Resultado do exame da Farbar Recovery Scan Tool (FRST) (x64) Versão: 22-01-2017 Executado por Chrnomeerr (administrador) em CHRNONOTE (23-01-2017 07:31:05) Executando a partir de C:\Users\Chrnomeerr\Desktop Perfis Carregados: Chrnomeerr (Perfis Disponíveis: Chrnomeerr) Platform: Windows 7 Ultimate Service Pack 1 (X64) Idioma: Português (Brasil) Internet Explorer Versão 9 (Navegador padrão: Chrome) Modo da Inicialização: Normal Tutorial da Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Processos (Whitelisted) ================= (Se uma entrada for incluída na fixlist, o processo será fechado. O arquivo não será movido.) (IDT, Inc.) C:\Program Files\IDT\WDM\stacsv64.exe (Intel Corporation) C:\Windows\System32\igfxCUIService.exe (AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe (Microsoft Corporation) C:\Windows\System32\wlanext.exe (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe (IDT, Inc.) C:\Program Files\IDT\WDM\sttray64.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Spotify Ltd) C:\Users\Chrnomeerr\AppData\Roaming\Spotify\SpotifyWebHelper.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe (Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe (Piriform Ltd) C:\Program Files\CCleaner\CCleaner64.exe (Popcorn Time) C:\Program Files (x86)\Popcorn Time\Updater.exe (Intel® Corporation) C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe (Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe (AVAST Software) C:\Program Files\AVAST Software\Avast\avastui.exe (Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe (Intel Corporation) C:\Windows\System32\igfxEM.exe (Intel Corporation) C:\Windows\System32\igfxHK.exe (Intel Corporation) C:\Windows\System32\igfxTray.exe (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe (HP Inc.) C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe (Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe (Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jucheck.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe ==================== Registro (Whitelisted) ==================== (Se uma entrada for incluída na fixlist, o ítem no Registro será restaurado para o padrão ou removido. O arquivo não será movido.) HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2899216 2012-03-26] (Synaptics Incorporated) HKLM\...\Run: [SysTrayApp] => C:\Program Files\IDT\WDM\sttray64.exe [1664000 2012-10-24] (IDT, Inc.) HKLM\...\Run: [StartCN] => "C:\Program Files\AMD\CNext\CNext\cnext.exe" atlogon HKLM\...\Run: [IAStorIcon] => C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [323040 2015-11-17] (Intel Corporation) HKLM-x32\...\Run: [USB3MON] => C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [291608 2012-01-27] (Intel Corporation) HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [587288 2016-09-22] (Oracle Corporation) HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [9080768 2016-12-12] (AVAST Software) HKU\S-1-5-21-243656826-1979405956-4233647683-1000\...\Run: [GoogleChromeAutoLaunch_3090D436547AC20B4FAA8C56E16C8D95] => C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [1104728 2016-12-08] (Google Inc.) HKU\S-1-5-21-243656826-1979405956-4233647683-1000\...\Run: [Spotify Web Helper] => C:\Users\Chrnomeerr\AppData\Roaming\Spotify\SpotifyWebHelper.exe [1444976 2016-12-22] (Spotify Ltd) HKU\S-1-5-21-243656826-1979405956-4233647683-1000\...\Run: [Spotify] => C:\Users\Chrnomeerr\AppData\Roaming\Spotify\Spotify.exe [7153264 2016-12-22] (Spotify Ltd) HKU\S-1-5-21-243656826-1979405956-4233647683-1000\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [9105112 2016-11-15] (Piriform Ltd) HKU\S-1-5-21-243656826-1979405956-4233647683-1000\...\Run: [AdobeBridge] => [X] HKU\S-1-5-21-243656826-1979405956-4233647683-1000\...\MountPoints2: {90517464-c05c-11e6-9b78-843497197409} - F:\autorun.exe ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2016-12-12] (AVAST Software) ==================== Internet (Whitelisted) ==================== (Se um ítem for incluído na fixlist, sendo um ítem do Registro, será removido ou restaurado para o padrão.) Tcpip\Parameters: [DhcpNameServer] 192.168.15.1 Tcpip\..\Interfaces\{7973F909-AB04-4C54-B4F7-37EEB7888606}: [DhcpNameServer] 192.168.15.1 Tcpip\..\Interfaces\{F4286EFB-6A28-46AB-B1AF-31F6BFEB4AAD}: [DhcpNameServer] 192.168.15.1 Internet Explorer: ================== HKU\S-1-5-21-243656826-1979405956-4233647683-1000\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://www.msn.com/pt-br/?ocid=iehp BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_111\bin\ssv.dll [2016-12-12] (Oracle Corporation) BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2016-12-12] (AVAST Software) BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_111\bin\jp2ssv.dll [2016-12-12] (Oracle Corporation) BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_111\bin\ssv.dll [2016-12-12] (Oracle Corporation) BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2016-12-12] (AVAST Software) BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_111\bin\jp2ssv.dll [2016-12-12] (Oracle Corporation) FireFox: ======== FF HKLM\...\Firefox\Extensions: [sp@avast.com] - C:\Program Files\AVAST Software\Avast\SafePrice\FF FF Extension: (Avast SafePrice) - C:\Program Files\AVAST Software\Avast\SafePrice\FF [2016-12-12] FF HKLM\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF FF Extension: (Avast Online Security) - C:\Program Files\AVAST Software\Avast\WebRep\FF [2016-12-12] FF HKLM-x32\...\Firefox\Extensions: [sp@avast.com] - C:\Program Files\AVAST Software\Avast\SafePrice\FF FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF FF Plugin: @java.com/DTPlugin,version=11.111.2 -> C:\Program Files\Java\jre1.8.0_111\bin\dtplugin\npDeployJava1.dll [2016-12-12] (Oracle Corporation) FF Plugin: @java.com/JavaPlugin,version=11.111.2 -> C:\Program Files\Java\jre1.8.0_111\bin\plugin2\npjp2.dll [2016-12-12] (Oracle Corporation) FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.50901.0\npctrl.dll [2016-08-31] ( Microsoft Corporation) FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect64.dll [Nenhum Arquivo] FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\Windows\SysWOW64\Adobe\Director\np32dsw_1225195.dll [2016-09-20] (Adobe Systems, Inc.) FF Plugin-x32: @Google.com/GoogleEarthPlugin -> C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll [2016-10-06] (Google) FF Plugin-x32: @java.com/DTPlugin,version=11.111.2 -> C:\Program Files (x86)\Java\jre1.8.0_111\bin\dtplugin\npDeployJava1.dll [2016-12-12] (Oracle Corporation) FF Plugin-x32: @java.com/JavaPlugin,version=11.111.2 -> C:\Program Files (x86)\Java\jre1.8.0_111\bin\plugin2\npjp2.dll [2016-12-12] (Oracle Corporation) FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.50901.0\npctrl.dll [2016-08-31] ( Microsoft Corporation) FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.32.7\npGoogleUpdate3.dll [2016-12-16] (Google Inc.) FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.32.7\npGoogleUpdate3.dll [2016-12-16] (Google Inc.) Chrome: ======= CHR HomePage: Default -> hxxp://www.google.com/ CHR StartupUrls: Default -> "","hxxp://www.google.com/","hxxp://www.youtube.com/","hxxp://www.mylucky123.com/?type=hp&ts=1478244612&z=1d5a587b99d995255f19710g8z1mbb4obz4zbqbgcg&from=che0812&uid=HitachiXHTS545050A7E380_TA85113VCEK9DNCEK9DNX","hxxp://www.amisites.com/?type=hp&ts=1478515276&z=9a14d73fc701f37d256037ag3z7m3bdw1g5w6o8m7w&from=archer1028&uid=HitachiXHTS545050A7E380_TA85113VCEK9DNCEK9DNX" CHR Session Restore: Default -> está habilitado. CHR Profile: C:\Users\Chrnomeerr\AppData\Local\Google\Chrome\User Data\Default [2017-01-23] CHR Extension: (Google Apresentações) - C:\Users\Chrnomeerr\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2016-12-12] CHR Extension: (FF15 Internet Car Driving) - C:\Users\Chrnomeerr\AppData\Local\Google\Chrome\User Data\Default\Extensions\acbomgcfbkgbbomhfclpojgceiglbnhl [2016-12-12] CHR Extension: (Google Docs) - C:\Users\Chrnomeerr\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2016-12-12] CHR Extension: (Google Drive) - C:\Users\Chrnomeerr\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2016-12-12] CHR Extension: (YouTube) - C:\Users\Chrnomeerr\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2016-12-12] CHR Extension: (Invite All (for Facebook)) - C:\Users\Chrnomeerr\AppData\Local\Google\Chrome\User Data\Default\Extensions\eopekjehpibhfpjjcokfmhcaeiclddih [2016-12-12] CHR Extension: (Planilhas do Google) - C:\Users\Chrnomeerr\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2016-12-12] CHR Extension: (Documentos Google off-line) - C:\Users\Chrnomeerr\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-12-12] CHR Extension: (AdBlock) - C:\Users\Chrnomeerr\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2017-01-02] CHR Extension: (Unlimited Free VPN - Hola) - C:\Users\Chrnomeerr\AppData\Local\Google\Chrome\User Data\Default\Extensions\gkojfkhlekighikafcpjkiklfbnlmeio [2017-01-17] CHR Extension: (Avast Online Security) - C:\Users\Chrnomeerr\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2016-12-12] CHR Extension: (nCage) - C:\Users\Chrnomeerr\AppData\Local\Google\Chrome\User Data\Default\Extensions\hnbmfljfohghaepamnfokgggaejlmfol [2016-12-12] CHR Extension: (Twitch Now) - C:\Users\Chrnomeerr\AppData\Local\Google\Chrome\User Data\Default\Extensions\nlmbdmpjmlijibeockamioakdpmhjnpk [2016-12-12] CHR Extension: (Pagamentos da Chrome Web Store) - C:\Users\Chrnomeerr\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2017-01-20] CHR Extension: (Meu tema do Chrome) - C:\Users\Chrnomeerr\AppData\Local\Google\Chrome\User Data\Default\Extensions\oehpjpccmlcalbenfhnacjeocbjdonic [2016-12-12] CHR Extension: (Gmail) - C:\Users\Chrnomeerr\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2016-12-12] CHR Extension: (Chrome Media Router) - C:\Users\Chrnomeerr\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2016-12-12] CHR HKLM-x32\...\Chrome\Extension: [eofcbnmajmjmplflapaojjnihcjkigck] - hxxps://clients2.google.com/service/update2/crx CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - hxxps://clients2.google.com/service/update2/crx ==================== Serviços (Whitelisted) ==================== (Se uma entrada for incluída na fixlist, será removida do Registro. O arquivo não será movido, a menos que seja colocado separadamente.) R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [197128 2016-12-12] (AVAST Software) R2 HPSupportSolutionsFrameworkService; C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe [31776 2016-12-07] (HP Inc.) R2 IAStorDataMgrSvc; C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [19424 2015-11-17] (Intel Corporation) R2 igfxCUIService1.0.0.0; C:\Windows\system32\igfxCUIService.exe [319080 2015-06-04] (Intel Corporation) S3 MyWiFiDHCPDNS; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [268192 2015-12-02] () R2 STacSV; C:\Program Files\IDT\WDM\STacSV64.exe [327680 2012-10-24] (IDT, Inc.) [Arquivo não assinado] R2 Update service; C:\Program Files (x86)\Popcorn Time\Updater.exe [339968 2016-08-26] (Popcorn Time) [Arquivo não assinado] S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2009-07-13] (Microsoft Corporation) R2 ZeroConfigService; C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe [3832224 2015-12-02] (Intel® Corporation) ===================== Drivers (Whitelisted) ====================== (Se uma entrada for incluída na fixlist, será removida do Registro. O arquivo não será movido, a menos que seja colocado separadamente.) S3 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [37656 2016-12-12] (AVAST Software) R1 aswKbd; C:\Windows\system32\drivers\aswKbd.sys [37144 2016-12-12] (AVAST Software) R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [108816 2016-12-12] (AVAST Software) R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [103064 2016-12-12] (AVAST Software) R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [74544 2016-12-12] (AVAST Software) R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [969184 2016-12-12] (AVAST Software) R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [513632 2016-12-12] (AVAST Software) R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [163416 2016-12-12] (AVAST Software) R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [293352 2016-12-12] (AVAST Software) R0 iaStorF; C:\Windows\System32\DRIVERS\iaStorF.sys [31712 2015-11-24] (Intel Corporation) R3 NETwNs64; C:\Windows\System32\DRIVERS\NETwsw01.sys [11534096 2015-05-04] (Intel Corporation) S3 semav6msr64; C:\Windows\system32\drivers\semav6msr64.sys [21984 2016-10-18] () R3 SmbDrvIntel; C:\Windows\System32\DRIVERS\Smb_driver_Intel.sys [27408 2012-03-26] (Synaptics Incorporated) S3 VGPU; System32\drivers\rdvgkmd.sys [X] ==================== NetSvcs (Whitelisted) =================== (Se uma entrada for incluída na fixlist, será removida do Registro. O arquivo não será movido, a menos que seja colocado separadamente.) ==================== Três Meses Criados arquivos e pastas ======== (Se uma entrada for incluída na fixlist, o arquivo/pasta será movido.) 2017-01-23 07:31 - 2017-01-23 07:31 - 00016659 _____ C:\Users\Chrnomeerr\Desktop\FRST.txt 2017-01-23 07:28 - 2017-01-23 07:31 - 00000000 ____D C:\FRST 2017-01-23 07:28 - 2017-01-23 07:28 - 02420736 _____ (Farbar) C:\Users\Chrnomeerr\Desktop\FRST64.exe 2017-01-23 07:23 - 2016-07-08 10:41 - 00398651 _____ (SoftArchive.la) C:\Users\Chrnomeerr\Desktop\DLLSuitePortable.exe 2017-01-23 07:18 - 2016-09-30 11:50 - 00023232 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-runtime-l1-1-0.dll 2017-01-23 07:06 - 2017-01-23 07:08 - 76026400 _____ C:\Users\Chrnomeerr\Desktop\WacomTablet_6.3.20-5.exe 2017-01-23 04:15 - 2017-01-23 04:15 - 00000000 ____D C:\Users\Todos os Usuários\CELSYS 2017-01-23 04:15 - 2017-01-23 04:15 - 00000000 ____D C:\ProgramData\CELSYS 2017-01-23 04:14 - 2017-01-23 04:14 - 00000000 ____D C:\Users\Chrnomeerr\AppData\Roaming\Smith Micro 2017-01-23 04:11 - 2017-01-23 04:11 - 00000000 ____D C:\Users\Chrnomeerr\Documents\Smith Micro 2017-01-23 04:11 - 2017-01-23 04:11 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Manga Studio EX 4.0 2017-01-23 04:09 - 1998-10-29 16:45 - 00306688 _____ (InstallShield Software Corporation) C:\Windows\IsUninst.exe 2017-01-23 00:52 - 2017-01-23 00:52 - 00002661 _____ C:\Users\Chrnomeerr\AppData\Roaming\Microsoft\Windows\Start Menu\µTorrent.lnk 2017-01-23 00:51 - 2017-01-23 04:24 - 00000000 ____D C:\Users\Chrnomeerr\AppData\Roaming\uTorrent 2017-01-21 18:17 - 2017-01-21 18:17 - 00000581 _____ C:\Users\Chrnomeerr\Desktop\Recado Facebook desenho frozen.txt 2017-01-17 04:55 - 2017-01-23 04:58 - 00000000 ____D C:\Users\Chrnomeerr\Desktop\Referencias Silent Manga 2017-01-15 15:50 - 2017-01-15 15:50 - 00000000 ____D C:\Users\Chrnomeerr\AppData\LocalLow\Google 2017-01-15 15:50 - 2017-01-15 15:50 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Earth 2017-01-11 21:44 - 2017-01-12 22:10 - 00000000 ____D C:\Users\Chrnomeerr\Desktop\Desenho do Frozen 2017-01-08 15:53 - 2017-01-08 15:53 - 00000000 ____D C:\Users\Todos os Usuários\.mono 2017-01-08 15:53 - 2017-01-08 15:53 - 00000000 ____D C:\Users\Chrnomeerr\AppData\Roaming\.mono 2017-01-08 15:53 - 2017-01-08 15:53 - 00000000 ____D C:\Users\Chrnomeerr\AppData\LocalLow\Blizzard Entertainment 2017-01-08 15:53 - 2017-01-08 15:53 - 00000000 ____D C:\Users\Chrnomeerr\AppData\Local\Blizzard 2017-01-08 15:53 - 2017-01-08 15:53 - 00000000 ____D C:\ProgramData\.mono 2017-01-08 15:52 - 2017-01-08 15:52 - 00000519 _____ C:\Users\Public\Desktop\Hearthstone.lnk 2017-01-08 15:52 - 2017-01-08 15:52 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Hearthstone 2017-01-08 15:34 - 2017-01-09 00:31 - 00000000 ____D C:\Users\Chrnomeerr\AppData\Local\Battle.net 2017-01-08 15:34 - 2017-01-08 15:34 - 00000495 _____ C:\Users\Public\Desktop\Battle.net.lnk 2017-01-08 15:34 - 2017-01-08 15:34 - 00000000 ____D C:\Users\Todos os Usuários\Blizzard Entertainment 2017-01-08 15:34 - 2017-01-08 15:34 - 00000000 ____D C:\Users\Chrnomeerr\AppData\Local\Blizzard Entertainment 2017-01-08 15:34 - 2017-01-08 15:34 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Battle.net 2017-01-08 15:34 - 2017-01-08 15:34 - 00000000 ____D C:\ProgramData\Blizzard Entertainment 2017-01-08 15:32 - 2017-01-08 15:58 - 00000000 ____D C:\Users\Chrnomeerr\AppData\Roaming\Battle.net 2017-01-08 15:31 - 2017-01-08 15:32 - 00000000 ____D C:\Users\Todos os Usuários\Battle.net 2017-01-08 15:31 - 2017-01-08 15:32 - 00000000 ____D C:\ProgramData\Battle.net 2016-12-30 14:58 - 2017-01-03 01:22 - 00001431 _____ C:\Users\Chrnomeerr\Desktop\PopcornTime Downloads.lnk 2016-12-30 00:14 - 2016-12-30 14:57 - 00000000 ____D C:\Users\Chrnomeerr\Downloads\PopcornTime 2016-12-30 00:14 - 2016-12-30 00:14 - 00000000 ____D C:\Users\Chrnomeerr\AppData\Local\PopcornTime 2016-12-30 00:13 - 2016-12-30 00:13 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Popcorn Time 2016-12-30 00:13 - 2016-12-30 00:13 - 00000000 ____D C:\Program Files (x86)\Popcorn Time 2016-12-27 13:48 - 2016-12-27 13:48 - 00000144 _____ C:\Windows\system32\{A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat 2016-12-26 21:00 - 2016-12-26 21:00 - 00000000 ____D C:\Users\Chrnomeerr\AppData\Roaming\WinRAR 2016-12-24 18:00 - 2016-12-28 13:02 - 00000000 ____D C:\Users\Chrnomeerr\Desktop\Travel Theme 2016-12-22 18:16 - 2016-12-22 18:16 - 00046061 _____ C:\Users\Chrnomeerr\Desktop\15624061_1199290793498620_7327005587529531392_n.jpg 2016-12-17 09:52 - 2016-05-12 16:39 - 00064000 _____ (Khronos Group) C:\Windows\system32\OpenCL.DLL 2016-12-17 09:52 - 2016-05-12 16:39 - 00060416 _____ (Khronos Group) C:\Windows\SysWOW64\OpenCL.DLL 2016-12-17 09:44 - 2016-12-17 09:44 - 00000000 ___HD C:\Windows\system32\WLANProfiles 2016-12-17 09:44 - 2016-12-17 09:44 - 00000000 ____D C:\Users\Todos os Usuários\Roaming 2016-12-17 09:44 - 2016-12-17 09:44 - 00000000 ____D C:\Users\Public\Roaming 2016-12-17 09:44 - 2016-12-17 09:44 - 00000000 ____D C:\Users\Default\Roaming 2016-12-17 09:44 - 2016-12-17 09:44 - 00000000 ____D C:\Users\Chrnomeerr\Roaming 2016-12-17 09:44 - 2016-12-17 09:44 - 00000000 ____D C:\Users\Chrnomeerr\AppData\Roaming\Intel 2016-12-17 09:44 - 2016-12-17 09:44 - 00000000 ____D C:\ProgramData\Roaming 2016-12-17 09:43 - 2016-12-17 09:43 - 00000000 ____D C:\Users\Todos os Usuários\Intel.sav 2016-12-17 09:43 - 2016-12-17 09:43 - 00000000 ____D C:\Users\Chrnomeerr\Intel.sav 2016-12-17 09:43 - 2016-12-17 09:43 - 00000000 ____D C:\ProgramData\Intel.sav 2016-12-17 09:43 - 2016-12-17 09:43 - 00000000 ____D C:\Program Files\Common Files\Intel 2016-12-17 09:43 - 2016-12-17 09:43 - 00000000 ____D C:\Program Files (x86)\Cisco 2016-12-17 09:41 - 2016-12-17 09:41 - 00000000 ___HD C:\system.sav 2016-12-17 09:30 - 2017-01-23 07:16 - 00000000 __SHD C:\Config.Msi 2016-12-16 21:49 - 2016-12-16 21:49 - 00000000 ____H C:\Windows\system32\Drivers\Msft_User_WpdMtpDr_01_09_00.Wdf 2016-12-16 15:50 - 2017-01-23 04:28 - 00000000 ____D C:\Users\Chrnomeerr\AppData\Roaming\MPC-HC 2016-12-13 10:42 - 2016-12-13 10:42 - 00000000 ____D C:\Users\Todos os Usuários\Hewlett-Packard 2016-12-13 10:42 - 2016-12-13 10:42 - 00000000 ____D C:\ProgramData\Hewlett-Packard 2016-12-12 13:57 - 2016-12-12 13:57 - 01915373 _____ C:\Users\Chrnomeerr\Desktop\better_tomorrow_by_yuumei-daa3fwv.jpg 2016-12-12 13:54 - 2016-12-12 13:54 - 01220715 _____ C:\Users\Chrnomeerr\Desktop\take_in_the_sky_by_yuumei-dar9m8b.jpg 2016-12-12 13:06 - 2016-12-12 13:06 - 00000000 ____D C:\Users\Chrnomeerr\Documents\League of Legends 2016-12-12 11:23 - 2016-12-12 11:23 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Cheat Engine 6.6 2016-12-12 11:23 - 2016-12-12 11:23 - 00000000 ____D C:\Program Files (x86)\Cheat Engine 6.6 2016-12-12 11:21 - 2016-12-12 11:21 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\League of Legends 2016-12-12 11:17 - 2016-12-12 11:17 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel 2016-12-12 11:17 - 2016-12-12 11:17 - 00000000 ____D C:\Users\Chrnomeerr\AppData\Roaming\Intel Corporation 2016-12-12 11:16 - 2016-12-12 11:16 - 00000000 ____D C:\Users\Chrnomeerr\Intel 2016-12-12 11:04 - 2016-12-24 15:26 - 00016314 _____ C:\Windows\system32\results.xml 2016-12-12 11:04 - 2016-12-24 15:25 - 00000451 _____ C:\Windows\system32\{F33C3B9B-72AF-418A-B3FD-560646F7CDA2}.bat 2016-12-12 11:01 - 2017-01-22 15:55 - 02364959 ____H C:\Users\Chrnomeerr\AppData\Local\IconCache.db 2016-12-12 10:58 - 2016-12-12 10:59 - 00524288 ___SH C:\Users\Chrnomeerr\ntuser.dat{9f086293-c06a-11e6-af77-a77f287cad68}.TMContainer00000000000000000002.regtrans-ms 2016-12-12 10:58 - 2016-12-12 10:59 - 00524288 ___SH C:\Users\Chrnomeerr\ntuser.dat{9f086293-c06a-11e6-af77-a77f287cad68}.TMContainer00000000000000000001.regtrans-ms 2016-12-12 10:58 - 2016-12-12 10:59 - 00065536 ___SH C:\Users\Chrnomeerr\ntuser.dat{9f086293-c06a-11e6-af77-a77f287cad68}.TM.blf 2016-12-12 10:55 - 2015-06-15 17:08 - 00753368 _____ (Realsil Semiconductor Corporation) C:\Windows\system32\Drivers\RtsPer.sys 2016-12-12 10:55 - 2015-06-03 09:47 - 00313048 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\Drivers\RtsBaStor.sys 2016-12-12 10:55 - 2015-06-02 18:04 - 00365272 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\Drivers\RtsPStor.sys 2016-12-12 10:55 - 2015-06-01 17:44 - 00301784 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\Drivers\RtsP2Stor.sys 2016-12-12 10:55 - 2015-05-27 14:13 - 00402136 _____ (Realsil Semiconductor Corporation) C:\Windows\system32\Drivers\RtsUer.sys 2016-12-12 10:53 - 2016-12-12 10:53 - 00000000 ____D C:\Users\Todos os Usuários\SlimWare Utilities, Inc 2016-12-12 10:53 - 2016-12-12 10:53 - 00000000 ____D C:\ProgramData\SlimWare Utilities, Inc 2016-12-12 10:50 - 2016-12-12 10:50 - 00524288 ___SH C:\Users\Chrnomeerr\ntuser.dat{9308f698-c069-11e6-a218-84a6c8ed3db5}.TMContainer00000000000000000002.regtrans-ms 2016-12-12 10:50 - 2016-12-12 10:50 - 00524288 ___SH C:\Users\Chrnomeerr\ntuser.dat{9308f698-c069-11e6-a218-84a6c8ed3db5}.TMContainer00000000000000000001.regtrans-ms 2016-12-12 10:50 - 2016-12-12 10:50 - 00065536 ___SH C:\Users\Chrnomeerr\ntuser.dat{9308f698-c069-11e6-a218-84a6c8ed3db5}.TM.blf 2016-12-12 10:48 - 2016-12-27 13:27 - 00000000 ____D C:\Windows\Minidump 2016-12-12 10:48 - 2016-12-12 10:48 - 00524288 ___SH C:\Users\Chrnomeerr\NTUSER.DAT{34e5991f-c069-11e6-8a87-84a6c8ed3db5}.TMContainer00000000000000000002.regtrans-ms 2016-12-12 10:48 - 2016-12-12 10:48 - 00524288 ___SH C:\Users\Chrnomeerr\NTUSER.DAT{34e5991f-c069-11e6-8a87-84a6c8ed3db5}.TMContainer00000000000000000001.regtrans-ms 2016-12-12 10:48 - 2016-12-12 10:48 - 00065536 ___SH C:\Users\Chrnomeerr\NTUSER.DAT{34e5991f-c069-11e6-8a87-84a6c8ed3db5}.TM.blf 2016-12-12 10:45 - 2017-01-22 15:56 - 00000000 __SHD C:\Users\Chrnomeerr\IntelGraphicsProfiles 2016-12-12 10:45 - 2016-12-12 10:45 - 00000000 _____ C:\Windows\ativpsrm.bin 2016-12-12 10:39 - 2016-12-12 10:39 - 00002802 _____ C:\Windows\System32\Tasks\CCleanerSkipUAC 2016-12-12 10:39 - 2016-12-12 10:39 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner 2016-12-12 10:39 - 2016-12-12 10:39 - 00000000 ____D C:\Program Files\CCleaner 2016-12-12 10:36 - 2016-12-12 10:36 - 00000000 ____D C:\Users\Chrnomeerr\AppData\Roaming\PlaysTV 2016-12-12 10:33 - 2016-12-12 10:33 - 00000000 ____D C:\Users\Chrnomeerr\AppData\Roaming\library_dir 2016-12-12 10:33 - 2016-12-12 10:33 - 00000000 ____D C:\Program Files (x86)\Raptr Inc 2016-12-12 10:32 - 2016-12-17 09:38 - 00000000 ____D C:\Users\Chrnomeerr\AppData\Roaming\Raptr 2016-12-12 10:32 - 2016-12-12 10:32 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AMD Settings 2016-12-12 10:31 - 2016-12-17 09:30 - 00000000 ____D C:\Program Files\AMD 2016-12-12 10:29 - 2016-12-12 10:29 - 00000000 ____D C:\Users\Todos os Usuários\IntelDLM 2016-12-12 10:29 - 2016-12-12 10:29 - 00000000 ____D C:\ProgramData\IntelDLM 2016-12-12 10:25 - 2016-12-17 09:41 - 00000000 ____D C:\Windows\System32\Tasks\Intel 2016-12-12 10:25 - 2016-12-17 09:41 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel Driver Update Utility 2016-12-12 10:25 - 2016-12-17 09:41 - 00000000 ____D C:\Program Files (x86)\Intel Driver Update Utility 2016-12-12 10:25 - 2016-12-12 10:25 - 00000000 ____D C:\Users\Chrnomeerr\AppData\Local\Intel 2016-12-12 10:24 - 2017-01-23 07:16 - 00000000 ____D C:\Users\Todos os Usuários\Package Cache 2016-12-12 10:24 - 2017-01-23 07:16 - 00000000 ____D C:\ProgramData\Package Cache 2016-12-12 10:24 - 2016-12-17 09:43 - 00000000 ____D C:\Users\Todos os Usuários\Intel 2016-12-12 10:24 - 2016-12-17 09:43 - 00000000 ____D C:\ProgramData\Intel 2016-12-12 10:24 - 2016-12-17 09:43 - 00000000 ____D C:\Program Files\Intel 2016-12-12 10:24 - 2016-12-12 10:24 - 00000000 ____D C:\Program Files\Intel Driver Update Utility 2016-12-12 10:24 - 2016-10-18 17:14 - 00021984 _____ C:\Windows\system32\Drivers\semav6msr64.sys 2016-12-12 10:18 - 2016-12-12 10:18 - 00000000 ____D C:\Users\Todos os Usuários\Synaptics 2016-12-12 10:18 - 2016-12-12 10:18 - 00000000 ____D C:\Users\Chrnomeerr\AppData\Roaming\Synaptics 2016-12-12 10:18 - 2016-12-12 10:18 - 00000000 ____D C:\ProgramData\Synaptics 2016-12-12 10:17 - 2016-12-12 10:17 - 00000000 ____D C:\Program Files (x86)\SP66773 2016-12-12 10:09 - 2016-12-12 10:09 - 00000000 ____D C:\Users\Todos os Usuários\Riot Games 2016-12-12 10:09 - 2016-12-12 10:09 - 00000000 ____D C:\ProgramData\Riot Games 2016-12-12 10:08 - 2016-12-12 10:08 - 00000000 ____D C:\Riot Games 2016-12-12 10:08 - 2008-07-31 10:41 - 00068616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_1.dll 2016-12-12 10:08 - 2008-07-31 10:40 - 00509448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_2.dll 2016-12-12 10:08 - 2008-07-12 08:18 - 03851784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_39.dll 2016-12-12 10:08 - 2008-07-12 08:18 - 01493528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_39.dll 2016-12-12 10:08 - 2008-07-12 08:18 - 00467984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_39.dll 2016-12-12 10:06 - 2016-12-12 11:21 - 00000000 ____D C:\Users\Chrnomeerr\AppData\Roaming\Riot Games 2016-12-12 09:57 - 2017-01-23 07:16 - 00000000 __SHD C:\System Volume Information 2016-12-12 09:57 - 2016-12-12 10:40 - 00000000 ____D C:\Windows\Panther 2016-12-12 09:56 - 2016-12-12 09:56 - 00000000 ____D C:\Windows\system32\SRSLabs 2016-12-12 09:56 - 2016-12-12 09:56 - 00000000 ____D C:\Program Files\IDT 2016-12-12 09:56 - 2012-10-24 22:53 - 08013312 _____ (IDT, Inc.) C:\Windows\system32\IDTNHP.dll 2016-12-12 09:56 - 2012-10-24 22:53 - 08003072 _____ (IDT, Inc.) C:\Windows\system32\IDTNGUI.exe 2016-12-12 09:56 - 2012-10-24 22:53 - 06102016 _____ (IDT, Inc.) C:\Windows\system32\stlang64.dll 2016-12-12 09:56 - 2012-10-24 22:53 - 02216448 _____ (IDT, Inc.) C:\Windows\system32\IDTNX.dll 2016-12-12 09:56 - 2012-10-24 22:53 - 02189312 _____ (IDT, Inc.) C:\Windows\system32\stapo64.dll 2016-12-12 09:56 - 2012-10-24 22:53 - 01821184 _____ (IDT, Inc.) C:\Windows\system32\IDTNC64.cpl 2016-12-12 09:56 - 2012-10-24 22:53 - 01664000 _____ (IDT, Inc.) C:\Windows\sttray64.exe 2016-12-12 09:56 - 2012-10-24 22:53 - 00672256 ____N (IDT, Inc.) C:\Windows\system32\stapi64.dll 2016-12-12 09:56 - 2012-10-24 22:53 - 00543744 _____ (IDT, Inc.) C:\Windows\system32\Drivers\stwrt64.sys 2016-12-12 09:56 - 2012-10-24 22:53 - 00499200 _____ (IDT, Inc.) C:\Windows\system32\stcplx64.dll 2016-12-12 09:56 - 2012-10-24 22:53 - 00256000 _____ (IDT, Inc.) C:\Windows\system32\st646433.dll 2016-12-12 09:56 - 2012-10-24 22:53 - 00253952 _____ (IDT, Inc.) C:\Windows\system32\IDTNJ.exe 2016-12-12 09:56 - 2012-10-24 22:53 - 00224256 _____ (IDT, Inc.) C:\Windows\system32\HPToneCtrls64.dll 2016-12-12 09:56 - 2012-02-07 04:55 - 00042461 _____ C:\Windows\system32\Elise.xml 2016-12-12 09:56 - 2011-05-17 17:25 - 00464384 _____ (SRS Labs, Inc.) C:\Windows\system32\slapoi64.dll 2016-12-12 09:56 - 2009-05-01 05:50 - 00013942 _____ C:\Windows\system32\nbspkrsbeats.ico 2016-12-12 09:56 - 2009-05-01 04:06 - 00069462 _____ C:\Windows\system32\hpbeats.ico 2016-12-12 09:56 - 2007-12-19 06:40 - 00003774 _____ C:\Windows\system32\bltinmic.ico 2016-12-12 09:53 - 2016-12-12 11:17 - 01651176 _____ C:\Windows\SysWOW64\PerfStringBackup.INI 2016-12-12 09:53 - 2016-12-12 09:53 - 00000000 ____D C:\Users\Chrnomeerr\AppData\Local\Hewlett-Packard 2016-12-12 09:52 - 2016-12-12 09:52 - 00000000 ____D C:\Windows\Migration 2016-12-12 09:52 - 2016-12-12 09:52 - 00000000 ____D C:\Program Files (x86)\Microsoft.NET 2016-12-12 09:51 - 2016-12-12 09:51 - 00000000 ____D C:\Windows\System32\Tasks\Hewlett-Packard 2016-12-12 09:50 - 2016-12-12 09:50 - 00000000 ____D C:\Program Files (x86)\Hewlett-Packard 2016-12-12 09:44 - 2016-12-12 09:44 - 00000000 ____D C:\Users\Chrnomeerr\AppData\Roaming\AVAST Software 2016-12-12 09:44 - 2016-12-12 09:44 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVAST Software 2016-12-12 09:43 - 2017-01-12 10:57 - 00004180 _____ C:\Windows\System32\Tasks\avast! Emergency Update 2016-12-12 09:43 - 2016-12-12 11:50 - 00000000 ____D C:\Windows\System32\Tasks\AVAST Software 2016-12-12 09:43 - 2016-12-12 09:44 - 00969184 _____ (AVAST Software) C:\Windows\system32\Drivers\aswsnx.sys 2016-12-12 09:43 - 2016-12-12 09:44 - 00513632 _____ (AVAST Software) C:\Windows\system32\Drivers\aswsp.sys 2016-12-12 09:43 - 2016-12-12 09:44 - 00293352 _____ (AVAST Software) C:\Windows\system32\Drivers\aswvmm.sys 2016-12-12 09:43 - 2016-12-12 09:43 - 00992960 _____ (Microsoft Corporation) C:\Windows\system32\ucrtbase.dll 2016-12-12 09:43 - 2016-12-12 09:43 - 00921280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ucrtbase.dll 2016-12-12 09:43 - 2016-12-12 09:43 - 00391496 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe 2016-12-12 09:43 - 2016-12-12 09:43 - 00163416 _____ (AVAST Software) C:\Windows\system32\Drivers\aswStm.sys 2016-12-12 09:43 - 2016-12-12 09:43 - 00108816 _____ (AVAST Software) C:\Windows\system32\Drivers\aswMonFlt.sys 2016-12-12 09:43 - 2016-12-12 09:43 - 00103064 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRdr2.sys 2016-12-12 09:43 - 2016-12-12 09:43 - 00074544 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRvrt.sys 2016-12-12 09:43 - 2016-12-12 09:43 - 00053208 _____ (AVAST Software) C:\Windows\avastSS.scr 2016-12-12 09:43 - 2016-12-12 09:43 - 00037656 _____ (AVAST Software) C:\Windows\system32\Drivers\aswHwid.sys 2016-12-12 09:43 - 2016-12-12 09:43 - 00037144 _____ (AVAST Software) C:\Windows\system32\Drivers\aswKbd.sys 2016-12-12 09:43 - 2016-12-12 09:43 - 00000000 ____D C:\Users\Todos os Usuários\AVAST Software 2016-12-12 09:43 - 2016-12-12 09:43 - 00000000 ____D C:\ProgramData\AVAST Software 2016-12-12 09:43 - 2016-12-12 09:43 - 00000000 ____D C:\Program Files\Common Files\AV 2016-12-12 09:43 - 2016-12-12 09:43 - 00000000 ____D C:\Program Files\AVAST Software 2016-12-12 09:39 - 2016-12-12 09:39 - 00002990 _____ C:\Windows\System32\Tasks\elbyExecuteWithUAC 2016-12-12 09:39 - 2016-12-12 09:39 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Elaborate Bytes 2016-12-12 09:39 - 2016-12-12 09:39 - 00000000 ____D C:\Program Files (x86)\Elaborate Bytes 2016-12-12 09:36 - 2017-01-22 16:00 - 00000000 ____D C:\Users\Chrnomeerr\AppData\Roaming\Spotify 2016-12-12 09:36 - 2017-01-22 16:00 - 00000000 ____D C:\Users\Chrnomeerr\AppData\Local\Spotify 2016-12-12 09:36 - 2016-12-12 09:36 - 00001778 _____ C:\Users\Chrnomeerr\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Spotify.lnk 2016-12-12 09:36 - 2016-12-12 09:36 - 00000000 ____D C:\Users\Chrnomeerr\AppData\Local\CEF 2016-12-12 09:35 - 2017-01-23 00:52 - 00000420 _____ C:\Windows\Tasks\SlimDrivers Startup.job 2016-12-12 09:35 - 2017-01-22 15:56 - 00002856 _____ C:\Windows\System32\Tasks\SlimDrivers Startup 2016-12-12 09:35 - 2016-12-12 09:35 - 00003172 _____ C:\Windows\System32\Tasks\klcp_update 2016-12-12 09:35 - 2016-12-12 09:35 - 00000000 ____D C:\Users\Chrnomeerr\AppData\Local\SlimWare Utilities Inc 2016-12-12 09:35 - 2016-12-12 09:35 - 00000000 ____D C:\Users\Chrnomeerr\AppData\Local\Programs 2016-12-12 09:35 - 2016-12-12 09:35 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SlimDrivers 2016-12-12 09:35 - 2016-12-12 09:35 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\K-Lite Codec Pack 2016-12-12 09:35 - 2016-12-12 09:35 - 00000000 ____D C:\Program Files (x86)\SlimDrivers 2016-12-12 09:35 - 2016-12-12 09:35 - 00000000 ____D C:\Program Files (x86)\K-Lite Codec Pack 2016-12-12 09:33 - 2016-12-12 09:33 - 00000000 ____D C:\Windows\SysWOW64\Adobe 2016-12-12 09:33 - 2016-12-12 09:33 - 00000000 ____D C:\Users\Chrnomeerr\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR 2016-12-12 09:33 - 2016-12-12 09:33 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR 2016-12-12 09:33 - 2016-12-12 09:33 - 00000000 ____D C:\Program Files\WinRAR 2016-12-12 09:33 - 2016-12-12 09:32 - 00110144 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge-64.dll 2016-12-12 09:32 - 2016-12-12 09:32 - 00000000 ____D C:\Program Files\Java 2016-12-12 09:31 - 2016-12-12 09:33 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java 2016-12-12 09:31 - 2016-12-12 09:31 - 00097856 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll 2016-12-12 09:31 - 2016-12-12 09:31 - 00000000 ____D C:\Users\Chrnomeerr\AppData\Roaming\Sun 2016-12-12 09:31 - 2016-12-12 09:31 - 00000000 ____D C:\Users\Chrnomeerr\AppData\LocalLow\Sun 2016-12-12 09:30 - 2016-12-12 09:30 - 00000000 ____D C:\Users\Todos os Usuários\Oracle 2016-12-12 09:30 - 2016-12-12 09:30 - 00000000 ____D C:\ProgramData\Oracle 2016-12-12 09:30 - 2016-12-12 09:30 - 00000000 ____D C:\Program Files (x86)\Java 2016-12-12 09:29 - 2016-12-12 09:29 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight 2016-12-12 09:28 - 2017-01-23 07:16 - 00000000 __SHD C:\Windows\Installer 2016-12-12 09:28 - 2016-12-27 13:47 - 00000000 ____D C:\Users\Todos os Usuários\Adobe 2016-12-12 09:28 - 2016-12-27 13:47 - 00000000 ____D C:\ProgramData\Adobe 2016-12-12 09:28 - 2016-12-27 13:46 - 00000000 ____D C:\Program Files (x86)\Adobe 2016-12-12 09:28 - 2016-12-26 21:09 - 00000000 ____D C:\Users\Chrnomeerr\AppData\Roaming\Adobe 2016-12-12 09:28 - 2016-12-26 21:04 - 00000000 ____D C:\Users\Chrnomeerr\AppData\Local\Adobe 2016-12-12 09:28 - 2016-12-12 09:28 - 00000000 ____D C:\Users\Usuário Padrão\AppData\Roaming\Macromedia 2016-12-12 09:28 - 2016-12-12 09:28 - 00000000 ____D C:\Users\Default\AppData\Roaming\Macromedia 2016-12-12 09:28 - 2016-12-12 09:28 - 00000000 ____D C:\Users\Default User\AppData\Roaming\Macromedia 2016-12-12 09:28 - 2016-12-12 09:28 - 00000000 ____D C:\Users\Chrnomeerr\AppData\Roaming\Macromedia 2016-12-12 09:28 - 2016-12-12 09:28 - 00000000 ____D C:\Program Files\Microsoft Silverlight 2016-12-12 09:28 - 2016-12-12 09:28 - 00000000 ____D C:\Program Files (x86)\Microsoft Silverlight 2016-12-12 09:25 - 2016-12-12 09:25 - 00002265 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk 2016-12-12 09:24 - 2017-01-15 15:50 - 00000000 ____D C:\Program Files (x86)\Google 2016-12-12 09:24 - 2016-12-27 13:49 - 00058688 _____ C:\Users\Chrnomeerr\AppData\Local\GDIPFONTCACHEV1.DAT 2016-12-12 09:24 - 2016-12-16 19:30 - 00003500 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA 2016-12-12 09:24 - 2016-12-16 19:30 - 00003372 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore 2016-12-12 09:24 - 2016-12-12 09:46 - 00000000 ____D C:\Users\Chrnomeerr\AppData\Local\Google 2016-12-12 09:24 - 2016-12-12 09:24 - 00000000 ____D C:\Users\Chrnomeerr\AppData\Local\Deployment 2016-12-12 09:24 - 2016-12-12 09:24 - 00000000 ____D C:\Users\Chrnomeerr\AppData\Local\Apps\2.0 2016-12-12 09:24 - 2016-12-12 09:24 - 00000000 ____D C:\Users\Chrnomeerr\AppData\Local\Apps 2016-12-12 09:23 - 2016-12-12 09:29 - 00000000 __SHD C:\Users\Chrnomeerr\AppData\LocalLow\Microsoft 2016-12-12 09:22 - 2016-12-17 09:52 - 00000000 ____D C:\Program Files (x86)\Intel 2016-12-12 09:22 - 2016-12-17 09:49 - 00000000 ____D C:\Intel 2016-12-12 09:22 - 2016-12-12 09:22 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_SynTP_01009.Wdf 2016-12-12 09:22 - 2016-12-12 09:22 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_Smb_driver_Intel_01009.Wdf 2016-12-12 09:22 - 2016-12-12 09:22 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_iusb3hcs_01009.Wdf 2016-12-12 09:22 - 2016-12-12 09:22 - 00000000 ____D C:\Program Files\Synaptics 2016-12-12 09:22 - 2012-01-27 17:38 - 00041984 _____ (Intel Corporation) C:\Windows\system32\Drivers\USB3Ver.dll 2016-12-12 09:21 - 2016-12-17 09:54 - 00000000 ____D C:\SWSETUP 2016-12-12 09:21 - 2016-12-12 10:55 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information 2016-12-12 09:21 - 2016-12-12 10:55 - 00000000 ____D C:\Program Files (x86)\Realtek 2016-12-12 09:21 - 2011-09-29 17:30 - 00646248 _____ (Realtek ) C:\Windows\system32\Drivers\Rt64win7.sys 2016-12-12 09:21 - 2011-09-29 17:30 - 00107552 _____ (Realtek Semiconductor Corporation) C:\Windows\system32\RTNUninst64.dll 2016-12-12 09:21 - 2011-09-29 17:30 - 00074272 _____ C:\Windows\system32\RtNicProp64.dll 2016-12-12 09:20 - 2017-01-23 07:16 - 00098974 _____ C:\Windows\WindowsUpdate.log 2016-12-12 09:20 - 2016-12-27 13:51 - 00000000 ____D C:\Windows\SoftwareDistribution 2016-12-12 09:18 - 2017-01-23 07:31 - 01310720 ___SH C:\Users\Chrnomeerr\ntuser.dat 2016-12-12 09:18 - 2017-01-23 07:31 - 00262144 ___SH C:\Users\Chrnomeerr\ntuser.dat.LOG1 2016-12-12 09:18 - 2017-01-23 07:31 - 00000000 ___RD C:\Users\Chrnomeerr\Desktop 2016-12-12 09:18 - 2017-01-23 07:31 - 00000000 ____D C:\Users\Chrnomeerr\AppData\Local\Temp 2016-12-12 09:18 - 2017-01-23 04:14 - 00000000 ____D C:\Users\Chrnomeerr\AppData\Roaming 2016-12-12 09:18 - 2017-01-23 04:11 - 00000000 ___RD C:\Users\Chrnomeerr\Documents 2016-12-12 09:18 - 2017-01-23 03:44 - 00000000 ____D C:\Users\Chrnomeerr\AppData\LocalLow 2016-12-12 09:18 - 2017-01-21 19:35 - 00000000 ____D C:\Users\Chrnomeerr\AppData\Local 2016-12-12 09:18 - 2017-01-13 15:40 - 00000000 ____D C:\Users\Chrnomeerr\AppData\Local\Microsoft 2016-12-12 09:18 - 2016-12-30 00:14 - 00000000 ___RD C:\Users\Chrnomeerr\Downloads 2016-12-12 09:18 - 2016-12-27 13:11 - 00000000 ___RD C:\Users\Chrnomeerr\Music 2016-12-12 09:18 - 2016-12-17 09:44 - 00000000 ____D C:\Users\Chrnomeerr 2016-12-12 09:18 - 2016-12-12 14:02 - 00000000 ___RD C:\Users\Chrnomeerr\Pictures 2016-12-12 09:18 - 2016-12-12 14:01 - 00000000 ___SD C:\Users\Chrnomeerr\AppData\Roaming\Microsoft 2016-12-12 09:18 - 2016-12-12 14:01 - 00000000 ___RD C:\Users\Chrnomeerr\Searches 2016-12-12 09:18 - 2016-12-12 10:17 - 00524288 ___SH C:\Users\Chrnomeerr\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000002.regtrans-ms 2016-12-12 09:18 - 2016-12-12 10:17 - 00524288 ___SH C:\Users\Chrnomeerr\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000001.regtrans-ms 2016-12-12 09:18 - 2016-12-12 10:17 - 00065536 ___SH C:\Users\Chrnomeerr\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TM.blf 2016-12-12 09:18 - 2016-12-12 09:36 - 00000000 ___RD C:\Users\Chrnomeerr\AppData\Roaming\Microsoft\Windows\Start Menu\Programs 2016-12-12 09:18 - 2016-12-12 09:18 - 00001419 _____ C:\Users\Chrnomeerr\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk 2016-12-12 09:18 - 2016-12-12 09:18 - 00001385 _____ C:\Users\Chrnomeerr\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer (64-bit).lnk 2016-12-12 09:18 - 2016-12-12 09:18 - 00000476 ___SH C:\Users\Chrnomeerr\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\desktop.ini 2016-12-12 09:18 - 2016-12-12 09:18 - 00000402 ___SH C:\Users\Chrnomeerr\Documents\desktop.ini 2016-12-12 09:18 - 2016-12-12 09:18 - 00000282 ___SH C:\Users\Chrnomeerr\Downloads\desktop.ini 2016-12-12 09:18 - 2016-12-12 09:18 - 00000282 ___SH C:\Users\Chrnomeerr\Desktop\desktop.ini 2016-12-12 09:18 - 2016-12-12 09:18 - 00000174 ___SH C:\Users\Chrnomeerr\AppData\Roaming\Microsoft\Windows\Start Menu\desktop.ini 2016-12-12 09:18 - 2016-12-12 09:18 - 00000020 ___SH C:\Users\Chrnomeerr\ntuser.ini 2016-12-12 09:18 - 2016-12-12 09:18 - 00000000 _SHDL C:\Users\Usuário Padrão\Documents\Minhas músicas 2016-12-12 09:18 - 2016-12-12 09:18 - 00000000 _SHDL C:\Users\Usuário Padrão\Documents\Minhas imagens 2016-12-12 09:18 - 2016-12-12 09:18 - 00000000 _SHDL C:\Users\Usuário Padrão\Documents\Meus vídeos 2016-12-12 09:18 - 2016-12-12 09:18 - 00000000 _SHDL C:\Users\Usuário Padrão\AppData\Roaming\Microsoft\Windows\Start Menu\Programas 2016-12-12 09:18 - 2016-12-12 09:18 - 00000000 _SHDL C:\Users\Usuário Padrão\AppData\Local\Histórico 2016-12-12 09:18 - 2016-12-12 09:18 - 00000000 _SHDL C:\Users\Usuário Padrão\AppData\Local\Dados de aplicativos 2016-12-12 09:18 - 2016-12-12 09:18 - 00000000 _SHDL C:\Users\Usuário Padrão 2016-12-12 09:18 - 2016-12-12 09:18 - 00000000 _SHDL C:\Users\Todos os Usuários\Modelos 2016-12-12 09:18 - 2016-12-12 09:18 - 00000000 _SHDL C:\Users\Todos os Usuários\Menu Iniciar 2016-12-12 09:18 - 2016-12-12 09:18 - 00000000 _SHDL C:\Users\Todos os Usuários\Favoritos 2016-12-12 09:18 - 2016-12-12 09:18 - 00000000 _SHDL C:\Users\Todos os Usuários\Documentos 2016-12-12 09:18 - 2016-12-12 09:18 - 00000000 _SHDL C:\Users\Todos os Usuários\Dados de aplicativos 2016-12-12 09:18 - 2016-12-12 09:18 - 00000000 _SHDL C:\Users\Todos os Usuários 2016-12-12 09:18 - 2016-12-12 09:18 - 00000000 _SHDL C:\Users\Public\Documents\Minhas músicas 2016-12-12 09:18 - 2016-12-12 09:18 - 00000000 _SHDL C:\Users\Public\Documents\Minhas imagens 2016-12-12 09:18 - 2016-12-12 09:18 - 00000000 _SHDL C:\Users\Public\Documents\Meus vídeos 2016-12-12 09:18 - 2016-12-12 09:18 - 00000000 _SHDL C:\Users\Default\Modelos 2016-12-12 09:18 - 2016-12-12 09:18 - 00000000 _SHDL C:\Users\Default\Meus documentos 2016-12-12 09:18 - 2016-12-12 09:18 - 00000000 _SHDL C:\Users\Default\Menu Iniciar 2016-12-12 09:18 - 2016-12-12 09:18 - 00000000 _SHDL C:\Users\Default\Documents\Minhas músicas 2016-12-12 09:18 - 2016-12-12 09:18 - 00000000 _SHDL C:\Users\Default\Documents\Minhas imagens 2016-12-12 09:18 - 2016-12-12 09:18 - 00000000 _SHDL C:\Users\Default\Documents\Meus vídeos 2016-12-12 09:18 - 2016-12-12 09:18 - 00000000 _SHDL C:\Users\Default\Dados de aplicativos 2016-12-12 09:18 - 2016-12-12 09:18 - 00000000 _SHDL C:\Users\Default\Configurações locais 2016-12-12 09:18 - 2016-12-12 09:18 - 00000000 _SHDL C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programas 2016-12-12 09:18 - 2016-12-12 09:18 - 00000000 _SHDL C:\Users\Default\AppData\Local\Histórico 2016-12-12 09:18 - 2016-12-12 09:18 - 00000000 _SHDL C:\Users\Default\AppData\Local\Dados de aplicativos 2016-12-12 09:18 - 2016-12-12 09:18 - 00000000 _SHDL C:\Users\Default\Ambiente de rede 2016-12-12 09:18 - 2016-12-12 09:18 - 00000000 _SHDL C:\Users\Default\Ambiente de impressão 2016-12-12 09:18 - 2016-12-12 09:18 - 00000000 _SHDL C:\Users\Default User\Documents\Minhas músicas 2016-12-12 09:18 - 2016-12-12 09:18 - 00000000 _SHDL C:\Users\Default User\Documents\Minhas imagens 2016-12-12 09:18 - 2016-12-12 09:18 - 00000000 _SHDL C:\Users\Default User\Documents\Meus vídeos 2016-12-12 09:18 - 2016-12-12 09:18 - 00000000 _SHDL C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programas 2016-12-12 09:18 - 2016-12-12 09:18 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Histórico 2016-12-12 09:18 - 2016-12-12 09:18 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Dados de aplicativos 2016-12-12 09:18 - 2016-12-12 09:18 - 00000000 _SHDL C:\Users\Chrnomeerr\SendTo 2016-12-12 09:18 - 2016-12-12 09:18 - 00000000 _SHDL C:\Users\Chrnomeerr\Recent 2016-12-12 09:18 - 2016-12-12 09:18 - 00000000 _SHDL C:\Users\Chrnomeerr\Modelos 2016-12-12 09:18 - 2016-12-12 09:18 - 00000000 _SHDL C:\Users\Chrnomeerr\Meus documentos 2016-12-12 09:18 - 2016-12-12 09:18 - 00000000 _SHDL C:\Users\Chrnomeerr\Menu Iniciar 2016-12-12 09:18 - 2016-12-12 09:18 - 00000000 _SHDL C:\Users\Chrnomeerr\Documents\Minhas músicas 2016-12-12 09:18 - 2016-12-12 09:18 - 00000000 _SHDL C:\Users\Chrnomeerr\Documents\Minhas imagens 2016-12-12 09:18 - 2016-12-12 09:18 - 00000000 _SHDL C:\Users\Chrnomeerr\Documents\Meus vídeos 2016-12-12 09:18 - 2016-12-12 09:18 - 00000000 _SHDL C:\Users\Chrnomeerr\Dados de aplicativos 2016-12-12 09:18 - 2016-12-12 09:18 - 00000000 _SHDL C:\Users\Chrnomeerr\Cookies 2016-12-12 09:18 - 2016-12-12 09:18 - 00000000 _SHDL C:\Users\Chrnomeerr\Configurações locais 2016-12-12 09:18 - 2016-12-12 09:18 - 00000000 _SHDL C:\Users\Chrnomeerr\AppData\Roaming\Microsoft\Windows\Start Menu\Programas 2016-12-12 09:18 - 2016-12-12 09:18 - 00000000 _SHDL C:\Users\Chrnomeerr\AppData\Local\Temporary Internet Files 2016-12-12 09:18 - 2016-12-12 09:18 - 00000000 _SHDL C:\Users\Chrnomeerr\AppData\Local\Histórico 2016-12-12 09:18 - 2016-12-12 09:18 - 00000000 _SHDL C:\Users\Chrnomeerr\AppData\Local\Dados de aplicativos 2016-12-12 09:18 - 2016-12-12 09:18 - 00000000 _SHDL C:\Users\Chrnomeerr\Ambiente de rede 2016-12-12 09:18 - 2016-12-12 09:18 - 00000000 _SHDL C:\Users\Chrnomeerr\Ambiente de impressão 2016-12-12 09:18 - 2016-12-12 09:18 - 00000000 _SHDL C:\ProgramData\Modelos 2016-12-12 09:18 - 2016-12-12 09:18 - 00000000 _SHDL C:\ProgramData\Microsoft\Windows\Start Menu\Programas 2016-12-12 09:18 - 2016-12-12 09:18 - 00000000 _SHDL C:\ProgramData\Menu Iniciar 2016-12-12 09:18 - 2016-12-12 09:18 - 00000000 _SHDL C:\ProgramData\Favoritos 2016-12-12 09:18 - 2016-12-12 09:18 - 00000000 _SHDL C:\ProgramData\Documentos 2016-12-12 09:18 - 2016-12-12 09:18 - 00000000 _SHDL C:\ProgramData\Dados de aplicativos 2016-12-12 09:18 - 2016-12-12 09:18 - 00000000 _SHDL C:\Program Files\Common Files\Sistema 2016-12-12 09:18 - 2016-12-12 09:18 - 00000000 _SHDL C:\Program Files\Arquivos Comuns 2016-12-12 09:18 - 2016-12-12 09:18 - 00000000 _SHDL C:\Arquivos de Programas 2016-12-12 09:18 - 2016-12-12 09:18 - 00000000 __SHD C:\Recovery 2016-12-12 09:18 - 2016-12-12 09:18 - 00000000 ___SH C:\Users\Chrnomeerr\ntuser.dat.LOG2 2016-12-12 09:18 - 2016-12-12 09:18 - 00000000 ___RD C:\Users\Chrnomeerr\Videos 2016-12-12 09:18 - 2016-12-12 09:18 - 00000000 ___RD C:\Users\Chrnomeerr\Saved Games 2016-12-12 09:18 - 2016-12-12 09:18 - 00000000 ___RD C:\Users\Chrnomeerr\Links 2016-12-12 09:18 - 2016-12-12 09:18 - 00000000 ___RD C:\Users\Chrnomeerr\Favorites 2016-12-12 09:18 - 2016-12-12 09:18 - 00000000 ___RD C:\Users\Chrnomeerr\Contacts 2016-12-12 09:18 - 2016-12-12 09:18 - 00000000 ___RD C:\Users\Chrnomeerr\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup 2016-12-12 09:18 - 2016-12-12 09:18 - 00000000 ___RD C:\Users\Chrnomeerr\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools 2016-12-12 09:18 - 2016-12-12 09:18 - 00000000 ___HD C:\Users\Chrnomeerr\AppData 2016-12-12 09:18 - 2016-12-12 09:18 - 00000000 ____D C:\Users\Chrnomeerr\AppData\Roaming\Identities 2016-12-12 09:18 - 2016-12-12 09:18 - 00000000 ____D C:\Users\Chrnomeerr\AppData\Local\VirtualStore 2016-12-12 09:18 - 2010-11-21 07:47 - 00000000 ____D C:\Users\Chrnomeerr\AppData\Roaming\Media Center Programs 2016-12-12 09:18 - 2009-07-14 02:54 - 00000000 ___RD C:\Users\Chrnomeerr\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories 2016-12-12 09:18 - 2009-07-14 02:49 - 00000000 ___RD C:\Users\Chrnomeerr\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance 2016-12-12 09:17 - 2016-12-12 09:17 - 00001345 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Media Center.lnk 2016-12-12 09:17 - 2016-12-12 09:17 - 00001326 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows DVD Maker.lnk 2016-12-12 09:16 - 2016-12-12 09:16 - 00000000 ____H C:\Windows\system32\Drivers\Msft_User_WpdFs_01_09_00.Wdf 2016-12-12 09:15 - 2017-01-23 07:29 - 00000000 ____D C:\Windows\Prefetch 2016-12-12 09:15 - 2017-01-22 15:56 - 2754318336 ___SH C:\pagefile.sys 2016-12-12 09:15 - 2017-01-22 15:56 - 2070654976 ___SH C:\hiberfil.sys ==================== Três Meses Modificados arquivos e pastas ======== (Se uma entrada for incluída na fixlist, o arquivo/pasta será movido.) 2017-01-23 04:24 - 2009-07-14 01:20 - 00000000 ____D C:\Windows\inf 2017-01-22 22:41 - 2010-11-21 07:37 - 00706302 _____ C:\Windows\system32\prfh0416.dat 2017-01-22 22:41 - 2010-11-21 07:37 - 00147644 _____ C:\Windows\system32\prfc0416.dat 2017-01-22 22:41 - 2009-07-14 03:13 - 01636952 _____ C:\Windows\system32\PerfStringBackup.INI 2017-01-22 16:03 - 2009-07-14 02:45 - 00021248 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2017-01-22 16:03 - 2009-07-14 02:45 - 00021248 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2017-01-22 15:56 - 2009-07-14 03:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT 2016-12-27 13:48 - 2009-07-14 03:09 - 00000000 ____D C:\Windows\System32\Tasks\WPD 2016-12-27 13:48 - 2009-07-14 02:45 - 04896848 _____ C:\Windows\system32\FNTCACHE.DAT 2016-12-27 13:48 - 2009-07-14 01:20 - 00000000 ____D C:\Windows\system32\catroot 2016-12-27 13:47 - 2009-07-14 01:20 - 00000000 ____D C:\Program Files\Common Files 2016-12-27 13:46 - 2009-07-14 01:20 - 00000000 ___RD C:\Program Files 2016-12-27 13:40 - 2009-07-14 01:20 - 00000000 __RSD C:\Windows\Fonts 2016-12-27 13:27 - 2009-07-14 01:20 - 00000000 ____D C:\Windows\Logs 2016-12-26 21:20 - 2009-07-14 02:54 - 00524288 ___SH C:\Windows\system32\config\COMPONENTS{016888b9-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000001.regtrans-ms 2016-12-26 21:20 - 2009-07-14 01:20 - 00000000 ____D C:\Windows\winsxs 2016-12-26 21:08 - 2009-07-14 01:20 - 00000000 ____D C:\Program Files (x86)\Common Files ==================== Bamital & volsnap ====================== (Não há correção automática para arquivos que não passaram na verificação.) C:\Windows\system32\winlogon.exe => O arquivo é assinado digitalmente C:\Windows\system32\wininit.exe => O arquivo é assinado digitalmente C:\Windows\SysWOW64\wininit.exe => O arquivo é assinado digitalmente C:\Windows\explorer.exe => O arquivo é assinado digitalmente C:\Windows\SysWOW64\explorer.exe => O arquivo é assinado digitalmente C:\Windows\system32\svchost.exe => O arquivo é assinado digitalmente C:\Windows\SysWOW64\svchost.exe => O arquivo é assinado digitalmente C:\Windows\system32\services.exe => O arquivo é assinado digitalmente C:\Windows\system32\User32.dll => O arquivo é assinado digitalmente C:\Windows\SysWOW64\User32.dll => O arquivo é assinado digitalmente C:\Windows\system32\userinit.exe => O arquivo é assinado digitalmente C:\Windows\SysWOW64\userinit.exe => O arquivo é assinado digitalmente C:\Windows\system32\rpcss.dll => O arquivo é assinado digitalmente C:\Windows\system32\dnsapi.dll => O arquivo é assinado digitalmente C:\Windows\SysWOW64\dnsapi.dll => O arquivo é assinado digitalmente C:\Windows\system32\Drivers\volsnap.sys => O arquivo é assinado digitalmente LastRegBack: 2017-01-13 15:55 ==================== Fim de FRST.txt ============================