Resultado do exame da Farbar Recovery Scan Tool (FRST) (x86) Versão: 06-11-2016 Executado por Liris (administrador) em LIRIS-PC (08-11-2016 21:57:32) Executando a partir de C:\Users\Liris\Downloads Perfis Carregados: Liris (Perfis Disponíveis: Liris) Platform: Microsoft Windows 7 Ultimate Service Pack 1 (X86) Idioma: Português (Brasil) Internet Explorer Versão 11 (Navegador padrão: "C:\Program Files\Ballfire\Application\chrome.exe" "%1") Modo da Inicialização: Normal Tutorial da Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Processos (Whitelisted) ================= (Se uma entrada for incluída na fixlist, o processo será fechado. O arquivo não será movido.) (Elex do Brasil Participações Ltda) C:\Program Files\Elex-tech\YAC\iSafeSvc.exe (Elex do Brasil Participações Ltda) C:\Program Files\Elex-tech\YAC\iSafeSvc2.exe (Intel Corporation) C:\Windows\System32\igfxCUIService.exe (BlueStack Systems, Inc.) C:\Program Files\BlueStacks\HD-LogRotatorService.exe (Elex do Brasil Participações Ltda) C:\Program Files\Elex-tech\YAC\iSafeTray.exe (BlueStack Systems, Inc.) C:\Program Files\BlueStacks\HD-UpdaterService.exe (AnchorFree Inc.) C:\Program Files\Hotspot Shield\bin\cmw_srv.exe () C:\Program Files\InterHop\InterHop.exe (Microsoft Corp.) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVC.EXE (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe (Microsoft Corp.) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVCM.EXE (Microsoft Corporation) C:\Windows\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe (Intel Corporation) C:\Windows\System32\igfxEM.exe (Intel Corporation) C:\Windows\System32\igfxHK.exe (AnchorFree Inc.) C:\Program Files\Hotspot Shield\bin\HSSCP.exe (Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jusched.exe () C:\Users\Liris\AppData\Local\Temp\Java\SYSLIRIS-PC.exe (BlueStack Systems, Inc.) C:\Program Files\BlueStacks\HD-Agent.exe (BitTorrent Inc.) C:\Users\Liris\AppData\Roaming\uTorrent\uTorrent.exe (Spiritsoft) C:\Users\Liris\Downloads\ipts_130613\ipts.exe (Disc Soft Ltd) C:\Program Files\DAEMON Tools Lite\DiscSoftBusService.exe (BitTorrent Inc.) C:\Users\Liris\AppData\Roaming\uTorrent\updates\3.4.9_42606\utorrentie.exe (BitTorrent Inc.) C:\Users\Liris\AppData\Roaming\uTorrent\updates\3.4.9_42606\utorrentie.exe () C:\Users\Liris\AppData\Roaming\behbe\UvConverter.exe (hxxp://www.amule.org/) C:\Program Files\amuleC\ed2k.exe (Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jucheck.exe (Nicolas Coolman) C:\Program Files\ZHPDiag\ZHPFix\ZHPFix.exe (Google Inc.) C:\Program Files\Ballfire\Application\chrome.exe (Google Inc.) C:\Program Files\Ballfire\Application\chrome.exe (Google Inc.) C:\Program Files\Ballfire\Application\chrome.exe (Google Inc.) C:\Program Files\Ballfire\Application\chrome.exe (Google Inc.) C:\Program Files\Ballfire\Application\chrome.exe (Google Inc.) C:\Program Files\Ballfire\Application\chrome.exe (Microsoft Corporation) C:\Windows\System32\rundll32.exe (Google Inc.) C:\Program Files\Ballfire\Application\chrome.exe (Google Inc.) C:\Program Files\Ballfire\Application\chrome.exe (Google Inc.) C:\Program Files\Ballfire\Application\chrome.exe (Google Inc.) C:\Program Files\Ballfire\Application\chrome.exe (Google Inc.) C:\Program Files\Ballfire\Application\chrome.exe (Spiritsoft) C:\Users\Liris\Downloads\ipts_130613\ipts.exe (Spiritsoft) C:\Users\Liris\Downloads\ipts_130613\ipts.exe (Google Inc.) C:\Program Files\Ballfire\Application\chrome.exe ==================== Registro (Whitelisted) ==================== (Se uma entrada for incluída na fixlist, o ítem no Registro será restaurado para o padrão ou removido. O arquivo não será movido.) HKLM\...\Run: [BCSSync] => C:\Program Files\Microsoft Office\Office14\BCSSync.exe [89184 2012-11-05] (Microsoft Corporation) HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe [12111576 1999-12-31] (Realtek Semiconductor) HKLM\...\Run: [USB3MON] => C:\Program Files\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [296216 2015-06-15] (Intel Corporation) HKLM\...\Run: [SunJavaUpdateSched] => C:\Program Files\Common Files\Java\Java Update\jusched.exe [598552 2016-06-22] (Oracle Corporation) HKLM\...\Run: [Intel Service] => C:\Users\Liris\AppData\Local\Temp\Java\SYSLIRIS-PC.exe [95293440 2016-09-09] () <===== ATENÇÃO HKLM\...\Run: [BlueStacks Agent] => C:\Program Files\BlueStacks\HD-Agent.exe [831192 2014-07-03] (BlueStack Systems, Inc.) HKU\S-1-5-21-943608218-2961624703-3239595149-1000\...\Run: [BlueStacks Agent] => C:\Program Files\Bluestacks\HD-Agent.exe [831192 2014-07-03] (BlueStack Systems, Inc.) HKU\S-1-5-21-943608218-2961624703-3239595149-1000\...\Run: [Chromium] => c:\users\liris\appdata\local\chromium\application\chrome.exe [1068544 2016-03-18] (The Chromium Authors) HKU\S-1-5-21-943608218-2961624703-3239595149-1000\...\Run: [uTorrent] => C:\Users\Liris\AppData\Roaming\uTorrent\uTorrent.exe [2375360 2016-10-02] (BitTorrent Inc.) HKU\S-1-5-21-943608218-2961624703-3239595149-1000\...\Run: [DAEMON Tools Lite] => C:\Program Files\DAEMON Tools Lite\DTLite.exe [4556048 2015-02-27] (Disc Soft Ltd) HKU\S-1-5-21-943608218-2961624703-3239595149-1000\...\Run: [Steam] => C:\Program Files\Steam\steam.exe [2860832 2016-10-12] (Valve Corporation) HKU\S-1-5-21-943608218-2961624703-3239595149-1000\...\Run: [ipts] => C:\Users\Liris\Downloads\ipts_130613\ipts.exe [1078272 2016-09-13] (Spiritsoft) HKU\S-1-5-21-943608218-2961624703-3239595149-1000\...\Run: [redsurf] => C:\Users\Liris\AppData\Roaming\RedSurf-client\redsurf.exe [594432 2015-01-19] () HKU\S-1-5-21-943608218-2961624703-3239595149-1000\...\MountPoints2: E - E:\Install.exe HKU\S-1-5-21-943608218-2961624703-3239595149-1000\...\MountPoints2: {5bc9ea44-8e2b-11e6-b063-b8975a797294} - E:\Install.exe ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => Nenhum Arquivo GroupPolicy: Restrição ? <======= ATENÇÃO CHR HKLM\SOFTWARE\Policies\Google: Restrição <======= ATENÇÃO ==================== Internet (Whitelisted) ==================== (Se um ítem for incluído na fixlist, sendo um ítem do Registro, será removido ou restaurado para o padrão.) ProxyEnable: [HKLM] => Proxy está habilitado. ProxyServer: [HKLM] => 127.0.0.1:38830 ProxyServer: [S-1-5-21-943608218-2961624703-3239595149-1000] => 127.0.0.1:38830 AutoConfigURL: [S-1-5-21-943608218-2961624703-3239595149-1000] => 127.0.0.1:38830 Tcpip\Parameters: [DhcpNameServer] 192.168.1.1 Tcpip\..\Interfaces\{2CCB6E92-A2C6-4E15-A284-ED1F36E224FD}: [NameServer] 8.8.8.8,8.8.4.4 Tcpip\..\Interfaces\{2CCB6E92-A2C6-4E15-A284-ED1F36E224FD}: [DhcpNameServer] 192.168.1.1 Tcpip\..\Interfaces\{D5D497FE-A392-433E-BC86-0155FB4B7EFD}: [DhcpNameServer] 8.8.8.8 8.8.4.4 Internet Explorer: ================== HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.mylucky123.com/?type=hp&ts=1477341886&z=77502bad654655abc41d953gdzam4mec7z2g0b4bcm&from=interhop1024&uid=HGSTXHTS725050A7E630_TF1500WH0M8Z8M0M8Z8MX HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.mylucky123.com/search/?type=ds&ts=1477341886&z=77502bad654655abc41d953gdzam4mec7z2g0b4bcm&from=interhop1024&uid=HGSTXHTS725050A7E630_TF1500WH0M8Z8M0M8Z8MX&q={searchTerms} HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.mylucky123.com/?type=hp&ts=1477341886&z=77502bad654655abc41d953gdzam4mec7z2g0b4bcm&from=interhop1024&uid=HGSTXHTS725050A7E630_TF1500WH0M8Z8M0M8Z8MX HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.mylucky123.com/search/?type=ds&ts=1477341886&z=77502bad654655abc41d953gdzam4mec7z2g0b4bcm&from=interhop1024&uid=HGSTXHTS725050A7E630_TF1500WH0M8Z8M0M8Z8MX&q={searchTerms} HKU\S-1-5-21-943608218-2961624703-3239595149-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.mylucky123.com/?type=hp&ts=1477341886&z=77502bad654655abc41d953gdzam4mec7z2g0b4bcm&from=interhop1024&uid=HGSTXHTS725050A7E630_TF1500WH0M8Z8M0M8Z8MX HKU\S-1-5-21-943608218-2961624703-3239595149-1000\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.mylucky123.com/?type=hp&ts=1477341886&z=77502bad654655abc41d953gdzam4mec7z2g0b4bcm&from=interhop1024&uid=HGSTXHTS725050A7E630_TF1500WH0M8Z8M0M8Z8MX SearchScopes: HKLM -> DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.mylucky123.com/search/?type=ds&ts=1477341886&z=77502bad654655abc41d953gdzam4mec7z2g0b4bcm&from=interhop1024&uid=HGSTXHTS725050A7E630_TF1500WH0M8Z8M0M8Z8MX&q={searchTerms} SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSE1 SearchScopes: HKLM -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.mylucky123.com/search/?type=ds&ts=1477341886&z=77502bad654655abc41d953gdzam4mec7z2g0b4bcm&from=interhop1024&uid=HGSTXHTS725050A7E630_TF1500WH0M8Z8M0M8Z8MX&q={searchTerms} SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKU\S-1-5-21-943608218-2961624703-3239595149-1000 -> DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.mylucky123.com/search/?type=ds&ts=1477341886&z=77502bad654655abc41d953gdzam4mec7z2g0b4bcm&from=interhop1024&uid=HGSTXHTS725050A7E630_TF1500WH0M8Z8M0M8Z8MX&q={searchTerms} SearchScopes: HKU\S-1-5-21-943608218-2961624703-3239595149-1000 -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.mylucky123.com/search/?type=ds&ts=1477341886&z=77502bad654655abc41d953gdzam4mec7z2g0b4bcm&from=interhop1024&uid=HGSTXHTS725050A7E630_TF1500WH0M8Z8M0M8Z8MX&q={searchTerms} BHO: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL [2013-12-19] (Microsoft Corporation) BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_101\bin\ssv.dll [2016-08-15] (Oracle Corporation) BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17] (Microsoft Corp.) BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation) BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_101\bin\jp2ssv.dll [2016-08-15] (Oracle Corporation) StartMenuInternet: IEXPLORE.EXE - iexplore.exe FireFox: ======== FF DefaultProfile: u09qlgh9.default FF ProfilePath: C:\Users\Liris\AppData\Roaming\Mozilla\Firefox\naweriweentcofise\Profiles\u09qlgh9.default\Profiles\u09qlgh9.default [não encontrado (a)] FF ProfilePath: C:\Users\Liris\AppData\Roaming\Mozilla\Firefox\Profiles\u09qlgh9.default [2016-11-08] FF user.js: detected! => C:\Users\Liris\AppData\Roaming\Mozilla\Firefox\Profiles\u09qlgh9.default\user.js [2016-11-08] FF DefaultSearchEngine: Mozilla\Firefox\Profiles\u09qlgh9.default -> youndoo FF SelectedSearchEngine: Mozilla\Firefox\Profiles\u09qlgh9.default -> youndoo FF NetworkProxy: Mozilla\Firefox\Profiles\u09qlgh9.default -> http", "127.0.0.1" FF NetworkProxy: Mozilla\Firefox\Profiles\u09qlgh9.default -> http_port", 65032 FF NetworkProxy: Mozilla\Firefox\Profiles\u09qlgh9.default -> no_proxies_on", "" FF NetworkProxy: Mozilla\Firefox\Profiles\u09qlgh9.default -> ssl", "127.0.0.1" FF NetworkProxy: Mozilla\Firefox\Profiles\u09qlgh9.default -> ssl_port", 65032 FF NetworkProxy: Mozilla\Firefox\Profiles\u09qlgh9.default -> type", 0 FF Homepage: Mozilla\Firefox\Profiles\u09qlgh9.default -> hxxp://www.nicesearches.com?type=hp&ts=1478632972&from=ead80003&uid=hgstxhts725050a7e630_tf1500wh0m8z8m0m8z8mx&z=aefa759eb67c975c6ac51abgfz4m2beqbcfo7t6mco FF NewTab: Mozilla\Firefox\Profiles\u09qlgh9.default -> hxxp://www.nicesearches.com?type=hp&ts=1478632972&from=ead80003&uid=hgstxhts725050a7e630_tf1500wh0m8z8m0m8z8mx&z=aefa759eb67c975c6ac51abgfz4m2beqbcfo7t6mco FF Extension: (xRocket Toolbar) - C:\Users\Liris\AppData\Roaming\Mozilla\Firefox\Profiles\u09qlgh9.default\Extensions\arthurj8283@gmail.com [2016-11-08] [não assinado] FF SearchPlugin: C:\Users\Liris\AppData\Roaming\Mozilla\Firefox\Profiles\u09qlgh9.default\searchplugins\mylucky123.xml [2016-10-24] FF SearchPlugin: C:\Users\Liris\AppData\Roaming\Mozilla\Firefox\Profiles\u09qlgh9.default\searchplugins\nice.xml [2016-11-08] FF SearchPlugin: C:\Users\Liris\AppData\Roaming\Mozilla\Firefox\Profiles\u09qlgh9.default\searchplugins\sfhz9xue.xml [2016-10-09] FF HKLM\...\Firefox\Extensions: [arthurj8283@gmail.com] - C:\Users\Liris\AppData\Roaming\Mozilla\Firefox\Profiles\u09qlgh9.default\extensions\arthurj8283@gmail.com FF Plugin: @java.com/DTPlugin,version=11.101.2 -> C:\Program Files\Java\jre1.8.0_101\bin\dtplugin\npDeployJava1.dll [2016-08-15] (Oracle Corporation) FF Plugin: @java.com/JavaPlugin,version=11.101.2 -> C:\Program Files\Java\jre1.8.0_101\bin\plugin2\npjp2.dll [2016-08-15] (Oracle Corporation) FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation) FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~1\MICROS~2\Office14\NPSPWRAP.DLL [2010-03-24] (Microsoft Corporation) FF Plugin: @microsoft.com/WLPG,version=16.4.3528.0331 -> C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll [2014-03-31] (Microsoft Corporation) FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.31.5\npGoogleUpdate3.dll [2016-09-22] (Google Inc.) FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.31.5\npGoogleUpdate3.dll [2016-09-22] (Google Inc.) FF Plugin: Adobe Reader -> C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2014-12-03] (Adobe Systems Inc.) Chrome: ======= CHR DefaultProfile: ChromeDefaultData CHR HomePage: ChromeDefaultData -> hxxp://www.nicesearches.com?type=hp&ts=1478632972&from=ead80003&uid=hgstxhts725050a7e630_tf1500wh0m8z8m0m8z8mx&z=aefa759eb67c975c6ac51abgfz4m2beqbcfo7t6mco CHR StartupUrls: ChromeDefaultData -> "hxxp://www.nicesearches.com?type=hp&ts=1478632972&from=ead80003&uid=hgstxhts725050a7e630_tf1500wh0m8z8m0m8z8mx&z=aefa759eb67c975c6ac51abgfz4m2beqbcfo7t6mco" CHR DefaultSearchURL: ChromeDefaultData -> hxxp://www.nicesearches.com/search.php?type=ds&ts=1478632972&from=ead80003&uid=hgstxhts725050a7e630_tf1500wh0m8z8m0m8z8mx&z=aefa759eb67c975c6ac51abgfz4m2beqbcfo7t6mco&q={searchTerms} CHR DefaultSearchKeyword: ChromeDefaultData -> nice CHR Profile: C:\Users\Liris\AppData\Local\Google\Chrome\User Data\ChromeDefaultData [2016-11-08] <==== ATENÇÃO CHR Extension: (Google Apresentações) - C:\Users\Liris\AppData\Local\Google\Chrome\User Data\ChromeDefaultData\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2016-10-09] CHR Extension: (Google Docs) - C:\Users\Liris\AppData\Local\Google\Chrome\User Data\ChromeDefaultData\Extensions\aohghmighlieiainnegkcijnfilokake [2016-10-09] CHR Extension: (Google Drive) - C:\Users\Liris\AppData\Local\Google\Chrome\User Data\ChromeDefaultData\Extensions\apdfllckaahabafndbhieahigkjlhalf [2016-10-09] CHR Extension: (YouTube) - C:\Users\Liris\AppData\Local\Google\Chrome\User Data\ChromeDefaultData\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2016-10-09] CHR Extension: (Planilhas do Google) - C:\Users\Liris\AppData\Local\Google\Chrome\User Data\ChromeDefaultData\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2016-10-09] CHR Extension: (Documentos Google off-line) - C:\Users\Liris\AppData\Local\Google\Chrome\User Data\ChromeDefaultData\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-10-09] CHR Extension: (Pagamentos da Chrome Web Store) - C:\Users\Liris\AppData\Local\Google\Chrome\User Data\ChromeDefaultData\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2016-10-09] CHR Extension: (Gmail) - C:\Users\Liris\AppData\Local\Google\Chrome\User Data\ChromeDefaultData\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2016-10-09] CHR Extension: (Chrome Media Router) - C:\Users\Liris\AppData\Local\Google\Chrome\User Data\ChromeDefaultData\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2016-10-15] CHR Profile: C:\Users\Liris\AppData\Local\Google\Chrome\User Data\ChromeDefaultData2 [2016-10-09] <==== ATENÇÃO CHR Extension: (Google Apresentações) - C:\Users\Liris\AppData\Local\Google\Chrome\User Data\ChromeDefaultData2\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2016-09-22] CHR Extension: (Google Docs) - C:\Users\Liris\AppData\Local\Google\Chrome\User Data\ChromeDefaultData2\Extensions\aohghmighlieiainnegkcijnfilokake [2016-09-22] CHR Extension: (Google Drive) - C:\Users\Liris\AppData\Local\Google\Chrome\User Data\ChromeDefaultData2\Extensions\apdfllckaahabafndbhieahigkjlhalf [2016-09-22] CHR Extension: (YouTube) - C:\Users\Liris\AppData\Local\Google\Chrome\User Data\ChromeDefaultData2\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2016-09-22] CHR Extension: (Planilhas do Google) - C:\Users\Liris\AppData\Local\Google\Chrome\User Data\ChromeDefaultData2\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2016-09-22] CHR Extension: (Documentos Google off-line) - C:\Users\Liris\AppData\Local\Google\Chrome\User Data\ChromeDefaultData2\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-09-23] CHR Extension: (Pagamentos da Chrome Web Store) - C:\Users\Liris\AppData\Local\Google\Chrome\User Data\ChromeDefaultData2\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2016-09-22] CHR Extension: (Gmail) - C:\Users\Liris\AppData\Local\Google\Chrome\User Data\ChromeDefaultData2\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2016-09-22] CHR Extension: (Chrome Media Router) - C:\Users\Liris\AppData\Local\Google\Chrome\User Data\ChromeDefaultData2\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2016-09-22] ==================== Serviços (Whitelisted) ==================== (Se uma entrada for incluída na fixlist, será removida do Registro. O arquivo não será movido, a menos que seja colocado separadamente.) R2 Ajering; C:\Program Files\Stiqidom\Plsadapter.dll [277504 2016-10-09] () [Arquivo não assinado] R2 Archer; C:\Program Files\WinArcher\Archer.dll [337920 2016-10-26] () [Arquivo não assinado] S2 BstHdAndroidSvc; C:\Program Files\BlueStacks\HD-Service.exe [402192 2014-05-21] (BlueStack Systems, Inc.) [Arquivo não assinado] R2 BstHdLogRotatorSvc; C:\Program Files\BlueStacks\HD-LogRotatorService.exe [384728 2014-07-03] (BlueStack Systems, Inc.) R2 BstHdUpdaterSvc; C:\Program Files\BlueStacks\HD-UpdaterService.exe [773848 2014-07-03] (BlueStack Systems, Inc.) S3 cphs; C:\Windows\system32\IntelCpHeciSvc.exe [280696 2016-01-13] (Intel Corporation) R3 Disc Soft Lite Bus Service; C:\Program Files\DAEMON Tools Lite\DiscSoftBusService.exe [1030928 2015-02-27] (Disc Soft Ltd) R2 ed2kidle; C:\Program Files\amuleC\ed2k.exe [237568 2016-10-08] (hxxp://www.amule.org/) [Arquivo não assinado] R2 hshld; C:\Program Files\Hotspot Shield\bin\cmw_srv.exe [2710648 2016-08-23] (AnchorFree Inc.) S3 HssTrayService; C:\Program Files\Hotspot Shield\bin\HssTrayService.EXE [103168 2016-08-23] () R2 igfxCUIService1.0.0.0; C:\Windows\system32\igfxCUIService.exe [274040 2016-01-13] (Intel Corporation) S2 IlS; C:\ProgramData\Tencent\QQ\qmdr\dr.dll [347648 2016-10-24] () [Arquivo não assinado] R2 InterHop; C:\Program Files\InterHop\InterHop.exe [160256 2016-10-24] () [Arquivo não assinado] <==== ATENÇÃO R2 iSafeService; C:\Program Files\Elex-tech\YAC\iSafeSvc.exe [131024 2016-08-19] (Elex do Brasil Participações Ltda) S3 npggsvc; C:\Windows\system32\GameMon.des [4044296 2016-06-09] (INCA Internet Co., Ltd.) R2 UvConv; C:\Users\Liris\AppData\Roaming\behbe\UvConverter.exe [440832 2016-11-07] () [Arquivo não assinado] R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [680960 2013-05-27] (Microsoft Corporation) R2 WinSAPSvc; C:\ProgramData\WinSAPSvc\WinSAP.dll [218624 2016-10-21] () [Arquivo não assinado] S2 Hkhlp; C:\Program Files\Common Files\Apps\Hkhlp.dll [X] ===================== Drivers (Whitelisted) ====================== (Se uma entrada for incluída na fixlist, será removida do Registro. O arquivo não será movido, a menos que seja colocado separadamente.) S3 AFTrafMgr1.1; C:\Program Files\Hotspot Shield\bin\TrafMgr_1_1_32.sys [47544 2016-08-23] (AnchorFree Inc.) S3 AndnetBus; C:\Windows\System32\DRIVERS\lgandnetbus.sys [24576 2015-05-12] (LG Electronics Inc.) S3 AndNetDiag; C:\Windows\System32\DRIVERS\lgandnetdiag.sys [25088 2015-05-12] (LG Electronics Inc.) S3 ANDNetModem; C:\Windows\System32\DRIVERS\lgandnetmodem.sys [30208 2015-05-12] (LG Electronics Inc.) R2 BstHdDrv; C:\Program Files\BlueStacks\HD-Hypervisor-x86.sys [112344 2014-07-03] (BlueStack Systems) R3 dtlitescsibus; C:\Windows\System32\DRIVERS\dtlitescsibus.sys [25104 2016-10-09] (Disc Soft Ltd) R1 iSafeKrnl; C:\Program Files\Elex-tech\YAC\iSafeKrnl.sys [227776 2016-05-23] (Elex do Brasil Participações Ltda) S3 iSafeKrnlBoot; C:\Windows\System32\DRIVERS\iSafeKrnlBoot.sys [50280 2016-05-23] (Elex do Brasil Participações Ltda) R1 iSafeKrnlKit; C:\Program Files\Elex-tech\YAC\iSafeKrnlKit.sys [97912 2016-05-23] (Elex do Brasil Participações Ltda) R1 iSafeKrnlMon; C:\Program Files\Elex-tech\YAC\iSafeKrnlMon.sys [45032 2016-05-23] (Elex do Brasil Participações Ltda) R1 iSafeKrnlR3; C:\Program Files\Elex-tech\YAC\iSafeKrnlR3.sys [73232 2016-05-23] (Elex do Brasil Participações Ltda) R1 iSafeNetFilter; C:\Windows\System32\DRIVERS\iSafeNetFilter.sys [59152 2016-05-19] (Elex do Brasil Participações Ltda) R0 iusb3hcs; C:\Windows\System32\DRIVERS\iusb3hcs.sys [27944 2015-06-26] (Intel Corporation) R3 iusb3hub; C:\Windows\System32\DRIVERS\iusb3hub.sys [404776 2015-06-26] (Intel Corporation) R3 iusb3xhc; C:\Windows\System32\DRIVERS\iusb3xhc.sys [818672 2016-05-06] (Intel Corporation) S3 netr28u; C:\Windows\System32\DRIVERS\netr28u.sys [657408 2009-07-13] (Ralink Technology Corp.) R3 taphss6; C:\Windows\System32\DRIVERS\taphss6.sys [36944 2016-04-19] (Anchorfree Inc.) R1 VBoxNetAdp; C:\Windows\System32\DRIVERS\VBoxNetAdp6.sys [103544 2016-04-28] (Oracle Corporation) R1 VBoxNetLwf; C:\Windows\System32\DRIVERS\VBoxNetLwf.sys [165880 2016-04-28] (Oracle Corporation) U0 aswVmm; não ImagePath S3 MBAMSwissArmy; \??\C:\Windows\system32\drivers\MBAMSwissArmy.sys [X] S3 VGPU; System32\drivers\rdvgkmd.sys [X] S3 xhunter1; \??\C:\Windows\xhunter1.sys [X] U3 mbr; \??\C:\Users\Liris\AppData\Local\Temp\mbr.sys [X] ==================== NetSvcs (Whitelisted) =================== (Se uma entrada for incluída na fixlist, será removida do Registro. O arquivo não será movido, a menos que seja colocado separadamente.) ==================== Um Mês Criados arquivos e pastas ======== (Se uma entrada for incluída na fixlist, o arquivo/pasta será movido.) 2016-11-08 21:57 - 2016-11-08 21:59 - 00023019 _____ C:\Users\Liris\Downloads\FRST.txt 2016-11-08 21:57 - 2016-11-08 21:57 - 00000000 ____D C:\FRST 2016-11-08 21:56 - 2016-11-08 21:56 - 01759744 _____ (Farbar) C:\Users\Liris\Downloads\FRST.exe 2016-11-08 21:47 - 2016-11-08 21:47 - 00004973 _____ C:\Users\Liris\Desktop\ZHPFixReport.txt 2016-11-08 21:45 - 2016-11-08 21:47 - 00000000 ____D C:\Program Files\nsrxr3sz 2016-11-08 21:41 - 2016-11-08 21:41 - 00004617 _____ C:\Users\Liris\Downloads\relatorio.txt 2016-11-08 21:39 - 2016-11-08 21:39 - 00119392 _____ C:\Users\Liris\Desktop\ZHPDiag.txt 2016-11-08 21:38 - 2016-11-08 21:38 - 00000512 _____ C:\PhysicalDisk0_MBR.bin 2016-11-08 21:19 - 2016-11-08 21:19 - 00000000 ____D C:\Program Files\f09er35s 2016-11-08 19:45 - 2016-11-08 19:46 - 00000000 ____D C:\Program Files\5g65ay8t 2016-11-08 19:28 - 2016-11-08 19:28 - 00000000 ____D C:\Users\Liris\Downloads\DateALive 2016-11-08 19:24 - 2016-11-08 19:25 - 00058681 _____ C:\Users\Liris\Downloads\DateALive.zip 2016-11-08 19:24 - 2016-11-08 19:25 - 00058681 _____ C:\Users\Liris\Downloads\DateALive (1).zip 2016-11-08 18:18 - 2016-11-08 18:19 - 00000000 ____D C:\Users\Todos os Usuários\hadha 2016-11-08 18:18 - 2016-11-08 18:19 - 00000000 ____D C:\ProgramData\hadha 2016-11-08 17:46 - 2016-11-08 17:46 - 00000000 ____D C:\Program Files\t7kky9hv 2016-11-08 17:30 - 2016-11-08 17:33 - 00000000 ____D C:\Program Files\0meedtyr 2016-11-08 17:20 - 2016-11-08 17:20 - 00000000 ____D C:\Users\Todos os Usuários\QQBrowser 2016-11-08 17:20 - 2016-11-08 17:20 - 00000000 ____D C:\Users\Todos os Usuários\ibeib 2016-11-08 17:20 - 2016-11-08 17:20 - 00000000 ____D C:\Users\Todos os Usuários\BaofengUpdate_U 2016-11-08 17:20 - 2016-11-08 17:20 - 00000000 ____D C:\Users\Liris\AppData\Roaming\behbe 2016-11-08 17:20 - 2016-11-08 17:20 - 00000000 ____D C:\ProgramData\QQBrowser 2016-11-08 17:20 - 2016-11-08 17:20 - 00000000 ____D C:\ProgramData\ibeib 2016-11-08 17:20 - 2016-11-08 17:20 - 00000000 ____D C:\ProgramData\BaofengUpdate_U 2016-11-08 17:18 - 2016-11-08 17:19 - 00000000 ____D C:\Program Files\48q3fhtg 2016-11-07 20:24 - 2016-11-08 17:20 - 00000000 ____D C:\Users\Liris\AppData\LocalLow\uTorrent 2016-11-07 20:23 - 2016-11-07 20:24 - 00000000 ____D C:\Program Files\srf1mjwl 2016-11-07 20:19 - 2016-11-07 20:25 - 00000000 ____D C:\Users\Liris\AppData\Roaming\UBot Studio 2016-11-07 20:18 - 2016-11-07 20:18 - 02587893 _____ C:\Users\Liris\Downloads\Gerador de Tráfego.rar 2016-11-07 20:18 - 2016-11-07 20:18 - 00000000 ____D C:\Users\Liris\Downloads\Gerador de Tráfego 2016-11-07 13:46 - 2016-11-07 13:47 - 00000000 ____D C:\Program Files\5naiyeip 2016-11-07 12:23 - 2016-11-07 12:23 - 00000000 ____D C:\Program Files\iy3germ3 2016-11-07 12:13 - 2016-11-07 12:15 - 00000000 ____D C:\Program Files\t6aei0qw 2016-11-06 23:45 - 2016-11-06 23:45 - 00000000 ____D C:\Users\Liris\Downloads\ipts_165660 2016-11-06 23:11 - 2016-11-06 23:11 - 00000000 ____D C:\Users\Liris\Downloads\ipts_130613 2016-11-06 23:08 - 2016-11-06 23:08 - 00298708 _____ C:\Users\Liris\Downloads\ipts_165660.rar 2016-11-06 22:51 - 2016-11-06 22:51 - 00000946 _____ C:\Users\Public\Desktop\RedSurf-client.lnk 2016-11-06 22:51 - 2016-11-06 22:51 - 00000000 ____D C:\Users\Liris\Downloads\redsurf_setup_v.2.1 2016-11-06 22:51 - 2016-11-06 22:51 - 00000000 ____D C:\Users\Liris\AppData\Roaming\RedSurf-client 2016-11-06 22:51 - 2016-11-06 22:51 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\RedSurf-client 2016-11-06 22:43 - 2016-11-06 22:48 - 25357762 _____ C:\Users\Liris\Downloads\redsurf_setup_v.2.1.rar 2016-11-05 21:58 - 2016-11-05 22:14 - 460324864 _____ C:\Users\Liris\Downloads\android-x86-6.0_20160129.iso 2016-11-05 18:50 - 2016-11-05 18:51 - 00000000 ____D C:\Users\Liris\AppData\Roaming\10KHits 2016-11-05 18:49 - 2016-11-05 18:49 - 00003039 _____ C:\Users\Liris\Desktop\10KHits Exchanger.lnk 2016-11-05 18:49 - 2016-11-05 18:49 - 00002999 _____ C:\Users\Liris\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\10KHits Exchanger.lnk 2016-11-05 18:48 - 2016-11-05 18:49 - 00000000 ____D C:\Program Files\10KHits Exchanger 2016-11-05 18:44 - 2016-11-05 18:46 - 27736064 _____ C:\Users\Liris\Downloads\10khits-exchanger_win_0.9.8_i386.msi 2016-11-04 21:36 - 2016-11-04 21:36 - 00000000 ____D C:\Users\Liris\Documents\ipts_130613 2016-11-04 21:35 - 2016-11-04 21:32 - 27833465 _____ C:\Users\Liris\Documents\ipts_130613.7z 2016-11-04 21:30 - 2016-11-04 21:32 - 27833465 _____ C:\Users\Liris\Downloads\ipts_130613.7z 2016-11-03 22:16 - 2016-11-03 22:16 - 00000000 ____D C:\Users\Liris\AppData\Local\Ballfire 2016-11-03 22:15 - 2016-11-03 22:15 - 00000000 ____D C:\Users\Todos os Usuários\PreEmptive Solutions 2016-11-03 22:15 - 2016-11-03 22:15 - 00000000 ____D C:\ProgramData\PreEmptive Solutions 2016-11-03 22:15 - 2016-11-03 22:15 - 00000000 ____D C:\Program Files\Ballfire 2016-11-03 22:06 - 2016-11-03 22:06 - 00000000 ____D C:\Program Files\wygcxv5v 2016-10-26 23:45 - 2016-10-26 23:46 - 00000000 ____D C:\Program Files\7nma0qrg 2016-10-26 22:17 - 2016-10-26 22:17 - 00564456 _____ C:\Users\Liris\Downloads\20688-83732-1-PB.pdf 2016-10-26 22:14 - 2016-10-26 22:15 - 00000000 ____D C:\Program Files\dq9jgv7v 2016-10-26 22:04 - 2016-10-26 22:06 - 00000000 ____D C:\Program Files\e89n1xxn 2016-10-26 10:39 - 2016-10-26 10:40 - 00000000 ____D C:\Program Files\jv5phq10 2016-10-26 10:32 - 2016-11-03 22:17 - 00000003 _____ C:\Windows\system32\hoewmds 2016-10-26 10:31 - 2016-10-26 10:31 - 00000000 ____D C:\Program Files\WinArcher 2016-10-26 10:29 - 2016-10-26 10:31 - 00000000 ____D C:\Program Files\2zd3e72h 2016-10-25 20:09 - 2016-10-25 20:09 - 00000000 ____D C:\Users\Liris\AppData\Roaming\Elex-tech 2016-10-25 20:09 - 2016-10-25 20:09 - 00000000 ____D C:\Program Files\Elex-tech 2016-10-25 20:09 - 2016-05-23 00:41 - 00050280 _____ (Elex do Brasil Participações Ltda) C:\Windows\system32\Drivers\iSafeKrnlBoot.sys 2016-10-25 20:09 - 2016-05-19 04:42 - 00059152 _____ (Elex do Brasil Participações Ltda) C:\Windows\system32\Drivers\iSafeNetFilter.sys 2016-10-25 20:08 - 2016-11-08 17:20 - 00000000 _____ C:\Users\Public\Documents\report.dat 2016-10-25 20:07 - 2016-10-25 20:07 - 00000000 ____D C:\Users\Liris\AppData\Local\Stanper 2016-10-25 20:07 - 2016-10-25 20:07 - 00000000 ____D C:\Program Files\Stanper 2016-10-25 11:45 - 2016-10-25 11:45 - 00000000 ____D C:\Program Files\vz9ymf9g 2016-10-25 11:10 - 2016-10-25 11:10 - 00000000 ____D C:\Users\Todos os Usuários\WinSAPSvc 2016-10-25 11:10 - 2016-10-25 11:10 - 00000000 ____D C:\ProgramData\WinSAPSvc 2016-10-25 11:10 - 2016-10-25 11:10 - 00000000 ____D C:\Program Files\5txmglg4 2016-10-24 23:15 - 2016-10-24 23:16 - 425666824 _____ C:\Users\Liris\Downloads\[LCTUTORS] C.D X7 (WIN32) + KEYGEN.rar 2016-10-24 18:45 - 2016-10-25 11:45 - 00000000 ____D C:\Program Files\InterHop 2016-10-24 18:45 - 2016-10-24 18:45 - 00000000 ____D C:\Users\Liris\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\amuleC 2016-10-24 18:45 - 2016-10-24 18:45 - 00000000 ____D C:\Users\Liris\AppData\Roaming\aMule 2016-10-24 18:45 - 2016-10-24 18:45 - 00000000 ____D C:\Program Files\UvConverter 2016-10-24 18:45 - 2016-10-24 18:45 - 00000000 ____D C:\Program Files\amuleC 2016-10-23 23:37 - 2016-10-23 23:37 - 01204011 _____ C:\Windows\unins000.exe 2016-10-23 23:34 - 2016-10-23 23:34 - 00816356 _____ C:\Users\Liris\Downloads\CLEO4_setup.7z 2016-10-23 23:34 - 2016-10-23 23:34 - 00000000 ____D C:\Users\Liris\Downloads\CLEO4_setup 2016-10-23 23:22 - 2016-10-23 23:23 - 16270006 _____ C:\Users\Liris\Downloads\sa-mp-0.3.7-install.exe 2016-10-23 21:03 - 2016-10-23 21:03 - 00001196 _____ C:\Users\Liris\Desktop\GTA San Andreas.lnk 2016-10-23 20:53 - 2016-11-06 23:29 - 00000000 ____D C:\Users\Liris\AppData\Local\CrashDumps 2016-10-22 22:57 - 2016-10-23 14:12 - 00000000 ____D C:\Users\Liris\AppData\Roaming\FileZilla 2016-10-22 22:57 - 2016-10-22 22:57 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FileZilla FTP Client 2016-10-22 22:57 - 2016-10-22 22:57 - 00000000 ____D C:\Program Files\FileZilla FTP Client 2016-10-22 22:26 - 2016-10-22 22:26 - 00003799 _____ C:\Users\Liris\Downloads\admin-ajax.php 2016-10-21 22:50 - 2016-10-21 22:51 - 205563364 _____ C:\Users\Liris\Downloads\1.1.rar 2016-10-21 22:49 - 2016-10-21 22:50 - 205563293 _____ C:\Users\Liris\Downloads\1.1.zip 2016-10-21 17:59 - 2016-11-08 18:19 - 00000000 ____D C:\Users\Liris\Desktop\RFB 2017 2016-10-21 17:55 - 2016-10-21 21:04 - 2098249829 _____ C:\Users\Liris\Downloads\23)-20161021T194407Z-2.zip 2016-10-21 17:53 - 2016-10-21 21:06 - 2146444051 _____ C:\Users\Liris\Downloads\8)-20161021T195045Z-2.zip 2016-10-21 17:53 - 2016-10-21 21:05 - 2119434959 _____ C:\Users\Liris\Downloads\Administração Geral e Pública - Giovanna Carranza (8-8)-20161021T195045Z.zip 2016-10-21 17:53 - 2016-10-21 20:46 - 1754453473 _____ C:\Users\Liris\Downloads\8)-20161021T195045Z-3.zip 2016-10-21 17:53 - 2016-10-21 18:36 - 219021312 _____ C:\Users\Liris\Downloads\1.1.mp4 2016-10-21 17:49 - 2016-10-21 19:02 - 2115359700 _____ C:\Users\Liris\Downloads\8)-20161021T194717Z-2.zip 2016-10-19 13:41 - 2016-11-08 21:47 - 00000000 ____D C:\Users\Todos os Usuários\ChelfNotify 2016-10-19 13:41 - 2016-11-08 21:47 - 00000000 ____D C:\ProgramData\ChelfNotify 2016-10-19 13:41 - 2016-10-19 13:41 - 00000000 ____D C:\Program Files\oay6ic5s 2016-10-16 16:44 - 2016-10-16 16:44 - 00001768 _____ C:\Users\Public\Desktop\Apps.lnk 2016-10-16 16:44 - 2016-10-16 16:44 - 00001765 _____ C:\Users\Public\Desktop\Start BlueStacks.lnk 2016-10-16 16:43 - 2016-10-16 16:43 - 00000000 ____D C:\Users\Todos os Usuários\BlueStacks 2016-10-16 16:43 - 2016-10-16 16:43 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\BlueStacks 2016-10-16 16:43 - 2016-10-16 16:43 - 00000000 ____D C:\ProgramData\BlueStacks 2016-10-16 16:43 - 2016-10-16 16:43 - 00000000 ____D C:\Program Files\BlueStacks 2016-10-13 12:25 - 2016-11-08 17:20 - 00000000 ____D C:\Program Files\Steam 2016-10-13 12:25 - 2016-10-13 12:25 - 00000921 _____ C:\Users\Public\Desktop\Steam.lnk 2016-10-13 12:25 - 2016-10-13 12:25 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Steam 2016-10-12 22:36 - 2005-07-08 21:56 - 00009900 _____ C:\Program Files\KPS.gta.san.andreas.NFO 2016-10-12 22:36 - 2005-07-08 16:13 - 00002900 _____ C:\Program Files\gta_sa.set 2016-10-12 22:36 - 2005-07-07 17:02 - 14386176 _____ C:\Program Files\gta_sa.exe 2016-10-12 22:36 - 2005-06-10 16:34 - 00000360 _____ C:\Program Files\gta_sa.reg 2016-10-12 22:36 - 2004-05-18 15:19 - 00000197 _____ C:\Program Files\stream.ini 2016-10-12 22:36 - 2004-01-06 06:43 - 00188416 _____ (Creative Technology Ltd) C:\Program Files\eax.dll 2016-10-12 22:36 - 2003-11-16 06:48 - 01060864 _____ C:\Program Files\vorbis.dll 2016-10-12 22:36 - 2003-11-16 06:48 - 00065536 _____ C:\Program Files\vorbisFile.dll 2016-10-12 22:36 - 2003-11-15 13:54 - 00036864 _____ C:\Program Files\ogg.dll 2016-10-12 22:32 - 2016-10-12 22:36 - 00000000 ____D C:\Program Files\ReadMe 2016-10-12 22:32 - 2016-10-12 22:36 - 00000000 ____D C:\Program Files\movies 2016-10-12 22:32 - 2016-10-12 22:36 - 00000000 ____D C:\Program Files\models 2016-10-12 22:32 - 2016-10-12 22:36 - 00000000 ____D C:\Program Files\data 2016-10-12 22:32 - 2016-10-12 22:34 - 00000000 ____D C:\Program Files\text 2016-10-12 22:32 - 2016-10-12 22:34 - 00000000 ____D C:\Program Files\anim 2016-10-12 22:32 - 2016-10-12 22:32 - 00000000 ____D C:\Program Files\audio 2016-10-12 22:31 - 2016-10-12 22:31 - 00000000 ____D C:\Users\Todos os Usuários\dllescort 2016-10-12 22:31 - 2016-10-12 22:31 - 00000000 ____D C:\ProgramData\dllescort 2016-10-12 22:30 - 2016-10-12 22:31 - 00000000 ____D C:\Program Files\DLLEscort 2016-10-12 22:30 - 2016-10-12 22:30 - 00000977 _____ C:\Users\Public\Desktop\DLLEscort.lnk 2016-10-12 22:30 - 2016-10-12 22:30 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DLL Escort 2014 2016-10-12 16:41 - 2015-11-16 02:43 - 00000000 ____D C:\Users\Liris\Desktop\ANT-CRASH SAMP 0.3.7 CODTUTORIAIS 2016-10-11 19:19 - 2016-09-30 17:28 - 00346312 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll 2016-10-11 19:19 - 2016-09-30 13:20 - 04000488 _____ (Microsoft Corporation) C:\Windows\system32\ntkrnlpa.exe 2016-10-11 19:19 - 2016-09-30 13:20 - 03944680 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe 2016-10-11 19:19 - 2016-09-30 03:54 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2016-10-11 19:19 - 2016-09-30 03:54 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll 2016-10-11 19:19 - 2016-09-30 03:47 - 20306944 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2016-10-11 19:19 - 2016-09-30 03:42 - 00498688 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll 2016-10-11 19:19 - 2016-09-30 03:42 - 00341504 _____ (Microsoft Corporation) C:\Windows\system32\html.iec 2016-10-11 19:19 - 2016-09-30 03:42 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2016-10-11 19:19 - 2016-09-30 03:42 - 00047616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll 2016-10-11 19:19 - 2016-09-30 03:41 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll 2016-10-11 19:19 - 2016-09-30 03:38 - 02286592 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2016-10-11 19:19 - 2016-09-30 03:36 - 00047104 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2016-10-11 19:19 - 2016-09-30 03:35 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2016-10-11 19:19 - 2016-09-30 03:33 - 00476160 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2016-10-11 19:19 - 2016-09-30 03:32 - 00663552 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll 2016-10-11 19:19 - 2016-09-30 03:32 - 00620032 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll 2016-10-11 19:19 - 2016-09-30 03:32 - 00115712 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe 2016-10-11 19:19 - 2016-09-30 03:32 - 00102912 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe 2016-10-11 19:19 - 2016-09-30 03:27 - 00667648 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe 2016-10-11 19:19 - 2016-09-30 03:24 - 00416256 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll 2016-10-11 19:19 - 2016-09-30 03:19 - 00091136 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll 2016-10-11 19:19 - 2016-09-30 03:19 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll 2016-10-11 19:19 - 2016-09-30 03:17 - 00168960 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll 2016-10-11 19:19 - 2016-09-30 03:15 - 00076288 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll 2016-10-11 19:19 - 2016-09-30 03:14 - 00279040 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll 2016-10-11 19:19 - 2016-09-30 03:13 - 00130048 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll 2016-10-11 19:19 - 2016-09-30 03:12 - 04608512 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2016-10-11 19:19 - 2016-09-30 03:07 - 00230400 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll 2016-10-11 19:19 - 2016-09-30 03:05 - 02055680 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl 2016-10-11 19:19 - 2016-09-30 03:05 - 01155072 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll 2016-10-11 19:19 - 2016-09-30 03:05 - 00693248 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2016-10-11 19:19 - 2016-09-30 03:05 - 00689152 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2016-10-11 19:19 - 2016-09-30 03:03 - 13653504 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2016-10-11 19:19 - 2016-09-30 02:46 - 02444288 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2016-10-11 19:19 - 2016-09-30 02:43 - 01312768 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2016-10-11 19:19 - 2016-09-30 02:42 - 00710144 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll 2016-10-11 19:19 - 2016-09-15 13:15 - 00741888 _____ (Microsoft Corporation) C:\Windows\system32\inetcomm.dll 2016-10-11 19:19 - 2016-09-15 13:15 - 00084480 _____ (Microsoft Corporation) C:\Windows\system32\INETRES.dll 2016-10-11 19:19 - 2016-09-12 18:54 - 00067816 _____ (Microsoft Corporation) C:\Windows\system32\CompatTelRunner.exe 2016-10-11 19:19 - 2016-09-12 18:53 - 00137960 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys 2016-10-11 19:19 - 2016-09-12 18:53 - 00067304 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys 2016-10-11 19:19 - 2016-09-12 18:49 - 01063936 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll 2016-10-11 19:19 - 2016-09-12 18:49 - 01017856 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll 2016-10-11 19:19 - 2016-09-12 18:49 - 00690688 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll 2016-10-11 19:19 - 2016-09-12 18:49 - 00655360 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll 2016-10-11 19:19 - 2016-09-12 18:49 - 00553472 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll 2016-10-11 19:19 - 2016-09-12 18:49 - 00260608 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll 2016-10-11 19:19 - 2016-09-12 18:49 - 00254464 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll 2016-10-11 19:19 - 2016-09-12 18:49 - 00223232 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll 2016-10-11 19:19 - 2016-09-12 18:49 - 00172032 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll 2016-10-11 19:19 - 2016-09-12 18:49 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll 2016-10-11 19:19 - 2016-09-12 18:49 - 00141312 _____ (Microsoft Corporation) C:\Windows\system32\rpchttp.dll 2016-10-11 19:19 - 2016-09-12 18:49 - 00099840 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll 2016-10-11 19:19 - 2016-09-12 18:49 - 00076800 _____ (Microsoft Corporation) C:\Windows\system32\adsmsext.dll 2016-10-11 19:19 - 2016-09-12 18:49 - 00065536 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll 2016-10-11 19:19 - 2016-09-12 18:49 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll 2016-10-11 19:19 - 2016-09-12 18:49 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll 2016-10-11 19:19 - 2016-09-12 18:49 - 00017408 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll 2016-10-11 19:19 - 2016-09-12 18:29 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe 2016-10-11 19:19 - 2016-09-12 18:28 - 02399232 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys 2016-10-11 19:19 - 2016-09-12 18:26 - 00226304 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys 2016-10-11 19:19 - 2016-09-12 18:26 - 00124416 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys 2016-10-11 19:19 - 2016-09-12 18:26 - 00098304 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys 2016-10-11 19:19 - 2016-09-12 18:25 - 00036352 _____ (Microsoft Corporation) C:\Windows\system32\cryptbase.dll 2016-10-11 19:19 - 2016-09-12 18:25 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe 2016-10-11 19:19 - 2016-09-12 18:25 - 00015872 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll 2016-10-11 19:19 - 2016-09-12 17:08 - 01251328 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll 2016-10-11 19:19 - 2016-09-12 17:08 - 00909824 _____ (Microsoft Corporation) C:\Windows\system32\FntCache.dll 2016-10-11 19:19 - 2016-09-10 13:53 - 02291712 _____ (Microsoft Corporation) C:\Windows\system32\MSVidCtl.dll 2016-10-11 19:19 - 2016-09-09 16:01 - 01310528 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll 2016-10-11 19:19 - 2016-09-09 16:00 - 00400896 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll 2016-10-11 19:19 - 2016-09-09 16:00 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll 2016-10-11 19:19 - 2016-09-09 15:59 - 00644096 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll 2016-10-11 19:19 - 2016-09-09 15:59 - 00050688 _____ (Microsoft Corporation) C:\Windows\system32\appidapi.dll 2016-10-11 19:19 - 2016-09-09 15:59 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\setbcdlocale.dll 2016-10-11 19:19 - 2016-09-09 15:59 - 00038912 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll 2016-10-11 19:19 - 2016-09-09 15:59 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll 2016-10-11 19:19 - 2016-09-09 15:42 - 00097792 _____ (Microsoft Corporation) C:\Windows\system32\appidpolicyconverter.exe 2016-10-11 19:19 - 2016-09-09 15:42 - 00050688 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\appid.sys 2016-10-11 19:19 - 2016-09-09 15:42 - 00029696 _____ (Microsoft Corporation) C:\Windows\system32\appidsvc.dll 2016-10-11 19:19 - 2016-09-09 15:42 - 00016896 _____ (Microsoft Corporation) C:\Windows\system32\appidcertstorecheck.exe 2016-10-11 19:19 - 2016-09-09 15:39 - 00262656 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe 2016-10-11 19:19 - 2016-09-09 15:37 - 00069632 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe 2016-10-11 19:19 - 2016-09-09 13:53 - 01406976 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll 2016-10-11 19:19 - 2016-09-09 13:53 - 00488448 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll 2016-10-11 19:19 - 2016-09-09 13:53 - 00478208 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll 2016-10-11 19:19 - 2016-09-09 13:53 - 00268800 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll 2016-10-11 19:19 - 2016-09-09 13:53 - 00213504 _____ (Microsoft Corporation) C:\Windows\system32\centel.dll 2016-10-11 19:19 - 2016-09-09 13:53 - 00184320 _____ (Microsoft Corporation) C:\Windows\system32\aepic.dll 2016-10-11 19:19 - 2016-09-09 13:53 - 00107008 _____ (Microsoft Corporation) C:\Windows\system32\acmigration.dll 2016-10-11 19:19 - 2016-09-08 18:34 - 00208896 _____ (Microsoft Corporation) C:\Windows\system32\WebClnt.dll 2016-10-11 19:19 - 2016-09-08 18:34 - 00087040 _____ (Microsoft Corporation) C:\Windows\system32\davclnt.dll 2016-10-11 19:19 - 2016-09-08 12:49 - 00117248 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxdav.sys 2016-10-11 19:19 - 2016-09-08 12:49 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dfsc.sys 2016-10-11 19:19 - 2016-08-16 16:47 - 00419640 _____ C:\Windows\system32\locale.nls 2016-10-11 19:19 - 2016-08-12 14:47 - 12574208 _____ (Microsoft Corporation) C:\Windows\system32\wmploc.DLL 2016-10-11 19:19 - 2016-08-12 14:47 - 11410432 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll 2016-10-11 19:19 - 2016-08-12 14:31 - 00008192 _____ (Microsoft Corporation) C:\Windows\system32\spwmp.dll 2016-10-11 19:19 - 2016-08-12 14:31 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\msdxm.ocx 2016-10-11 19:19 - 2016-08-12 14:31 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\dxmasf.dll 2016-10-11 19:19 - 2016-08-12 14:21 - 00437248 _____ (Microsoft Corporation) C:\Windows\system32\scavengeui.dll 2016-10-11 19:19 - 2016-08-06 13:15 - 01178112 _____ (Microsoft Corporation) C:\Windows\system32\WsmSvc.dll 2016-10-11 19:19 - 2016-08-06 13:15 - 00249344 _____ (Microsoft Corporation) C:\Windows\system32\WSManMigrationPlugin.dll 2016-10-11 19:19 - 2016-08-06 13:15 - 00214016 _____ (Microsoft Corporation) C:\Windows\system32\WsmWmiPl.dll 2016-10-11 19:19 - 2016-08-06 13:15 - 00146944 _____ (Microsoft Corporation) C:\Windows\system32\WsmAuto.dll 2016-10-11 19:19 - 2016-08-06 13:15 - 00054272 _____ (Microsoft Corporation) C:\Windows\system32\WsmRes.dll 2016-10-11 19:19 - 2016-08-06 12:53 - 00199168 _____ (Microsoft Corporation) C:\Windows\system32\WSManHTTPConfig.exe 2016-10-11 19:19 - 2016-08-06 12:53 - 00012288 _____ (Microsoft Corporation) C:\Windows\system32\wsmprovhost.exe 2016-10-11 19:19 - 2016-08-06 12:53 - 00010240 _____ (Microsoft Corporation) C:\Windows\system32\wsmplpxy.dll 2016-10-11 19:19 - 2016-07-22 12:51 - 00123904 _____ (Microsoft Corporation) C:\Windows\system32\poqexec.exe 2016-10-11 19:19 - 2016-06-14 13:25 - 00078568 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mountmgr.sys 2016-10-11 19:19 - 2016-06-14 13:21 - 03209216 _____ (Microsoft Corporation) C:\Windows\system32\mf.dll 2016-10-11 19:19 - 2016-06-14 13:21 - 01329664 _____ (Microsoft Corporation) C:\Windows\system32\quartz.dll 2016-10-11 19:19 - 2016-06-14 13:21 - 01176064 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll 2016-10-11 19:19 - 2016-06-14 13:21 - 01005056 _____ (Microsoft Corporation) C:\Windows\system32\cryptui.dll 2016-10-11 19:19 - 2016-06-14 13:21 - 00988160 _____ (Microsoft Corporation) C:\Windows\system32\drmv2clt.dll 2016-10-11 19:19 - 2016-06-14 13:21 - 00744960 _____ (Microsoft Corporation) C:\Windows\system32\blackbox.dll 2016-10-11 19:19 - 2016-06-14 13:21 - 00617984 _____ (Microsoft Corporation) C:\Windows\system32\wmdrmsdk.dll 2016-10-11 19:19 - 2016-06-14 13:21 - 00519680 _____ (Microsoft Corporation) C:\Windows\system32\qdvd.dll 2016-10-11 19:19 - 2016-06-14 13:21 - 00504320 _____ (Microsoft Corporation) C:\Windows\system32\msscp.dll 2016-10-11 19:19 - 2016-06-14 13:21 - 00489984 _____ (Microsoft Corporation) C:\Windows\system32\evr.dll 2016-10-11 19:19 - 2016-06-14 13:21 - 00474624 _____ (Microsoft Corporation) C:\Windows\system32\audiosrv.dll 2016-10-11 19:19 - 2016-06-14 13:21 - 00442368 _____ (Microsoft Corporation) C:\Windows\system32\AUDIOKSE.dll 2016-10-11 19:19 - 2016-06-14 13:21 - 00406016 _____ (Microsoft Corporation) C:\Windows\system32\drmmgrtn.dll 2016-10-11 19:19 - 2016-06-14 13:21 - 00374784 _____ (Microsoft Corporation) C:\Windows\system32\AudioEng.dll 2016-10-11 19:19 - 2016-06-14 13:21 - 00354816 _____ (Microsoft Corporation) C:\Windows\system32\mfplat.dll 2016-10-11 19:19 - 2016-06-14 13:21 - 00275968 _____ (Microsoft Corporation) C:\Windows\system32\EncDump.dll 2016-10-11 19:19 - 2016-06-14 13:21 - 00265216 _____ (Microsoft Corporation) C:\Windows\system32\msnetobj.dll 2016-10-11 19:19 - 2016-06-14 13:21 - 00195072 _____ (Microsoft Corporation) C:\Windows\system32\AudioSes.dll 2016-10-11 19:19 - 2016-06-14 13:21 - 00179200 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll 2016-10-11 19:19 - 2016-06-14 13:21 - 00157184 _____ (Microsoft Corporation) C:\Windows\system32\pcasvc.dll 2016-10-11 19:19 - 2016-06-14 13:21 - 00145920 _____ (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll 2016-10-11 19:19 - 2016-06-14 13:21 - 00106496 _____ (Microsoft Corporation) C:\Windows\system32\cryptnet.dll 2016-10-11 19:19 - 2016-06-14 13:21 - 00103424 _____ (Microsoft Corporation) C:\Windows\system32\mfps.dll 2016-10-11 19:19 - 2016-06-14 13:21 - 00080896 _____ (Microsoft Corporation) C:\Windows\system32\cryptsp.dll 2016-10-11 19:19 - 2016-06-14 13:21 - 00008704 _____ (Microsoft Corporation) C:\Windows\system32\pcaevts.dll 2016-10-11 19:19 - 2016-06-14 13:21 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\mferror.dll 2016-10-11 19:19 - 2016-06-14 13:17 - 00593920 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\PEAuth.sys 2016-10-11 19:19 - 2016-06-14 13:05 - 00100352 _____ (Microsoft Corporation) C:\Windows\system32\audiodg.exe 2016-10-11 19:19 - 2016-06-14 13:05 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\rrinstaller.exe 2016-10-11 19:19 - 2016-06-14 13:05 - 00023040 _____ (Microsoft Corporation) C:\Windows\system32\mfpmp.exe 2016-10-11 19:19 - 2016-06-14 13:00 - 00010752 _____ (Microsoft Corporation) C:\Windows\system32\msmmsp.dll 2016-10-11 19:19 - 2016-06-14 12:55 - 00009728 _____ (Microsoft Corporation) C:\Windows\system32\pcawrk.exe 2016-10-11 19:19 - 2016-06-14 12:55 - 00008192 _____ (Microsoft Corporation) C:\Windows\system32\pcalua.exe 2016-10-11 19:19 - 2016-06-14 12:54 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\pcadm.dll 2016-10-11 19:18 - 2016-08-29 13:12 - 12880384 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll 2016-10-11 19:18 - 2016-08-29 13:12 - 01806848 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll 2016-10-11 19:18 - 2016-08-29 13:12 - 01499648 _____ (Microsoft Corporation) C:\Windows\system32\ExplorerFrame.dll 2016-10-11 19:18 - 2016-08-29 12:55 - 02972672 _____ (Microsoft Corporation) C:\Windows\explorer.exe 2016-10-11 19:18 - 2016-08-16 18:27 - 00259072 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys 2016-10-11 19:18 - 2016-08-16 18:27 - 00076288 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbccgp.sys 2016-10-11 19:18 - 2016-08-16 18:26 - 00285696 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbport.sys 2016-10-11 19:18 - 2016-08-16 18:26 - 00046592 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbehci.sys 2016-10-11 19:18 - 2016-08-16 18:26 - 00024576 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbuhci.sys 2016-10-11 19:18 - 2016-08-16 18:26 - 00020480 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbohci.sys 2016-10-11 19:18 - 2016-08-16 18:26 - 00006016 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbd.sys 2016-10-09 13:27 - 2016-10-23 21:34 - 00000000 ____D C:\Users\Liris\Documents\GTA San Andreas User Files 2016-10-09 13:27 - 2016-10-09 13:27 - 00000000 ____D C:\Users\Liris\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\San Andreas Multiplayer 2016-10-09 13:17 - 2016-10-09 13:39 - 00000000 ____D C:\Users\Public\Documents\GTA San Andreas User Files 2016-10-09 13:14 - 2016-10-09 13:14 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Grand Theft Auto San Andreas 2016-10-09 13:07 - 2016-10-09 13:15 - 00000000 ____D C:\Users\Liris\Documents\GTA San Andreas 2016-10-09 13:04 - 2016-10-09 13:04 - 00098304 _____ (Sony DADC Austria AG.) C:\Windows\system32\CmdLineExt.dll 2016-10-09 12:50 - 2016-10-12 22:38 - 00000000 ____D C:\Users\Liris\Documents\GTA SAN ANDREASS 2016-10-09 12:50 - 2016-10-09 12:50 - 00001856 _____ C:\Users\Public\Desktop\GTA San Andreas.lnk 2016-10-09 12:45 - 2016-11-08 21:46 - 00000000 ____D C:\Program Files\Stiqidom 2016-10-09 12:45 - 2016-10-09 12:45 - 00000000 ____D C:\Users\Liris\AppData\Roaming\Anaderviole 2016-10-09 12:45 - 2016-10-09 12:45 - 00000000 ____D C:\Users\Liris\AppData\Local\Phimaphbekigh 2016-10-09 12:43 - 2016-10-09 12:47 - 00000000 ____D C:\Users\Liris\AppData\Roaming\DAEMON Tools Lite 2016-10-09 12:43 - 2016-10-09 12:45 - 00000000 ____D C:\Program Files\DAEMON Tools Lite 2016-10-09 12:43 - 2016-10-09 12:44 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DAEMON Tools Lite 2016-10-09 12:43 - 2016-10-09 12:43 - 00025104 _____ (Disc Soft Ltd) C:\Windows\system32\Drivers\dtlitescsibus.sys 2016-10-09 12:43 - 2016-10-09 12:43 - 00001896 _____ C:\Users\Public\Desktop\DAEMON Tools Lite.lnk 2016-10-09 12:43 - 2016-10-09 12:43 - 00000000 ____D C:\Users\Todos os Usuários\DAEMON Tools Lite 2016-10-09 12:43 - 2016-10-09 12:43 - 00000000 ____D C:\ProgramData\DAEMON Tools Lite ==================== Um Mês Modificados arquivos e pastas ======== (Se uma entrada for incluída na fixlist, o arquivo/pasta será movido.) 2016-11-08 21:55 - 2016-10-02 13:34 - 00000000 ____D C:\Users\Liris\AppData\Roaming\uTorrent 2016-11-08 21:47 - 2016-10-08 20:10 - 00000000 ____D C:\Users\Liris\AppData\Roaming\ZHP 2016-11-08 21:38 - 2016-10-08 20:10 - 00000000 ____D C:\Program Files\ZHPDiag 2016-11-08 21:38 - 2009-07-14 02:34 - 00020480 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2016-11-08 21:38 - 2009-07-14 02:34 - 00020480 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2016-11-08 21:05 - 2016-09-22 19:00 - 00001054 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job 2016-11-08 18:05 - 2016-09-22 19:00 - 00001050 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job 2016-11-08 17:24 - 2011-02-04 15:30 - 00006226 _____ C:\Windows\system32\PerfStringBackup.INI 2016-11-08 17:24 - 2009-07-14 06:31 - 00767944 _____ C:\Windows\system32\prfh0416.dat 2016-11-08 17:24 - 2009-07-14 06:31 - 00205036 _____ C:\Windows\system32\prfc0416.dat 2016-11-08 17:20 - 2016-09-29 12:04 - 00000000 _____ C:\Users\Public\Documents\temp.dat 2016-11-08 17:19 - 2016-04-30 18:49 - 00000000 __SHD C:\Users\Liris\IntelGraphicsProfiles 2016-11-08 17:18 - 2016-06-02 10:52 - 00000330 _____ C:\Windows\Tasks\Health-Check-auto.job 2016-11-08 17:18 - 2009-07-14 02:53 - 00000006 ____H C:\Windows\Tasks\SA.DAT 2016-11-06 13:41 - 2016-09-09 19:16 - 00614618 _____ C:\Windows\ntbtlog.txt 2016-11-05 22:17 - 2016-05-22 18:25 - 00000000 ____D C:\Users\Liris\.VirtualBox 2016-11-05 22:15 - 2016-05-22 19:12 - 00000000 ____D C:\Users\Liris\VirtualBox VMs 2016-11-05 15:59 - 2016-08-17 21:54 - 00000000 ____D C:\Users\Liris\AppData\Local\ElevatedDiagnostics 2016-11-03 22:15 - 2016-09-22 19:02 - 00002539 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk 2016-11-03 22:15 - 2016-09-22 19:02 - 00002469 _____ C:\Users\Public\Desktop\Google Chrome.lnk 2016-11-03 20:30 - 2009-07-14 00:37 - 00000000 ____D C:\Windows\system32\NDF 2016-10-29 18:57 - 2009-07-14 00:37 - 00000000 ____D C:\Windows\inf 2016-10-28 14:11 - 2016-04-30 18:42 - 00000000 ____D C:\Program Files\3DP Chip 2016-10-26 17:29 - 2016-04-29 10:43 - 00407720 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe 2016-10-24 18:44 - 2016-09-10 20:04 - 00002301 _____ C:\Users\Public\Desktop\Mozilla Firefox.lnk 2016-10-24 18:44 - 2016-09-10 20:04 - 00001435 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk 2016-10-24 18:44 - 2016-04-28 20:13 - 00001707 _____ C:\Users\Liris\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk 2016-10-23 23:37 - 2016-10-02 19:44 - 00072770 _____ C:\Windows\unins000.dat 2016-10-23 20:59 - 2016-10-05 23:31 - 00000000 ____D C:\Program Files\gta san andreas 2 2016-10-23 20:58 - 2016-04-30 18:40 - 00000000 ____D C:\Program Files\Rockstar Games 2016-10-21 22:19 - 2009-07-14 02:46 - 00001515 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk 2016-10-16 17:07 - 2016-05-01 12:30 - 00000000 ____D C:\Users\Todos os Usuários\BlueStacksSetup 2016-10-16 17:07 - 2016-05-01 12:30 - 00000000 ____D C:\ProgramData\BlueStacksSetup 2016-10-16 16:44 - 2009-07-14 00:37 - 00000000 __RHD C:\Users\Public\Libraries 2016-10-16 14:38 - 2016-05-07 13:14 - 00000000 ____D C:\Users\Liris\AppData\Local\BlueStacks 2016-10-13 13:04 - 2009-07-14 00:37 - 00000000 ____D C:\Windows\rescache 2016-10-12 22:24 - 2009-07-14 02:33 - 00408264 _____ C:\Windows\system32\FNTCACHE.DAT 2016-10-12 22:22 - 2016-09-03 16:12 - 00000000 ___SD C:\Windows\system32\CompatTel 2016-10-12 22:22 - 2016-09-03 16:12 - 00000000 ____D C:\Windows\system32\appraiser 2016-10-12 22:22 - 2009-07-14 00:37 - 00000000 ____D C:\Windows\system32\Dism 2016-10-12 16:36 - 2016-04-28 20:38 - 00000000 ____D C:\Users\Todos os Usuários\Microsoft Help 2016-10-09 12:50 - 2016-04-29 08:39 - 00000000 ___HD C:\Program Files\InstallShield Installation Information ==================== Arquivos na raiz de alguns diretórios ======= 2016-10-12 22:36 - 2004-01-06 06:43 - 0188416 _____ (Creative Technology Ltd) C:\Program Files\eax.dll 2016-10-12 22:36 - 2005-07-07 17:02 - 14386176 _____ () C:\Program Files\gta_sa.exe 2016-10-12 22:36 - 2005-06-10 16:34 - 0000360 _____ () C:\Program Files\gta_sa.reg 2016-10-12 22:36 - 2005-07-08 16:13 - 0002900 _____ () C:\Program Files\gta_sa.set 2016-08-29 11:25 - 2016-08-29 11:25 - 7065600 _____ () C:\Program Files\GUT77C0.tmp 2016-10-12 22:36 - 2005-07-08 21:56 - 0009900 _____ () C:\Program Files\KPS.gta.san.andreas.NFO 2016-10-12 22:36 - 2003-11-15 13:54 - 0036864 _____ () C:\Program Files\ogg.dll 2016-10-12 22:36 - 2004-05-18 15:19 - 0000197 _____ () C:\Program Files\stream.ini 2016-10-12 22:36 - 2003-11-16 06:48 - 1060864 _____ () C:\Program Files\vorbis.dll 2016-10-12 22:36 - 2003-11-16 06:48 - 0065536 _____ () C:\Program Files\vorbisFile.dll 2016-05-23 11:11 - 2016-05-23 11:12 - 2068582 _____ () C:\Users\Liris\AppData\Roaming\TLauncher.jar 2016-08-28 11:40 - 2016-08-28 11:40 - 0000046 _____ () C:\Users\Liris\AppData\Roaming\WB.CFG 2016-09-13 17:36 - 2016-09-13 17:36 - 0000017 _____ () C:\Users\Liris\AppData\Local\resmon.resmoncfg 2016-09-18 14:55 - 2016-09-18 14:55 - 0000000 _____ () C:\Users\Liris\AppData\Local\{6700DB95-97C7-40E8-8400-DF04762A5092} Arquivos para serem movidos ou deletados: ==================== C:\Users\Liris\AppData\Local\Temp\Java\SYSLIRIS-PC.exe ==================== Bamital & volsnap ====================== (Não há correção automática para arquivos que não passaram na verificação.) C:\Windows\explorer.exe => O arquivo é assinado digitalmente C:\Windows\system32\winlogon.exe => O arquivo é assinado digitalmente C:\Windows\system32\wininit.exe => O arquivo é assinado digitalmente C:\Windows\system32\svchost.exe => O arquivo é assinado digitalmente C:\Windows\system32\services.exe => O arquivo é assinado digitalmente C:\Windows\system32\User32.dll => O arquivo é assinado digitalmente C:\Windows\system32\userinit.exe => O arquivo é assinado digitalmente C:\Windows\system32\rpcss.dll => O arquivo é assinado digitalmente C:\Windows\system32\dnsapi.dll => O arquivo é assinado digitalmente C:\Windows\system32\Drivers\volsnap.sys => O arquivo é assinado digitalmente LastRegBack: 2016-11-05 15:51 ==================== Fim de FRST.txt ============================