Publicité
Publicité
Format du document : text/plain
Prévisualisation
Resultado do análise da Farbar Recovery Scan Tool (FRST) (x64) Versão: 13-04-2022 01
Executado por gsbad (administrador) em GSDELL (Dell Inc. G5 5590) (14-04-2022 12:13:11)
Executando a partir de C:\Users\gsbad\Desktop
Perfis Carregados: gsbad
Plataforma: Microsoft Windows 10 Pro Versão 21H1 19043.1586 (X64) Idioma: Português (Brasil)
Navegador padrão: Chrome
Modo da Inicialização: Normal
==================== Processos (Whitelisted) =================
(Se uma entrada for incluída na fixlist, o processo será fechado. O arquivo não será movido.)
(Brave Software, Inc. -> BraveSoftware Inc.) C:\Program Files (x86)\BraveSoftware\Update\1.3.361.111\BraveCrashHandler.exe
(Brave Software, Inc. -> BraveSoftware Inc.) C:\Program Files (x86)\BraveSoftware\Update\1.3.361.111\BraveCrashHandler64.exe
(C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\rundll32.exe <2>
(C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe ->) (NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA Share.exe <3>
(C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe ->) (NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\ShadowPlay\nvsphelper64.exe
(C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2203.5-0\MsMpEng.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2203.5-0\MpCopyAccelerator.exe
(Discord Inc. -> Discord Inc.) C:\Users\gsbad\AppData\Local\Discord\app-1.0.9004\Discord.exe <9>
(drivers\RivetNetworks\Killer\xTendUtilityService.exe ->) (Rivet Networks LLC -> Rivet Networks LLC) C:\Windows\System32\drivers\RivetNetworks\Killer\xTendUtility.exe
(DriverStore\FileRepository\cui_dch.inf_amd64_7208949846a9b9dc\igfxCUIService.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\cui_dch.inf_amd64_7208949846a9b9dc\igfxEM.exe
(explorer.exe ->) (AVB Disc Soft, SIA -> Disc Soft Ltd) C:\Program Files\DAEMON Tools Lite\DTShellHlp.exe
(explorer.exe ->) (Bluestack Systems, Inc -> BlueStack Systems) C:\Program Files\BlueStacks_nxt\HD-Player.exe
(explorer.exe ->) (Google LLC -> Google LLC) C:\Program Files\Google\Chrome\Application\chrome.exe <36>
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.36.122\GoogleCrashHandler.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.36.122\GoogleCrashHandler64.exe
(NVIDIA Corporation -> Node.js) C:\Program Files (x86)\NVIDIA Corporation\NvNode\NVIDIA Web Helper.exe
(Oracle America, Inc. -> Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(services.exe ->) (AVB Disc Soft, SIA -> Disc Soft Ltd) C:\Program Files\DAEMON Tools Lite\DiscSoftBusServiceLite.exe
(services.exe ->) (A-Volute -> Nahimic) C:\Windows\System32\NahimicService.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\cui_dch.inf_amd64_7208949846a9b9dc\igfxCUIService.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\igcc_dch.inf_amd64_9cf4db1a1fd1b22d\OneApp.IGCC.WinService.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_4208a7ac24ac6344\IntelCpHDCPSvc.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_4208a7ac24ac6344\IntelCpHeciSvc.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\lms.inf_amd64_f629911085770af0\LMS.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\mewmiprov.inf_amd64_cad1db73e8c782a6\WMIRegistrationService.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\Intel\DPTF\esif_uf.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\TbtP2pShortcutService.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\ThunderboltService.exe
(services.exe ->) (Intel(R) Embedded Subsystems and IP Blocks Group -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\dal.inf_amd64_b5484efd38adbe8d\jhi_service.exe
(services.exe ->) (Intel(R) Rapid Storage Technology -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\iastorac.inf_amd64_9c788f1d162b1224\RstMwService.exe
(services.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe
(services.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(services.exe ->) (Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.GamingServices_3.63.31001.0_x64__8wekyb3d8bbwe\gamingservices.exe
(services.exe ->) (Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.GamingServices_3.63.31001.0_x64__8wekyb3d8bbwe\gamingservicesnet.exe
(services.exe ->) (Microsoft Windows Hardware Compatibility Publisher -> Windows (R) Win 7 DDK provider) C:\Windows\System32\drivers\AdminService.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2203.5-0\MsMpEng.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2203.5-0\NisSrv.exe
(services.exe ->) (NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe <3>
(services.exe ->) (Nvidia Corporation -> NVIDIA Corporation) C:\Windows\System32\DriverStore\FileRepository\nvdmi.inf_amd64_d76251acf4d55737\Display.NvContainer\NVDisplay.Container.exe <2>
(services.exe ->) (PROCOMP INDUSTRIA ELETRONICA LTDA -> Diebold Nixdorf) C:\Program Files\Diebold\Warsaw\core.exe <2>
(services.exe ->) (Qualcomm Atheros -> Qualcomm Technologies Inc.) C:\Windows\System32\drivers\QcomWlanSrvx64.exe
(services.exe ->) (Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Windows\System32\RtkAudUService64.exe <3>
(services.exe ->) (Rivet Networks LLC -> CloudBees, Inc.) C:\Windows\System32\drivers\RivetNetworks\Killer\xTendUtilityService.exe
(services.exe ->) (Rivet Networks LLC -> Rivet Networks) C:\Windows\System32\drivers\RivetNetworks\Killer\KillerNetworkService.exe
(svchost.exe ->) (Bluestack Systems, Inc -> Bluestack System Inc.) C:\Program Files\BlueStacks_nxt\BstkSVC.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe <4>
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\MoUsoCoreWorker.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(vmcompute.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\Windows\System32\vmwp.exe
==================== Registro (Whitelisted) ===================
(Se uma entrada for incluída na fixlist, o ítem no Registro será restaurado para o padrão ou removido. O arquivo não será movido.)
HKLM\...\Run: [RtkAudUService] => C:\WINDOWS\System32\RtkAudUService64.exe [1140000 2020-07-30] (Realtek Semiconductor Corp. -> Realtek Semiconductor)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [707256 2021-12-15] (Oracle America, Inc. -> Oracle Corporation)
HKU\S-1-5-21-1036876464-1709329310-3854566978-1001\...\Run: [DAEMON Tools Lite Automount] => C:\Program Files\DAEMON Tools Lite\DTAgent.exe [408888 2021-01-19] (AVB Disc Soft, SIA -> Disc Soft Ltd)
HKU\S-1-5-21-1036876464-1709329310-3854566978-1001\...\Run: [Discord] => C:\Users\gsbad\AppData\Local\Discord\Update.exe [1512608 2021-09-21] (Discord Inc. -> GitHub)
HKU\S-1-5-21-1036876464-1709329310-3854566978-1001\...\Run: [Overwolf] => D:\curseforge\Overwolf\OverwolfLauncher.exe [1802072 2022-04-02] (Overwolf Ltd -> Overwolf Ltd.)
HKU\S-1-5-21-1036876464-1709329310-3854566978-1001\...\MountPoints2: {2927f9ca-5868-11eb-a20e-a4bb6d6cde80} - "F:\setup.exe"
HKU\S-1-5-21-1036876464-1709329310-3854566978-1001\...\MountPoints2: {2927f9ea-5868-11eb-a20e-a4bb6d6cde80} - "G:\Launcher.exe"
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files\Google\Chrome\Application\100.0.4896.88\Installer\chrmstp.exe [2022-04-13] (Google LLC -> Google LLC)
HKLM\Software\Microsoft\Active Setup\Installed Components: [{AFE6A462-C574-4B8A-AF43-4CC60DF4563B}] -> C:\Program Files\BraveSoftware\Brave-Browser\Application\100.1.37.113\Installer\chrmstp.exe [2022-04-12] (Brave Software, Inc. -> Brave Software, Inc.)
BootExecute: autocheck autochk * sdnclean64.exe
GroupPolicy: Restrição ? <==== ATENÇÃO
Policies: C:\ProgramData\NTUSER.pol: Restrição <==== ATENÇÃO
==================== Tarefas Agendadas (Whitelisted) ============
(Se uma entrada for incluída na fixlist, será removida do Registro. O arquivo não será movido, a menos que seja colocado separadamente.)
Task: {007C7A94-E6F9-4EAD-8C6B-2FF8B8236935} - System32\Tasks\Microsoft\Office\Office Feature Updates => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [138680 2022-04-06] (Microsoft Corporation -> Microsoft Corporation)
Task: {00DA6EB1-B872-4A7E-A8E1-6BEE5B126D78} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn2016 => C:\Program Files\Microsoft Office\root\Office16\msoia.exe [8338896 2022-04-06] (Microsoft Corporation -> Microsoft Corporation)
Task: {0397BF50-DA19-44F0-A3CA-148A081BFCB2} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack2016 => C:\Program Files\Microsoft Office\root\Office16\msoia.exe [8338896 2022-04-06] (Microsoft Corporation -> Microsoft Corporation)
Task: {129A1395-9A40-4BF5-B4C2-773090DD4CCE} - System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [905072 2021-06-09] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {181BDA16-A973-4E14-89F5-9B694E224BD7} - System32\Tasks\NvDriverUpdateCheckDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [903024 2021-05-04] (NVIDIA Corporation -> NVIDIA Corporation) -> -d "C:\Program Files\NVIDIA Corporation\NvDriverUpdateCheck" -l 3 -f C:\ProgramData\NVIDIA\NvContainerDriverUpdateCheck.log
Task: {1BDBBCF7-45DB-426E-9329-167D29FFE9AB} - System32\Tasks\NvTmRep_CrashReport4_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1261424 2021-06-09] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {28B54377-00A1-4C18-B16D-EF783027C65B} - System32\Tasks\BraveSoftwareUpdateTaskMachineUA => C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe [155848 2020-10-06] (Brave Software, Inc. -> BraveSoftware Inc.)
Task: {2D93450C-8387-4CAF-BAAC-B78D7AF1A86A} - System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [905072 2021-06-09] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {31913254-CE5C-46F9-83A4-25016B176387} - System32\Tasks\Intel PTT EK Recertification => C:\WINDOWS\System32\DriverStore\FileRepository\iclsclient.inf_amd64_76523213b78d9046\lib\IntelPTTEKRecertification.exe [818008 2021-09-15] (Intel Corporation -> Intel(R) Corporation)
Task: {401451C6-5161-4E05-B293-7566999BB1AA} - System32\Tasks\Mozilla\Firefox Default Browser Agent 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\default-browser-agent.exe do-task "308046B0AF4A39CB"
Task: {4B10CC98-35F5-4D5E-91BD-A2BF2B00CADF} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [156232 2022-01-04] (Google LLC -> Google LLC)
Task: {504B595D-CF59-425C-ABB4-F96C6F2DAD9A} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2203.5-0\MpCmdRun.exe [993000 2022-04-08] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {598ABF55-7424-4C88-A872-90E21C74815F} - System32\Tasks\NVIDIA GeForce Experience SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA GeForce Experience.exe [3339120 2021-06-15] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {5A915682-48A6-421C-BE09-D9CD631D0BD1} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2203.5-0\MpCmdRun.exe [993000 2022-04-08] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {653D8ADD-E80D-4056-ABD5-3E0064571B29} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2203.5-0\MpCmdRun.exe [993000 2022-04-08] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {67DCC2AB-74E3-43EA-AB08-7D4776C52361} - System32\Tasks\BlueStacksHelper_nxt => C:\Program Files\BlueStacks_nxt\BlueStacksHelper.exe [275136 2022-03-15] (Bluestack Systems, Inc -> BlueStack Systems, Inc.)
Task: {6DE468C6-1779-4B2C-900F-E18182B53FDF} - System32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\NvNode\nvnodejslauncher.exe [645488 2021-06-09] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {6FECF9F3-5E0B-43D9-A013-1D24BBD708C7} - System32\Tasks\BraveSoftwareUpdateTaskMachineCore => C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe [155848 2020-10-06] (Brave Software, Inc. -> BraveSoftware Inc.)
Task: {7E5EEF59-8DF7-4359-8827-FB0D82E7CDCF} - System32\Tasks\Microsoft\Office\Office Feature Updates Logon => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [138680 2022-04-06] (Microsoft Corporation -> Microsoft Corporation)
Task: {88DAADCD-584E-4AC9-B213-5EAA330CBBAA} - System32\Tasks\Mozilla\Firefox Background Update 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\firefox.exe --MOZ_LOG sync,prependheader,timestamp,append,maxsize:1,Dump:5 --MOZ_LOG_FILE C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38\updates\308046B0AF4A39CB\backgroundupdate.moz_log --backgroundtask backgroundupdate
Task: {8EBDCD72-4ABA-4E6D-ABAD-CB06150924B0} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2203.5-0\MpCmdRun.exe [993000 2022-04-08] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {973FA5BC-A97D-460A-9A78-FB783BAE608D} - System32\Tasks\klcp_update => C:\Program Files (x86)\K-Lite Codec Pack\Tools\CodecTweakTool.exe [1907712 2021-05-20] () [Arquivo não assinado]
Task: {9BD35978-81B0-4AFB-B0BA-FFDAD73D288E} - System32\Tasks\NvTmRep_CrashReport2_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1261424 2021-06-09] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {ABCA36BE-9FA2-4623-9D37-FFE84C135BE3} - System32\Tasks\NvBatteryBoostCheckOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [903024 2021-05-04] (NVIDIA Corporation -> NVIDIA Corporation) -> -d "C:\Program Files\NVIDIA Corporation\NvBackend\NvBatteryBoostCheck" -l 3 -f C:\ProgramData\NVIDIA\NvContainerBatteryBoostCheck.log
Task: {BD2849CD-5195-4867-B304-B1D036D54EA6} - System32\Tasks\Overwolf Updater Task => D:\curseforge\Overwolf\OverwolfUpdater.exe [2540888 2022-04-02] (Overwolf Ltd -> Overwolf LTD)
Task: {C291FD5F-B282-484E-A737-D5D344E8C662} - System32\Tasks\Microsoft\Office\Office Performance Monitor => C:\Program Files\Microsoft Office\root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\operfmon.exe [61336 2022-04-06] (Microsoft Corporation -> Microsoft Corporation)
Task: {CB4EC87F-794B-48A2-A6CF-435F969F05B3} - System32\Tasks\Microsoft\Office\Office Automatic Updates 2.0 => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [22865832 2022-04-06] (Microsoft Corporation -> Microsoft Corporation)
Task: {D41EBC7A-8055-4FF7-B4CA-5975F2792156} - System32\Tasks\NvTmRep_CrashReport1_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1261424 2021-06-09] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {D99EA573-FA4B-4156-8900-648390D90DBF} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [156232 2022-01-04] (Google LLC -> Google LLC)
Task: {E3541F52-53E6-4BCE-AD19-901BB0F89010} - System32\Tasks\NvTmRep_CrashReport3_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1261424 2021-06-09] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {EF85B6AD-6155-414A-8E15-FB49AC0FEE55} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [22865832 2022-04-06] (Microsoft Corporation -> Microsoft Corporation)
(Se uma entrada for incluída na fixlist, o arquivo da tarefa (.job) será movido. O arquivo que está sendo executado pela tarefa não será movido.)
==================== Internet (Whitelisted) ====================
(Se um ítem for incluído na fixlist, sendo um ítem do Registro, será removido ou restaurado para o padrão.)
Hosts: Há mais de uma entrada no Hosts. Veja a seção Hosts do Addition.txt
Tcpip\Parameters: [DhcpNameServer] 10.2.0.93 10.2.0.97
Tcpip\..\Interfaces\{9a06812f-5a14-4a7a-ba3f-f979dc4415fd}: [DhcpNameServer] 10.2.0.93 10.2.0.97
Tcpip\..\Interfaces\{eae460e1-0e76-4b1c-b6fa-61e45b93ce7c}: [DhcpNameServer] 10.2.0.93 10.2.0.97
Edge:
=======
Edge Extension: (Sem Nome) -> AutoFormFill_5ED10D46BD7E47DEB1F3685D2C0FCE08 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\AutoFormFill [não encontrado (a)]
Edge Extension: (Sem Nome) -> BookReader_B171F20233094AC88D05A8EF7B9763E8 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\BookViewer [não encontrado (a)]
Edge Extension: (Sem Nome) -> LearningTools_7706F933-971C-41D1-9899-8A026EB5D824 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\LearningTools [não encontrado (a)]
Edge Extension: (Sem Nome) -> PinJSAPI_EC01B57063BE468FAB6DB7EBFC3BF368 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\PinJSAPI [não encontrado (a)]
Edge DefaultProfile: Default
Edge Profile: C:\Users\gsbad\AppData\Local\Microsoft\Edge\User Data\Default [2022-04-06]
FireFox:
========
FF DefaultProfile: sgdzaiac.default
FF ProfilePath: C:\Users\gsbad\AppData\Roaming\Mozilla\Firefox\Profiles\sgdzaiac.default [2022-02-13]
FF ProfilePath: C:\Users\gsbad\AppData\Roaming\Mozilla\Firefox\Profiles\71cgscpo.default-release [2022-04-13]
FF Extension: (MetaMask) - C:\Users\gsbad\AppData\Roaming\Mozilla\Firefox\Profiles\71cgscpo.default-release\Extensions\webextension@metamask.io.xpi [2022-04-06]
FF Extension: (Video DownloadHelper) - C:\Users\gsbad\AppData\Roaming\Mozilla\Firefox\Profiles\71cgscpo.default-release\Extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}.xpi [2022-02-13]
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\Office16\NPSPWRAP.DLL [2022-04-06] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=11.321.2 -> D:\Java\bin\dtplugin\npDeployJava1.dll [2022-03-27] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.321.2 -> D:\Java\bin\plugin2\npjp2.dll [2022-03-27] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2022-03-04] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\NPSPWRAP.DLL [2022-03-04] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @videolan.org/vlc,version=3.0.16 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2021-06-18] (VideoLAN -> VideoLAN)
FF ExtraCheck: C:\Program Files\mozilla firefox\defaults\pref\autoconf_warsaw.js [2022-04-12]
Chrome:
=======
CHR DefaultProfile: Default
CHR Profile: C:\Users\gsbad\AppData\Local\Google\Chrome\User Data\Default [2022-04-14]
CHR Notifications: Default -> hxxps://www44.alfonzoheriberto.pro
CHR Extension: (Apresentações) - C:\Users\gsbad\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2022-01-04]
CHR Extension: (Documentos) - C:\Users\gsbad\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2022-01-04]
CHR Extension: (Google Drive) - C:\Users\gsbad\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2022-01-04]
CHR Extension: (YouTube) - C:\Users\gsbad\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2022-01-04]
CHR Extension: (Planilhas) - C:\Users\gsbad\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2022-01-04]
CHR Extension: (Return YouTube Dislike) - C:\Users\gsbad\AppData\Local\Google\Chrome\User Data\Default\Extensions\gebbhagfogifgggkldgodflihgfeippi [2022-03-25]
CHR Extension: (Documentos Google off-line) - C:\Users\gsbad\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2022-03-15]
CHR Extension: (Video DownloadHelper) - C:\Users\gsbad\AppData\Local\Google\Chrome\User Data\Default\Extensions\lmjnegcaeklhafolokijcfjliaokphfk [2022-02-13]
CHR Extension: (MetaMask) - C:\Users\gsbad\AppData\Local\Google\Chrome\User Data\Default\Extensions\nkbihfbeogaeaoehlefnkodbefgpgknn [2022-04-06]
CHR Extension: (Pagamentos da Chrome Web Store) - C:\Users\gsbad\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2022-01-04]
CHR Extension: (Gmail) - C:\Users\gsbad\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2022-01-04]
CHR Profile: C:\Users\gsbad\AppData\Local\Google\Chrome\User Data\Guest Profile [2022-04-14]
CHR Profile: C:\Users\gsbad\AppData\Local\Google\Chrome\User Data\Profile 1 [2022-04-14]
CHR Extension: (Apresentações) - C:\Users\gsbad\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2022-01-12]
CHR Extension: (Documentos) - C:\Users\gsbad\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\aohghmighlieiainnegkcijnfilokake [2022-01-12]
CHR Extension: (Google Drive) - C:\Users\gsbad\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\apdfllckaahabafndbhieahigkjlhalf [2022-01-12]
CHR Extension: (Phantom) - C:\Users\gsbad\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\bfnaelmomeimhlpmgjnjophhpkkoljpa [2022-04-10]
CHR Extension: (YouTube) - C:\Users\gsbad\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2022-01-12]
CHR Extension: (Planilhas) - C:\Users\gsbad\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2022-01-12]
CHR Extension: (Documentos Google off-line) - C:\Users\gsbad\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2022-03-15]
CHR Extension: (MetaMask) - C:\Users\gsbad\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\nkbihfbeogaeaoehlefnkodbefgpgknn [2022-04-12]
CHR Extension: (Pagamentos da Chrome Web Store) - C:\Users\gsbad\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2022-01-12]
CHR Extension: (Gmail) - C:\Users\gsbad\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2022-01-12]
CHR Profile: C:\Users\gsbad\AppData\Local\Google\Chrome\User Data\System Profile [2022-04-14]
Brave:
=======
BRA DefaultProfile: Default
BRA Profile: C:\Users\gsbad\AppData\Local\BraveSoftware\Brave-Browser\User Data\Default [2022-04-13]
BRA DownloadDir: D:\Downloads
BRA Extension: (Google Tradutor) - C:\Users\gsbad\AppData\Local\BraveSoftware\Brave-Browser\User Data\Default\Extensions\aapbdbdomjkkjkaonfhkkikfgjllcleb [2022-04-12]
BRA Extension: (MetaMask) - C:\Users\gsbad\AppData\Local\BraveSoftware\Brave-Browser\User Data\Default\Extensions\nkbihfbeogaeaoehlefnkodbefgpgknn [2022-04-06]
BRA Extension: (Brave Local Data Files Updater) - C:\Users\gsbad\AppData\Local\BraveSoftware\Brave-Browser\User Data\afalakplffnnnlkncjhbmahjfjhmlkal [2022-04-12]
BRA Extension: (Brave NTP background images) - C:\Users\gsbad\AppData\Local\BraveSoftware\Brave-Browser\User Data\aoojcmojmmcbpfgoecoadbdpnagfchel [2022-04-06]
BRA Extension: (Brave NTP sponsored images) - C:\Users\gsbad\AppData\Local\BraveSoftware\Brave-Browser\User Data\bpndlkddhgpmjengabcakadpcabgflca [2022-04-13]
BRA Extension: (Wallet Data Files Updater) - C:\Users\gsbad\AppData\Local\BraveSoftware\Brave-Browser\User Data\BraveWallet [2022-04-12]
BRA Extension: (Brave Ad Block Updater (Default)) - C:\Users\gsbad\AppData\Local\BraveSoftware\Brave-Browser\User Data\cffkpbalmllkdoenhmdmpbkajipdjfam [2022-04-12]
BRA Extension: (Brave Tor Client Updater (Windows)) - C:\Users\gsbad\AppData\Local\BraveSoftware\Brave-Browser\User Data\cpoalefficncklhjfpglfiplenlpccdb [2022-02-05]
BRA Extension: (Brave Ads Resources) - C:\Users\gsbad\AppData\Local\BraveSoftware\Brave-Browser\User Data\fimpfhgllgkaekhbpkakjchdogecjflf [2022-04-06]
BRA Extension: (Brave NTP Super Referrer mapping table) - C:\Users\gsbad\AppData\Local\BraveSoftware\Brave-Browser\User Data\heplpbhjcbmiibdlchlanmdenffpiibo [2020-10-06]
BRA Extension: (Brave Ads Resources) - C:\Users\gsbad\AppData\Local\BraveSoftware\Brave-Browser\User Data\ikpplkdenofcphgejneekjmhepajgopf [2021-05-24]
BRA Extension: (Brave SpeedReader Updater) - C:\Users\gsbad\AppData\Local\BraveSoftware\Brave-Browser\User Data\jicbkmdloagakknpihibphagfckhjdih [2022-04-06]
BRA Extension: (Crypto Wallets) - C:\Users\gsbad\AppData\Local\BraveSoftware\Brave-Browser\User Data\odbfpeeihdkbihmopkbjmoonfanlbfcl [2021-09-28]
BRA Extension: (Brave HTTPS Everywhere Updater) - C:\Users\gsbad\AppData\Local\BraveSoftware\Brave-Browser\User Data\oofiananboodjbbmdelgdommihjbkfag [2022-04-12]
==================== Serviços (Whitelisted) ===================
(Se uma entrada for incluída na fixlist, será removida do Registro. O arquivo não será movido, a menos que seja colocado separadamente.)
S3 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [8906088 2021-04-29] (BattlEye Innovations e.K. -> )
S2 brave; C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe [155848 2020-10-06] (Brave Software, Inc. -> BraveSoftware Inc.)
S3 bravem; C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe [155848 2020-10-06] (Brave Software, Inc. -> BraveSoftware Inc.)
R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [11666384 2022-04-06] (Microsoft Corporation -> Microsoft Corporation)
R3 Disc Soft Lite Bus Service; C:\Program Files\DAEMON Tools Lite\DiscSoftBusServiceLite.exe [5026616 2021-01-19] (AVB Disc Soft, SIA -> Disc Soft Ltd)
S3 EasyAntiCheat; C:\Program Files (x86)\EasyAntiCheat\EasyAntiCheat.exe [805488 2020-11-21] (EasyAntiCheat Oy -> EasyAntiCheat Ltd)
R2 Killer Network Service; C:\WINDOWS\System32\drivers\RivetNetworks\Killer\KillerNetworkService.exe [2656880 2019-01-31] (Rivet Networks LLC -> Rivet Networks)
S3 KNDBWM; C:\WINDOWS\System32\drivers\RivetNetworks\Killer\KNDBWMService.exe [72800 2019-01-31] (Rivet Networks LLC -> CloudBees, Inc.)
S3 LxssManagerUser; C:\WINDOWS\system32\lxss\wslclient.dll [301056 2022-03-10] (Microsoft Windows -> Microsoft Corporation)
R2 NahimicService; C:\WINDOWS\system32\NahimicService.exe [2701728 2020-07-03] (A-Volute -> Nahimic)
S3 npggsvc; C:\WINDOWS\SysWOW64\GameMon.des [9414880 2020-10-15] (INCA Internet Co.,Ltd. -> INCA Internet Co., Ltd.)
S3 OverwolfUpdater; D:\curseforge\Overwolf\OverwolfUpdater.exe [2540888 2022-04-02] (Overwolf Ltd -> Overwolf LTD)
S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [6228008 2022-03-10] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 TbtP2pShortcutService; C:\WINDOWS\TbtP2pShortcutService.exe [254112 2021-07-14] (Intel Corporation -> Intel Corporation)
S3 VBoxSDS; D:\Oracle\VirtualBox\VBoxSDS.exe [746728 2021-11-22] (Oracle Corporation -> Oracle Corporation)
R2 Warsaw Technology; C:\Program Files\Diebold\Warsaw\core.exe [1141648 2020-08-10] (PROCOMP INDUSTRIA ELETRONICA LTDA -> Diebold Nixdorf)
R3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2203.5-0\NisSrv.exe [3116848 2022-04-08] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2203.5-0\MsMpEng.exe [133544 2022-04-08] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 WMIRegistrationService; C:\WINDOWS\System32\DriverStore\FileRepository\mewmiprov.inf_amd64_cad1db73e8c782a6\WMIRegistrationService.exe [538736 2021-07-25] (Intel Corporation -> Intel Corporation)
S2 xTendSoftAPService; C:\WINDOWS\System32\drivers\RivetNetworks\Killer\xTendSoftAPService.exe [72808 2019-01-31] (Rivet Networks LLC -> CloudBees, Inc.)
R2 xTendUtilityService; C:\WINDOWS\System32\drivers\RivetNetworks\Killer\xTendUtilityService.exe [72816 2019-01-31] (Rivet Networks LLC -> CloudBees, Inc.)
R2 NVDisplay.ContainerLocalSystem; C:\WINDOWS\System32\DriverStore\FileRepository\nvdmi.inf_amd64_d76251acf4d55737\Display.NvContainer\NVDisplay.Container.exe -s NVDisplay.ContainerLocalSystem -f %ProgramData%\NVIDIA\NVDisplay.ContainerLocalSystem.log -l 3 -d C:\WINDOWS\System32\DriverStore\FileRepository\nvdmi.inf_amd64_d76251acf4d55737\Display.NvContainer\plugins\LocalSystem -r -p 30000 -cfg NVDisplay.ContainerLocalSystem\LocalSystem
===================== Drivers (Whitelisted) ===================
(Se uma entrada for incluída na fixlist, será removida do Registro. O arquivo não será movido, a menos que seja colocado separadamente.)
S3 AppleLowerFilter; C:\WINDOWS\System32\drivers\AppleLowerFilter.sys [35976 2020-10-09] (WDKTestCert build,132303256403278908 -> Apple Inc.)
S3 aswTap; C:\WINDOWS\System32\drivers\aswTap.sys [53904 2018-09-05] (AVAST Software s.r.o. -> The OpenVPN Project)
S3 aswWintun; C:\WINDOWS\System32\drivers\aswWintun.sys [38768 2021-05-05] (Avast Software s.r.o. -> Avast Software)
R2 BlueStacksDrv_nxt; C:\Program Files\BlueStacks_nxt\BstkDrv_nxt.sys [320728 2022-03-15] (Bluestack Systems, Inc -> Bluestack System Inc.)
S3 BthA2dp; C:\WINDOWS\System32\drivers\BthA2dp.sys [279040 2019-12-07] (Microsoft Corporation) [Arquivo não assinado]
S3 BthHFEnum; C:\WINDOWS\System32\drivers\bthhfenum.sys [144896 2019-12-07] (Microsoft Corporation) [Arquivo não assinado]
R3 dtlitescsibus; C:\WINDOWS\System32\drivers\dtlitescsibus.sys [42256 2021-01-19] (AVB Disc Soft, SIA -> Disc Soft Ltd)
R3 dtliteusbbus; C:\WINDOWS\System32\drivers\dtliteusbbus.sys [59360 2021-01-19] (AVB Disc Soft, SIA -> Disc Soft Ltd)
S3 Hamachi; C:\WINDOWS\system32\DRIVERS\Hamdrv.sys [45680 2019-04-02] (Microsoft Windows Hardware Compatibility Publisher -> LogMeIn Inc.)
R3 KfeCoSvc; C:\WINDOWS\System32\drivers\RivetNetworks\Killer\KfeCo10X64.sys [151688 2019-01-31] (Rivet Networks LLC -> Rivet Networks, LLC.)
R3 MpKsl689813ea; C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{71862997-014B-4642-A2B7-D444A01FA08B}\MpKslDrv.sys [139536 2022-04-14] (Microsoft Windows -> Microsoft Corporation)
S3 ssudmdm; C:\WINDOWS\system32\DRIVERS\ssudmdm.sys [167280 2020-11-11] (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd.)
R3 VBoxNetAdp; C:\WINDOWS\system32\DRIVERS\VBoxNetAdp6.sys [239672 2021-11-22] (Oracle Corporation -> Oracle Corporation)
R1 VBoxNetLwf; C:\WINDOWS\system32\DRIVERS\VBoxNetLwf.sys [249584 2021-11-22] (Oracle Corporation -> Oracle Corporation)
S0 WdBoot; C:\WINDOWS\System32\drivers\wd\WdBoot.sys [49600 2022-04-08] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
R0 WdFilter; C:\WINDOWS\System32\drivers\wd\WdFilter.sys [443664 2022-04-08] (Microsoft Windows -> Microsoft Corporation)
R3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [90384 2022-04-08] (Microsoft Windows -> Microsoft Corporation)
R1 wsddfac; C:\WINDOWS\System32\drivers\wsddfac.sys [47800 2022-04-12] (Gas Informatica Ltda -> GAS Tecnologia)
R1 wsddntf; C:\WINDOWS\system32\DRIVERS\wsddntf.sys [61456 2020-08-11] (PROCOMP INDUSTRIA ELETRONICA LTDA -> Diebold Nixdorf)
R1 wsddpp; C:\WINDOWS\system32\drivers\wsddpp.sys [44728 2019-04-15] (Gas Informatica Ltda -> GAS Tecnologia)
R3 wsddprm; C:\WINDOWS\system32\drivers\wsddprm.sys [43528 2020-07-23] (PROCOMP INDUSTRIA ELETRONICA LTDA -> Diebold Nixdorf)
==================== NetSvcs (Whitelisted) ===================
(Se uma entrada for incluída na fixlist, será removida do Registro. O arquivo não será movido, a menos que seja colocado separadamente.)
==================== Três meses (criados) (Whitelisted) =========
(Se uma entrada for incluída na fixlist, o arquivo/pasta será movido.)
2022-04-14 12:13 - 2022-04-14 12:13 - 000033655 _____ C:\Users\gsbad\Desktop\FRST.txt
2022-04-14 12:12 - 2022-04-14 12:13 - 000000000 ____D C:\FRST
2022-04-14 12:10 - 2022-04-14 12:11 - 002365952 _____ (Farbar) C:\Users\gsbad\Desktop\FRST64.exe
2022-04-14 10:34 - 2022-04-14 10:37 - 000000000 ____D C:\Users\gsbad\Desktop\anuncioLenovo
2022-04-13 13:59 - 2022-04-13 14:15 - 000000991 _____ C:\Users\gsbad\Desktop\planoDeLançamento.txt
2022-04-12 22:59 - 2022-04-12 22:59 - 000000000 ___HD C:\$WinREAgent
2022-04-12 21:01 - 2022-04-12 21:01 - 000000038 _____ C:\Users\gsbad\Desktop\anxious.txt
2022-04-12 13:15 - 2022-04-12 18:06 - 000000972 _____ C:\Users\gsbad\Desktop\estruturaDiscord.txt
2022-04-07 01:27 - 2022-04-07 01:27 - 000000528 _____ C:\Users\gsbad\Desktop\certopelocerto.txt
2022-04-04 20:13 - 2022-04-04 20:13 - 000000000 ____D C:\Users\gsbad\Documents\FeedbackHub
2022-03-29 16:15 - 2022-03-29 16:15 - 000002003 _____ C:\Users\gsbad\Desktop\Convocador.lnk
2022-03-29 16:04 - 2022-04-12 09:16 - 000000000 ____D C:\ProgramData\BlueStacks_nxt
2022-03-29 16:04 - 2022-03-29 16:04 - 000000000 ____D C:\Program Files\BlueStacks_nxt
2022-03-29 13:55 - 2022-03-17 13:33 - 000047792 _____ (NVIDIA Corporation) C:\WINDOWS\system32\Drivers\nvhdap64.dll
2022-03-29 13:51 - 2022-03-18 02:43 - 001905904 _____ C:\WINDOWS\system32\vulkaninfo-1-999-0-0-0.exe
2022-03-29 13:51 - 2022-03-18 02:43 - 001905904 _____ C:\WINDOWS\system32\vulkaninfo.exe
2022-03-29 13:51 - 2022-03-18 02:43 - 001478392 _____ C:\WINDOWS\SysWOW64\vulkaninfo-1-999-0-0-0.exe
2022-03-29 13:51 - 2022-03-18 02:43 - 001478392 _____ C:\WINDOWS\SysWOW64\vulkaninfo.exe
2022-03-29 13:51 - 2022-03-18 02:43 - 001467840 _____ (Khronos Group) C:\WINDOWS\system32\OpenCL.dll
2022-03-29 13:51 - 2022-03-18 02:43 - 001432312 _____ C:\WINDOWS\system32\vulkan-1-999-0-0-0.dll
2022-03-29 13:51 - 2022-03-18 02:43 - 001432312 _____ C:\WINDOWS\system32\vulkan-1.dll
2022-03-29 13:51 - 2022-03-18 02:43 - 001209400 _____ (Khronos Group) C:\WINDOWS\SysWOW64\OpenCL.dll
2022-03-29 13:51 - 2022-03-18 02:43 - 001145584 _____ C:\WINDOWS\SysWOW64\vulkan-1-999-0-0-0.dll
2022-03-29 13:51 - 2022-03-18 02:43 - 001145584 _____ C:\WINDOWS\SysWOW64\vulkan-1.dll
2022-03-29 13:51 - 2022-03-18 02:40 - 000795704 _____ C:\WINDOWS\system32\nvofapi64.dll
2022-03-29 13:51 - 2022-03-18 02:40 - 000715944 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvml.dll
2022-03-29 13:51 - 2022-03-18 02:40 - 000636480 _____ C:\WINDOWS\SysWOW64\nvofapi.dll
2022-03-29 13:51 - 2022-03-18 02:39 - 002121688 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvFBC64.dll
2022-03-29 13:51 - 2022-03-18 02:39 - 001600680 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvFBC.dll
2022-03-29 13:51 - 2022-03-18 02:39 - 001529936 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvIFR64.dll
2022-03-29 13:51 - 2022-03-18 02:39 - 001175696 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvIFR.dll
2022-03-29 13:51 - 2022-03-18 02:39 - 000981648 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvEncodeAPI64.dll
2022-03-29 13:51 - 2022-03-18 02:39 - 000792208 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvEncodeAPI.dll
2022-03-29 13:51 - 2022-03-18 02:39 - 000712664 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvidia-smi.exe
2022-03-29 13:51 - 2022-03-18 02:38 - 008610472 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuvid.dll
2022-03-29 13:51 - 2022-03-18 02:38 - 007713872 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuvid.dll
2022-03-29 13:51 - 2022-03-18 02:38 - 005729752 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcpl.dll
2022-03-29 13:51 - 2022-03-18 02:38 - 005101528 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuda.dll
2022-03-29 13:51 - 2022-03-18 02:38 - 002931856 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuda.dll
2022-03-29 13:51 - 2022-03-18 02:38 - 000456872 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdebugdump.exe
2022-03-29 13:51 - 2022-03-17 13:33 - 000089337 _____ C:\WINDOWS\system32\nvinfo.pb
2022-03-29 13:50 - 2022-03-18 02:36 - 000850088 _____ (NVIDIA Corporation) C:\WINDOWS\system32\MCU.exe
2022-03-29 12:06 - 2022-03-29 12:06 - 000000000 ____D C:\Users\gsbad\curseforge
2022-03-29 12:04 - 2022-04-12 16:13 - 000001965 _____ C:\Users\gsbad\Desktop\CurseForge.lnk
2022-03-29 12:04 - 2022-03-29 12:04 - 000004346 _____ C:\WINDOWS\system32\Tasks\Overwolf Updater Task
2022-03-29 12:04 - 2022-03-29 12:04 - 000000000 ____D C:\Users\gsbad\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Overwolf
2022-03-29 12:04 - 2022-03-29 12:04 - 000000000 ____D C:\ProgramData\Overwolf
2022-03-29 12:02 - 2022-04-12 16:13 - 000000000 ____D C:\Users\gsbad\AppData\Local\Overwolf
2022-03-28 01:24 - 2022-03-28 01:24 - 000001124 _____ C:\Users\gsbad\Desktop\Age of Empires IV.lnk
2022-03-28 00:00 - 2022-03-28 00:28 - 000001522 _____ C:\Users\gsbad\Desktop\Minecraft.lnk
2022-03-27 23:42 - 2022-03-27 23:42 - 000165600 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\WindowsAccessBridge-32.dll
2022-03-27 23:42 - 2022-03-27 23:42 - 000000000 ____D C:\Users\gsbad\AppData\Roaming\Sun
2022-03-27 23:42 - 2022-03-27 23:42 - 000000000 ____D C:\Users\gsbad\AppData\LocalLow\Sun
2022-03-27 23:42 - 2022-03-27 23:42 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2022-03-27 20:49 - 2022-03-29 14:36 - 000000000 ____D C:\Users\gsbad\AppData\Roaming\.minecraft
2022-03-27 20:42 - 2022-04-12 10:10 - 000131072 _____ (Microsoft Corporation) C:\WINDOWS\system32\gamingtcuihelpers.dll
2022-03-27 20:41 - 2022-03-27 20:41 - 000000000 ____D C:\Users\gsbad\AppData\Local\MinecraftInstaller
2022-03-25 10:12 - 2022-03-25 10:12 - 000000199 _____ C:\Users\gsbad\Desktop\Counter-Strike Global Offensive.url
2022-03-25 09:44 - 2022-03-25 09:44 - 000001140 _____ C:\Users\Public\Desktop\Macro Recorder.lnk
2022-03-25 09:44 - 2022-03-25 09:44 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Macro Recorder
2022-03-25 09:44 - 2022-03-25 09:44 - 000000000 ____D C:\Program Files (x86)\MacroRecorder
2022-03-25 09:35 - 2022-03-25 09:35 - 000000000 ____D C:\Users\gsbad\Documents\Macro Recorder
2022-03-15 09:11 - 2022-03-15 09:11 - 000000000 ____D C:\Users\gsbad\AppData\Local\Cloud Game
2022-03-15 08:49 - 2022-03-29 16:40 - 000000000 ____D C:\Users\gsbad\AppData\Local\BlueStacks X
2022-03-15 08:49 - 2022-03-29 16:04 - 000003920 _____ C:\WINDOWS\system32\Tasks\BlueStacksHelper_nxt
2022-03-15 08:49 - 2022-03-29 16:04 - 000002097 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\BlueStacks 5.lnk
2022-03-15 08:49 - 2022-03-29 16:04 - 000002095 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\BlueStacks 5 Multi-Instance Manager.lnk
2022-03-15 08:42 - 2022-03-15 08:42 - 000002004 _____ C:\Users\Public\Desktop\BlueStacks X.lnk
2022-03-15 08:42 - 2022-03-15 08:42 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\BlueStacks X
2022-03-15 08:42 - 2022-03-15 08:42 - 000000000 ____D C:\Program Files (x86)\BlueStacks X
2022-03-15 08:40 - 2022-03-15 08:49 - 000000000 ____D C:\Users\gsbad\AppData\Local\BlueStacksSetup
2022-03-10 00:31 - 2022-03-10 00:31 - 002260992 _____ C:\WINDOWS\system32\TextInputMethodFormatter.dll
2022-03-10 00:31 - 2022-03-10 00:31 - 002254336 _____ C:\WINDOWS\system32\dwmscene.dll
2022-03-10 00:31 - 2022-03-10 00:31 - 000272896 _____ C:\WINDOWS\system32\TpmTool.exe
2022-03-10 00:31 - 2022-03-10 00:31 - 000223744 _____ C:\WINDOWS\SysWOW64\TpmTool.exe
2022-03-10 00:31 - 2022-03-10 00:31 - 000195584 _____ C:\WINDOWS\system32\uwfcfgmgmt.dll
2022-03-10 00:31 - 2022-03-10 00:31 - 000011911 _____ C:\WINDOWS\system32\DrtmAuthTxt.wim
2022-03-04 09:13 - 2022-03-04 09:14 - 000000000 ____D C:\Users\gsbad\Desktop\docsDiscord
2022-03-03 20:42 - 2022-01-18 11:34 - 000000894 _____ C:\Users\gsbad\Desktop\Goat Simulator - GOATY Edition.lnk
2022-03-03 20:42 - 2021-12-02 17:46 - 000001530 _____ C:\Users\gsbad\Desktop\Animal Revolt Battle Simulator.exe - Atalho.lnk
2022-03-03 20:42 - 2021-11-22 18:55 - 000000683 _____ C:\Users\gsbad\Desktop\I Am Fish.lnk
2022-03-03 20:42 - 2021-11-19 10:09 - 000000202 _____ C:\Users\gsbad\Desktop\Shark Simulator.url
2022-03-03 20:42 - 2021-06-24 18:14 - 000000807 _____ C:\Users\gsbad\Desktop\LEGO The Incredibles.lnk
2022-03-03 20:42 - 2021-05-19 11:09 - 000000739 _____ C:\Users\gsbad\Desktop\Spyro Reignited Trilogy.lnk
2022-03-03 20:42 - 2021-05-08 16:05 - 000000675 _____ C:\Users\gsbad\Desktop\LEGO Worlds.lnk
2022-03-03 20:42 - 2021-05-01 11:18 - 000000778 _____ C:\Users\gsbad\Desktop\Hot Wheels Worlds Best Driver.lnk
2022-03-03 20:42 - 2021-04-28 11:08 - 000000583 _____ C:\Users\gsbad\Desktop\Iggys Egg Adventure.lnk
2022-03-03 20:42 - 2021-04-08 23:05 - 000000948 _____ C:\Users\gsbad\Desktop\Play LEGO Marvels Avengers.lnk
2022-03-03 20:42 - 2021-04-08 18:38 - 000000763 _____ C:\Users\gsbad\Desktop\LEGO MARVEL Super Heroes.lnk
2022-03-03 20:42 - 2021-03-20 13:28 - 000001413 _____ C:\Users\gsbad\Desktop\LEGO DC Super.lnk
2022-03-03 20:42 - 2021-01-19 10:12 - 000000706 _____ C:\Users\gsbad\Desktop\LEGO Jurassic World.lnk
2022-02-15 08:21 - 2022-02-19 12:59 - 000000000 ____D C:\Users\gsbad\AppData\LocalLow\BitTorrent
2022-02-15 08:16 - 2022-02-15 08:16 - 000000218 _____ C:\Users\gsbad\AppData\Local\recently-used.xbel
2022-02-14 20:43 - 2022-02-14 20:43 - 000000000 ____D C:\Users\gsbad\AppData\Local\gtk-3.0
2022-02-14 20:39 - 2022-02-14 20:39 - 335721160 _____ C:\Users\gsbad\Documents\firmware.zip
2022-02-14 20:18 - 2022-03-04 09:15 - 000000000 ____D C:\Users\gsbad\AppData\Local\emusak_ui
2022-02-14 20:15 - 2022-03-04 09:15 - 000000000 ____D C:\Users\gsbad\AppData\Roaming\emusak
2022-02-14 20:15 - 2022-02-14 20:18 - 000000000 ____D C:\Users\gsbad\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\stromcon
2022-02-14 20:12 - 2022-02-14 20:12 - 000000000 ____D C:\Users\gsbad\AppData\Roaming\Ryujinx
2022-02-13 19:28 - 2022-04-14 07:52 - 000000000 ____D C:\Users\gsbad\AppData\LocalLow\Mozilla
2022-02-13 19:28 - 2022-04-13 12:18 - 000000000 ____D C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38
2022-02-13 19:28 - 2022-04-13 12:17 - 000000000 ____D C:\WINDOWS\system32\Tasks\Mozilla
2022-02-13 19:28 - 2022-02-13 19:28 - 000000000 ____D C:\Users\gsbad\AppData\Roaming\Mozilla
2022-02-13 19:28 - 2022-02-13 19:28 - 000000000 ____D C:\Users\gsbad\AppData\Local\Mozilla
2022-02-13 19:27 - 2022-04-13 12:17 - 000001005 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox.lnk
2022-02-13 19:27 - 2022-04-13 12:17 - 000000000 ____D C:\Program Files\Mozilla Firefox
2022-02-13 19:27 - 2022-04-13 12:17 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2022-02-12 00:07 - 2022-02-12 00:10 - 000000000 ____D C:\Users\gsbad\AppData\Local\Notepad
2022-02-09 11:02 - 2022-02-09 11:02 - 000288768 _____ C:\WINDOWS\system32\Windows.Management.InprocObjects.dll
2022-02-09 11:02 - 2022-02-09 11:02 - 000162816 _____ C:\WINDOWS\system32\DataStoreCacheDumpTool.exe
2022-02-02 14:29 - 2022-04-13 16:33 - 000000000 ____D C:\Users\gsbad\AppData\Local\Discord
2022-01-26 18:43 - 2022-02-15 08:38 - 000000000 ____D C:\Users\gsbad\Desktop\Xpadder.v2015.01.01.Repack.Multilingual.Retail
2022-01-18 11:34 - 2022-01-18 11:34 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Coffee Stain Studios
2022-01-18 11:13 - 2022-01-18 11:13 - 000000000 ____D C:\ProgramData\Steam
2022-01-18 10:21 - 2022-03-28 09:18 - 000000000 ____D C:\Users\gsbad\Documents\My Games
2022-01-16 11:38 - 2022-01-16 11:38 - 000001554 _____ C:\Users\gsbad\Desktop\Downloads.lnk
2022-01-16 11:29 - 2022-01-16 11:35 - 000001827 _____ C:\Users\gsbad\Desktop\Jogos GUGS.lnk
2022-01-16 11:26 - 2022-03-29 13:33 - 000000000 ____D C:\Users\gsbad\Documents\Jogos GUGS
2022-01-16 11:25 - 2022-01-18 11:34 - 000000000 ____D C:\Users\gsbad\Documents\Jogos MIGS
2022-01-16 10:05 - 2022-03-28 09:21 - 000000000 ____D C:\ProgramData\VirtualBox
2022-01-16 10:05 - 2022-03-27 22:01 - 000000000 ____D C:\Users\gsbad\.VirtualBox
2022-01-16 10:05 - 2022-01-16 10:05 - 000000754 _____ C:\Users\Public\Desktop\VirtualBox.lnk
2022-01-16 10:05 - 2022-01-16 10:05 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Oracle VM VirtualBox
2022-01-16 10:05 - 2021-11-22 08:43 - 000188208 _____ (Oracle Corporation) C:\WINDOWS\system32\Drivers\VBoxUSBMon.sys
2022-01-16 10:05 - 2021-11-22 08:42 - 001045368 _____ (Oracle Corporation) C:\WINDOWS\system32\Drivers\VBoxDrv.sys
==================== Três meses (modificados) ==================
(Se uma entrada for incluída na fixlist, o arquivo/pasta será movido.)
2022-04-14 12:13 - 2021-03-23 10:50 - 000000000 ____D C:\Users\gsbad\AppData\Roaming\discord
2022-04-14 12:12 - 2019-12-07 06:13 - 000000000 ____D C:\WINDOWS\INF
2022-04-14 12:06 - 2022-01-04 19:56 - 000000000 ____D C:\Program Files (x86)\Google
2022-04-14 11:52 - 2019-12-07 06:14 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2022-04-14 10:28 - 2020-10-07 15:54 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2022-04-14 09:12 - 2020-09-30 00:22 - 000000428 __RSH C:\ProgramData\ntuser.pol
2022-04-14 07:52 - 2020-11-21 14:41 - 000000505 _____ C:\WINDOWS\system32\Drivers\etc\hosts.ics
2022-04-13 22:07 - 2022-01-04 19:57 - 000002245 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2022-04-13 16:21 - 2020-12-26 18:45 - 000000000 ____D C:\Users\gsbad\AppData\Roaming\Binance
2022-04-13 12:25 - 2020-09-30 00:06 - 000000000 ____D C:\ProgramData\NVIDIA
2022-04-13 10:47 - 2019-12-07 06:14 - 000000000 ___HD C:\Program Files\WindowsApps
2022-04-13 10:47 - 2019-12-07 06:14 - 000000000 ____D C:\WINDOWS\AppReadiness
2022-04-13 06:40 - 2020-09-30 00:09 - 000002438 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk
2022-04-12 21:58 - 2020-10-06 16:42 - 000002362 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Brave.lnk
2022-04-12 09:21 - 2020-10-07 16:05 - 001741824 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2022-04-12 09:21 - 2019-12-07 11:53 - 000754118 _____ C:\WINDOWS\system32\prfh0416.dat
2022-04-12 09:21 - 2019-12-07 11:53 - 000149216 _____ C:\WINDOWS\system32\prfc0416.dat
2022-04-12 09:14 - 2020-09-29 23:52 - 000000000 __SHD C:\Users\gsbad\IntelGraphicsProfiles
2022-04-12 09:14 - 2019-12-07 06:14 - 000000000 ____D C:\WINDOWS\ServiceState
2022-04-12 09:13 - 2021-01-04 10:29 - 000047800 _____ (GAS Tecnologia) C:\WINDOWS\system32\Drivers\wsddfac.sys
2022-04-12 09:13 - 2020-10-07 15:59 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2022-04-12 09:13 - 2020-10-07 15:54 - 000008192 ___SH C:\DumpStack.log.tmp
2022-04-12 09:13 - 2020-10-07 15:39 - 000000000 ____D C:\Users\gsbad
2022-04-12 09:13 - 2020-09-29 23:47 - 000000000 ____D C:\Intel
2022-04-10 08:34 - 2020-10-07 15:59 - 000003618 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA
2022-04-10 08:34 - 2020-10-07 15:59 - 000003494 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore
2022-04-08 16:10 - 2020-10-06 14:00 - 000000000 ____D C:\Users\gsbad\AppData\Local\D3DSCache
2022-04-08 07:16 - 2020-10-07 09:07 - 000000000 ____D C:\Users\gsbad\AppData\Local\CrashDumps
2022-04-08 04:36 - 2020-09-29 23:46 - 000000000 ____D C:\WINDOWS\system32\Drivers\wd
2022-04-07 11:11 - 2020-10-07 14:45 - 000000000 ____D C:\Program Files\Microsoft Update Health Tools
2022-04-06 10:28 - 2020-10-06 16:39 - 000000000 ____D C:\Program Files\Microsoft Office
2022-04-06 08:01 - 2019-12-07 06:03 - 000786432 _____ C:\WINDOWS\system32\config\BBI
2022-04-04 20:46 - 2021-04-21 10:15 - 000000000 ____D C:\Program Files\Binance
2022-03-29 16:04 - 2021-06-04 16:34 - 000000000 ____D C:\Users\Public\BlueStacks
2022-03-29 16:04 - 2021-06-04 16:34 - 000000000 ____D C:\Users\gsbad\AppData\Local\Bluestacks
2022-03-29 14:06 - 2019-12-07 06:14 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2022-03-29 14:05 - 2020-09-29 23:52 - 000000000 __RHD C:\Users\Public\AccountPictures
2022-03-29 13:57 - 2020-10-06 16:25 - 000000000 ____D C:\Users\gsbad\AppData\Local\NVIDIA
2022-03-29 13:55 - 2020-10-06 22:39 - 000000000 ____D C:\Users\gsbad\AppData\Local\NVIDIA Corporation
2022-03-29 13:38 - 2020-10-07 15:59 - 000004308 _____ C:\WINDOWS\system32\Tasks\NvDriverUpdateCheckDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2022-03-29 13:38 - 2020-10-07 15:59 - 000004106 _____ C:\WINDOWS\system32\Tasks\NvBatteryBoostCheckOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2022-03-29 13:38 - 2020-10-07 15:59 - 000003976 _____ C:\WINDOWS\system32\Tasks\NVIDIA GeForce Experience SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2022-03-29 13:38 - 2020-10-07 15:59 - 000003940 _____ C:\WINDOWS\system32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2022-03-29 13:38 - 2020-10-07 15:59 - 000003894 _____ C:\WINDOWS\system32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2022-03-29 13:38 - 2020-10-07 15:59 - 000003858 _____ C:\WINDOWS\system32\Tasks\NvTmRep_CrashReport4_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2022-03-29 13:38 - 2020-10-07 15:59 - 000003858 _____ C:\WINDOWS\system32\Tasks\NvTmRep_CrashReport3_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2022-03-29 13:38 - 2020-10-07 15:59 - 000003858 _____ C:\WINDOWS\system32\Tasks\NvTmRep_CrashReport2_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2022-03-29 13:38 - 2020-10-07 15:59 - 000003858 _____ C:\WINDOWS\system32\Tasks\NvTmRep_CrashReport1_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2022-03-29 13:38 - 2020-10-07 15:59 - 000003654 _____ C:\WINDOWS\system32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2022-03-29 13:38 - 2020-09-30 00:04 - 000000000 ____D C:\Program Files (x86)\NVIDIA Corporation
2022-03-29 13:38 - 2020-09-29 23:52 - 000000000 ____D C:\Program Files\NVIDIA Corporation
2022-03-29 13:38 - 2020-09-29 23:49 - 000000000 ____D C:\ProgramData\NVIDIA Corporation
2022-03-29 13:24 - 2020-09-29 23:54 - 000000000 ____D C:\Users\gsbad\AppData\Local\PlaceholderTileLogoFolder
2022-03-29 13:24 - 2020-09-29 23:52 - 000000000 ____D C:\Users\gsbad\AppData\Local\Packages
2022-03-28 01:24 - 2020-09-29 23:51 - 000000000 ____D C:\ProgramData\Packages
2022-03-25 10:12 - 2020-09-30 00:37 - 000000000 ____D C:\Users\gsbad\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam
2022-03-23 21:13 - 2020-10-07 14:45 - 000601432 _____ (Microsoft Corporation) C:\WINDOWS\system32\sedplugins.dll
2022-03-23 21:12 - 2020-10-07 14:45 - 000483664 _____ (Microsoft Corporation) C:\WINDOWS\system32\QualityUpdateAssistant.dll
2022-03-18 02:35 - 2021-05-31 10:13 - 006458872 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvapi.dll
2022-03-18 02:35 - 2020-10-06 22:35 - 007611808 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvapi64.dll
2022-03-17 17:15 - 2020-10-12 20:03 - 000000000 ____D C:\Users\gsbad\AppData\Local\ElevatedDiagnostics
2022-03-17 13:33 - 2020-10-06 22:36 - 000134832 _____ (NVIDIA Corporation) C:\WINDOWS\system32\Drivers\nvhda64v.sys
==================== Arquivos na raiz de alguns diretórios ========
2020-10-06 17:40 - 2020-10-06 17:40 - 000000000 _____ () C:\Users\gsbad\AppData\Local\oobelibMkey.log
2022-02-15 08:16 - 2022-02-15 08:16 - 000000218 _____ () C:\Users\gsbad\AppData\Local\recently-used.xbel
==================== SigCheck ============================
(Não há correção automática para arquivos que não passaram na verificação.)
==================== Fim de FRST.txt ========================
Executado por gsbad (administrador) em GSDELL (Dell Inc. G5 5590) (14-04-2022 12:13:11)
Executando a partir de C:\Users\gsbad\Desktop
Perfis Carregados: gsbad
Plataforma: Microsoft Windows 10 Pro Versão 21H1 19043.1586 (X64) Idioma: Português (Brasil)
Navegador padrão: Chrome
Modo da Inicialização: Normal
==================== Processos (Whitelisted) =================
(Se uma entrada for incluída na fixlist, o processo será fechado. O arquivo não será movido.)
(Brave Software, Inc. -> BraveSoftware Inc.) C:\Program Files (x86)\BraveSoftware\Update\1.3.361.111\BraveCrashHandler.exe
(Brave Software, Inc. -> BraveSoftware Inc.) C:\Program Files (x86)\BraveSoftware\Update\1.3.361.111\BraveCrashHandler64.exe
(C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\rundll32.exe <2>
(C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe ->) (NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA Share.exe <3>
(C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe ->) (NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\ShadowPlay\nvsphelper64.exe
(C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2203.5-0\MsMpEng.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2203.5-0\MpCopyAccelerator.exe
(Discord Inc. -> Discord Inc.) C:\Users\gsbad\AppData\Local\Discord\app-1.0.9004\Discord.exe <9>
(drivers\RivetNetworks\Killer\xTendUtilityService.exe ->) (Rivet Networks LLC -> Rivet Networks LLC) C:\Windows\System32\drivers\RivetNetworks\Killer\xTendUtility.exe
(DriverStore\FileRepository\cui_dch.inf_amd64_7208949846a9b9dc\igfxCUIService.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\cui_dch.inf_amd64_7208949846a9b9dc\igfxEM.exe
(explorer.exe ->) (AVB Disc Soft, SIA -> Disc Soft Ltd) C:\Program Files\DAEMON Tools Lite\DTShellHlp.exe
(explorer.exe ->) (Bluestack Systems, Inc -> BlueStack Systems) C:\Program Files\BlueStacks_nxt\HD-Player.exe
(explorer.exe ->) (Google LLC -> Google LLC) C:\Program Files\Google\Chrome\Application\chrome.exe <36>
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.36.122\GoogleCrashHandler.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.36.122\GoogleCrashHandler64.exe
(NVIDIA Corporation -> Node.js) C:\Program Files (x86)\NVIDIA Corporation\NvNode\NVIDIA Web Helper.exe
(Oracle America, Inc. -> Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(services.exe ->) (AVB Disc Soft, SIA -> Disc Soft Ltd) C:\Program Files\DAEMON Tools Lite\DiscSoftBusServiceLite.exe
(services.exe ->) (A-Volute -> Nahimic) C:\Windows\System32\NahimicService.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\cui_dch.inf_amd64_7208949846a9b9dc\igfxCUIService.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\igcc_dch.inf_amd64_9cf4db1a1fd1b22d\OneApp.IGCC.WinService.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_4208a7ac24ac6344\IntelCpHDCPSvc.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_4208a7ac24ac6344\IntelCpHeciSvc.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\lms.inf_amd64_f629911085770af0\LMS.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\mewmiprov.inf_amd64_cad1db73e8c782a6\WMIRegistrationService.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\Intel\DPTF\esif_uf.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\TbtP2pShortcutService.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\ThunderboltService.exe
(services.exe ->) (Intel(R) Embedded Subsystems and IP Blocks Group -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\dal.inf_amd64_b5484efd38adbe8d\jhi_service.exe
(services.exe ->) (Intel(R) Rapid Storage Technology -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\iastorac.inf_amd64_9c788f1d162b1224\RstMwService.exe
(services.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe
(services.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(services.exe ->) (Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.GamingServices_3.63.31001.0_x64__8wekyb3d8bbwe\gamingservices.exe
(services.exe ->) (Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.GamingServices_3.63.31001.0_x64__8wekyb3d8bbwe\gamingservicesnet.exe
(services.exe ->) (Microsoft Windows Hardware Compatibility Publisher -> Windows (R) Win 7 DDK provider) C:\Windows\System32\drivers\AdminService.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2203.5-0\MsMpEng.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2203.5-0\NisSrv.exe
(services.exe ->) (NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe <3>
(services.exe ->) (Nvidia Corporation -> NVIDIA Corporation) C:\Windows\System32\DriverStore\FileRepository\nvdmi.inf_amd64_d76251acf4d55737\Display.NvContainer\NVDisplay.Container.exe <2>
(services.exe ->) (PROCOMP INDUSTRIA ELETRONICA LTDA -> Diebold Nixdorf) C:\Program Files\Diebold\Warsaw\core.exe <2>
(services.exe ->) (Qualcomm Atheros -> Qualcomm Technologies Inc.) C:\Windows\System32\drivers\QcomWlanSrvx64.exe
(services.exe ->) (Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Windows\System32\RtkAudUService64.exe <3>
(services.exe ->) (Rivet Networks LLC -> CloudBees, Inc.) C:\Windows\System32\drivers\RivetNetworks\Killer\xTendUtilityService.exe
(services.exe ->) (Rivet Networks LLC -> Rivet Networks) C:\Windows\System32\drivers\RivetNetworks\Killer\KillerNetworkService.exe
(svchost.exe ->) (Bluestack Systems, Inc -> Bluestack System Inc.) C:\Program Files\BlueStacks_nxt\BstkSVC.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe <4>
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\MoUsoCoreWorker.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(vmcompute.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\Windows\System32\vmwp.exe
==================== Registro (Whitelisted) ===================
(Se uma entrada for incluída na fixlist, o ítem no Registro será restaurado para o padrão ou removido. O arquivo não será movido.)
HKLM\...\Run: [RtkAudUService] => C:\WINDOWS\System32\RtkAudUService64.exe [1140000 2020-07-30] (Realtek Semiconductor Corp. -> Realtek Semiconductor)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [707256 2021-12-15] (Oracle America, Inc. -> Oracle Corporation)
HKU\S-1-5-21-1036876464-1709329310-3854566978-1001\...\Run: [DAEMON Tools Lite Automount] => C:\Program Files\DAEMON Tools Lite\DTAgent.exe [408888 2021-01-19] (AVB Disc Soft, SIA -> Disc Soft Ltd)
HKU\S-1-5-21-1036876464-1709329310-3854566978-1001\...\Run: [Discord] => C:\Users\gsbad\AppData\Local\Discord\Update.exe [1512608 2021-09-21] (Discord Inc. -> GitHub)
HKU\S-1-5-21-1036876464-1709329310-3854566978-1001\...\Run: [Overwolf] => D:\curseforge\Overwolf\OverwolfLauncher.exe [1802072 2022-04-02] (Overwolf Ltd -> Overwolf Ltd.)
HKU\S-1-5-21-1036876464-1709329310-3854566978-1001\...\MountPoints2: {2927f9ca-5868-11eb-a20e-a4bb6d6cde80} - "F:\setup.exe"
HKU\S-1-5-21-1036876464-1709329310-3854566978-1001\...\MountPoints2: {2927f9ea-5868-11eb-a20e-a4bb6d6cde80} - "G:\Launcher.exe"
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files\Google\Chrome\Application\100.0.4896.88\Installer\chrmstp.exe [2022-04-13] (Google LLC -> Google LLC)
HKLM\Software\Microsoft\Active Setup\Installed Components: [{AFE6A462-C574-4B8A-AF43-4CC60DF4563B}] -> C:\Program Files\BraveSoftware\Brave-Browser\Application\100.1.37.113\Installer\chrmstp.exe [2022-04-12] (Brave Software, Inc. -> Brave Software, Inc.)
BootExecute: autocheck autochk * sdnclean64.exe
GroupPolicy: Restrição ? <==== ATENÇÃO
Policies: C:\ProgramData\NTUSER.pol: Restrição <==== ATENÇÃO
==================== Tarefas Agendadas (Whitelisted) ============
(Se uma entrada for incluída na fixlist, será removida do Registro. O arquivo não será movido, a menos que seja colocado separadamente.)
Task: {007C7A94-E6F9-4EAD-8C6B-2FF8B8236935} - System32\Tasks\Microsoft\Office\Office Feature Updates => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [138680 2022-04-06] (Microsoft Corporation -> Microsoft Corporation)
Task: {00DA6EB1-B872-4A7E-A8E1-6BEE5B126D78} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn2016 => C:\Program Files\Microsoft Office\root\Office16\msoia.exe [8338896 2022-04-06] (Microsoft Corporation -> Microsoft Corporation)
Task: {0397BF50-DA19-44F0-A3CA-148A081BFCB2} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack2016 => C:\Program Files\Microsoft Office\root\Office16\msoia.exe [8338896 2022-04-06] (Microsoft Corporation -> Microsoft Corporation)
Task: {129A1395-9A40-4BF5-B4C2-773090DD4CCE} - System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [905072 2021-06-09] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {181BDA16-A973-4E14-89F5-9B694E224BD7} - System32\Tasks\NvDriverUpdateCheckDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [903024 2021-05-04] (NVIDIA Corporation -> NVIDIA Corporation) -> -d "C:\Program Files\NVIDIA Corporation\NvDriverUpdateCheck" -l 3 -f C:\ProgramData\NVIDIA\NvContainerDriverUpdateCheck.log
Task: {1BDBBCF7-45DB-426E-9329-167D29FFE9AB} - System32\Tasks\NvTmRep_CrashReport4_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1261424 2021-06-09] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {28B54377-00A1-4C18-B16D-EF783027C65B} - System32\Tasks\BraveSoftwareUpdateTaskMachineUA => C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe [155848 2020-10-06] (Brave Software, Inc. -> BraveSoftware Inc.)
Task: {2D93450C-8387-4CAF-BAAC-B78D7AF1A86A} - System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [905072 2021-06-09] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {31913254-CE5C-46F9-83A4-25016B176387} - System32\Tasks\Intel PTT EK Recertification => C:\WINDOWS\System32\DriverStore\FileRepository\iclsclient.inf_amd64_76523213b78d9046\lib\IntelPTTEKRecertification.exe [818008 2021-09-15] (Intel Corporation -> Intel(R) Corporation)
Task: {401451C6-5161-4E05-B293-7566999BB1AA} - System32\Tasks\Mozilla\Firefox Default Browser Agent 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\default-browser-agent.exe do-task "308046B0AF4A39CB"
Task: {4B10CC98-35F5-4D5E-91BD-A2BF2B00CADF} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [156232 2022-01-04] (Google LLC -> Google LLC)
Task: {504B595D-CF59-425C-ABB4-F96C6F2DAD9A} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2203.5-0\MpCmdRun.exe [993000 2022-04-08] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {598ABF55-7424-4C88-A872-90E21C74815F} - System32\Tasks\NVIDIA GeForce Experience SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA GeForce Experience.exe [3339120 2021-06-15] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {5A915682-48A6-421C-BE09-D9CD631D0BD1} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2203.5-0\MpCmdRun.exe [993000 2022-04-08] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {653D8ADD-E80D-4056-ABD5-3E0064571B29} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2203.5-0\MpCmdRun.exe [993000 2022-04-08] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {67DCC2AB-74E3-43EA-AB08-7D4776C52361} - System32\Tasks\BlueStacksHelper_nxt => C:\Program Files\BlueStacks_nxt\BlueStacksHelper.exe [275136 2022-03-15] (Bluestack Systems, Inc -> BlueStack Systems, Inc.)
Task: {6DE468C6-1779-4B2C-900F-E18182B53FDF} - System32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\NvNode\nvnodejslauncher.exe [645488 2021-06-09] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {6FECF9F3-5E0B-43D9-A013-1D24BBD708C7} - System32\Tasks\BraveSoftwareUpdateTaskMachineCore => C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe [155848 2020-10-06] (Brave Software, Inc. -> BraveSoftware Inc.)
Task: {7E5EEF59-8DF7-4359-8827-FB0D82E7CDCF} - System32\Tasks\Microsoft\Office\Office Feature Updates Logon => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [138680 2022-04-06] (Microsoft Corporation -> Microsoft Corporation)
Task: {88DAADCD-584E-4AC9-B213-5EAA330CBBAA} - System32\Tasks\Mozilla\Firefox Background Update 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\firefox.exe --MOZ_LOG sync,prependheader,timestamp,append,maxsize:1,Dump:5 --MOZ_LOG_FILE C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38\updates\308046B0AF4A39CB\backgroundupdate.moz_log --backgroundtask backgroundupdate
Task: {8EBDCD72-4ABA-4E6D-ABAD-CB06150924B0} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2203.5-0\MpCmdRun.exe [993000 2022-04-08] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {973FA5BC-A97D-460A-9A78-FB783BAE608D} - System32\Tasks\klcp_update => C:\Program Files (x86)\K-Lite Codec Pack\Tools\CodecTweakTool.exe [1907712 2021-05-20] () [Arquivo não assinado]
Task: {9BD35978-81B0-4AFB-B0BA-FFDAD73D288E} - System32\Tasks\NvTmRep_CrashReport2_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1261424 2021-06-09] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {ABCA36BE-9FA2-4623-9D37-FFE84C135BE3} - System32\Tasks\NvBatteryBoostCheckOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [903024 2021-05-04] (NVIDIA Corporation -> NVIDIA Corporation) -> -d "C:\Program Files\NVIDIA Corporation\NvBackend\NvBatteryBoostCheck" -l 3 -f C:\ProgramData\NVIDIA\NvContainerBatteryBoostCheck.log
Task: {BD2849CD-5195-4867-B304-B1D036D54EA6} - System32\Tasks\Overwolf Updater Task => D:\curseforge\Overwolf\OverwolfUpdater.exe [2540888 2022-04-02] (Overwolf Ltd -> Overwolf LTD)
Task: {C291FD5F-B282-484E-A737-D5D344E8C662} - System32\Tasks\Microsoft\Office\Office Performance Monitor => C:\Program Files\Microsoft Office\root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\operfmon.exe [61336 2022-04-06] (Microsoft Corporation -> Microsoft Corporation)
Task: {CB4EC87F-794B-48A2-A6CF-435F969F05B3} - System32\Tasks\Microsoft\Office\Office Automatic Updates 2.0 => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [22865832 2022-04-06] (Microsoft Corporation -> Microsoft Corporation)
Task: {D41EBC7A-8055-4FF7-B4CA-5975F2792156} - System32\Tasks\NvTmRep_CrashReport1_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1261424 2021-06-09] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {D99EA573-FA4B-4156-8900-648390D90DBF} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [156232 2022-01-04] (Google LLC -> Google LLC)
Task: {E3541F52-53E6-4BCE-AD19-901BB0F89010} - System32\Tasks\NvTmRep_CrashReport3_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1261424 2021-06-09] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {EF85B6AD-6155-414A-8E15-FB49AC0FEE55} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [22865832 2022-04-06] (Microsoft Corporation -> Microsoft Corporation)
(Se uma entrada for incluída na fixlist, o arquivo da tarefa (.job) será movido. O arquivo que está sendo executado pela tarefa não será movido.)
==================== Internet (Whitelisted) ====================
(Se um ítem for incluído na fixlist, sendo um ítem do Registro, será removido ou restaurado para o padrão.)
Hosts: Há mais de uma entrada no Hosts. Veja a seção Hosts do Addition.txt
Tcpip\Parameters: [DhcpNameServer] 10.2.0.93 10.2.0.97
Tcpip\..\Interfaces\{9a06812f-5a14-4a7a-ba3f-f979dc4415fd}: [DhcpNameServer] 10.2.0.93 10.2.0.97
Tcpip\..\Interfaces\{eae460e1-0e76-4b1c-b6fa-61e45b93ce7c}: [DhcpNameServer] 10.2.0.93 10.2.0.97
Edge:
=======
Edge Extension: (Sem Nome) -> AutoFormFill_5ED10D46BD7E47DEB1F3685D2C0FCE08 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\AutoFormFill [não encontrado (a)]
Edge Extension: (Sem Nome) -> BookReader_B171F20233094AC88D05A8EF7B9763E8 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\BookViewer [não encontrado (a)]
Edge Extension: (Sem Nome) -> LearningTools_7706F933-971C-41D1-9899-8A026EB5D824 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\LearningTools [não encontrado (a)]
Edge Extension: (Sem Nome) -> PinJSAPI_EC01B57063BE468FAB6DB7EBFC3BF368 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\PinJSAPI [não encontrado (a)]
Edge DefaultProfile: Default
Edge Profile: C:\Users\gsbad\AppData\Local\Microsoft\Edge\User Data\Default [2022-04-06]
FireFox:
========
FF DefaultProfile: sgdzaiac.default
FF ProfilePath: C:\Users\gsbad\AppData\Roaming\Mozilla\Firefox\Profiles\sgdzaiac.default [2022-02-13]
FF ProfilePath: C:\Users\gsbad\AppData\Roaming\Mozilla\Firefox\Profiles\71cgscpo.default-release [2022-04-13]
FF Extension: (MetaMask) - C:\Users\gsbad\AppData\Roaming\Mozilla\Firefox\Profiles\71cgscpo.default-release\Extensions\webextension@metamask.io.xpi [2022-04-06]
FF Extension: (Video DownloadHelper) - C:\Users\gsbad\AppData\Roaming\Mozilla\Firefox\Profiles\71cgscpo.default-release\Extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}.xpi [2022-02-13]
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\Office16\NPSPWRAP.DLL [2022-04-06] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=11.321.2 -> D:\Java\bin\dtplugin\npDeployJava1.dll [2022-03-27] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.321.2 -> D:\Java\bin\plugin2\npjp2.dll [2022-03-27] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2022-03-04] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\NPSPWRAP.DLL [2022-03-04] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @videolan.org/vlc,version=3.0.16 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2021-06-18] (VideoLAN -> VideoLAN)
FF ExtraCheck: C:\Program Files\mozilla firefox\defaults\pref\autoconf_warsaw.js [2022-04-12]
Chrome:
=======
CHR DefaultProfile: Default
CHR Profile: C:\Users\gsbad\AppData\Local\Google\Chrome\User Data\Default [2022-04-14]
CHR Notifications: Default -> hxxps://www44.alfonzoheriberto.pro
CHR Extension: (Apresentações) - C:\Users\gsbad\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2022-01-04]
CHR Extension: (Documentos) - C:\Users\gsbad\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2022-01-04]
CHR Extension: (Google Drive) - C:\Users\gsbad\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2022-01-04]
CHR Extension: (YouTube) - C:\Users\gsbad\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2022-01-04]
CHR Extension: (Planilhas) - C:\Users\gsbad\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2022-01-04]
CHR Extension: (Return YouTube Dislike) - C:\Users\gsbad\AppData\Local\Google\Chrome\User Data\Default\Extensions\gebbhagfogifgggkldgodflihgfeippi [2022-03-25]
CHR Extension: (Documentos Google off-line) - C:\Users\gsbad\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2022-03-15]
CHR Extension: (Video DownloadHelper) - C:\Users\gsbad\AppData\Local\Google\Chrome\User Data\Default\Extensions\lmjnegcaeklhafolokijcfjliaokphfk [2022-02-13]
CHR Extension: (MetaMask) - C:\Users\gsbad\AppData\Local\Google\Chrome\User Data\Default\Extensions\nkbihfbeogaeaoehlefnkodbefgpgknn [2022-04-06]
CHR Extension: (Pagamentos da Chrome Web Store) - C:\Users\gsbad\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2022-01-04]
CHR Extension: (Gmail) - C:\Users\gsbad\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2022-01-04]
CHR Profile: C:\Users\gsbad\AppData\Local\Google\Chrome\User Data\Guest Profile [2022-04-14]
CHR Profile: C:\Users\gsbad\AppData\Local\Google\Chrome\User Data\Profile 1 [2022-04-14]
CHR Extension: (Apresentações) - C:\Users\gsbad\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2022-01-12]
CHR Extension: (Documentos) - C:\Users\gsbad\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\aohghmighlieiainnegkcijnfilokake [2022-01-12]
CHR Extension: (Google Drive) - C:\Users\gsbad\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\apdfllckaahabafndbhieahigkjlhalf [2022-01-12]
CHR Extension: (Phantom) - C:\Users\gsbad\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\bfnaelmomeimhlpmgjnjophhpkkoljpa [2022-04-10]
CHR Extension: (YouTube) - C:\Users\gsbad\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2022-01-12]
CHR Extension: (Planilhas) - C:\Users\gsbad\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2022-01-12]
CHR Extension: (Documentos Google off-line) - C:\Users\gsbad\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2022-03-15]
CHR Extension: (MetaMask) - C:\Users\gsbad\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\nkbihfbeogaeaoehlefnkodbefgpgknn [2022-04-12]
CHR Extension: (Pagamentos da Chrome Web Store) - C:\Users\gsbad\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2022-01-12]
CHR Extension: (Gmail) - C:\Users\gsbad\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2022-01-12]
CHR Profile: C:\Users\gsbad\AppData\Local\Google\Chrome\User Data\System Profile [2022-04-14]
Brave:
=======
BRA DefaultProfile: Default
BRA Profile: C:\Users\gsbad\AppData\Local\BraveSoftware\Brave-Browser\User Data\Default [2022-04-13]
BRA DownloadDir: D:\Downloads
BRA Extension: (Google Tradutor) - C:\Users\gsbad\AppData\Local\BraveSoftware\Brave-Browser\User Data\Default\Extensions\aapbdbdomjkkjkaonfhkkikfgjllcleb [2022-04-12]
BRA Extension: (MetaMask) - C:\Users\gsbad\AppData\Local\BraveSoftware\Brave-Browser\User Data\Default\Extensions\nkbihfbeogaeaoehlefnkodbefgpgknn [2022-04-06]
BRA Extension: (Brave Local Data Files Updater) - C:\Users\gsbad\AppData\Local\BraveSoftware\Brave-Browser\User Data\afalakplffnnnlkncjhbmahjfjhmlkal [2022-04-12]
BRA Extension: (Brave NTP background images) - C:\Users\gsbad\AppData\Local\BraveSoftware\Brave-Browser\User Data\aoojcmojmmcbpfgoecoadbdpnagfchel [2022-04-06]
BRA Extension: (Brave NTP sponsored images) - C:\Users\gsbad\AppData\Local\BraveSoftware\Brave-Browser\User Data\bpndlkddhgpmjengabcakadpcabgflca [2022-04-13]
BRA Extension: (Wallet Data Files Updater) - C:\Users\gsbad\AppData\Local\BraveSoftware\Brave-Browser\User Data\BraveWallet [2022-04-12]
BRA Extension: (Brave Ad Block Updater (Default)) - C:\Users\gsbad\AppData\Local\BraveSoftware\Brave-Browser\User Data\cffkpbalmllkdoenhmdmpbkajipdjfam [2022-04-12]
BRA Extension: (Brave Tor Client Updater (Windows)) - C:\Users\gsbad\AppData\Local\BraveSoftware\Brave-Browser\User Data\cpoalefficncklhjfpglfiplenlpccdb [2022-02-05]
BRA Extension: (Brave Ads Resources) - C:\Users\gsbad\AppData\Local\BraveSoftware\Brave-Browser\User Data\fimpfhgllgkaekhbpkakjchdogecjflf [2022-04-06]
BRA Extension: (Brave NTP Super Referrer mapping table) - C:\Users\gsbad\AppData\Local\BraveSoftware\Brave-Browser\User Data\heplpbhjcbmiibdlchlanmdenffpiibo [2020-10-06]
BRA Extension: (Brave Ads Resources) - C:\Users\gsbad\AppData\Local\BraveSoftware\Brave-Browser\User Data\ikpplkdenofcphgejneekjmhepajgopf [2021-05-24]
BRA Extension: (Brave SpeedReader Updater) - C:\Users\gsbad\AppData\Local\BraveSoftware\Brave-Browser\User Data\jicbkmdloagakknpihibphagfckhjdih [2022-04-06]
BRA Extension: (Crypto Wallets) - C:\Users\gsbad\AppData\Local\BraveSoftware\Brave-Browser\User Data\odbfpeeihdkbihmopkbjmoonfanlbfcl [2021-09-28]
BRA Extension: (Brave HTTPS Everywhere Updater) - C:\Users\gsbad\AppData\Local\BraveSoftware\Brave-Browser\User Data\oofiananboodjbbmdelgdommihjbkfag [2022-04-12]
==================== Serviços (Whitelisted) ===================
(Se uma entrada for incluída na fixlist, será removida do Registro. O arquivo não será movido, a menos que seja colocado separadamente.)
S3 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [8906088 2021-04-29] (BattlEye Innovations e.K. -> )
S2 brave; C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe [155848 2020-10-06] (Brave Software, Inc. -> BraveSoftware Inc.)
S3 bravem; C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe [155848 2020-10-06] (Brave Software, Inc. -> BraveSoftware Inc.)
R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [11666384 2022-04-06] (Microsoft Corporation -> Microsoft Corporation)
R3 Disc Soft Lite Bus Service; C:\Program Files\DAEMON Tools Lite\DiscSoftBusServiceLite.exe [5026616 2021-01-19] (AVB Disc Soft, SIA -> Disc Soft Ltd)
S3 EasyAntiCheat; C:\Program Files (x86)\EasyAntiCheat\EasyAntiCheat.exe [805488 2020-11-21] (EasyAntiCheat Oy -> EasyAntiCheat Ltd)
R2 Killer Network Service; C:\WINDOWS\System32\drivers\RivetNetworks\Killer\KillerNetworkService.exe [2656880 2019-01-31] (Rivet Networks LLC -> Rivet Networks)
S3 KNDBWM; C:\WINDOWS\System32\drivers\RivetNetworks\Killer\KNDBWMService.exe [72800 2019-01-31] (Rivet Networks LLC -> CloudBees, Inc.)
S3 LxssManagerUser; C:\WINDOWS\system32\lxss\wslclient.dll [301056 2022-03-10] (Microsoft Windows -> Microsoft Corporation)
R2 NahimicService; C:\WINDOWS\system32\NahimicService.exe [2701728 2020-07-03] (A-Volute -> Nahimic)
S3 npggsvc; C:\WINDOWS\SysWOW64\GameMon.des [9414880 2020-10-15] (INCA Internet Co.,Ltd. -> INCA Internet Co., Ltd.)
S3 OverwolfUpdater; D:\curseforge\Overwolf\OverwolfUpdater.exe [2540888 2022-04-02] (Overwolf Ltd -> Overwolf LTD)
S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [6228008 2022-03-10] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 TbtP2pShortcutService; C:\WINDOWS\TbtP2pShortcutService.exe [254112 2021-07-14] (Intel Corporation -> Intel Corporation)
S3 VBoxSDS; D:\Oracle\VirtualBox\VBoxSDS.exe [746728 2021-11-22] (Oracle Corporation -> Oracle Corporation)
R2 Warsaw Technology; C:\Program Files\Diebold\Warsaw\core.exe [1141648 2020-08-10] (PROCOMP INDUSTRIA ELETRONICA LTDA -> Diebold Nixdorf)
R3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2203.5-0\NisSrv.exe [3116848 2022-04-08] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2203.5-0\MsMpEng.exe [133544 2022-04-08] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 WMIRegistrationService; C:\WINDOWS\System32\DriverStore\FileRepository\mewmiprov.inf_amd64_cad1db73e8c782a6\WMIRegistrationService.exe [538736 2021-07-25] (Intel Corporation -> Intel Corporation)
S2 xTendSoftAPService; C:\WINDOWS\System32\drivers\RivetNetworks\Killer\xTendSoftAPService.exe [72808 2019-01-31] (Rivet Networks LLC -> CloudBees, Inc.)
R2 xTendUtilityService; C:\WINDOWS\System32\drivers\RivetNetworks\Killer\xTendUtilityService.exe [72816 2019-01-31] (Rivet Networks LLC -> CloudBees, Inc.)
R2 NVDisplay.ContainerLocalSystem; C:\WINDOWS\System32\DriverStore\FileRepository\nvdmi.inf_amd64_d76251acf4d55737\Display.NvContainer\NVDisplay.Container.exe -s NVDisplay.ContainerLocalSystem -f %ProgramData%\NVIDIA\NVDisplay.ContainerLocalSystem.log -l 3 -d C:\WINDOWS\System32\DriverStore\FileRepository\nvdmi.inf_amd64_d76251acf4d55737\Display.NvContainer\plugins\LocalSystem -r -p 30000 -cfg NVDisplay.ContainerLocalSystem\LocalSystem
===================== Drivers (Whitelisted) ===================
(Se uma entrada for incluída na fixlist, será removida do Registro. O arquivo não será movido, a menos que seja colocado separadamente.)
S3 AppleLowerFilter; C:\WINDOWS\System32\drivers\AppleLowerFilter.sys [35976 2020-10-09] (WDKTestCert build,132303256403278908 -> Apple Inc.)
S3 aswTap; C:\WINDOWS\System32\drivers\aswTap.sys [53904 2018-09-05] (AVAST Software s.r.o. -> The OpenVPN Project)
S3 aswWintun; C:\WINDOWS\System32\drivers\aswWintun.sys [38768 2021-05-05] (Avast Software s.r.o. -> Avast Software)
R2 BlueStacksDrv_nxt; C:\Program Files\BlueStacks_nxt\BstkDrv_nxt.sys [320728 2022-03-15] (Bluestack Systems, Inc -> Bluestack System Inc.)
S3 BthA2dp; C:\WINDOWS\System32\drivers\BthA2dp.sys [279040 2019-12-07] (Microsoft Corporation) [Arquivo não assinado]
S3 BthHFEnum; C:\WINDOWS\System32\drivers\bthhfenum.sys [144896 2019-12-07] (Microsoft Corporation) [Arquivo não assinado]
R3 dtlitescsibus; C:\WINDOWS\System32\drivers\dtlitescsibus.sys [42256 2021-01-19] (AVB Disc Soft, SIA -> Disc Soft Ltd)
R3 dtliteusbbus; C:\WINDOWS\System32\drivers\dtliteusbbus.sys [59360 2021-01-19] (AVB Disc Soft, SIA -> Disc Soft Ltd)
S3 Hamachi; C:\WINDOWS\system32\DRIVERS\Hamdrv.sys [45680 2019-04-02] (Microsoft Windows Hardware Compatibility Publisher -> LogMeIn Inc.)
R3 KfeCoSvc; C:\WINDOWS\System32\drivers\RivetNetworks\Killer\KfeCo10X64.sys [151688 2019-01-31] (Rivet Networks LLC -> Rivet Networks, LLC.)
R3 MpKsl689813ea; C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{71862997-014B-4642-A2B7-D444A01FA08B}\MpKslDrv.sys [139536 2022-04-14] (Microsoft Windows -> Microsoft Corporation)
S3 ssudmdm; C:\WINDOWS\system32\DRIVERS\ssudmdm.sys [167280 2020-11-11] (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd.)
R3 VBoxNetAdp; C:\WINDOWS\system32\DRIVERS\VBoxNetAdp6.sys [239672 2021-11-22] (Oracle Corporation -> Oracle Corporation)
R1 VBoxNetLwf; C:\WINDOWS\system32\DRIVERS\VBoxNetLwf.sys [249584 2021-11-22] (Oracle Corporation -> Oracle Corporation)
S0 WdBoot; C:\WINDOWS\System32\drivers\wd\WdBoot.sys [49600 2022-04-08] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
R0 WdFilter; C:\WINDOWS\System32\drivers\wd\WdFilter.sys [443664 2022-04-08] (Microsoft Windows -> Microsoft Corporation)
R3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [90384 2022-04-08] (Microsoft Windows -> Microsoft Corporation)
R1 wsddfac; C:\WINDOWS\System32\drivers\wsddfac.sys [47800 2022-04-12] (Gas Informatica Ltda -> GAS Tecnologia)
R1 wsddntf; C:\WINDOWS\system32\DRIVERS\wsddntf.sys [61456 2020-08-11] (PROCOMP INDUSTRIA ELETRONICA LTDA -> Diebold Nixdorf)
R1 wsddpp; C:\WINDOWS\system32\drivers\wsddpp.sys [44728 2019-04-15] (Gas Informatica Ltda -> GAS Tecnologia)
R3 wsddprm; C:\WINDOWS\system32\drivers\wsddprm.sys [43528 2020-07-23] (PROCOMP INDUSTRIA ELETRONICA LTDA -> Diebold Nixdorf)
==================== NetSvcs (Whitelisted) ===================
(Se uma entrada for incluída na fixlist, será removida do Registro. O arquivo não será movido, a menos que seja colocado separadamente.)
==================== Três meses (criados) (Whitelisted) =========
(Se uma entrada for incluída na fixlist, o arquivo/pasta será movido.)
2022-04-14 12:13 - 2022-04-14 12:13 - 000033655 _____ C:\Users\gsbad\Desktop\FRST.txt
2022-04-14 12:12 - 2022-04-14 12:13 - 000000000 ____D C:\FRST
2022-04-14 12:10 - 2022-04-14 12:11 - 002365952 _____ (Farbar) C:\Users\gsbad\Desktop\FRST64.exe
2022-04-14 10:34 - 2022-04-14 10:37 - 000000000 ____D C:\Users\gsbad\Desktop\anuncioLenovo
2022-04-13 13:59 - 2022-04-13 14:15 - 000000991 _____ C:\Users\gsbad\Desktop\planoDeLançamento.txt
2022-04-12 22:59 - 2022-04-12 22:59 - 000000000 ___HD C:\$WinREAgent
2022-04-12 21:01 - 2022-04-12 21:01 - 000000038 _____ C:\Users\gsbad\Desktop\anxious.txt
2022-04-12 13:15 - 2022-04-12 18:06 - 000000972 _____ C:\Users\gsbad\Desktop\estruturaDiscord.txt
2022-04-07 01:27 - 2022-04-07 01:27 - 000000528 _____ C:\Users\gsbad\Desktop\certopelocerto.txt
2022-04-04 20:13 - 2022-04-04 20:13 - 000000000 ____D C:\Users\gsbad\Documents\FeedbackHub
2022-03-29 16:15 - 2022-03-29 16:15 - 000002003 _____ C:\Users\gsbad\Desktop\Convocador.lnk
2022-03-29 16:04 - 2022-04-12 09:16 - 000000000 ____D C:\ProgramData\BlueStacks_nxt
2022-03-29 16:04 - 2022-03-29 16:04 - 000000000 ____D C:\Program Files\BlueStacks_nxt
2022-03-29 13:55 - 2022-03-17 13:33 - 000047792 _____ (NVIDIA Corporation) C:\WINDOWS\system32\Drivers\nvhdap64.dll
2022-03-29 13:51 - 2022-03-18 02:43 - 001905904 _____ C:\WINDOWS\system32\vulkaninfo-1-999-0-0-0.exe
2022-03-29 13:51 - 2022-03-18 02:43 - 001905904 _____ C:\WINDOWS\system32\vulkaninfo.exe
2022-03-29 13:51 - 2022-03-18 02:43 - 001478392 _____ C:\WINDOWS\SysWOW64\vulkaninfo-1-999-0-0-0.exe
2022-03-29 13:51 - 2022-03-18 02:43 - 001478392 _____ C:\WINDOWS\SysWOW64\vulkaninfo.exe
2022-03-29 13:51 - 2022-03-18 02:43 - 001467840 _____ (Khronos Group) C:\WINDOWS\system32\OpenCL.dll
2022-03-29 13:51 - 2022-03-18 02:43 - 001432312 _____ C:\WINDOWS\system32\vulkan-1-999-0-0-0.dll
2022-03-29 13:51 - 2022-03-18 02:43 - 001432312 _____ C:\WINDOWS\system32\vulkan-1.dll
2022-03-29 13:51 - 2022-03-18 02:43 - 001209400 _____ (Khronos Group) C:\WINDOWS\SysWOW64\OpenCL.dll
2022-03-29 13:51 - 2022-03-18 02:43 - 001145584 _____ C:\WINDOWS\SysWOW64\vulkan-1-999-0-0-0.dll
2022-03-29 13:51 - 2022-03-18 02:43 - 001145584 _____ C:\WINDOWS\SysWOW64\vulkan-1.dll
2022-03-29 13:51 - 2022-03-18 02:40 - 000795704 _____ C:\WINDOWS\system32\nvofapi64.dll
2022-03-29 13:51 - 2022-03-18 02:40 - 000715944 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvml.dll
2022-03-29 13:51 - 2022-03-18 02:40 - 000636480 _____ C:\WINDOWS\SysWOW64\nvofapi.dll
2022-03-29 13:51 - 2022-03-18 02:39 - 002121688 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvFBC64.dll
2022-03-29 13:51 - 2022-03-18 02:39 - 001600680 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvFBC.dll
2022-03-29 13:51 - 2022-03-18 02:39 - 001529936 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvIFR64.dll
2022-03-29 13:51 - 2022-03-18 02:39 - 001175696 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvIFR.dll
2022-03-29 13:51 - 2022-03-18 02:39 - 000981648 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvEncodeAPI64.dll
2022-03-29 13:51 - 2022-03-18 02:39 - 000792208 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvEncodeAPI.dll
2022-03-29 13:51 - 2022-03-18 02:39 - 000712664 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvidia-smi.exe
2022-03-29 13:51 - 2022-03-18 02:38 - 008610472 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuvid.dll
2022-03-29 13:51 - 2022-03-18 02:38 - 007713872 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuvid.dll
2022-03-29 13:51 - 2022-03-18 02:38 - 005729752 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcpl.dll
2022-03-29 13:51 - 2022-03-18 02:38 - 005101528 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuda.dll
2022-03-29 13:51 - 2022-03-18 02:38 - 002931856 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuda.dll
2022-03-29 13:51 - 2022-03-18 02:38 - 000456872 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdebugdump.exe
2022-03-29 13:51 - 2022-03-17 13:33 - 000089337 _____ C:\WINDOWS\system32\nvinfo.pb
2022-03-29 13:50 - 2022-03-18 02:36 - 000850088 _____ (NVIDIA Corporation) C:\WINDOWS\system32\MCU.exe
2022-03-29 12:06 - 2022-03-29 12:06 - 000000000 ____D C:\Users\gsbad\curseforge
2022-03-29 12:04 - 2022-04-12 16:13 - 000001965 _____ C:\Users\gsbad\Desktop\CurseForge.lnk
2022-03-29 12:04 - 2022-03-29 12:04 - 000004346 _____ C:\WINDOWS\system32\Tasks\Overwolf Updater Task
2022-03-29 12:04 - 2022-03-29 12:04 - 000000000 ____D C:\Users\gsbad\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Overwolf
2022-03-29 12:04 - 2022-03-29 12:04 - 000000000 ____D C:\ProgramData\Overwolf
2022-03-29 12:02 - 2022-04-12 16:13 - 000000000 ____D C:\Users\gsbad\AppData\Local\Overwolf
2022-03-28 01:24 - 2022-03-28 01:24 - 000001124 _____ C:\Users\gsbad\Desktop\Age of Empires IV.lnk
2022-03-28 00:00 - 2022-03-28 00:28 - 000001522 _____ C:\Users\gsbad\Desktop\Minecraft.lnk
2022-03-27 23:42 - 2022-03-27 23:42 - 000165600 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\WindowsAccessBridge-32.dll
2022-03-27 23:42 - 2022-03-27 23:42 - 000000000 ____D C:\Users\gsbad\AppData\Roaming\Sun
2022-03-27 23:42 - 2022-03-27 23:42 - 000000000 ____D C:\Users\gsbad\AppData\LocalLow\Sun
2022-03-27 23:42 - 2022-03-27 23:42 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2022-03-27 20:49 - 2022-03-29 14:36 - 000000000 ____D C:\Users\gsbad\AppData\Roaming\.minecraft
2022-03-27 20:42 - 2022-04-12 10:10 - 000131072 _____ (Microsoft Corporation) C:\WINDOWS\system32\gamingtcuihelpers.dll
2022-03-27 20:41 - 2022-03-27 20:41 - 000000000 ____D C:\Users\gsbad\AppData\Local\MinecraftInstaller
2022-03-25 10:12 - 2022-03-25 10:12 - 000000199 _____ C:\Users\gsbad\Desktop\Counter-Strike Global Offensive.url
2022-03-25 09:44 - 2022-03-25 09:44 - 000001140 _____ C:\Users\Public\Desktop\Macro Recorder.lnk
2022-03-25 09:44 - 2022-03-25 09:44 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Macro Recorder
2022-03-25 09:44 - 2022-03-25 09:44 - 000000000 ____D C:\Program Files (x86)\MacroRecorder
2022-03-25 09:35 - 2022-03-25 09:35 - 000000000 ____D C:\Users\gsbad\Documents\Macro Recorder
2022-03-15 09:11 - 2022-03-15 09:11 - 000000000 ____D C:\Users\gsbad\AppData\Local\Cloud Game
2022-03-15 08:49 - 2022-03-29 16:40 - 000000000 ____D C:\Users\gsbad\AppData\Local\BlueStacks X
2022-03-15 08:49 - 2022-03-29 16:04 - 000003920 _____ C:\WINDOWS\system32\Tasks\BlueStacksHelper_nxt
2022-03-15 08:49 - 2022-03-29 16:04 - 000002097 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\BlueStacks 5.lnk
2022-03-15 08:49 - 2022-03-29 16:04 - 000002095 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\BlueStacks 5 Multi-Instance Manager.lnk
2022-03-15 08:42 - 2022-03-15 08:42 - 000002004 _____ C:\Users\Public\Desktop\BlueStacks X.lnk
2022-03-15 08:42 - 2022-03-15 08:42 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\BlueStacks X
2022-03-15 08:42 - 2022-03-15 08:42 - 000000000 ____D C:\Program Files (x86)\BlueStacks X
2022-03-15 08:40 - 2022-03-15 08:49 - 000000000 ____D C:\Users\gsbad\AppData\Local\BlueStacksSetup
2022-03-10 00:31 - 2022-03-10 00:31 - 002260992 _____ C:\WINDOWS\system32\TextInputMethodFormatter.dll
2022-03-10 00:31 - 2022-03-10 00:31 - 002254336 _____ C:\WINDOWS\system32\dwmscene.dll
2022-03-10 00:31 - 2022-03-10 00:31 - 000272896 _____ C:\WINDOWS\system32\TpmTool.exe
2022-03-10 00:31 - 2022-03-10 00:31 - 000223744 _____ C:\WINDOWS\SysWOW64\TpmTool.exe
2022-03-10 00:31 - 2022-03-10 00:31 - 000195584 _____ C:\WINDOWS\system32\uwfcfgmgmt.dll
2022-03-10 00:31 - 2022-03-10 00:31 - 000011911 _____ C:\WINDOWS\system32\DrtmAuthTxt.wim
2022-03-04 09:13 - 2022-03-04 09:14 - 000000000 ____D C:\Users\gsbad\Desktop\docsDiscord
2022-03-03 20:42 - 2022-01-18 11:34 - 000000894 _____ C:\Users\gsbad\Desktop\Goat Simulator - GOATY Edition.lnk
2022-03-03 20:42 - 2021-12-02 17:46 - 000001530 _____ C:\Users\gsbad\Desktop\Animal Revolt Battle Simulator.exe - Atalho.lnk
2022-03-03 20:42 - 2021-11-22 18:55 - 000000683 _____ C:\Users\gsbad\Desktop\I Am Fish.lnk
2022-03-03 20:42 - 2021-11-19 10:09 - 000000202 _____ C:\Users\gsbad\Desktop\Shark Simulator.url
2022-03-03 20:42 - 2021-06-24 18:14 - 000000807 _____ C:\Users\gsbad\Desktop\LEGO The Incredibles.lnk
2022-03-03 20:42 - 2021-05-19 11:09 - 000000739 _____ C:\Users\gsbad\Desktop\Spyro Reignited Trilogy.lnk
2022-03-03 20:42 - 2021-05-08 16:05 - 000000675 _____ C:\Users\gsbad\Desktop\LEGO Worlds.lnk
2022-03-03 20:42 - 2021-05-01 11:18 - 000000778 _____ C:\Users\gsbad\Desktop\Hot Wheels Worlds Best Driver.lnk
2022-03-03 20:42 - 2021-04-28 11:08 - 000000583 _____ C:\Users\gsbad\Desktop\Iggys Egg Adventure.lnk
2022-03-03 20:42 - 2021-04-08 23:05 - 000000948 _____ C:\Users\gsbad\Desktop\Play LEGO Marvels Avengers.lnk
2022-03-03 20:42 - 2021-04-08 18:38 - 000000763 _____ C:\Users\gsbad\Desktop\LEGO MARVEL Super Heroes.lnk
2022-03-03 20:42 - 2021-03-20 13:28 - 000001413 _____ C:\Users\gsbad\Desktop\LEGO DC Super.lnk
2022-03-03 20:42 - 2021-01-19 10:12 - 000000706 _____ C:\Users\gsbad\Desktop\LEGO Jurassic World.lnk
2022-02-15 08:21 - 2022-02-19 12:59 - 000000000 ____D C:\Users\gsbad\AppData\LocalLow\BitTorrent
2022-02-15 08:16 - 2022-02-15 08:16 - 000000218 _____ C:\Users\gsbad\AppData\Local\recently-used.xbel
2022-02-14 20:43 - 2022-02-14 20:43 - 000000000 ____D C:\Users\gsbad\AppData\Local\gtk-3.0
2022-02-14 20:39 - 2022-02-14 20:39 - 335721160 _____ C:\Users\gsbad\Documents\firmware.zip
2022-02-14 20:18 - 2022-03-04 09:15 - 000000000 ____D C:\Users\gsbad\AppData\Local\emusak_ui
2022-02-14 20:15 - 2022-03-04 09:15 - 000000000 ____D C:\Users\gsbad\AppData\Roaming\emusak
2022-02-14 20:15 - 2022-02-14 20:18 - 000000000 ____D C:\Users\gsbad\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\stromcon
2022-02-14 20:12 - 2022-02-14 20:12 - 000000000 ____D C:\Users\gsbad\AppData\Roaming\Ryujinx
2022-02-13 19:28 - 2022-04-14 07:52 - 000000000 ____D C:\Users\gsbad\AppData\LocalLow\Mozilla
2022-02-13 19:28 - 2022-04-13 12:18 - 000000000 ____D C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38
2022-02-13 19:28 - 2022-04-13 12:17 - 000000000 ____D C:\WINDOWS\system32\Tasks\Mozilla
2022-02-13 19:28 - 2022-02-13 19:28 - 000000000 ____D C:\Users\gsbad\AppData\Roaming\Mozilla
2022-02-13 19:28 - 2022-02-13 19:28 - 000000000 ____D C:\Users\gsbad\AppData\Local\Mozilla
2022-02-13 19:27 - 2022-04-13 12:17 - 000001005 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox.lnk
2022-02-13 19:27 - 2022-04-13 12:17 - 000000000 ____D C:\Program Files\Mozilla Firefox
2022-02-13 19:27 - 2022-04-13 12:17 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2022-02-12 00:07 - 2022-02-12 00:10 - 000000000 ____D C:\Users\gsbad\AppData\Local\Notepad
2022-02-09 11:02 - 2022-02-09 11:02 - 000288768 _____ C:\WINDOWS\system32\Windows.Management.InprocObjects.dll
2022-02-09 11:02 - 2022-02-09 11:02 - 000162816 _____ C:\WINDOWS\system32\DataStoreCacheDumpTool.exe
2022-02-02 14:29 - 2022-04-13 16:33 - 000000000 ____D C:\Users\gsbad\AppData\Local\Discord
2022-01-26 18:43 - 2022-02-15 08:38 - 000000000 ____D C:\Users\gsbad\Desktop\Xpadder.v2015.01.01.Repack.Multilingual.Retail
2022-01-18 11:34 - 2022-01-18 11:34 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Coffee Stain Studios
2022-01-18 11:13 - 2022-01-18 11:13 - 000000000 ____D C:\ProgramData\Steam
2022-01-18 10:21 - 2022-03-28 09:18 - 000000000 ____D C:\Users\gsbad\Documents\My Games
2022-01-16 11:38 - 2022-01-16 11:38 - 000001554 _____ C:\Users\gsbad\Desktop\Downloads.lnk
2022-01-16 11:29 - 2022-01-16 11:35 - 000001827 _____ C:\Users\gsbad\Desktop\Jogos GUGS.lnk
2022-01-16 11:26 - 2022-03-29 13:33 - 000000000 ____D C:\Users\gsbad\Documents\Jogos GUGS
2022-01-16 11:25 - 2022-01-18 11:34 - 000000000 ____D C:\Users\gsbad\Documents\Jogos MIGS
2022-01-16 10:05 - 2022-03-28 09:21 - 000000000 ____D C:\ProgramData\VirtualBox
2022-01-16 10:05 - 2022-03-27 22:01 - 000000000 ____D C:\Users\gsbad\.VirtualBox
2022-01-16 10:05 - 2022-01-16 10:05 - 000000754 _____ C:\Users\Public\Desktop\VirtualBox.lnk
2022-01-16 10:05 - 2022-01-16 10:05 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Oracle VM VirtualBox
2022-01-16 10:05 - 2021-11-22 08:43 - 000188208 _____ (Oracle Corporation) C:\WINDOWS\system32\Drivers\VBoxUSBMon.sys
2022-01-16 10:05 - 2021-11-22 08:42 - 001045368 _____ (Oracle Corporation) C:\WINDOWS\system32\Drivers\VBoxDrv.sys
==================== Três meses (modificados) ==================
(Se uma entrada for incluída na fixlist, o arquivo/pasta será movido.)
2022-04-14 12:13 - 2021-03-23 10:50 - 000000000 ____D C:\Users\gsbad\AppData\Roaming\discord
2022-04-14 12:12 - 2019-12-07 06:13 - 000000000 ____D C:\WINDOWS\INF
2022-04-14 12:06 - 2022-01-04 19:56 - 000000000 ____D C:\Program Files (x86)\Google
2022-04-14 11:52 - 2019-12-07 06:14 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2022-04-14 10:28 - 2020-10-07 15:54 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2022-04-14 09:12 - 2020-09-30 00:22 - 000000428 __RSH C:\ProgramData\ntuser.pol
2022-04-14 07:52 - 2020-11-21 14:41 - 000000505 _____ C:\WINDOWS\system32\Drivers\etc\hosts.ics
2022-04-13 22:07 - 2022-01-04 19:57 - 000002245 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2022-04-13 16:21 - 2020-12-26 18:45 - 000000000 ____D C:\Users\gsbad\AppData\Roaming\Binance
2022-04-13 12:25 - 2020-09-30 00:06 - 000000000 ____D C:\ProgramData\NVIDIA
2022-04-13 10:47 - 2019-12-07 06:14 - 000000000 ___HD C:\Program Files\WindowsApps
2022-04-13 10:47 - 2019-12-07 06:14 - 000000000 ____D C:\WINDOWS\AppReadiness
2022-04-13 06:40 - 2020-09-30 00:09 - 000002438 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk
2022-04-12 21:58 - 2020-10-06 16:42 - 000002362 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Brave.lnk
2022-04-12 09:21 - 2020-10-07 16:05 - 001741824 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2022-04-12 09:21 - 2019-12-07 11:53 - 000754118 _____ C:\WINDOWS\system32\prfh0416.dat
2022-04-12 09:21 - 2019-12-07 11:53 - 000149216 _____ C:\WINDOWS\system32\prfc0416.dat
2022-04-12 09:14 - 2020-09-29 23:52 - 000000000 __SHD C:\Users\gsbad\IntelGraphicsProfiles
2022-04-12 09:14 - 2019-12-07 06:14 - 000000000 ____D C:\WINDOWS\ServiceState
2022-04-12 09:13 - 2021-01-04 10:29 - 000047800 _____ (GAS Tecnologia) C:\WINDOWS\system32\Drivers\wsddfac.sys
2022-04-12 09:13 - 2020-10-07 15:59 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2022-04-12 09:13 - 2020-10-07 15:54 - 000008192 ___SH C:\DumpStack.log.tmp
2022-04-12 09:13 - 2020-10-07 15:39 - 000000000 ____D C:\Users\gsbad
2022-04-12 09:13 - 2020-09-29 23:47 - 000000000 ____D C:\Intel
2022-04-10 08:34 - 2020-10-07 15:59 - 000003618 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA
2022-04-10 08:34 - 2020-10-07 15:59 - 000003494 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore
2022-04-08 16:10 - 2020-10-06 14:00 - 000000000 ____D C:\Users\gsbad\AppData\Local\D3DSCache
2022-04-08 07:16 - 2020-10-07 09:07 - 000000000 ____D C:\Users\gsbad\AppData\Local\CrashDumps
2022-04-08 04:36 - 2020-09-29 23:46 - 000000000 ____D C:\WINDOWS\system32\Drivers\wd
2022-04-07 11:11 - 2020-10-07 14:45 - 000000000 ____D C:\Program Files\Microsoft Update Health Tools
2022-04-06 10:28 - 2020-10-06 16:39 - 000000000 ____D C:\Program Files\Microsoft Office
2022-04-06 08:01 - 2019-12-07 06:03 - 000786432 _____ C:\WINDOWS\system32\config\BBI
2022-04-04 20:46 - 2021-04-21 10:15 - 000000000 ____D C:\Program Files\Binance
2022-03-29 16:04 - 2021-06-04 16:34 - 000000000 ____D C:\Users\Public\BlueStacks
2022-03-29 16:04 - 2021-06-04 16:34 - 000000000 ____D C:\Users\gsbad\AppData\Local\Bluestacks
2022-03-29 14:06 - 2019-12-07 06:14 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2022-03-29 14:05 - 2020-09-29 23:52 - 000000000 __RHD C:\Users\Public\AccountPictures
2022-03-29 13:57 - 2020-10-06 16:25 - 000000000 ____D C:\Users\gsbad\AppData\Local\NVIDIA
2022-03-29 13:55 - 2020-10-06 22:39 - 000000000 ____D C:\Users\gsbad\AppData\Local\NVIDIA Corporation
2022-03-29 13:38 - 2020-10-07 15:59 - 000004308 _____ C:\WINDOWS\system32\Tasks\NvDriverUpdateCheckDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2022-03-29 13:38 - 2020-10-07 15:59 - 000004106 _____ C:\WINDOWS\system32\Tasks\NvBatteryBoostCheckOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2022-03-29 13:38 - 2020-10-07 15:59 - 000003976 _____ C:\WINDOWS\system32\Tasks\NVIDIA GeForce Experience SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2022-03-29 13:38 - 2020-10-07 15:59 - 000003940 _____ C:\WINDOWS\system32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2022-03-29 13:38 - 2020-10-07 15:59 - 000003894 _____ C:\WINDOWS\system32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2022-03-29 13:38 - 2020-10-07 15:59 - 000003858 _____ C:\WINDOWS\system32\Tasks\NvTmRep_CrashReport4_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2022-03-29 13:38 - 2020-10-07 15:59 - 000003858 _____ C:\WINDOWS\system32\Tasks\NvTmRep_CrashReport3_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2022-03-29 13:38 - 2020-10-07 15:59 - 000003858 _____ C:\WINDOWS\system32\Tasks\NvTmRep_CrashReport2_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2022-03-29 13:38 - 2020-10-07 15:59 - 000003858 _____ C:\WINDOWS\system32\Tasks\NvTmRep_CrashReport1_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2022-03-29 13:38 - 2020-10-07 15:59 - 000003654 _____ C:\WINDOWS\system32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2022-03-29 13:38 - 2020-09-30 00:04 - 000000000 ____D C:\Program Files (x86)\NVIDIA Corporation
2022-03-29 13:38 - 2020-09-29 23:52 - 000000000 ____D C:\Program Files\NVIDIA Corporation
2022-03-29 13:38 - 2020-09-29 23:49 - 000000000 ____D C:\ProgramData\NVIDIA Corporation
2022-03-29 13:24 - 2020-09-29 23:54 - 000000000 ____D C:\Users\gsbad\AppData\Local\PlaceholderTileLogoFolder
2022-03-29 13:24 - 2020-09-29 23:52 - 000000000 ____D C:\Users\gsbad\AppData\Local\Packages
2022-03-28 01:24 - 2020-09-29 23:51 - 000000000 ____D C:\ProgramData\Packages
2022-03-25 10:12 - 2020-09-30 00:37 - 000000000 ____D C:\Users\gsbad\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam
2022-03-23 21:13 - 2020-10-07 14:45 - 000601432 _____ (Microsoft Corporation) C:\WINDOWS\system32\sedplugins.dll
2022-03-23 21:12 - 2020-10-07 14:45 - 000483664 _____ (Microsoft Corporation) C:\WINDOWS\system32\QualityUpdateAssistant.dll
2022-03-18 02:35 - 2021-05-31 10:13 - 006458872 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvapi.dll
2022-03-18 02:35 - 2020-10-06 22:35 - 007611808 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvapi64.dll
2022-03-17 17:15 - 2020-10-12 20:03 - 000000000 ____D C:\Users\gsbad\AppData\Local\ElevatedDiagnostics
2022-03-17 13:33 - 2020-10-06 22:36 - 000134832 _____ (NVIDIA Corporation) C:\WINDOWS\system32\Drivers\nvhda64v.sys
==================== Arquivos na raiz de alguns diretórios ========
2020-10-06 17:40 - 2020-10-06 17:40 - 000000000 _____ () C:\Users\gsbad\AppData\Local\oobelibMkey.log
2022-02-15 08:16 - 2022-02-15 08:16 - 000000218 _____ () C:\Users\gsbad\AppData\Local\recently-used.xbel
==================== SigCheck ============================
(Não há correção automática para arquivos que não passaram na verificação.)
==================== Fim de FRST.txt ========================