cjoint

Publicité


Publicité

Format du document : text/plain

Prévisualisation

Resultado do exame da Farbar Recovery Scan Tool (FRST) (x86) Versão: 26-10-2017
Executado por Filipe (administrador) em FILIPE-PC (30-10-2017 11:59:41)
Executando a partir de C:\Users\Filipe\Desktop
Perfis Carregados: Filipe (Perfis Disponíveis: Filipe & DefaultAppPool)
Platform: Microsoft Windows 10 Pro Versão 1703 15063.674 (X86) Idioma: Português (Brasil)
Internet Explorer Versão 11 (Navegador padrão: Edge)
Modo da Inicialização: Normal
Tutorial da Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processos (Whitelisted) =================

(Se uma entrada for incluída na fixlist, o processo será fechado. O arquivo não será movido.)

(Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE
(Microsoft Corporation) C:\Program Files\Windows Defender\MsMpEng.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\NisSrv.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) ME FW Recovery Agent\bin\ismagent.exe
() C:\Program Files\Intel\Intel(R) ME FW Recovery Agent\bin\updateui.exe
(Microsoft Corporation) C:\Windows\splwow64.exe
(Microsoft Corporation) C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\System32\InstallAgent.exe
(Microsoft Corporation) C:\Windows\System32\InstallAgentUserBroker.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\System32\backgroundTaskHost.exe

==================== Registro (Whitelisted) ===========================

(Se uma entrada for incluída na fixlist, o ítem no Registro será restaurado para o padrão ou removido. O arquivo não será movido.)

HKLM\...\Run: [Adobe Creative Cloud] => C:\Program Files\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe [2383040 2016-10-12] (Adobe Systems Incorporated)
HKU\S-1-5-21-1966662122-1671974175-2396957999-1000\...\Run: [BitTorrent] => C:\Users\Filipe\AppData\Roaming\BitTorrent\BitTorrent.exe [2150088 2017-09-19] (BitTorrent Inc.)
HKU\S-1-5-21-1966662122-1671974175-2396957999-1000\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner.exe [7347928 2017-02-08] (Piriform Ltd)
HKU\S-1-5-21-1966662122-1671974175-2396957999-1000\...\Policies\system: [Shell] explorer.exe,msiexec.exe /i hxxp://point.orangeiloveyou.com/?data=zDlkMj1WRkQQN8E1OWzYRkEyMjhYNTRLRWw1FTRLNTk1OTUyRH== /q <==== ATENÇÃO
HKU\S-1-5-21-1966662122-1671974175-2396957999-1000\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\WINDOWS\system32\Bubbles.scr [793088 2017-03-18] (Microsoft Corporation)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\OSD.lnk [2015-12-10]
ShortcutTarget: OSD.lnk -> C:\Windows\Installer\{5A9C96FE-1376-45E1-8556-C81255F0B5A7}\_AD2F6128FA18C1F8978B88.exe ()
Startup: C:\Users\Filipe\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Monitorar alertas de tinta - .lnk [2017-04-27]
ShortcutTarget: Monitorar alertas de tinta - .lnk -> C:\Program Files\HP\HP Deskjet 1510 series\Bin\HPStatusBL.dll (Hewlett-Packard Co.)
Startup: C:\Users\Filipe\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\_uninst_09452932.lnk [2017-05-04]
Startup: C:\Users\Filipe\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\_uninst_65902682.lnk [2016-07-13]
GroupPolicy: Restrição ? <==== ATENÇÃO
CHR HKLM\SOFTWARE\Policies\Google: Restrição <==== ATENÇÃO

==================== Internet (Whitelisted) ====================

(Se um ítem for incluído na fixlist, sendo um ítem do Registro, será removido ou restaurado para o padrão.)

ProxyEnable: [HKLM] => Proxy está habilitado.
ProxyServer: [HKLM] => 127.0.0.1:15279
ProxyServer: [S-1-5-21-1966662122-1671974175-2396957999-1000] => 127.0.0.1:15279
AutoConfigURL: [S-1-5-21-1966662122-1671974175-2396957999-1000] => 127.0.0.1:15279
Hosts: Há mais de uma entrada no Hosts. Veja a seção Hosts do Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{1b7582e1-6d64-4be3-8ff9-caaf6957a949}: [DhcpNameServer] 192.168.1.254 200.222.0.35 200.222.0.34
Tcpip\..\Interfaces\{a6791a0f-6df6-42b5-bb0a-86093150fe30}: [DhcpNameServer] 192.168.0.1
ManualProxies: 1127.0.0.1:42786

Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://go.microsoft.com/fwlink/?LinkID=617910&ResetID=131503094810559042&GUID=134F8E3C-6527-4197-8608-3F08F80BAF5E
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxps://search.avira.net/#web/result?source=art&q=
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxps://search.avira.net/#web/result?source=art&q=
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxps://search.avira.net/#web/result?source=art&q=
HKU\S-1-5-21-1966662122-1671974175-2396957999-1000\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxps://search.avira.net/#web/result?source=art&q=
HKU\S-1-5-21-1966662122-1671974175-2396957999-1000\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxps://search.avira.net/#web/result?source=art&q=
HKU\S-1-5-21-1966662122-1671974175-2396957999-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://br.search.yahoo.com/?fr=avantsearch6
SearchScopes: HKLM -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-1966662122-1671974175-2396957999-1000 -> DefaultScope {4E8CB1EA-BA25-453A-9532-CF99439213B2} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSE1
SearchScopes: HKU\S-1-5-21-1966662122-1671974175-2396957999-1000 -> {2f23ab71-4ac6-41f2-a955-ea576e553146} URL = hxxp://www.google.com/search?hl=en&q={searchTerms}
SearchScopes: HKU\S-1-5-21-1966662122-1671974175-2396957999-1000 -> {4E8CB1EA-BA25-453A-9532-CF99439213B2} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSE1
BHO: iSkysoft iMedia Converter Deluxe 5.1.0 -> {AEAF002F-E6D8-4A21-ABD3-2B309B79A6CE} -> C:\ProgramData\iSkysoft\Video Converter Ultimate\WSBrowserAppMgr.dll [2016-06-14] (Wondershare)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation)
Handler: WSISVCUchrome - {78A543EB-3A61-4ED3 - Nenhum Arquivo

FireFox:
========
FF DefaultProfile: qucwuyoj.firefox
FF DefaultProfile: wso79ajb.default
FF ProfilePath: C:\Users\Filipe\AppData\Roaming\Profiles\wso79ajb.default [não encontrado (a)] <==== ATENÇÃO
FF DefaultProfile: 8zmeg0gx.default
FF ProfilePath: C:\Users\Filipe\AppData\Roaming\Mozilla\Firefox\Profiles\qucwuyoj.firefox [2017-10-29]
FF NetworkProxy: Mozilla\Firefox\Profiles\qucwuyoj.firefox -> http", "127.0.0.1"
FF NetworkProxy: Mozilla\Firefox\Profiles\qucwuyoj.firefox -> http_port", 57103
FF NetworkProxy: Mozilla\Firefox\Profiles\qucwuyoj.firefox -> no_proxies_on", ""
FF NetworkProxy: Mozilla\Firefox\Profiles\qucwuyoj.firefox -> ssl", "127.0.0.1"
FF NetworkProxy: Mozilla\Firefox\Profiles\qucwuyoj.firefox -> ssl_port", 57103
FF NetworkProxy: Mozilla\Firefox\Profiles\qucwuyoj.firefox -> type", 1
FF NetworkProxy: Mozilla\Firefox\Profiles\qucwuyoj.firefox -> type", 1
FF NetworkProxy: Mozilla\Firefox\Profiles\qucwuyoj.firefox -> http_port", 53288
FF NetworkProxy: Mozilla\Firefox\Profiles\qucwuyoj.firefox -> ssl_port", 53288
FF NetworkProxy: Mozilla\Firefox\Profiles\qucwuyoj.firefox -> http_port", 37521
FF NetworkProxy: Mozilla\Firefox\Profiles\qucwuyoj.firefox -> ssl_port", 37521
FF NetworkProxy: Mozilla\Firefox\Profiles\qucwuyoj.firefox -> http_port", 25990
FF NetworkProxy: Mozilla\Firefox\Profiles\qucwuyoj.firefox -> ssl_port", 25990
FF NetworkProxy: Mozilla\Firefox\Profiles\qucwuyoj.firefox -> http_port", 4141
FF NetworkProxy: Mozilla\Firefox\Profiles\qucwuyoj.firefox -> ssl_port", 4141
FF NetworkProxy: Mozilla\Firefox\Profiles\qucwuyoj.firefox -> http_port", 40241
FF NetworkProxy: Mozilla\Firefox\Profiles\qucwuyoj.firefox -> ssl_port", 40241
FF NetworkProxy: Mozilla\Firefox\Profiles\qucwuyoj.firefox -> http_port", 18941
FF NetworkProxy: Mozilla\Firefox\Profiles\qucwuyoj.firefox -> ssl_port", 18941
FF NetworkProxy: Mozilla\Firefox\Profiles\qucwuyoj.firefox -> http_port", 10478
FF NetworkProxy: Mozilla\Firefox\Profiles\qucwuyoj.firefox -> ssl_port", 10478
FF NetworkProxy: Mozilla\Firefox\Profiles\qucwuyoj.firefox -> http_port", 56152
FF NetworkProxy: Mozilla\Firefox\Profiles\qucwuyoj.firefox -> ssl_port", 56152
FF NetworkProxy: Mozilla\Firefox\Profiles\qucwuyoj.firefox -> http_port", 61726
FF NetworkProxy: Mozilla\Firefox\Profiles\qucwuyoj.firefox -> ssl_port", 61726
FF NetworkProxy: Mozilla\Firefox\Profiles\qucwuyoj.firefox -> http_port", 19512
FF NetworkProxy: Mozilla\Firefox\Profiles\qucwuyoj.firefox -> ssl_port", 19512
FF NetworkProxy: Mozilla\Firefox\Profiles\qucwuyoj.firefox -> http_port", 4388
FF NetworkProxy: Mozilla\Firefox\Profiles\qucwuyoj.firefox -> ssl_port", 4388
FF NetworkProxy: Mozilla\Firefox\Profiles\qucwuyoj.firefox -> http_port", 10711
FF NetworkProxy: Mozilla\Firefox\Profiles\qucwuyoj.firefox -> ssl_port", 10711
FF NetworkProxy: Mozilla\Firefox\Profiles\qucwuyoj.firefox -> http_port", 49393
FF NetworkProxy: Mozilla\Firefox\Profiles\qucwuyoj.firefox -> ssl_port", 49393
FF NetworkProxy: Mozilla\Firefox\Profiles\qucwuyoj.firefox -> http_port", 57356
FF NetworkProxy: Mozilla\Firefox\Profiles\qucwuyoj.firefox -> ssl_port", 57356
FF NetworkProxy: Mozilla\Firefox\Profiles\qucwuyoj.firefox -> http_port", 41370
FF NetworkProxy: Mozilla\Firefox\Profiles\qucwuyoj.firefox -> ssl_port", 41370
FF NetworkProxy: Mozilla\Firefox\Profiles\qucwuyoj.firefox -> http_port", 29720
FF NetworkProxy: Mozilla\Firefox\Profiles\qucwuyoj.firefox -> ssl_port", 29720
FF NetworkProxy: Mozilla\Firefox\Profiles\qucwuyoj.firefox -> http_port", 19609
FF NetworkProxy: Mozilla\Firefox\Profiles\qucwuyoj.firefox -> ssl_port", 19609
FF NetworkProxy: Mozilla\Firefox\Profiles\qucwuyoj.firefox -> http_port", 48140
FF NetworkProxy: Mozilla\Firefox\Profiles\qucwuyoj.firefox -> ssl_port", 48140
FF NetworkProxy: Mozilla\Firefox\Profiles\qucwuyoj.firefox -> http_port", 52387
FF NetworkProxy: Mozilla\Firefox\Profiles\qucwuyoj.firefox -> ssl_port", 52387
FF NetworkProxy: Mozilla\Firefox\Profiles\qucwuyoj.firefox -> http_port", 54771
FF NetworkProxy: Mozilla\Firefox\Profiles\qucwuyoj.firefox -> ssl_port", 54771
FF NetworkProxy: Mozilla\Firefox\Profiles\qucwuyoj.firefox -> http_port", 22999
FF NetworkProxy: Mozilla\Firefox\Profiles\qucwuyoj.firefox -> ssl_port", 22999
FF NetworkProxy: Mozilla\Firefox\Profiles\qucwuyoj.firefox -> http_port", 16126
FF NetworkProxy: Mozilla\Firefox\Profiles\qucwuyoj.firefox -> ssl_port", 16126
FF NetworkProxy: Mozilla\Firefox\Profiles\qucwuyoj.firefox -> http_port", 31877
FF NetworkProxy: Mozilla\Firefox\Profiles\qucwuyoj.firefox -> ssl_port", 31877
FF NetworkProxy: Mozilla\Firefox\Profiles\qucwuyoj.firefox -> http_port", 4618
FF NetworkProxy: Mozilla\Firefox\Profiles\qucwuyoj.firefox -> ssl_port", 4618
FF NetworkProxy: Mozilla\Firefox\Profiles\qucwuyoj.firefox -> http_port", 44993
FF NetworkProxy: Mozilla\Firefox\Profiles\qucwuyoj.firefox -> ssl_port", 44993
FF NetworkProxy: Mozilla\Firefox\Profiles\qucwuyoj.firefox -> http_port", 19157
FF NetworkProxy: Mozilla\Firefox\Profiles\qucwuyoj.firefox -> ssl_port", 19157
FF NetworkProxy: Mozilla\Firefox\Profiles\qucwuyoj.firefox -> http_port", 41127
FF NetworkProxy: Mozilla\Firefox\Profiles\qucwuyoj.firefox -> ssl_port", 41127
FF NetworkProxy: Mozilla\Firefox\Profiles\qucwuyoj.firefox -> http_port", 8239
FF NetworkProxy: Mozilla\Firefox\Profiles\qucwuyoj.firefox -> ssl_port", 8239
FF NetworkProxy: Mozilla\Firefox\Profiles\qucwuyoj.firefox -> http_port", 60681
FF NetworkProxy: Mozilla\Firefox\Profiles\qucwuyoj.firefox -> ssl_port", 60681
FF NetworkProxy: Mozilla\Firefox\Profiles\qucwuyoj.firefox -> http_port", 57707
FF NetworkProxy: Mozilla\Firefox\Profiles\qucwuyoj.firefox -> ssl_port", 57707
FF NetworkProxy: Mozilla\Firefox\Profiles\qucwuyoj.firefox -> http_port", 40185
FF NetworkProxy: Mozilla\Firefox\Profiles\qucwuyoj.firefox -> ssl_port", 40185
FF NetworkProxy: Mozilla\Firefox\Profiles\qucwuyoj.firefox -> http_port", 20004
FF NetworkProxy: Mozilla\Firefox\Profiles\qucwuyoj.firefox -> ssl_port", 20004
FF NetworkProxy: Mozilla\Firefox\Profiles\qucwuyoj.firefox -> http_port", 24079
FF NetworkProxy: Mozilla\Firefox\Profiles\qucwuyoj.firefox -> ssl_port", 24079
FF NetworkProxy: Mozilla\Firefox\Profiles\qucwuyoj.firefox -> http_port", 10965
FF NetworkProxy: Mozilla\Firefox\Profiles\qucwuyoj.firefox -> ssl_port", 10965
FF NetworkProxy: Mozilla\Firefox\Profiles\qucwuyoj.firefox -> http_port", 45733
FF NetworkProxy: Mozilla\Firefox\Profiles\qucwuyoj.firefox -> ssl_port", 45733
FF NetworkProxy: Mozilla\Firefox\Profiles\qucwuyoj.firefox -> http_port", 61008
FF NetworkProxy: Mozilla\Firefox\Profiles\qucwuyoj.firefox -> ssl_port", 61008
FF NetworkProxy: Mozilla\Firefox\Profiles\qucwuyoj.firefox -> http_port", 16262
FF NetworkProxy: Mozilla\Firefox\Profiles\qucwuyoj.firefox -> ssl_port", 16262
FF NetworkProxy: Mozilla\Firefox\Profiles\qucwuyoj.firefox -> http_port", 41385
FF NetworkProxy: Mozilla\Firefox\Profiles\qucwuyoj.firefox -> ssl_port", 41385
FF NetworkProxy: Mozilla\Firefox\Profiles\qucwuyoj.firefox -> http_port", 4608
FF NetworkProxy: Mozilla\Firefox\Profiles\qucwuyoj.firefox -> ssl_port", 4608
FF NetworkProxy: Mozilla\Firefox\Profiles\qucwuyoj.firefox -> http_port", 28926
FF NetworkProxy: Mozilla\Firefox\Profiles\qucwuyoj.firefox -> ssl_port", 28926
FF NetworkProxy: Mozilla\Firefox\Profiles\qucwuyoj.firefox -> http_port", 13816
FF NetworkProxy: Mozilla\Firefox\Profiles\qucwuyoj.firefox -> ssl_port", 13816
FF NetworkProxy: Mozilla\Firefox\Profiles\qucwuyoj.firefox -> http_port", 41958
FF NetworkProxy: Mozilla\Firefox\Profiles\qucwuyoj.firefox -> ssl_port", 41958
FF NetworkProxy: Mozilla\Firefox\Profiles\qucwuyoj.firefox -> http_port", 49985
FF NetworkProxy: Mozilla\Firefox\Profiles\qucwuyoj.firefox -> ssl_port", 49985
FF NetworkProxy: Mozilla\Firefox\Profiles\qucwuyoj.firefox -> http_port", 36533
FF NetworkProxy: Mozilla\Firefox\Profiles\qucwuyoj.firefox -> ssl_port", 36533
FF NetworkProxy: Mozilla\Firefox\Profiles\qucwuyoj.firefox -> http_port", 2851
FF NetworkProxy: Mozilla\Firefox\Profiles\qucwuyoj.firefox -> ssl_port", 2851
FF NetworkProxy: Mozilla\Firefox\Profiles\qucwuyoj.firefox -> http_port", 50998
FF NetworkProxy: Mozilla\Firefox\Profiles\qucwuyoj.firefox -> ssl_port", 50998
FF NetworkProxy: Mozilla\Firefox\Profiles\qucwuyoj.firefox -> http_port", 20478
FF NetworkProxy: Mozilla\Firefox\Profiles\qucwuyoj.firefox -> ssl_port", 20478
FF NetworkProxy: Mozilla\Firefox\Profiles\qucwuyoj.firefox -> http_port", 14451
FF NetworkProxy: Mozilla\Firefox\Profiles\qucwuyoj.firefox -> ssl_port", 14451
FF NetworkProxy: Mozilla\Firefox\Profiles\qucwuyoj.firefox -> http_port", 56053
FF NetworkProxy: Mozilla\Firefox\Profiles\qucwuyoj.firefox -> ssl_port", 56053
FF NetworkProxy: Mozilla\Firefox\Profiles\qucwuyoj.firefox -> http_port", 26192
FF NetworkProxy: Mozilla\Firefox\Profiles\qucwuyoj.firefox -> ssl_port", 26192
FF NetworkProxy: Mozilla\Firefox\Profiles\qucwuyoj.firefox -> http_port", 10018
FF NetworkProxy: Mozilla\Firefox\Profiles\qucwuyoj.firefox -> ssl_port", 10018
FF NetworkProxy: Mozilla\Firefox\Profiles\qucwuyoj.firefox -> http_port", 10915
FF NetworkProxy: Mozilla\Firefox\Profiles\qucwuyoj.firefox -> ssl_port", 10915
FF NetworkProxy: Mozilla\Firefox\Profiles\qucwuyoj.firefox -> http_port", 46216
FF NetworkProxy: Mozilla\Firefox\Profiles\qucwuyoj.firefox -> ssl_port", 46216
FF NetworkProxy: Mozilla\Firefox\Profiles\qucwuyoj.firefox -> http_port", 54339
FF NetworkProxy: Mozilla\Firefox\Profiles\qucwuyoj.firefox -> ssl_port", 54339
FF NetworkProxy: Mozilla\Firefox\Profiles\qucwuyoj.firefox -> http_port", 3136
FF NetworkProxy: Mozilla\Firefox\Profiles\qucwuyoj.firefox -> ssl_port", 3136
FF NetworkProxy: Mozilla\Firefox\Profiles\qucwuyoj.firefox -> http_port", 25657
FF NetworkProxy: Mozilla\Firefox\Profiles\qucwuyoj.firefox -> ssl_port", 25657
FF NetworkProxy: Mozilla\Firefox\Profiles\qucwuyoj.firefox -> http_port", 4495
FF NetworkProxy: Mozilla\Firefox\Profiles\qucwuyoj.firefox -> ssl_port", 4495
FF NetworkProxy: Mozilla\Firefox\Profiles\qucwuyoj.firefox -> http_port", 15676
FF NetworkProxy: Mozilla\Firefox\Profiles\qucwuyoj.firefox -> ssl_port", 15676
FF NetworkProxy: Mozilla\Firefox\Profiles\qucwuyoj.firefox -> http_port", 42786
FF NetworkProxy: Mozilla\Firefox\Profiles\qucwuyoj.firefox -> ssl_port", 42786
FF NetworkProxy: Mozilla\Firefox\Profiles\qucwuyoj.firefox -> http_port", 15279
FF NetworkProxy: Mozilla\Firefox\Profiles\qucwuyoj.firefox -> ssl_port", 15279
FF Extension: (Sem Nome) - C:\Program Files\Internet Download Manager\idmmzcc2.xpi [não encontrado (a)]
FF ProfilePath: C:\Users\Filipe\AppData\Roaming\Firefox\Firefox\Profiles\hkzamnay.default [2017-05-24] <==== ATENÇÃO
FF user.js: detected! => C:\Users\Filipe\AppData\Roaming\Firefox\Firefox\Profiles\hkzamnay.default\user.js [2017-05-23]
FF Extension: (Video DownloadHelper) - C:\Users\Filipe\AppData\Roaming\Firefox\Firefox\Profiles\hkzamnay.default\Extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}.xpi [2016-05-25]
FF Extension: (iSkysoft iMedia Converter Deluxe) - C:\ProgramData\iSkysoft\Video Converter Ultimate\ISVCU@iSkysoft.com_xpi\ []
FF ProfilePath: C:\Users\Filipe\AppData\Roaming\Avant Profiles\.default\gecko\Mozilla\Avant\Profiles\8zmeg0gx.default [2017-09-28]
FF NetworkProxy: Avant Profiles\.default\gecko\Mozilla\Avant\Profiles\8zmeg0gx.default -> type", 0
FF HKLM\...\Firefox\Extensions: [ISVCU@iSkysoft.com] - C:\ProgramData\iSkysoft\Video Converter Ultimate\ISVCU@iSkysoft.com_xpi
FF Extension: (iSkysoft iMedia Converter Deluxe) - C:\ProgramData\iSkysoft\Video Converter Ultimate\ISVCU@iSkysoft.com_xpi [2016-07-15]
FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF32_26_0_0_151.dll [2017-08-10] ()
FF Plugin: @adobe.com/ShockwavePlayer -> C:\WINDOWS\system32\Adobe\Director\np32dsw_1229199.dll [2017-03-31] (Adobe Systems, Inc.)
FF Plugin: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.1.42 -> C:\Program Files\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2012-06-06] (Intel Corporation)
FF Plugin: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2012-06-06] (Intel Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~1\MICROS~2\Office14\NPSPWRAP.DLL [2010-03-24] (Microsoft Corporation)
FF Plugin: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll [2012-03-08] (Microsoft Corporation)
FF Plugin: @microsoft.com/WLPG,version=15.4.3555.0308 -> C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll [2012-03-08] (Microsoft Corporation)
FF Plugin: @Nero.com/KM -> C:\PROGRA~1\COMMON~1\Nero\BROWSE~1\NPBROW~1.DLL [2014-08-29] (Nero AG)
FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-09-26] (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-09-26] (Google Inc.)
FF Plugin: @videolan.org/vlc,version=2.2.1 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2016-06-01] (VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.2.4 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2016-06-01] (VideoLAN)
FF Plugin: Adobe Reader -> C:\Program Files\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2017-07-31] (Adobe Systems Inc.)
FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect32.dll [2016-10-12] (Adobe Systems)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\np-mswmp.dll [2007-04-10] (Microsoft Corporation)

Chrome:
=======
CHR DefaultProfile: ChromeDefaultData
CHR NewTab: ChromeDefaultData -> Not-active:"chrome-extension://apmaajgpadfdkidkopanldnlkbclieko/newtab/newtab.html"
CHR Profile: C:\Users\Filipe\AppData\Local\Google\Chrome\User Data\ChromeDefaultData [2017-10-30] <==== ATENÇÃO
CHR Extension: (Flash Video Downloader) - C:\Users\Filipe\AppData\Local\Google\Chrome\User Data\ChromeDefaultData\Extensions\aiimdkdngfcipjohbjenkahhlhccpdbc [2017-10-27]
CHR Extension: (Google Drive) - C:\Users\Filipe\AppData\Local\Google\Chrome\User Data\ChromeDefaultData\Extensions\apdfllckaahabafndbhieahigkjlhalf [2016-06-20]
CHR Extension: (Screen Addict) - C:\Users\Filipe\AppData\Local\Google\Chrome\User Data\ChromeDefaultData\Extensions\apmaajgpadfdkidkopanldnlkbclieko [2017-01-19]
CHR Extension: (YouTube) - C:\Users\Filipe\AppData\Local\Google\Chrome\User Data\ChromeDefaultData\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2016-06-20]
CHR Extension: (Adblock Plus) - C:\Users\Filipe\AppData\Local\Google\Chrome\User Data\ChromeDefaultData\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2017-09-26]
CHR Extension: (Tampermonkey) - C:\Users\Filipe\AppData\Local\Google\Chrome\User Data\ChromeDefaultData\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo [2017-09-04]
CHR Extension: (Video Downloader professional) - C:\Users\Filipe\AppData\Local\Google\Chrome\User Data\ChromeDefaultData\Extensions\elicpjhcidhpjomhibiffojpinpmmpil [2017-10-18]
CHR Extension: (FBDown Video Downloader) - C:\Users\Filipe\AppData\Local\Google\Chrome\User Data\ChromeDefaultData\Extensions\fhplmmllnpjjlncfjpbbpjadoeijkogc [2017-10-18]
CHR Extension: (Windows Media Player Extension for HTML5) - C:\Users\Filipe\AppData\Local\Google\Chrome\User Data\ChromeDefaultData\Extensions\hokdglbhghcebcopdbanieangmcamaak [2017-09-18] [UpdateUrl: hxxp://www.interoperabilitybridges.com/ChromeWMP/wmpChromeupdates.xml] <==== ATENÇÃO
CHR Extension: (IDM Integration Module) - C:\Users\Filipe\AppData\Local\Google\Chrome\User Data\ChromeDefaultData\Extensions\jeaohhlajejodfjadcponpnjgkiikocn [2017-09-28]
CHR Extension: (Video DownloadHelper) - C:\Users\Filipe\AppData\Local\Google\Chrome\User Data\ChromeDefaultData\Extensions\lmjnegcaeklhafolokijcfjliaokphfk [2016-12-22]
CHR Extension: (Pagamentos da Chrome Web Store) - C:\Users\Filipe\AppData\Local\Google\Chrome\User Data\ChromeDefaultData\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2017-08-22]
CHR Extension: (PDF Viewer) - C:\Users\Filipe\AppData\Local\Google\Chrome\User Data\ChromeDefaultData\Extensions\oemmndcbldboiebfnladdacbdfmadadm [2017-07-18]
CHR Extension: (Gmail) - C:\Users\Filipe\AppData\Local\Google\Chrome\User Data\ChromeDefaultData\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2016-06-20]
CHR Extension: (Chrome Media Router) - C:\Users\Filipe\AppData\Local\Google\Chrome\User Data\ChromeDefaultData\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2017-09-24]
CHR Profile: C:\Users\Filipe\AppData\Local\Google\Chrome\User Data\Default [2017-10-28]
CHR Extension: (Google Docs) - C:\Users\Filipe\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-12-29]
CHR Extension: (MyWebFace) - C:\Users\Filipe\AppData\Local\Google\Chrome\User Data\Default\Extensions\dcmcdoaknaojppeomaejlbjbpgocdhok [2016-04-14]
CHR Extension: (Tampermonkey) - C:\Users\Filipe\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo [2016-05-30]
CHR Extension: (Video DownloadHelper) - C:\Users\Filipe\AppData\Local\Google\Chrome\User Data\Default\Extensions\lmjnegcaeklhafolokijcfjliaokphfk [2015-12-29]
CHR Extension: (Pagamentos da Chrome Web Store) - C:\Users\Filipe\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2016-04-05]
CHR Extension: (Gmail) - C:\Users\Filipe\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-12-29]
CHR HKLM\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj] - hxxps://clients2.google.com/service/update2/crx
CHR HKU\S-1-5-21-1966662122-1671974175-2396957999-1000\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [dhdgffkkebhmkfjojejmpbldmpobfkfo] - hxxp://clients2.google.com/service/update2/crx
HKU\S-1-5-21-1966662122-1671974175-2396957999-1000\...\StartMenuInternet\ChromeHTML: -> C:\Program Files\Setleaf\Application\chrome.exe <==== ATENÇÃO

==================== Serviços (Whitelisted) ====================

(Se uma entrada for incluída na fixlist, será removida do Registro. O arquivo não será movido, a menos que seja colocado separadamente.)

S4 AdobeUpdateService; C:\Program Files\Common Files\Adobe\Adobe Desktop Common\ElevationManager\AdobeUpdateService.exe [744640 2016-10-12] (Adobe Systems Incorporated)
S4 AGSService; C:\Program Files\Common Files\Adobe\AdobeGCClient\AGSService.exe [2246256 2017-05-18] (Adobe Systems, Incorporated)
S4 BrYNSvc; C:\Program Files\Browny02\BrYNSvc.exe [266240 2012-06-05] (Brother Industries, Ltd.) [Arquivo não assinado]
S4 cphs; C:\WINDOWS\system32\IntelCpHeciSvc.exe [300120 2017-03-10] (Intel Corporation)
S4 Droid4XService; C:\Program Files\Droid4X\Droid4XService.exe [279552 2016-06-13] () [Arquivo não assinado]
S4 EMP_UDSA; C:\Program Files\EPSON Projector\Epson USB Display V1.6\EMP_UDSA.exe [157696 2011-11-17] (SEIKO EPSON CORPORATION) [Arquivo não assinado]
S4 IAStorDataMgrSvc; C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [7168 2012-07-09] (Intel Corporation) [Arquivo não assinado]
S4 Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [462048 2012-04-20] (Intel(R) Corporation)
S4 Intel(R) ME Service; C:\Program Files\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [128896 2012-07-17] (Intel Corporation)
S4 jhi_service; C:\Program Files\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [165760 2012-07-17] (Intel Corporation)
S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [2545848 2017-03-19] (Microsoft Corporation)
S4 SynTPEnhService; C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe [218784 2015-08-21] (Synaptics Incorporated)
R3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [265352 2017-03-18] (Microsoft Corporation)
R2 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [82488 2017-06-20] (Microsoft Corporation)

===================== Drivers (Whitelisted) ======================

(Se uma entrada for incluída na fixlist, será removida do Registro. O arquivo não será movido, a menos que seja colocado separadamente.)

R0 09452932; C:\WINDOWS\system32\DRIVERS\09452932.sys [133208 2013-11-27] (Kaspersky Lab ZAO)
R3 athr; C:\WINDOWS\System32\drivers\athw8.sys [3228672 2017-03-18] (Qualcomm Atheros Communications, Inc.)
S3 dg_ssudbus; C:\WINDOWS\system32\DRIVERS\ssudbus.sys [109184 2016-09-05] (Samsung Electronics Co., Ltd.)
R1 EMP_MIRRUD; C:\WINDOWS\system32\DRIVERS\EMP_MirrUD.sys [3712 2011-11-17] (Windows (R) Codename Longhorn DDK provider)
R3 eppvad_simple; C:\WINDOWS\system32\drivers\EMP_UDAU.sys [17664 2011-11-17] (SEIKO EPSON CORPORATION)
R0 iaStorA; C:\WINDOWS\System32\drivers\iaStorA.sys [503048 2015-05-29] (Intel Corporation)
R3 int0800; C:\WINDOWS\System32\drivers\flashud.sys [42496 2009-09-09] (Intel Corporation)
R3 MEI; C:\WINDOWS\System32\drivers\TeeDriverW8.sys [162560 2015-08-31] (Intel Corporation)
R1 MPCKpt; C:\WINDOWS\System32\DRIVERS\MPCKpt.sys [52968 2016-02-08] (DotC United Inc) <==== ATENÇÃO
R1 MpKsl65403b11; C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{2796526E-04E7-4B97-9CD5-B0B0691A750D}\MpKsl65403b11.sys [40776 2017-10-29] (Microsoft Corporation)
S3 NETJME; C:\WINDOWS\System32\drivers\NETJME.sys [119296 2017-03-18] (JMicron Technology Corp.)
S3 RTL8192Ce; C:\WINDOWS\System32\drivers\rtl8192Ce.sys [943720 2010-11-02] (Realtek Semiconductor Corporation )
R3 SmbDrvI; C:\WINDOWS\system32\DRIVERS\Smb_driver_Intel.sys [37024 2015-08-21] (Synaptics Incorporated)
R2 SoilIO; C:\WINDOWS\system32\Drivers\SoilIO.sys [16248 2009-12-04] ()
R3 soilkbc; C:\WINDOWS\system32\Drivers\soilkbc.sys [10744 2009-12-04] (Systems Internals)
R3 SoilMC; C:\WINDOWS\system32\Drivers\SoilMC.sys [10616 2009-12-04] (Systems Internals)
S3 ssudmdm; C:\WINDOWS\system32\DRIVERS\ssudmdm.sys [147072 2016-09-05] (Samsung Electronics Co., Ltd.)
R1 vivadrv; C:\WINDOWS\System32\drivers\vivadrv.sys [49920 2015-09-17] (Windows (R) Win 7 DDK provider)
S0 WdBoot; C:\WINDOWS\System32\drivers\WdBoot.sys [37464 2017-03-18] (Microsoft Corporation)
R0 WdFilter; C:\WINDOWS\System32\drivers\WdFilter.sys [243104 2017-03-18] (Microsoft Corporation)
R3 WdNisDrv; C:\WINDOWS\System32\Drivers\WdNisDrv.sys [96672 2017-03-18] (Microsoft Corporation)
S3 WUDFWpdMtp; C:\WINDOWS\System32\drivers\WUDFRd.sys [160256 2017-03-18] (Microsoft Corporation)
S1 bswxidqd; \??\C:\WINDOWS\system32\drivers\bswxidqd.sys [X]
U3 idsvc; não ImagePath

==================== NetSvcs (Whitelisted) ===================

(Se uma entrada for incluída na fixlist, será removida do Registro. O arquivo não será movido, a menos que seja colocado separadamente.)


==================== Um Mês Criados arquivos e pastas ========

(Se uma entrada for incluída na fixlist, o arquivo/pasta será movido.)

2017-10-30 12:01 - 2017-10-30 12:01 - 018984960 _____ C:\Users\Filipe\Downloads\Anal team-fucked hawt slut - XVIDEOSCOM.mp4.crdownload
2017-10-30 11:59 - 2017-10-30 12:04 - 000030728 _____ C:\Users\Filipe\Desktop\FRST.txt
2017-10-30 11:59 - 2017-10-30 11:59 - 000000000 ____D C:\FRST
2017-10-30 11:56 - 2017-10-30 11:57 - 001799680 _____ (Farbar) C:\Users\Filipe\Desktop\FRST.exe
2017-10-28 12:40 - 2017-10-28 12:58 - 005660403 _____ (Swearware) C:\Users\Filipe\Desktop\ComboFix.exe
2017-10-27 16:16 - 2017-10-27 16:16 - 000077824 ____N C:\WINDOWS\KMSEmulator.exe
2017-10-26 09:01 - 2017-10-26 09:01 - 000000000 ____D C:\Users\Filipe\AppData\Local\Tempzxpsignc0c0442d8783cdd0
2017-10-26 09:00 - 2017-10-26 09:00 - 000629919 _____ C:\Users\Filipe\Desktop\cd eva.psd
2017-10-26 09:00 - 2017-10-26 09:00 - 000000000 ____D C:\Users\Filipe\AppData\Local\Tempzxpsignef8d4a4e4d797017
2017-10-26 08:58 - 2017-10-26 08:58 - 000000000 ____D C:\Users\Filipe\AppData\Local\Tempzxpsignd8eabf8cc507e401
2017-10-26 08:58 - 2017-10-26 08:58 - 000000000 ____D C:\Users\Filipe\AppData\Local\Tempzxpsigna2f51a8c04ab8c64
2017-10-25 19:11 - 2017-10-25 19:11 - 000584356 _____ C:\Users\Filipe\Documents\princesas.cdr
2017-10-25 14:04 - 2017-10-25 16:27 - 002817899 _____ C:\Users\Filipe\Desktop\MATEMÁTICA ODUVALDO.pptx
2017-10-25 13:31 - 2017-10-25 13:31 - 000000000 ____D C:\Users\Filipe\AppData\Local\Tempzxpsign22f415c2a4fa67de
2017-10-25 13:30 - 2017-10-25 13:30 - 000000000 ____D C:\Users\Filipe\AppData\Local\Tempzxpsigne29141eba088573e
2017-10-25 13:30 - 2017-10-25 13:30 - 000000000 ____D C:\Users\Filipe\AppData\Local\Tempzxpsign9a02cfd836c92508
2017-10-25 13:27 - 2017-10-25 13:27 - 000000000 ____D C:\Users\Filipe\AppData\Local\Tempzxpsignf67d44957982eff9
2017-10-25 13:27 - 2017-10-25 13:27 - 000000000 ____D C:\Users\Filipe\AppData\Local\Tempzxpsign74084c153d4dd756
2017-10-25 13:25 - 2017-10-25 13:25 - 000000000 ____D C:\Users\Filipe\AppData\Local\Tempzxpsign4be5b9d456fec417
2017-10-25 13:25 - 2017-10-25 13:25 - 000000000 ____D C:\Users\Filipe\AppData\Local\Tempzxpsign2c06503144327d06
2017-10-25 12:02 - 2017-10-25 12:02 - 000000000 ____D C:\Users\Filipe\AppData\Local\Tempzxpsign6f161aad93221963
2017-10-25 12:00 - 2017-10-25 12:00 - 000000000 ____D C:\Users\Filipe\AppData\Local\Tempzxpsignd54327dd72ed7bd9
2017-10-25 11:59 - 2017-10-25 11:59 - 000000000 ____D C:\Users\Filipe\AppData\Local\Tempzxpsignd8d8406b95b5bbed
2017-10-25 11:59 - 2017-10-25 11:59 - 000000000 ____D C:\Users\Filipe\AppData\Local\Tempzxpsignca11e87dd1e88c38
2017-10-25 11:59 - 2017-10-25 11:59 - 000000000 ____D C:\Users\Filipe\AppData\Local\Tempzxpsign7cbb333f0e1c05e4
2017-10-18 13:46 - 2017-10-18 13:46 - 124059592 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT-KB890830.exe
2017-10-18 13:21 - 2017-09-30 00:04 - 004215184 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.StateRepository.dll
2017-10-18 13:21 - 2017-09-30 00:04 - 000438096 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.dll
2017-10-18 13:21 - 2017-09-30 00:04 - 000259856 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecurityHealthService.exe
2017-10-18 13:21 - 2017-09-29 05:38 - 002671616 _____ (Microsoft Corporation) C:\WINDOWS\system32\tquery.dll
2017-10-18 13:20 - 2017-09-30 00:29 - 000804784 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.dll
2017-10-18 13:20 - 2017-09-30 00:05 - 000750488 _____ (Microsoft Corporation) C:\WINDOWS\system32\WWAHost.exe
2017-10-18 13:20 - 2017-09-30 00:03 - 006768288 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Protection.PlayReady.dll
2017-10-18 13:20 - 2017-09-29 05:45 - 002953216 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys
2017-10-18 13:20 - 2017-09-29 05:41 - 000095744 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuuhosdeployment.dll
2017-10-18 13:20 - 2017-09-29 05:39 - 000065536 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpdbusenum.dll
2017-10-18 13:20 - 2017-09-29 05:38 - 000463360 _____ (Microsoft Corporation) C:\WINDOWS\system32\webio.dll
2017-10-18 13:20 - 2017-09-29 05:38 - 000370688 _____ (Microsoft Corporation) C:\WINDOWS\system32\FirewallAPI.dll
2017-10-18 13:20 - 2017-09-29 05:37 - 000306688 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Graphics.dll
2017-10-18 13:20 - 2017-09-29 05:34 - 001089536 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwansvc.dll
2017-10-18 13:20 - 2017-09-29 05:34 - 000787456 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapi.dll
2017-10-18 13:20 - 2017-09-29 05:33 - 004559360 _____ (Microsoft Corporation) C:\WINDOWS\system32\dbgeng.dll
2017-10-18 13:20 - 2017-09-29 05:33 - 002123264 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll
2017-10-18 13:20 - 2017-09-29 05:33 - 000772096 _____ (Microsoft Corporation) C:\WINDOWS\system32\MPSSVC.dll
2017-10-18 13:20 - 2017-09-29 05:32 - 000316416 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuuhext.dll
2017-10-18 13:20 - 2017-09-29 05:29 - 001460736 _____ (Microsoft Corporation) C:\WINDOWS\system32\wsp_fs.dll
2017-10-18 13:20 - 2017-09-29 05:29 - 001318912 _____ (Microsoft Corporation) C:\WINDOWS\system32\wsp_health.dll
2017-10-18 13:19 - 2017-09-30 00:26 - 001333136 _____ (Microsoft Corporation) C:\WINDOWS\system32\msctf.dll
2017-10-18 13:19 - 2017-09-30 00:26 - 001241240 _____ (Microsoft Corporation) C:\WINDOWS\system32\user32.dll
2017-10-18 13:19 - 2017-09-30 00:10 - 001150776 _____ (Microsoft Corporation) C:\WINDOWS\system32\ucrtbase.dll
2017-10-18 13:19 - 2017-09-30 00:05 - 001266544 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinapi.appcore.dll
2017-10-18 13:19 - 2017-09-30 00:05 - 000559000 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncHost.exe
2017-10-18 13:19 - 2017-09-30 00:04 - 000347544 _____ (Microsoft Corporation) C:\WINDOWS\system32\msv1_0.dll
2017-10-18 13:19 - 2017-09-30 00:04 - 000249016 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotifyIcon.exe
2017-10-18 13:19 - 2017-09-30 00:04 - 000186776 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb20.sys
2017-10-18 13:19 - 2017-09-30 00:03 - 020373408 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll
2017-10-18 13:19 - 2017-09-30 00:02 - 000175512 _____ (Microsoft Corporation) C:\WINDOWS\system32\basecsp.dll
2017-10-18 13:19 - 2017-09-30 00:01 - 002077592 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpip.sys
2017-10-18 13:19 - 2017-09-29 05:43 - 000142336 _____ (Microsoft Corporation) C:\WINDOWS\system32\smartscreenps.dll
2017-10-18 13:19 - 2017-09-29 05:43 - 000060928 _____ (Microsoft Corporation) C:\WINDOWS\system32\usoapi.dll
2017-10-18 13:19 - 2017-09-29 05:42 - 000247808 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotification.exe
2017-10-18 13:19 - 2017-09-29 05:42 - 000041984 _____ (Microsoft Corporation) C:\WINDOWS\system32\musdialoghandlers.dll
2017-10-18 13:19 - 2017-09-29 05:42 - 000018944 _____ (Microsoft Corporation) C:\WINDOWS\system32\mgmtapi.dll
2017-10-18 13:19 - 2017-09-29 05:41 - 000150016 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotificationUx.exe
2017-10-18 13:19 - 2017-09-29 05:41 - 000036864 _____ (Microsoft Corporation) C:\WINDOWS\system32\TpmTasks.dll
2017-10-18 13:19 - 2017-09-29 05:40 - 006728192 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll
2017-10-18 13:19 - 2017-09-29 05:40 - 000086528 _____ (Microsoft Corporation) C:\WINDOWS\system32\updatepolicy.dll
2017-10-18 13:19 - 2017-09-29 05:39 - 000558592 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusUpdateHandlers.dll
2017-10-18 13:19 - 2017-09-29 05:38 - 000471040 _____ (Microsoft Corporation) C:\WINDOWS\system32\TpmCoreProvisioning.dll
2017-10-18 13:19 - 2017-09-29 05:38 - 000308224 _____ (Microsoft Corporation) C:\WINDOWS\system32\cryptngc.dll
2017-10-18 13:19 - 2017-09-29 05:38 - 000229376 _____ (Microsoft Corporation) C:\WINDOWS\system32\scksp.dll
2017-10-18 13:19 - 2017-09-29 05:37 - 000351744 _____ (Microsoft Corporation) C:\WINDOWS\system32\updatehandlers.dll
2017-10-18 13:19 - 2017-09-29 05:37 - 000038400 _____ (Microsoft Corporation) C:\WINDOWS\system32\TokenBrokerUI.dll
2017-10-18 13:19 - 2017-09-29 05:36 - 002957824 _____ (Microsoft Corporation) C:\WINDOWS\system32\StartTileData.dll
2017-10-18 13:19 - 2017-09-29 05:35 - 001832448 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.pcshell.dll
2017-10-18 13:19 - 2017-09-29 05:34 - 001918464 _____ (Microsoft Corporation) C:\WINDOWS\system32\smartscreen.exe
2017-10-18 13:19 - 2017-09-29 05:34 - 001339904 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserDataService.dll
2017-10-18 13:19 - 2017-09-29 05:34 - 000798720 _____ (Microsoft Corporation) C:\WINDOWS\system32\TokenBroker.dll
2017-10-18 13:19 - 2017-09-29 05:34 - 000535040 _____ (Microsoft Corporation) C:\WINDOWS\system32\usocore.dll
2017-10-18 13:19 - 2017-09-29 05:34 - 000434176 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinapi.dll
2017-10-18 13:19 - 2017-09-29 05:33 - 007598080 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstscax.dll
2017-10-18 13:19 - 2017-09-29 05:32 - 001244160 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.Phone.dll
2017-10-18 13:19 - 2017-09-29 05:31 - 003107328 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstsc.exe
2017-10-18 13:19 - 2017-09-29 05:31 - 000625664 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srv2.sys
2017-10-18 13:19 - 2017-09-29 05:31 - 000134656 _____ (Microsoft Corporation) C:\WINDOWS\system32\TabSvc.dll
2017-10-18 13:19 - 2017-09-29 05:30 - 000342528 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srv.sys
2017-10-18 13:19 - 2017-09-29 05:30 - 000228864 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb10.sys
2017-10-18 13:19 - 2017-09-29 05:29 - 000161792 _____ (Microsoft Corporation) C:\WINDOWS\system32\wscsvc.dll
2017-10-18 13:19 - 2017-09-29 05:28 - 001926656 _____ (Microsoft Corporation) C:\WINDOWS\system32\ResetEngine.dll
2017-10-18 13:18 - 2017-09-30 00:07 - 000815608 _____ (Microsoft Corporation) C:\WINDOWS\system32\rpcrt4.dll
2017-10-18 13:18 - 2017-09-29 05:39 - 000330240 _____ (Microsoft Corporation) C:\WINDOWS\system32\NgcCtnr.dll
2017-10-18 13:18 - 2017-09-29 05:38 - 000359424 _____ (Microsoft Corporation) C:\WINDOWS\system32\aadcloudap.dll
2017-10-18 13:18 - 2017-09-29 05:37 - 000309760 _____ (Microsoft Corporation) C:\WINDOWS\system32\fveapibase.dll
2017-10-18 13:18 - 2017-09-29 05:35 - 003654656 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2017-10-18 13:18 - 2017-09-29 05:35 - 001993216 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Shell.UnifiedTile.CuratedTileCollections.dll
2017-10-18 13:18 - 2017-09-29 05:34 - 006255616 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll
2017-10-18 13:18 - 2017-09-29 05:34 - 000665088 _____ (Microsoft Corporation) C:\WINDOWS\system32\fveapi.dll
2017-10-18 13:18 - 2017-09-29 05:33 - 000658944 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript.dll
2017-10-18 13:18 - 2017-09-29 05:33 - 000471552 _____ (Microsoft Corporation) C:\WINDOWS\system32\RDXService.dll
2017-10-18 13:18 - 2017-09-29 05:31 - 000117248 _____ (Microsoft Corporation) C:\WINDOWS\system32\regsvc.dll
2017-10-18 13:18 - 2017-09-29 05:29 - 000767488 _____ (Microsoft Corporation) C:\WINDOWS\system32\fvewiz.dll
2017-10-18 13:18 - 2017-09-29 05:29 - 000329216 _____ (Microsoft Corporation) C:\WINDOWS\system32\bdesvc.dll
2017-10-18 13:18 - 2017-09-29 05:29 - 000310272 _____ (Microsoft Corporation) C:\WINDOWS\system32\fvecpl.dll
2017-10-18 13:18 - 2017-09-29 05:29 - 000282624 _____ (Microsoft Corporation) C:\WINDOWS\system32\fveui.dll
2017-10-18 13:18 - 2017-09-29 05:29 - 000157696 _____ (Microsoft Corporation) C:\WINDOWS\system32\rpchttp.dll
2017-10-18 13:18 - 2017-09-29 05:28 - 001244672 _____ (Microsoft Corporation) C:\WINDOWS\system32\RecoveryDrive.exe
2017-10-18 13:18 - 2017-09-29 05:28 - 000351744 _____ (Microsoft Corporation) C:\WINDOWS\system32\bdechangepin.exe
2017-10-18 13:18 - 2017-09-29 05:28 - 000190976 _____ (Microsoft Corporation) C:\WINDOWS\system32\manage-bde.exe
2017-10-18 13:18 - 2017-09-29 05:28 - 000130560 _____ (Microsoft Corporation) C:\WINDOWS\system32\BitLockerDeviceEncryption.exe
2017-10-18 13:18 - 2017-09-29 05:28 - 000104448 _____ (Microsoft Corporation) C:\WINDOWS\system32\Robocopy.exe
2017-10-18 13:17 - 2017-09-30 00:10 - 005862296 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2017-10-18 13:17 - 2017-09-30 00:10 - 001971232 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ntfs.sys
2017-10-18 13:17 - 2017-09-30 00:10 - 000606072 _____ (Microsoft Corporation) C:\WINDOWS\system32\oleaut32.dll
2017-10-18 13:17 - 2017-09-30 00:05 - 002603744 _____ (Microsoft Corporation) C:\WINDOWS\system32\OneCoreUAPCommonProxyStub.dll
2017-10-18 13:17 - 2017-09-30 00:03 - 001439032 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsrcsnk.dll
2017-10-18 13:17 - 2017-09-29 05:40 - 000432128 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\nwifi.sys
2017-10-18 13:17 - 2017-09-29 05:40 - 000391680 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlansec.dll
2017-10-18 13:17 - 2017-09-29 05:38 - 005721600 _____ (Microsoft Corporation) C:\WINDOWS\system32\BingMaps.dll
2017-10-18 13:17 - 2017-09-29 05:36 - 000590336 _____ (Microsoft Corporation) C:\WINDOWS\system32\PCPKsp.dll
2017-10-18 13:17 - 2017-09-29 05:32 - 002782720 _____ (Microsoft Corporation) C:\WINDOWS\system32\msftedit.dll
2017-10-18 13:17 - 2017-09-29 05:28 - 000297984 _____ (Microsoft Corporation) C:\WINDOWS\system32\mcbuilder.exe
2017-10-18 13:17 - 2017-09-20 13:08 - 000640512 _____ (Microsoft Corporation) C:\WINDOWS\system32\mswstr10.dll
2017-10-18 13:17 - 2017-09-20 13:08 - 000008704 _____ (Microsoft Corporation) C:\WINDOWS\system32\msjint40.dll
2017-10-18 13:16 - 2017-09-30 00:29 - 001427656 _____ (Microsoft Corporation) C:\WINDOWS\system32\gdi32full.dll
2017-10-18 13:16 - 2017-09-30 00:10 - 001855336 _____ (Microsoft Corporation) C:\WINDOWS\system32\KernelBase.dll
2017-10-18 13:16 - 2017-09-30 00:10 - 000103320 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ksecdd.sys
2017-10-18 13:16 - 2017-09-30 00:07 - 000144176 _____ (Microsoft Corporation) C:\WINDOWS\system32\sspicli.dll
2017-10-18 13:16 - 2017-09-30 00:06 - 002022808 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys
2017-10-18 13:16 - 2017-09-30 00:06 - 000582552 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms2.sys
2017-10-18 13:16 - 2017-09-30 00:05 - 005827744 _____ (Microsoft Corporation) C:\WINDOWS\system32\windows.storage.dll
2017-10-18 13:16 - 2017-09-30 00:01 - 000044008 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsass.exe
2017-10-18 13:16 - 2017-09-29 05:44 - 000133120 _____ (Microsoft Corporation) C:\WINDOWS\system32\t2embed.dll
2017-10-18 13:16 - 2017-09-29 05:42 - 000018944 _____ (Microsoft Corporation) C:\WINDOWS\system32\sspisrv.dll
2017-10-18 13:16 - 2017-09-29 05:40 - 000042496 _____ (Microsoft Corporation) C:\WINDOWS\system32\ServiceWorkerHost.exe
2017-10-18 13:16 - 2017-09-29 05:39 - 020511232 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll
2017-10-18 13:16 - 2017-09-29 05:39 - 011888640 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2017-10-18 13:16 - 2017-09-29 05:39 - 000364032 _____ (Microsoft Corporation) C:\WINDOWS\system32\msIso.dll
2017-10-18 13:16 - 2017-09-29 05:38 - 001135616 ____R (The ICU Project) C:\WINDOWS\system32\icuuc.dll
2017-10-18 13:16 - 2017-09-29 05:36 - 019337216 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2017-10-18 13:16 - 2017-09-29 05:34 - 002859520 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2017-10-18 13:16 - 2017-09-29 05:33 - 001137152 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll
2017-10-18 13:16 - 2017-09-29 05:32 - 001627136 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2017-10-18 13:16 - 2017-09-29 05:30 - 000116224 _____ (Microsoft Corporation) C:\WINDOWS\system32\iscsiexe.dll
2017-10-18 13:16 - 2017-09-29 05:28 - 000681472 _____ (Microsoft Corporation) C:\WINDOWS\system32\clusapi.dll
2017-10-18 13:16 - 2017-09-29 05:28 - 000473088 _____ (Microsoft Corporation) C:\WINDOWS\system32\resutils.dll
2017-10-18 13:16 - 2017-09-29 03:40 - 000804312 _____ C:\WINDOWS\system32\locale.nls
2017-10-18 13:16 - 2017-09-20 13:08 - 000345088 _____ (Microsoft Corporation) C:\WINDOWS\system32\msexcl40.dll
2017-10-18 13:15 - 2017-09-30 00:10 - 000508344 _____ (Microsoft Corporation) C:\WINDOWS\system32\dnsapi.dll
2017-10-18 13:15 - 2017-09-30 00:09 - 002259760 _____ (Microsoft Corporation) C:\WINDOWS\system32\CoreUIComponents.dll
2017-10-18 13:15 - 2017-09-30 00:05 - 000755608 _____ (Microsoft Corporation) C:\WINDOWS\system32\efscore.dll
2017-10-18 13:15 - 2017-09-30 00:04 - 000612120 _____ (Microsoft Corporation) C:\WINDOWS\system32\wer.dll
2017-10-18 13:15 - 2017-09-29 05:43 - 002199552 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.Resources.dll
2017-10-18 13:15 - 2017-09-29 05:41 - 013844992 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll
2017-10-18 13:15 - 2017-09-29 05:41 - 000110080 _____ (Microsoft Corporation) C:\WINDOWS\system32\BitLockerCsp.dll
2017-10-18 13:15 - 2017-09-29 05:41 - 000037888 _____ (Microsoft Corporation) C:\WINDOWS\system32\efssvc.dll
2017-10-18 13:15 - 2017-09-29 05:40 - 000213504 _____ (Microsoft Corporation) C:\WINDOWS\system32\dusmsvc.dll
2017-10-18 13:15 - 2017-09-29 05:38 - 000193536 _____ (Microsoft Corporation) C:\WINDOWS\system32\domgmt.dll
2017-10-18 13:15 - 2017-09-29 05:36 - 000905216 _____ (Microsoft Corporation) C:\WINDOWS\system32\enterprisecsps.dll
2017-10-18 13:15 - 2017-09-29 05:34 - 000963584 _____ (Microsoft Corporation) C:\WINDOWS\system32\dosvc.dll
2017-10-18 13:15 - 2017-09-29 05:33 - 001560064 _____ (Microsoft Corporation) C:\WINDOWS\system32\FntCache.dll
2017-10-18 13:15 - 2017-09-29 05:33 - 001506816 _____ (Microsoft Corporation) C:\WINDOWS\system32\quartz.dll
2017-10-18 13:15 - 2017-09-29 05:32 - 002340864 _____ (Microsoft Corporation) C:\WINDOWS\system32\DWrite.dll
2017-10-18 13:15 - 2017-09-29 05:31 - 000242688 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceEnroller.exe
2017-10-18 13:15 - 2017-09-29 05:28 - 000040448 _____ (Microsoft Corporation) C:\WINDOWS\system32\cipher.exe
2017-10-18 13:14 - 2017-09-30 00:10 - 000480920 _____ (Microsoft Corporation) C:\WINDOWS\system32\advapi32.dll
2017-10-18 13:14 - 2017-09-30 00:04 - 001520536 _____ (Microsoft Corporation) C:\WINDOWS\system32\UpdateAgent.dll
2017-10-18 13:14 - 2017-09-30 00:04 - 000519680 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentClient.dll
2017-10-18 13:14 - 2017-09-30 00:04 - 000182680 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppxAllUserStore.dll
2017-10-18 13:14 - 2017-09-30 00:04 - 000154520 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\appid.sys
2017-10-18 13:14 - 2017-09-30 00:02 - 001624096 _____ (Microsoft Corporation) C:\WINDOWS\system32\Microsoft.Uev.AppAgent.dll
2017-10-18 13:14 - 2017-09-30 00:02 - 001517464 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVEntSubsystems32.dll
2017-10-18 13:14 - 2017-09-30 00:02 - 001293856 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVEntVirtualization.dll
2017-10-18 13:14 - 2017-09-30 00:02 - 001158040 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVIntegration.dll
2017-10-18 13:14 - 2017-09-30 00:02 - 000960920 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVEntSubsystemController.dll
2017-10-18 13:14 - 2017-09-30 00:02 - 000649760 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVClient.exe
2017-10-18 13:14 - 2017-09-30 00:02 - 000635800 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVOrchestration.dll
2017-10-18 13:14 - 2017-09-30 00:02 - 000498072 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVPublishing.dll
2017-10-18 13:14 - 2017-09-30 00:02 - 000496024 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVCatalog.dll
2017-10-18 13:14 - 2017-09-29 05:40 - 000371200 _____ (Microsoft Corporation) C:\WINDOWS\system32\daxexec.dll
2017-10-18 13:14 - 2017-09-29 05:38 - 000498688 _____ (Microsoft Corporation) C:\WINDOWS\system32\Microsoft.Uev.Office2013CustomActions.dll
2017-10-18 13:14 - 2017-09-29 05:38 - 000454144 _____ (Microsoft Corporation) C:\WINDOWS\system32\WindowManagement.dll
2017-10-18 13:14 - 2017-09-29 05:38 - 000414720 _____ (Microsoft Corporation) C:\WINDOWS\system32\TileDataRepository.dll
2017-10-18 13:14 - 2017-09-29 05:37 - 001513984 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.onecore.dll
2017-10-18 13:14 - 2017-09-29 05:37 - 000793088 _____ (Microsoft Corporation) C:\WINDOWS\system32\ApplySettingsTemplateCatalog.exe
2017-10-18 13:14 - 2017-09-29 05:37 - 000513024 _____ (Microsoft Corporation) C:\WINDOWS\system32\Microsoft.Uev.PrinterCustomActions.dll
2017-10-18 13:14 - 2017-09-29 05:36 - 001208320 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.desktop.dll
2017-10-18 13:14 - 2017-09-29 05:36 - 000834560 _____ (Microsoft Corporation) C:\WINDOWS\system32\Microsoft.Uev.CommonBridge.dll
2017-10-18 13:14 - 2017-09-29 05:36 - 000457216 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppReadiness.dll
2017-10-18 13:14 - 2017-09-29 05:34 - 000841728 _____ (Microsoft Corporation) C:\WINDOWS\system32\AgentService.exe
2017-10-18 13:14 - 2017-09-29 05:32 - 002373632 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll
2017-10-18 13:14 - 2017-09-29 05:32 - 001490944 _____ (Microsoft Corporation) C:\WINDOWS\system32\Microsoft.Uev.ModernAppAgent.dll
2017-10-18 13:13 - 2017-09-30 00:10 - 000370072 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbhub.sys
2017-10-18 13:13 - 2017-09-30 00:04 - 000127384 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbccgp.sys
2017-10-18 13:13 - 2017-09-29 05:42 - 000027648 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\BasicRender.sys
2017-10-18 09:25 - 2017-10-18 09:27 - 000000000 ____D C:\Users\Filipe\Desktop\Festa das Crianças R Nonato
2017-10-17 10:59 - 2017-09-18 20:37 - 000434592 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBHUB3.SYS
2017-10-17 10:59 - 2017-09-18 20:15 - 000648704 _____ (Microsoft Corporation) C:\WINDOWS\system32\MbaeApiPublic.dll
2017-10-17 10:58 - 2017-09-18 20:50 - 000902896 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.efi
2017-10-17 10:58 - 2017-09-18 20:50 - 000790816 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.exe
2017-10-17 10:58 - 2017-09-18 20:47 - 001089344 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.efi
2017-10-17 10:58 - 2017-09-18 20:47 - 000954592 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.exe
2017-10-17 10:58 - 2017-09-18 20:40 - 000877984 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecConfig.efi
2017-10-17 10:58 - 2017-09-18 20:20 - 000049664 _____ (Microsoft Corporation) C:\WINDOWS\system32\tetheringclient.dll
2017-10-17 10:58 - 2017-09-18 20:19 - 000096768 _____ (Microsoft Corporation) C:\WINDOWS\system32\eShims.dll
2017-10-17 10:58 - 2017-09-18 20:18 - 000175616 _____ (Microsoft Corporation) C:\WINDOWS\system32\tetheringservice.dll
2017-10-16 09:57 - 2017-10-16 09:57 - 000000000 ____D C:\Users\Filipe\AppData\Local\Tempzxpsign8c5d917940f47ff4
2017-10-16 09:57 - 2017-10-16 09:57 - 000000000 ____D C:\Users\Filipe\AppData\Local\Tempzxpsign473b870f6a4473d2
2017-10-16 09:55 - 2017-10-16 09:55 - 000000000 ____D C:\Users\Filipe\AppData\Local\Tempzxpsign2140568dd0cec1c7
2017-10-16 09:54 - 2017-10-16 09:54 - 000000000 ____D C:\Users\Filipe\AppData\Local\Tempzxpsign4764025ec76e5a21
2017-10-16 09:54 - 2017-10-16 09:54 - 000000000 ____D C:\Users\Filipe\AppData\Local\Tempzxpsign30b95b3921c8c78e
2017-10-16 09:15 - 2017-10-21 10:53 - 000000000 ____D C:\Users\Filipe\AppData\LocalLow\BitTorrent
2017-10-14 15:23 - 2017-04-26 20:24 - 000358569 _____ C:\Users\Filipe\Documents\contra capaa2.pdf
2017-10-14 15:23 - 2017-04-08 11:30 - 023131217 _____ C:\Users\Filipe\Documents\capa.cdr
2017-10-14 15:23 - 2017-04-08 11:30 - 023131217 _____ C:\Users\Filipe\Documents\CAPA (2).cdr
2017-10-13 19:47 - 2017-10-13 19:47 - 000042722 _____ C:\Users\Filipe\Documents\ana julia.wlmp
2017-10-13 17:33 - 2017-10-13 17:33 - 000000000 ____D C:\Users\Filipe\AppData\Local\{E8D244EB-AE0F-4B51-93B8-8080F74B599A}
2017-10-13 09:34 - 2017-10-13 18:45 - 000000000 ____D C:\Users\Filipe\Desktop\ana julia
2017-10-10 13:10 - 2017-10-16 11:25 - 000000000 ____D C:\Users\Filipe\Desktop\SAUDAÇÕES
2017-10-10 09:02 - 2017-10-10 17:38 - 000000000 ____D C:\Users\Filipe\Downloads\Irmã Eva
2017-10-10 09:00 - 2017-10-10 11:23 - 000000000 ____D C:\Users\Filipe\Downloads\Louvores Mp3
2017-10-06 10:35 - 2017-10-06 10:35 - 000749796 _____ C:\Users\Filipe\Desktop\Apresentação de LIBRAS.pptx
2017-10-05 13:15 - 2017-10-05 13:15 - 000000000 ____D C:\WINDOWS\system32\Adobe
2017-10-05 12:01 - 2008-08-18 20:18 - 000077824 _____ (Fox Magic Software) C:\WINDOWS\system32\fmcodec.DLL
2017-10-04 17:23 - 2017-10-26 17:18 - 000000000 ____D C:\Users\Filipe\Documents\CARTÃO RESPOSTA
2017-10-04 10:03 - 2017-10-04 10:03 - 000000000 ____D C:\Users\Filipe\AppData\Roaming\Neoretix
2017-10-03 12:08 - 2017-10-06 16:25 - 000000000 ____D C:\Users\Filipe\Desktop\SIMULADOS NOITE 1º DIA
2017-10-03 11:17 - 2017-10-06 16:47 - 000000000 ____D C:\Users\Filipe\Desktop\SIMULADOS 2º DIA - OUTUBRO 2017
2017-10-02 16:26 - 2017-10-02 16:27 - 000000000 ____D C:\Users\Filipe\Desktop\TUDO
2017-10-02 12:43 - 2017-10-16 17:05 - 000000000 ____D C:\Users\Filipe\Desktop\GC AI-alice
2017-10-02 10:05 - 2017-10-02 09:56 - 000670976 _____ C:\Users\Filipe\Documents\Cópia_de_segurança_de_cartão resposta MONSENHOR 1º ANO.cdr
2017-10-02 09:56 - 2017-10-02 10:05 - 000651654 _____ C:\Users\Filipe\Documents\cartão resposta MONSENHOR 1º ANO.cdr
2017-10-02 09:28 - 2017-10-02 09:28 - 000000000 ____D C:\Users\Filipe\AppData\Local\{EECBC261-C464-4197-BE6B-5666E4EEC07B}
2017-09-30 11:38 - 2017-09-29 18:23 - 000649508 _____ C:\Users\Filipe\Documents\Cópia_de_segurança_de_ARVORE.cdr

==================== Um Mês Modificados arquivos e pastas ========

(Se uma entrada for incluída na fixlist, o arquivo/pasta será movido.)

2017-10-30 12:01 - 2017-04-26 12:27 - 000000000 ____D C:\Brother
2017-10-30 09:38 - 2017-03-18 16:23 - 000000000 ___HD C:\Program Files\WindowsApps
2017-10-30 09:38 - 2017-03-18 16:23 - 000000000 ____D C:\WINDOWS\AppReadiness
2017-10-30 09:07 - 2017-06-08 15:06 - 000000000 ____D C:\WINDOWS\system32\Java
2017-10-30 09:06 - 2009-07-14 00:04 - 000000423 _____ C:\WINDOWS\win.ini
2017-10-29 17:16 - 2015-12-13 20:18 - 000000000 ____D C:\Users\Filipe\AppData\Roaming\vlc
2017-10-28 13:23 - 2017-08-11 10:04 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2017-10-28 13:05 - 2017-05-02 12:59 - 000000000 ____D C:\Users\Filipe\AppData\Roaming\BitTorrent
2017-10-28 13:05 - 2015-12-14 15:13 - 000000000 ____D C:\Users\Filipe\AppData\Roaming\MPC-HC
2017-10-28 13:04 - 2017-08-07 11:46 - 000000000 ___DC C:\WINDOWS\Panther
2017-10-28 13:04 - 2017-03-18 16:23 - 000000000 ____D C:\WINDOWS\LiveKernelReports
2017-10-28 13:04 - 2017-03-18 16:21 - 000000000 ____D C:\WINDOWS\INF
2017-10-27 16:15 - 2017-08-11 10:47 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2017-10-27 16:14 - 2017-03-18 04:02 - 000786432 _____ C:\WINDOWS\system32\config\BBI
2017-10-26 18:19 - 2017-03-18 16:23 - 000000000 ____D C:\WINDOWS\system32\NDF
2017-10-24 18:20 - 2017-09-12 17:17 - 000000000 ____D C:\Users\Filipe\Documents\simulado setembro 2017
2017-10-23 10:37 - 2017-09-20 12:26 - 000000000 ____D C:\Users\Filipe\Downloads\Compressed
2017-10-22 11:48 - 2017-08-11 10:09 - 002394814 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2017-10-22 11:48 - 2017-03-19 07:33 - 000960348 _____ C:\WINDOWS\system32\prfh0416.dat
2017-10-22 11:48 - 2017-03-19 07:33 - 000265388 _____ C:\WINDOWS\system32\prfc0416.dat
2017-10-20 12:56 - 2017-03-18 16:23 - 000000000 ____D C:\WINDOWS\rescache
2017-10-19 11:03 - 2015-12-11 06:26 - 000000000 __RHD C:\Users\Public\AccountPictures
2017-10-19 10:59 - 2017-08-11 10:03 - 003878256 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2017-10-18 20:07 - 2017-03-18 16:23 - 000000000 ____D C:\WINDOWS\ShellExperiences
2017-10-18 20:07 - 2017-03-18 16:23 - 000000000 ____D C:\WINDOWS\Provisioning
2017-10-18 20:07 - 2017-03-18 16:23 - 000000000 ____D C:\WINDOWS\PolicyDefinitions
2017-10-18 20:05 - 2017-03-18 16:23 - 000207872 _____ (Microsoft Corporation) C:\WINDOWS\system32\msclmd.dll
2017-10-18 16:15 - 2017-03-21 15:08 - 000000000 ____D C:\Users\Filipe\Downloads\downloads tudo
2017-10-18 15:05 - 2017-03-18 16:14 - 000000000 ____D C:\WINDOWS\CbsTemp
2017-10-18 15:04 - 2015-12-13 20:54 - 000000000 ____D C:\Users\Todos os Usuários\Microsoft Help
2017-10-18 15:02 - 2015-12-11 02:46 - 000000000 ____D C:\WINDOWS\system32\MRT
2017-10-18 13:46 - 2015-12-11 02:46 - 124059592 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2017-10-18 13:33 - 2017-03-18 16:23 - 000000000 ____D C:\Program Files\Common Files\microsoft shared
2017-10-17 13:05 - 2016-01-09 13:01 - 000000000 ____D C:\Users\Filipe\AppData\Local\ElevatedDiagnostics
2017-10-12 22:21 - 2017-08-31 09:24 - 000835576 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\FlashPlayerApp.exe
2017-10-12 22:21 - 2017-08-31 09:24 - 000177656 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\FlashPlayerCPLApp.cpl
2017-10-11 18:24 - 2017-09-28 10:47 - 000000000 ____D C:\Users\Filipe\Desktop\SIMULADOS 1º DIA - OUTUBRO 2017
2017-10-10 10:13 - 2016-12-22 18:04 - 000000000 ____D C:\FFOutput
2017-10-09 18:25 - 2017-04-27 18:56 - 000000000 ____D C:\Users\Filipe\Downloads\word
2017-10-06 10:59 - 2016-02-19 13:19 - 000000000 ____D C:\Users\Filipe\AppData\Local\UmmyVideoDownloader
2017-10-04 12:19 - 2015-12-11 06:26 - 000000000 ____D C:\Users\Filipe\AppData\Local\Packages
2017-09-30 11:38 - 2017-09-29 18:23 - 000573235 _____ C:\Users\Filipe\Documents\ARVORE.cdr

==================== Arquivos na raiz de alguns diretórios =======

2016-04-15 12:34 - 2016-12-01 17:54 - 000000132 _____ () C:\Users\Filipe\AppData\Roaming\Adobe PNG Format CS6 Prefs
2017-02-15 15:29 - 2017-02-15 15:58 - 000003058 _____ () C:\Users\Filipe\AppData\Roaming\droid4xinstaller.log
2017-05-24 14:31 - 2017-05-24 14:31 - 000003475 _____ () C:\Users\Filipe\AppData\Roaming\go00001.bak
2016-02-15 12:04 - 2016-02-15 12:04 - 000000002 _____ () C:\Users\Filipe\AppData\Roaming\UINF.txt
2016-01-22 15:21 - 2016-01-22 15:21 - 000000042 _____ () C:\Users\Filipe\AppData\Roaming\WB.CFG
2016-09-29 10:34 - 2016-09-29 10:34 - 000003369 _____ () C:\Users\Filipe\AppData\Local\recently-used.xbel
2016-01-04 09:44 - 2016-01-04 09:44 - 000000057 _____ () C:\ProgramData\Ament.ini
2017-08-11 10:08 - 2017-08-11 10:08 - 000000000 ____H () C:\ProgramData\DP45977C.lfl
2015-12-10 22:20 - 2015-12-10 22:20 - 000489984 _____ () C:\ProgramData\DRV10.tmp
2015-12-10 22:20 - 2015-12-10 22:20 - 018782720 _____ (OEM) C:\ProgramData\E2010.tmp

Alguns arquivos em TEMP:
====================
2017-10-29 17:10 - 2011-04-26 18:47 - 000330240 _____ () C:\Users\Filipe\AppData\Local\Temp\SDL_0.dll

==================== Bamital & volsnap ======================

(Não há correção automática para arquivos que não passaram na verificação.)

C:\WINDOWS\explorer.exe => O arquivo é assinado digitalmente
C:\WINDOWS\system32\winlogon.exe => O arquivo é assinado digitalmente
C:\WINDOWS\system32\wininit.exe => O arquivo é assinado digitalmente
C:\WINDOWS\system32\svchost.exe => O arquivo é assinado digitalmente
C:\WINDOWS\system32\services.exe => O arquivo é assinado digitalmente
C:\WINDOWS\system32\User32.dll => O arquivo é assinado digitalmente
C:\WINDOWS\system32\userinit.exe => O arquivo é assinado digitalmente
C:\WINDOWS\system32\rpcss.dll => O arquivo é assinado digitalmente
C:\WINDOWS\system32\dnsapi.dll => O arquivo é assinado digitalmente
C:\WINDOWS\system32\Drivers\volsnap.sys => O arquivo é assinado digitalmente

LastRegBack: 2017-10-20 13:47

==================== Fim de FRST.txt ============================

Publicité


Signaler le contenu de ce document

Publicité