Annoying Yahoo search engine in all browsers

acsalmeida · December 14, 2013

OS: Upadted Windows 7 Pro (x64)

Annoying Yahoo search engine in all browsers, What I've already done (all browsers):

1. I did a research and tried a lot of tips, but none worked so far.

2. I already tried to change the searching engine and initial web page inside the option of the browsers, there is no extensions or plugins associated with "Yahoo" or "search engine".

3. I searched for "spigot" on my computer but it didn't return any results although the search field shows http://br.search.yahoo.com/?type=800236&fr=spigot-yhp-ff

4. I can't see eithher "Search Settings", "Yahoo", "Baidu" or "YouTube Downloader Toolbar" in my windows control panel (Start>Control

Panel>Programs/Programs and Features).

5. On the processes tab of my windows task manager I don't see any files called searchsettigs.exe.

6. Fact: When I delete the file "prefs.js and folder "searchplugins" (yahoo_ff.xml) from C:\Users\ACSA\AppData\Roaming\Mozilla\Firefox\Profiles

\v1q90507.default and open the Firefox, everything is normal, but if I close and reopen, Yahoo is back to the search field.

Thank you very much in advance

MrCharlie · December 14, 2013

Welcome to the forum, please try this procedure:

Lets clean out any adware/spyware now: (this will require a reboot so save all your work)

Please download AdwCleaner by Xplode and save to your Desktop.

Make sure you click on download buttons that look similar to this, not "sponsored ad links":

Double click on AdwCleaner.exe to run the tool.
Vista/Windows 7/8 users right-click and select Run As Administrator
Click on the Scan button.
AdwCleaner will begin...be patient as the scan may take some time to complete.
When it's done you'll see: Pending: Please uncheck elements you don't want removed.
Now click on the Report button...a logfile (AdwCleaner[R0].txt) will open in Notepad for review.
Look over the log especially under Files/Folders for any program you want to save.
If there's a program you may want to save, just uncheck it from AdwCleaner.
If you're not sure, post the log for review. (all items found are adware/spyware/foistware)
If you're ready to clean it all up.....click the Clean button.
After rebooting, a logfile report (AdwCleaner[s0].txt) will open automatically.
Copy and paste the contents of that logfile in your next reply.
A copy of that logfile will also be saved in the C:\AdwCleaner folder.
Items that are deleted are moved to the Quarantine Folder: C:\AdwCleaner\Quarantine
To restore an item that has been deleted:
Go to Tools > Quarantine Manager > check what you want restored > now click on Restore.

Then..................

Open up Malwarebytes > Settings Tab > Scanner Settings > Under action for PUP > Select: Show in Results List and Check for removal.

Please Update and run a Quick Scan with Malwarebytes Anti-Malware, post the report.

Make sure that everything is checked, and click Remove Selected.

Please let me know how computer is running now, MrC

acsalmeida · December 14, 2013

# AdwCleaner v3.015 - Report created 14/12/2013 at 12:31:54

# Updated 10/12/2013 by Xplode

# Operating System : Windows 7 Professional Service Pack 1 (64 bits)

# Username : ACSA - ACSA-PC

# Running from : C:\Users\ACSA\Desktop\adwcleaner.exe

# Option : Clean

***** [ Services ] *****

***** [ Files / Folders ] *****

***** [ Shortcuts ] *****

***** [ Registry ] *****

***** [ Browsers ] *****

-\\ Internet Explorer v11.0.9600.16428

-\\ Mozilla Firefox v25.0.1 (pt-BR)

[ File : C:\Users\ACSA\AppData\Roaming\Mozilla\Firefox\Profiles\v1q90507.default\prefs.js ]

-\\ Google Chrome v

[ File : C:\Users\ACSA\AppData\Local\Google\Chrome\User Data\Default\preferences ]

*************************

AdwCleaner[R0].txt - [880 octets] - [14/12/2013 12:30:09]

AdwCleaner[s0].txt - [802 octets] - [14/12/2013 12:31:54]

########## EOF - C:\AdwCleaner\AdwCleaner[s0].txt - [861 octets] ##########

===================================================================================

Malwarebytes Anti-Malware 1.75.0.1300

www.malwarebytes.org

Versão da Base de Dados: v2013.12.14.03

Windows 7 Service Pack 1 x64 NTFS

Internet Explorer 11.0.9600.16476

ACSA :: ACSA-PC [administrador]

14/12/2013 12:38:32

mbam-log-2013-12-14 (12-38-32).txt

Tipo de Verificação: Verificação Rápida

Opções de verificação desativadas: P2P

Objetos escaneados: 228768

Tempo decorrido: 7 minuto(s), 34 segundo(s)

Processos de Memória Detectados: 0

(Não foram detectados ítens maliciosos)

Módulos de Memória Detectados: 0

(Não foram detectados ítens maliciosos)

Chaves de Registro Detectadas: 0

(Não foram detectados ítens maliciosos)

Valores de Registro Detectadas: 0

(Não foram detectados ítens maliciosos)

Itens de Dados no Registro Detectadas: 0

(Não foram detectados ítens maliciosos)

Pastas Detectadas: 0

(Não foram detectados ítens maliciosos)

Arquivos Detectados: 0

(Não foram detectados ítens maliciosos)

(fim)

===================================================================================

acsalmeida · December 14, 2013

The search engine Yahoo is still there

MrCharlie · December 14, 2013

Run this scan:

Please download Junkware Removal Tool to your desktop.

Shut down your protection software now to avoid potential conflicts.
Run the tool by double-clicking it. If you are using Windows Vista or Seven, right-mouse click it and select Run as Administrator.
The tool will open and start scanning your system.
Please be patient as this can take a while to complete depending on your system's specifications.
On completion, a log (JRT.txt) is saved to your desktop and will automatically open.
Post the contents of JRT.txt into your next message.

MrC

acsalmeida · December 14, 2013

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Junkware Removal Tool (JRT) by Thisisu

Version: 6.0.8 (11.05.2013:1)

OS: Windows 7 Professional x64

Ran by ACSA on 14/12/2013 at 13:36:40,27

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

~~~ Services

~~~ Registry Values

~~~ Registry Keys

~~~ Files

~~~ Folders

~~~ Event Viewer Logs were cleared

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Scan was completed on 14/12/2013 at 13:59:01,73

End of JRT log

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

acsalmeida · December 14, 2013

MrCharlie, on "Checking Module"

A bad module has been detected and asked me to reboot now ou later, I rebooted.

The Yahoo still there

I run the program again, the same bad module again and asked me to reboot, but this time I didn't. the program finish the scan and the result is above.
The Yahoo still there

MrCharlie · December 14, 2013

OK.....run this scan and post the logs....

Please download Farbar Recovery Scan Tool and save it to a folder. (use correct version for your system.....Which system am I using?)

Please make sure you click download buttons that look similar to this, not "sponsored ad links":

Double-click to run it. When the tool opens click Yes to disclaimer.
Press Scan button.
It will make a log (FRST.txt) in the same directory the tool is run. Please copy and paste it to your reply.
The first time the tool is run, it makes also another log (Addition.txt). Please attach it to your reply.

MrC

acsalmeida · December 14, 2013

Here we go...

FRST.txt

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 14-12-2013 01

Ran by ACSA (administrator) on ACSA-PC on 14-12-2013 17:53:38

Running from C:\Users\ACSA\Desktop

Windows 7 Professional Service Pack 1 (X64) OS Language: English(US)

Internet Explorer Version 11

Boot Mode: Normal

==================== Processes (Whitelisted) =================

(IObit) C:\Program Files (x86)\IObit\Advanced SystemCare 7\ASCService.exe

(Comodo Security Solutions, Inc.) C:\Program Files (x86)\Common Files\COMODO\launcher_service.exe

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe

(GAS Tecnologia) C:\Program Files (x86)\GbPlugin\gbpsv.exe

(COMODO) C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe

(Microsoft Corporation) C:\Program Files\Microsoft Security Client\MsMpEng.exe

(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe

(IObit) C:\Program Files (x86)\IObit\IObit Malware Fighter\IMFsrv.exe

(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe

() C:\Program Files (x86)\ASUS\AXSP\1.00.13\atkexComSvc.exe

(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AI Suite II\DIGI+ VRM\VRMHelp.exe

(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AI Suite II\AsRoutineController.exe

(IObit) C:\Program Files (x86)\IObit\Smart Defrag 2\SmartDefrag.exe

() C:\Program Files (x86)\ASUS\AAHM\1.00.13\aaHMSvc.exe

(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.22.3\GoogleCrashHandler.exe

(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.22.3\GoogleCrashHandler64.exe

() C:\Program Files (x86)\ASUS\AsSysCtrlService\1.00.11\AsSysCtrlService.exe

(Atheros Commnucations) C:\Program Files (x86)\Bluetooth Suite\AdminService.exe

(Autodesk, Inc.) C:\Program Files (x86)\Autodesk\Content Service\Connect.Service.ContentService.exe

(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe

() C:\Program Files (x86)\Comodo\Dragon\dragon_updater.exe

(DTS) C:\Program Files\Realtek\Audio\HDA\DTSAudioService64.exe

(SEIKO EPSON CORPORATION) C:\ProgramData\EPSON\EPW!3 SSRP\E_S40RPB.EXE

(Comodo Security Solutions, Inc.) C:\Program Files (x86)\Common Files\COMODO\GeekBuddyRSP.exe

(Intel Corporation) C:\Windows\System32\IPROSetMonitor.exe

(Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Security Scan 2.0\kss.exe

(IObit) C:\Program Files (x86)\IObit\LiveUpdate\LiveUpdate.exe

(Native Instruments GmbH) C:\Program Files\Common Files\Native Instruments\Hardware\NIHardwareService.exe

(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe

(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe

(Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe

(Logitech Inc.) C:\Program Files\Logitech\Gaming Software\LWEMon.exe

(Atheros Commnucations) C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe

() C:\Windows\SysWOW64\PnkBstrA.exe

(Atheros Commnucations) C:\Program Files (x86)\Bluetooth Suite\AthBtTray.exe

(arvato digital services llc) C:\Program Files\Common Files\Protexis\License Service\PsiService_2.exe

(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe

(COMODO) C:\Program Files\COMODO\COMODO Internet Security\cistray.exe

() C:\Program Files\Macrium\Reflect\ReflectService.exe

(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\NvTmru.exe

(Skype Technologies S.A.) C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe

(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe

(Western Digital) C:\Program Files (x86)\Western Digital\WD Drive Manager\WDDriveService.exe

(Celartem, Inc., doing business as Extensis.) C:\Program Files (x86)\Extensis\Suitcase Fusion 4\FMCore.exe

(Akamai Technologies, Inc.) C:\Users\ACSA\AppData\Local\Akamai\netsession_win.exe

(Western Digital ) C:\Program Files (x86)\Western Digital\WD SmartWare\WDRulesEngine.exe

(Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Security Scan 2.0\kss.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorIcon.exe

() C:\Windows\SysWOW64\C2MP\UpdateChecker.exe

(Renesas Electronics Corporation) C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe

(Akamai Technologies, Inc.) C:\Users\ACSA\AppData\Local\Akamai\netsession_win.exe

(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE

(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe

(Adobe Systems Inc.) C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\acrotray.exe

(WIBU-SYSTEMS AG) C:\Program Files (x86)\CodeMeter\Runtime\bin\CodeMeterCC.exe

(Western Digital) C:\Program Files (x86)\Western Digital\WD Security\WDDriveAutoUnlock.exe

(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE

(Western Digital Technologies, Inc.) C:\Program Files (x86)\Western Digital\WD Quick View\WDDMStatus.exe

(Logitech Inc.) C:\Program Files (x86)\Logitech\LWS\Webcam Software\LWS.exe

(WIBU-SYSTEMS AG) C:\Program Files (x86)\WIBUKEY\Server\WkSvMgr.exe

(Logitech, Inc.) C:\Program Files\Common Files\Logishrd\KHAL3\KHALMNPR.exe

(Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe

(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AI Suite II\ASUS Mobilink\Simulator\AsShellProcess.exe

(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe

() C:\Program Files (x86)\Logitech\LWS\Webcam Software\CameraHelperShell.exe

(Comodo Security Solutions, Inc.) C:\Program Files (x86)\Common Files\COMODO\GeekBuddyRSP.exe

(Dropbox, Inc.) C:\Users\ACSA\AppData\Roaming\Dropbox\bin\Dropbox.exe

(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe

(Comodo Security Solutions, Inc.) C:\Program Files\COMODO\GeekBuddy\unit_manager.exe

(WIBU-SYSTEMS AG) C:\Program Files (x86)\CodeMeter\Runtime\bin\CodeMeter.exe

(Logitech, Inc.) C:\Program Files\Logitech\SetPointG\SetPointII.exe

(Comodo Security Solutions, Inc.) C:\Program Files\COMODO\GeekBuddy\unit.exe

(COMODO) C:\Program Files\COMODO\COMODO Internet Security\cavwp.exe

(Western Digital ) C:\Program Files (x86)\Western Digital\WD SmartWare\WDBackupEngine.exe

(IObit) C:\Program Files (x86)\IObit\IObit Malware Fighter\IMF.exe

(Microsoft Corporation) C:\Program Files\Microsoft Security Client\NisSrv.exe

(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AI Suite II\ASUS Mobilink\iPhone Simulator\pnSvc.exe

(COMODO) C:\Program Files\COMODO\COMODO Internet Security\cis.exe

(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AI Suite II\TurboV EVO\TurboVHelp.exe

(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorDataMgrSvc.exe

(Nero AG) C:\Program Files (x86)\Nero\Update\NASvc.exe

(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AI Suite II\EPU\EPUHelp.exe

(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AI Suite II\AI Suite II.exe

(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AI Suite II\Sensor\AlertHelper\AlertHelper.exe

(Google Inc.) C:\Users\ACSA\AppData\Local\Google\Chrome\Application\chrome.exe

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [RtHDVCpl] - C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [7188040 2013-10-05] (Realtek Semiconductor)

HKLM\...\Run: [MSC] - C:\Program Files\Microsoft Security Client\msseces.exe [1266912 2013-10-23] (Microsoft Corporation)

HKLM\...\Run: [AdobeAAMUpdater-1.0] - C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\updaterstartuputility.exe [472992 2013-03-21] (Adobe Systems Incorporated)

HKLM\...\Run: [EvtMgr6] - C:\Program Files\Logitech\SetPointP\SetPoint.exe [1744152 2011-10-07] (Logitech, Inc.)

HKLM\...\Run: [start WingMan Profiler] - C:\Program Files\Logitech\Gaming Software\LWEMon.exe [190536 2010-06-14] (Logitech Inc.)

HKLM\...\Run: [AtherosBtStack] - C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe [613536 2010-10-27] (Atheros Commnucations)

HKLM\...\Run: [AthBtTray] - C:\Program Files (x86)\Bluetooth Suite\AthBtTray.exe [379040 2010-10-27] (Atheros Commnucations)

HKLM\...\Run: [RtHDVBg_DTS] - C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1308232 2013-10-05] (Realtek Semiconductor)

HKLM\...\Run: [COMODO Internet Security] - C:\Program Files\COMODO\COMODO Internet Security\cistray.exe [1612504 2013-11-11] (COMODO)

HKLM\...\Run: [Nvtmru] - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\NvTmru.exe [1028384 2013-11-08] (NVIDIA Corporation)

HKLM\...\Run: [shadowPlay] - C:\Windows\system32\rundll32.exe C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart

HKLM\...\Run: [NvBackend] - C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2273056 2013-11-29] (NVIDIA Corporation)

Winlogon\Notify\LBTWlgn: C:\Program Files\Common Files\Logishrd\Bluetooth\LBTWLgn.dll (Logitech, Inc.)

HKCU\...\Run: [DAEMON Tools Lite] - C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3671904 2012-08-28] (DT Soft Ltd)

HKCU\...\Run: [steam] - C:\Program Files (x86)\Steam\Steam.exe [1823656 2013-12-11] (Valve Corporation)

HKCU\...\Run: [FMCore.exe] - C:\Program Files (x86)\Extensis\Suitcase Fusion 4\FMCore.exe [9440256 2012-12-11] (Celartem, Inc., doing business as Extensis.)

HKCU\...\Run: [Autodesk Sync] - C:\Program Files\Autodesk\Autodesk Sync\AdSync.exe [1081224 2013-02-05] (Autodesk, Inc.)

HKCU\...\Run: [Akamai NetSession Interface] - C:\Users\ACSA\AppData\Local\Akamai\netsession_win.exe [4489472 2013-06-05] (Akamai Technologies, Inc.)

HKCU\...\Run: [Google Update] - C:\Users\ACSA\AppData\Local\Google\Update\GoogleUpdate.exe [116648 2012-09-14] (Google Inc.)

HKCU\...\Run: [swg] - C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [39408 2012-09-14] (Google Inc.)

HKCU\...\Run: [KSS] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Security Scan 2.0\kss.exe [202328 2012-12-07] (Kaspersky Lab ZAO)

HKCU\...\Policies\Explorer: [NoLowDiskSpaceChecks] 1

HKCU\...\Policies\Explorer: [NoRecentDocsHistory] 1

HKCU\...\Policies\Explorer: []

HKLM-x32\...\Run: [iAStorIcon] - C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorIcon.exe [283160 2010-11-06] (Intel Corporation)

HKLM-x32\...\Run: [JMB36X IDE Setup] - C:\Windows\RaidTool\xInsIDE.exe [43632 2010-01-19] ()

HKLM-x32\...\Run: [NUSB3MON] - C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe [113288 2010-11-16] (Renesas Electronics Corporation)

HKLM-x32\...\Run: [switchBoard] - C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated)

HKLM-x32\...\Run: [AdobeCS6ServiceManager] - C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe [1073312 2012-03-09] (Adobe Systems Incorporated)

HKLM-x32\...\Run: [APSDaemon] - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-04-21] (Apple Inc.)

HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [937920 2011-09-05] (Adobe Systems Incorporated)

HKLM-x32\...\Run: [Adobe Acrobat Speed Launcher] - C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\acrobat_sl.exe [36760 2011-09-05] (Adobe Systems Incorporated)

HKLM-x32\...\Run: [Acrobat Assistant 8.0] - C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\acrotray.exe [2904984 2011-09-05] (Adobe Systems Inc.)

HKLM-x32\...\Run: [WD Drive Unlocker] - C:\Program Files (x86)\Western Digital\WD Security\WDDriveAutoUnlock.exe [1688008 2012-09-06] (Western Digital)

HKLM-x32\...\Run: [WD Quick View] - C:\Program Files (x86)\Western Digital\WD Quick View\WDDMStatus.exe [5236664 2012-09-19] (Western Digital Technologies, Inc.)

HKLM-x32\...\Run: [LWS] - C:\Program Files (x86)\Logitech\LWS\Webcam Software\LWS.exe [204136 2012-09-13] (Logitech Inc.)

HKLM-x32\...\Run: [AdobeCS5.5ServiceManager] - C:\Program Files (x86)\Common Files\Adobe\CS5.5ServiceManager\CS5.5ServiceManager.exe [1523360 2011-01-12] (Adobe Systems Incorporated)

HKLM-x32\...\Run: [QuickTime Task] - C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2013-05-01] (Apple Inc.)

HKLM-x32\...\Run: [iTunesHelper] - C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2013-05-31] (Apple Inc.)

HKLM-x32\...\Run: [AdobeCEPServiceManager] - C:\Program Files (x86)\Common Files\Adobe\CEPServiceManager4\CEPServiceManager.exe [1039248 2013-03-13] (Adobe Systems Incorporated)

HKLM-x32\...\Run: [ASUS ShellProcess Execute] - C:\Program Files (x86)\ASUS\AI Suite II\ASUS Mobilink\Simulator\AsShellProcess.exe [252544 2010-09-28] (ASUSTeK Computer Inc.)

HKLM-x32\...\Run: [sunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)

HKLM-x32\...\Run: [20131121] - C:\Program Files\AVAST Software\Avast\Setup\emupdate\a8726356-a695-4a0f-a368-9e52a6bc90b3.exe [180184 2013-11-23] (AVAST Software)

HKLM-x32\...\Run: [tvncontrol] - C:\Program Files (x86)\Common Files\COMODO\GeekBuddyRSP.exe [2327248 2013-12-13] (Comodo Security Solutions, Inc.)

HKLM-x32\...\Run: [AvastUI.exe] - C:\Program Files\AVAST Software\Avast\AvastUI.exe [3568312 2013-12-01] (AVAST Software)

HKLM-x32\...\Run: [iObit Malware Fighter] - C:\Program Files (x86)\IObit\IObit Malware Fighter\IMF.exe [1573184 2013-12-13] (IObit)

Startup: C:\Users\ACSA\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\CurseClientStartup.ccip ()

Startup: C:\Users\ACSA\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk

ShortcutTarget: Dropbox.lnk -> C:\Users\ACSA\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)

BootExecute: autocheck autochk * SmartDefragBootTime.exe

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://br.search.yahoo.com/?type=800236&fr=spigot-yhp-ie

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0xE89D256EDC92CD01

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = pt-br

URLSearchHook: HKCU - (No Name) - {BC86E1AB-EDA5-4059-938F-CE307B0C6F0A} - No File

StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe

SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = http://start.funmoods.com/results.php?f=4&q={searchTerms}&a=ironpub&chnl=ironpub&cd=2XzuyEtN2Y1L1Qzu0FyEyC0DtDyE0A0Fzz0AtAzztD0DtA0EtN0D0Tzu0StByDzytN1L2XzutBtFtCtFtCtFtAtCtB&cr=1155018486

SearchScopes: HKLM-x32 - Backup.Old.DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A}

SearchScopes: HKCU - DefaultScope {78CA4453-2964-48D0-9F7D-E7E79C53B942} URL = http://br.search.yahoo.com/search?fr=chr-greentree_ie&ei=utf-8&ilc=12&type=800236&p={searchTerms}

SearchScopes: HKCU - Backup.Old.DefaultScope {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}

SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =

SearchScopes: HKCU - {78CA4453-2964-48D0-9F7D-E7E79C53B942} URL = http://br.search.yahoo.com/search?fr=chr-greentree_ie&ei=utf-8&ilc=12&type=800236&p={searchTerms}

BHO: ExplorerWnd Helper - {10921475-03CE-4E04-90CE-E2E7EF20C814} - C:\Program Files (x86)\IObit\IObit Uninstaller\UninstallExplorer64.dll (IObit)

BHO: avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)

BHO: Java Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)

BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)

BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)

BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)

BHO-x32: Adobe PDF Link Helper - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)

BHO-x32: Java Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)

BHO-x32: CIESpeechBHO Class - {8D10F6C4-0E01-4BD4-8601-11AC1FDF8126} - C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll (Atheros Commnucations)

BHO-x32: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)

BHO-x32: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\microsoft shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)

BHO-x32: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)

BHO-x32: Adobe PDF Conversion Toolbar Helper - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)

BHO-x32: Advanced SystemCare Browser Protection - {BA0C978D-D909-49B6-AFE2-8BDE245DC7E6} - C:\Program Files (x86)\IObit\Surfing Protection\BrowerProtect\ASCPlugin_Protection.dll (IObit)

BHO-x32: GbIehObj Class - {C41A1C0E-EA6C-11D4-B1B8-444553540007} - C:\Program Files (x86)\GbPlugin\gbiehabn.dll (Banco Real)

BHO-x32: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)

BHO-x32: SmartSelect Class - {F4971EE7-DAA0-4053-9964-665D8EE6A077} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)

Toolbar: HKLM - avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)

Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)

Toolbar: HKLM-x32 - Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)

Toolbar: HKLM-x32 - avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)

Toolbar: HKLM-x32 - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)

DPF: HKLM-x32 {0D41B8C5-2599-4893-8183-00195EC8D5F9} http://support.asus.com/select/asusTek_sys_ctrl3.cab

DPF: HKLM-x32 {108D3206-846A-4A93-BACB-F0572D043ED7} http://marahu.dvrdns.org:3130/webrec.cab

DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab

Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Skype Technologies S.A.)

Handler-x32: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)

Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)

ShellExecuteHooks-x32: GbPluginObj Class - {E37CB5F0-51F5-4395-A808-5FA49E399007} - C:\Program Files (x86)\GbPlugin\gbiehabn.dll [1598520 2013-09-23] (Banco Real)

Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt

Tcpip\Parameters: [DhcpNameServer] 187.22.0.61 187.22.0.66

Tcpip\..\Interfaces\{A014895A-EA50-48E7-B92D-4BA595890AA7}: [NameServer]187.22.0.61,187.22.0.66

FireFox:

========

FF ProfilePath: C:\Users\ACSA\AppData\Roaming\Mozilla\Firefox\Profiles\v1q90507.default

FF SelectedSearchEngine: Google

FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_8_800_94.dll ()

FF Plugin: @java.com/DTPlugin,version=10.5.0 - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)

FF Plugin: @java.com/JavaPlugin,version=10.5.0 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)

FF Plugin: @microsoft.com/GENUINE - disabled No File

FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)

FF Plugin: adobe.com/AdobeAAMDetect - C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect64.dll (Adobe Systems)

FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_8_800_94.dll ()

FF Plugin-x32: @Apple.com/iTunes,version=1.0 - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()

FF Plugin-x32: @esn.me/esnsonar,version=0.70.4 - C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.4\npesnsonar.dll (ESN Social Software AB)

FF Plugin-x32: @esn/npbattlelog,version=2.3.2 - C:\Program Files (x86)\Battlelog Web Plugins\2.3.2\npbattlelog.dll (EA Digital Illusions CE AB)

FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)

FF Plugin-x32: @graphisoft.com/GDL Web Plug-in - C:\Program Files (x86)\GRAPHISOFT\GDLWebControl\npGDLMozilla.dll (Graphisoft SE)

FF Plugin-x32: @java.com/DTPlugin,version=10.45.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)

FF Plugin-x32: @java.com/JavaPlugin,version=10.45.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)

FF Plugin-x32: @microsoft.com/GENUINE - disabled No File

FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)

FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3508.0205 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)

FF Plugin-x32: @Nero.com/KM - C:\PROGRA~2\COMMON~1\Nero\BROWSE~1\NPBROW~1.DLL (Nero AG)

FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)

FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)

FF Plugin-x32: Adobe Acrobat - C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Air\nppdf32.dll (Adobe Systems Inc.)

FF Plugin-x32: adobe.com/AdobeAAMDetect - C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect32.dll (Adobe Systems)

FF Plugin HKCU: @talk.google.com/GoogleTalkPlugin - C:\Users\ACSA\AppData\Roaming\Mozilla\plugins\npgoogletalk.dll (Google)

FF Plugin HKCU: @talk.google.com/O1DPlugin - C:\Users\ACSA\AppData\Roaming\Mozilla\plugins\npo1d.dll (Google)

FF Plugin HKCU: @talk.google.com/O3DPlugin - C:\Users\ACSA\AppData\Roaming\Mozilla\plugins\npgtpo3dautoplugin.dll ()

FF Plugin HKCU: @tools.google.com/Google Update;version=3 - C:\Users\ACSA\AppData\Local\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)

FF Plugin HKCU: @tools.google.com/Google Update;version=9 - C:\Users\ACSA\AppData\Local\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)

FF Plugin HKCU: gastecnologia.com.br/sf/abn - C:\Users\ACSA\AppData\Local\GAS Tecnologia\GBBD\npsf_abn.dll (GAS Tecnologia)

FF SearchPlugin: C:\Users\ACSA\AppData\Roaming\Mozilla\Firefox\Profiles\v1q90507.default\searchplugins\yahoo_ff.xml

FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\buscape.xml

FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\mercadolivre.xml

FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-br.xml

FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo_ff.xml

FF Extension: Ads Removal - C:\Users\ACSA\AppData\Roaming\Mozilla\Firefox\Profiles\v1q90507.default\Extensions\adsremoval@adsremoval.net

FF Extension: Advanced SystemCare Surfing Protection - C:\Users\ACSA\AppData\Roaming\Mozilla\Firefox\Profiles\v1q90507.default\Extensions\ascsurfingprotection@iobit.com

FF Extension: support - C:\Users\ACSA\AppData\Roaming\Mozilla\Firefox\Profiles\v1q90507.default\Extensions\support@real-hide-ip.com.xpi

FF HKLM-x32\...\Firefox\Extensions: [web2pdfextension@web2pdf.adobedotcom] - C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Browser\WCFirefoxExtn

FF Extension: Adobe Acrobat - Create PDF - C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Browser\WCFirefoxExtn

FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF

FF Extension: avast! Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF

FF HKCU\...\Firefox\Extensions: [{87F8774F-B485-47E2-A755-A40A8A5E8874}] - C:\Users\ACSA\AppData\Local\GAS Tecnologia\GBBD\abn\xpi

FF Extension: GBBD Banco Santander (Brasil) S.A. - C:\Users\ACSA\AppData\Local\GAS Tecnologia\GBBD\abn\xpi

Chrome:

=======

CHR DefaultSearchKeyword: yahoo.com search

CHR DefaultSearchProvider: Yahoo

CHR DefaultSearchURL: http://br.search.yahoo.com/search?fr=chr-greentree_gc&ei=utf-8&ilc=12&type=800236&p={searchTerms}

CHR DefaultNewTabURL:

CHR Extension: (Google Drive) - C:\Users\ACSA\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0

CHR Extension: (YouTube) - C:\Users\ACSA\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0

CHR Extension: (Google Search) - C:\Users\ACSA\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0

CHR Extension: (Advanced SystemCare Surfing Protection) - C:\Users\ACSA\AppData\Local\Google\Chrome\User Data\Default\Extensions\nfengeggddojhakldhlpjdlddgkkjkdd\1.0.0_1

CHR Extension: (Google Wallet) - C:\Users\ACSA\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.5.0_1

CHR Extension: (Gmail) - C:\Users\ACSA\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1

CHR HKLM-x32\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files (x86)\Skype\Toolbars\Skype for Chromium\skype_chrome_extension.crx

CHR HKLM-x32\...\Chrome\Extension: [nfengeggddojhakldhlpjdlddgkkjkdd] - C:\Program Files (x86)\IObit\Surfing Protection\BrowerProtect\ASC_GhromePlugin.crx

CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION

==================== Services (Whitelisted) =================

R2 AdvancedSystemCareService7; C:\Program Files (x86)\IObit\Advanced SystemCare 7\ASCService.exe [878368 2013-10-25] (IObit)

R2 asComSvc; C:\Program Files (x86)\ASUS\AXSP\1.00.13\atkexComSvc.exe [918144 2010-11-03] ()

R2 asHmComSvc; C:\Program Files (x86)\ASUS\AAHM\1.00.13\aaHMSvc.exe [915584 2010-12-02] ()

R2 AsSysCtrlService; C:\Program Files (x86)\ASUS\AsSysCtrlService\1.00.11\AsSysCtrlService.exe [586880 2010-10-21] ()

R2 Autodesk Content Service; C:\Program Files (x86)\Autodesk\Content Service\Connect.Service.ContentService.exe [12288 2012-12-13] (Autodesk, Inc.)

R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2013-12-01] (AVAST Software)

R2 CLPSLauncher; C:\Program Files (x86)\Common Files\COMODO\launcher_service.exe [70352 2013-12-13] (Comodo Security Solutions, Inc.)

R2 cmdAgent; C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe [6254152 2013-10-19] (COMODO)

S3 cmdvirth; C:\Program Files\COMODO\COMODO Internet Security\cmdvirth.exe [164056 2013-09-24] (COMODO)

R2 DragonUpdater; C:\Program Files (x86)\Comodo\Dragon\dragon_updater.exe [2098880 2013-11-11] ()

R2 DTSAudioService; C:\Program Files\Realtek\Audio\HDA\DTSAudioService64.exe [210024 2013-10-05] (DTS)

R2 GbpSv; C:\Program Files (x86)\GbPlugin\gbpsv.exe [409144 2013-08-19] (GAS Tecnologia)

R2 GeekBuddyRSP; C:\Program Files (x86)\Common Files\COMODO\GeekBuddyRSP.exe [2327248 2013-12-13] (Comodo Security Solutions, Inc.)

R2 IMFservice; C:\Program Files (x86)\IObit\IObit Malware Fighter\IMFsrv.exe [341824 2013-11-11] (IObit)

R2 KSS; C:\Program Files (x86)\Kaspersky Lab\Kaspersky Security Scan 2.0\kss.exe [202328 2012-12-07] (Kaspersky Lab ZAO)

R2 LiveUpdateSvc; C:\Program Files (x86)\IObit\LiveUpdate\LiveUpdate.exe [2151200 2013-10-25] (IObit)

R2 MsMpSvc; C:\Program Files\Microsoft Security Client\MsMpEng.exe [23808 2013-10-23] (Microsoft Corporation)

R3 NisSrv; C:\Program Files\Microsoft Security Client\NisSrv.exe [348376 2013-10-23] (Microsoft Corporation)

R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1370912 2013-11-29] (NVIDIA Corporation)

R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [15128352 2013-11-29] (NVIDIA Corporation)

R2 PnkBstrA; C:\Windows\SysWow64\PnkBstrA.exe [76888 2013-11-01] ()

R2 PSI_SVC_2_x64; c:\Program Files\Common Files\Protexis\License Service\PsiService_2.exe [336824 2010-11-30] (arvato digital services llc)

R2 ReflectService.exe; C:\Program Files\Macrium\Reflect\ReflectService.exe [301760 2012-09-25] ()

R2 WDBackup; C:\Program Files (x86)\Western Digital\WD SmartWare\WDBackupEngine.exe [1157056 2012-09-19] (Western Digital )

R2 WDDriveService; C:\Program Files (x86)\Western Digital\WD Drive Manager\WDDriveService.exe [248248 2012-09-06] (Western Digital)

R2 WDRulesService; C:\Program Files (x86)\Western Digital\WD SmartWare\WDRulesEngine.exe [1177536 2012-09-19] (Western Digital )

==================== Drivers (Whitelisted) ====================

S3 AIDA64Driver; No ImagePath

R1 AsIO; C:\Windows\SysWow64\drivers\AsIO.sys [13440 2010-08-24] ()

R1 AsUpIO; C:\Windows\SysWow64\drivers\AsUpIO.sys [14464 2010-08-03] ()

R2 aswFsBlk; C:\Windows\system32\drivers\aswFsBlk.sys [38984 2013-12-01] (AVAST Software)

R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [84328 2013-12-01] (AVAST Software)

R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [92544 2013-12-01] (AVAST Software)

R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65776 2013-12-01] ()

R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1032416 2013-12-01] (AVAST Software)

R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [409832 2013-12-01] (AVAST Software)

R1 aswTdi; C:\Windows\system32\drivers\aswTdi.sys [65264 2013-12-01] (AVAST Software)

R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [205320 2013-12-01] ()

R1 CFRMD; C:\Windows\System32\DRIVERS\CFRMD.sys [37976 2013-05-07] (Windows ® Win 7 DDK provider)

R1 cmderd; C:\Windows\System32\DRIVERS\cmderd.sys [23168 2013-09-24] (COMODO)

R1 cmdGuard; C:\Windows\System32\DRIVERS\cmdguard.sys [709144 2013-11-14] (COMODO)

R1 cmdHlp; C:\Windows\System32\DRIVERS\cmdhlp.sys [48872 2013-09-24] (COMODO)

S3 DIRECTIO; C:\Program Files\PerformanceTest\DirectIo64.sys [25704 2012-08-13] ()

R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283200 2012-09-15] (DT Soft Ltd)

S3 esgiguard; C:\Program Files\Enigma Software Group\SpyHunter\esgiguard.sys [13088 2011-03-02] ()

S4 FileMonitor; C:\Program Files (x86)\IObit\IObit Malware Fighter\Drivers\win7_amd64\FileMonitor.sys [23048 2013-03-23] (IObit)

S0 GbpKm; C:\Windows\SysWow64\drivers\gbpkm.sys [47856 2012-09-18] (GAS Tecnologia)

R1 HMD; C:\Windows\System32\DRIVERS\hmd.sys [14888 2013-10-07] ()

R1 inspect; C:\Windows\System32\DRIVERS\inspect.sys [96800 2013-09-24] (COMODO)

R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [248240 2013-09-27] (Microsoft Corporation)

R2 NisDrv; C:\Windows\System32\DRIVERS\NisDrvWFP.sys [134944 2013-09-27] (Microsoft Corporation)

R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [39200 2013-10-30] (NVIDIA Corporation)

S3 pwdrvio; C:\Windows\system32\pwdrvio.sys [19032 2012-08-20] ()

S3 pwdspio; C:\Windows\system32\pwdspio.sys [12384 2012-08-20] ()

S3 RegFilter; C:\Program Files (x86)\IObit\IObit Malware Fighter\drivers\win7_amd64\regfilter.sys [34848 2013-11-19] (IObit.com)

R1 Serial; C:\Windows\System32\DRIVERS\serial.sys [94208 2009-07-13] (Brother Industries Ltd.)

R0 SmartDefragDriver; C:\Windows\System32\Drivers\SmartDefragDriver.sys [17720 2013-05-22] ()

S3 UrlFilter; C:\Program Files (x86)\IObit\IObit Malware Fighter\drivers\win7_amd64\UrlFilter.sys [23016 2013-11-19] (IObit.com)

R2 WIBUKEY; C:\Windows\System32\DRIVERS\WibuKey64.sys [97792 2011-09-22] (WIBU-SYSTEMS AG)

==================== NetSvcs (Whitelisted) ===================

==================== One Month Created Files and Folders ========

2013-12-14 17:53 - 2013-12-14 17:53 - 00034299 _____ C:\Users\ACSA\Desktop\FRST.txt

2013-12-14 17:53 - 2013-12-14 17:53 - 00000000 ____D C:\FRST

2013-12-14 17:51 - 2013-12-14 17:50 - 01927796 _____ (Farbar) C:\Users\ACSA\Desktop\FRST64.exe

2013-12-14 16:39 - 2013-12-14 16:39 - 00000000 ____H C:\ProgramData\cm-lock

2013-12-14 13:12 - 2013-12-14 13:12 - 01034531 _____ (Thisisu) C:\Users\ACSA\Desktop\JRT.exe

2013-12-14 12:30 - 2013-12-14 12:31 - 00000000 ____D C:\AdwCleaner

2013-12-14 11:57 - 2013-12-14 11:58 - 05154339 _____ (Swearware) C:\Users\ACSA\Downloads\ComboFix.exe

2013-12-14 11:32 - 2013-12-14 17:50 - 01927796 _____ (Farbar) C:\Users\ACSA\Downloads\FRST64.exe

2013-12-14 10:11 - 2013-12-14 10:11 - 04101441 _____ C:\Users\ACSA\Downloads\tdsskiller.zip

2013-12-14 09:50 - 2013-12-14 16:38 - 00000840 _____ C:\Windows\setupact.log

2013-12-14 09:50 - 2013-12-14 09:50 - 00000534 _____ C:\Windows\PFRO.log

2013-12-14 09:50 - 2013-12-14 09:50 - 00000000 _____ C:\Windows\setuperr.log

2013-12-14 09:18 - 2013-12-14 09:28 - 00000000 ____D C:\ProgramData\HitmanPro

2013-12-14 09:18 - 2013-12-14 09:19 - 00000000 ____D C:\Program Files\HitmanPro

2013-12-14 09:16 - 2013-12-14 09:17 - 10264904 _____ (SurfRight B.V.) C:\Users\ACSA\Downloads\HitmanPro_x64.exe

2013-12-13 11:14 - 2013-12-14 11:35 - 00891200 _____ C:\Users\ACSA\Downloads\SecurityCheck.exe

2013-12-13 11:10 - 2013-12-13 11:10 - 04050563 _____ C:\Users\ACSA\Downloads\zoek.zip

2013-12-13 10:23 - 2013-12-13 10:22 - 01226802 _____ C:\Users\ACSA\Desktop\adwcleaner.exe

2013-12-13 10:03 - 2013-12-13 10:03 - 00002330 _____ C:\Users\ACSA\Downloads\RKreport0_S_08182013_083750.txt

2013-12-12 16:38 - 2013-12-12 16:39 - 00000000 ___SD C:\ComboFix

2013-12-12 16:35 - 2013-12-12 17:55 - 00000000 ___DC C:\Users\ACSA\AppData\Local\MigWiz

2013-12-12 16:04 - 2013-12-14 11:58 - 00001081 _____ C:\Users\ACSA\Downloads\yahoo search.txt

2013-12-12 00:21 - 2013-12-12 00:21 - 00000000 ____D C:\Users\ACSA\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Kaspersky Security Scan

2013-12-12 00:21 - 2013-12-12 00:21 - 00000000 ____D C:\ProgramData\Kaspersky Lab

2013-12-12 00:21 - 2013-12-12 00:21 - 00000000 ____D C:\Program Files (x86)\Kaspersky Lab

2013-12-12 00:18 - 2013-12-12 00:19 - 00184704 _____ (Kaspersky Lab) C:\Users\ACSA\Downloads\kss12.0.1.117mlg_en_de_es_fr_it_ja_pt-br_ru_zh-Hans-br.exe

2013-12-11 21:40 - 2013-12-14 16:44 - 00373793 _____ C:\Windows\WindowsUpdate.log

2013-12-11 21:39 - 2013-12-11 21:39 - 00011960 _____ C:\Users\ACSA\Documents\cc_20131211_213941.reg

2013-12-10 21:53 - 2013-05-10 03:56 - 14631424 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll

2013-12-10 21:53 - 2013-05-10 03:56 - 12625920 _____ (Microsoft Corporation) C:\Windows\system32\wmploc.DLL

2013-12-10 21:53 - 2013-05-10 02:56 - 12625408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmploc.DLL

2013-12-10 21:53 - 2013-05-10 02:56 - 11410432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmp.dll

2013-12-10 21:52 - 2013-11-26 09:54 - 23183360 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll

2013-12-10 21:52 - 2013-11-26 08:19 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb

2013-12-10 21:52 - 2013-11-26 08:18 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll

2013-12-10 21:52 - 2013-11-26 08:11 - 17112576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll

2013-12-10 21:52 - 2013-11-26 07:48 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll

2013-12-10 21:52 - 2013-11-26 07:46 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll

2013-12-10 21:52 - 2013-11-26 07:41 - 02764288 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll

2013-12-10 21:52 - 2013-11-26 07:29 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll

2013-12-10 21:52 - 2013-11-26 07:27 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll

2013-12-10 21:52 - 2013-11-26 07:23 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb

2013-12-10 21:52 - 2013-11-26 07:21 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll

2013-12-10 21:52 - 2013-11-26 07:18 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe

2013-12-10 21:52 - 2013-11-26 07:18 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe

2013-12-10 21:52 - 2013-11-26 07:16 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll

2013-12-10 21:52 - 2013-11-26 06:57 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe

2013-12-10 21:52 - 2013-11-26 06:38 - 02166784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll

2013-12-10 21:52 - 2013-11-26 06:38 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll

2013-12-10 21:52 - 2013-11-26 06:35 - 05769216 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll

2013-12-10 21:52 - 2013-11-26 06:32 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll

2013-12-10 21:52 - 2013-11-26 06:28 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll

2013-12-10 21:52 - 2013-11-26 06:16 - 04243968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll

2013-12-10 21:52 - 2013-11-26 06:02 - 01995264 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl

2013-12-10 21:52 - 2013-11-26 05:48 - 12996608 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll

2013-12-10 21:52 - 2013-11-26 05:32 - 01928192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl

2013-12-10 21:52 - 2013-11-26 05:26 - 11221504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll

2013-12-10 21:52 - 2013-11-26 05:07 - 02334208 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll

2013-12-10 21:52 - 2013-11-26 04:40 - 01395200 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll

2013-12-10 21:52 - 2013-11-26 04:34 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll

2013-12-10 21:52 - 2013-11-26 04:34 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll

2013-12-10 21:52 - 2013-11-26 04:33 - 01820160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll

2013-12-10 21:52 - 2013-11-26 04:27 - 01157632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll

2013-12-10 21:49 - 2013-11-23 16:26 - 00417792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMPhoto.dll

2013-12-10 21:49 - 2013-11-23 15:47 - 00465920 _____ (Microsoft Corporation) C:\Windows\system32\WMPhoto.dll

2013-12-10 21:49 - 2013-10-30 00:32 - 00335360 _____ (Microsoft Corporation) C:\Windows\system32\msieftp.dll

2013-12-10 21:49 - 2013-10-30 00:19 - 00301568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msieftp.dll

2013-12-10 21:49 - 2013-10-29 23:24 - 03155968 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys

2013-12-10 21:49 - 2013-10-19 00:18 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\imagehlp.dll

2013-12-10 21:49 - 2013-10-18 23:36 - 00159232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imagehlp.dll

2013-12-10 21:48 - 2013-11-12 00:23 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll

2013-12-10 21:48 - 2013-11-12 00:07 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll

2013-12-10 21:48 - 2013-10-12 00:32 - 00150016 _____ (Microsoft Corporation) C:\Windows\system32\wshom.ocx

2013-12-10 21:48 - 2013-10-12 00:31 - 00202752 _____ (Microsoft Corporation) C:\Windows\system32\scrrun.dll

2013-12-10 21:48 - 2013-10-12 00:04 - 00121856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wshom.ocx

2013-12-10 21:48 - 2013-10-12 00:03 - 00163840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\scrrun.dll

2013-12-10 21:48 - 2013-10-11 23:33 - 00168960 _____ (Microsoft Corporation) C:\Windows\system32\wscript.exe

2013-12-10 21:48 - 2013-10-11 23:33 - 00156160 _____ (Microsoft Corporation) C:\Windows\system32\cscript.exe

2013-12-10 21:48 - 2013-10-11 23:15 - 00141824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wscript.exe

2013-12-10 21:48 - 2013-10-11 23:15 - 00126976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cscript.exe

2013-12-10 21:48 - 2013-10-04 00:16 - 00116736 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\drmk.sys

2013-12-10 21:48 - 2013-10-03 23:36 - 00230400 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\portcls.sys

2013-12-10 18:39 - 2013-12-10 18:39 - 00000000 ____D C:\Users\ACSA\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Sophos

2013-12-10 18:39 - 2013-12-10 18:39 - 00000000 ____D C:\ProgramData\Sophos

2013-12-10 18:39 - 2013-12-10 18:39 - 00000000 ____D C:\Program Files (x86)\Sophos

2013-12-10 18:38 - 2013-12-10 18:38 - 00000031 _____ C:\Windows\Model.txt

2013-12-10 18:37 - 2013-12-10 18:37 - 00000260 _____ C:\Users\ACSA\Downloads\fsbl-20131210203734.log

2013-12-10 18:36 - 2013-12-10 18:36 - 01137360 _____ (F-Secure Corporation) C:\Users\ACSA\Downloads\fsbl.exe

2013-12-10 18:28 - 2013-12-10 18:28 - 00000000 ____D C:\Users\ACSA\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\HiJackThis

2013-12-10 18:28 - 2013-12-10 18:28 - 00000000 ____D C:\Program Files (x86)\Trend Micro

2013-12-10 18:24 - 2013-12-10 18:27 - 80777032 _____ (Sophos Limited) C:\Users\ACSA\Downloads\Sophos Virus Removal Tool.exe

2013-12-10 18:24 - 2013-12-10 18:24 - 01402880 _____ C:\Users\ACSA\Downloads\HiJackThis.msi

2013-12-10 11:55 - 2013-12-10 11:55 - 00000000 ____D C:\Windows\ERUNT

2013-12-10 11:55 - 2013-12-10 11:42 - 01034531 _____ (Thisisu) C:\Users\ACSA\Downloads\JRT.exe

2013-12-10 11:45 - 2013-12-13 10:22 - 01226802 _____ C:\Users\ACSA\Downloads\adwcleaner.exe

2013-12-10 11:30 - 2013-12-10 11:31 - 04166144 _____ C:\Users\ACSA\Downloads\RogueKillerX64.exe

2013-12-10 07:58 - 2013-12-10 07:58 - 07363640 _____ C:\Users\ACSA\Downloads\SCX5600_x86_6.5aS_GM.exe

2013-12-07 19:12 - 2013-12-08 07:44 - 00000000 ____D C:\Users\ACSA\AppData\Roaming\AudioGate

2013-12-07 19:11 - 2013-12-07 19:11 - 00000000 ____D C:\Program Files (x86)\KORG

2013-12-07 19:10 - 2013-12-07 19:10 - 00000000 ____D C:\Windows\Downloaded Installations

2013-12-07 19:08 - 2013-12-07 19:09 - 17754289 _____ C:\Users\ACSA\Downloads\KORG_AudioGate_2_3_3.zip

2013-12-07 09:51 - 2013-06-06 18:41 - 00489392 _____ (Ask Partner Network) C:\Users\ACSA\Documents\APNSetup1.exe

2013-12-07 09:21 - 2013-12-07 09:21 - 00000023 _____ C:\Users\ACSA\Downloads\DNS.txt

2013-12-07 09:12 - 2013-12-07 09:12 - 00000000 ____D C:\Users\ACSA\AppData\Roaming\RealHideIP

2013-12-07 09:12 - 2013-12-07 09:12 - 00000000 ____D C:\ProgramData\RealHideIP

2013-12-07 08:56 - 2013-12-07 08:55 - 04034166 ____R (Friends in War) C:\Users\ACSA\Desktop\Real Hide IP v4.2.9.6 (1-click run)(registered).exe

2013-12-07 08:53 - 2013-12-07 08:53 - 00000000 ____D C:\Users\ACSA\Downloads\Real Hide IP v4.2.9.6 (1-click run)(registered)

2013-12-07 08:51 - 2013-12-07 08:51 - 00923784 _____ (CNET Download.com) C:\Users\ACSA\Downloads\cbsidlm-cbsi145-Real_Hide_IP-ORG-10907662.exe

2013-12-06 18:31 - 2013-12-06 18:31 - 00018685 _____ C:\Users\ACSA\Downloads\REL_1026.HTM

2013-12-06 11:53 - 2013-12-06 11:53 - 00003119 _____ C:\Users\ACSA\Downloads\Conclamacao Arquitetos Baixada (1).txt

2013-12-05 21:19 - 2013-12-05 21:19 - 00003119 _____ C:\Users\ACSA\Downloads\Conclamacao Arquitetos Baixada.txt

2013-12-04 10:10 - 2013-12-04 11:00 - 25095200 _____ (IObit ) C:\Users\ACSA\Downloads\imf-setup.exe

2013-12-04 08:11 - 2013-12-04 08:11 - 00000000 ____D C:\Windows\en

2013-12-04 08:11 - 2013-12-04 08:11 - 00000000 ____D C:\Program Files (x86)\Microsoft SQL Server Compact Edition

2013-12-04 08:10 - 2013-12-04 08:11 - 00000000 ____D C:\Program Files (x86)\Windows Live

2013-12-04 08:10 - 2013-12-04 08:10 - 00000000 ____D C:\Windows\PCHEALTH

2013-12-04 08:04 - 2013-12-04 08:28 - 00000000 ____D C:\Users\ACSA\AppData\Local\Windows Live

2013-12-04 08:04 - 2013-12-04 08:04 - 01242112 _____ (Microsoft Corporation) C:\Users\ACSA\Downloads\wlsetup-web.exe

2013-12-03 00:03 - 2013-10-30 15:03 - 00039200 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvvad64v.sys

2013-12-03 00:03 - 2013-10-30 15:02 - 00032544 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvaudcap32v.dll

2013-12-01 13:53 - 2013-12-01 13:53 - 00000000 ____D C:\Users\ACSA\AppData\Roaming\AVAST Software

2013-12-01 11:00 - 2013-12-01 11:00 - 00000000 ____D C:\Users\ACSA\Downloads\rebolsodoitarar

2013-12-01 08:30 - 2013-12-01 08:30 - 00000000 ____D C:\Users\ACSA\.MCTranscodingSDK

2013-12-01 08:22 - 2013-12-01 08:22 - 00000000 ____D C:\ProgramData\Geevs

2013-12-01 08:21 - 2013-12-10 09:11 - 00000000 ____D C:\Users\Public\Documents\Lightworks

2013-12-01 08:21 - 2013-12-01 08:30 - 00000000 ____D C:\Program Files (x86)\Lightworks

2013-12-01 08:14 - 2013-12-01 08:16 - 154323168 _____ (Online Media Technologies Ltd. ) C:\Users\ACSA\Downloads\AVSVideoEditor.exe

2013-11-29 23:26 - 2013-12-01 07:35 - 00000000 ____D C:\Users\ACSA\Downloads\Cine Marahu

2013-11-29 20:43 - 2013-11-29 20:43 - 00518455 _____ C:\Users\ACSA\Downloads\ArchiCAD_16_to_ATL5-Win_64-bit (1).zip

2013-11-29 20:43 - 2013-11-29 20:43 - 00000000 ____D C:\Users\ACSA\Downloads\ArchiCAD_16_to_ATL5-Win_64-bit

2013-11-29 20:38 - 2013-12-02 15:42 - 00000000 ____D C:\Users\ACSA\AppData\Roaming\Abvent_Artlantis5

2013-11-29 20:30 - 2013-12-02 10:57 - 00000000 ____D C:\ProgramData\Abvent

2013-11-29 20:30 - 2013-11-29 20:30 - 00000000 ____D C:\Users\Public\Documents\Abvent

2013-11-29 20:08 - 2013-11-29 20:37 - 00000000 ____D C:\Program Files\Artlantis Studio 5

2013-11-26 18:53 - 2013-11-26 18:53 - 00002848 _____ C:\Windows\System32\Tasks\ASC7_SkipUac_ACSA

2013-11-26 18:43 - 2013-11-26 18:43 - 00001165 _____ C:\Users\ACSA\AppData\Roaming\Microsoft\Windows\Start Menu\Uninstall Programs.lnk

2013-11-26 18:43 - 2013-11-26 18:43 - 00000000 ____D C:\ProgramData\ProductData

2013-11-26 18:43 - 2013-11-26 18:43 - 00000000 ____D C:\ProgramData\{3C5CBD7B-3D1D-411E-96C2-513FFCA84D2D}

2013-11-23 20:36 - 2013-12-07 08:57 - 00003266 _____ C:\Windows\system32\Drivers\fvstore.dat

2013-11-23 20:34 - 2013-11-23 20:36 - 00000000 ____D C:\Users\ACSA\Downloads\Artlantis 5.0.2.3 Win64

2013-11-23 18:23 - 2013-11-23 19:18 - 517767020 _____ C:\Users\ACSA\Downloads\Artlantis 5.0.2.3 Win64.rar

2013-11-23 18:21 - 2013-11-23 18:21 - 00518455 _____ C:\Users\ACSA\Downloads\ArchiCAD_16_to_ATL5-Win_64-bit.zip

2013-11-23 18:21 - 2013-11-23 18:21 - 00446633 _____ C:\Users\ACSA\Downloads\ArchiCAD_16_to_ATL5-Win_32-bit.zip

2013-11-21 10:40 - 2013-11-21 10:41 - 00014015 _____ C:\Users\ACSA\AppData\Roaming\unins000.dat

2013-11-21 10:40 - 2013-11-21 10:40 - 00717985 _____ C:\Users\ACSA\AppData\Roaming\unins000.exe

2013-11-21 10:40 - 2013-11-21 10:40 - 00000000 ____D C:\Users\ACSA\AppData\Local\GAS Tecnologia

2013-11-21 10:38 - 2013-11-21 10:38 - 03357248 _____ (GAS Tecnologia ) C:\Users\ACSA\Downloads\gbplugin2.exe

2013-11-20 17:41 - 2013-11-20 17:41 - 00004762 _____ C:\Users\ACSA\Downloads\al_barbecue1.zip

2013-11-20 13:23 - 2013-11-11 13:02 - 06674208 _____ (NVIDIA Corporation) C:\Windows\system32\nvcpl.dll

2013-11-20 13:23 - 2013-11-11 13:02 - 03490080 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvc64.dll

2013-11-20 13:23 - 2013-11-11 13:01 - 03467927 _____ C:\Windows\system32\nvcoproc.bin

2013-11-20 13:23 - 2013-11-11 13:01 - 00922912 _____ (NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe

2013-11-20 13:23 - 2013-11-11 13:01 - 00219424 _____ (NVIDIA Corporation) C:\Windows\system32\nvmctray.dll

2013-11-20 13:23 - 2013-11-11 13:01 - 00063776 _____ (NVIDIA Corporation) C:\Windows\system32\nvshext.dll

2013-11-20 13:21 - 2013-11-14 09:55 - 30361888 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll

2013-11-20 13:21 - 2013-11-14 09:55 - 25257248 _____ (NVIDIA Corporation) C:\Windows\system32\nvcompiler.dll

2013-11-20 13:21 - 2013-11-14 09:55 - 22951200 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll

2013-11-20 13:21 - 2013-11-14 09:55 - 18293608 _____ (NVIDIA Corporation) C:\Windows\system32\nvwgf2umx.dll

2013-11-20 13:21 - 2013-11-14 09:55 - 18208624 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dumx.dll

2013-11-20 13:21 - 2013-11-14 09:55 - 17560352 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcompiler.dll

2013-11-20 13:21 - 2013-11-14 09:55 - 15862272 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvwgf2um.dll

2013-11-20 13:21 - 2013-11-14 09:55 - 15218504 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvd3dum.dll

2013-11-20 13:21 - 2013-11-14 09:55 - 12613408 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys

2013-11-20 13:21 - 2013-11-14 09:55 - 11600432 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll

2013-11-20 13:21 - 2013-11-14 09:55 - 11514624 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll

2013-11-20 13:21 - 2013-11-14 09:55 - 09691888 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll

2013-11-20 13:21 - 2013-11-14 09:55 - 09619872 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll

2013-11-20 13:21 - 2013-11-14 09:55 - 03132704 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll

2013-11-20 13:21 - 2013-11-14 09:55 - 03125024 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvenc.dll

2013-11-20 13:21 - 2013-11-14 09:55 - 03069608 _____ (NVIDIA Corporation) C:\Windows\system32\nvapi64.dll

2013-11-20 13:21 - 2013-11-14 09:55 - 02947872 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll

2013-11-20 13:21 - 2013-11-14 09:55 - 02747680 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvenc.dll

2013-11-20 13:21 - 2013-11-14 09:55 - 02697248 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvapi.dll

2013-11-20 13:21 - 2013-11-14 09:55 - 01884448 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6433182.dll

2013-11-20 13:21 - 2013-11-14 09:55 - 01511712 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6433182.dll

2013-11-20 13:21 - 2013-11-14 09:55 - 01510176 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdagenco64.dll

2013-11-20 13:21 - 2013-11-14 09:55 - 01436528 _____ (NVIDIA Corporation) C:\Windows\system32\nvumdshimx.dll

2013-11-20 13:21 - 2013-11-14 09:55 - 01242400 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvumdshim.dll

2013-11-20 13:21 - 2013-11-14 09:55 - 00707360 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll

2013-11-20 13:21 - 2013-11-14 09:55 - 00657184 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll

2013-11-20 13:21 - 2013-11-14 09:55 - 00609568 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll

2013-11-20 13:21 - 2013-11-14 09:55 - 00562464 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll

2013-11-20 13:21 - 2013-11-14 09:55 - 00317472 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglshim64.dll

2013-11-20 13:21 - 2013-11-14 09:55 - 00266984 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglshim32.dll

2013-11-20 13:21 - 2013-11-14 09:55 - 00196384 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvhda64v.sys

2013-11-20 13:21 - 2013-11-14 09:55 - 00168616 _____ (NVIDIA Corporation) C:\Windows\system32\nvinitx.dll

2013-11-20 13:21 - 2013-11-14 09:55 - 00141336 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvinit.dll

2013-11-20 13:21 - 2013-11-14 09:55 - 00031520 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdap64.dll

2013-11-20 13:21 - 2013-11-14 09:55 - 00023754 _____ C:\Windows\system32\nvinfo.pb

2013-11-19 13:15 - 2013-10-14 18:00 - 00028368 _____ (Microsoft Corporation) C:\Windows\system32\IEUDINIT.EXE

2013-11-19 13:13 - 2013-11-19 13:13 - 01228800 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll

2013-11-19 13:13 - 2013-11-19 13:13 - 01051136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll

2013-11-19 13:13 - 2013-11-19 13:13 - 00942592 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll

2013-11-19 13:13 - 2013-11-19 13:13 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe

2013-11-19 13:13 - 2013-11-19 13:13 - 00774144 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll

2013-11-19 13:13 - 2013-11-19 13:13 - 00645120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsIntl.dll

2013-11-19 13:13 - 2013-11-19 13:13 - 00626176 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll

2013-11-19 13:13 - 2013-11-19 13:13 - 00616104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat

2013-11-19 13:13 - 2013-11-19 13:13 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat

2013-11-19 13:13 - 2013-11-19 13:13 - 00610304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll

2013-11-19 13:13 - 2013-11-19 13:13 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll

2013-11-19 13:13 - 2013-11-19 13:13 - 00523776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll

2013-11-19 13:13 - 2013-11-19 13:13 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll

2013-11-19 13:13 - 2013-11-19 13:13 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll

2013-11-19 13:13 - 2013-11-19 13:13 - 00413696 _____ (Microsoft Corporation) C:\Windows\system32\html.iec

2013-11-19 13:13 - 2013-11-19 13:13 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll

2013-11-19 13:13 - 2013-11-19 13:13 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec

2013-11-19 13:13 - 2013-11-19 13:13 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll

2013-11-19 13:13 - 2013-11-19 13:13 - 00263376 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll

2013-11-19 13:13 - 2013-11-19 13:13 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll

2013-11-19 13:13 - 2013-11-19 13:13 - 00244736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll

2013-11-19 13:13 - 2013-11-19 13:13 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll

2013-11-19 13:13 - 2013-11-19 13:13 - 00238288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll

2013-11-19 13:13 - 2013-11-19 13:13 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\url.dll

2013-11-19 13:13 - 2013-11-19 13:13 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll

2013-11-19 13:13 - 2013-11-19 13:13 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll

2013-11-19 13:13 - 2013-11-19 13:13 - 00208384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll

2013-11-19 13:13 - 2013-11-19 13:13 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll

2013-11-19 13:13 - 2013-11-19 13:13 - 00194048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll

2013-11-19 13:13 - 2013-11-19 13:13 - 00182272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll

2013-11-19 13:13 - 2013-11-19 13:13 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe

2013-11-19 13:13 - 2013-11-19 13:13 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll

2013-11-19 13:13 - 2013-11-19 13:13 - 00151552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe

2013-11-19 13:13 - 2013-11-19 13:13 - 00147968 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll

2013-11-19 13:13 - 2013-11-19 13:13 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe

2013-11-19 13:13 - 2013-11-19 13:13 - 00139264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe

2013-11-19 13:13 - 2013-11-19 13:13 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll

2013-11-19 13:13 - 2013-11-19 13:13 - 00131072 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll

2013-11-19 13:13 - 2013-11-19 13:13 - 00127488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll

2013-11-19 13:13 - 2013-11-19 13:13 - 00116736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll

2013-11-19 13:13 - 2013-11-19 13:13 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe

2013-11-19 13:13 - 2013-11-19 13:13 - 00111616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll

2013-11-19 13:13 - 2013-11-19 13:13 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll

2013-11-19 13:13 - 2013-11-19 13:13 - 00101376 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll

2013-11-19 13:13 - 2013-11-19 13:13 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe

2013-11-19 13:13 - 2013-11-19 13:13 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll

2013-11-19 13:13 - 2013-11-19 13:13 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe

2013-11-19 13:13 - 2013-11-19 13:13 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll

2013-11-19 13:13 - 2013-11-19 13:13 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll

2013-11-19 13:13 - 2013-11-19 13:13 - 00083456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll

2013-11-19 13:13 - 2013-11-19 13:13 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll

2013-11-19 13:13 - 2013-11-19 13:13 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx

2013-11-19 13:13 - 2013-11-19 13:13 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe

2013-11-19 13:13 - 2013-11-19 13:13 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe

2013-11-19 13:13 - 2013-11-19 13:13 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll

2013-11-19 13:13 - 2013-11-19 13:13 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll

2013-11-19 13:13 - 2013-11-19 13:13 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx

2013-11-19 13:13 - 2013-11-19 13:13 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll

2013-11-19 13:13 - 2013-11-19 13:13 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll

2013-11-19 13:13 - 2013-11-19 13:13 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll

2013-11-19 13:13 - 2013-11-19 13:13 - 00056832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll

2013-11-19 13:13 - 2013-11-19 13:13 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll

2013-11-19 13:13 - 2013-11-19 13:13 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll

2013-11-19 13:13 - 2013-11-19 13:13 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll

2013-11-19 13:13 - 2013-11-19 13:13 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll

2013-11-19 13:13 - 2013-11-19 13:13 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll

2013-11-19 13:13 - 2013-11-19 13:13 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll

2013-11-19 13:13 - 2013-11-19 13:13 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll

2013-11-19 13:13 - 2013-11-19 13:13 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll

2013-11-19 13:13 - 2013-11-19 13:13 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll

2013-11-19 13:13 - 2013-11-19 13:13 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll

2013-11-19 13:13 - 2013-11-19 13:13 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll

2013-11-19 13:13 - 2013-11-19 13:13 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll

2013-11-19 13:13 - 2013-11-19 13:13 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe

2013-11-19 13:13 - 2013-11-19 13:13 - 00013312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe

2013-11-19 13:13 - 2013-11-19 13:13 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe

2013-11-19 13:13 - 2013-11-19 13:13 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe

2013-11-18 13:11 - 2013-11-18 13:11 - 00024317 _____ C:\Users\ACSA\Downloads\Conexão com a Internet ficou mais lenta A culpa pode ser do DNS Rodrigo Rey.htm

2013-11-18 13:11 - 2013-11-18 13:11 - 00000000 ____D C:\Users\ACSA\Downloads\Conexão com a Internet ficou mais lenta A culpa pode ser do DNS Rodrigo Rey_files

2013-11-18 13:08 - 2013-11-18 13:09 - 05227019 _____ C:\Users\ACSA\Downloads\namebench-1.3.1-Windows.exe

2013-11-16 11:44 - 2013-11-16 11:45 - 11423642 _____ C:\Users\ACSA\Downloads\fotosdolixonascaladasdapraiadosmilionriosem16nov.zip

2013-11-16 10:57 - 2013-11-16 10:58 - 23742698 _____ C:\Users\ACSA\Downloads\Fugazi - Peel Session 1988.mp4

2013-11-16 10:41 - 2013-11-16 10:41 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox

2013-11-16 09:51 - 2013-11-16 09:51 - 00000000 ____D C:\Users\ACSA\Downloads\badernadoitarar

2013-11-15 13:57 - 2013-11-15 13:57 - 00000000 ____D C:\Users\ACSA\Downloads\revocgostariadeacordarassim

2013-11-15 13:53 - 2013-11-15 13:53 - 17914792 _____ C:\Users\ACSA\Downloads\006.AVI

2013-11-15 08:02 - 2013-11-15 08:03 - 00453120 _____ C:\Users\ACSA\Downloads\filiacao_sasp (1).xls

2013-11-15 07:59 - 2013-11-15 07:59 - 00453120 _____ C:\Users\ACSA\Downloads\filiacao_sasp.xls

2013-11-14 08:52 - 2013-11-14 08:53 - 28436064 _____ (ofcdesk, llc ) C:\Users\ACSA\Downloads\ofcdesk_mep_GrupoRIC_2014forAutoCAD_6.0.0.5.exe

acsalmeida · December 14, 2013

==================== One Month Modified Files and Folders =======

2013-12-14 17:53 - 2013-12-14 17:53 - 00034299 _____ C:\Users\ACSA\Desktop\FRST.txt

2013-12-14 17:53 - 2013-12-14 17:53 - 00000000 ____D C:\FRST

2013-12-14 17:50 - 2013-12-14 17:51 - 01927796 _____ (Farbar) C:\Users\ACSA\Desktop\FRST64.exe

2013-12-14 17:50 - 2013-12-14 11:32 - 01927796 _____ (Farbar) C:\Users\ACSA\Downloads\FRST64.exe

2013-12-14 17:49 - 2012-09-14 23:41 - 00001064 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job

2013-12-14 17:48 - 2012-09-15 01:02 - 00001074 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2759933643-2614577016-1710804323-1000UA.job

2013-12-14 16:47 - 2009-07-14 02:45 - 00020528 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0

2013-12-14 16:47 - 2009-07-14 02:45 - 00020528 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0

2013-12-14 16:44 - 2013-12-11 21:40 - 00373793 _____ C:\Windows\WindowsUpdate.log

2013-12-14 16:44 - 2009-07-14 03:13 - 00782470 _____ C:\Windows\system32\PerfStringBackup.INI

2013-12-14 16:42 - 2012-09-16 09:16 - 00000000 ____D C:\Program Files (x86)\Steam

2013-12-14 16:41 - 2013-01-09 07:37 - 00000000 ____D C:\Users\ACSA\AppData\Roaming\Dropbox

2013-12-14 16:39 - 2013-12-14 16:39 - 00000000 ____H C:\ProgramData\cm-lock

2013-12-14 16:39 - 2012-09-17 16:23 - 00000010 _____ C:\Users\ACSA\AppData\Local\.HG88C586-G30G-2HE2-DGDE-8H3E1D530D30

2013-12-14 16:39 - 2012-09-17 16:23 - 00000010 _____ C:\ProgramData\.F464B91F-G49F-3G3D-CFCD-9G7D2C141C96

2013-12-14 16:38 - 2013-12-14 09:50 - 00000840 _____ C:\Windows\setupact.log

2013-12-14 16:38 - 2013-10-05 10:03 - 00000282 _____ C:\Windows\Tasks\Driver Booster Update.job

2013-12-14 16:38 - 2012-09-14 23:41 - 00001060 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job

2013-12-14 16:38 - 2012-09-14 23:03 - 00000035 _____ C:\Users\Public\Documents\AtherosServiceConfig.ini

2013-12-14 16:37 - 2009-07-14 03:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT

2013-12-14 14:52 - 2012-09-14 23:40 - 00000000 ____D C:\Program Files (x86)\Google

2013-12-14 13:36 - 2013-08-02 14:37 - 03891200 ___SH C:\Users\ACSA\Downloads\Thumbs.db

2013-12-14 13:12 - 2013-12-14 13:12 - 01034531 _____ (Thisisu) C:\Users\ACSA\Desktop\JRT.exe

2013-12-14 12:31 - 2013-12-14 12:30 - 00000000 ____D C:\AdwCleaner

2013-12-14 11:58 - 2013-12-14 11:57 - 05154339 _____ (Swearware) C:\Users\ACSA\Downloads\ComboFix.exe

2013-12-14 11:58 - 2013-12-12 16:04 - 00001081 _____ C:\Users\ACSA\Downloads\yahoo search.txt

2013-12-14 11:35 - 2013-12-13 11:14 - 00891200 _____ C:\Users\ACSA\Downloads\SecurityCheck.exe

2013-12-14 10:24 - 2012-10-16 09:48 - 00019968 ___SH C:\Users\ACSA\Thumbs.db

2013-12-14 10:11 - 2013-12-14 10:11 - 04101441 _____ C:\Users\ACSA\Downloads\tdsskiller.zip

2013-12-14 09:50 - 2013-12-14 09:50 - 00000534 _____ C:\Windows\PFRO.log

2013-12-14 09:50 - 2013-12-14 09:50 - 00000000 _____ C:\Windows\setuperr.log

2013-12-14 09:47 - 2013-03-10 10:53 - 00000000 ____D C:\ProgramData\GAS Tecnologia

2013-12-14 09:44 - 2012-09-15 07:03 - 00000000 ____D C:\Users\ACSA\AppData\Local\CrashDumps

2013-12-14 09:28 - 2013-12-14 09:18 - 00000000 ____D C:\ProgramData\HitmanPro

2013-12-14 09:19 - 2013-12-14 09:18 - 00000000 ____D C:\Program Files\HitmanPro

2013-12-14 09:17 - 2013-12-14 09:16 - 10264904 _____ (SurfRight B.V.) C:\Users\ACSA\Downloads\HitmanPro_x64.exe

2013-12-14 09:15 - 2012-09-15 01:02 - 00001022 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2759933643-2614577016-1710804323-1000Core.job

2013-12-13 21:58 - 2012-09-15 02:23 - 00214392 _____ C:\Windows\SysWOW64\PnkBstrB.exe

2013-12-13 15:52 - 2012-09-15 02:23 - 00214392 _____ C:\Windows\SysWOW64\PnkBstrB.ex0

2013-12-13 15:47 - 2012-09-15 01:02 - 00000000 ____D C:\Program Files (x86)\Origin

2013-12-13 14:58 - 2012-09-15 00:32 - 00000000 ____D C:\ProgramData\regid.1986-12.com.adobe

2013-12-13 11:30 - 2013-07-26 16:02 - 00000000 ____D C:\Users\ACSA\AppData\Local\Deployment

2013-12-13 11:10 - 2013-12-13 11:10 - 04050563 _____ C:\Users\ACSA\Downloads\zoek.zip

2013-12-13 10:47 - 2013-01-12 07:44 - 00004182 _____ C:\Windows\System32\Tasks\avast! Emergency Update

2013-12-13 10:30 - 2012-09-15 18:56 - 00000000 ____D C:\ProgramData\GbPlugin

2013-12-13 10:22 - 2013-12-13 10:23 - 01226802 _____ C:\Users\ACSA\Desktop\adwcleaner.exe

2013-12-13 10:22 - 2013-12-10 11:45 - 01226802 _____ C:\Users\ACSA\Downloads\adwcleaner.exe

2013-12-13 10:03 - 2013-12-13 10:03 - 00002330 _____ C:\Users\ACSA\Downloads\RKreport0_S_08182013_083750.txt

2013-12-12 17:55 - 2013-12-12 16:35 - 00000000 ___DC C:\Users\ACSA\AppData\Local\MigWiz

2013-12-12 16:39 - 2013-12-12 16:38 - 00000000 ___SD C:\ComboFix

2013-12-12 12:56 - 2013-10-02 21:08 - 00000000 ____D C:\Users\ACSA\Documents\Battlefield 4

2013-12-12 00:21 - 2013-12-12 00:21 - 00000000 ____D C:\Users\ACSA\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Kaspersky Security Scan

2013-12-12 00:21 - 2013-12-12 00:21 - 00000000 ____D C:\ProgramData\Kaspersky Lab

2013-12-12 00:21 - 2013-12-12 00:21 - 00000000 ____D C:\Program Files (x86)\Kaspersky Lab

2013-12-12 00:19 - 2013-12-12 00:18 - 00184704 _____ (Kaspersky Lab) C:\Users\ACSA\Downloads\kss12.0.1.117mlg_en_de_es_fr_it_ja_pt-br_ru_zh-Hans-br.exe

2013-12-11 21:39 - 2013-12-11 21:39 - 00011960 _____ C:\Users\ACSA\Documents\cc_20131211_213941.reg

2013-12-11 19:33 - 2013-06-25 10:23 - 00000000 ____D C:\Users\ACSA\Documents\BIMx

2013-12-11 19:33 - 2012-09-15 21:55 - 00000000 ____D C:\Users\ACSA\Graphisoft

2013-12-11 19:33 - 2012-09-15 21:08 - 00000000 ____D C:\Users\ACSA\Documents\Corel

2013-12-11 19:03 - 2013-09-22 09:09 - 00000000 _____ C:\Windows\Path.idx

2013-12-11 19:02 - 2013-09-22 09:09 - 00867360 _____ C:\Windows\PE_Rom.dll

2013-12-10 22:41 - 2009-07-14 01:20 - 00000000 ____D C:\Windows\rescache

2013-12-10 22:15 - 2009-07-14 02:45 - 05162600 _____ C:\Windows\system32\FNTCACHE.DAT

2013-12-10 21:52 - 2013-07-30 10:19 - 00000000 ____D C:\Windows\system32\MRT

2013-12-10 21:49 - 2012-09-14 23:52 - 90708896 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe

2013-12-10 18:56 - 2013-11-05 11:36 - 00000000 ____D C:\Qoobox(1)