648 _____ (Farbar) C:\Users\3green\Downloads\FRST64.exe
2017-08-19 18:38 - 2017-08-19 18:38 - 000016224 _____ (Microsoft Corporation) C:\Users\3green\Downloads\api-ms-win-crt-runtime-l1-1-0.dll
2017-08-19 18:28 - 2017-08-19 18:33 - 000000000 ____D C:\Windows\system32\MRT
2017-08-19 18:26 - 2017-08-19 18:26 - 140394280 ____C (Microsoft Corporation) C:\Windows\system32\MRT.exe
2017-08-19 18:26 - 2011-04-09 03:58 - 000142336 _____ (Microsoft Corporation) C:\Windows\system32\poqexec.exe
2017-08-19 18:26 - 2011-04-09 02:56 - 000123904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\poqexec.exe
2017-08-19 18:23 - 2017-08-19 18:23 - 001034556 _____ C:\Users\3green\Downloads\Windows6.1-KB2999226-x64.msu
2017-08-19 18:22 - 2017-08-19 18:22 - 000629006 _____ C:\Users\3green\Downloads\Windows6.1-KB2999226-x86.msu
2017-08-19 18:21 - 2017-08-19 18:21 - 000603348 _____ C:\Users\3green\Downloads\Windows8.1-KB2999226-x86.msu
2017-08-19 18:17 - 2017-08-19 18:17 - 000000000 ____D C:\Users\3green\Downloads\Substance Painter
2017-08-19 17:10 - 2017-08-19 17:10 - 000000000 ____D C:\Users\3green\Documents\Maria Carolina - RM78251
2017-08-19 17:05 - 2017-08-19 17:05 - 011423552 _____ C:\Users\3green\Downloads\MayaBonusTools-2014-2017-win64.msi
2017-08-19 16:56 - 2017-08-19 18:24 - 003997775 _____ C:\Users\3green\Downloads\Dragao.ma
2017-08-19 16:56 - 2017-08-19 18:15 - 000297196 _____ C:\Users\3green\Downloads\Wings.ma
2017-08-15 20:04 - 2017-08-15 20:04 - 000231638 _____ C:\Users\3green\Downloads\WhatsApp Image 2017-08-15 at 20.01.12 (1).jpeg
2017-08-15 20:04 - 2017-08-15 20:04 - 000229834 _____ C:\Users\3green\Downloads\WhatsApp Image 2017-08-15 at 20.01.11 (1).jpeg
2017-08-15 20:04 - 2017-08-15 20:04 - 000225201 _____ C:\Users\3green\Downloads\WhatsApp Image 2017-08-15 at 20.01.11.jpeg
2017-08-15 20:04 - 2017-08-15 20:04 - 000143595 _____ C:\Users\3green\Downloads\WhatsApp Image 2017-08-15 at 19.59.23.jpeg
2017-08-15 20:03 - 2017-08-15 20:03 - 000152029 _____ C:\Users\3green\Downloads\WhatsApp Image 2017-08-15 at 20.01.12.jpeg
2017-08-15 18:32 - 2017-08-15 18:32 - 000519061 _____ C:\Users\3green\Downloads\Aula_12__Playtest_pt.1.pdf
2017-08-09 22:21 - 2017-08-09 22:21 - 002542891 _____ C:\Users\3green\Documents\Kaboom!.pptx
2017-08-09 21:30 - 2017-08-09 21:30 - 000006579 _____ C:\Users\3green\Downloads\atari.zip
2017-08-09 18:34 - 2017-08-09 18:34 - 000000000 ____D C:\Users\3green\Downloads\Atari
2017-08-09 18:30 - 2017-08-09 18:31 - 061044533 _____ C:\Users\3green\Downloads\Atari-20170809T212924Z-001.zip
2017-08-08 22:31 - 2017-08-08 22:31 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Allegorithmic
2017-08-08 22:25 - 2017-08-08 22:25 - 000000000 ____D C:\Program Files\Allegorithmic
2017-08-08 21:29 - 2017-08-08 21:45 - 1287343056 _____ (Allegorithmic ) C:\Users\3green\Downloads\Substance_Painter-2017.2.0-1736-msvc14-x64-standard-full.exe
2017-08-07 21:52 - 2017-08-07 21:52 - 010253600 _____ C:\Users\3green\Downloads\WhatsApp Video 2017-08-07 at 20.13.02.mp4
2017-08-06 23:35 - 2017-08-06 23:36 - 002735399 _____ C:\Users\3green\Downloads\GalinhaFrente.psd
2017-08-06 23:35 - 2017-08-06 23:35 - 002734531 _____ C:\Users\3green\Downloads\GalnihaFrente.psd
2017-08-03 22:18 - 2017-08-03 23:26 - 000000000 ____D C:\Users\3green\Downloads\Wireframes
2017-08-03 22:12 - 2017-08-03 22:13 - 018011197 _____ C:\Users\3green\Downloads\Wireframes-20170804T011233Z-001.zip
2017-08-01 23:36 - 2017-08-01 23:36 - 002736799 _____ C:\Users\3green\Downloads\COH_Desenho.psd
2017-08-01 23:02 - 2017-08-01 23:10 - 045936116 _____ C:\Users\3green\Downloads\1Color.psd
2017-08-01 22:27 - 2017-08-01 22:27 - 000000000 ____D C:\Users\3green\Downloads\2prot___
2017-08-01 22:26 - 2017-08-01 22:26 - 000032223 _____ C:\Users\3green\Downloads\2prot___.zip
2017-08-01 22:00 - 2017-08-01 22:00 - 000000000 ____D C:\Users\3green\Downloads\wood2
2017-08-01 21:59 - 2017-08-01 21:59 - 000065220 _____ C:\Users\3green\Downloads\wood2.zip
2017-08-01 18:56 - 2017-08-01 22:58 - 046171751 _____ C:\Users\3green\Downloads\1 (1).psd
2017-08-01 17:58 - 2017-08-01 18:53 - 042460545 _____ C:\Users\3green\Downloads\1.psd
2017-07-30 23:36 - 2017-07-30 23:36 - 000000000 ____D C:\Users\3green\Documents\My Games
2017-07-30 23:36 - 2017-07-30 23:36 - 000000000 ____D C:\Program Files (x86)\NVIDIA Corporation
2017-07-30 23:36 - 2017-07-30 23:36 - 000000000 ____D C:\Program Files (x86)\AGEIA Technologies
2017-07-30 23:35 - 2010-02-04 10:01 - 000530776 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_6.dll
2017-07-30 23:35 - 2010-02-04 10:01 - 000528216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_6.dll
2017-07-30 23:35 - 2010-02-04 10:01 - 000238936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_6.dll
2017-07-30 23:35 - 2010-02-04 10:01 - 000176984 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_6.dll
2017-07-30 23:35 - 2010-02-04 10:01 - 000078680 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_4.dll
2017-07-30 23:35 - 2010-02-04 10:01 - 000074072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_4.dll
2017-07-30 23:35 - 2010-02-04 10:01 - 000024920 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_7.dll
2017-07-30 23:35 - 2010-02-04 10:01 - 000022360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_7.dll
2017-07-30 23:35 - 2009-09-04 17:44 - 000517960 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_5.dll
2017-07-30 23:35 - 2009-09-04 17:44 - 000515416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_5.dll
2017-07-30 23:35 - 2009-09-04 17:44 - 000238936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_5.dll
2017-07-30 23:35 - 2009-09-04 17:44 - 000176968 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_5.dll
2017-07-30 23:35 - 2009-09-04 17:44 - 000073544 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_3.dll
2017-07-30 23:35 - 2009-09-04 17:44 - 000069464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_3.dll
2017-07-30 23:35 - 2009-09-04 17:29 - 005554512 _____ (Microsoft Corporation) C:\Windows\system32\d3dcsx_42.dll
2017-07-30 23:35 - 2009-09-04 17:29 - 005501792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dcsx_42.dll
2017-07-30 23:35 - 2009-09-04 17:29 - 002582888 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_42.dll
2017-07-30 23:35 - 2009-09-04 17:29 - 002475352 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_42.dll
2017-07-30 23:35 - 2009-09-04 17:29 - 001974616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_42.dll
2017-07-30 23:35 - 2009-09-04 17:29 - 001892184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_42.dll
2017-07-30 23:35 - 2009-09-04 17:29 - 000523088 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_42.dll
2017-07-30 23:35 - 2009-09-04 17:29 - 000453456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_42.dll
2017-07-30 23:35 - 2009-09-04 17:29 - 000285024 _____ (Microsoft Corporation) C:\Windows\system32\d3dx11_42.dll
2017-07-30 23:35 - 2009-09-04 17:29 - 000235344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx11_42.dll
2017-07-30 23:35 - 2009-03-16 14:18 - 000521560 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_4.dll
2017-07-30 23:35 - 2009-03-16 14:18 - 000517448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_4.dll
2017-07-30 23:35 - 2009-03-16 14:18 - 000235352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_4.dll
2017-07-30 23:35 - 2009-03-16 14:18 - 000174936 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_4.dll
2017-07-30 23:35 - 2009-03-16 14:18 - 000024920 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_6.dll
2017-07-30 23:35 - 2009-03-16 14:18 - 000022360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_6.dll
2017-07-30 23:35 - 2009-03-09 15:27 - 005425496 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_41.dll
2017-07-30 23:35 - 2009-03-09 15:27 - 004178264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_41.dll
2017-07-30 23:35 - 2009-03-09 15:27 - 002430312 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_41.dll
2017-07-30 23:35 - 2009-03-09 15:27 - 001846632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_41.dll
2017-07-30 23:35 - 2009-03-09 15:27 - 000520544 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_41.dll
2017-07-30 23:35 - 2009-03-09 15:27 - 000453456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_41.dll
2017-07-30 23:35 - 2008-10-27 10:04 - 000518480 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_3.dll
2017-07-30 23:35 - 2008-10-27 10:04 - 000514384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_3.dll
2017-07-30 23:35 - 2008-10-27 10:04 - 000235856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_3.dll
2017-07-30 23:35 - 2008-10-27 10:04 - 000175440 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_3.dll
2017-07-30 23:35 - 2008-10-27 10:04 - 000074576 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_2.dll
2017-07-30 23:35 - 2008-10-27 10:04 - 000070992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_2.dll
2017-07-30 23:35 - 2008-10-27 10:04 - 000025936 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_5.dll
2017-07-30 23:35 - 2008-10-27 10:04 - 000023376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_5.dll
2017-07-30 23:35 - 2008-10-15 06:22 - 005631312 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_40.dll
2017-07-30 23:35 - 2008-10-15 06:22 - 004379984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_40.dll
2017-07-30 23:35 - 2008-10-15 06:22 - 002605920 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_40.dll
2017-07-30 23:35 - 2008-10-15 06:22 - 002036576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_40.dll
2017-07-30 23:35 - 2008-10-15 06:22 - 000519000 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_40.dll
2017-07-30 23:35 - 2008-10-15 06:22 - 000452440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_40.dll
2017-07-30 23:35 - 2008-07-31 10:41 - 000238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_2.dll
2017-07-30 23:35 - 2008-07-31 10:41 - 000177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_2.dll
2017-07-30 23:35 - 2008-07-31 10:41 - 000072200 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_1.dll
2017-07-30 23:35 - 2008-07-31 10:40 - 000513544 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_2.dll
2017-07-30 23:35 - 2008-07-10 11:00 - 004992520 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_39.dll
2017-07-30 23:35 - 2008-07-10 11:00 - 001942552 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_39.dll
2017-07-30 23:35 - 2008-07-10 11:00 - 000540688 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_39.dll
2017-07-30 23:35 - 2008-05-30 14:19 - 000511496 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_1.dll
2017-07-30 23:35 - 2008-05-30 14:19 - 000507400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_1.dll
2017-07-30 23:35 - 2008-05-30 14:18 - 000238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_1.dll
2017-07-30 23:35 - 2008-05-30 14:18 - 000177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_1.dll
2017-07-30 23:35 - 2008-05-30 14:17 - 000068104 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_0.dll
2017-07-30 23:35 - 2008-05-30 14:17 - 000065032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_0.dll
2017-07-30 23:35 - 2008-05-30 14:17 - 000025608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_4.dll
2017-07-30 23:35 - 2008-05-30 14:16 - 000028168 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_4.dll
2017-07-30 23:35 - 2008-05-30 14:11 - 004991496 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_38.dll
2017-07-30 23:35 - 2008-05-30 14:11 - 003850760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_38.dll
2017-07-30 23:35 - 2008-05-30 14:11 - 001941528 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_38.dll
2017-07-30 23:35 - 2008-05-30 14:11 - 001491992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_38.dll
2017-07-30 23:35 - 2008-05-30 14:11 - 000540688 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_38.dll
2017-07-30 23:35 - 2008-05-30 14:11 - 000467984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_38.dll
2017-07-30 23:35 - 2008-03-05 16:04 - 000489480 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_0.dll
2017-07-30 23:35 - 2008-03-05 16:03 - 000479752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_0.dll
2017-07-30 23:35 - 2008-03-05 16:03 - 000238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_0.dll
2017-07-30 23:35 - 2008-03-05 16:03 - 000177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_0.dll
2017-07-30 23:35 - 2008-03-05 16:00 - 000028168 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_3.dll
2017-07-30 23:35 - 2008-03-05 16:00 - 000025608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_3.dll
2017-07-30 23:35 - 2008-03-05 15:56 - 004910088 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_37.dll
2017-07-30 23:35 - 2008-03-05 15:56 - 003786760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_37.dll
2017-07-30 23:35 - 2008-03-05 15:56 - 001860120 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_37.dll
2017-07-30 23:35 - 2008-03-05 15:56 - 001420824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_37.dll
2017-07-30 23:35 - 2008-02-05 23:07 - 000529424 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_37.dll
2017-07-30 23:35 - 2008-02-05 23:07 - 000462864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_37.dll
2017-07-30 23:35 - 2007-10-22 03:40 - 000411656 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_10.dll
2017-07-30 23:35 - 2007-10-22 03:39 - 000267272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_10.dll
2017-07-30 23:34 - 2007-10-22 03:37 - 000021000 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_2.dll
2017-07-30 23:34 - 2007-10-22 03:37 - 000017928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_2.dll
2017-07-30 23:34 - 2007-10-12 15:14 - 005081608 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_36.dll
2017-07-30 23:34 - 2007-10-12 15:14 - 003734536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_36.dll
2017-07-30 23:34 - 2007-10-12 15:14 - 002006552 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_36.dll
2017-07-30 23:34 - 2007-10-12 15:14 - 001374232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_36.dll
2017-07-30 23:34 - 2007-10-02 09:56 - 000508264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_36.dll
2017-07-30 23:34 - 2007-10-02 09:56 - 000444776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_36.dll
2017-07-30 23:34 - 2007-07-20 00:57 - 000411496 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_9.dll
2017-07-30 23:34 - 2007-07-20 00:57 - 000267112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_9.dll
2017-07-30 23:34 - 2007-07-19 18:14 - 005073256 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_35.dll
2017-07-30 23:34 - 2007-07-19 18:14 - 003727720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_35.dll
2017-07-30 23:34 - 2007-07-19 18:14 - 001985904 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_35.dll
2017-07-30 23:34 - 2007-07-19 18:14 - 001358192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_35.dll
2017-07-30 23:34 - 2007-07-19 18:14 - 000508264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_35.dll
2017-07-30 23:34 - 2007-07-19 18:14 - 000444776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_35.dll
2017-07-30 23:34 - 2007-06-20 20:49 - 000409960 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_8.dll
2017-07-30 23:34 - 2007-06-20 20:46 - 000266088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_8.dll
2017-07-30 23:34 - 2007-05-16 16:45 - 004496232 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_34.dll
2017-07-30 23:34 - 2007-05-16 16:45 - 003497832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_34.dll
2017-07-30 23:34 - 2007-05-16 16:45 - 001401200 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_34.dll
2017-07-30 23:34 - 2007-05-16 16:45 - 001124720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_34.dll
2017-07-30 23:34 - 2007-05-16 16:45 - 000506728 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_34.dll
2017-07-30 23:34 - 2007-05-16 16:45 - 000443752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_34.dll
2017-07-30 23:34 - 2007-04-04 18:55 - 000403304 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_7.dll
2017-07-30 23:34 - 2007-04-04 18:55 - 000261480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_7.dll
2017-07-30 23:34 - 2007-04-04 18:54 - 000107368 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_3.dll
2017-07-30 23:34 - 2007-04-04 18:53 - 000081768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_3.dll
2017-07-30 23:34 - 2007-03-15 16:57 - 000506728 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_33.dll
2017-07-30 23:34 - 2007-03-15 16:57 - 000443752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_33.dll
2017-07-30 23:34 - 2007-03-12 16:42 - 004494184 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_33.dll
2017-07-30 23:34 - 2007-03-12 16:42 - 003495784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_33.dll
2017-07-30 23:34 - 2007-03-12 16:42 - 001400176 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_33.dll
2017-07-30 23:34 - 2007-03-12 16:42 - 001123696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_33.dll
2017-07-30 23:34 - 2007-03-05 12:42 - 000017688 _____ (Microsoft Corporation) C:\Windows\system32\x3daudio1_1.dll
2017-07-30 23:34 - 2007-03-05 12:42 - 000015128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\x3daudio1_1.dll
2017-07-30 23:34 - 2007-01-24 15:27 - 000393576 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_6.dll
2017-07-30 23:34 - 2007-01-24 15:27 - 000255848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_6.dll
2017-07-30 23:34 - 2006-12-08 12:02 - 000251672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_5.dll
2017-07-30 23:34 - 2006-12-08 12:00 - 000390424 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_5.dll
2017-07-30 23:34 - 2006-11-29 13:06 - 004398360 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_32.dll
2017-07-30 23:34 - 2006-11-29 13:06 - 003426072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_32.dll
2017-07-30 23:34 - 2006-11-29 13:06 - 000469264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10.dll
2017-07-30 23:34 - 2006-11-29 13:06 - 000440080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10.dll
2017-07-30 23:34 - 2006-09-28 16:05 - 000237848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_4.dll
2017-07-30 23:34 - 2006-09-28 16:04 - 000364824 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_4.dll
2017-07-30 23:34 - 2006-07-28 09:31 - 000083736 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_2.dll
2017-07-30 23:34 - 2006-07-28 09:30 - 000363288 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_3.dll
2017-07-30 23:34 - 2006-07-28 09:30 - 000236824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_3.dll
2017-07-30 23:34 - 2006-07-28 09:30 - 000062744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_2.dll
2017-07-30 23:34 - 2006-05-31 07:24 - 000230168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_2.dll
2017-07-30 23:34 - 2006-05-31 07:22 - 000354072 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_2.dll
2017-07-30 23:34 - 2006-03-31 12:41 - 003927248 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_30.dll
2017-07-30 23:34 - 2006-03-31 12:40 - 002388176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_30.dll
2017-07-30 23:34 - 2006-03-31 12:40 - 000352464 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_1.dll
2017-07-30 23:34 - 2006-03-31 12:39 - 000229584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_1.dll
2017-07-30 23:34 - 2006-03-31 12:39 - 000083664 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_1.dll
2017-07-30 23:34 - 2006-03-31 12:39 - 000062672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_1.dll
2017-07-30 23:34 - 2006-02-03 08:43 - 003830992 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_29.dll
2017-07-30 23:34 - 2006-02-03 08:43 - 002332368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_29.dll
2017-07-30 23:34 - 2006-02-03 08:42 - 000355536 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_0.dll
2017-07-30 23:34 - 2006-02-03 08:42 - 000230096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_0.dll
2017-07-30 23:34 - 2006-02-03 08:41 - 000016592 _____ (Microsoft Corporation) C:\Windows\system32\x3daudio1_0.dll
2017-07-30 23:34 - 2006-02-03 08:41 - 000014032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\x3daudio1_0.dll
2017-07-30 23:34 - 2005-12-05 18:09 - 003815120 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_28.dll
2017-07-30 23:34 - 2005-12-05 18:09 - 002323664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_28.dll
2017-07-30 23:34 - 2005-07-22 19:59 - 003807440 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_27.dll
2017-07-30 23:34 - 2005-07-22 19:59 - 002319568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_27.dll
2017-07-30 23:34 - 2005-05-26 15:34 - 003767504 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_26.dll
2017-07-30 23:34 - 2005-05-26 15:34 - 002297552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_26.dll
2017-07-30 23:34 - 2005-03-18 17:19 - 003823312 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_25.dll
2017-07-30 23:34 - 2005-03-18 17:19 - 002337488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_25.dll
2017-07-30 23:34 - 2005-02-05 19:45 - 003544272 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_24.dll
2017-07-30 23:11 - 2017-07-30 23:11 - 000000222 _____ C:\Users\3green\Desktop\Life is Strange.url
2017-07-30 20:00 - 2017-07-30 20:00 - 011374277 _____ C:\Users\3green\Downloads\FarmBook.psd
2017-07-30 16:58 - 2017-07-30 16:58 - 018527227 _____ C:\Users\3green\Downloads\TelaGameOver (1).psd
2017-07-28 23:28 - 2017-07-28 23:28 - 000000000 ____D C:\Users\Todos os Usuários\HP
2017-07-28 23:28 - 2017-07-28 23:28 - 000000000 ____D C:\ProgramData\HP
2017-07-28 22:29 - 2017-07-28 22:30 - 000000000 ____D C:\Users\3green\Documents\HTML
2017-07-28 22:27 - 2017-07-28 23:37 - 000000000 ____D C:\Users\3green\Documents\Histórias
2017-07-28 22:26 - 2017-07-28 23:37 - 000000000 ____D C:\Users\3green\Documents\Documentos
2017-07-28 22:23 - 2017-08-16 20:50 - 000000000 ____D C:\Users\3green\Documents\RPG
2017-07-28 22:22 - 2017-07-28 22:31 - 000000000 ____D C:\Users\3green\Documents\Notebook
2017-07-24 14:17 - 2017-07-24 14:16 - 000400464 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe
2017-07-08 00:22 - 2017-07-08 00:23 - 017999759 _____ C:\Users\3green\Downloads\peter & roman - I have hella feelings for you..mp4
2017-07-08 00:09 - 2017-07-08 00:14 - 073403258 _____ C:\Users\3green\Downloads\Little Mix - Power (Official Video) ft. Stormzy.mp4
2017-07-08 00:01 - 2017-07-08 00:03 - 016372782 _____ C:\Users\3green\Downloads\ONCE UPON A TIME IN VENICE Official Trailer + Clip (2017) Jason Momoa VS Bruce Willis Movie HD.mp4
2017-07-07 23:54 - 2017-07-07 23:59 - 052393512 _____ C:\Users\3green\Downloads\Halsey - Now Or Never.mp4
2017-07-07 23:52 - 2017-07-07 23:58 - 026311691 _____ C:\Users\3green\Downloads\Hemlock Grove - Radioactive.mp4
2017-07-07 22:59 - 2017-07-07 22:59 - 009344052 _____ C:\Users\3green\Downloads\POMPEII Movie Clip # 3 (Emily Browning & Kit Harington).mp4
2017-07-07 22:46 - 2017-07-07 22:47 - 013971574 _____ C:\Users\3green\Downloads\Nevs Raphael Sander.mp4
2017-07-07 17:53 - 2017-07-07 17:54 - 031963036 _____ C:\Users\3green\Downloads\The Veronicas - Lolita [OFFICIAL VIDEO].mp4
2017-07-05 23:24 - 2017-07-05 23:25 - 010170705 _____ C:\Users\3green\Downloads\Zoe Saldana - GQ September 2011.mp4
2017-07-05 23:08 - 2017-07-05 23:09 - 005768572 _____ C:\Users\3green\Downloads\DOCTOR WHO Exclusive Deleted Scene from The Time of The Doctor Christmas Special - BBC America.mp4
2017-07-05 23:07 - 2017-07-05 23:09 - 019913105 _____ C:\Users\3green\Downloads\Love, Rosie - Official Trailer (HD).mp4
2017-07-05 23:02 - 2017-07-05 23:04 - 064360193 _____ C:\Users\3green\Downloads\Cartier ' Destinée ' a Romantic Short Film - 卡地亞 浪漫定情巴黎.mp4
2017-07-05 22:53 - 2017-07-05 22:56 - 073144304 _____ C:\Users\3green\Downloads\Chuck and Sarah Alternate Ending.mp4
2017-07-05 22:51 - 2017-07-05 22:51 - 011850483 _____ C:\Users\3green\Downloads\Little Brutes - Make Our Own Way (Official Music Video).mp4
2017-07-05 22:50 - 2017-07-05 22:50 - 014258649 _____ C:\Users\3green\Downloads\Pearl Harbor (2001) - Evelyn and Danny Best Romantic Scenes [HQ].mp4
2017-07-05 22:43 - 2017-07-05 22:47 - 049360152 _____ C:\Users\3green\Downloads\Katy Perry - Thinking Of You (Official).mp4
2017-07-05 22:32 - 2017-07-05 22:33 - 016563836 _____ C:\Users\3green\Downloads\Josh Hartnett in conversation with Bruce Weber - MARC O'POLO Campaign Fall-Winter 2015.mp4
2017-07-05 22:03 - 2017-07-05 22:06 - 028676677 _____ C:\Users\3green\Downloads\Charles e Debora - Take control.mp4
2017-07-05 21:51 - 2017-07-05 21:51 - 011914092 _____ C:\Users\3green\Downloads\How to Date Lauren Cohan.mp4
2017-07-05 21:49 - 2017-07-05 21:50 - 034394502 _____ C:\Users\3green\Downloads\'Point Break' Star Luke Bracey Reveals How Remake's Stunts Top the Original.mp4
2017-07-05 21:42 - 2017-07-05 21:42 - 000046762 _____ C:\Users\3green\Downloads\Daisy Ridley December Cover Star - Behind the Scenes - ELLE.mp4.crdownload
2017-07-05 21:29 - 2017-07-05 21:33 - 068118611 _____ C:\Users\3green\Downloads\How Tarzan Met Jane - Hannah Stocking & Anwar Jibawi.mp4
2017-07-05 21:26 - 2017-07-05 21:26 - 037438120 _____ C:\Users\3green\Downloads\DeadFall - Dakota - Jay & Liza.mp4
2017-07-05 21:25 - 2017-07-05 21:26 - 007705742 _____ C:\Users\3green\Downloads\Deadfall- Clip 5 2012 Movie Scene.mp4
2017-07-05 21:24 - 2017-07-05 21:24 - 000000000 ____D C:\Users\Todos os Usuários\Wondershare
2017-07-05 21:24 - 2017-07-05 21:24 - 000000000 ____D C:\ProgramData\Wondershare
2017-07-05 21:13 - 2017-07-05 21:14 - 031972775 _____ C:\Users\3green\Downloads\HD # Лили и Дэвид # к-ф -- Очень хорошие девочки --.mp4
2017-07-05 21:12 - 2017-07-05 21:12 - 000000000 ____D C:\Users\3green\AppData\Local\Wondershare
2017-07-05 21:11 - 2017-07-05 21:11 - 000001034 _____ C:\Users\Public\Desktop\Wondershare Filmora.lnk
2017-07-05 21:11 - 2017-07-05 21:11 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Wondershare
2017-07-05 21:08 - 2017-07-28 22:27 - 000000000 ____D C:\Users\3green\Documents\Wondershare Filmora
2017-07-05 21:08 - 2017-07-05 21:08 - 000000000 ____D C:\Users\Todos os Usuários\Wondershare Video Editor
2017-07-05 21:08 - 2017-07-05 21:08 - 000000000 ____D C:\ProgramData\Wondershare Video Editor
2017-07-05 21:08 - 2017-07-05 21:08 - 000000000 ____D C:\Program Files\Wondershare
2017-07-05 21:08 - 2017-03-17 11:43 - 001250304 _____ (CineForm Inc.) C:\Windows\system32\CFDecode64.ax
2017-07-05 21:04 - 2017-07-05 21:06 - 000000000 ____D C:\Users\Public\Documents\Wondershare
2017-07-05 21:03 - 2017-07-05 21:04 - 001066128 _____ C:\Users\3green\Downloads\filmora_setup_full846.exe
2017-07-03 04:35 - 2017-07-04 22:04 - 019104519 _____ C:\Users\3green\Downloads\SelecaodeFases.psd
2017-07-03 04:27 - 2017-07-03 04:27 - 009001548 _____ C:\Users\3green\Downloads\Fases.psd
2017-07-03 03:43 - 2017-07-30 20:00 - 011373413 _____ C:\Users\3green\Downloads\TelaGameOver.psd
2017-07-03 02:54 - 2017-07-03 02:54 - 008682868 _____ C:\Users\3green\Downloads\levels.psd
2017-07-03 02:43 - 2017-07-03 02:44 - 008436640 _____ C:\Users\3green\Downloads\baseIconeHome.psd
2017-07-03 02:02 - 2017-07-03 02:02 - 001367852 _____ C:\Users\3green\Downloads\Check.psd
2017-07-03 01:30 - 2017-07-03 01:30 - 000561478 _____ C:\Users\3green\Downloads\Tomás.psd
2017-07-03 01:09 - 2017-07-03 01:09 - 000000000 ____D C:\Users\3green\Downloads\PT_Sans_Narrow
2017-07-03 00:55 - 2017-07-03 03:43 - 018525115 _____ C:\Users\3green\Downloads\TelaCreditos.psd
2017-07-03 00:28 - 2017-07-03 04:27 - 009000684 _____ C:\Users\3green\Downloads\botaoPause.psd
2017-07-03 00:28 - 2017-07-03 00:28 - 009228806 _____ C:\Users\3green\Downloads\BaseBotaoVoltar.psd
2017-07-03 00:28 - 2017-07-03 00:28 - 002806722 _____ C:\Users\3green\Downloads\TelaMenu.psd
2017-07-03 00:04 - 2017-07-03 00:04 - 000000000 ___RD C:\Program Files\Crack
2017-07-02 23:58 - 2017-07-02 23:58 - 000001158 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Photoshop CS4 (64 Bit).lnk
2017-07-02 23:57 - 2017-07-02 23:57 - 000000000 ____D C:\Program Files\Adobe
2017-07-02 23:55 - 2017-07-02 23:55 - 000001137 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Photoshop CS4.lnk
2017-07-02 23:51 - 2017-07-02 23:51 - 000001099 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Bridge CS4.lnk
2017-07-02 23:50 - 2017-07-02 23:50 - 000001436 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Drive CS4.lnk
2017-07-02 23:49 - 2017-07-02 23:49 - 000000000 ____D C:\Windows\SysWOW64\spool
2017-07-02 23:48 - 2017-07-02 23:48 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe
2017-07-02 23:48 - 2017-07-02 23:48 - 000000000 ____D C:\Program Files (x86)\Adobe Media Player
2017-07-02 23:47 - 2017-07-02 23:47 - 000001192 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Device Central CS4.lnk
2017-07-02 23:43 - 2017-07-03 22:07 - 000000000 ____D C:\Users\3green\AppData\Local\Adobe
2017-07-02 23:41 - 2017-07-03 22:07 - 000000000 ____D C:\Users\Todos os Usuários\Adobe
2017-07-02 23:41 - 2017-07-03 22:07 - 000000000 ____D C:\ProgramData\Adobe
2017-07-02 23:41 - 2017-07-02 23:55 - 000000000 ____D C:\Program Files (x86)\Adobe
2017-07-02 23:41 - 2017-07-02 23:41 - 000001407 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe ExtendScript Toolkit CS4.lnk
2017-07-02 23:41 - 2017-07-02 23:41 - 000001283 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Extension Manager CS4.lnk
2017-07-02 23:40 - 2017-07-02 23:59 - 000000000 ____D C:\Program Files\Common Files\Adobe
2017-06-30 18:29 - 2017-06-30 18:29 - 000000000 ____D C:\Users\3green\Downloads\site
2017-06-29 01:32 - 2017-06-29 01:39 - 000000000 ____D C:\Users\3green\Documents\Faculdade
2017-06-29 00:30 - 2017-06-29 00:30 - 000000000 ____D C:\Users\3green\Downloads\Photoshop 16
2017-06-29 00:04 - 2017-06-29 00:08 - 071832901 _____ C:\Users\3green\Downloads\Photoshop 16 LS20 (64-Bit).zip
2017-06-23 18:49 - 2017-06-23 18:49 - 000000000 ____D C:\Users\3green\Downloads\Originals
2017-06-18 19:19 - 2017-06-28 23:57 - 000000000 ____D C:\Users\3green\Documents\Adobe
2017-06-18 19:03 - 2017-06-18 19:03 - 003733552 _____ C:\Users\3green\Downloads\winrar-x64-54br.exe
2017-06-18 18:59 - 2017-06-18 18:59 - 002240192 _____ (BitTorrent Inc.) C:\Users\3green\Downloads\uTorrent.exe
2017-06-13 17:09 - 2017-06-13 17:09 - 000165962 _____ C:\Users\3green\Downloads\Cabeca.ma
2017-06-11 11:51 - 2017-06-11 11:51 - 000000833 _____ C:\Users\3green\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Start Tor Browser.lnk
2017-06-11 11:51 - 2017-06-11 11:51 - 000000785 _____ C:\Users\3green\Desktop\Start Tor Browser.lnk
2017-06-11 11:51 - 2017-06-11 11:51 - 000000000 ____D C:\Users\3green\Desktop\Tor Browser
2017-06-11 11:50 - 2017-06-11 11:50 - 054278592 _____ C:\Users\3green\Downloads\torbrowser-install-7.0_en-US.exe
2017-06-09 11:17 - 2017-06-09 11:18 - 000000000 ____D C:\Users\3green\AppData\Local\PAYDAY 2
2017-06-09 11:17 - 2005-02-05 19:45 - 002222800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_24.dll
2017-06-08 16:12 - 2017-07-30 23:11 - 000000000 ____D C:\Users\3green\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam
2017-06-08 16:09 - 2017-06-08 16:09 - 000000000 ____D C:\Users\3green\AppData\Local\Steam
2017-06-08 15:59 - 2017-08-19 16:41 - 000000000 ____D C:\Program Files (x86)\Steam
2017-06-08 15:59 - 2017-06-08 15:59 - 000000963 _____ C:\Users\Public\Desktop\Steam.lnk
2017-06-08 15:59 - 2017-06-08 15:59 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Steam
2017-06-08 15:58 - 2017-06-08 15:59 - 001446792 _____ C:\Users\3green\Downloads\SteamSetup.exe
2017-06-07 23:24 - 2017-06-07 23:24 - 013890615 _____ C:\Users\3green\Downloads\Monotype_eBook_Type_and_Games.pdf
2017-06-07 23:23 - 2017-06-07 23:24 - 003484916 _____ C:\Users\3green\Downloads\pictogramas.pdf
2017-06-05 17:44 - 2017-06-05 17:44 - 000000000 ____D C:\Users\3green\Downloads\exercicio_layout
2017-06-05 17:43 - 2017-06-05 17:44 - 001775937 _____ C:\Users\3green\Downloads\exercicio_layout.zip
2017-06-05 17:41 - 2017-06-05 17:41 - 002215894 _____ C:\Users\3green\Downloads\Aula-011.ppsx
2017-06-03 19:20 - 2017-08-13 22:55 - 001603966 _____ C:\Users\3green\Downloads\Dragon.ma
2017-05-31 17:20 - 2017-05-31 17:20 - 001889590 _____ C:\Users\3green\Downloads\CONSULTA11.pdf
2017-05-31 17:20 - 2017-05-31 17:20 - 001627691 _____ C:\Users\3green\Downloads\CONSULTA21.pdf
2017-05-29 20:40 - 2017-05-29 20:40 - 000130989 _____ C:\Users\3green\Downloads\drive-download-20170529T234008Z-001.zip
2017-05-25 22:52 - 2017-05-25 22:52 - 000071616 _____ C:\Users\3green\Downloads\Conquistas.psd
2017-05-25 22:50 - 2017-05-25 22:50 - 000366317 _____ C:\Users\3green\Downloads\chic.psd
2017-05-25 21:41 - 2017-05-25 21:41 - 000003883 _____ C:\Users\3green\AppData\Local\recently-used.xbel
2017-05-25 20:44 - 2017-05-25 20:44 - 000003480 _____ C:\Windows\System32\Tasks\ByteFence Scan
2017-05-25 20:44 - 2017-05-25 20:44 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ByteFence Anti-Malware
2017-05-25 20:39 - 2017-05-25 21:41 - 000000000 ____D C:\Users\3green\AppData\Local\gtk-2.0
2017-05-25 20:39 - 2017-05-25 20:39 - 000000000 ____D C:\Users\3green\.thumbnails
2017-05-25 19:56 - 2017-05-25 19:56 - 000000000 ____D C:\Users\Todos os Usuários\ByteFence
2017-05-25 19:56 - 2017-05-25 19:56 - 000000000 ____D C:\ProgramData\ByteFence
2017-05-25 19:54 - 2017-05-25 23:31 - 000000000 ____D C:\Users\3green\.gimp-2.8
2017-05-25 19:54 - 2017-05-25 19:54 - 000000000 ____D C:\Users\3green\AppData\Local\gegl-0.2
2017-05-25 19:54 - 2017-05-25 19:54 - 000000000 ____D C:\Users\3green\AppData\Local\fontconfig
2017-05-25 19:46 - 2017-05-26 22:51 - 000000000 ____D C:\Users\3green\AppData\Local\chromium
2017-05-25 19:45 - 2017-05-25 19:45 - 000003380 _____ C:\Windows\System32\Tasks\ByteFence
2017-05-25 19:44 - 2017-08-19 16:44 - 000000000 ____D C:\Users\Todos os Usuários\{CEC10BA2-4483-8164-C245-1F26580794E8}
2017-05-25 19:44 - 2017-08-19 16:44 - 000000000 ____D C:\ProgramData\{CEC10BA2-4483-8164-C245-1F26580794E8}
2017-05-25 19:44 - 2017-05-25 19:44 - 077404656 _____ (The GIMP Team ) C:\Users\3green\Downloads\Superdownloads_gimp.exe
2017-05-25 19:44 - 2017-05-25 19:44 - 000004348 _____ C:\Windows\System32\Tasks\Yahoo! Powered ranil
2017-05-25 19:43 - 2017-05-25 19:43 - 000000372 __RSH C:\Users\Todos os Usuários\ntuser.pol
2017-05-25 19:43 - 2017-05-25 19:43 - 000000372 __RSH C:\ProgramData\ntuser.pol
2017-05-25 19:42 - 2017-08-19 18:41 - 000000000 ____D C:\Program Files\ByteFence
2017-05-25 19:41 - 2017-05-25 19:41 - 001219528 _____ ( ) C:\Users\3green\Downloads\Superdownloads_gimp_0123774102.exe

==================== Três Meses Modificados arquivos e pastas ========

(Se uma entrada for incluída na fixlist, o arquivo/pasta será movido.)

2017-08-19 17:12 - 2017-04-27 20:57 - 000000000 ___SD C:\Users\3green\AppData\LocalLow\Temp
2017-08-19 17:08 - 2017-03-23 22:15 - 000000000 ____D C:\Users\Todos os Usuários\Autodesk
2017-08-19 17:08 - 2017-03-23 22:15 - 000000000 ____D C:\ProgramData\Autodesk
2017-08-19 16:55 - 2017-03-09 17:45 - 000000000 ____D C:\Program Files (x86)\Microsoft Office
2017-08-19 16:42 - 2017-03-07 18:29 - 000002193 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2017-08-19 16:42 - 2017-03-07 18:29 - 000002181 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2017-08-19 16:37 - 2009-07-14 01:45 - 000014816 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2017-08-19 16:37 - 2009-07-14 01:45 - 000014816 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2017-08-19 16:33 - 2009-07-14 14:55 - 000705070 _____ C:\Windows\system32\prfh0416.dat
2017-08-19 16:33 - 2009-07-14 14:55 - 000146910 _____ C:\Windows\system32\prfc0416.dat
2017-08-19 16:33 - 2009-07-14 02:13 - 001633534 _____ C:\Windows\system32\PerfStringBackup.INI
2017-08-19 16:33 - 2009-07-14 00:20 - 000000000 ____D C:\Windows\inf
2017-08-19 16:28 - 2009-07-14 02:08 - 000000006 ____H C:\Windows\Tasks\SA.DAT
2017-08-15 19:48 - 2017-03-09 17:51 - 000000000 ____D C:\Users\Todos os Usuários\regid.1991-06.com.microsoft
2017-08-15 19:48 - 2017-03-09 17:51 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2017-08-13 18:40 - 2017-03-07 18:30 - 000003900 _____ C:\Windows\System32\Tasks\SafeZone scheduled Autoupdate 1488922253
2017-08-09 18:01 - 2017-03-07 18:25 - 001015880 _____ (AVAST Software) C:\Windows\system32\Drivers\aswsnx.sys
2017-08-09 18:01 - 2017-03-07 18:25 - 000146704 _____ (AVAST Software) C:\Windows\system32\Drivers\aswmonflt.sys
2017-08-08 22:31 - 2017-03-23 22:18 - 000000000 ____D C:\Users\Todos os Usuários\Package Cache
2017-08-08 22:31 - 2017-03-23 22:18 - 000000000 ____D C:\ProgramData\Package Cache
2017-08-03 22:09 - 2009-07-14 01:45 - 003044456 _____ C:\Windows\system32\FNTCACHE.DAT
2017-08-03 18:52 - 2017-03-07 18:22 - 000116408 _____ C:\Users\3green\AppData\Local\GDIPFONTCACHEV1.DAT
2017-08-03 18:32 - 2017-03-24 18:01 - 000000000 ____D C:\Users\Todos os Usuários\Skype
2017-08-03 18:32 - 2017-03-24 18:01 - 000000000 ____D C:\ProgramData\Skype
2017-08-01 17:55 - 2017-03-07 18:25 - 000004172 _____ C:\Windows\System32\Tasks\Avast Emergency Update
2017-07-24 20:26 - 2017-03-15 10:58 - 000000000 ____D C:\Users\3green\AppData\Roaming\Adobe
2017-07-24 14:15 - 2017-03-07 18:25 - 000343288 _____ (AVAST Software s.r.o.) C:\Windows\system32\Drivers\aswbloga.sys
2017-07-24 14:15 - 2017-03-07 18:25 - 000320008 _____ (AVAST Software s.r.o.) C:\Windows\system32\Drivers\aswbidsdrivera.sys
2017-07-24 14:15 - 2017-03-07 18:25 - 000198976 _____ (AVAST Software s.r.o.) C:\Windows\system32\Drivers\aswbidsha.sys
2017-07-24 14:15 - 2017-03-07 18:25 - 000057728 _____ (AVAST Software s.r.o.) C:\Windows\system32\Drivers\aswbuniva.sys

==================== Arquivos na raiz de alguns diretórios =======

2017-05-25 21:41 - 2017-05-25 21:41 - 000003883 _____ () C:\Users\3green\AppData\Local\recently-used.xbel

Alguns arquivos em TEMP:
====================
2017-03-23 23:39 - 2015-01-26 05:59 - 000060296 _____ (Autodesk, Inc.) C:\Users\3green\AppData\Local\Temp\AcDeltree.exe
2017-03-15 10:31 - 2017-03-15 10:31 - 047796216 _____ (Electronic Arts, Inc.) C:\Users\3green\AppData\Local\Temp\EAD113F.exe
2009-03-28 18:08 - 2009-03-28 18:08 - 000195056 _____ (Electronic Arts, Inc.) C:\Users\3green\AppData\Local\Temp\UninstallEADM.dll
2017-06-30 17:33 - 2017-06-30 17:33 - 014456872 _____ (Microsoft Corporation) C:\Users\3green\AppData\Local\Temp\vc_redist.x86.exe

==================== Bamital & volsnap ======================

(Não há correção automática para arquivos que não passaram na verificação.)

C:\Windows\system32\winlogon.exe => O arquivo é assinado digitalmente
C:\Windows\system32\wininit.exe => O arquivo é assinado digitalmente
C:\Windows\SysWOW64\wininit.exe => O arquivo é assinado digitalmente
C:\Windows\explorer.exe => O arquivo é assinado digitalmente
C:\Windows\SysWOW64\explorer.exe => O arquivo é assinado digitalmente
C:\Windows\system32\svchost.exe => O arquivo é assinado digitalmente
C:\Windows\SysWOW64\svchost.exe => O arquivo é assinado digitalmente
C:\Windows\system32\services.exe => O arquivo é assinado digitalmente
C:\Windows\system32\User32.dll => O arquivo é assinado digitalmente
C:\Windows\SysWOW64\User32.dll => O arquivo é assinado digitalmente
C:\Windows\system32\userinit.exe => O arquivo é assinado digitalmente
C:\Windows\SysWOW64\userinit.exe => O arquivo é assinado digitalmente
C:\Windows\system32\rpcss.dll => O arquivo é assinado digitalmente
C:\Windows\system32\dnsapi.dll => O arquivo é assinado digitalmente
C:\Windows\SysWOW64\dnsapi.dll => O arquivo é assinado digitalmente
C:\Windows\system32\Drivers\volsnap.sys => O arquivo é assinado digitalmente

LastRegBack: 2017-08-02 00:30

==================== Fim de FRST.txt ============================