dnsapi.dll hijacked - can't remove

brunobyof · July 7, 2017

Hi, i need some help here, i have been trying to eliminate this crap from my computer for a while now without sucess.

I used several different programs, sometimes ADWcleaner finds ONE threat, called br.ask (search provider) into the webdata file, but i have tried remove it using it both in normal mode as in the safemode, but then it comes back again and again. Sometimes the search gives no accusation of it but the plage is there somewhere because my browsers keep poping several new windows or refreshing constantly, to the point that i cannot even type anything without it being refreshed or redirected to the homepage. It's preetty annoying.

Another program that usually finds something is ZHP Cleaner, which often finds an adware called PUP.Optional.Eazel, but the same thing happens: i remove it, and it caomes back. Other times it doesn't find anything, but the brwosers keep getting corrupted. Tried it in safe mode as well.

By the way, while in safe mode WITH network, my internet is not available, somehow and i can't find a way to make it work.

Another program that found something is DNS Repair, which gives the following report:

Spoiler

~ RepairDNS v2017.7.1.3 Nicolas Coolman (2017/07/01)
~ Run by bruno (Administrator) (2017/07/07 16:16:44)
~ Site : http://www.nicolascoolman.fr
~ Blog : http://www.anti-malware.top
~ Windows 10 Pro,X64 (Build 15063)

=======[ Microsoft Windows Defender Service ]
Serviço parado

=======[ Pesquisar recursos dinâmicos 32/64bits (DLL) ]
ENCOBTRADO: C:\Windows\System32\dnsapi.dll [661224] {33000001066EC325C431C9180E000000000106} =>Hijacker.DNS.Hosts
ENCOBTRADO: C:\Windows\SysWOW64\dnsapi.dll [508344] {33000001066EC325C431C9180E000000000106} =>Hijacker.DNS.Hosts

=======[ Pesquisar para cópia de recurso dinâmico ]
ENCOBTRADO: C:\Windows\winsxs\wow64_microsoft-windows-dns-client-minwin_31bf3856ad364e35_10.0.15063.0_none_b0f4374b90551549\dnsapi.dll [508344] {33000001066EC325C431C9180E000000000106} =>Hijacker.DNS.Hosts
ENCOBTRADO: C:\Windows\winsxs\amd64_microsoft-windows-dns-client-minwin_31bf3856ad364e35_10.0.15063.0_none_a69f8cf95bf4534e\dnsapi.dll [661224] {33000001066EC325C431C9180E000000000106} =>Hijacker.DNS.Hosts

=======[ copiar de seleção de recursos (saudável ---> infectado) ]

=======[ Término de tratamento ]

I also use several other programs, icluding Avast free, iobit antimalware, JRT, Hijackthis, FSS, zoek, roguekiller, hitman, FRST64 and others but they usually don't find anything.

I have read somewhere that there's this kind of malware/adware callep shoppers which can change the hosts file path in the dnsapi.dll file so that it remais with the same lenght of characters, preventing it from being accused as infected by the antimalware programs, and then it creates another hosts file to which this new path links and then you can never remove it....is this real? is there a way to remove this plage or the only solution is formating? well, i hope you can help, thx!

EDIT: Oh, in the hopes it can help, i'm providing you with a report i just created using FRST64:

Spoiler

Resultado do exame Adicional Farbar Recovery Scan Tool (x64) Versão: 05-07-2017
Executado por bruno (07-07-2017 16:22:59)
Executando a partir de C:\Users\bruno\Desktop\Limpeza e manutenção
Windows 10 Pro Versão 1703 (X64) (2017-04-24 23:05:07)
Modo da Inicialização: Normal
==========================================================

==================== Contas: =============================

Administrador (S-1-5-21-934045924-1497153640-596338450-500 - Administrator - Disabled)
bruno (S-1-5-21-934045924-1497153640-596338450-1001 - Administrator - Enabled) => C:\Users\bruno
Convidado (S-1-5-21-934045924-1497153640-596338450-501 - Limited - Disabled)
DefaultAccount (S-1-5-21-934045924-1497153640-596338450-503 - Limited - Disabled)

==================== Central de Segurança ========================

(Se uma entrada for incluída na fixlist, será removida.)

AV: Avast Antivirus (Enabled - Up to date) {8EA8924E-BC81-DC44-8BB0-8BAE75D86EBF}
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Avast Antivirus (Enabled - Up to date) {35C973AA-9ABB-D3CA-B100-B0DC0E5F2402}

==================== Programas Instalados ======================

(Somente os programas adwares com a indicação "Oculto" podem ser adicionados à fixlist para desocultá-los. Os programas adwares devem ser desinstalados manualmente.)

Adobe Acrobat Reader DC - Português (HKLM-x32\...\{AC76BA86-7AD7-1046-7B44-AC0F074E4100}) (Version: 17.009.20044 - Adobe Systems Incorporated)
Adobe Flash Player 26 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 26.0.0.131 - Adobe Systems Incorporated)
Adobe Shockwave Player 12.0 (HKLM-x32\...\{AA3B06B1-E89A-43C6-A26B-7109DB4BEE7B}) (Version: 12.0.7.148 - Adobe Systems, Inc)
Ansel (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Ansel) (Version: 382.05 - NVIDIA Corporation) Hidden
aTube Catcher versão 3.8 (HKLM-x32\...\{D43B360E-722D-421B-BC77-20B9E0F8B6CD}_is1) (Version: 3.8 - DsNET Corp)
Avast Free Antivirus (HKLM-x32\...\Avast Antivirus) (Version: 17.5.2302 - AVAST Software)
BitTorrent (HKU\S-1-5-21-934045924-1497153640-596338450-1001\...\BitTorrent) (Version: 7.10.0.43917 - BitTorrent Inc.)
Blizzard App (HKLM-x32\...\Battle.net) (Version: - Blizzard Entertainment)
BlueStacks App Player (HKLM-x32\...\BlueStacks) (Version: 2.7.307.8213 - BlueStack Systems, Inc.)
Bullzip PDF Printer 11.1.0.2600 (HKLM\...\Bullzip PDF Printer_is1) (Version: 11.1.0.2600 - Bullzip)
CCleaner (HKLM\...\CCleaner) (Version: 5.31 - Piriform)
DAEMON Tools Lite (HKLM\...\DAEMON Tools Lite) (Version: 10.5.1.0230 - Disc Soft Ltd)
Driver Booster 4.4 (HKLM-x32\...\Driver Booster_is1) (Version: 4.4.0 - IObit)
Fraps (HKLM-x32\...\Fraps) (Version: - )
GameVox 0.21.2.81 (HKLM-x32\...\{383C7B93-314C-45DC-AB87-C73A92A06938}) (Version: 0.21.2.81 - GameVox LLC) Hidden
GameVox 0.21.2.81 (HKLM-x32\...\{48c38031-d415-42c0-b2ca-104671a665e2}) (Version: 0.21.2.81 - GameVox LLC)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 59.0.3071.115 - Google Inc.)
Google Update Helper (HKLM-x32\...\{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.33.5 - Google Inc.) Hidden
Hearthstone (HKLM-x32\...\Hearthstone) (Version: - Blizzard Entertainment)
Hearthstone Deck Tracker (HKU\S-1-5-21-934045924-1497153640-596338450-1001\...\HearthstoneDeckTracker) (Version: 1.2.5 - HearthSim)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 20.19.15.4531 - Intel Corporation)
IObit Malware Fighter 5 (HKLM-x32\...\IObit Malware Fighter_is1) (Version: 5.1 - IObit)
Java 7 Update 51 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86417051FF}) (Version: 7.0.510 - Oracle)
Java 7 Update 51 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83217051FF}) (Version: 7.0.510 - Oracle)
Java 8 Update 131 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F32180131F0}) (Version: 8.0.1310.11 - Oracle Corporation)
Malwarebytes versão 3.1.2.1733 (HKLM\...\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1) (Version: 3.1.2.1733 - Malwarebytes)
Mass Effect™: Andromeda (HKLM-x32\...\{72BBCA87-9350-48BC-9E2F-6DBC1E80C993}) (Version: 1.0.0.8 - Electronic Arts)
Microsoft .NET Framework 1.1 (HKLM-x32\...\Microsoft .NET Framework 1.1 (1033)) (Version: - )
Microsoft .NET Framework 1.1 Security Update (KB2698023) (HKLM-x32\...\M2698023) (Version: - )
Microsoft .NET Framework 1.1 Security Update (KB2833941) (HKLM-x32\...\M2833941) (Version: - )
Microsoft .NET Framework 1.1 Security Update (KB979906) (HKLM-x32\...\M979906) (Version: - )
Microsoft .NET Framework 1.1 SP1 (HKLM\...\{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}) (Version: - )
Microsoft .NET Framework 1.1 SP1 (HKLM\...\Microsoft .NET Framework 1.1 (1033)) (Version: - )
Microsoft Office Professional Plus 2016 - pt-br (HKLM\...\ProPlusRetail - pt-br) (Version: 16.0.8229.2073 - Microsoft Corporation)
Microsoft OneDrive (HKU\S-1-5-21-934045924-1497153640-596338450-1001\...\OneDriveSetup.exe) (Version: 17.3.6917.0607 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.50907.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61187 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6E8E85E8-CE4B-4FF5-91F7-04999C9FAE6A}) (Version: 8.0.50727.42 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61186 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.50727 (HKLM-x32\...\{15134cb0-b767-4960-a911-f2d16ae54797}) (Version: 11.0.50727.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.50727 (HKLM-x32\...\{22154f09-719a-4619-bb71-5b3356999fbf}) (Version: 11.0.50727.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.40660 (HKLM-x32\...\{ef6b00ec-13e1-4c25-9064-b2f383cb8412}) (Version: 12.0.40660.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.40660 (HKLM-x32\...\{61087a79-ac85-455c-934d-1fa22cc64f36}) (Version: 12.0.40660.0 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x64) - 14.0.24215 (HKLM-x32\...\{d992c12e-cab2-426f-bde3-fb8c53950b0d}) (Version: 14.0.24215.1 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.24215 (HKLM-x32\...\{e2803110-78b3-4664-a479-3611a381656a}) (Version: 14.0.24215.1 - Microsoft Corporation)
Microsoft Visual J# 2.0 Redistributable Package - SE (x64) (HKLM\...\Microsoft Visual J# 2.0 Redistributable Package - SE (x64)) (Version: - Microsoft Corporation)
NVIDIA Driver de áudio HD 1.3.34.26 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.34.26 - NVIDIA Corporation)
NVIDIA Driver de gráficos 382.05 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 382.05 - NVIDIA Corporation)
NVIDIA Driver do 3D Vision 382.05 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 382.05 - NVIDIA Corporation)
NVIDIA Software do sistema PhysX 9.17.0329 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.17.0329 - NVIDIA Corporation)
NvTelemetry (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_NvTelemetry) (Version: 2.4.5.0 - NVIDIA Corporation) Hidden
Office 16 Click-to-Run Extensibility Component (HKLM-x32\...\{90160000-008C-0000-0000-0000000FF1CE}) (Version: 16.0.8229.2073 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Extensibility Component 64-bit Registration (HKLM\...\{90160000-00DD-0000-1000-0000000FF1CE}) (Version: 16.0.8229.2073 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Licensing Component (HKLM\...\{90160000-008F-0000-1000-0000000FF1CE}) (Version: 16.0.8229.2073 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Localization Component (HKLM-x32\...\{90160000-008C-0416-0000-0000000FF1CE}) (Version: 16.0.8229.2045 - Microsoft Corporation) Hidden
Origin (HKLM-x32\...\Origin) (Version: 10.4.13.6637 - Electronic Arts, Inc.)
Painel de controle da NVIDIA 382.05 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.ControlPanel) (Version: 382.05 - NVIDIA Corporation) Hidden
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.8036 - Realtek Semiconductor Corp.)
Revo Uninstaller Pro 3.1.9 (HKLM\...\{67579783-0FB7-4F7B-B881-E5BE47C9DBE0}_is1) (Version: 3.1.9 - VS Revo Group, Ltd.)
RogueKiller version 12.11.5.0 (HKLM\...\8B3D7924-ED89-486B-8322-E8594065D5CB_is1) (Version: 12.11.5.0 - Adlice Software)
SafeZone Stable 3.55.2393.609 (HKLM-x32\...\SafeZone 3.55.2393.609) (Version: 3.55.2393.609 - Avast Software) Hidden
SoftEther VPN Client (HKLM\...\softether_sevpnclient) (Version: 4.22.9634 - SoftEther VPN Project)
Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)
TeamSpeak 3 Client (HKLM\...\TeamSpeak 3 Client) (Version: 3.1.4 - TeamSpeak Systems GmbH)
Unravel (HKLM\...\Unravel_is1) (Version: 1.0.0.0 - )
VLC media player (HKLM-x32\...\VLC media player) (Version: 2.2.6 - VideoLAN)
Vulkan Run Time Libraries 1.0.42.1 (HKLM\...\VulkanRT1.0.42.1) (Version: 1.0.42.1 - LunarG, Inc.)
Warsaw 1.16.0.89 64 bits (HKLM\...\{20E60725-16C8-4FB9-8BC2-AF92C5F8D06D}_is1) (Version: 1.16.0.89 - GAS Tecnologia)
Winamp (HKLM-x32\...\Winamp) (Version: 5.666 - Nullsoft, Inc)
WinRAR 5.40 (64-bit) (HKLM\...\WinRAR archiver) (Version: 5.40.0 - win.rar GmbH)

==================== Exame Personalizado CLSID (Whitelisted): ==========================

(Se uma entrada for incluída na fixlist, será removida do Registro. O arquivo não será movido, a menos que seja colocado separadamente.)

ShellIconOverlayIdentifiers: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2017-07-04] (AVAST Software)
ContextMenuHandlers01: [avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2017-07-04] (AVAST Software)
ContextMenuHandlers01: [IObit Malware Fighter] -> {0BB81440-5F42-4480-A5F7-770A6F439FC8} => C:\Program Files (x86)\IObit\IObit Malware Fighter\IMFShellExt.dll [2017-03-31] (IObit)
ContextMenuHandlers01: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2016-08-15] (Alexander Roshal)
ContextMenuHandlers01: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => -> Nenhum Arquivo
ContextMenuHandlers03: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2017-07-04] (AVAST Software)
ContextMenuHandlers03: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2017-05-09] (Malwarebytes)
ContextMenuHandlers04: [IObit Malware Fighter] -> {0BB81440-5F42-4480-A5F7-770A6F439FC8} => C:\Program Files (x86)\IObit\IObit Malware Fighter\IMFShellExt.dll [2017-03-31] (IObit)
ContextMenuHandlers05: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} => -> Nenhum Arquivo
ContextMenuHandlers05: [igfxDTCM] -> {9B5F5829-A529-4B12-814A-E81BCB8D93FC} => C:\Windows\system32\igfxDTCM.dll [2016-11-01] (Intel Corporation)
ContextMenuHandlers05: [NvCplDesktopContext] -> {3D1975AF-48C6-4f8e-A182-BE0E08FA86A9} => C:\Windows\system32\nvshext.dll [2017-05-01] (NVIDIA Corporation)
ContextMenuHandlers06: [avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2017-07-04] (AVAST Software)
ContextMenuHandlers06: [IObit Malware Fighter] -> {0BB81440-5F42-4480-A5F7-770A6F439FC8} => C:\Program Files (x86)\IObit\IObit Malware Fighter\IMFShellExt.dll [2017-03-31] (IObit)
ContextMenuHandlers06: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2017-05-09] (Malwarebytes)
ContextMenuHandlers06: [RUShellExt] -> {2C5515DC-2A7E-4BFD-B813-CACC2B685EB7} => C:\Program Files\VS Revo Group\Revo Uninstaller Pro\RUExt.dll [2016-12-15] (VS Revo Group)
ContextMenuHandlers06: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2016-08-15] (Alexander Roshal)
ContextMenuHandlers06: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => -> Nenhum Arquivo

==================== Tarefas Agendadas (Whitelisted) =============

(Se uma entrada for incluída na fixlist, será removida do Registro. O arquivo não será movido, a menos que seja colocado separadamente.)

Task: {04F3A887-7E83-40B0-8DBA-C5886B4EBDA1} - System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [2017-04-01] (NVIDIA Corporation)
Task: {140FDF8F-A5D6-4B43-BBEC-566F4607EE0D} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2017-06-13] (Piriform Ltd)
Task: {1E2DE235-75BC-4295-842D-25663F198486} - System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [2017-04-01] (NVIDIA Corporation)
Task: {284EF482-00AC-4AC6-B6F9-B7C409CFFBE2} - System32\Tasks\Avast Emergency Update => C:\Program Files\AVAST Software\Avast\AvEmUpdate.exe [2017-07-04] (AVAST Software)
Task: {29EA2A1A-A663-403F-A660-9065E5356F54} - System32\Tasks\Microsoft\Office\Office Automatic Updates => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [2017-06-23] (Microsoft Corporation)
Task: {34CCA3DC-190F-4D2A-B17C-0A6BD5F83B7B} - System32\Tasks\SafeZone scheduled Autoupdate 1493078675 => C:\Program Files\AVAST Software\SZBrowser\launcher.exe [2017-06-13] (Avast Software)
Task: {36AE54AD-77F5-4101-A2B6-4DBD6F53456C} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2017-04-25] (Adobe Systems Incorporated)
Task: {3D6A595F-BB63-41C3-B59E-4D482DEE164E} - System32\Tasks\Microsoft\Office\OfficeBackgroundTaskHandlerRegistration => C:\Program Files (x86)\Microsoft Office\root\Office16\officebackgroundtaskhandler.exe [2017-07-06] ()
Task: {65D99E00-C8FD-46C9-B088-A46997426F42} - System32\Tasks\AVAST Software\Avast settings backup => C:\Program Files\Common Files\AV\avast! Antivirus\backup.exe [2017-04-24] (AVAST Software)
Task: {800A66DA-C248-4ED9-8280-5151ED7D7B5F} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [2017-06-23] (Microsoft Corporation)
Task: {9B0FD0EE-C886-4689-A16E-E9CCEEDAB9BD} - System32\Tasks\NvTmMon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmMon.exe [2017-04-01] (NVIDIA Corporation)
Task: {A5257FCA-26B6-4BBB-A7BA-66884D02AA4C} - System32\Tasks\NvTmRep_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmRep.exe [2017-04-01] (NVIDIA Corporation)
Task: {BB472700-279A-4E99-A7A7-2C858DD8140F} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack2016 => C:\Program Files (x86)\Microsoft Office\root\Office16\msoia.exe [2017-07-06] (Microsoft Corporation)
Task: {C13F70F1-78FF-48E5-9C40-BA3B81A79FE0} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2017-06-16] (Adobe Systems Incorporated)
Task: {C451979B-1167-4B33-A51E-96E4E927AAC5} - System32\Tasks\FRAPS => C:\Fraps\fraps.exe [2015-09-05] (Beepa P/L)
Task: {CAC1CB4E-607E-4C85-9268-89560E84824D} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2017-07-05] (Google Inc.)
Task: {CBC2C772-C82D-456A-A48F-B4AA602E2798} - System32\Tasks\Microsoft\Office\OfficeBackgroundTaskHandlerLogon => C:\Program Files (x86)\Microsoft Office\root\Office16\officebackgroundtaskhandler.exe [2017-07-06] ()
Task: {D1068E2C-38F5-4493-9212-7BCDD65CF307} - System32\Tasks\NvTmRepOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmRep.exe [2017-04-01] (NVIDIA Corporation)
Task: {DA7B591B-78CB-4574-9AFA-6EBBF37A2194} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2017-07-05] (Google Inc.)
Task: {E860D391-FBFD-4C91-ACD9-A594B05CD470} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn2016 => C:\Program Files (x86)\Microsoft Office\root\Office16\msoia.exe [2017-07-06] (Microsoft Corporation)

(Se uma entrada for incluída na fixlist, o arquivo da tarefa (.job) será movido. O arquivo que está sendo executado pela tarefa não será movido.)

Task: C:\Windows\Tasks\CreateExplorerShellUnelevatedTask.job => C:\Windows\explorer.exe

==================== Atalhos & WMI ========================

(As entradas podem ser listadas para serem restauradas ou removidas.)

ShortcutWithArgument: C:\Users\bruno\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Aplicativos do Google Chrome\Google Play Música.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> --profile-directory=Default --app-id=fahmaaghhglfmonjliepjlchgpgfmobi

==================== Módulos Carregados (Whitelisted) ==============

2017-03-18 17:58 - 2017-03-18 17:58 - 00138000 _____ () C:\Windows\SYSTEM32\inputhost.dll
2017-03-18 17:59 - 2017-03-20 00:59 - 01731072 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll
2017-06-21 15:29 - 2017-06-22 14:47 - 00074752 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.18.614.0_x64__kzf8qxf38zg5c\SkypeHost.exe
2017-06-21 15:29 - 2017-06-22 14:47 - 00203264 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.18.614.0_x64__kzf8qxf38zg5c\SkypeBackgroundTasks.dll
2017-06-21 15:29 - 2017-06-22 14:47 - 43454464 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.18.614.0_x64__kzf8qxf38zg5c\SkyWrap.dll
2017-06-21 15:29 - 2017-06-22 14:47 - 02437120 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.18.614.0_x64__kzf8qxf38zg5c\skypert.dll
2017-07-04 19:32 - 2017-07-04 19:32 - 01236864 _____ () C:\Users\bruno\Desktop\Limpeza e manutenção\RepairDNS.exe
2017-07-05 00:40 - 2017-06-23 00:21 - 03807064 _____ () C:\Program Files (x86)\Google\Chrome\Application\59.0.3071.115\libglesv2.dll
2017-07-05 00:40 - 2017-06-23 00:21 - 00100184 _____ () C:\Program Files (x86)\Google\Chrome\Application\59.0.3071.115\libegl.dll
2017-04-24 21:24 - 2017-05-24 15:32 - 02493440 _____ () C:\Program Files (x86)\Origin\libGLESv2.dll
2017-07-04 17:23 - 2017-07-04 17:23 - 00170224 _____ () C:\Program Files\AVAST Software\Avast\JsonRpcServer.dll
2017-07-04 17:23 - 2017-07-04 17:23 - 01038952 _____ () C:\Program Files\AVAST Software\Avast\AvChrome.dll
2017-07-04 17:23 - 2017-07-04 17:23 - 67109376 _____ () C:\Program Files\AVAST Software\Avast\libcef.dll
2017-07-04 17:23 - 2017-07-04 17:23 - 00192664 _____ () C:\Program Files\AVAST Software\Avast\event_routing_rpc.dll
2017-07-04 17:23 - 2017-07-04 17:23 - 00224256 _____ () C:\Program Files\AVAST Software\Avast\tasks_core.dll
2017-07-04 17:23 - 2017-07-04 17:23 - 00292920 _____ () C:\Program Files\AVAST Software\Avast\gaming_mode_ui.dll
2017-07-04 17:23 - 2017-07-04 17:24 - 02962096 _____ () C:\Program Files\AVAST Software\Avast\aswDataScan.dll
2017-07-04 17:23 - 2017-07-04 17:23 - 00689272 _____ () C:\Program Files\AVAST Software\Avast\ffl2.dll
2017-07-04 17:20 - 2016-08-10 17:13 - 00899872 _____ () C:\Program Files (x86)\IObit\IObit Malware Fighter\webres.dll
2017-07-04 17:19 - 2016-08-10 17:13 - 00188704 _____ () C:\Program Files (x86)\IObit\IObit Malware Fighter\unrar.dll
2017-07-04 17:19 - 2016-08-10 17:13 - 00151840 _____ () C:\Program Files (x86)\IObit\IObit Malware Fighter\zlibwapi.dll
2017-07-04 17:20 - 2017-05-09 10:59 - 00631584 _____ () C:\Program Files (x86)\IObit\IObit Malware Fighter\ProductStatistics.dll
2017-07-04 17:19 - 2016-12-12 16:52 - 00442144 _____ () C:\Program Files (x86)\IObit\IObit Malware Fighter\madExcept_.bpl
2017-07-04 17:19 - 2016-12-12 16:52 - 00210720 _____ () C:\Program Files (x86)\IObit\IObit Malware Fighter\madBasic_.bpl
2017-07-04 17:19 - 2016-12-12 16:52 - 00059680 _____ () C:\Program Files (x86)\IObit\IObit Malware Fighter\madDisAsm_.bpl

==================== Alternate Data Streams (Whitelisted) =========

(Se uma entrada for incluída na fixlist, somente o ADS será removido.)

AlternateDataStreams: C:\Program Files (x86)\GbPlugin:IncompleteStartProcessProtection.cnt [10]
AlternateDataStreams: C:\Program Files (x86)\GbPlugin:u6eBQrM0Z2K3FKLVBMG8dY3IkKT2rqFO+Sf68h8fDg== [32]
AlternateDataStreams: C:\Windows\system32\Drivers\gbpddfac64.sys:X5ZN8aGvT4 [1270]
AlternateDataStreams: C:\Windows\system32\Drivers\gbpddreg64.sys:X5ZN8aGvT4 [686]
AlternateDataStreams: C:\Windows\system32\Drivers\wsddfac.sys:X5ZN8aGXs4 [2410]

==================== Modo de Segurança (Whitelisted) ===================

(Se uma entrada for incluída na fixlist, será removida do Registro. O valor "AlternateShell" será restaurado.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\IMFservice => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMService => ""="Service"

==================== Associação (Whitelisted) ===============

(Se uma entrada for incluída na fixlist, o ítem no Registro será restaurado para o padrão ou removido.)

==================== Internet Explorer confiável/restrito ===============

(Se uma entrada for incluída na fixlist, será removida do Registro.)

==================== Hosts Conteúdo: ===============================

(Se necessário, a diretiva Hosts: pode ser incluída na fixlist para redefinir o Hosts.)

2017-03-18 18:03 - 2017-07-04 22:29 - 00000753 _____ C:\Windows\system32\Drivers\etc\hosts

127.0.0.1 localhost

==================== Outras Áreas ============================

(Atualmente não há nenhuma correção automática para esta seção.)

HKU\S-1-5-21-934045924-1497153640-596338450-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\bruno\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper
DNS Servers: 192.168.1.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: Off)
Firewall do Windows está habilitado.

==================== MSCONFIG/TASK MANAGER ítens desabilitados ==

HKLM\...\StartupApproved\StartupFolder: => "SoftEther VPN Client Manager Startup.lnk"
HKLM\...\StartupApproved\Run: => "Malwarebytes TrayApp"
HKLM\...\StartupApproved\Run: => "SoftEther VPN Client UI Helper"
HKLM\...\StartupApproved\Run32: => "SunJavaUpdateSched"
HKU\S-1-5-21-934045924-1497153640-596338450-1001\...\StartupApproved\StartupFolder: => "GameVox.lnk"
HKU\S-1-5-21-934045924-1497153640-596338450-1001\...\StartupApproved\Run: => "CCleaner Monitoring"
HKU\S-1-5-21-934045924-1497153640-596338450-1001\...\StartupApproved\Run: => "DAEMON Tools Lite Automount"

==================== Regras do Firewall (Whitelisted) ===============

(Se uma entrada for incluída na fixlist, será removida do Registro. O arquivo não será movido, a menos que seja colocado separadamente.)

FirewallRules: [{40DEF879-FCAE-43F6-AAA4-A62A0970D25F}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{A017B990-DB81-4E0F-806A-FBEC827E69CD}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{8DD618DE-33F8-4554-AB2D-77A3A413A36F}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe
FirewallRules: [{E0C81264-4BFC-4EA9-9126-7C61F9F41A9E}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe
FirewallRules: [{7D327991-1535-44B6-AB34-422EF08196E4}] => (Allow) C:\Program Files (x86)\Winamp\winamp.exe
FirewallRules: [{19484E97-9037-4177-85EC-BA8BDFB45052}] => (Allow) C:\Program Files (x86)\Winamp\winamp.exe
FirewallRules: [{76F64B97-D2B5-4ACC-83B9-07C8566B19A6}] => (Allow) C:\Users\bruno\AppData\Roaming\BitTorrent\BitTorrent.exe
FirewallRules: [{FC88869D-D218-4C60-8810-6266D5F8FA5F}] => (Allow) C:\Users\bruno\AppData\Roaming\BitTorrent\BitTorrent.exe
FirewallRules: [{BFA0D0BB-61BB-4BA4-BF41-48246423B475}] => (Allow) C:\Users\bruno\AppData\Roaming\BitTorrent\BitTorrent.exe
FirewallRules: [{A3B81C56-EF5A-46F5-AA0A-BDCAEB6F677D}] => (Allow) C:\Users\bruno\AppData\Roaming\BitTorrent\BitTorrent.exe
FirewallRules: [{69D9C8D1-CB17-4109-B94F-1012741DEA5C}] => (Allow) C:\Users\bruno\AppData\Roaming\BitTorrent\BitTorrent.exe
FirewallRules: [{1E151DCA-74A7-4E4A-B9BC-F527C230D256}] => (Allow) C:\Users\bruno\AppData\Roaming\BitTorrent\BitTorrent.exe
FirewallRules: [{8DDA22C5-D4E3-4855-81A9-92DEB502CFE8}] => (Allow) C:\Program Files (x86)\Microsoft Office\root\Office16\Lync.exe
FirewallRules: [{408F5D34-CA7F-4E2C-AF92-5160A04DEA8D}] => (Allow) C:\Program Files (x86)\Microsoft Office\root\Office16\UcMapi.exe
FirewallRules: [TCP Query User{0AFBCCD2-EC21-40A4-820A-378B54C845DF}C:\program files (x86)\hearthstone\hearthstone.exe] => (Allow) C:\program files (x86)\hearthstone\hearthstone.exe
FirewallRules: [UDP Query User{5EE29E32-1AD5-4E9E-A903-FBCB1941C923}C:\program files (x86)\hearthstone\hearthstone.exe] => (Allow) C:\program files (x86)\hearthstone\hearthstone.exe
FirewallRules: [{1AEBF826-A6AD-441A-B84A-613E29DEAAA8}] => (Allow) C:\Program Files\SoftEther VPN Client\vpnclient_x64.exe
FirewallRules: [{8EDA00EE-4BCF-4B85-AC3B-197E74E188E2}] => (Allow) C:\Program Files\SoftEther VPN Client\vpnclient.exe
FirewallRules: [{61EE3423-64FF-46CB-8393-5135433629EC}] => (Allow) C:\Program Files\SoftEther VPN Client\vpncmgr.exe
FirewallRules: [{B6F73F4D-B401-4AC5-9BBE-36162E800140}] => (Allow) C:\Program Files\SoftEther VPN Client\vpncmgr_x64.exe
FirewallRules: [{5AEA1D14-47EE-422E-BC7D-E2942D960924}] => (Allow) C:\Program Files\SoftEther VPN Client\vpncmd.exe
FirewallRules: [{2499C378-BF6E-49B5-887D-95F1C11380DD}] => (Allow) C:\Program Files\SoftEther VPN Client\vpncmd_x64.exe
FirewallRules: [{8CF6AC86-A1B7-43A5-AE93-42C6923F1661}] => (Allow) C:\Program Files (x86)\Microsoft Office\root\Office16\Lync.exe
FirewallRules: [{EB4F0237-AE57-486E-917D-99DB2EB0ED14}] => (Allow) C:\Program Files (x86)\Microsoft Office\root\Office16\UcMapi.exe
FirewallRules: [{91E98E4F-5413-4984-8E38-B6A4701C71A9}] => (Allow) C:\Program Files (x86)\IObit\Driver Booster\4.4.0\DriverBooster.exe
FirewallRules: [{87172C7E-3106-4B20-B2B9-927C9CA9036A}] => (Allow) C:\Program Files (x86)\IObit\Driver Booster\4.4.0\DriverBooster.exe
FirewallRules: [{74A6EBA0-07DF-4F02-8145-9D1890A4DE08}] => (Allow) C:\Program Files (x86)\IObit\Driver Booster\4.4.0\DBDownloader.exe
FirewallRules: [{AD50E38B-9789-44C7-A1BE-F130AC516284}] => (Allow) C:\Program Files (x86)\IObit\Driver Booster\4.4.0\DBDownloader.exe
FirewallRules: [{B38A754D-4D41-40DF-949D-9DF5BD87546E}] => (Allow) C:\Program Files (x86)\IObit\Driver Booster\4.4.0\AutoUpdate.exe
FirewallRules: [{ED2F31E7-4DCF-4D52-8FB5-4BB37BD2CE04}] => (Allow) C:\Program Files (x86)\IObit\Driver Booster\4.4.0\AutoUpdate.exe
FirewallRules: [{7F3AD4ED-CE54-4DA6-B270-7F87039F2301}] => (Allow) C:\Program Files\Diebold\Warsaw\core.exe
FirewallRules: [{ACFD32F9-3670-4233-B5D2-523F4F8D7BFF}] => (Allow) C:\Program Files (x86)\Microsoft Office\root\Office16\outlook.exe
FirewallRules: [{BF66A9F1-C222-4AA6-BCD2-2A977B20B961}] => (Allow) C:\Program Files\AVAST Software\SZBrowser\3.55.2393.607\SZBrowser.exe
FirewallRules: [{0AAF7764-4AE9-4945-B47F-F4CA0F38640B}] => (Allow) C:\Program Files (x86)\Origin Games\Mass Effect Andromeda\MassEffectAndromedaTrial.exe
FirewallRules: [{CF1AA994-17BB-4BF1-AF07-0EC75C4CA464}] => (Allow) C:\Program Files (x86)\Origin Games\Mass Effect Andromeda\MassEffectAndromedaTrial.exe
FirewallRules: [{9449EBEF-7C06-4FA7-BADC-2A902A0ACCEC}] => (Allow) C:\Program Files (x86)\Origin Games\Mass Effect Andromeda\MassEffectAndromeda.exe
FirewallRules: [{5EFD47C3-BCB3-4D8C-9E31-71F90F54194E}] => (Allow) C:\Program Files (x86)\Origin Games\Mass Effect Andromeda\MassEffectAndromeda.exe
FirewallRules: [{72B591AD-DD07-429B-A1CA-849C0067F1B1}] => (Allow) C:\Program Files (x86)\IObit\IObit Malware Fighter\Surfing Protection\FFNativeMessage.exe
FirewallRules: [{346E5487-A71E-4FA6-A4CA-CC5330A4CA72}] => (Allow) C:\Program Files (x86)\IObit\IObit Malware Fighter\Surfing Protection\FFNativeMessage.exe
FirewallRules: [{6CBAFA35-8C66-4383-BA6E-733515AFFDB6}] => (Allow) C:\Program Files\AVAST Software\SZBrowser\3.55.2393.609\SZBrowser.exe
FirewallRules: [{A9592C94-3559-445F-8D67-0FFDA34C2C8F}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

==================== Pontos de Restauração =========================

30-06-2017 01:19:27 Driver Booster : Áudio Intel(R) para telas
04-07-2017 22:28:12 zoek.exe restore point
07-07-2017 02:37:16 JRT Pre-Junkware Removal

==================== Dispositivos Apresentando Falhas No Gerenciador =============

==================== Erros no Log de eventos: =========================

Erros em Aplicativos:
==================
Error: (07/07/2017 03:59:23 PM) (Source: Perflib) (EventID: 1008) (User: )
Description: Falha no Procedimento Open para o serviço "WmiApRpl" na DLL "C:\Windows\system32\wbem\wmiaprpl.dll". Os dados de desempenho para este serviço não estarão disponíveis. Os primeiros quatro bytes (DWORD) da seção de Dados contêm o código do erro.

Error: (07/07/2017 03:59:22 PM) (Source: Perflib) (EventID: 1023) (User: )
Description: O Windows não consegue carregar a DLL rdyboost do contador extensível. Os primeiros quatro bytes (DWORD) da seção de Dados contêm o código de erro do Windows.

Error: (07/07/2017 03:59:21 PM) (Source: PerfNet) (EventID: 2004) (User: )
Description: Não foi possível abrir o objeto de desempenho do serviço do Servidor. Os primeiros quatro bytes (DWORD) da seção de dados contém o código do status.

Error: (07/07/2017 03:59:21 PM) (Source: Perflib) (EventID: 1008) (User: )
Description: Falha no Procedimento Open para o serviço "MSDTC" na DLL "C:\Windows\system32\msdtcuiu.DLL". Os dados de desempenho para este serviço não estarão disponíveis. Os primeiros quatro bytes (DWORD) da seção de Dados contêm o código do erro.

Error: (07/07/2017 03:59:21 PM) (Source: Perflib) (EventID: 1008) (User: )
Description: Falha no Procedimento Open para o serviço "Lsa" na DLL "C:\Windows\System32\Secur32.dll". Os dados de desempenho para este serviço não estarão disponíveis. Os primeiros quatro bytes (DWORD) da seção de Dados contêm o código do erro.

Error: (07/07/2017 03:59:21 PM) (Source: Perflib) (EventID: 1008) (User: )
Description: Falha no Procedimento Open para o serviço "ESENT" na DLL "C:\Windows\system32\esentprf.dll". Os dados de desempenho para este serviço não estarão disponíveis. Os primeiros quatro bytes (DWORD) da seção de Dados contêm o código do erro.

Error: (07/07/2017 03:59:21 PM) (Source: Perflib) (EventID: 1008) (User: )
Description: Falha no Procedimento Open para o serviço "BITS" na DLL "C:\Windows\System32\bitsperf.dll". Os dados de desempenho para este serviço não estarão disponíveis. Os primeiros quatro bytes (DWORD) da seção de Dados contêm o código do erro.

Error: (07/07/2017 03:59:21 PM) (Source: Perflib) (EventID: 1018) (User: )
Description: Coleta de dados de contador de desempenho desabilitada nesta seção do serviço "ASP.NET_64_2.0.50727" porque a biblioteca de contadores de desempenho desse serviço gerou um ou mais erros. Os erros que forçaram essa ação foram gravados no log de eventos do aplicativo.

Error: (07/07/2017 03:59:21 PM) (Source: Perflib) (EventID: 1022) (User: )
Description: O Windows não pode abrir a DLL ASP.NET_64_2.0.50727 do contador extensível de 64 bits em um ambiente de 32 bits. Contate o fornecedor do arquivo para obter uma versão de 32 bits. Opcionalmente, se você estiver executando em um ambiente nativo de 64 bits, poderá abrir a DLL do contador extensível de 64 bits usando a versão de 64 bits do Monitor de desempenho. Para usar essa ferramenta, abra a pasta Windows, a pasta System32 e inicie Perfmon.exe.

Error: (07/07/2017 02:07:06 PM) (Source: Perflib) (EventID: 1008) (User: )
Description: Falha no Procedimento Open para o serviço "WmiApRpl" na DLL "C:\Windows\system32\wbem\wmiaprpl.dll". Os dados de desempenho para este serviço não estarão disponíveis. Os primeiros quatro bytes (DWORD) da seção de Dados contêm o código do erro.

Erros de Sistema:
=============
Error: (07/07/2017 03:57:56 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Não foi possível iniciar o serviço CldFlt devido ao seguinte erro:
Não há suporte para o pedido.

Error: (07/07/2017 03:57:19 PM) (Source: DCOM) (EventID: 10005) (User: DESKTOP-2R2DPKU)
Description: O DCOM obteve o erro "1084" ao tentar iniciar o serviço ShellHWDetection com argumentos "Não Disponível" para executar o servidor:
{DD522ACC-F821-461A-A407-50B198B896DC}

Error: (07/07/2017 03:57:19 PM) (Source: DCOM) (EventID: 10005) (User: DESKTOP-2R2DPKU)
Description: O DCOM obteve o erro "1084" ao tentar iniciar o serviço WSearch com argumentos "Não Disponível" para executar o servidor:
{B52D54BB-4818-4EB9-AA80-F9EACD371DF8}

Error: (07/07/2017 03:55:35 PM) (Source: DCOM) (EventID: 10005) (User: DESKTOP-2R2DPKU)
Description: O DCOM obteve o erro "1084" ao tentar iniciar o serviço WSearch com argumentos "Não Disponível" para executar o servidor:
{B52D54BB-4818-4EB9-AA80-F9EACD371DF8}

CodeIntegrity:
===================================
Date: 2017-07-07 15:30:57.262
Description: Code Integrity determined that a process (\Device\HarddiskVolume7\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume7\Program Files\Diebold\Warsaw\wslbdhm64.dll that did not meet the Store signing level requirements.

Date: 2017-07-07 15:30:51.362
Description: Code Integrity determined that a process (\Device\HarddiskVolume7\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume7\Program Files\Diebold\Warsaw\wslbdhm64.dll that did not meet the Store signing level requirements.

Date: 2017-07-07 15:30:50.862
Description: Code Integrity determined that a process (\Device\HarddiskVolume7\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume7\Program Files\Diebold\Warsaw\wslbdhm64.dll that did not meet the Store signing level requirements.

Date: 2017-07-07 15:30:31.409
Description: Code Integrity determined that a process (\Device\HarddiskVolume7\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume7\Program Files\Diebold\Warsaw\wslbdhm64.dll that did not meet the Store signing level requirements.

Date: 2017-07-07 15:30:31.051
Description: Code Integrity determined that a process (\Device\HarddiskVolume7\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume7\Program Files\Diebold\Warsaw\wslbdhm64.dll that did not meet the Store signing level requirements.

Date: 2017-07-07 15:30:30.940
Description: Code Integrity determined that a process (\Device\HarddiskVolume7\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume7\Program Files\Diebold\Warsaw\wslbdhm64.dll that did not meet the Store signing level requirements.

Date: 2017-07-07 15:30:30.805
Description: Code Integrity determined that a process (\Device\HarddiskVolume7\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume7\Program Files\Diebold\Warsaw\wslbdhm64.dll that did not meet the Store signing level requirements.

Date: 2017-07-07 02:32:36.849
Description: Code Integrity determined that a process (\Device\HarddiskVolume7\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume7\Program Files\Diebold\Warsaw\wslbdhm64.dll that did not meet the Store signing level requirements.

Date: 2017-07-07 02:32:35.020
Description: Code Integrity determined that a process (\Device\HarddiskVolume7\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume7\Program Files\Diebold\Warsaw\wslbdhm64.dll that did not meet the Store signing level requirements.

Date: 2017-07-07 02:32:22.533
Description: Code Integrity determined that a process (\Device\HarddiskVolume7\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume7\Program Files\Diebold\Warsaw\wslbdhm64.dll that did not meet the Store signing level requirements.

==================== Informações da Memória ===========================

Processador: Intel(R) Core(TM) i5-4460 CPU @ 3.20GHz
Percentagem de memória em uso: 34%
RAM física total: 7937.92 MB
RAM física disponível: 5206.06 MB
Virtual Total: 10881.92 MB
Virtual disponível: 8083.12 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:540.89 GB) (Free:369.4 GB) NTFS
Drive d: () (Fixed) (Total:465.09 GB) (Free:275.63 GB) NTFS
Drive e: () (Fixed) (Total:390.61 GB) (Free:389.88 GB) NTFS

==================== MBR & Tabela de Partições ==================

========================================================
Disk: 0 (Size: 465.8 GB) (Disk ID: A1F28503)

Partition: GPT.

========================================================
Disk: 1 (MBR Code: Windows 7 or 8) (Size: 931.5 GB) (Disk ID: 00000000)

Partition: GPT.

==================== Fim de Addition.txt ============================

idk why it creates 2 different reports when doing a examination, so i'm providing you with both:

Spoiler

Resultado do exame da Farbar Recovery Scan Tool (FRST) (x64) Versão: 05-07-2017
Executado por bruno (administrador) em DESKTOP-2R2DPKU (07-07-2017 16:22:20)
Executando a partir de C:\Users\bruno\Desktop\Limpeza e manutenção
Perfis Carregados: bruno (Perfis Disponíveis: bruno)
Platform: Windows 10 Pro Versão 1703 (X64) Idioma: Português (Brasil)
Internet Explorer Versão 11 (Navegador padrão: Edge)
Modo da Inicialização: Normal
Tutorial da Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processos (Whitelisted) =================

(Se uma entrada for incluída na fixlist, o processo será fechado. O arquivo não será movido.)

(IObit) C:\Program Files (x86)\IObit\IObit Malware Fighter\IMFsrv.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe
(GAS Tecnologia) C:\Program Files (x86)\GbPlugin\gbpsv.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe
(Intel Corporation) C:\Windows\System32\igfxCUIService.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe
(SoftEther VPN Project at University of Tsukuba, Japan.) C:\Program Files\SoftEther VPN Client\vpnclient_x64.exe
(GAS Tecnologia LTDA) C:\Program Files\Diebold\Warsaw\core.exe
(Electronic Arts) C:\Program Files (x86)\Origin\OriginWebHelperService.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe
(Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe
(AVAST Software s.r.o.) C:\Program Files\AVAST Software\Avast\x64\aswidsagenta.exe
(Beepa P/L) C:\Fraps\fraps.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.33.5\GoogleCrashHandler.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.33.5\GoogleCrashHandler64.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(GAS Tecnologia) C:\Program Files (x86)\GbPlugin\gbpsv.exe
(Intel Corporation) C:\Windows\System32\igfxEM.exe
() C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.18.614.0_x64__kzf8qxf38zg5c\SkypeHost.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MSASCuiL.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(GAS Tecnologia LTDA) C:\Program Files\Diebold\Warsaw\core.exe
(BlueStack Systems, Inc.) C:\Program Files (x86)\BlueStacks\HD-Agent.exe
(IObit) C:\Program Files (x86)\IObit\IObit Malware Fighter\IMF.exe
(Beepa P/L) C:\Fraps\fraps64.dat
(IObit) C:\Program Files (x86)\IObit\IObit Malware Fighter\IMFTips.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
() C:\Users\bruno\Desktop\Limpeza e manutenção\RepairDNS.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
() C:\Users\bruno\Desktop\Limpeza e manutenção\RepairDNS.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe

==================== Registro (Whitelisted) ====================

(Se uma entrada for incluída na fixlist, o ítem no Registro será restaurado para o padrão ou removido. O arquivo não será movido.)

HKLM\...\Run: [SecurityHealth] => C:\Program Files\Windows Defender\MSASCuiL.exe [629152 2017-03-18] (Microsoft Corporation)
HKLM\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvLaunch.exe [213832 2017-07-04] (AVAST Software)
HKLM\...\Run: [SoftEther VPN Client UI Helper] => C:\Program Files\SoftEther VPN Client\vpnclient_x64.exe [5248456 2017-04-24] (SoftEther VPN Project at University of Tsukuba, Japan.)
HKLM\...\Run: [Malwarebytes TrayApp] => C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\mbamtray.exe [3146704 2017-05-09] (Malwarebytes)
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [9197568 2017-05-08] (Realtek Semiconductor)
HKLM\...\Run: [Diebold - Warsaw] => C:\Program Files\Diebold\Warsaw\core.exe [954416 2017-03-21] (GAS Tecnologia LTDA)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [587288 2017-03-15] (Oracle Corporation)
HKLM-x32\...\Run: [IObit Malware Fighter] => C:\Program Files (x86)\IObit\IObit Malware Fighter\IMF.exe [5232928 2017-05-19] (IObit)
HKLM Group Policy restriction on software: %systemroot%\system32\mrt.exe <==== ATENÇÃO
Winlogon\Notify\ GbPluginUni: C:\PROGRAM FILES (X86)\GBPLUGIN\gbiehUni.dll [2017-05-21] (Banco Itaú Unibanco)
HKLM\SOFTWARE\Policies\Microsoft\Windows Defender: Restrição <==== ATENÇÃO
HKU\S-1-5-21-934045924-1497153640-596338450-1001\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [9803992 2017-06-13] (Piriform Ltd)
HKU\S-1-5-21-934045924-1497153640-596338450-1001\...\Run: [DAEMON Tools Lite Automount] => C:\Program Files\DAEMON Tools Lite\DTAgent.exe [4701888 2017-02-07] (Disc Soft Ltd)
HKU\S-1-5-21-934045924-1497153640-596338450-1001\...\Run: [BlueStacks Agent] => C:\Program Files (x86)\BlueStacks\HD-Agent.exe [160824 2017-04-20] (BlueStack Systems, Inc.)
HKU\S-1-5-21-934045924-1497153640-596338450-1001\...\MountPoints2: {4aa4942b-2942-11e7-9eed-74d435bb5a56} - "I:\setup.EXE" /AUTORUN
HKU\S-1-5-21-934045924-1497153640-596338450-1001\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\Windows\system32\scrnsave.scr [37376 2017-03-18] (Microsoft Corporation)
ShellExecuteHooks-x32: GbPluginObj Class - {E37CB5F0-51F5-4395-A808-5FA49E399008} - C:\PROGRAM FILES (X86)\GbPlugin\gbiehuni.dll [1951968 2017-05-21] (Banco Itaú Unibanco)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\SoftEther VPN Client Manager Startup.lnk [2017-04-24]
ShortcutTarget: SoftEther VPN Client Manager Startup.lnk -> C:\Program Files\SoftEther VPN Client\vpncmgr_x64.exe (SoftEther VPN Project at University of Tsukuba, Japan.)
Startup: C:\Users\bruno\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\GameVox.lnk [2017-05-05]
ShortcutTarget: GameVox.lnk -> C:\Program Files (x86)\GameVox\GameVox.exe (GameVox LLC)
GroupPolicy: Restrição <==== ATENÇÃO

==================== Internet (Whitelisted) ====================

(Se um ítem for incluído na fixlist, sendo um ítem do Registro, será removido ou restaurado para o padrão.)

Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{34aff75e-4d76-48e6-af3d-948d99629d55}: [DhcpNameServer] 192.168.1.1

Internet Explorer:
==================
SearchScopes: HKU\S-1-5-21-934045924-1497153640-596338450-1001 -> {012E1000-F331-11DB-8314-0800200C9A66} URL = hxxp://www.google.com/search?q={searchTerms}
BHO: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX64\Microsoft Office\Office16\OCHelper.dll [2017-07-06] (Microsoft Corporation)
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre7\bin\ssv.dll [2017-05-03] (Oracle Corporation)
BHO: Microsoft OneDrive for Business Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX64\Microsoft Office\Office16\GROOVEEX.DLL [2017-07-06] (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre7\bin\jp2ssv.dll [2017-05-03] (Oracle Corporation)
BHO-x32: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\root\Office16\OCHelper.dll [2017-06-17] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_131\bin\ssv.dll [2017-04-24] (Oracle Corporation)
BHO-x32: GbIehObj Class -> {C41A1C0E-EA6C-11D4-B1B8-444553540008} -> C:\PROGRAM FILES (X86)\GBPLUGIN\gbiehuni.dll [2017-05-21] (Banco Itaú Unibanco)
BHO-x32: Microsoft OneDrive for Business Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\root\Office16\GROOVEEX.DLL [2017-07-06] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_131\bin\jp2ssv.dll [2017-04-24] (Oracle Corporation)
Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2017-07-06] (Microsoft Corporation)
Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2017-07-06] (Microsoft Corporation)
Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2017-07-06] (Microsoft Corporation)
Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2017-07-06] (Microsoft Corporation)

Edge:
======
Edge Extension: (Adblock Plus) -> 10_EyeoGmbHAdblockPlus_d55gg7py3s0m0 => C:\Program Files\WindowsApps\EyeoGmbH.AdblockPlus_0.9.9.0_neutral__d55gg7py3s0m0 [2017-07-05]

FireFox:
========
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_26_0_0_131.dll [2017-06-16] ()
FF Plugin: @java.com/DTPlugin,version=10.51.2 -> C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll [2017-05-03] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.51.2 -> C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll [2017-05-03] (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.50907.0\npctrl.dll [2017-05-03] ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_26_0_0_131.dll [2017-06-16] ()
FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\Windows\SysWOW64\Adobe\Director\np32dsw.dll [2013-12-05] (Adobe Systems, Inc.)
FF Plugin-x32: @java.com/DTPlugin,version=11.131.2 -> C:\Program Files (x86)\Java\jre1.8.0_131\bin\dtplugin\npDeployJava1.dll [2017-04-24] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.131.2 -> C:\Program Files (x86)\Java\jre1.8.0_131\bin\plugin2\npjp2.dll [2017-04-24] (Oracle Corporation)
FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX86\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2017-05-26] (Microsoft Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.50907.0\npctrl.dll [2017-05-03] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files (x86)\Microsoft Office\root\Office16\NPSPWRAP.DLL [2017-05-26] (Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2017-05-01] (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2017-05-01] (NVIDIA Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-07-05] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-07-05] (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.2.4 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2017-05-24] (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.2.6 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2017-05-24] (VideoLAN)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2017-04-04] (Adobe Systems Inc.)

Chrome:
=======
CHR Profile: C:\Users\bruno\AppData\Local\Google\Chrome\User Data\Default [2017-07-07]
CHR Extension: (Google Docs) - C:\Users\bruno\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2017-07-07]
CHR Extension: (Google Drive) - C:\Users\bruno\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2017-07-07]
CHR Extension: (YouTube) - C:\Users\bruno\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2017-07-07]
CHR Extension: (Avast SafePrice) - C:\Users\bruno\AppData\Local\Google\Chrome\User Data\Default\Extensions\eofcbnmajmjmplflapaojjnihcjkigck [2017-07-07]
CHR Extension: (Documentos Google off-line) - C:\Users\bruno\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2017-07-07]
CHR Extension: (Avast Online Security) - C:\Users\bruno\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2017-07-07]
CHR Extension: (Pagamentos da Chrome Web Store) - C:\Users\bruno\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2017-07-07]
CHR Extension: (Gmail) - C:\Users\bruno\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2017-07-07]
CHR Extension: (Chrome Media Router) - C:\Users\bruno\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2017-07-07]
CHR HKLM-x32\...\Chrome\Extension: [eofcbnmajmjmplflapaojjnihcjkigck] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - hxxps://clients2.google.com/service/update2/crx

==================== Serviços (Whitelisted) ====================

(Se uma entrada for incluída na fixlist, será removida do Registro. O arquivo não será movido, a menos que seja colocado separadamente.)

S3 aspnet_state; C:\Windows\Microsoft.NET\Framework\v1.1.4322\aspnet_state.exe [32768 2004-07-14] (Microsoft Corporation) [Arquivo não assinado]
R3 aswbIDSAgent; C:\Program Files\AVAST Software\Avast\x64\aswidsagenta.exe [7430992 2017-07-04] (AVAST Software s.r.o.)
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [263312 2017-07-04] (AVAST Software)
S3 BstHdAndroidSvc; C:\Program Files (x86)\BlueStacks\HD-Service.exe [387128 2017-04-20] (BlueStack Systems, Inc.)
S3 BstHdLogRotatorSvc; C:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe [369720 2017-04-20] (BlueStack Systems, Inc.)
S3 BstHdPlusAndroidSvc; C:\Program Files (x86)\BlueStacks\HD-Plus-Service.exe [406584 2017-04-20] (BlueStack Systems, Inc.)
R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [4411592 2017-06-23] (Microsoft Corporation)
S3 Disc Soft Lite Bus Service; C:\Program Files\DAEMON Tools Lite\DiscSoftBusServiceLite.exe [1471168 2017-02-07] (Disc Soft Ltd)
R2 GbpSv; C:\Program Files (x86)\GbPlugin\gbpsv.exe [590048 2017-07-04] (GAS Tecnologia)
R2 igfxCUIService2.0.0.0; C:\Windows\system32\igfxCUIService.exe [373744 2016-11-01] (Intel Corporation)
R2 IMFservice; C:\Program Files (x86)\IObit\IObit Malware Fighter\IMFsrv.exe [1766176 2017-05-19] (IObit)
R2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe [4470736 2017-05-09] (Malwarebytes)
R2 NVDisplay.ContainerLocalSystem; C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe [462968 2017-05-01] (NVIDIA Corporation)
R2 NvTelemetryContainer; C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe [427064 2017-04-01] (NVIDIA Corporation)
S3 Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [2168208 2017-06-15] (Electronic Arts)
R2 Origin Web Helper Service; C:\Program Files (x86)\Origin\OriginWebHelperService.exe [3148184 2017-06-15] (Electronic Arts)
S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [3913064 2017-03-20] (Microsoft Corporation)
R2 SEVPNCLIENT; C:\Program Files\SoftEther VPN Client\vpnclient_x64.exe [5248456 2017-04-24] (SoftEther VPN Project at University of Tsukuba, Japan.)
R2 Warsaw Technology; C:\Program Files\Diebold\Warsaw\core.exe [954416 2017-03-21] (GAS Tecnologia LTDA)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [342264 2017-03-18] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [102816 2017-03-18] (Microsoft Corporation)

===================== Drivers (Whitelisted) ======================

(Se uma entrada for incluída na fixlist, será removida do Registro. O arquivo não será movido, a menos que seja colocado separadamente.)

R1 aswbidsdriver; C:\Windows\system32\drivers\aswbidsdrivera.sys [319984 2017-07-04] (AVAST Software s.r.o.)
R0 aswbidsh; C:\Windows\system32\drivers\aswbidsha.sys [198944 2017-07-04] (AVAST Software s.r.o.)
R0 aswblog; C:\Windows\system32\drivers\aswbloga.sys [343264 2017-07-04] (AVAST Software s.r.o.)
R0 aswbuniv; C:\Windows\system32\drivers\aswbuniva.sys [57704 2017-07-04] (AVAST Software s.r.o.)
S3 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [46984 2017-07-04] (AVAST Software)
R1 aswKbd; C:\Windows\system32\drivers\aswKbd.sys [41800 2017-07-04] (AVAST Software)
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [146664 2017-07-04] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [110352 2017-07-04] (AVAST Software)
R0 aswRvrt; C:\Windows\system32\drivers\aswRvrt.sys [84392 2017-07-04] (AVAST Software)
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1015848 2017-07-04] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [585608 2017-07-04] (AVAST Software)
R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [198768 2017-07-04] (AVAST Software)
R0 aswVmm; C:\Windows\system32\drivers\aswVmm.sys [361336 2017-07-04] (AVAST Software)
R3 athr; C:\Windows\System32\drivers\athw10x.sys [4318648 2017-04-24] (Qualcomm Atheros Communications, Inc.)
S3 BstHdDrv; C:\Program Files (x86)\BlueStacks\HD-Hypervisor-amd64.sys [152672 2017-04-20] (BlueStack Systems)
S3 BstkDrv; C:\Program Files (x86)\BlueStacks\BstkDrv.sys [270904 2017-04-20] (Bluestack System Inc. )
R3 dtlitescsibus; C:\Windows\System32\drivers\dtlitescsibus.sys [30264 2017-04-24] (Disc Soft Ltd)
R3 dtliteusbbus; C:\Windows\System32\drivers\dtliteusbbus.sys [47672 2017-04-24] (Disc Soft Ltd)
R1 gbpddfac; C:\Windows\System32\drivers\gbpddfac64.sys [28888 2017-07-07] (GAS Tecnologia)
R0 gbpddreg; C:\Windows\System32\drivers\gbpddreg64.sys [29816 2017-07-07] (GAS Tecnologia)
R3 GBPRCM; C:\PROGRAM FILES (X86)\GBPLUGIN\gbprcm64.sys [29912 2015-12-04] (GAS Tecnologia)
R1 HWiNFO32; C:\Windows\SysWOW64\drivers\HWiNFO64A.SYS [27552 2017-04-24] (REALiX(tm))
R1 IMFCameraProtect; C:\Windows\system32\drivers\IMFCameraProtect.sys [44096 2017-03-17] (IObit.com)
R3 IMFDownProtect; C:\Program Files (x86)\IObit\IObit Malware Fighter\drivers\win10_amd64\IMFDownProtect.sys [39288 2017-03-06] (IObit.com)
R3 IMFFilter; C:\Program Files (x86)\IObit\IObit Malware Fighter\Drivers\win10_amd64\IMFFilter.sys [40440 2017-02-16] (IObit)
R3 IMFForceDelete; C:\Program Files (x86)\IObit\IObit Malware Fighter\drivers\win10_amd64\IMFForceDelete.sys [33600 2017-02-16] (IObit.com)
R3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [252832 2017-07-07] (Malwarebytes)
S3 MBAMWebProtection; C:\Windows\system32\drivers\mwac.sys [92096 2017-05-10] (Malwarebytes)
R3 nvlddmkm; C:\Windows\System32\DriverStore\FileRepository\nv_ref_pubwu.inf_amd64_f9309145156afb40\nvlddmkm.sys [14456912 2017-05-19] (NVIDIA Corporation)
R3 RegFilter; C:\Program Files (x86)\IObit\IObit Malware Fighter\drivers\win10_amd64\regfilter.sys [52792 2017-02-16] (IObit.com)
R3 rt640x64; C:\Windows\System32\drivers\rt640x64.sys [954368 2017-05-16] (Realtek )
S3 SDFRd; C:\Windows\System32\drivers\SDFRd.sys [31128 2017-03-18] ()
R3 Warsaw_PP; C:\Program Files (x86)\GbPlugin\wsftprp64.sys [24792 2015-12-04] (GAS Tecnologia LTDA)
S3 WdBoot; C:\Windows\system32\drivers\WdBoot.sys [44632 2017-03-18] (Microsoft Corporation)
S3 WdFilter; C:\Windows\system32\drivers\WdFilter.sys [294816 2017-03-18] (Microsoft Corporation)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [121248 2017-03-18] (Microsoft Corporation)
R1 wsddfac; C:\Windows\System32\drivers\wsddfac.sys [28376 2017-07-07] (GAS Tecnologia)
R1 wsddntf; C:\Windows\system32\DRIVERS\wsddntf.sys [47176 2016-06-21] (GAS Tecnologia)
S1 wsddpp; C:\Windows\system32\drivers\wsddpp.sys [25184 2016-06-08] (GAS Tecnologia)
S3 wsddprm; C:\Windows\system32\drivers\wsddprm.sys [25184 2016-11-07] (GAS Tecnologia)

==================== NetSvcs (Whitelisted) ===================

(Se uma entrada for incluída na fixlist, será removida do Registro. O arquivo não será movido, a menos que seja colocado separadamente.)

==================== Um Mês Criados arquivos e pastas ========

(Se uma entrada for incluída na fixlist, o arquivo/pasta será movido.)

2017-07-07 16:06 - 2017-07-07 16:06 - 00000000 ____D C:\Users\Todos os Usuários\SWCUTemp
2017-07-07 16:06 - 2017-07-07 16:06 - 00000000 ____D C:\ProgramData\SWCUTemp
2017-07-07 15:23 - 2017-07-07 15:23 - 00290304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\subinacl.exe
2017-07-07 15:23 - 2017-07-07 15:23 - 00000000 ____D C:\Program Files (x86)\Adware Removal Tool by TSA
2017-07-07 14:07 - 2017-07-07 14:07 - 00000000 ____D C:\Users\Todos os Usuários\ProductData
2017-07-07 14:07 - 2017-07-07 14:07 - 00000000 ____D C:\ProgramData\ProductData
2017-07-07 02:39 - 2017-07-07 02:39 - 00000693 _____ C:\Users\bruno\Desktop\JRT.txt
2017-07-07 01:01 - 2017-07-07 16:22 - 00000000 ____D C:\FRST
2017-07-07 00:43 - 2017-07-07 00:43 - 02812288 _____ C:\Users\bruno\ZHPCleaner.exe
2017-07-07 00:38 - 2017-07-07 00:38 - 00000438 __RSH C:\Users\Todos os Usuários\ntuser.pol
2017-07-07 00:38 - 2017-07-07 00:38 - 00000438 __RSH C:\ProgramData\ntuser.pol
2017-07-06 23:56 - 2017-07-06 23:56 - 00000859 _____ C:\Users\Public\Desktop\Unravel.lnk
2017-07-06 23:56 - 2017-07-06 23:56 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Unravel
2017-07-06 23:41 - 2017-07-06 23:56 - 00000000 ____D C:\Program Files\Unravel
2017-07-05 01:17 - 2017-07-05 01:17 - 00000000 ____D C:\Users\bruno\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Aplicativos do Google Chrome
2017-07-05 00:50 - 2017-07-05 00:50 - 00000616 _____ C:\Users\bruno\Desktop\powershell.txt
2017-07-05 00:40 - 2017-07-05 00:40 - 00002342 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2017-07-05 00:40 - 2017-07-05 00:40 - 00002330 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2017-07-05 00:39 - 2017-07-05 00:39 - 00003586 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2017-07-05 00:39 - 2017-07-05 00:39 - 00003462 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2017-07-05 00:34 - 2017-07-06 22:53 - 00000000 ____D C:\Users\bruno\AppData\Local\MicrosoftEdge
2017-07-05 00:27 - 2017-07-05 00:35 - 00000000 ____D C:\Users\bruno\AppData\Local\CrashDumps
2017-07-05 00:26 - 2017-07-05 00:26 - 00000000 ____D C:\Users\bruno\AppData\Local\DBG
2017-07-05 00:08 - 2017-07-04 22:26 - 00024064 _____ C:\Windows\zoek-delete.exe
2017-07-04 23:29 - 2017-07-06 23:44 - 00000000 ____D C:\Users\Todos os Usuários\BlueStacksSetup
2017-07-04 23:29 - 2017-07-06 23:44 - 00000000 ____D C:\ProgramData\BlueStacksSetup
2017-07-04 22:26 - 2017-07-04 23:24 - 00000000 ____D C:\zoek_backup
2017-07-04 22:22 - 2017-07-04 22:22 - 00000000 ____D C:\Users\TEMP
2017-07-04 19:39 - 2017-07-07 16:16 - 00018755 _____ C:\Users\bruno\Desktop\RepairDNS.txt
2017-07-04 19:36 - 2017-07-04 20:48 - 00000865 _____ C:\Users\bruno\Desktop\ZHPDiag.lnk
2017-07-04 19:32 - 2017-07-07 16:04 - 00001835 _____ C:\Users\bruno\Desktop\ZHPCleaner.txt
2017-07-04 19:28 - 2017-07-04 21:14 - 00002093 _____ C:\Users\Public\Desktop\Malwarebytes.lnk
2017-07-04 18:15 - 2017-07-07 15:40 - 00000214 _____ C:\Windows\Tasks\CreateExplorerShellUnelevatedTask.job
2017-07-04 17:24 - 2017-07-04 17:24 - 00400464 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe
2017-07-04 17:20 - 2017-07-04 17:20 - 00001246 _____ C:\Users\Public\Desktop\IObit Malware Fighter.lnk
2017-07-04 17:20 - 2017-07-04 17:20 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\IObit Malware Fighter
2017-07-04 17:20 - 2017-03-17 00:57 - 00044096 _____ (IObit.com) C:\Windows\system32\Drivers\IMFCameraProtect.sys
2017-07-04 16:48 - 2017-07-04 16:48 - 00000000 ____D C:\Users\bruno\AppData\Local\TempOfficeC2R5A143DCE-8476-4B8C-9A41-3344B0C4349A
2017-07-04 16:12 - 2017-07-04 16:12 - 00000899 _____ C:\Users\Public\Desktop\RogueKiller.lnk
2017-07-04 15:50 - 2017-07-04 15:52 - 03626104 _____ (Google) C:\Users\bruno\Desktop\chrome_cleanup_tool.exe
2017-07-04 14:55 - 2017-07-04 14:57 - 48750920 _____ C:\Users\bruno\Desktop\BDPUARLauncher.exe
2017-07-04 14:01 - 2017-07-04 14:01 - 00251832 _____ (Malwarebytes) C:\Windows\system32\Drivers\01083332.sys
2017-07-04 13:50 - 2017-07-04 13:52 - 00007036 _____ C:\PureRa.txt
2017-07-04 13:40 - 2017-07-07 15:59 - 00000734 _____ C:\Users\bruno\Desktop\ZHPCleaner.lnk
2017-07-04 13:22 - 2017-07-04 13:22 - 00000000 ____D C:\Users\bruno\Documents\EA Games
2017-07-04 00:59 - 2017-07-04 00:59 - 00000000 ____D C:\Users\bruno\AppData\Local\UnrealEngine
2017-07-04 00:59 - 2017-07-04 00:59 - 00000000 ____D C:\Users\bruno\AppData\Local\RSG
2017-07-04 00:30 - 2017-07-04 00:31 - 04110280 _____ C:\Users\bruno\Desktop\adwcleaner_6.047.exe
2017-07-04 00:23 - 2017-07-04 00:23 - 00000000 ____D C:\Users\Todos os Usuários\VS Revo Group
2017-07-04 00:23 - 2017-07-04 00:23 - 00000000 ____D C:\Users\bruno\AppData\Local\VS Revo Group
2017-07-04 00:23 - 2017-07-04 00:23 - 00000000 ____D C:\ProgramData\VS Revo Group
2017-07-04 00:23 - 2017-07-04 00:23 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Revo Uninstaller Pro
2017-07-04 00:23 - 2017-07-04 00:23 - 00000000 ____D C:\Program Files\VS Revo Group
2017-07-04 00:23 - 2016-12-21 14:52 - 00040240 _____ (VS Revo Group) C:\Windows\system32\Drivers\revoflt.sys
2017-07-04 00:19 - 2017-07-04 00:19 - 00251832 _____ (Malwarebytes) C:\Windows\system32\Drivers\06BB3EA2.sys
2017-07-03 23:46 - 2017-07-07 16:04 - 00000000 ____D C:\Users\bruno\AppData\Roaming\ZHP
2017-07-03 23:46 - 2017-07-04 20:48 - 00000000 ____D C:\Users\bruno\AppData\Local\ZHP
2017-07-03 21:42 - 2017-07-07 01:25 - 00028272 _____ C:\Windows\system32\Drivers\TrueSight.sys
2017-07-03 21:41 - 2017-07-04 15:55 - 00000000 ____D C:\Users\Todos os Usuários\RogueKiller
2017-07-03 21:41 - 2017-07-04 15:55 - 00000000 ____D C:\ProgramData\RogueKiller
2017-07-03 21:31 - 2017-07-03 21:31 - 00000000 ____D C:\Users\bruno\AppData\Roaming\Editor
2017-07-03 21:31 - 2017-07-03 21:31 - 00000000 ____D C:\Users\bruno\AppData\Local\mkw
2017-06-30 01:20 - 2017-06-30 01:20 - 00480800 _____ (Intel(R) Corporation) C:\Windows\system32\Drivers\IntcDAud.sys
2017-06-30 01:20 - 2017-06-30 01:20 - 00000000 ____D C:\Windows\LastGood.Tmp
2017-06-21 21:41 - 2017-06-21 21:41 - 00000000 ____D C:\Users\bruno\AppData\Roaming\Skype
2017-06-16 22:06 - 2017-06-16 22:06 - 00000000 ____D C:\Users\bruno\Documents\Avalanche Studios
2017-06-13 19:39 - 2017-06-03 06:23 - 00573856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\comctl32.dll
2017-06-13 19:39 - 2017-05-20 06:13 - 01333136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msctf.dll
2017-06-13 19:39 - 2017-05-20 05:08 - 00174080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RstrtMgr.dll
2017-06-13 19:38 - 2017-06-03 07:15 - 01596600 _____ (Microsoft Corporation) C:\Windows\system32\gdi32full.dll
2017-06-13 19:38 - 2017-06-03 07:15 - 00750560 _____ (Microsoft Corporation) C:\Windows\system32\fontdrvhost.exe
2017-06-13 19:38 - 2017-06-03 07:15 - 00382368 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll
2017-06-13 19:38 - 2017-06-03 07:10 - 00130464 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tm.sys
2017-06-13 19:38 - 2017-06-03 07:09 - 08318880 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2017-06-13 19:38 - 2017-06-03 07:09 - 01003624 _____ (Microsoft Corporation) C:\Windows\system32\ucrtbase.dll
2017-06-13 19:38 - 2017-06-03 07:08 - 02969880 _____ (Microsoft Corporation) C:\Windows\system32\CoreUIComponents.dll
2017-06-13 19:38 - 2017-06-03 07:07 - 00119712 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tdx.sys
2017-06-13 19:38 - 2017-06-03 07:02 - 02444192 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys
2017-06-13 19:38 - 2017-06-03 07:01 - 05477096 _____ (Microsoft Corporation) C:\Windows\system32\OneCoreUAPCommonProxyStub.dll
2017-06-13 19:38 - 2017-06-03 06:59 - 01409048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32full.dll
2017-06-13 19:38 - 2017-06-03 06:59 - 00626528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fontdrvhost.exe
2017-06-13 19:38 - 2017-06-03 06:59 - 00311200 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll
2017-06-13 19:38 - 2017-06-03 06:59 - 00259400 _____ (Microsoft Corporation) C:\Windows\system32\MusNotifyIcon.exe
2017-06-13 19:38 - 2017-06-03 06:58 - 21352696 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2017-06-13 19:38 - 2017-06-03 06:58 - 07904784 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.Protection.PlayReady.dll
2017-06-13 19:38 - 2017-06-03 06:58 - 00660384 _____ (Microsoft Corporation) C:\Windows\system32\comctl32.dll
2017-06-13 19:38 - 2017-06-03 06:58 - 00254176 _____ (Microsoft Corporation) C:\Windows\system32\mfps.dll
2017-06-13 19:38 - 2017-06-03 06:55 - 02681760 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2017-06-13 19:38 - 2017-06-03 06:36 - 01150784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ucrtbase.dll
2017-06-13 19:38 - 2017-06-03 06:35 - 02259768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\CoreUIComponents.dll
2017-06-13 19:38 - 2017-06-03 06:28 - 23677440 _____ (Microsoft Corporation) C:\Windows\system32\edgehtml.dll
2017-06-13 19:38 - 2017-06-03 06:26 - 00266640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\capauthz.dll
2017-06-13 19:38 - 2017-06-03 06:23 - 20373920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2017-06-13 19:38 - 2017-06-03 06:23 - 06760024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.Protection.PlayReady.dll
2017-06-13 19:38 - 2017-06-03 06:21 - 01516448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AppVEntSubsystems32.dll
2017-06-13 19:38 - 2017-06-03 06:20 - 00583160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\CoreMessaging.dll
2017-06-13 19:38 - 2017-06-03 06:14 - 03673088 _____ (Microsoft Corporation) C:\Windows\system32\win32kfull.sys
2017-06-13 19:38 - 2017-06-03 06:14 - 00443392 _____ (Microsoft Corporation) C:\Windows\system32\PerceptionSimulationExtensions.dll
2017-06-13 19:38 - 2017-06-03 06:14 - 00142848 _____ (Microsoft Corporation) C:\Windows\system32\dwmredir.dll
2017-06-13 19:38 - 2017-06-03 06:14 - 00099328 _____ (Microsoft Corporation) C:\Windows\system32\utcutil.dll
2017-06-13 19:38 - 2017-06-03 06:14 - 00047104 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll
2017-06-13 19:38 - 2017-06-03 06:12 - 00119296 _____ (Microsoft Corporation) C:\Windows\system32\UserDataTimeUtil.dll
2017-06-13 19:38 - 2017-06-03 06:11 - 02958848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\win32kfull.sys
2017-06-13 19:38 - 2017-06-03 06:11 - 00128000 _____ (Microsoft Corporation) C:\Windows\system32\mssprxy.dll
2017-06-13 19:38 - 2017-06-03 06:11 - 00052736 _____ (Microsoft Corporation) C:\Windows\system32\musdialoghandlers.dll
2017-06-13 19:38 - 2017-06-03 06:11 - 00038912 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll
2017-06-13 19:38 - 2017-06-03 06:11 - 00002560 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2017-06-13 19:38 - 2017-06-03 06:10 - 00293376 _____ (Microsoft Corporation) C:\Windows\system32\MusNotification.exe
2017-06-13 19:38 - 2017-06-03 06:10 - 00102400 _____ (Microsoft Corporation) C:\Windows\system32\MusNotificationUx.exe
2017-06-13 19:38 - 2017-06-03 06:10 - 00076800 _____ (Microsoft Corporation) C:\Windows\system32\DeviceCredentialDeployment.exe
2017-06-13 19:38 - 2017-06-03 06:09 - 00271872 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Security.Authentication.Identity.Provider.dll
2017-06-13 19:38 - 2017-06-03 06:09 - 00221184 _____ (Microsoft Corporation) C:\Windows\system32\devicengccredprov.dll
2017-06-13 19:38 - 2017-06-03 06:09 - 00094720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UserDataTimeUtil.dll
2017-06-13 19:38 - 2017-06-03 06:09 - 00064512 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll
2017-06-13 19:38 - 2017-06-03 06:07 - 23682048 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2017-06-13 19:38 - 2017-06-03 06:07 - 00778240 _____ C:\Windows\system32\MBR2GPT.EXE
2017-06-13 19:38 - 2017-06-03 06:07 - 00721920 _____ (Microsoft Corporation) C:\Windows\system32\MusUpdateHandlers.dll
2017-06-13 19:38 - 2017-06-03 06:07 - 00002560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll
2017-06-13 19:38 - 2017-06-03 06:06 - 00551936 _____ (Microsoft Corporation) C:\Windows\system32\TpmCoreProvisioning.dll
2017-06-13 19:38 - 2017-06-03 06:05 - 20506624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\edgehtml.dll
2017-06-13 19:38 - 2017-06-03 06:05 - 07336448 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Data.Pdf.dll
2017-06-13 19:38 - 2017-06-03 06:05 - 01878016 _____ (Microsoft Corporation) C:\Windows\system32\AzureSettingSyncProvider.dll
2017-06-13 19:38 - 2017-06-03 06:05 - 00198656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Security.Authentication.Identity.Provider.dll
2017-06-13 19:38 - 2017-06-03 06:05 - 00169984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\devicengccredprov.dll
2017-06-13 19:38 - 2017-06-03 06:04 - 12787200 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2017-06-13 19:38 - 2017-06-03 06:04 - 00925696 _____ (Microsoft Corporation) C:\Windows\system32\WpcWebFilter.dll
2017-06-13 19:38 - 2017-06-03 06:04 - 00805888 _____ (Microsoft Corporation) C:\Windows\system32\ieproxy.dll
2017-06-13 19:38 - 2017-06-03 06:03 - 19336192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2017-06-13 19:38 - 2017-06-03 06:03 - 01260544 _____ (Microsoft Corporation) C:\Windows\system32\GamePanel.exe
2017-06-13 19:38 - 2017-06-03 06:03 - 00467456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TpmCoreProvisioning.dll
2017-06-13 19:38 - 2017-06-03 06:02 - 08245760 _____ (Microsoft Corporation) C:\Windows\system32\Chakra.dll
2017-06-13 19:38 - 2017-06-03 06:01 - 06726656 _____ (Microsoft Corporation) C:\Windows\system32\mspaint.exe
2017-06-13 19:38 - 2017-06-03 06:00 - 03379200 _____ (Microsoft Corporation) C:\Windows\system32\tquery.dll
2017-06-13 19:38 - 2017-06-03 06:00 - 00933376 _____ (Microsoft Corporation) C:\Windows\system32\SearchIndexer.exe
2017-06-13 19:38 - 2017-06-03 06:00 - 00358400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieproxy.dll
2017-06-13 19:38 - 2017-06-03 05:59 - 04730368 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2017-06-13 19:38 - 2017-06-03 05:59 - 02672128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tquery.dll
2017-06-13 19:38 - 2017-06-03 05:59 - 02625024 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Logon.dll
2017-06-13 19:38 - 2017-06-03 05:59 - 02597376 _____ (Microsoft Corporation) C:\Windows\system32\mssrch.dll
2017-06-13 19:38 - 2017-06-03 05:59 - 02056192 _____ (Microsoft Corporation) C:\Windows\system32\win32kbase.sys
2017-06-13 19:38 - 2017-06-03 05:59 - 01293824 _____ (Microsoft Corporation) C:\Windows\system32\aadtb.dll
2017-06-13 19:38 - 2017-06-03 05:59 - 01142784 _____ (Microsoft Corporation) C:\Windows\system32\localspl.dll
2017-06-13 19:38 - 2017-06-03 05:59 - 00975360 _____ (Microsoft Corporation) C:\Windows\HelpPane.exe
2017-06-13 19:38 - 2017-06-03 05:59 - 00636416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WpcWebFilter.dll
2017-06-13 19:38 - 2017-06-03 05:58 - 05961216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Data.Pdf.dll
2017-06-13 19:38 - 2017-06-03 05:58 - 02650112 _____ (Microsoft Corporation) C:\Windows\system32\dwmcore.dll
2017-06-13 19:38 - 2017-06-03 05:58 - 02516480 _____ (Microsoft Corporation) C:\Windows\system32\diagtrack.dll
2017-06-13 19:38 - 2017-06-03 05:58 - 01888256 _____ (Microsoft Corporation) C:\Windows\system32\FntCache.dll
2017-06-13 19:38 - 2017-06-03 05:58 - 01046016 _____ (Microsoft Corporation) C:\Windows\system32\ngcsvc.dll
2017-06-13 19:38 - 2017-06-03 05:58 - 00827392 _____ (Microsoft Corporation) C:\Windows\system32\win32spl.dll
2017-06-13 19:38 - 2017-06-03 05:57 - 11870720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2017-06-13 19:38 - 2017-06-03 05:57 - 06535168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mspaint.exe
2017-06-13 19:38 - 2017-06-03 05:57 - 05557760 _____ (Microsoft Corporation) C:\Windows\system32\dbgeng.dll
2017-06-13 19:38 - 2017-06-03 05:57 - 02829824 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll
2017-06-13 19:38 - 2017-06-03 05:57 - 01675264 _____ (Microsoft Corporation) C:\Windows\system32\wpncore.dll
2017-06-13 19:38 - 2017-06-03 05:57 - 01248768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AzureSettingSyncProvider.dll
2017-06-13 19:38 - 2017-06-03 05:57 - 00797184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchIndexer.exe
2017-06-13 19:38 - 2017-06-03 05:56 - 06292992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Chakra.dll
2017-06-13 19:38 - 2017-06-03 05:55 - 03656192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2017-06-13 19:38 - 2017-06-03 05:55 - 02132480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssrch.dll
2017-06-13 19:38 - 2017-06-03 05:55 - 01019904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\aadtb.dll
2017-06-13 19:38 - 2017-06-03 05:54 - 02341376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll
2017-06-13 19:38 - 2017-06-03 05:54 - 02298368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dwmcore.dll
2017-06-13 19:38 - 2017-06-03 05:54 - 00794112 _____ (Microsoft Corporation) C:\Windows\system32\pwcreator.exe
2017-06-13 19:38 - 2017-06-03 05:53 - 04559360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dbgeng.dll
2017-06-13 19:38 - 2017-05-20 05:55 - 00606960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleaut32.dll
2017-06-13 19:38 - 2017-05-20 05:48 - 04469832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\explorer.exe
2017-06-13 19:38 - 2017-05-20 05:47 - 01474800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.ApplicationModel.Store.dll
2017-06-13 19:38 - 2017-05-20 05:46 - 05821496 _____ (Microsoft Corporation) C:\Windows\SysWOW64\windows.storage.dll
2017-06-13 19:38 - 2017-05-20 05:46 - 01266544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\twinapi.appcore.dll
2017-06-13 19:38 - 2017-05-20 05:46 - 00754080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\LicenseManager.dll
2017-06-13 19:38 - 2017-05-20 05:45 - 00349600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2017-06-13 19:38 - 2017-05-20 05:44 - 00519680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AppXDeploymentClient.dll
2017-06-13 19:38 - 2017-05-20 05:44 - 00181664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AppxAllUserStore.dll
2017-06-13 19:38 - 2017-05-20 05:43 - 05802968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.dll
2017-06-13 19:38 - 2017-05-20 05:43 - 04672848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfcore.dll
2017-06-13 19:38 - 2017-05-20 05:43 - 02424016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfmp4srcsnk.dll
2017-06-13 19:38 - 2017-05-20 05:43 - 01529384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winmde.dll
2017-06-13 19:38 - 2017-05-20 05:43 - 01455592 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfplat.dll
2017-06-13 19:38 - 2017-05-20 05:43 - 01120864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfsvr.dll
2017-06-13 19:38 - 2017-05-20 05:43 - 00354400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MMDevAPI.dll
2017-06-13 19:38 - 2017-05-20 05:29 - 13840384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Xaml.dll
2017-06-13 19:38 - 2017-05-20 05:29 - 00584192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UIRibbonRes.dll
2017-06-13 19:38 - 2017-05-20 05:27 - 02199552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Xaml.Resources.dll
2017-06-13 19:38 - 2017-05-20 05:27 - 00141824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\smartscreenps.dll
2017-06-13 19:38 - 2017-05-20 05:26 - 00059904 _____ C:\Windows\SysWOW64\xboxgipsynthetic.dll
2017-06-13 19:38 - 2017-05-20 05:26 - 00025088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\odbcconf.dll
2017-06-13 19:38 - 2017-05-20 05:25 - 00826368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\NPSMDesktopProvider.dll
2017-06-13 19:38 - 2017-05-20 05:25 - 00174080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Web.Diagnostics.dll
2017-06-13 19:38 - 2017-05-20 05:24 - 00362496 _____ (Microsoft Corporation) C:\Windows\SysWOW64\daxexec.dll
2017-06-13 19:38 - 2017-05-20 05:23 - 06728192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\twinui.dll
2017-06-13 19:38 - 2017-05-20 05:22 - 01292288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MSVPXENC.dll
2017-06-13 19:38 - 2017-05-20 05:22 - 00754176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MessagingDataModel2.dll
2017-06-13 19:38 - 2017-05-20 05:22 - 00394240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DictationManager.dll
2017-06-13 19:38 - 2017-05-20 05:21 - 01984000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DeviceFlows.DataModel.dll
2017-06-13 19:38 - 2017-05-20 05:21 - 00476672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\OneDriveSettingSyncProvider.dll
2017-06-13 19:38 - 2017-05-20 05:21 - 00444928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.System.Launcher.dll
2017-06-13 19:38 - 2017-05-20 05:20 - 00807424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\StoreAgent.dll
2017-06-13 19:38 - 2017-05-20 05:20 - 00507392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2017-06-13 19:38 - 2017-05-20 05:20 - 00368128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\InstallAgentUserBroker.exe
2017-06-13 19:38 - 2017-05-20 05:20 - 00354304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ActivationManager.dll
2017-06-13 19:38 - 2017-05-20 05:19 - 05719040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\BingMaps.dll
2017-06-13 19:38 - 2017-05-20 05:18 - 01450496 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UIAutomationCore.dll
2017-06-13 19:38 - 2017-05-20 05:17 - 00952832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\comdlg32.dll
2017-06-13 19:38 - 2017-05-20 05:17 - 00909312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SettingSyncCore.dll
2017-06-13 19:38 - 2017-05-20 05:17 - 00329728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\InstallAgent.exe
2017-06-13 19:38 - 2017-05-20 05:17 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cldapi.dll
2017-06-13 19:38 - 2017-05-20 05:16 - 05225984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d2d1.dll
2017-06-13 19:38 - 2017-05-20 05:16 - 03667456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_47.dll
2017-06-13 19:38 - 2017-05-20 05:16 - 02588160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MapRouter.dll
2017-06-13 19:38 - 2017-05-20 05:16 - 00899584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\twinui.appcore.dll
2017-06-13 19:38 - 2017-05-20 05:15 - 02088960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MapGeocoder.dll
2017-06-13 19:38 - 2017-05-20 05:14 - 04417024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ExplorerFrame.dll
2017-06-13 19:38 - 2017-05-20 05:14 - 04056576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MFMediaEngine.dll
2017-06-13 19:38 - 2017-05-20 05:14 - 02679296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SRH.dll
2017-06-13 19:38 - 2017-05-20 05:14 - 02211328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\InputService.dll
2017-06-13 19:38 - 2017-05-20 05:14 - 01035264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ShareHost.dll
2017-06-13 19:38 - 2017-05-20 05:11 - 01536512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Immersive.dll
2017-06-13 19:38 - 2017-05-20 05:10 - 00332800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Devices.Midi.dll
2017-06-13 19:38 - 2017-05-20 05:10 - 00128000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\NPSM.dll
2017-06-13 19:38 - 2017-05-20 05:10 - 00089088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\olepro32.dll
2017-06-13 19:38 - 2017-05-20 04:08 - 01459728 _____ (Microsoft Corporation) C:\Windows\system32\msctf.dll
2017-06-13 19:38 - 2017-05-20 04:03 - 00777400 _____ (Microsoft Corporation) C:\Windows\system32\oleaut32.dll
2017-06-13 19:38 - 2017-05-20 03:59 - 00112544 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dam.sys
2017-06-13 19:38 - 2017-05-20 03:56 - 04847928 _____ (Microsoft Corporation) C:\Windows\explorer.exe
2017-06-13 19:38 - 2017-05-20 03:56 - 00712608 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgmms2.sys
2017-06-13 19:38 - 2017-05-20 03:56 - 00370928 _____ (Microsoft Corporation) C:\Windows\system32\SystemSettingsAdminFlows.exe
2017-06-13 19:38 - 2017-05-20 03:55 - 07325584 _____ (Microsoft Corporation) C:\Windows\system32\windows.storage.dll
2017-06-13 19:38 - 2017-05-20 03:55 - 01911752 _____ (Microsoft Corporation) C:\Windows\system32\Windows.ApplicationModel.Store.dll
2017-06-13 19:38 - 2017-05-20 03:55 - 01506712 _____ (Microsoft Corporation) C:\Windows\system32\twinapi.appcore.dll
2017-06-13 19:38 - 2017-05-20 03:55 - 01055648 _____ (Microsoft Corporation) C:\Windows\system32\LicenseManager.dll
2017-06-13 19:38 - 2017-05-20 03:55 - 00961952 _____ (Microsoft Corporation) C:\Windows\system32\efscore.dll
2017-06-13 19:38 - 2017-05-20 03:54 - 00546208 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\storport.sys
2017-06-13 19:38 - 2017-05-20 03:54 - 00144288 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\storahci.sys
2017-06-13 19:38 - 2017-05-20 03:53 - 00411040 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2017-06-13 19:38 - 2017-05-20 03:53 - 00363424 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fastfat.sys
2017-06-13 19:38 - 2017-05-20 03:53 - 00335808 _____ (Microsoft Corporation) C:\Windows\system32\SecurityHealthService.exe
2017-06-13 19:38 - 2017-05-20 03:52 - 04709528 _____ (Microsoft Corporation) C:\Windows\system32\mfcore.dll
2017-06-13 19:38 - 2017-05-20 03:52 - 01700408 _____ (Microsoft Corporation) C:\Windows\system32\mfplat.dll
2017-06-13 19:38 - 2017-05-20 03:51 - 06551856 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.dll
2017-06-13 19:38 - 2017-05-20 03:51 - 02604256 _____ (Microsoft Corporation) C:\Windows\system32\mfmp4srcsnk.dll
2017-06-13 19:38 - 2017-05-20 03:51 - 01670496 _____ (Microsoft Corporation) C:\Windows\system32\winmde.dll
2017-06-13 19:38 - 2017-05-20 03:51 - 01219560 _____ (Microsoft Corporation) C:\Windows\system32\mfsvr.dll
2017-06-13 19:38 - 2017-05-20 03:51 - 00406064 _____ (Microsoft Corporation) C:\Windows\system32\MMDevAPI.dll
2017-06-13 19:38 - 2017-05-20 03:48 - 00387928 _____ (Microsoft Corporation) C:\Windows\system32\wmpps.dll
2017-06-13 19:38 - 2017-05-20 03:10 - 00809472 _____ (Microsoft Corporation) C:\Windows\system32\SecurityHealthSSO.dll
2017-06-13 19:38 - 2017-05-20 03:10 - 00584192 _____ (Microsoft Corporation) C:\Windows\system32\UIRibbonRes.dll
2017-06-13 19:38 - 2017-05-20 03:10 - 00361472 _____ (Microsoft Corporation) C:\Windows\system32\ConhostV2.dll
2017-06-13 19:38 - 2017-05-20 03:10 - 00088576 _____ (Microsoft Corporation) C:\Windows\system32\winsrvext.dll
2017-06-13 19:38 - 2017-05-20 03:10 - 00027136 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksthunk.sys
2017-06-13 19:38 - 2017-05-20 03:09 - 17365504 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Xaml.dll
2017-06-13 19:38 - 2017-05-20 03:09 - 02199552 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Xaml.Resources.dll
2017-06-13 19:38 - 2017-05-20 03:09 - 00209408 _____ (Microsoft Corporation) C:\Windows\system32\smartscreenps.dll
2017-06-13 19:38 - 2017-05-20 03:08 - 00086016 _____ C:\Windows\system32\xboxgipsynthetic.dll
2017-06-13 19:38 - 2017-05-20 03:08 - 00029696 _____ (Microsoft Corporation) C:\Windows\system32\odbcconf.dll
2017-06-13 19:38 - 2017-05-20 03:08 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rootmdm.sys
2017-06-13 19:38 - 2017-05-20 03:07 - 00133120 _____ (Microsoft Corporation) C:\Windows\system32\XblGameSaveExt.dll
2017-06-13 19:38 - 2017-05-20 03:07 - 00015872 _____ (Microsoft Corporation) C:\Windows\system32\snmptrap.exe
2017-06-13 19:38 - 2017-05-20 03:06 - 00866816 _____ (Microsoft Corporation) C:\Windows\system32\NPSMDesktopProvider.dll
2017-06-13 19:38 - 2017-05-20 03:06 - 00232448 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Web.Diagnostics.dll
2017-06-13 19:38 - 2017-05-20 03:06 - 00192512 _____ (Microsoft Corporation) C:\Windows\system32\Windows.SharedPC.AccountManager.dll
2017-06-13 19:38 - 2017-05-20 03:05 - 07931392 _____ (Microsoft Corporation) C:\Windows\system32\twinui.dll
2017-06-13 19:38 - 2017-05-20 03:03 - 08331264 _____ (Microsoft Corporation) C:\Windows\system32\BingMaps.dll
2017-06-13 19:38 - 2017-05-20 03:03 - 00527360 _____ (Microsoft Corporation) C:\Windows\system32\aadcloudap.dll
2017-06-13 19:38 - 2017-05-20 03:03 - 00491520 _____ (Microsoft Corporation) C:\Windows\system32\SettingsHandlers_Display.dll
2017-06-13 19:38 - 2017-05-20 03:03 - 00427008 _____ (Microsoft Corporation) C:\Windows\system32\provengine.dll
2017-06-13 19:38 - 2017-05-20 03:02 - 00601088 _____ (Microsoft Corporation) C:\Windows\system32\Windows.System.Launcher.dll
2017-06-13 19:38 - 2017-05-20 03:01 - 02347520 _____ (Microsoft Corporation) C:\Windows\system32\DeviceFlows.DataModel.dll
2017-06-13 19:38 - 2017-05-20 03:01 - 00590848 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2017-06-13 19:38 - 2017-05-20 03:01 - 00586240 _____ (Microsoft Corporation) C:\Windows\system32\OneDriveSettingSyncProvider.dll
2017-06-13 19:38 - 2017-05-20 03:01 - 00409600 _____ (Microsoft Corporation) C:\Windows\system32\updatehandlers.dll
2017-06-13 19:38 - 2017-05-20 03:01 - 00299520 _____ (Microsoft Corporation) C:\Windows\system32\AboveLockAppHost.dll
2017-06-13 19:38 - 2017-05-20 03:00 - 01078272 _____ (Microsoft Corporation) C:\Windows\system32\StoreAgent.dll
2017-06-13 19:38 - 2017-05-20 03:00 - 01067008 _____ (Microsoft Corporation) C:\Windows\system32\XboxNetApiSvc.dll
2017-06-13 19:38 - 2017-05-20 03:00 - 00417792 _____ (Microsoft Corporation) C:\Windows\system32\InstallAgentUserBroker.exe
2017-06-13 19:38 - 2017-05-20 02:59 - 01818624 _____ (Microsoft Corporation) C:\Windows\system32\UIAutomationCore.dll
2017-06-13 19:38 - 2017-05-20 02:59 - 01141760 _____ (Microsoft Corporation) C:\Windows\system32\MapsStore.dll
2017-06-13 19:38 - 2017-05-20 02:59 - 01028608 _____ (Microsoft Corporation) C:\Windows\system32\modernexecserver.dll
2017-06-13 19:38 - 2017-05-20 02:59 - 00972800 _____ (Microsoft Corporation) C:\Windows\system32\sysmain.dll
2017-06-13 19:38 - 2017-05-20 02:59 - 00687104 _____ (Microsoft Corporation) C:\Windows\system32\LogonController.dll
2017-06-13 19:38 - 2017-05-20 02:58 - 03784704 _____ (Microsoft Corporation) C:\Windows\system32\MapRouter.dll
2017-06-13 19:38 - 2017-05-20 02:58 - 03135488 _____ (Microsoft Corporation) C:\Windows\system32\MapGeocoder.dll
2017-06-13 19:38 - 2017-05-20 02:58 - 01046016 _____ (Microsoft Corporation) C:\Windows\system32\comdlg32.dll
2017-06-13 19:38 - 2017-05-20 02:58 - 00909824 _____ (Microsoft Corporation) C:\Windows\system32\ISM.dll
2017-06-13 19:38 - 2017-05-20 02:58 - 00374784 _____ (Microsoft Corporation) C:\Windows\system32\InstallAgent.exe
2017-06-13 19:38 - 2017-05-20 02:57 - 00681984 _____ (Microsoft Corporation) C:\Windows\system32\usocore.dll
2017-06-13 19:38 - 2017-05-20 02:56 - 02730496 _____ (Microsoft Corporation) C:\Windows\system32\smartscreen.exe
2017-06-13 19:38 - 2017-05-20 02:56 - 01076736 _____ (Microsoft Corporation) C:\Windows\system32\twinui.appcore.dll
2017-06-13 19:38 - 2017-05-20 02:55 - 04396032 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_47.dll
2017-06-13 19:38 - 2017-05-20 02:55 - 03332096 _____ (Microsoft Corporation) C:\Windows\system32\SRH.dll
2017-06-13 19:38 - 2017-05-20 02:55 - 02499584 _____ (Microsoft Corporation) C:\Windows\system32\twinui.pcshell.dll
2017-06-13 19:38 - 2017-05-20 02:55 - 01102848 _____ (Microsoft Corporation) C:\Windows\system32\SettingSyncCore.dll
2017-06-13 19:38 - 2017-05-20 02:54 - 04707840 _____ (Microsoft Corporation) C:\Windows\system32\ExplorerFrame.dll
2017-06-13 19:38 - 2017-05-20 02:54 - 04537344 _____ (Microsoft Corporation) C:\Windows\system32\MFMediaEngine.dll
2017-06-13 19:38 - 2017-05-20 02:54 - 03803136 _____ (Microsoft Corporation) C:\Windows\system32\SystemSettingsThresholdAdminFlowUI.dll
2017-06-13 19:38 - 2017-05-20 02:54 - 02938880 _____ (Microsoft Corporation) C:\Windows\system32\InputService.dll
2017-06-13 19:38 - 2017-05-20 02:52 - 00557568 _____ (Microsoft Corporation) C:\Windows\system32\wpnprv.dll
2017-06-13 19:38 - 2017-05-20 02:52 - 00476160 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Core.TextInput.dll
2017-06-13 19:38 - 2017-05-20 02:51 - 01706496 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Immersive.dll
2017-06-13 19:38 - 2017-05-20 02:51 - 00148480 _____ (Microsoft Corporation) C:\Windows\system32\umpo.dll
2017-06-13 19:38 - 2017-05-20 02:50 - 00439808 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.Midi.dll
2017-06-13 19:38 - 2017-05-20 02:50 - 00159744 _____ (Microsoft Corporation) C:\Windows\system32\NPSM.dll
2017-06-13 19:38 - 2017-05-20 02:48 - 02438656 _____ (Microsoft Corporation) C:\Windows\system32\ResetEngine.dll
2017-06-13 19:38 - 2017-05-20 02:48 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\vss_ps.dll
2017-06-13 19:38 - 2017-05-20 02:47 - 00641536 _____ (Microsoft Corporation) C:\Windows\system32\rdbui.dll
2017-06-13 19:38 - 2017-05-20 02:47 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\RstrtMgr.dll
2017-06-13 19:37 - 2017-06-03 07:14 - 01147296 _____ (Microsoft Corporation) C:\Windows\system32\hvix64.exe
2017-06-13 19:37 - 2017-06-03 07:14 - 01024928 _____ (Microsoft Corporation) C:\Windows\system32\hvax64.exe
2017-06-13 19:37 - 2017-06-03 07:07 - 00923048 _____ (Microsoft Corporation) C:\Windows\system32\CoreMessaging.dll
2017-06-13 19:37 - 2017-06-03 07:00 - 00872472 _____ (Microsoft Corporation) C:\Windows\system32\ClipSVC.dll
2017-06-13 19:37 - 2017-06-03 07:00 - 00321376 _____ (Microsoft Corporation) C:\Windows\system32\capauthz.dll
2017-06-13 19:37 - 2017-06-03 07:00 - 00219040 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tpm.sys
2017-06-13 19:37 - 2017-06-03 06:57 - 00371616 _____ (Microsoft Corporation) C:\Windows\system32\CloudExperienceHost.dll
2017-06-13 19:37 - 2017-06-03 06:56 - 02228120 _____ (Microsoft Corporation) C:\Windows\system32\AppVEntSubsystems64.dll
2017-06-13 19:37 - 2017-06-03 06:56 - 01854880 _____ (Microsoft Corporation) C:\Windows\system32\AppVEntVirtualization.dll
2017-06-13 19:37 - 2017-06-03 06:56 - 01693600 _____ (Microsoft Corporation) C:\Windows\system32\AppVIntegration.dll
2017-06-13 19:37 - 2017-06-03 06:56 - 01458592 _____ (Microsoft Corporation) C:\Windows\system32\AppVEntSubsystemController.dll
2017-06-13 19:37 - 2017-06-03 06:56 - 00848288 _____ (Microsoft Corporation) C:\Windows\system32\AppVOrchestration.dll
2017-06-13 19:37 - 2017-06-03 06:56 - 00846752 _____ (Microsoft Corporation) C:\Windows\system32\AppVClient.exe
2017-06-13 19:37 - 2017-06-03 06:56 - 00844696 _____ (Microsoft Corporation) C:\Windows\system32\AppVEntStreamingManager.dll
2017-06-13 19:37 - 2017-06-03 06:56 - 00697760 _____ (Microsoft Corporation) C:\Windows\system32\AppVCatalog.dll
2017-06-13 19:37 - 2017-06-03 06:56 - 00672672 _____ (Microsoft Corporation) C:\Windows\system32\AppVPublishing.dll
2017-06-13 19:37 - 2017-06-03 06:56 - 00399264 _____ (Microsoft Corporation) C:\Windows\system32\AppVScripting.dll
2017-06-13 19:37 - 2017-06-03 06:11 - 00035840 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\BasicRender.sys
2017-06-13 19:37 - 2017-06-03 06:07 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\bcdboot.exe
2017-06-13 19:37 - 2017-06-03 06:01 - 02804736 _____ (Microsoft Corporation) C:\Windows\system32\AppXDeploymentServer.dll
2017-06-13 19:37 - 2017-06-03 05:51 - 00064512 _____ (Microsoft Corporation) C:\Windows\bfsvc.exe
2017-06-13 19:37 - 2017-05-20 04:08 - 00543648 _____ (Microsoft Corporation) C:\Windows\system32\securekernel.exe
2017-06-13 19:37 - 2017-05-20 04:07 - 00287648 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\sdbus.sys
2017-06-13 19:37 - 2017-05-20 03:58 - 00188824 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dumpsd.sys
2017-06-13 19:37 - 2017-05-20 03:55 - 00211872 _____ (Microsoft Corporation) C:\Windows\system32\browserbroker.dll
2017-06-13 19:37 - 2017-05-20 03:54 - 00730016 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\vhdmp.sys
2017-06-13 19:37 - 2017-05-20 03:53 - 00654976 _____ (Microsoft Corporation) C:\Windows\system32\AppXDeploymentClient.dll
2017-06-13 19:37 - 2017-05-20 03:53 - 00255904 _____ (Microsoft Corporation) C:\Windows\system32\AppxAllUserStore.dll
2017-06-13 19:37 - 2017-05-20 03:07 - 00277504 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\xboxgip.sys
2017-06-13 19:37 - 2017-05-20 03:05 - 00518144 _____ (Microsoft Corporation) C:\Windows\system32\daxexec.dll
2017-06-13 19:37 - 2017-05-20 03:03 - 00892416 _____ (Microsoft Corporation) C:\Windows\system32\MessagingDataModel2.dll
2017-06-13 19:37 - 2017-05-20 03:03 - 00549888 _____ (Microsoft Corporation) C:\Windows\system32\DictationManager.dll
2017-06-13 19:37 - 2017-05-20 03:02 - 00616960 _____ (Microsoft Corporation) C:\Windows\system32\WindowManagement.dll
2017-06-13 19:37 - 2017-05-20 03:01 - 00970240 _____ (Microsoft Corporation) C:\Windows\system32\cdpsvc.dll
2017-06-13 19:37 - 2017-05-20 03:01 - 00408064 _____ (Microsoft Corporation) C:\Windows\system32\ActivationManager.dll
2017-06-13 19:37 - 2017-05-20 03:01 - 00149504 _____ (Microsoft Corporation) C:\Windows\system32\embeddedmodesvc.dll
2017-06-13 19:37 - 2017-05-20 03:00 - 00846848 _____ (Microsoft Corporation) C:\Windows\system32\bisrv.dll
2017-06-13 19:37 - 2017-05-20 03:00 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\cldapi.dll
2017-06-13 19:37 - 2017-05-20 02:59 - 01468416 _____ (Microsoft Corporation) C:\Windows\system32\AppXDeploymentExtensions.desktop.dll
2017-06-13 19:37 - 2017-05-20 02:59 - 00585216 _____ (Microsoft Corporation) C:\Windows\system32\AppReadiness.dll
2017-06-13 19:37 - 2017-05-20 02:58 - 01886208 _____ (Microsoft Corporation) C:\Windows\system32\AppXDeploymentExtensions.onecore.dll
2017-06-13 19:37 - 2017-05-20 02:54 - 01275904 _____ (Microsoft Corporation) C:\Windows\system32\ShareHost.dll
2017-06-13 19:37 - 2017-05-20 02:52 - 01356800 _____ (Microsoft Corporation) C:\Windows\system32\audiosrv.dll
2017-06-13 19:37 - 2017-05-20 02:52 - 00624640 _____ (Microsoft Corporation) C:\Windows\system32\AudioEndpointBuilder.dll
2017-06-13 19:17 - 2017-06-13 19:17 - 00000430 _____ C:\Windows\system32\.crusader
2017-06-13 19:09 - 2017-06-13 19:19 - 00000000 ____D C:\Users\Todos os Usuários\HitmanPro
2017-06-13 19:09 - 2017-06-13 19:19 - 00000000 ____D C:\ProgramData\HitmanPro
2017-06-11 22:48 - 2017-06-11 22:48 - 00000000 ____D C:\Users\bruno\aTubeCatcher
2017-06-11 00:53 - 2017-06-11 00:53 - 00000000 ____D C:\Users\Todos os Usuários\Dishonored 2
2017-06-11 00:53 - 2017-06-11 00:53 - 00000000 ____D C:\ProgramData\Dishonored 2
2017-06-10 08:32 - 2017-07-04 17:24 - 00061304 _____ () C:\Windows\system32\Drivers\lpsport.sys
2017-06-09 01:13 - 2017-07-02 23:45 - 00000000 ____D C:\Users\bruno\Desktop\memes

==================== Um Mês Modificados arquivos e pastas ========

(Se uma entrada for incluída na fixlist, o arquivo/pasta será movido.)

2017-07-07 16:22 - 2017-04-24 20:40 - 00000000 ____D C:\Users\bruno\Desktop\Limpeza e manutenção
2017-07-07 16:06 - 2017-05-27 15:23 - 00000000 ____D C:\AdwCleaner
2017-07-07 16:06 - 2017-04-24 21:54 - 00004180 _____ C:\Windows\System32\Tasks\User_Feed_Synchronization-{3C951958-345E-4E73-9F39-47AAB02E3F3E}
2017-07-07 16:04 - 2017-04-24 20:09 - 02667776 _____ C:\Windows\system32\PerfStringBackup.INI
2017-07-07 16:04 - 2017-03-20 00:57 - 01010752 _____ C:\Windows\system32\prfh0416.dat
2017-07-07 16:04 - 2017-03-20 00:57 - 00339682 _____ C:\Windows\system32\prfc0416.dat
2017-07-07 15:59 - 2017-04-27 00:36 - 00003204 _____ C:\Windows\System32\Tasks\FRAPS
2017-07-07 15:59 - 2017-04-24 23:33 - 00000000 ____D C:\Fraps
2017-07-07 15:58 - 2017-05-19 15:39 - 00028376 _____ (GAS Tecnologia) C:\Windows\system32\Drivers\wsddfac.sys
2017-07-07 15:58 - 2017-05-19 15:38 - 00029816 _____ (GAS Tecnologia) C:\Windows\system32\Drivers\gbpddreg64.sys
2017-07-07 15:58 - 2017-04-24 23:28 - 00252832 _____ (Malwarebytes) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2017-07-07 15:58 - 2017-04-24 23:26 - 00000000 ____D C:\Program Files\SoftEther VPN Client
2017-07-07 15:58 - 2017-04-24 20:25 - 00000180 _____ C:\Windows\system32\{A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat
2017-07-07 15:58 - 2017-04-24 20:25 - 00000000 __SHD C:\Users\bruno\IntelGraphicsProfiles
2017-07-07 15:57 - 2017-05-19 15:38 - 00028888 _____ (GAS Tecnologia) C:\Windows\system32\Drivers\gbpddfac64.sys
2017-07-07 15:57 - 2017-05-19 15:38 - 00000000 ____D C:\Users\Todos os Usuários\GbPlugin
2017-07-07 15:57 - 2017-05-19 15:38 - 00000000 ____D C:\ProgramData\GbPlugin
2017-07-07 15:57 - 2017-05-19 15:38 - 00000000 ____D C:\Program Files (x86)\GbPlugin
2017-07-07 15:57 - 2017-04-24 20:20 - 00000000 ____D C:\Users\Todos os Usuários\NVIDIA
2017-07-07 15:57 - 2017-04-24 20:20 - 00000000 ____D C:\ProgramData\NVIDIA
2017-07-07 15:57 - 2017-04-24 20:00 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2017-07-07 15:57 - 2017-03-18 08:40 - 01048576 _____ C:\Windows\system32\config\BBI
2017-07-07 15:50 - 2017-04-29 18:29 - 00000000 ____D C:\Users\bruno\AppData\Local\ElevatedDiagnostics
2017-07-07 15:39 - 2017-04-24 20:10 - 00000000 ____D C:\Users\bruno
2017-07-07 15:02 - 2017-04-24 21:30 - 00000000 ____D C:\Users\bruno\AppData\Local\Battle.net
2017-07-07 14:07 - 2017-04-24 21:28 - 00000000 ____D C:\Program Files (x86)\Blizzard App
2017-07-07 14:06 - 2017-04-24 20:00 - 00000000 ____D C:\Windows\system32\SleepStudy
2017-07-07 02:35 - 2017-04-24 23:04 - 00000000 ____D C:\Program Files (x86)\Microsoft Office
2017-07-07 02:21 - 2017-03-18 18:03 - 00000000 ___HD C:\Program Files\WindowsApps
2017-07-07 02:21 - 2017-03-18 18:03 - 00000000 ____D C:\Windows\AppReadiness
2017-07-07 02:14 - 2017-04-24 21:22 - 00000000 ____D C:\Users\Todos os Usuários\Origin
2017-07-07 02:14 - 2017-04-24 21:22 - 00000000 ____D C:\ProgramData\Origin
2017-07-07 01:59 - 2017-03-18 18:03 - 00000000 ____D C:\Windows\System
2017-07-07 00:37 - 2017-03-18 18:03 - 00000000 ___HD C:\Windows\system32\GroupPolicy
2017-07-07 00:05 - 2017-04-24 21:25 - 00000000 ____D C:\Users\bruno\AppData\Roaming\Origin
2017-07-06 23:37 - 2017-04-24 22:26 - 00000000 ____D C:\Users\bruno\AppData\Roaming\BitTorrent
2017-07-06 23:36 - 2017-04-24 21:37 - 00000000 ____D C:\Users\bruno\AppData\Roaming\DAEMON Tools Lite
2017-07-06 22:06 - 2017-03-18 18:03 - 00000000 ____D C:\Users\Todos os Usuários\regid.1991-06.com.microsoft
2017-07-06 22:06 - 2017-03-18 18:03 - 00000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2017-07-06 22:06 - 2017-03-18 18:01 - 00000000 ____D C:\Windows\INF
2017-07-05 00:40 - 2017-04-24 20:16 - 00000000 ____D C:\Program Files (x86)\Google
2017-07-05 00:37 - 2017-04-24 20:12 - 00000000 ____D C:\Users\bruno\AppData\Local\Packages
2017-07-05 00:24 - 2017-04-24 21:54 - 00000000 ____D C:\Program Files\Microsoft Silverlight
2017-07-05 00:24 - 2017-04-24 21:54 - 00000000 ____D C:\Program Files (x86)\Microsoft Silverlight
2017-07-04 22:34 - 2017-04-24 21:54 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
2017-07-04 19:28 - 2017-04-24 23:28 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes
2017-07-04 18:38 - 2017-05-18 12:33 - 00000000 ____D C:\Windows\Minidump
2017-07-04 18:38 - 2017-05-07 22:04 - 00000000 ____D C:\Users\bruno\AppData\Roaming\TS3Client
2017-07-04 18:38 - 2017-04-24 20:00 - 00000000 ____D C:\Windows\Panther
2017-07-04 18:37 - 2017-04-24 21:48 - 00000863 _____ C:\Users\Public\Desktop\CCleaner.lnk
2017-07-04 18:37 - 2017-04-24 20:41 - 00002870 _____ C:\Windows\System32\Tasks\CCleanerSkipUAC
2017-07-04 18:19 - 2017-04-30 23:00 - 00000000 ____D C:\Users\bruno\AppData\Roaming\GameVox
2017-07-04 17:53 - 2017-04-24 21:04 - 00004028 _____ C:\Windows\System32\Tasks\SafeZone scheduled Autoupdate 1493078675
2017-07-04 17:53 - 2017-04-24 21:04 - 00001088 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avast SafeZone Browser.lnk
2017-07-04 17:24 - 2017-04-24 21:00 - 00585608 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSP.sys
2017-07-04 17:24 - 2017-04-24 21:00 - 00361336 _____ (AVAST Software) C:\Windows\system32\Drivers\aswvmm.sys
2017-07-04 17:24 - 2017-04-24 21:00 - 00360792 _____ (AVAST Software) C:\Windows\system32\Drivers\aswvmm.sys.149919989996806
2017-07-04 17:24 - 2017-04-24 21:00 - 00198768 _____ (AVAST Software) C:\Windows\system32\Drivers\aswStm.sys
2017-07-04 17:24 - 2017-04-24 21:00 - 00146664 _____ (AVAST Software) C:\Windows\system32\Drivers\aswMonFlt.sys
2017-07-04 17:24 - 2017-04-24 21:00 - 00110352 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRdr2.sys
2017-07-04 17:24 - 2017-04-24 21:00 - 00084392 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRvrt.sys
2017-07-04 17:24 - 2017-04-24 21:00 - 00046984 _____ (AVAST Software) C:\Windows\system32\Drivers\aswHwid.sys
2017-07-04 17:24 - 2017-04-24 21:00 - 00003994 _____ C:\Windows\System32\Tasks\Avast Emergency Update
2017-07-04 17:24 - 2017-04-24 20:56 - 00000000 ____D C:\Users\Todos os Usuários\AVAST Software
2017-07-04 17:24 - 2017-04-24 20:56 - 00000000 ____D C:\ProgramData\AVAST Software
2017-07-04 17:23 - 2017-04-24 21:04 - 00041800 _____ (AVAST Software) C:\Windows\system32\Drivers\aswKbd.sys
2017-07-04 17:23 - 2017-04-24 21:00 - 01015848 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSnx.sys
2017-07-04 17:23 - 2017-04-24 21:00 - 00343264 _____ (AVAST Software s.r.o.) C:\Windows\system32\Drivers\aswbloga.sys
2017-07-04 17:23 - 2017-04-24 21:00 - 00319984 _____ (AVAST Software s.r.o.) C:\Windows\system32\Drivers\aswbidsdrivera.sys
2017-07-04 17:23 - 2017-04-24 21:00 - 00198944 _____ (AVAST Software s.r.o.) C:\Windows\system32\Drivers\aswbidsha.sys
2017-07-04 17:23 - 2017-04-24 21:00 - 00057704 _____ (AVAST Software s.r.o.) C:\Windows\system32\Drivers\aswbuniva.sys
2017-07-04 17:20 - 2017-04-24 20:44 - 00000000 ____D C:\Users\Todos os Usuários\IObit
2017-07-04 17:20 - 2017-04-24 20:44 - 00000000 ____D C:\Users\bruno\AppData\LocalLow\IObit
2017-07-04 17:20 - 2017-04-24 20:44 - 00000000 ____D C:\ProgramData\IObit
2017-07-04 17:20 - 2017-04-24 20:38 - 00000000 ____D C:\Users\bruno\AppData\Roaming\IObit
2017-07-04 17:19 - 2017-04-24 20:44 - 00000000 ____D C:\Program Files (x86)\IObit
2017-07-04 17:02 - 2017-04-24 20:12 - 00000000 ____D C:\Users\bruno\AppData\Local\VirtualStore
2017-07-04 16:42 - 2017-05-03 12:24 - 00004350 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2017-07-04 16:42 - 2017-04-24 20:54 - 00004524 _____ C:\Windows\System32\Tasks\Adobe Acrobat Update Task
2017-07-04 16:12 - 2017-04-24 23:09 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\RogueKiller
2017-07-04 16:12 - 2017-04-24 23:09 - 00000000 ____D C:\Program Files\RogueKiller
2017-07-04 15:48 - 2017-04-24 21:26 - 00000000 ____D C:\Program Files (x86)\Origin Games
2017-07-04 15:48 - 2017-04-24 20:16 - 00000000 ____D C:\Users\bruno\AppData\Local\Google
2017-06-30 13:05 - 2017-04-24 21:24 - 00000000 ____D C:\Program Files (x86)\Origin
2017-06-30 02:25 - 2017-04-24 21:20 - 00000000 ____D C:\Users\bruno\AppData\Roaming\vlc
2017-06-22 02:59 - 2017-04-24 20:14 - 00000000 ___RD C:\Users\bruno\OneDrive
2017-06-21 21:42 - 2017-04-24 20:14 - 00003290 _____ C:\Windows\System32\Tasks\OneDrive Standalone Update Task v2
2017-06-21 21:42 - 2017-04-24 20:14 - 00002369 _____ C:\Users\bruno\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2017-06-18 21:47 - 2017-03-18 18:03 - 00000000 ____D C:\Windows\rescache
2017-06-17 12:43 - 2017-04-24 20:12 - 00000000 __RHD C:\Users\Public\AccountPictures
2017-06-17 12:36 - 2017-04-24 20:00 - 00385320 _____ C:\Windows\system32\FNTCACHE.DAT
2017-06-17 01:08 - 2017-03-18 18:03 - 00000000 ___SD C:\Windows\SysWOW64\F12
2017-06-17 01:08 - 2017-03-18 18:03 - 00000000 ___SD C:\Windows\system32\F12
2017-06-17 01:08 - 2017-03-18 18:03 - 00000000 ___RD C:\Program Files\Windows Defender
2017-06-17 01:08 - 2017-03-18 18:03 - 00000000 ____D C:\Windows\system32\WinBioPlugIns
2017-06-17 01:08 - 2017-03-18 18:03 - 00000000 ____D C:\Windows\system32\oobe
2017-06-17 01:08 - 2017-03-18 18:03 - 00000000 ____D C:\Windows\system32\appraiser
2017-06-17 01:08 - 2017-03-18 18:03 - 00000000 ____D C:\Windows\ShellExperiences
2017-06-17 01:08 - 2017-03-18 18:03 - 00000000 ____D C:\Program Files\Windows Photo Viewer
2017-06-17 01:08 - 2017-03-18 18:03 - 00000000 ____D C:\Program Files (x86)\Windows Photo Viewer
2017-06-16 14:18 - 2017-03-18 18:03 - 00000000 ____D C:\Windows\SysWOW64\Macromed
2017-06-16 14:18 - 2017-03-18 18:03 - 00000000 ____D C:\Windows\system32\Macromed
2017-06-14 19:48 - 2017-03-18 17:51 - 00000000 ____D C:\Windows\CbsTemp
2017-06-13 19:43 - 2017-04-24 20:26 - 00000000 ____D C:\Windows\system32\MRT
2017-06-13 19:38 - 2017-04-24 20:26 - 133627792 ____C (Microsoft Corporation) C:\Windows\system32\MRT.exe
2017-06-13 19:16 - 2017-04-24 23:21 - 00000000 ____D C:\Program Files (x86)\Hearthstone

==================== Arquivos na raiz de alguns diretórios =======

2017-04-29 18:43 - 2017-04-29 18:43 - 0000000 ____H () C:\ProgramData\DP45977C.lfl

Arquivos para serem movidos ou deletados:
====================
C:\Users\bruno\ZHPCleaner.exe

Alguns arquivos em TEMP:
====================
2017-07-07 01:24 - 2017-03-18 17:57 - 1930320 _____ (Microsoft Corporation) C:\Users\bruno\AppData\Local\Temp\dllnt_dump.dll

==================== Bamital & volsnap ======================

(Não há correção automática para arquivos que não passaram na verificação.)

C:\Windows\system32\winlogon.exe => O arquivo é assinado digitalmente
C:\Windows\system32\wininit.exe => O arquivo é assinado digitalmente
C:\Windows\explorer.exe => O arquivo é assinado digitalmente
C:\Windows\SysWOW64\explorer.exe => O arquivo é assinado digitalmente
C:\Windows\system32\svchost.exe => O arquivo é assinado digitalmente
C:\Windows\SysWOW64\svchost.exe => O arquivo é assinado digitalmente
C:\Windows\system32\services.exe => O arquivo é assinado digitalmente
C:\Windows\system32\User32.dll => O arquivo é assinado digitalmente
C:\Windows\SysWOW64\User32.dll => O arquivo é assinado digitalmente
C:\Windows\system32\userinit.exe => O arquivo é assinado digitalmente
C:\Windows\SysWOW64\userinit.exe => O arquivo é assinado digitalmente
C:\Windows\system32\rpcss.dll => O arquivo é assinado digitalmente
C:\Windows\system32\dnsapi.dll => O arquivo é assinado digitalmente
C:\Windows\SysWOW64\dnsapi.dll => O arquivo é assinado digitalmente
C:\Windows\system32\Drivers\volsnap.sys => O arquivo é assinado digitalmente

LastRegBack: 2017-06-28 13:45

==================== Fim de FRST.txt ============================

Sorry it is in portuguese because it's my main language, i hope it's not a problem since it's only in the headlines.

Edited July 7, 2017 by brunobyof
Including info

brunobyof · July 15, 2017

nobody?

Aura · August 4, 2017

Hi brunobyof

My name is Aura and I'll be assisting you with your malware issue. Since we'll be working together, you can call me Aura or Yoan, which is my real name, it's up to you! Now that we've broke the ice, I'll just ask you a few things during the time we'll be working together to clean your system and get it back to an operational state.

As you'll notice, the logs we are asking for here are quite lenghty, so it's normal for me to not reply exactly after you post them. This is because I need some time to analyse them and then act accordingly. However, I'll always reply within 24 hours, 48 hours at most if something unexpected happens;
As long as I'm assisting you on Malwarebytes Forums, in this thread, I'll ask you to not seek assistance anywhere else for any issue related to the system we are working on. If you have an issue, question, etc. about your computer, please ask it in this thread and I'll assist you;
The same principle applies to any modifications you make to your system, I would like you to ask me before you do any manipulations that aren't in the instructions I posted. This is to ensure that we are operating in sync and I know exactly what's happening on your system;
If you aren't sure about an instruction I'm giving you, ask me about it. This is to ensure that the clean-up process goes without any issue. I'll answer you and even give you more precise instructions/explanations if you need. There's no shame in asking questions here, better be safe than sorry!;
If you don't reply to your thread within 3 days, I'll bump this thread to let you know that I'm waiting for you. If you don't reply after 5 days, it'll be closed. If you return after that period, you can send me a PM to get it unlocked and we'll continue where we left off;
Since malware can work quickly, we want to get rid of them as fast as we can, before they make unknown changes to the system. This being said, I would appreciate if you could reply to this thread within 24 hours of me posting. This way, we'll have a good clean-up rhythm and the chances of complications will be reduced;
I'm against any form of pirated, illegal and counterfeit software and material. So if you have any installed on your system, I'll ask you to uninstall them right now. You don't have to tell me if you indeed had some or not, I'll give you the benefit of the doubt. Plus, this would be against Malwarebytes Forums's rules;
In the end, you are the one asking for assistance here. So if you wish to go a different way during the clean-up, like format and reinstall Windows, you are free to do so. I would appreciate you to let me know about it first, and if you need, I can also assist you in the process;
I would appreciate if you were to stay with me until the end, which means, until I declare your system clean. Just because your system isn't behaving weirdly anymore, or is running better than before, it doesn't mean that the infection is completely gone;
This being said, I have a full time job so sometimes it'll take longer for me to reply to you. Don't worry, you'll be my first priority as soon as I get home and have time to look at your thread;

This being said, it's time to clean-up some malware, so let's get started, shall we?

Do you still need assistance with your issue?

brunobyof · August 4, 2017

Hi Aura, thank you for helping me.

Since my first post i have already taken some measures about it. My final option was to install Windows in another partition of the same HD and then i installed my programs in it and sucessfully finished updating the system to na usable state. During this process, i was also looking for a definitive solution to this infection or whatever it is and so, when i finished installing Windows 10 on the other partition, i did a scan with ZHP and it didn't find anything. But, once i installed Chrome, and nothing else, i simply sync'd my account and then there was the infection again. It seems, from the other post i found elsewhere, that this shopperz (i believe it is the name of it because ZHP showed it to me once, but sometimes it displeys as another name like Ezael or other random PUP) kinda infect my google account. So i tried to open a new account on google, uninstalled chrome and scanned again, then -re-installed chrome, but there was it again....finally, i decided to migrate to use Edge and uninstalled Chrome for good. Since then, my system is working fine, and it's not presenting symptoms as before. I'm not sure if my new version of Windows is completeley safe though, because when i scan it with DNS Repair, it shows me the same stuff (dnsapi.dll hijackd).

I appreciate your help in making us sure that the system is completely clean.

What is the next step then?

Edited August 4, 2017 by brunobyof

Aura · August 4, 2017

Let's start by getting a fresh set of FRST logs. So run a new scan with FRST, and provide me the logs afterwards (FRST.txt and Addition.txt).

brunobyof · August 4, 2017

My system is in portuguese, so i hope you don't have problems Reading the reports because of it.

Here:

FRST.txt:

Spoiler

Resultado do exame da Farbar Recovery Scan Tool (FRST) (x64) Versão: 31-07-2017
Executado por bruno (administrador) em DESKTOP-75435FS (04-08-2017 17:02:08)
Executando a partir de C:\Users\bruno\Desktop\Limpeza e manutenção
Perfis Carregados: bruno (Perfis Disponíveis: bruno)
Platform: Windows 10 Pro Versão 1703 (X64) Idioma: Português (Brasil)
Internet Explorer Versão 11 (Navegador padrão: Edge)
Modo da Inicialização: Normal
Tutorial da Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processos (Whitelisted) =================

(Se uma entrada for incluída na fixlist, o processo será fechado. O arquivo não será movido.)

(Intel Corporation) C:\Windows\System32\igfxCUIService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe
(Malwarebytes) C:\Program Files (x86)\Malwarebytes\MBAMService.exe
(Microvirt Software Technology Co. Ltd.) C:\Program Files (x86)\Microvirt\MEmu\MemuService.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(AVAST Software s.r.o.) C:\Program Files\AVAST Software\Avast\x64\aswidsagenta.exe
(Intel Corporation) C:\Windows\System32\igfxEM.exe
(Microsoft Corporation) C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\RemindersServer.exe
() C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.19.820.0_x64__kzf8qxf38zg5c\SkypeHost.exe
(Microsoft Corporation) C:\Windows\System32\Speech_OneCore\common\SpeechRuntime.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MSASCuiL.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\avastui.exe
(Malwarebytes) C:\Program Files (x86)\Malwarebytes\mbamtray.exe
(Disc Soft Ltd) C:\Program Files (x86)\DAEMON Tools Lite\DiscSoftBusServiceLite.exe
(Piriform Ltd) C:\Program Files\CCleaner\CCleaner64.exe
(Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\OFFICE16\CSISYNCCLIENT.EXE
(Microsoft Corporation) C:\Program Files\Microsoft Office\Office16\MSOSYNC.EXE
(Hammer & Chisel, Inc.) C:\Users\bruno\AppData\Local\Discord\app-0.0.297\Discord.exe
(Hammer & Chisel, Inc.) C:\Users\bruno\AppData\Local\Discord\app-0.0.297\Discord.exe
(Hammer & Chisel, Inc.) C:\Users\bruno\AppData\Local\Discord\app-0.0.297\Discord.exe
(Microsoft Corporation) C:\Windows\System32\wbem\WMIADAP.exe

==================== Registro (Whitelisted) ====================

(Se uma entrada for incluída na fixlist, o ítem no Registro será restaurado para o padrão ou removido. O arquivo não será movido.)

HKLM\...\Run: [SecurityHealth] => C:\Program Files\Windows Defender\MSASCuiL.exe [629152 2017-03-18] (Microsoft Corporation)
HKLM\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvLaunch.exe [213832 2017-07-24] (AVAST Software)
HKLM\...\Run: [Malwarebytes TrayApp] => C:\PROGRAM FILES (X86)\MALWAREBYTES\mbamtray.exe [3146704 2017-05-09] (Malwarebytes)
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [9228800 2017-06-29] (Realtek Semiconductor)
HKLM Group Policy restriction on software: %systemroot%\system32\mrt.exe <==== ATENÇÃO
HKU\S-1-5-21-3125324295-4109617892-1090203428-1001\...\Run: [DAEMON Tools Lite Automount] => C:\Program Files (x86)\DAEMON Tools Lite\DTAgent.exe [4299968 2016-05-30] (Disc Soft Ltd)
HKU\S-1-5-21-3125324295-4109617892-1090203428-1001\...\Run: [Discord] => C:\Users\bruno\AppData\Local\Discord\app-0.0.297\Discord.exe [64290304 2017-01-04] (Hammer & Chisel, Inc.)
HKU\S-1-5-21-3125324295-4109617892-1090203428-1001\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [9818328 2017-06-30] (Piriform Ltd)

==================== Internet (Whitelisted) ====================

(Se um ítem for incluído na fixlist, sendo um ítem do Registro, será removido ou restaurado para o padrão.)

Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{4f4792c9-62a1-4c8d-912b-82d74d3638d8}: [DhcpNameServer] 192.168.1.1

Internet Explorer:
==================
BHO-x32: Microsoft OneDrive for Business Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\Office16\GROOVEEX.DLL [2015-11-12] (Microsoft Corporation)
Handler: mso-minsb.16 - {3459B272-CC19-4448-86C9-DDC3B4B2FAD3} - C:\Program Files\Microsoft Office\Office16\MSOSB.DLL [2015-11-10] (Microsoft Corporation)
Handler-x32: mso-minsb.16 - {3459B272-CC19-4448-86C9-DDC3B4B2FAD3} - C:\Program Files (x86)\Microsoft Office\Office16\MSOSB.DLL [2015-11-10] (Microsoft Corporation)
Handler: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\Office16\MSOSB.DLL [2015-11-10] (Microsoft Corporation)
Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files (x86)\Microsoft Office\Office16\MSOSB.DLL [2015-11-10] (Microsoft Corporation)

Edge:
======
Edge Extension: (Adblock Plus) -> 10_EyeoGmbHAdblockPlus_d55gg7py3s0m0 => C:\Program Files\WindowsApps\EyeoGmbH.AdblockPlus_0.9.9.0_neutral__d55gg7py3s0m0 [2017-07-26]
Edge Extension: (uBlock Origin) -> EdgeExtension_37833NikRollsuBlockOrigin_f8jsg5mm64m62 => C:\Program Files\WindowsApps\37833NikRolls.uBlockOrigin_1.13.8.0_neutral__f8jsg5mm64m62 [2017-07-25]

FireFox:
========
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.50907.0\npctrl.dll [2017-05-03] ( Microsoft Corporation)
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~1\MICROS~2\Office16\NPSPWRAP.DLL [2015-07-31] (Microsoft Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.50907.0\npctrl.dll [2017-05-03] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~2\Office16\NPSPWRAP.DLL [2015-07-31] (Microsoft Corporation)
FF Plugin-x32: @videolan.org/vlc,version=2.2.6 -> C:\Program Files (x86)\VLC\npvlc.dll [2017-05-24] (VideoLAN)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2017-04-04] (Adobe Systems Inc.)

==================== Serviços (Whitelisted) ====================

(Se uma entrada for incluída na fixlist, será removida do Registro. O arquivo não será movido, a menos que seja colocado separadamente.)

R3 aswbIDSAgent; C:\Program Files\AVAST Software\Avast\x64\aswidsagenta.exe [7430992 2017-07-24] (AVAST Software s.r.o.)
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [263312 2017-07-24] (AVAST Software)
R3 Disc Soft Lite Bus Service; C:\Program Files (x86)\DAEMON Tools Lite\DiscSoftBusServiceLite.exe [1467072 2016-05-30] (Disc Soft Ltd)
R2 igfxCUIService2.0.0.0; C:\Windows\system32\igfxCUIService.exe [365040 2017-03-17] (Intel Corporation)
R2 MBAMService; C:\Program Files (x86)\Malwarebytes\mbamservice.exe [4470736 2017-05-09] (Malwarebytes)
R2 MEmusvc; C:\Program Files (x86)\Microvirt\MEmu\MemuService.exe [269480 2017-05-26] (Microvirt Software Technology Co. Ltd.)
R2 NVDisplay.ContainerLocalSystem; C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe [462968 2017-07-18] (NVIDIA Corporation)
R2 NvTelemetryContainer; C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe [449984 2017-07-18] (NVIDIA Corporation)
S3 Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [2169696 2017-07-24] (Electronic Arts)
S2 Origin Web Helper Service; C:\Program Files (x86)\Origin\OriginWebHelperService.exe [3149664 2017-07-05] (Electronic Arts)
S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [3913064 2017-03-20] (Microsoft Corporation)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [342264 2017-03-18] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [102816 2017-06-20] (Microsoft Corporation)

===================== Drivers (Whitelisted) ======================

(Se uma entrada for incluída na fixlist, será removida do Registro. O arquivo não será movido, a menos que seja colocado separadamente.)

R1 aswbidsdriver; C:\Windows\system32\drivers\aswbidsdrivera.sys [320008 2017-07-24] (AVAST Software s.r.o.)
R0 aswbidsh; C:\Windows\system32\drivers\aswbidsha.sys [198976 2017-07-24] (AVAST Software s.r.o.)
R0 aswblog; C:\Windows\system32\drivers\aswbloga.sys [343288 2017-07-24] (AVAST Software s.r.o.)
R0 aswbuniv; C:\Windows\system32\drivers\aswbuniva.sys [57728 2017-07-24] (AVAST Software s.r.o.)
S3 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [46984 2017-07-24] (AVAST Software)
R1 aswKbd; C:\Windows\system32\drivers\aswKbd.sys [41800 2017-07-24] (AVAST Software)
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [146696 2017-07-24] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [110352 2017-07-24] (AVAST Software)
R0 aswRvrt; C:\Windows\system32\drivers\aswRvrt.sys [84392 2017-07-24] (AVAST Software)
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1015848 2017-07-24] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [585608 2017-07-24] (AVAST Software)
R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [198768 2017-07-24] (AVAST Software)
R0 aswVmm; C:\Windows\system32\drivers\aswVmm.sys [361336 2017-07-24] (AVAST Software)
R3 dtlitescsibus; C:\Windows\System32\drivers\dtlitescsibus.sys [30264 2017-07-24] (Disc Soft Ltd)
R3 dtliteusbbus; C:\Windows\System32\drivers\dtliteusbbus.sys [47672 2017-07-24] (Disc Soft Ltd)
R1 ESProtectionDriver; C:\Windows\system32\drivers\mbae64.sys [77376 2017-06-27] ()
S3 hitmanpro37; C:\Windows\system32\drivers\hitmanpro37.sys [41080 2017-07-25] ()
R2 MBAMChameleon; C:\Windows\system32\drivers\MBAMChameleon.sys [188352 2017-07-25] (Malwarebytes)
R3 MBAMFarflt; C:\Windows\system32\drivers\farflt.sys [101784 2017-08-04] (Malwarebytes)
R3 MBAMProtection; C:\Windows\system32\drivers\mbam.sys [45472 2017-08-04] (Malwarebytes)
R3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [253856 2017-08-04] (Malwarebytes)
R3 MBAMWebProtection; C:\Windows\system32\drivers\mwac.sys [93600 2017-08-04] (Malwarebytes)
R2 memudrv; C:\Program Files (x86)\Microvirt\MEmuHyperv\MEmuDrv.sys [260368 2015-11-02] (Microvirt Corporation)
R3 nvlddmkm; C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_24ddebfb518b5a55\nvlddmkm.sys [15668664 2017-07-19] (NVIDIA Corporation)
R3 rt640x64; C:\Windows\System32\drivers\rt640x64.sys [604160 2017-03-18] (Realtek )
S3 SDFRd; C:\Windows\System32\drivers\SDFRd.sys [31128 2017-03-18] ()
S3 WdBoot; C:\Windows\system32\drivers\WdBoot.sys [44632 2017-03-18] (Microsoft Corporation)
S3 WdFilter; C:\Windows\system32\drivers\WdFilter.sys [294816 2017-03-18] (Microsoft Corporation)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [121248 2017-03-18] (Microsoft Corporation)
S3 xhunter1; C:\Windows\xhunter1.sys [37344 2017-08-04] (Wellbia.com Co., Ltd.)

==================== NetSvcs (Whitelisted) ===================

(Se uma entrada for incluída na fixlist, será removida do Registro. O arquivo não será movido, a menos que seja colocado separadamente.)

==================== Um Mês Criados arquivos e pastas ========

(Se uma entrada for incluída na fixlist, o arquivo/pasta será movido.)

2017-08-04 16:57 - 2017-08-04 16:57 - 000000000 ____D C:\Users\Todos os Usuários\SWCUTemp
2017-08-04 16:57 - 2017-08-04 16:57 - 000000000 ____D C:\ProgramData\SWCUTemp
2017-08-04 16:53 - 2017-08-04 16:53 - 000106312 _____ C:\Users\bruno\Desktop\cc_20170804_165318.reg
2017-08-04 16:49 - 2017-08-04 16:51 - 000000000 ____D C:\Program Files (x86)\Google
2017-08-04 16:49 - 2017-08-04 16:49 - 000002870 _____ C:\Windows\System32\Tasks\CCleanerSkipUAC
2017-08-04 16:49 - 2017-08-04 16:49 - 000000863 _____ C:\Users\Public\Desktop\CCleaner.lnk
2017-08-04 16:49 - 2017-08-04 16:49 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
2017-08-04 16:49 - 2017-08-04 16:49 - 000000000 ____D C:\Program Files\CCleaner
2017-08-04 16:39 - 2017-08-04 17:02 - 000000000 ____D C:\FRST
2017-08-04 14:44 - 2017-08-04 15:34 - 305270882 _____ C:\Users\bruno\Downloads\2ddl.pro_g.o.t.704.AAC.MP4 (1).mp4
2017-08-04 14:43 - 2017-08-04 16:22 - 305270882 _____ C:\Users\bruno\Downloads\2ddl.pro_g.o.t.704.AAC.MP4.mp4
2017-08-04 12:58 - 2017-08-04 12:58 - 000000000 ___HD C:\OneDriveTemp
2017-07-26 14:34 - 2017-07-26 14:34 - 000000000 ____D C:\Windows\System32\Tasks\S-1-5-21-3125324295-4109617892-1090203428-1001
2017-07-26 14:31 - 2017-07-26 14:31 - 000000000 ____D C:\Windows\LastGood.Tmp
2017-07-26 14:30 - 2017-07-26 14:31 - 000000000 ____D C:\Windows\SysWOW64\RTCOM
2017-07-26 14:30 - 2017-07-26 14:30 - 000000000 ____H C:\Users\Todos os Usuários\DP45977C.lfl
2017-07-26 14:30 - 2017-07-26 14:30 - 000000000 ____H C:\ProgramData\DP45977C.lfl
2017-07-26 14:30 - 2017-07-26 14:30 - 000000000 ____D C:\Program Files\Realtek
2017-07-26 14:29 - 2017-06-29 18:55 - 003509256 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RltkAPO64.dll
2017-07-26 14:29 - 2017-06-29 18:55 - 003507688 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkApi64.dll
2017-07-26 14:29 - 2017-06-29 18:55 - 001347136 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RTCOM64.dll
2017-07-26 14:29 - 2017-06-29 18:55 - 000691680 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtDataProc64.dll
2017-07-26 14:29 - 2017-06-29 18:55 - 000447712 _____ (Dolby Laboratories) C:\Windows\system32\R4EED64A.dll
2017-07-26 14:29 - 2017-06-29 18:55 - 000343704 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtlCPAPI64.dll
2017-07-26 14:29 - 2017-06-29 18:55 - 000192976 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkCfg64.dll
2017-07-26 14:29 - 2017-06-29 18:55 - 000151784 _____ (Dolby Laboratories) C:\Windows\system32\R4EEL64A.dll
2017-07-26 14:29 - 2017-06-29 18:55 - 000134200 _____ (Dolby Laboratories) C:\Windows\system32\R4EEA64A.dll
2017-07-26 14:29 - 2017-06-29 18:55 - 000084608 _____ (Dolby Laboratories) C:\Windows\system32\R4EEG64A.dll
2017-07-26 14:29 - 2017-06-29 18:54 - 001780616 _____ (DTS) C:\Windows\system32\DTSS2SpeakerDLL64.dll
2017-07-26 14:29 - 2017-06-29 18:54 - 001591056 _____ (DTS) C:\Windows\system32\DTSS2HeadphoneDLL64.dll
2017-07-26 14:29 - 2017-06-29 18:54 - 000727432 _____ (DTS) C:\Windows\system32\DTSSymmetryDLL64.dll
2017-07-26 14:29 - 2017-06-29 18:54 - 000708312 _____ (DTS) C:\Windows\system32\DTSVoiceClarityDLL64.dll
2017-07-26 14:29 - 2017-06-29 18:53 - 001965808 _____ (Dolby Laboratories) C:\Windows\system32\DDPD64A.dll
2017-07-26 14:29 - 2017-06-29 18:53 - 001508928 _____ (DTS) C:\Windows\system32\DTSBoostDLL64.dll
2017-07-26 14:29 - 2017-06-29 18:53 - 000743960 _____ (DTS) C:\Windows\system32\DTSBassEnhancementDLL64.dll
2017-07-26 14:29 - 2017-06-29 18:53 - 000504304 _____ (DTS) C:\Windows\system32\DTSNeoPCDLL64.dll
2017-07-26 14:29 - 2017-06-29 18:53 - 000445392 _____ (DTS) C:\Windows\system32\DTSLimiterDLL64.dll
2017-07-26 14:29 - 2017-06-29 18:53 - 000441264 _____ (DTS) C:\Windows\system32\DTSGainCompensatorDLL64.dll
2017-07-26 14:29 - 2017-06-29 18:53 - 000327448 _____ (Dolby Laboratories) C:\Windows\system32\DDPO64A.dll
2017-07-26 14:29 - 2017-06-29 18:53 - 000272712 _____ (Dolby Laboratories) C:\Windows\system32\DDPA64.dll
2017-07-26 14:29 - 2017-06-29 18:53 - 000253896 _____ (DTS) C:\Windows\system32\DTSGFXAPO64.dll
2017-07-26 14:29 - 2017-06-29 18:53 - 000253864 _____ (DTS) C:\Windows\system32\DTSLFXAPO64.dll
2017-07-26 14:29 - 2017-06-29 18:53 - 000252872 _____ (DTS) C:\Windows\system32\DTSGFXAPONS64.dll
2017-07-26 14:29 - 2017-06-29 18:52 - 005826560 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\Drivers\RTKVHD64.sys
2017-07-26 14:29 - 2017-06-29 18:52 - 003677160 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RTSnMg64.cpl
2017-07-26 14:29 - 2017-06-29 18:52 - 003205120 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtPgEx64.dll
2017-07-26 14:29 - 2017-06-29 18:51 - 072520712 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RCoRes64.dat
2017-07-26 14:29 - 2017-06-29 18:51 - 007172912 _____ (Dolby Laboratories) C:\Windows\system32\R4EEP64A.dll
2017-07-26 14:29 - 2017-06-29 18:51 - 007096184 _____ (Dolby Laboratories) C:\Windows\system32\DDPP64A.dll
2017-07-26 14:29 - 2017-06-29 18:51 - 002210304 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RCoInstII64.dll
2017-07-26 14:29 - 2017-06-29 18:51 - 000023688 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkCoLDR64.dll
2017-07-26 14:29 - 2017-06-29 03:05 - 012334923 _____ C:\Windows\system32\Drivers\RTAIODAT.DAT
2017-07-26 14:28 - 2017-07-26 14:32 - 000000000 ___HD C:\Program Files (x86)\Temp
2017-07-26 14:28 - 2017-07-26 14:28 - 000000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2017-07-26 14:28 - 2017-07-26 14:28 - 000000000 ____D C:\Program Files (x86)\Realtek
2017-07-26 14:28 - 2017-06-29 18:50 - 000118584 _____ C:\Windows\system32\AcpiServiceVnA64.dll
2017-07-26 14:28 - 2017-06-29 18:50 - 000105304 _____ C:\Windows\system32\audioLibVc.dll
2017-07-26 14:28 - 2016-09-22 14:55 - 002839520 _____ (Realtek Semiconductor Corp.) C:\Windows\RtlExUpd.dll
2017-07-26 14:05 - 2017-08-04 16:52 - 000000000 ____D C:\Users\bruno\AppData\Local\CrashDumps
2017-07-25 21:42 - 2017-08-04 01:38 - 000037344 _____ (Wellbia.com Co., Ltd.) C:\Windows\xhunter1.sys
2017-07-25 21:42 - 2017-07-25 21:42 - 000000000 ____D C:\Users\bruno\ansel
2017-07-25 19:46 - 2017-07-25 19:46 - 000003378 _____ C:\Windows\System32\Tasks\OneDrive Standalone Update Task-S-1-5-21-3125324295-4109617892-1090203428-1001
2017-07-25 16:33 - 2017-07-25 16:33 - 000002107 _____ C:\Users\bruno\Downloads\contatos.csv
2017-07-25 13:43 - 2017-07-28 23:59 - 000000000 ____D C:\Users\bruno\OneDrive\Documentos\Black Desert
2017-07-25 13:43 - 2017-07-25 13:43 - 000001756 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Black Desert.lnk
2017-07-25 13:43 - 2017-07-25 13:43 - 000000000 ____D C:\Users\Todos os Usuários\.mono
2017-07-25 13:43 - 2017-07-25 13:43 - 000000000 ____D C:\Users\bruno\AppData\Roaming\.mono
2017-07-25 13:43 - 2017-07-25 13:43 - 000000000 ____D C:\ProgramData\.mono
2017-07-25 13:42 - 2017-07-25 13:42 - 000000000 ____D C:\Users\bruno\AppData\LocalLow\Blizzard Entertainment
2017-07-25 13:42 - 2017-07-25 13:42 - 000000000 ____D C:\Users\bruno\AppData\Local\Blizzard
2017-07-25 03:32 - 2017-07-25 03:32 - 000000884 _____ C:\Windows\system32\.crusader
2017-07-25 02:42 - 2017-07-25 13:09 - 000041080 _____ C:\Windows\system32\Drivers\hitmanpro37.sys
2017-07-25 02:41 - 2017-07-25 03:32 - 000000000 ____D C:\Users\Todos os Usuários\HitmanPro
2017-07-25 02:41 - 2017-07-25 03:32 - 000000000 ____D C:\ProgramData\HitmanPro
2017-07-25 02:38 - 2017-07-25 02:38 - 000004608 _____ C:\Windows\SECOH-QAD.exe
2017-07-25 02:38 - 2017-07-25 02:38 - 000003584 _____ C:\Windows\SECOH-QAD.dll
2017-07-25 02:23 - 2017-07-25 02:23 - 000002729 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Outlook 2016.lnk
2017-07-25 02:23 - 2017-07-25 02:23 - 000002656 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Word 2016.lnk
2017-07-25 02:23 - 2017-07-25 02:23 - 000002648 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Excel 2016.lnk
2017-07-25 02:23 - 2017-07-25 02:23 - 000002642 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PowerPoint 2016.lnk
2017-07-25 02:23 - 2017-07-25 02:23 - 000000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Ferramentas do Microsoft Office 2016
2017-07-25 02:22 - 2017-07-25 02:22 - 000000000 ____D C:\Windows\PCHEALTH
2017-07-25 02:22 - 2017-07-25 02:22 - 000000000 ____D C:\Program Files\Microsoft SQL Server
2017-07-25 02:22 - 2017-07-25 02:22 - 000000000 ____D C:\Program Files\Common Files\DESIGNER
2017-07-25 02:22 - 2017-07-25 02:22 - 000000000 ____D C:\Program Files (x86)\Microsoft SQL Server
2017-07-25 02:20 - 2017-07-25 02:29 - 000000000 ____D C:\Users\Todos os Usuários\Microsoft Help
2017-07-25 02:20 - 2017-07-25 02:22 - 000000000 ____D C:\Program Files\Microsoft Office
2017-07-25 02:20 - 2017-07-25 02:20 - 000000000 __RHD C:\MSOCache
2017-07-25 02:20 - 2017-07-25 02:20 - 000000000 ____D C:\Windows\SHELLNEW
2017-07-25 02:20 - 2017-07-25 02:20 - 000000000 ____D C:\Users\bruno\AppData\Local\Microsoft Help
2017-07-25 02:20 - 2017-07-25 02:20 - 000000000 ____D C:\Program Files\Microsoft Analysis Services
2017-07-25 02:20 - 2017-07-25 02:20 - 000000000 ____D C:\Program Files (x86)\Microsoft Analysis Services
2017-07-25 02:18 - 2017-07-25 02:18 - 000000000 ____D C:\Users\bruno\AppData\Roaming\WinRAR
2017-07-25 02:18 - 2017-02-11 20:28 - 000000000 ____D C:\Users\bruno\Downloads\Office 2016 - EasyTutors
2017-07-25 02:18 - 2017-02-11 20:28 - 000000000 ____D C:\Users\bruno\Downloads\Ativador Office 2016
2017-07-25 02:17 - 2017-07-25 02:17 - 000000000 ____D C:\Users\bruno\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
2017-07-25 02:17 - 2017-07-25 02:17 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
2017-07-25 02:17 - 2017-07-25 02:17 - 000000000 ____D C:\Program Files\WinRAR
2017-07-25 02:16 - 2017-07-25 02:16 - 000000000 ____D C:\Program Files (x86)\WinRAR
2017-07-25 00:50 - 2017-07-25 00:50 - 000000000 ____D C:\Users\bruno\Downloads\MEmu Download
2017-07-25 00:45 - 2017-07-25 00:45 - 003117028 _____ C:\Users\bruno\Downloads\Ativador Office 2016.rar
2017-07-25 00:44 - 2017-07-25 01:46 - 1797974327 _____ C:\Users\bruno\Downloads\Office 2016 - EasyTutors.rar
2017-07-25 00:42 - 2017-07-25 00:42 - 000000000 ____D C:\Windows\pss
2017-07-25 00:14 - 2017-07-25 00:14 - 000000000 ____D C:\Users\bruno\AppData\Local\NVIDIA Corporation
2017-07-25 00:10 - 2017-07-25 00:10 - 000253856 _____ (Malwarebytes) C:\Windows\system32\Drivers\54B92069.sys
2017-07-25 00:10 - 2017-07-25 00:10 - 000000000 ____D C:\Users\bruno\AppData\Local\PeerDistRepub
2017-07-25 00:09 - 2017-07-25 00:09 - 000001689 _____ C:\Users\bruno\Desktop\Clima.lnk
2017-07-25 00:05 - 2017-07-25 00:05 - 000000000 ____D C:\Users\bruno\AppData\Local\Apps\2.0
2017-07-25 00:04 - 2017-07-25 00:04 - 000003894 _____ C:\Windows\System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2017-07-25 00:04 - 2017-07-25 00:04 - 000003866 _____ C:\Windows\System32\Tasks\NvTmRep_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2017-07-25 00:04 - 2017-07-25 00:04 - 000003858 _____ C:\Windows\System32\Tasks\NvTmMon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2017-07-25 00:04 - 2017-07-25 00:04 - 000003696 _____ C:\Windows\System32\Tasks\NvTmRepOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2017-07-25 00:04 - 2017-07-25 00:04 - 000003654 _____ C:\Windows\System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2017-07-25 00:04 - 2017-07-25 00:04 - 000000000 ____D C:\Program Files (x86)\VulkanRT
2017-07-25 00:04 - 2017-07-18 21:40 - 000001951 _____ C:\Windows\NvTelemetryContainerRecovery.bat
2017-07-25 00:04 - 2017-03-10 18:17 - 000536864 _____ C:\Windows\system32\vulkan-1.dll
2017-07-25 00:04 - 2017-03-10 18:17 - 000525600 _____ C:\Windows\SysWOW64\vulkan-1.dll
2017-07-25 00:04 - 2017-03-10 18:17 - 000254240 _____ C:\Windows\system32\vulkaninfo.exe
2017-07-25 00:04 - 2017-03-10 18:17 - 000233760 _____ C:\Windows\SysWOW64\vulkaninfo.exe
2017-07-25 00:01 - 2017-07-18 21:40 - 040239736 _____ (NVIDIA Corporation) C:\Windows\system32\nvcompiler.dll
2017-07-25 00:01 - 2017-07-18 21:40 - 035844728 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll
2017-07-25 00:01 - 2017-07-18 21:40 - 035314296 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcompiler.dll
2017-07-25 00:01 - 2017-07-18 21:40 - 028960376 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll
2017-07-25 00:01 - 2017-07-18 21:40 - 013655672 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll
2017-07-25 00:01 - 2017-07-18 21:40 - 012451424 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll
2017-07-25 00:01 - 2017-07-18 21:40 - 012133112 _____ (NVIDIA Corporation) C:\Windows\system32\nvptxJitCompiler.dll
2017-07-25 00:01 - 2017-07-18 21:40 - 011591576 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll
2017-07-25 00:01 - 2017-07-18 21:40 - 010487760 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll
2017-07-25 00:01 - 2017-07-18 21:40 - 009982968 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvptxJitCompiler.dll
2017-07-25 00:01 - 2017-07-18 21:40 - 004163520 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll
2017-07-25 00:01 - 2017-07-18 21:40 - 003711328 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvapi.dll
2017-07-25 00:01 - 2017-07-18 21:40 - 003595896 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll
2017-07-25 00:01 - 2017-07-18 21:40 - 001988216 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6438494.dll
2017-07-25 00:01 - 2017-07-18 21:40 - 001598072 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6438494.dll
2017-07-25 00:01 - 2017-07-18 21:40 - 001278528 _____ (NVIDIA Corporation) C:\Windows\system32\nvEncMFTH264.dll
2017-07-25 00:01 - 2017-07-18 21:40 - 001276992 _____ (NVIDIA Corporation) C:\Windows\system32\nvEncMFThevc.dll
2017-07-25 00:01 - 2017-07-18 21:40 - 001068152 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll
2017-07-25 00:01 - 2017-07-18 21:40 - 001004992 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll
2017-07-25 00:01 - 2017-07-18 21:40 - 000996760 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvEncMFTH264.dll
2017-07-25 00:01 - 2017-07-18 21:40 - 000995408 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvEncMFThevc.dll
2017-07-25 00:01 - 2017-07-18 21:40 - 000972920 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll
2017-07-25 00:01 - 2017-07-18 21:40 - 000924280 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll
2017-07-25 00:01 - 2017-07-18 21:40 - 000781544 _____ (NVIDIA Corporation) C:\Windows\system32\nvEncodeAPI64.dll
2017-07-25 00:01 - 2017-07-18 21:40 - 000725112 _____ (NVIDIA Corporation) C:\Windows\system32\nvDecMFTMjpeg.dll
2017-07-25 00:01 - 2017-07-18 21:40 - 000689992 _____ (NVIDIA Corporation) C:\Windows\system32\nvfatbinaryLoader.dll
2017-07-25 00:01 - 2017-07-18 21:40 - 000618744 _____ (NVIDIA Corporation) C:\Windows\system32\nvmcumd.dll
2017-07-25 00:01 - 2017-07-18 21:40 - 000617416 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvEncodeAPI.dll
2017-07-25 00:01 - 2017-07-18 21:40 - 000609912 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFROpenGL.dll
2017-07-25 00:01 - 2017-07-18 21:40 - 000584312 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvDecMFTMjpeg.dll
2017-07-25 00:01 - 2017-07-18 21:40 - 000578056 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvfatbinaryLoader.dll
2017-07-25 00:01 - 2017-07-18 21:40 - 000499136 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFROpenGL.dll
2017-07-25 00:01 - 2017-07-18 21:40 - 000045976 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdap64.dll
2017-07-25 00:01 - 2017-07-18 21:40 - 000000669 _____ C:\Windows\SysWOW64\nv-vk32.json
2017-07-25 00:01 - 2017-07-18 21:40 - 000000669 _____ C:\Windows\system32\nv-vk64.json
2017-07-24 23:56 - 2017-08-04 16:53 - 000000000 ____D C:\Users\bruno\AppData\Roaming\vlc
2017-07-24 23:56 - 2017-07-25 00:24 - 000004562 _____ C:\Windows\System32\Tasks\Adobe Acrobat Update Task
2017-07-24 23:56 - 2017-07-25 00:24 - 000002457 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk
2017-07-24 23:56 - 2017-07-24 23:56 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN
2017-07-24 23:56 - 2017-07-24 23:56 - 000000000 ____D C:\Program Files (x86)\Adobe
2017-07-24 23:55 - 2017-07-25 00:24 - 000000000 ____D C:\Users\Todos os Usuários\Adobe
2017-07-24 23:55 - 2017-07-25 00:24 - 000000000 ____D C:\ProgramData\Adobe
2017-07-24 23:55 - 2017-07-24 23:56 - 000000000 ____D C:\Program Files (x86)\VLC
2017-07-24 23:55 - 2017-07-24 23:55 - 000000000 ____D C:\Program Files (x86)\NVidia Driver
2017-07-24 23:54 - 2017-07-25 00:04 - 000000000 ____D C:\Users\bruno\AppData\Local\Adobe
2017-07-24 23:50 - 2017-07-24 23:50 - 000000903 _____ C:\Users\bruno\Desktop\BRUNO.lnk
2017-07-24 23:43 - 2017-07-24 23:43 - 000000000 ____D C:\Program Files (x86)\Microsoft Office
2017-07-24 23:31 - 2017-07-24 23:31 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\RogueKiller
2017-07-24 23:31 - 2017-07-24 23:31 - 000000000 ____D C:\Program Files\RogueKiller
2017-07-24 23:29 - 2017-07-24 23:29 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
2017-07-24 23:29 - 2017-07-24 23:29 - 000000000 ____D C:\Program Files\Microsoft Silverlight
2017-07-24 23:29 - 2017-07-24 23:29 - 000000000 ____D C:\Program Files (x86)\Microsoft Silverlight
2017-07-24 23:12 - 2017-08-04 16:56 - 000253856 _____ (Malwarebytes) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2017-07-24 23:12 - 2017-08-04 16:56 - 000101784 _____ (Malwarebytes) C:\Windows\system32\Drivers\farflt.sys
2017-07-24 23:12 - 2017-08-04 16:56 - 000093600 _____ (Malwarebytes) C:\Windows\system32\Drivers\mwac.sys
2017-07-24 23:12 - 2017-08-04 16:56 - 000045472 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbam.sys
2017-07-24 23:12 - 2017-07-25 13:10 - 000188352 _____ (Malwarebytes) C:\Windows\system32\Drivers\MBAMChameleon.sys
2017-07-24 23:12 - 2017-07-24 23:12 - 000000000 ____D C:\Users\Todos os Usuários\Malwarebytes
2017-07-24 23:12 - 2017-07-24 23:12 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes
2017-07-24 23:12 - 2017-07-24 23:12 - 000000000 ____D C:\ProgramData\Malwarebytes
2017-07-24 23:12 - 2017-07-24 23:12 - 000000000 ____D C:\Program Files (x86)\Malwarebytes
2017-07-24 23:12 - 2017-06-27 12:06 - 000077376 _____ C:\Windows\system32\Drivers\mbae64.sys
2017-07-24 23:11 - 2017-07-24 23:12 - 000000000 ____D C:\Users\bruno\AppData\Roaming\discord
2017-07-24 23:11 - 2017-07-24 23:11 - 000000000 ____D C:\Users\bruno\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Hammer & Chisel, Inc
2017-07-24 23:11 - 2017-07-24 23:11 - 000000000 ____D C:\Users\bruno\AppData\Local\SquirrelTemp
2017-07-24 23:11 - 2017-07-24 23:11 - 000000000 ____D C:\Users\bruno\AppData\Local\Discord
2017-07-24 23:07 - 2017-08-04 16:52 - 000000000 ____D C:\Users\bruno\AppData\Roaming\DAEMON Tools Lite
2017-07-24 23:07 - 2017-07-24 23:07 - 000047672 _____ (Disc Soft Ltd) C:\Windows\system32\Drivers\dtliteusbbus.sys
2017-07-24 23:07 - 2017-07-24 23:07 - 000030264 _____ (Disc Soft Ltd) C:\Windows\system32\Drivers\dtlitescsibus.sys
2017-07-24 23:07 - 2017-07-24 23:07 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DAEMON Tools Lite
2017-07-24 23:07 - 2017-07-24 23:07 - 000000000 ____D C:\Program Files (x86)\DAEMON Tools Lite
2017-07-24 23:06 - 2017-07-24 23:06 - 000000000 ____D C:\Users\Todos os Usuários\DAEMON Tools Lite
2017-07-24 23:06 - 2017-07-24 23:06 - 000000000 ____D C:\ProgramData\DAEMON Tools Lite
2017-07-24 23:05 - 2017-07-24 23:05 - 000000000 ____D C:\Users\Todos os Usuários\Blizzard Entertainment
2017-07-24 23:05 - 2017-07-24 23:05 - 000000000 ____D C:\ProgramData\Blizzard Entertainment
2017-07-24 23:04 - 2017-07-24 23:05 - 000000000 ____D C:\Users\bruno\AppData\Roaming\Battle.net
2017-07-24 23:04 - 2017-07-24 23:04 - 000000000 ____D C:\Users\bruno\AppData\Local\DBG
2017-07-24 23:04 - 2017-07-24 23:04 - 000000000 ____D C:\Users\bruno\AppData\Local\Blizzard Entertainment
2017-07-24 23:04 - 2017-07-24 23:04 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Blizzard App
2017-07-24 23:03 - 2017-08-04 16:10 - 000000000 ____D C:\Users\bruno\AppData\Local\Battle.net
2017-07-24 23:03 - 2017-08-04 14:17 - 000000000 ____D C:\Program Files (x86)\Blizzard App
2017-07-24 23:03 - 2017-07-24 23:03 - 000000000 ____D C:\Users\Todos os Usuários\Battle.net
2017-07-24 23:03 - 2017-07-24 23:03 - 000000000 ____D C:\ProgramData\Battle.net
2017-07-24 23:01 - 2017-07-25 13:43 - 000000000 ____D C:\Program Files (x86)\Hearthstone
2017-07-24 23:01 - 2017-07-24 23:01 - 000000000 ___HD C:\Program Files\Common Files\EAInstaller
2017-07-24 23:01 - 2017-07-24 23:01 - 000000000 ____D C:\Users\Todos os Usuários\Electronic Arts
2017-07-24 23:01 - 2017-07-24 23:01 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mass Effect Andromeda
2017-07-24 23:01 - 2017-07-24 23:01 - 000000000 ____D C:\ProgramData\Electronic Arts
2017-07-24 22:50 - 2017-07-24 23:01 - 000000000 ____D C:\Users\bruno\AppData\Roaming\Origin
2017-07-24 22:44 - 2017-07-24 23:01 - 000000000 ____D C:\Users\Todos os Usuários\Package Cache
2017-07-24 22:44 - 2017-07-24 23:01 - 000000000 ____D C:\ProgramData\Package Cache
2017-07-24 22:44 - 2017-07-24 22:44 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Origin
2017-07-24 22:43 - 2017-07-24 22:44 - 000000000 ____D C:\Program Files (x86)\Origin
2017-07-24 22:41 - 2017-07-24 23:03 - 000000000 ____D C:\Users\Todos os Usuários\Origin
2017-07-24 22:41 - 2017-07-24 23:03 - 000000000 ____D C:\ProgramData\Origin
2017-07-24 22:41 - 2017-07-24 22:52 - 000000000 ____D C:\Users\bruno\AppData\Local\Origin
2017-07-24 22:41 - 2017-07-24 22:41 - 000000000 ____D C:\Users\bruno\.QtWebEngineProcess
2017-07-24 22:41 - 2017-07-24 22:41 - 000000000 ____D C:\Users\bruno\.Origin
2017-07-24 22:38 - 2017-07-24 22:38 - 000000000 ____D C:\Program Files (x86)\Origin Games
2017-07-24 22:17 - 2017-07-24 22:17 - 000000000 ____D C:\Users\bruno\AppData\Roaming\Macromedia
2017-07-24 21:31 - 2017-08-04 17:01 - 000000000 ____D C:\Users\bruno\Desktop\Limpeza e manutenção
2017-07-24 21:20 - 2017-07-24 21:20 - 000000000 ____D C:\Users\bruno\AppData\Roaming\NVIDIA
2017-07-24 21:19 - 2017-08-04 16:11 - 000000000 ____D C:\Users\bruno\.MemuHyperv
2017-07-24 21:19 - 2017-07-24 21:20 - 000000000 ____D C:\Users\bruno\.android
2017-07-24 21:19 - 2017-07-24 21:19 - 000000000 ____D C:\Users\bruno\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MEmu
2017-07-24 21:19 - 2017-07-24 21:19 - 000000000 ____D C:\Program Files (x86)\Microvirt
2017-07-24 21:17 - 2017-07-24 21:17 - 000041800 _____ (AVAST Software) C:\Windows\system32\Drivers\aswKbd.sys
2017-07-24 21:17 - 2017-07-24 21:17 - 000004028 _____ C:\Windows\System32\Tasks\SafeZone scheduled Autoupdate 1500941838
2017-07-24 21:17 - 2017-07-24 21:17 - 000001088 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avast SafeZone Browser.lnk
2017-07-24 21:15 - 2017-07-24 21:15 - 000585608 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSP.sys
2017-07-24 21:15 - 2017-07-24 21:15 - 000400464 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe
2017-07-24 21:15 - 2017-07-24 21:15 - 000361336 _____ (AVAST Software) C:\Windows\system32\Drivers\aswVmm.sys
2017-07-24 21:15 - 2017-07-24 21:15 - 000198768 _____ (AVAST Software) C:\Windows\system32\Drivers\aswStm.sys
2017-07-24 21:15 - 2017-07-24 21:15 - 000146696 _____ (AVAST Software) C:\Windows\system32\Drivers\aswmonflt.sys
2017-07-24 21:15 - 2017-07-24 21:15 - 000110352 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRdr2.sys
2017-07-24 21:15 - 2017-07-24 21:15 - 000084392 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRvrt.sys
2017-07-24 21:15 - 2017-07-24 21:15 - 000061304 _____ () C:\Windows\system32\Drivers\lpsport.sys
2017-07-24 21:15 - 2017-07-24 21:15 - 000046984 _____ (AVAST Software) C:\Windows\system32\Drivers\aswHwid.sys
2017-07-24 21:15 - 2017-07-24 21:15 - 000003994 _____ C:\Windows\System32\Tasks\Avast Emergency Update
2017-07-24 21:15 - 2017-07-24 21:15 - 000001979 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avast Free Antivirus.lnk
2017-07-24 21:15 - 2017-07-24 21:15 - 000000000 ____D C:\Users\bruno\AppData\Roaming\AVAST Software
2017-07-24 21:15 - 2017-07-24 21:15 - 000000000 ____D C:\Users\bruno\AppData\Local\CEF
2017-07-24 21:15 - 2017-07-24 21:14 - 001015848 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSnx.sys
2017-07-24 21:15 - 2017-07-24 21:14 - 000343288 _____ (AVAST Software s.r.o.) C:\Windows\system32\Drivers\aswbloga.sys
2017-07-24 21:15 - 2017-07-24 21:14 - 000320008 _____ (AVAST Software s.r.o.) C:\Windows\system32\Drivers\aswbidsdrivera.sys
2017-07-24 21:15 - 2017-07-24 21:14 - 000198976 _____ (AVAST Software s.r.o.) C:\Windows\system32\Drivers\aswbidsha.sys
2017-07-24 21:15 - 2017-07-24 21:14 - 000057728 _____ (AVAST Software s.r.o.) C:\Windows\system32\Drivers\aswbuniva.sys
2017-07-24 21:13 - 2017-07-24 21:17 - 000000000 ____D C:\Program Files\AVAST Software
2017-07-24 21:12 - 2017-07-25 00:07 - 000000000 ____D C:\Users\Todos os Usuários\AVAST Software
2017-07-24 21:12 - 2017-07-25 00:07 - 000000000 ____D C:\ProgramData\AVAST Software
2017-07-24 20:49 - 2017-08-04 01:38 - 000000000 ____D C:\Program Files (x86)\Black Desert
2017-07-24 20:31 - 2017-08-04 16:55 - 000000000 ____D C:\AdwCleaner
2017-07-24 20:22 - 2017-07-07 11:00 - 000947712 _____ (Microsoft Corporation) C:\Windows\system32\HoloSI.PCShell.dll
2017-07-24 20:22 - 2017-07-07 04:27 - 000750560 _____ (Microsoft Corporation) C:\Windows\system32\fontdrvhost.exe
2017-07-24 20:22 - 2017-07-07 04:26 - 001065104 _____ (Microsoft Corporation) C:\Windows\system32\winresume.efi
2017-07-24 20:22 - 2017-07-07 04:25 - 000899824 _____ (Microsoft Corporation) C:\Windows\system32\winresume.exe
2017-07-24 20:22 - 2017-07-07 04:24 - 000117664 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\pdc.sys
2017-07-24 20:22 - 2017-07-07 04:23 - 002399728 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2017-07-24 20:22 - 2017-07-07 04:22 - 008318880 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2017-07-24 20:22 - 2017-07-07 04:22 - 001186464 _____ (Microsoft Corporation) C:\Windows\system32\winload.exe
2017-07-24 20:22 - 2017-07-07 04:22 - 000119384 _____ (Microsoft Corporation) C:\Windows\system32\dmcmnutils.dll
2017-07-24 20:22 - 2017-07-07 04:21 - 032688336 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecsRaw.dll
2017-07-24 20:22 - 2017-07-07 04:21 - 002969880 _____ (Microsoft Corporation) C:\Windows\system32\CoreUIComponents.dll
2017-07-24 20:22 - 2017-07-07 04:20 - 002021680 _____ (Microsoft Corporation) C:\Windows\system32\wmpmde.dll
2017-07-24 20:22 - 2017-07-07 04:20 - 000519584 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netio.sys
2017-07-24 20:22 - 2017-07-07 04:20 - 000382368 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\clfs.sys
2017-07-24 20:22 - 2017-07-07 04:17 - 001017760 _____ (Microsoft Corporation) C:\Windows\system32\SecConfig.efi
2017-07-24 20:22 - 2017-07-07 04:15 - 002444696 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys
2017-07-24 20:22 - 2017-07-07 04:14 - 007325584 _____ (Microsoft Corporation) C:\Windows\system32\windows.storage.dll
2017-07-24 20:22 - 2017-07-07 04:14 - 005477088 _____ (Microsoft Corporation) C:\Windows\system32\OneCoreUAPCommonProxyStub.dll
2017-07-24 20:22 - 2017-07-07 04:14 - 001760264 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll
2017-07-24 20:22 - 2017-07-07 04:14 - 001171032 _____ (Microsoft Corporation) C:\Windows\system32\dcomp.dll
2017-07-24 20:22 - 2017-07-07 04:13 - 000336320 _____ (Microsoft Corporation) C:\Windows\system32\SecurityHealthService.exe
2017-07-24 20:22 - 2017-07-07 04:12 - 000411040 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2017-07-24 20:22 - 2017-07-07 04:12 - 000318232 _____ (Microsoft Corporation) C:\Windows\system32\wininit.exe
2017-07-24 20:22 - 2017-07-07 04:12 - 000228256 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys
2017-07-24 20:22 - 2017-07-07 04:11 - 007904784 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.Protection.PlayReady.dll
2017-07-24 20:22 - 2017-07-07 04:11 - 000094624 _____ (Microsoft Corporation) C:\Windows\system32\rdpudd.dll
2017-07-24 20:22 - 2017-07-07 04:10 - 021353208 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2017-07-24 20:22 - 2017-07-07 04:10 - 001670496 _____ (Microsoft Corporation) C:\Windows\system32\winmde.dll
2017-07-24 20:22 - 2017-07-07 04:10 - 001337848 _____ (Microsoft Corporation) C:\Windows\system32\AudioEng.dll
2017-07-24 20:22 - 2017-07-07 04:10 - 001325968 _____ (Microsoft Corporation) C:\Windows\system32\ole32.dll
2017-07-24 20:22 - 2017-07-07 04:10 - 000372128 _____ (Microsoft Corporation) C:\Windows\system32\CloudExperienceHost.dll
2017-07-24 20:22 - 2017-07-07 04:10 - 000254168 _____ (Microsoft Corporation) C:\Windows\system32\mfps.dll
2017-07-24 20:22 - 2017-07-07 04:09 - 000041376 _____ (Microsoft Corporation) C:\Windows\system32\wininitext.dll
2017-07-24 20:22 - 2017-07-07 04:08 - 002229152 _____ (Microsoft Corporation) C:\Windows\system32\AppVEntSubsystems64.dll
2017-07-24 20:22 - 2017-07-07 04:07 - 001106848 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\http.sys
2017-07-24 20:22 - 2017-07-07 04:07 - 000058488 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2017-07-24 20:22 - 2017-07-07 03:57 - 000626528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fontdrvhost.exe
2017-07-24 20:22 - 2017-07-07 03:57 - 000125344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dwmapi.dll
2017-07-24 20:22 - 2017-07-07 03:40 - 023677440 _____ (Microsoft Corporation) C:\Windows\system32\edgehtml.dll
2017-07-24 20:22 - 2017-07-07 03:39 - 001839872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2017-07-24 20:22 - 2017-07-07 03:39 - 000096128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dmcmnutils.dll
2017-07-24 20:22 - 2017-07-07 03:37 - 031652264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecsRaw.dll
2017-07-24 20:22 - 2017-07-07 03:37 - 002259760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\CoreUIComponents.dll
2017-07-24 20:22 - 2017-07-07 03:37 - 001339352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmpmde.dll
2017-07-24 20:22 - 2017-07-07 03:31 - 005820984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\windows.storage.dll
2017-07-24 20:22 - 2017-07-07 03:31 - 001518088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll
2017-07-24 20:22 - 2017-07-07 03:31 - 000129184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll
2017-07-24 20:22 - 2017-07-07 03:30 - 002165752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2017-07-24 20:22 - 2017-07-07 03:30 - 000949920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dcomp.dll
2017-07-24 20:22 - 2017-07-07 03:30 - 000750496 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WWAHost.exe
2017-07-24 20:22 - 2017-07-07 03:29 - 000349600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2017-07-24 20:22 - 2017-07-07 03:29 - 000123520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Clipc.dll
2017-07-24 20:22 - 2017-07-07 03:27 - 006759512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.Protection.PlayReady.dll
2017-07-24 20:22 - 2017-07-07 03:27 - 003670016 _____ (Microsoft Corporation) C:\Windows\system32\win32kfull.sys
2017-07-24 20:22 - 2017-07-07 03:27 - 001640448 _____ (Microsoft Corporation) C:\Windows\system32\GdiPlus.dll
2017-07-24 20:22 - 2017-07-07 03:27 - 001050624 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.dll
2017-07-24 20:22 - 2017-07-07 03:27 - 000859136 _____ (Microsoft Corporation) C:\Windows\system32\uDWM.dll
2017-07-24 20:22 - 2017-07-07 03:27 - 000577024 _____ (Microsoft Corporation) C:\Windows\system32\duser.dll
2017-07-24 20:22 - 2017-07-07 03:27 - 000557568 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2017-07-24 20:22 - 2017-07-07 03:27 - 000443392 _____ (Microsoft Corporation) C:\Windows\system32\PerceptionSimulationExtensions.dll
2017-07-24 20:22 - 2017-07-07 03:27 - 000360960 _____ (Microsoft Corporation) C:\Windows\system32\ConhostV2.dll
2017-07-24 20:22 - 2017-07-07 03:26 - 020373408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2017-07-24 20:22 - 2017-07-07 03:26 - 017364992 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Xaml.dll
2017-07-24 20:22 - 2017-07-07 03:26 - 001529384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winmde.dll
2017-07-24 20:22 - 2017-07-07 03:26 - 001195240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioEng.dll
2017-07-24 20:22 - 2017-07-07 03:26 - 000988168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ole32.dll
2017-07-24 20:22 - 2017-07-07 03:25 - 002199552 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Xaml.Resources.dll
2017-07-24 20:22 - 2017-07-07 03:25 - 000035232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininitext.dll
2017-07-24 20:22 - 2017-07-07 03:24 - 001517472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AppVEntSubsystems32.dll
2017-07-24 20:22 - 2017-07-07 03:24 - 000114688 _____ (Microsoft Corporation) C:\Windows\system32\officecsp.dll
2017-07-24 20:22 - 2017-07-07 03:23 - 000583160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\CoreMessaging.dll
2017-07-24 20:22 - 2017-07-07 03:23 - 000113152 _____ (Microsoft Corporation) C:\Windows\system32\wuuhosdeployment.dll
2017-07-24 20:22 - 2017-07-07 03:23 - 000110592 _____ (Microsoft Corporation) C:\Windows\system32\Chakradiag.dll
2017-07-24 20:22 - 2017-07-07 03:23 - 000095232 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
2017-07-24 20:22 - 2017-07-07 03:23 - 000029696 _____ (Microsoft Corporation) C:\Windows\system32\eapprovp.dll
2017-07-24 20:22 - 2017-07-07 03:22 - 007931392 _____ (Microsoft Corporation) C:\Windows\system32\twinui.dll
2017-07-24 20:22 - 2017-07-07 03:21 - 000096256 _____ (Microsoft Corporation) C:\Windows\system32\ActiveSyncCsp.dll
2017-07-24 20:22 - 2017-07-07 03:21 - 000064512 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll
2017-07-24 20:22 - 2017-07-07 03:20 - 023681536 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2017-07-24 20:22 - 2017-07-07 03:20 - 008331264 _____ (Microsoft Corporation) C:\Windows\system32\BingMaps.dll
2017-07-24 20:22 - 2017-07-07 03:20 - 000175616 _____ (Microsoft Corporation) C:\Windows\system32\prntvpt.dll
2017-07-24 20:22 - 2017-07-07 03:19 - 007149056 _____ (Microsoft Corporation) C:\Windows\system32\mos.dll
2017-07-24 20:22 - 2017-07-07 03:19 - 000527360 _____ (Microsoft Corporation) C:\Windows\system32\aadcloudap.dll
2017-07-24 20:22 - 2017-07-07 03:19 - 000256000 _____ (Microsoft Corporation) C:\Windows\system32\domgmt.dll
2017-07-24 20:22 - 2017-07-07 03:19 - 000165888 _____ (Microsoft Corporation) C:\Windows\system32\storewuauth.dll
2017-07-24 20:22 - 2017-07-07 03:19 - 000137216 _____ (Microsoft Corporation) C:\Windows\system32\raschap.dll
2017-07-24 20:22 - 2017-07-07 03:18 - 007336448 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Data.Pdf.dll
2017-07-24 20:22 - 2017-07-07 03:18 - 000563712 _____ (Microsoft Corporation) C:\Windows\system32\DevicePairing.dll
2017-07-24 20:22 - 2017-07-07 03:18 - 000548864 _____ (Microsoft Corporation) C:\Windows\system32\SensorService.dll
2017-07-24 20:22 - 2017-07-07 03:18 - 000353280 _____ (Microsoft Corporation) C:\Windows\system32\Wldap32.dll
2017-07-24 20:22 - 2017-07-07 03:18 - 000274944 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecsExt.dll
2017-07-24 20:22 - 2017-07-07 03:17 - 001878016 _____ (Microsoft Corporation) C:\Windows\system32\AzureSettingSyncProvider.dll
2017-07-24 20:22 - 2017-07-07 03:17 - 001260544 _____ (Microsoft Corporation) C:\Windows\system32\GamePanel.exe
2017-07-24 20:22 - 2017-07-07 03:17 - 000692736 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2017-07-24 20:22 - 2017-07-07 03:17 - 000588800 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2017-07-24 20:22 - 2017-07-07 03:17 - 000536064 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Internal.Management.dll
2017-07-24 20:22 - 2017-07-07 03:17 - 000422400 _____ (Microsoft Corporation) C:\Windows\system32\WpAXHolder.dll
2017-07-24 20:22 - 2017-07-07 03:17 - 000229888 _____ (Microsoft Corporation) C:\Windows\system32\SIHClient.exe
2017-07-24 20:22 - 2017-07-07 03:16 - 012786176 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2017-07-24 20:22 - 2017-07-07 03:16 - 000925696 _____ (Microsoft Corporation) C:\Windows\system32\WpcWebFilter.dll
2017-07-24 20:22 - 2017-07-07 03:16 - 000545792 _____ (Microsoft Corporation) C:\Windows\system32\winspool.drv
2017-07-24 20:22 - 2017-07-07 03:15 - 008238080 _____ (Microsoft Corporation) C:\Windows\system32\Chakra.dll
2017-07-24 20:22 - 2017-07-07 03:15 - 000922112 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2017-07-24 20:22 - 2017-07-07 03:14 - 008211968 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll
2017-07-24 20:22 - 2017-07-07 03:14 - 003784704 _____ (Microsoft Corporation) C:\Windows\system32\MapRouter.dll
2017-07-24 20:22 - 2017-07-07 03:14 - 002956800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\win32kfull.sys
2017-07-24 20:22 - 2017-07-07 03:14 - 001802240 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2017-07-24 20:22 - 2017-07-07 03:14 - 001448960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\GdiPlus.dll
2017-07-24 20:22 - 2017-07-07 03:14 - 000790016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.dll
2017-07-24 20:22 - 2017-07-07 03:14 - 000570880 _____ (Microsoft Corporation) C:\Windows\system32\PhotoScreensaver.scr
2017-07-24 20:22 - 2017-07-07 03:14 - 000497152 _____ (Microsoft Corporation) C:\Windows\system32\rastls.dll
2017-07-24 20:22 - 2017-07-07 03:13 - 013839872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Xaml.dll
2017-07-24 20:22 - 2017-07-07 03:13 - 005892096 _____ (Microsoft Corporation) C:\Windows\system32\d2d1.dll
2017-07-24 20:22 - 2017-07-07 03:13 - 000840192 _____ (Microsoft Corporation) C:\Windows\system32\fveapi.dll
2017-07-24 20:22 - 2017-07-07 03:12 - 004730880 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2017-07-24 20:22 - 2017-07-07 03:12 - 003307008 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2017-07-24 20:22 - 2017-07-07 03:12 - 002499584 _____ (Microsoft Corporation) C:\Windows\system32\twinui.pcshell.dll
2017-07-24 20:22 - 2017-07-07 03:12 - 002199552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Xaml.Resources.dll
2017-07-24 20:22 - 2017-07-07 03:12 - 002055168 _____ (Microsoft Corporation) C:\Windows\system32\win32kbase.sys
2017-07-24 20:22 - 2017-07-07 03:12 - 001713664 _____ (Microsoft Corporation) C:\Windows\system32\ActiveSyncProvider.dll
2017-07-24 20:22 - 2017-07-07 03:12 - 001420800 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Xaml.Maps.dll
2017-07-24 20:22 - 2017-07-07 03:12 - 001305088 _____ (Microsoft Corporation) C:\Windows\system32\dosvc.dll
2017-07-24 20:22 - 2017-07-07 03:12 - 001293824 _____ (Microsoft Corporation) C:\Windows\system32\aadtb.dll
2017-07-24 20:22 - 2017-07-07 03:12 - 001142272 _____ (Microsoft Corporation) C:\Windows\system32\localspl.dll
2017-07-24 20:22 - 2017-07-07 03:12 - 000706560 _____ (Microsoft Corporation) C:\Windows\system32\winlogon.exe
2017-07-24 20:22 - 2017-07-07 03:11 - 003139584 _____ (Microsoft Corporation) C:\Windows\system32\msftedit.dll
2017-07-24 20:22 - 2017-07-07 03:11 - 002829824 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll
2017-07-24 20:22 - 2017-07-07 03:11 - 002649600 _____ (Microsoft Corporation) C:\Windows\system32\dwmcore.dll
2017-07-24 20:22 - 2017-07-07 03:11 - 002177024 _____ (Microsoft Corporation) C:\Windows\system32\OpcServices.dll
2017-07-24 20:22 - 2017-07-07 03:11 - 001888256 _____ (Microsoft Corporation) C:\Windows\system32\FntCache.dll
2017-07-24 20:22 - 2017-07-07 03:11 - 001812480 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
2017-07-24 20:22 - 2017-07-07 03:11 - 000986112 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2017-07-24 20:22 - 2017-07-07 03:11 - 000406528 _____ (Microsoft Corporation) C:\Windows\system32\wuuhext.dll
2017-07-24 20:22 - 2017-07-07 03:10 - 005557760 _____ (Microsoft Corporation) C:\Windows\system32\dbgeng.dll
2017-07-24 20:22 - 2017-07-07 03:10 - 004707840 _____ (Microsoft Corporation) C:\Windows\system32\ExplorerFrame.dll
2017-07-24 20:22 - 2017-07-07 03:10 - 002444288 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2017-07-24 20:22 - 2017-07-07 03:10 - 000079872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll
2017-07-24 20:22 - 2017-07-07 03:10 - 000025088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\eapprovp.dll
2017-07-24 20:22 - 2017-07-07 03:09 - 020504576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\edgehtml.dll
2017-07-24 20:22 - 2017-07-07 03:09 - 000365056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\daxexec.dll
2017-07-24 20:22 - 2017-07-07 03:08 - 000285696 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys
2017-07-24 20:22 - 2017-07-07 03:07 - 000430080 _____ (Microsoft Corporation) C:\Windows\system32\PlayToDevice.dll
2017-07-24 20:22 - 2017-07-07 03:07 - 000391168 _____ (Microsoft Corporation) C:\Windows\system32\WMPhoto.dll
2017-07-24 20:22 - 2017-07-07 03:07 - 000272896 _____ (Microsoft Corporation) C:\Windows\system32\PlayToReceiver.dll
2017-07-24 20:22 - 2017-07-07 03:07 - 000117248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\raschap.dll
2017-07-24 20:22 - 2017-07-07 03:06 - 000412160 _____ (Microsoft Corporation) C:\Windows\system32\SensorsApi.dll
2017-07-24 20:22 - 2017-07-07 03:06 - 000241152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecsExt.dll
2017-07-24 20:22 - 2017-07-07 03:06 - 000205824 _____ (Microsoft Corporation) C:\Windows\system32\sensrsvc.dll
2017-07-24 20:22 - 2017-07-07 03:05 - 019335168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2017-07-24 20:22 - 2017-07-07 03:05 - 011870720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2017-07-24 20:22 - 2017-07-07 03:05 - 006728192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\twinui.dll
2017-07-24 20:22 - 2017-07-07 03:05 - 005719040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\BingMaps.dll
2017-07-24 20:22 - 2017-07-07 03:05 - 000502784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DevicePairing.dll
2017-07-24 20:22 - 2017-07-07 03:05 - 000370176 _____ (Microsoft Corporation) C:\Windows\system32\msinfo32.exe
2017-07-24 20:22 - 2017-07-07 03:05 - 000312320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Wldap32.dll
2017-07-24 20:22 - 2017-07-07 03:04 - 005961216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Data.Pdf.dll
2017-07-24 20:22 - 2017-07-07 03:04 - 001703424 _____ (Microsoft Corporation) C:\Windows\system32\aitstatic.exe
2017-07-24 20:22 - 2017-07-07 03:04 - 001403392 _____ (Microsoft Corporation) C:\Windows\system32\wdc.dll
2017-07-24 20:22 - 2017-07-07 03:04 - 001248768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AzureSettingSyncProvider.dll
2017-07-24 20:22 - 2017-07-07 03:04 - 000754176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2017-07-24 20:22 - 2017-07-07 03:04 - 000506368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2017-07-24 20:22 - 2017-07-07 03:04 - 000394240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Internal.Management.dll
2017-07-24 20:22 - 2017-07-07 03:04 - 000058368 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll
2017-07-24 20:22 - 2017-07-07 03:03 - 006123520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mos.dll
2017-07-24 20:22 - 2017-07-07 03:03 - 000636416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WpcWebFilter.dll
2017-07-24 20:22 - 2017-07-07 03:03 - 000446464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rastls.dll
2017-07-24 20:22 - 2017-07-07 03:02 - 000952832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\comdlg32.dll
2017-07-24 20:22 - 2017-07-07 03:02 - 000508416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PhotoScreensaver.scr
2017-07-24 20:22 - 2017-07-07 03:01 - 006287360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Chakra.dll
2017-07-24 20:22 - 2017-07-07 03:01 - 002859520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2017-07-24 20:22 - 2017-07-07 03:00 - 007596544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstscax.dll
2017-07-24 20:22 - 2017-07-07 03:00 - 005225984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d2d1.dll
2017-07-24 20:22 - 2017-07-07 03:00 - 002588160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MapRouter.dll
2017-07-24 20:22 - 2017-07-07 03:00 - 001626624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2017-07-24 20:22 - 2017-07-07 03:00 - 001565184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll
2017-07-24 20:22 - 2017-07-07 03:00 - 001019904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\aadtb.dll
2017-07-24 20:22 - 2017-07-07 02:59 - 004417024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ExplorerFrame.dll
2017-07-24 20:22 - 2017-07-07 02:59 - 003656704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2017-07-24 20:22 - 2017-07-07 02:59 - 001494016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ActiveSyncProvider.dll
2017-07-24 20:22 - 2017-07-07 02:59 - 001355264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\OpcServices.dll
2017-07-24 20:22 - 2017-07-07 02:59 - 000787456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll
2017-07-24 20:22 - 2017-07-07 02:58 - 004559360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dbgeng.dll
2017-07-24 20:22 - 2017-07-07 02:58 - 002782720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msftedit.dll
2017-07-24 20:22 - 2017-07-07 02:58 - 002298368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dwmcore.dll
2017-07-24 20:22 - 2017-07-07 02:58 - 001237504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Xaml.Maps.dll
2017-07-24 20:22 - 2017-07-07 02:55 - 000342528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMPhoto.dll
2017-07-24 20:22 - 2017-07-07 02:55 - 000329216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SensorsApi.dll
2017-07-24 20:22 - 2017-07-07 02:53 - 001301504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdc.dll
2017-07-24 20:22 - 2017-07-07 02:53 - 000338432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msinfo32.exe
2017-07-24 20:22 - 2017-07-01 19:52 - 000031932 _____ C:\Windows\system32\edgehtmlpluginpolicy.bin
2017-07-24 20:22 - 2017-06-20 03:18 - 001564576 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll
2017-07-24 20:22 - 2017-06-20 03:18 - 000096672 _____ (Microsoft Corporation) C:\Windows\system32\CompatTelRunner.exe
2017-07-24 20:22 - 2017-06-20 03:17 - 000629152 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
2017-07-24 20:22 - 2017-06-20 03:17 - 000544160 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll
2017-07-24 20:22 - 2017-06-20 03:17 - 000334240 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll
2017-07-24 20:22 - 2017-06-20 03:17 - 000136096 _____ (Microsoft Corporation) C:\Windows\system32\acmigration.dll
2017-07-24 20:22 - 2017-06-20 03:17 - 000034720 _____ (Microsoft Corporation) C:\Windows\system32\DeviceCensus.exe
2017-07-24 20:22 - 2017-06-20 03:16 - 001214880 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2017-07-24 20:22 - 2017-06-20 03:16 - 000335776 _____ (Microsoft Corporation) C:\Windows\system32\dcntel.dll
2017-07-24 20:22 - 2017-06-20 03:11 - 001395152 _____ (Microsoft Corporation) C:\Windows\system32\winload.efi
2017-07-24 20:22 - 2017-06-20 03:11 - 000411992 _____ (Microsoft Corporation) C:\Windows\system32\MSAudDecMFT.dll
2017-07-24 20:22 - 2017-06-20 03:10 - 002327456 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ntfs.sys
2017-07-24 20:22 - 2017-06-20 03:10 - 001930320 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2017-07-24 20:22 - 2017-06-20 03:08 - 001242528 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ndis.sys
2017-07-24 20:22 - 2017-06-20 03:05 - 001057832 _____ (Microsoft Corporation) C:\Windows\system32\MrmCoreR.dll
2017-07-24 20:22 - 2017-06-20 03:04 - 004847424 _____ (Microsoft Corporation) C:\Windows\explorer.exe
2017-07-24 20:22 - 2017-06-20 03:04 - 000472728 _____ (Microsoft Corporation) C:\Windows\system32\policymanager.dll
2017-07-24 20:22 - 2017-06-20 03:03 - 000820128 _____ (Microsoft Corporation) C:\Windows\system32\WWAHost.exe
2017-07-24 20:22 - 2017-06-20 03:02 - 002645688 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2017-07-24 20:22 - 2017-06-20 03:02 - 001055648 _____ (Microsoft Corporation) C:\Windows\system32\LicenseManager.dll
2017-07-24 20:22 - 2017-06-20 03:00 - 000558920 _____ (Microsoft Corporation) C:\Windows\system32\Windows.ApplicationModel.dll
2017-07-24 20:22 - 2017-06-20 03:00 - 000255904 _____ (Microsoft Corporation) C:\Windows\system32\AppxAllUserStore.dll
2017-07-24 20:22 - 2017-06-20 03:00 - 000142752 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\wcifs.sys
2017-07-24 20:22 - 2017-06-20 02:59 - 006554928 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.dll
2017-07-24 20:22 - 2017-06-20 02:59 - 001220072 _____ (Microsoft Corporation) C:\Windows\system32\mfsvr.dll
2017-07-24 20:22 - 2017-06-20 02:59 - 001054280 _____ (Microsoft Corporation) C:\Windows\system32\AudioSes.dll
2017-07-24 20:22 - 2017-06-20 02:59 - 000583304 _____ (Microsoft Corporation) C:\Windows\system32\audiodg.exe
2017-07-24 20:22 - 2017-06-20 02:59 - 000467504 _____ (Microsoft Corporation) C:\Windows\system32\MFCaptureEngine.dll
2017-07-24 20:22 - 2017-06-20 02:58 - 000833160 _____ (Microsoft Corporation) C:\Windows\system32\EditionUpgradeManagerObj.dll
2017-07-24 20:22 - 2017-06-20 02:58 - 000406072 _____ (Microsoft Corporation) C:\Windows\system32\MMDevAPI.dll
2017-07-24 20:22 - 2017-06-20 02:58 - 000203168 _____ (Microsoft Corporation) C:\Windows\system32\CloudExperienceHostBroker.dll
2017-07-24 20:22 - 2017-06-20 02:57 - 002681760 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2017-07-24 20:22 - 2017-06-20 02:57 - 000204192 _____ (Microsoft Corporation) C:\Windows\system32\basecsp.dll
2017-07-24 20:22 - 2017-06-20 02:34 - 000192416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\aepic.dll
2017-07-24 20:22 - 2017-06-20 02:16 - 000970752 _____ (Microsoft Corporation) C:\Windows\system32\msctfuimanager.dll
2017-07-24 20:22 - 2017-06-20 02:16 - 000417280 _____ (Microsoft Corporation) C:\Windows\system32\oleacc.dll
2017-07-24 20:22 - 2017-06-20 02:15 - 001620368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2017-07-24 20:22 - 2017-06-20 02:15 - 000455104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MSAudDecMFT.dll
2017-07-24 20:22 - 2017-06-20 02:14 - 001150784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ucrtbase.dll
2017-07-24 20:22 - 2017-06-20 02:14 - 000032768 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mskssrv.sys
2017-07-24 20:22 - 2017-06-20 02:13 - 000787712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll
2017-07-24 20:22 - 2017-06-20 02:13 - 000081408 _____ (Microsoft Corporation) C:\Windows\system32\wwanprotdim.dll
2017-07-24 20:22 - 2017-06-20 02:13 - 000064000 _____ (Microsoft Corporation) C:\Windows\system32\WFDSConMgr.dll
2017-07-24 20:22 - 2017-06-20 02:13 - 000056832 _____ (Microsoft Corporation) C:\Windows\system32\WinBioDataModelOOBE.exe
2017-07-24 20:22 - 2017-06-20 02:12 - 000293376 _____ (Microsoft Corporation) C:\Windows\system32\MusNotification.exe
2017-07-24 20:22 - 2017-06-20 02:12 - 000231936 _____ (Microsoft Corporation) C:\Windows\system32\DolbyMATEnc.dll
2017-07-24 20:22 - 2017-06-20 02:12 - 000144384 _____ (Microsoft Corporation) C:\Windows\system32\Windows.System.Profile.RetailInfo.dll
2017-07-24 20:22 - 2017-06-20 02:12 - 000115712 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\bridge.sys
2017-07-24 20:22 - 2017-06-20 02:11 - 000200192 _____ (Microsoft Corporation) C:\Windows\system32\ScDeviceEnum.dll
2017-07-24 20:22 - 2017-06-20 02:11 - 000084992 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2017-07-24 20:22 - 2017-06-20 02:10 - 000722432 _____ (Microsoft Corporation) C:\Windows\system32\MusUpdateHandlers.dll
2017-07-24 20:22 - 2017-06-20 02:10 - 000315392 _____ (Microsoft Corporation) C:\Windows\system32\SettingsEnvironment.Desktop.dll
2017-07-24 20:22 - 2017-06-20 02:10 - 000188928 _____ (Microsoft Corporation) C:\Windows\system32\wincredui.dll
2017-07-24 20:22 - 2017-06-20 02:10 - 000096256 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2017-07-24 20:22 - 2017-06-20 02:09 - 000555008 _____ (Microsoft Corporation) C:\Windows\system32\WFDSConMgrSvc.dll
2017-07-24 20:22 - 2017-06-20 02:09 - 000551424 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Payments.dll
2017-07-24 20:22 - 2017-06-20 02:09 - 000497152 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Shell.BlueLightReduction.dll
2017-07-24 20:22 - 2017-06-20 02:09 - 000427008 _____ (Microsoft Corporation) C:\Windows\system32\provengine.dll
2017-07-24 20:22 - 2017-06-20 02:09 - 000406032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\policymanager.dll
2017-07-24 20:22 - 2017-06-20 02:09 - 000357888 _____ (Microsoft Corporation) C:\Windows\system32\Narrator.exe
2017-07-24 20:22 - 2017-06-20 02:09 - 000250368 _____ (Microsoft Corporation) C:\Windows\system32\SCardSvr.dll
2017-07-24 20:22 - 2017-06-20 02:09 - 000208384 _____ (Microsoft Corporation) C:\Windows\system32\psmsrv.dll
2017-07-24 20:22 - 2017-06-20 02:09 - 000205312 _____ (Microsoft Corporation) C:\Windows\system32\ClipboardServer.dll
2017-07-24 20:22 - 2017-06-20 02:09 - 000189952 _____ (Microsoft Corporation) C:\Windows\system32\certprop.dll
2017-07-24 20:22 - 2017-06-20 02:09 - 000140288 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll
2017-07-24 20:22 - 2017-06-20 02:09 - 000135680 _____ (Microsoft Corporation) C:\Windows\system32\sendmail.dll
2017-07-24 20:22 - 2017-06-20 02:09 - 000062464 _____ (Microsoft Corporation) C:\Windows\system32\dataclen.dll
2017-07-24 20:22 - 2017-06-20 02:08 - 004469840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\explorer.exe
2017-07-24 20:22 - 2017-06-20 02:08 - 000791040 _____ (Microsoft Corporation) C:\Windows\system32\certca.dll
2017-07-24 20:22 - 2017-06-20 02:08 - 000646656 _____ (Microsoft Corporation) C:\Windows\system32\LockHostingFramework.dll
2017-07-24 20:22 - 2017-06-20 02:08 - 000386560 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2017-07-24 20:22 - 2017-06-20 02:08 - 000365056 _____ (Microsoft Corporation) C:\Windows\system32\SettingsHandlers_Notifications.dll
2017-07-24 20:22 - 2017-06-20 02:08 - 000328704 _____ (Microsoft Corporation) C:\Windows\system32\PsmServiceExtHost.dll
2017-07-24 20:22 - 2017-06-20 02:08 - 000327168 _____ (Microsoft Corporation) C:\Windows\system32\WinBioDataModel.dll
2017-07-24 20:22 - 2017-06-20 02:08 - 000274944 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2017-07-24 20:22 - 2017-06-20 02:08 - 000251392 _____ (Microsoft Corporation) C:\Windows\system32\scksp.dll
2017-07-24 20:22 - 2017-06-20 02:07 - 002475136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10warp.dll
2017-07-24 20:22 - 2017-06-20 02:07 - 000823296 _____ (Microsoft Corporation) C:\Windows\system32\MbaeApi.dll
2017-07-24 20:22 - 2017-06-20 02:07 - 000757248 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdiWiFi.sys
2017-07-24 20:22 - 2017-06-20 02:07 - 000632832 _____ (Microsoft Corporation) C:\Windows\system32\tileobjserver.dll
2017-07-24 20:22 - 2017-06-20 02:07 - 000626176 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Internal.Bluetooth.dll
2017-07-24 20:22 - 2017-06-20 02:07 - 000621056 _____ (Microsoft Corporation) C:\Windows\system32\SndVolSSO.dll
2017-07-24 20:22 - 2017-06-20 02:07 - 000510976 _____ (Microsoft Corporation) C:\Windows\system32\TDLMigration.dll
2017-07-24 20:22 - 2017-06-20 02:07 - 000411136 _____ (Microsoft Corporation) C:\Windows\system32\updatehandlers.dll
2017-07-24 20:22 - 2017-06-20 02:07 - 000346016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\CloudExperienceHostCommon.dll
2017-07-24 20:22 - 2017-06-20 02:07 - 000138656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\CloudExperienceHostUser.dll
2017-07-24 20:22 - 2017-06-20 02:06 - 000942592 _____ (Microsoft Corporation) C:\Windows\system32\wbiosrvc.dll
2017-07-24 20:22 - 2017-06-20 02:06 - 000847872 _____ (Microsoft Corporation) C:\Windows\system32\bisrv.dll
2017-07-24 20:22 - 2017-06-20 02:06 - 000754592 _____ (Microsoft Corporation) C:\Windows\SysWOW64\LicenseManager.dll
2017-07-24 20:22 - 2017-06-20 02:06 - 000751104 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2017-07-24 20:22 - 2017-06-20 02:06 - 000455680 _____ (Microsoft Corporation) C:\Windows\system32\certcli.dll
2017-07-24 20:22 - 2017-06-20 02:06 - 000411648 _____ (Microsoft Corporation) C:\Windows\system32\ActivationManager.dll
2017-07-24 20:22 - 2017-06-20 02:06 - 000335872 _____ (Microsoft Corporation) C:\Windows\system32\CloudDomainJoinDataModelServer.dll
2017-07-24 20:22 - 2017-06-20 02:06 - 000299520 _____ (Microsoft Corporation) C:\Windows\system32\AboveLockAppHost.dll
2017-07-24 20:22 - 2017-06-20 02:06 - 000278944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\thumbcache.dll
2017-07-24 20:22 - 2017-06-20 02:06 - 000253440 _____ (Microsoft Corporation) C:\Windows\system32\edputil.dll
2017-07-24 20:22 - 2017-06-20 02:06 - 000045056 _____ (Microsoft Corporation) C:\Windows\system32\TokenBrokerUI.dll
2017-07-24 20:22 - 2017-06-20 02:05 - 004447744 _____ (Microsoft Corporation) C:\Windows\system32\SettingsHandlers_nt.dll
2017-07-24 20:22 - 2017-06-20 02:05 - 002873344 _____ (Microsoft Corporation) C:\Windows\system32\themeui.dll
2017-07-24 20:22 - 2017-06-20 02:05 - 001468416 _____ (Microsoft Corporation) C:\Windows\system32\AppXDeploymentExtensions.desktop.dll
2017-07-24 20:22 - 2017-06-20 02:05 - 000873472 _____ (Microsoft Corporation) C:\Windows\system32\rasmans.dll
2017-07-24 20:22 - 2017-06-20 02:05 - 000696320 _____ (Microsoft Corporation) C:\Windows\system32\mmsys.cpl
2017-07-24 20:22 - 2017-06-20 02:05 - 000687616 _____ (Microsoft Corporation) C:\Windows\system32\LogonController.dll
2017-07-24 20:22 - 2017-06-20 02:05 - 000438096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.ApplicationModel.dll
2017-07-24 20:22 - 2017-06-20 02:05 - 000417792 _____ (Microsoft Corporation) C:\Windows\system32\InstallAgentUserBroker.exe
2017-07-24 20:22 - 2017-06-20 02:05 - 000406528 _____ (Microsoft Corporation) C:\Windows\system32\InputSwitch.dll
2017-07-24 20:22 - 2017-06-20 02:05 - 000374784 _____ (Microsoft Corporation) C:\Windows\system32\InstallAgent.exe
2017-07-24 20:22 - 2017-06-20 02:05 - 000364032 _____ (Microsoft Corporation) C:\Windows\system32\SearchProtocolHost.exe
2017-07-24 20:22 - 2017-06-20 02:05 - 000056832 _____ (Microsoft Corporation) C:\Windows\system32\cldapi.dll
2017-07-24 20:22 - 2017-06-20 02:04 - 002330520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\combase.dll
2017-07-24 20:22 - 2017-06-20 02:04 - 001818624 _____ (Microsoft Corporation) C:\Windows\system32\UIAutomationCore.dll
2017-07-24 20:22 - 2017-06-20 02:04 - 001425920 _____ (Microsoft Corporation) C:\Windows\system32\certutil.exe
2017-07-24 20:22 - 2017-06-20 02:04 - 001178528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AppxPackaging.dll
2017-07-24 20:22 - 2017-06-20 02:04 - 001177600 _____ (Microsoft Corporation) C:\Windows\system32\Unistore.dll
2017-07-24 20:22 - 2017-06-20 02:04 - 001077496 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webservices.dll
2017-07-24 20:22 - 2017-06-20 02:04 - 000802816 _____ (Microsoft Corporation) C:\Windows\system32\wcmsvc.dll
2017-07-24 20:22 - 2017-06-20 02:04 - 000400896 _____ (Microsoft Corporation) C:\Windows\system32\RDXTaskFactory.dll
2017-07-24 20:22 - 2017-06-20 02:04 - 000181656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AppxAllUserStore.dll
2017-07-24 20:22 - 2017-06-20 02:04 - 000178176 _____ (Microsoft Corporation) C:\Windows\system32\EditionUpgradeHelper.dll
2017-07-24 20:22 - 2017-06-20 02:04 - 000049656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msasn1.dll
2017-07-24 20:22 - 2017-06-20 02:03 - 005806048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.dll
2017-07-24 20:22 - 2017-06-20 02:03 - 002077184 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2017-07-24 20:22 - 2017-06-20 02:03 - 001396224 _____ (Microsoft Corporation) C:\Windows\system32\wwansvc.dll
2017-07-24 20:22 - 2017-06-20 02:03 - 000864240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioSes.dll
2017-07-24 20:22 - 2017-06-20 02:03 - 000443728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MFCaptureEngine.dll
2017-07-24 20:22 - 2017-06-20 02:02 - 003377664 _____ (Microsoft Corporation) C:\Windows\system32\tquery.dll
2017-07-24 20:22 - 2017-06-20 02:02 - 002804736 _____ (Microsoft Corporation) C:\Windows\system32\AppXDeploymentServer.dll
2017-07-24 20:22 - 2017-06-20 02:02 - 001886208 _____ (Microsoft Corporation) C:\Windows\system32\AppXDeploymentExtensions.onecore.dll
2017-07-24 20:22 - 2017-06-20 02:02 - 001121928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfsvr.dll
2017-07-24 20:22 - 2017-06-20 02:02 - 000681984 _____ (Microsoft Corporation) C:\Windows\system32\usocore.dll
2017-07-24 20:22 - 2017-06-20 02:02 - 000354400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MMDevAPI.dll
2017-07-24 20:22 - 2017-06-20 02:02 - 000081920 _____ (Microsoft Corporation) C:\Windows\system32\CloudDomainJoinAUG.dll
2017-07-24 20:22 - 2017-06-20 02:01 - 004536320 _____ (Microsoft Corporation) C:\Windows\system32\MFMediaEngine.dll
2017-07-24 20:22 - 2017-06-20 02:01 - 004396032 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_47.dll
2017-07-24 20:22 - 2017-06-20 02:01 - 003803136 _____ (Microsoft Corporation) C:\Windows\system32\SystemSettingsThresholdAdminFlowUI.dll
2017-07-24 20:22 - 2017-06-20 02:01 - 003332096 _____ (Microsoft Corporation) C:\Windows\system32\SRH.dll
2017-07-24 20:22 - 2017-06-20 02:01 - 003059200 _____ (Microsoft Corporation) C:\Windows\system32\NetworkMobileSettings.dll
2017-07-24 20:22 - 2017-06-20 02:01 - 001076736 _____ (Microsoft Corporation) C:\Windows\system32\twinui.appcore.dll
2017-07-24 20:22 - 2017-06-20 02:01 - 000809984 _____ (Microsoft Corporation) C:\Windows\system32\rasapi32.dll
2017-07-24 20:22 - 2017-06-20 02:01 - 000397312 _____ (Microsoft Corporation) C:\Windows\system32\rascustom.dll
2017-07-24 20:22 - 2017-06-20 02:01 - 000176032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\basecsp.dll
2017-07-24 20:22 - 2017-06-20 02:00 - 003057664 _____ (Microsoft Corporation) C:\Windows\system32\CertEnroll.dll
2017-07-24 20:22 - 2017-06-20 02:00 - 002597888 _____ (Microsoft Corporation) C:\Windows\system32\mssrch.dll
2017-07-24 20:22 - 2017-06-20 02:00 - 002171392 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.Bluetooth.dll
2017-07-24 20:22 - 2017-06-20 01:59 - 002938880 _____ (Microsoft Corporation) C:\Windows\system32\InputService.dll
2017-07-24 20:22 - 2017-06-20 01:59 - 001674240 _____ (Microsoft Corporation) C:\Windows\system32\wpncore.dll
2017-07-24 20:22 - 2017-06-20 01:59 - 001357824 _____ (Microsoft Corporation) C:\Windows\system32\audiosrv.dll
2017-07-24 20:22 - 2017-06-20 01:58 - 000625152 _____ (Microsoft Corporation) C:\Windows\system32\AudioEndpointBuilder.dll
2017-07-24 20:22 - 2017-06-20 01:57 - 000290816 _____ (Microsoft Corporation) C:\Windows\system32\omadmclient.exe
2017-07-24 20:22 - 2017-06-20 01:57 - 000138752 _____ (Microsoft Corporation) C:\Windows\system32\DMPushRouterCore.dll
2017-07-24 20:22 - 2017-06-20 01:56 - 000985600 _____ (Microsoft Corporation) C:\Windows\system32\TSWorkspace.dll
2017-07-24 20:22 - 2017-06-20 01:56 - 000600064 _____ (Microsoft Corporation) C:\Windows\system32\FrameServer.dll
2017-07-24 20:22 - 2017-06-20 01:56 - 000241152 _____ (Microsoft Corporation) C:\Windows\system32\wdmaud.drv
2017-07-24 20:22 - 2017-06-20 01:54 - 000059392 _____ (Microsoft Corporation) C:\Windows\system32\DmApiSetExtImplDesktop.dll
2017-07-24 20:22 - 2017-06-20 01:49 - 000899072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msctfuimanager.dll
2017-07-24 20:22 - 2017-06-20 01:49 - 000331776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleacc.dll
2017-07-24 20:22 - 2017-06-20 01:46 - 000132096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Microsoft.Bluetooth.Profiles.Gatt.Interface.dll
2017-07-24 20:22 - 2017-06-20 01:45 - 000111104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.System.Profile.RetailInfo.dll
2017-07-24 20:22 - 2017-06-20 01:45 - 000064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2017-07-24 20:22 - 2017-06-20 01:43 - 000329728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webplatstorageserver.dll
2017-07-24 20:22 - 2017-06-20 01:43 - 000173568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ClipboardServer.dll
2017-07-24 20:22 - 2017-06-20 01:43 - 000151552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wincredui.dll
2017-07-24 20:22 - 2017-06-20 01:43 - 000139776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\BluetoothApis.dll
2017-07-24 20:22 - 2017-06-20 01:43 - 000124928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll
2017-07-24 20:22 - 2017-06-20 01:43 - 000080384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2017-07-24 20:22 - 2017-06-20 01:43 - 000052224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dataclen.dll
2017-07-24 20:22 - 2017-06-20 01:42 - 000641024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certca.dll
2017-07-24 20:22 - 2017-06-20 01:42 - 000387584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Payments.dll
2017-07-24 20:22 - 2017-06-20 01:42 - 000338432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2017-07-24 20:22 - 2017-06-20 01:42 - 000266240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2017-07-24 20:22 - 2017-06-20 01:42 - 000226304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\scksp.dll
2017-07-24 20:22 - 2017-06-20 01:42 - 000121856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sendmail.dll
2017-07-24 20:22 - 2017-06-20 01:41 - 000734208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\bcastdvr.exe
2017-07-24 20:22 - 2017-06-20 01:41 - 000646656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MbaeApi.dll
2017-07-24 20:22 - 2017-06-20 01:41 - 000601088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SndVolSSO.dll
2017-07-24 20:22 - 2017-06-20 01:41 - 000433152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Internal.Bluetooth.dll
2017-07-24 20:22 - 2017-06-20 01:41 - 000201216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credprovhost.dll
2017-07-24 20:22 - 2017-06-20 01:40 - 000368128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\InstallAgentUserBroker.exe
2017-07-24 20:22 - 2017-06-20 01:40 - 000356864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ActivationManager.dll
2017-07-24 20:22 - 2017-06-20 01:40 - 000342016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certcli.dll
2017-07-24 20:22 - 2017-06-20 01:40 - 000247808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AboveLockAppHost.dll
2017-07-24 20:22 - 2017-06-20 01:40 - 000230912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\edputil.dll
2017-07-24 20:22 - 2017-06-20 01:40 - 000038400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TokenBrokerUI.dll
2017-07-24 20:22 - 2017-06-20 01:39 - 002814464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\themeui.dll
2017-07-24 20:22 - 2017-06-20 01:39 - 002671616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tquery.dll
2017-07-24 20:22 - 2017-06-20 01:39 - 000969728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Unistore.dll
2017-07-24 20:22 - 2017-06-20 01:39 - 000646144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mmsys.cpl
2017-07-24 20:22 - 2017-06-20 01:39 - 000471040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\VAN.dll
2017-07-24 20:22 - 2017-06-20 01:39 - 000312320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchProtocolHost.exe
2017-07-24 20:22 - 2017-06-20 01:38 - 001451008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UIAutomationCore.dll
2017-07-24 20:22 - 2017-06-20 01:38 - 001285120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dbghelp.dll
2017-07-24 20:22 - 2017-06-20 01:38 - 001171968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certutil.exe
2017-07-24 20:22 - 2017-06-20 01:38 - 000663040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2017-07-24 20:22 - 2017-06-20 01:38 - 000648192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SmartcardCredentialProvider.dll
2017-07-24 20:22 - 2017-06-20 01:38 - 000329728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\InstallAgent.exe
2017-07-24 20:22 - 2017-06-20 01:37 - 002008576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2017-07-24 20:22 - 2017-06-20 01:36 - 003667456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_47.dll
2017-07-24 20:22 - 2017-06-20 01:35 - 002679296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SRH.dll
2017-07-24 20:22 - 2017-06-20 01:35 - 002132480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssrch.dll
2017-07-24 20:22 - 2017-06-20 01:35 - 000050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cldapi.dll
2017-07-24 20:22 - 2017-06-20 01:34 - 004056576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MFMediaEngine.dll
2017-07-24 20:22 - 2017-06-20 01:34 - 002750464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\CertEnroll.dll
2017-07-24 20:22 - 2017-06-20 01:34 - 002211328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\InputService.dll
2017-07-24 20:22 - 2017-06-20 01:34 - 001492480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Devices.Bluetooth.dll
2017-07-24 20:22 - 2017-06-20 01:34 - 000760832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rasapi32.dll
2017-07-24 20:22 - 2017-06-20 01:31 - 000334848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PlayToDevice.dll
2017-07-24 20:22 - 2017-06-20 01:30 - 000209920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdmaud.drv
2017-07-24 20:22 - 2017-06-20 01:30 - 000157696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpchttp.dll
2017-07-24 20:22 - 2017-06-20 01:30 - 000089088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\olepro32.dll
2017-07-24 20:22 - 2017-06-20 01:28 - 000584192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apphelp.dll
2017-07-24 20:22 - 2017-06-03 07:15 - 000382368 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll
2017-07-24 20:22 - 2017-06-03 07:09 - 001003624 _____ (Microsoft Corporation) C:\Windows\system32\ucrtbase.dll
2017-07-24 20:22 - 2017-06-03 06:59 - 000311200 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll
2017-07-24 20:22 - 2017-06-03 06:14 - 000047104 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll
2017-07-24 20:22 - 2017-06-03 06:11 - 000128000 _____ (Microsoft Corporation) C:\Windows\system32\mssprxy.dll
2017-07-24 20:22 - 2017-06-03 06:11 - 000038912 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll
2017-07-24 20:22 - 2017-06-03 06:00 - 000933376 _____ (Microsoft Corporation) C:\Windows\system32\SearchIndexer.exe
2017-07-24 20:22 - 2017-06-03 05:59 - 002625024 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Logon.dll
2017-07-24 20:22 - 2017-06-03 05:57 - 000797184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchIndexer.exe
2017-07-24 20:22 - 2017-06-03 05:54 - 002341376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll
2017-07-24 20:22 - 2017-05-20 05:43 - 004672848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfcore.dll
2017-07-24 20:22 - 2017-05-20 05:20 - 000807424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\StoreAgent.dll
2017-07-24 20:22 - 2017-05-20 05:16 - 000899584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\twinui.appcore.dll
2017-07-24 20:22 - 2017-05-20 05:15 - 002088960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MapGeocoder.dll
2017-07-24 20:22 - 2017-05-20 03:56 - 000712608 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgmms2.sys
2017-07-24 20:22 - 2017-05-20 03:56 - 000370928 _____ (Microsoft Corporation) C:\Windows\system32\SystemSettingsAdminFlows.exe
2017-07-24 20:22 - 2017-05-20 03:52 - 004709528 _____ (Microsoft Corporation) C:\Windows\system32\mfcore.dll
2017-07-24 20:22 - 2017-05-20 03:00 - 001078272 _____ (Microsoft Corporation) C:\Windows\system32\StoreAgent.dll
2017-07-24 20:22 - 2017-05-20 02:59 - 001141760 _____ (Microsoft Corporation) C:\Windows\system32\MapsStore.dll
2017-07-24 20:22 - 2017-05-20 02:58 - 003135488 _____ (Microsoft Corporation) C:\Windows\system32\MapGeocoder.dll
2017-07-24 20:22 - 2017-05-20 02:58 - 001046016 _____ (Microsoft Corporation) C:\Windows\system32\comdlg32.dll
2017-07-24 20:22 - 2017-05-20 02:52 - 000476160 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Core.TextInput.dll
2017-07-24 20:22 - 2017-04-27 21:57 - 003116184 _____ (Microsoft Corporation) C:\Windows\system32\combase.dll
2017-07-24 20:22 - 2017-04-27 21:08 - 000457728 _____ (Microsoft Corporation) C:\Windows\system32\webplatstorageserver.dll
2017-07-24 20:22 - 2017-04-19 03:15 - 000232960 _____ (Microsoft Corporation) C:\Windows\system32\wcmcsp.dll
2017-07-24 20:22 - 2017-04-19 03:10 - 001600512 _____ (Microsoft Corporation) C:\Windows\system32\dbghelp.dll
2017-07-24 20:22 - 2017-04-13 20:37 - 000315392 _____ (Microsoft Corporation) C:\Windows\system32\NotificationObjFactory.dll
2017-07-24 20:22 - 2017-04-13 20:15 - 000282112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\VEEventDispatcher.dll
2017-07-24 20:22 - 2017-04-13 20:13 - 000354304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\InputSwitch.dll
2017-07-24 20:22 - 2017-03-31 21:52 - 000409504 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgmms1.sys
2017-07-24 20:22 - 2017-03-31 21:04 - 000364032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msIso.dll
2017-07-24 20:22 - 2017-03-31 21:01 - 000429568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winspool.drv
2017-07-24 20:22 - 2017-03-31 20:58 - 000433664 _____ (Microsoft Corporation) C:\Windows\system32\msIso.dll
2017-07-24 20:21 - 2017-07-07 04:27 - 001147288 _____ (Microsoft Corporation) C:\Windows\system32\hvix64.exe
2017-07-24 20:21 - 2017-07-07 04:27 - 001024928 _____ (Microsoft Corporation) C:\Windows\system32\hvax64.exe
2017-07-24 20:21 - 2017-07-07 04:27 - 000965024 _____ (Microsoft Corporation) C:\Windows\system32\hvloader.efi
2017-07-24 20:21 - 2017-07-07 04:27 - 000821664 _____ (Microsoft Corporation) C:\Windows\system32\hvloader.exe
2017-07-24 20:21 - 2017-07-07 04:20 - 000923040 _____ (Microsoft Corporation) C:\Windows\system32\CoreMessaging.dll
2017-07-24 20:21 - 2017-07-07 04:13 - 000872472 _____ (Microsoft Corporation) C:\Windows\system32\ClipSVC.dll
2017-07-24 20:21 - 2017-07-07 04:13 - 000554392 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\USBHUB3.SYS
2017-07-24 20:21 - 2017-07-07 04:13 - 000147800 _____ (Microsoft Corporation) C:\Windows\system32\Clipc.dll
2017-07-24 20:21 - 2017-07-07 04:08 - 001854880 _____ (Microsoft Corporation) C:\Windows\system32\AppVEntVirtualization.dll
2017-07-24 20:21 - 2017-07-07 04:08 - 001693600 _____ (Microsoft Corporation) C:\Windows\system32\AppVIntegration.dll
2017-07-24 20:21 - 2017-07-07 04:08 - 001458584 _____ (Microsoft Corporation) C:\Windows\system32\AppVEntSubsystemController.dll
2017-07-24 20:21 - 2017-07-07 04:08 - 001100704 _____ (Microsoft Corporation) C:\Windows\system32\AppVPolicy.dll
2017-07-24 20:21 - 2017-07-07 04:08 - 000992672 _____ (Microsoft Corporation) C:\Windows\system32\AppVManifest.dll
2017-07-24 20:21 - 2017-07-07 04:08 - 000848280 _____ (Microsoft Corporation) C:\Windows\system32\AppVOrchestration.dll
2017-07-24 20:21 - 2017-07-07 04:08 - 000846752 _____ (Microsoft Corporation) C:\Windows\system32\AppVClient.exe
2017-07-24 20:21 - 2017-07-07 04:08 - 000844704 _____ (Microsoft Corporation) C:\Windows\system32\AppVEntStreamingManager.dll
2017-07-24 20:21 - 2017-07-07 04:08 - 000774560 _____ (Microsoft Corporation) C:\Windows\system32\AppVReporting.dll
2017-07-24 20:21 - 2017-07-07 04:08 - 000699808 _____ (Microsoft Corporation) C:\Windows\system32\AppVCatalog.dll
2017-07-24 20:21 - 2017-07-07 04:08 - 000672672 _____ (Microsoft Corporation) C:\Windows\system32\AppVPublishing.dll
2017-07-24 20:21 - 2017-07-07 04:08 - 000506776 _____ (Microsoft Corporation) C:\Windows\system32\TransportDSA.dll
2017-07-24 20:21 - 2017-07-07 04:08 - 000399264 _____ (Microsoft Corporation) C:\Windows\system32\AppVScripting.dll
2017-07-24 20:21 - 2017-07-07 03:22 - 000520704 _____ (Microsoft Corporation) C:\Windows\system32\daxexec.dll
2017-07-24 20:21 - 2017-06-20 03:15 - 000233376 _____ (Microsoft Corporation) C:\Windows\system32\aepic.dll
2017-07-24 20:21 - 2017-06-20 03:06 - 000279968 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\msiscsi.sys
2017-07-24 20:21 - 2017-06-20 03:03 - 000179608 _____ (Microsoft Corporation) C:\Windows\system32\CloudExperienceHostUser.dll
2017-07-24 20:21 - 2017-06-20 03:03 - 000102312 _____ (Microsoft Corporation) C:\Windows\system32\CredentialUIBroker.exe
2017-07-24 20:21 - 2017-06-20 03:02 - 000426912 _____ (Microsoft Corporation) C:\Windows\system32\CloudExperienceHostCommon.dll
2017-07-24 20:21 - 2017-06-20 02:13 - 000216064 _____ (Microsoft Corporation) C:\Windows\system32\Microsoft.Bluetooth.Profiles.Gatt.Interface.dll
2017-07-24 20:21 - 2017-06-20 02:12 - 000086528 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hdaudbus.sys
2017-07-24 20:21 - 2017-06-20 02:10 - 000778240 _____ (Microsoft Corporation) C:\Windows\system32\DolbyHrtfEnc.dll
2017-07-24 20:21 - 2017-06-20 02:10 - 000189440 _____ (Microsoft Corporation) C:\Windows\system32\BluetoothApis.dll
2017-07-24 20:21 - 2017-06-20 02:07 - 000916992 _____ (Microsoft Corporation) C:\Windows\system32\bcastdvr.exe
2017-07-24 20:21 - 2017-06-20 02:05 - 000585216 _____ (Microsoft Corporation) C:\Windows\system32\AppReadiness.dll
2017-07-24 20:21 - 2017-06-20 02:04 - 000899072 _____ (Microsoft Corporation) C:\Windows\system32\SmartcardCredentialProvider.dll
2017-07-24 20:21 - 2017-06-20 02:02 - 003204096 _____ (Microsoft Corporation) C:\Windows\system32\Microsoft.Bluetooth.Profiles.Gatt.dll
2017-07-24 20:21 - 2017-06-03 07:15 - 001596600 _____ (Microsoft Corporation) C:\Windows\system32\gdi32full.dll
2017-07-24 20:21 - 2017-06-03 07:10 - 000130464 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tm.sys
2017-07-24 20:21 - 2017-06-03 07:07 - 000119712 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tdx.sys
2017-07-24 20:21 - 2017-06-03 06:59 - 001409048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32full.dll
2017-07-24 20:21 - 2017-06-03 06:59 - 000259400 _____ (Microsoft Corporation) C:\Windows\system32\MusNotifyIcon.exe
2017-07-24 20:21 - 2017-06-03 06:58 - 000660384 _____ (Microsoft Corporation) C:\Windows\system32\comctl32.dll
2017-07-24 20:21 - 2017-06-03 06:26 - 000266640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\capauthz.dll
2017-07-24 20:21 - 2017-06-03 06:23 - 000573856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\comctl32.dll
2017-07-24 20:21 - 2017-06-03 06:14 - 000142848 _____ (Microsoft Corporation) C:\Windows\system32\dwmredir.dll
2017-07-24 20:21 - 2017-06-03 06:14 - 000099328 _____ (Microsoft Corporation) C:\Windows\system32\utcutil.dll
2017-07-24 20:21 - 2017-06-03 06:12 - 000119296 _____ (Microsoft Corporation) C:\Windows\system32\UserDataTimeUtil.dll
2017-07-24 20:21 - 2017-06-03 06:11 - 000052736 _____ (Microsoft Corporation) C:\Windows\system32\musdialoghandlers.dll
2017-07-24 20:21 - 2017-06-03 06:11 - 000002560 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2017-07-24 20:21 - 2017-06-03 06:10 - 000102400 _____ (Microsoft Corporation) C:\Windows\system32\MusNotificationUx.exe
2017-07-24 20:21 - 2017-06-03 06:10 - 000076800 _____ (Microsoft Corporation) C:\Windows\system32\DeviceCredentialDeployment.exe
2017-07-24 20:21 - 2017-06-03 06:09 - 000271872 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Security.Authentication.Identity.Provider.dll
2017-07-24 20:21 - 2017-06-03 06:09 - 000221184 _____ (Microsoft Corporation) C:\Windows\system32\devicengccredprov.dll
2017-07-24 20:21 - 2017-06-03 06:09 - 000094720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UserDataTimeUtil.dll
2017-07-24 20:21 - 2017-06-03 06:07 - 000778240 _____ C:\Windows\system32\MBR2GPT.EXE
2017-07-24 20:21 - 2017-06-03 06:07 - 000002560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll
2017-07-24 20:21 - 2017-06-03 06:06 - 000551936 _____ (Microsoft Corporation) C:\Windows\system32\TpmCoreProvisioning.dll
2017-07-24 20:21 - 2017-06-03 06:05 - 000198656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Security.Authentication.Identity.Provider.dll
2017-07-24 20:21 - 2017-06-03 06:05 - 000169984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\devicengccredprov.dll
2017-07-24 20:21 - 2017-06-03 06:04 - 000805888 _____ (Microsoft Corporation) C:\Windows\system32\ieproxy.dll
2017-07-24 20:21 - 2017-06-03 06:03 - 000467456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TpmCoreProvisioning.dll
2017-07-24 20:21 - 2017-06-03 06:01 - 006726656 _____ (Microsoft Corporation) C:\Windows\system32\mspaint.exe
2017-07-24 20:21 - 2017-06-03 06:00 - 000358400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieproxy.dll
2017-07-24 20:21 - 2017-06-03 05:59 - 000975360 _____ (Microsoft Corporation) C:\Windows\HelpPane.exe
2017-07-24 20:21 - 2017-06-03 05:58 - 002516480 _____ (Microsoft Corporation) C:\Windows\system32\diagtrack.dll
2017-07-24 20:21 - 2017-06-03 05:58 - 001046016 _____ (Microsoft Corporation) C:\Windows\system32\ngcsvc.dll
2017-07-24 20:21 - 2017-06-03 05:58 - 000827392 _____ (Microsoft Corporation) C:\Windows\system32\win32spl.dll
2017-07-24 20:21 - 2017-06-03 05:57 - 006535168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mspaint.exe
2017-07-24 20:21 - 2017-06-03 05:54 - 000794112 _____ (Microsoft Corporation) C:\Windows\system32\pwcreator.exe
2017-07-24 20:21 - 2017-05-20 06:13 - 001333136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msctf.dll
2017-07-24 20:21 - 2017-05-20 05:55 - 000606960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleaut32.dll
2017-07-24 20:21 - 2017-05-20 05:47 - 001474800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.ApplicationModel.Store.dll
2017-07-24 20:21 - 2017-05-20 05:46 - 001266544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\twinapi.appcore.dll
2017-07-24 20:21 - 2017-05-20 05:44 - 000519680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AppXDeploymentClient.dll
2017-07-24 20:21 - 2017-05-20 05:43 - 002424016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfmp4srcsnk.dll
2017-07-24 20:21 - 2017-05-20 05:43 - 001455592 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfplat.dll
2017-07-24 20:21 - 2017-05-20 05:29 - 000584192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UIRibbonRes.dll
2017-07-24 20:21 - 2017-05-20 05:27 - 000141824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\smartscreenps.dll
2017-07-24 20:21 - 2017-05-20 05:26 - 000059904 _____ C:\Windows\SysWOW64\xboxgipsynthetic.dll
2017-07-24 20:21 - 2017-05-20 05:26 - 000025088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\odbcconf.dll
2017-07-24 20:21 - 2017-05-20 05:25 - 000826368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\NPSMDesktopProvider.dll
2017-07-24 20:21 - 2017-05-20 05:25 - 000174080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Web.Diagnostics.dll
2017-07-24 20:21 - 2017-05-20 05:22 - 001292288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MSVPXENC.dll
2017-07-24 20:21 - 2017-05-20 05:22 - 000754176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MessagingDataModel2.dll
2017-07-24 20:21 - 2017-05-20 05:22 - 000394240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DictationManager.dll
2017-07-24 20:21 - 2017-05-20 05:21 - 001984000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DeviceFlows.DataModel.dll
2017-07-24 20:21 - 2017-05-20 05:21 - 000476672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\OneDriveSettingSyncProvider.dll
2017-07-24 20:21 - 2017-05-20 05:21 - 000444928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.System.Launcher.dll
2017-07-24 20:21 - 2017-05-20 05:17 - 000909312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SettingSyncCore.dll
2017-07-24 20:21 - 2017-05-20 05:14 - 001035264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ShareHost.dll
2017-07-24 20:21 - 2017-05-20 05:11 - 001536512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Immersive.dll
2017-07-24 20:21 - 2017-05-20 05:10 - 000332800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Devices.Midi.dll
2017-07-24 20:21 - 2017-05-20 05:10 - 000128000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\NPSM.dll
2017-07-24 20:21 - 2017-05-20 05:08 - 000174080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RstrtMgr.dll
2017-07-24 20:21 - 2017-05-20 04:08 - 001459728 _____ (Microsoft Corporation) C:\Windows\system32\msctf.dll
2017-07-24 20:21 - 2017-05-20 04:03 - 000777400 _____ (Microsoft Corporation) C:\Windows\system32\oleaut32.dll
2017-07-24 20:21 - 2017-05-20 03:59 - 000112544 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dam.sys
2017-07-24 20:21 - 2017-05-20 03:55 - 001911752 _____ (Microsoft Corporation) C:\Windows\system32\Windows.ApplicationModel.Store.dll
2017-07-24 20:21 - 2017-05-20 03:55 - 001506712 _____ (Microsoft Corporation) C:\Windows\system32\twinapi.appcore.dll
2017-07-24 20:21 - 2017-05-20 03:55 - 000961952 _____ (Microsoft Corporation) C:\Windows\system32\efscore.dll
2017-07-24 20:21 - 2017-05-20 03:54 - 000546208 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\storport.sys
2017-07-24 20:21 - 2017-05-20 03:54 - 000144288 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\storahci.sys
2017-07-24 20:21 - 2017-05-20 03:53 - 000363424 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fastfat.sys
2017-07-24 20:21 - 2017-05-20 03:52 - 001700408 _____ (Microsoft Corporation) C:\Windows\system32\mfplat.dll
2017-07-24 20:21 - 2017-05-20 03:51 - 002604256 _____ (Microsoft Corporation) C:\Windows\system32\mfmp4srcsnk.dll
2017-07-24 20:21 - 2017-05-20 03:48 - 000387928 _____ (Microsoft Corporation) C:\Windows\system32\wmpps.dll
2017-07-24 20:21 - 2017-05-20 03:10 - 000809472 _____ (Microsoft Corporation) C:\Windows\system32\SecurityHealthSSO.dll
2017-07-24 20:21 - 2017-05-20 03:10 - 000584192 _____ (Microsoft Corporation) C:\Windows\system32\UIRibbonRes.dll
2017-07-24 20:21 - 2017-05-20 03:10 - 000088576 _____ (Microsoft Corporation) C:\Windows\system32\winsrvext.dll
2017-07-24 20:21 - 2017-05-20 03:10 - 000027136 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksthunk.sys
2017-07-24 20:21 - 2017-05-20 03:09 - 000209408 _____ (Microsoft Corporation) C:\Windows\system32\smartscreenps.dll
2017-07-24 20:21 - 2017-05-20 03:08 - 000086016 _____ C:\Windows\system32\xboxgipsynthetic.dll
2017-07-24 20:21 - 2017-05-20 03:08 - 000029696 _____ (Microsoft Corporation) C:\Windows\system32\odbcconf.dll
2017-07-24 20:21 - 2017-05-20 03:08 - 000013312 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rootmdm.sys
2017-07-24 20:21 - 2017-05-20 03:07 - 000133120 _____ (Microsoft Corporation) C:\Windows\system32\XblGameSaveExt.dll
2017-07-24 20:21 - 2017-05-20 03:07 - 000015872 _____ (Microsoft Corporation) C:\Windows\system32\snmptrap.exe
2017-07-24 20:21 - 2017-05-20 03:06 - 000866816 _____ (Microsoft Corporation) C:\Windows\system32\NPSMDesktopProvider.dll
2017-07-24 20:21 - 2017-05-20 03:06 - 000232448 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Web.Diagnostics.dll
2017-07-24 20:21 - 2017-05-20 03:06 - 000192512 _____ (Microsoft Corporation) C:\Windows\system32\Windows.SharedPC.AccountManager.dll
2017-07-24 20:21 - 2017-05-20 03:03 - 000491520 _____ (Microsoft Corporation) C:\Windows\system32\SettingsHandlers_Display.dll
2017-07-24 20:21 - 2017-05-20 03:02 - 000601088 _____ (Microsoft Corporation) C:\Windows\system32\Windows.System.Launcher.dll
2017-07-24 20:21 - 2017-05-20 03:01 - 002347520 _____ (Microsoft Corporation) C:\Windows\system32\DeviceFlows.DataModel.dll
2017-07-24 20:21 - 2017-05-20 03:01 - 000970240 _____ (Microsoft Corporation) C:\Windows\system32\cdpsvc.dll
2017-07-24 20:21 - 2017-05-20 03:01 - 000586240 _____ (Microsoft Corporation) C:\Windows\system32\OneDriveSettingSyncProvider.dll
2017-07-24 20:21 - 2017-05-20 03:00 - 001067008 _____ (Microsoft Corporation) C:\Windows\system32\XboxNetApiSvc.dll
2017-07-24 20:21 - 2017-05-20 02:59 - 001028608 _____ (Microsoft Corporation) C:\Windows\system32\modernexecserver.dll
2017-07-24 20:21 - 2017-05-20 02:59 - 000972800 _____ (Microsoft Corporation) C:\Windows\system32\sysmain.dll
2017-07-24 20:21 - 2017-05-20 02:58 - 000909824 _____ (Microsoft Corporation) C:\Windows\system32\ISM.dll
2017-07-24 20:21 - 2017-05-20 02:56 - 002730496 _____ (Microsoft Corporation) C:\Windows\system32\smartscreen.exe
2017-07-24 20:21 - 2017-05-20 02:55 - 001102848 _____ (Microsoft Corporation) C:\Windows\system32\SettingSyncCore.dll
2017-07-24 20:21 - 2017-05-20 02:52 - 000557568 _____ (Microsoft Corporation) C:\Windows\system32\wpnprv.dll
2017-07-24 20:21 - 2017-05-20 02:51 - 001706496 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Immersive.dll
2017-07-24 20:21 - 2017-05-20 02:51 - 000148480 _____ (Microsoft Corporation) C:\Windows\system32\umpo.dll
2017-07-24 20:21 - 2017-05-20 02:50 - 000439808 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.Midi.dll
2017-07-24 20:21 - 2017-05-20 02:50 - 000159744 _____ (Microsoft Corporation) C:\Windows\system32\NPSM.dll
2017-07-24 20:21 - 2017-05-20 02:48 - 002438656 _____ (Microsoft Corporation) C:\Windows\system32\ResetEngine.dll
2017-07-24 20:21 - 2017-05-20 02:48 - 000061952 _____ (Microsoft Corporation) C:\Windows\system32\vss_ps.dll
2017-07-24 20:21 - 2017-05-20 02:47 - 000641536 _____ (Microsoft Corporation) C:\Windows\system32\rdbui.dll
2017-07-24 20:21 - 2017-05-20 02:47 - 000199680 _____ (Microsoft Corporation) C:\Windows\system32\RstrtMgr.dll
2017-07-24 20:21 - 2017-04-27 22:16 - 000599576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll
2017-07-24 20:21 - 2017-04-27 22:09 - 001557288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll
2017-07-24 20:21 - 2017-04-27 22:06 - 000708712 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
2017-07-24 20:21 - 2017-04-27 22:03 - 000667040 _____ (Microsoft Corporation) C:\Windows\system32\ci.dll
2017-07-24 20:21 - 2017-04-27 21:58 - 001852776 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2017-07-24 20:21 - 2017-04-27 21:49 - 000072192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx
2017-07-24 20:21 - 2017-04-27 21:40 - 000799232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TokenBroker.dll
2017-07-24 20:21 - 2017-04-27 21:34 - 000891904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\autochk.exe
2017-07-24 20:21 - 2017-04-27 21:11 - 000082944 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx
2017-07-24 20:21 - 2017-04-27 21:06 - 001302528 _____ (Microsoft Corporation) C:\Windows\system32\MSVPXENC.dll
2017-07-24 20:21 - 2017-04-27 21:05 - 000224256 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2017-07-24 20:21 - 2017-04-27 21:03 - 001085440 _____ (Microsoft Corporation) C:\Windows\system32\rpcss.dll
2017-07-24 20:21 - 2017-04-27 20:58 - 001054208 _____ (Microsoft Corporation) C:\Windows\system32\TokenBroker.dll
2017-07-24 20:21 - 2017-04-27 20:54 - 000722944 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv2.sys
2017-07-24 20:21 - 2017-04-27 20:54 - 000414208 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv.sys
2017-07-24 20:21 - 2017-04-27 20:52 - 000218624 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.Streaming.ps.dll
2017-07-24 20:21 - 2017-04-19 04:06 - 000651680 _____ (Microsoft Corporation) C:\Windows\system32\SettingSyncHost.exe
2017-07-24 20:21 - 2017-04-19 04:02 - 000716440 _____ (Microsoft Corporation) C:\Windows\system32\MSVideoDSP.dll
2017-07-24 20:21 - 2017-04-19 03:16 - 000280064 _____ (Microsoft Corporation) C:\Windows\system32\WiFiDisplay.dll
2017-07-24 20:21 - 2017-04-19 03:12 - 000203776 _____ (Microsoft Corporation) C:\Windows\system32\PackageStateRoaming.dll
2017-07-24 20:21 - 2017-04-19 03:10 - 004175872 _____ (Microsoft Corporation) C:\Windows\system32\StartTileData.dll
2017-07-24 20:21 - 2017-04-19 03:10 - 002765824 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Shell.UnifiedTile.CuratedTileCollections.dll
2017-07-24 20:21 - 2017-04-19 03:07 - 001242624 _____ (Microsoft Corporation) C:\Windows\system32\SharedStartModel.dll
2017-07-24 20:21 - 2017-04-19 03:02 - 000559000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SettingSyncHost.exe
2017-07-24 20:21 - 2017-04-19 03:01 - 000050176 _____ (Microsoft Corporation) C:\Windows\system32\catsrvps.dll
2017-07-24 20:21 - 2017-04-19 02:59 - 001087488 _____ (Microsoft Corporation) C:\Windows\system32\reseteng.dll
2017-07-24 20:21 - 2017-04-19 02:37 - 000233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WiFiDisplay.dll
2017-07-24 20:21 - 2017-04-19 02:34 - 000175616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PackageStateRoaming.dll
2017-07-24 20:21 - 2017-04-13 21:35 - 000741784 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Internal.Shell.Broker.dll
2017-07-24 20:21 - 2017-04-13 21:32 - 001320352 _____ (Microsoft Corporation) C:\Windows\system32\wpx.dll
2017-07-24 20:21 - 2017-04-13 21:30 - 000105456 _____ (Microsoft Corporation) C:\Windows\system32\imagehlp.dll
2017-07-24 20:21 - 2017-04-13 20:43 - 000523296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AppResolver.dll
2017-07-24 20:21 - 2017-04-13 20:40 - 000095584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imagehlp.dll
2017-07-24 20:21 - 2017-04-13 20:39 - 000974848 _____ (Microsoft Corporation) C:\Windows\system32\mmgaserver.exe
2017-07-24 20:21 - 2017-04-13 20:39 - 000334336 _____ (Microsoft Corporation) C:\Windows\system32\wc_storage.dll
2017-07-24 20:21 - 2017-04-13 20:39 - 000155136 _____ (Microsoft Corporation) C:\Windows\system32\VEStoreEventHandlers.dll
2017-07-24 20:21 - 2017-04-13 20:38 - 000251904 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Gaming.Preview.dll
2017-07-24 20:21 - 2017-04-13 20:37 - 000301056 _____ (Microsoft Corporation) C:\Windows\system32\EnterpriseAppMgmtSvc.dll
2017-07-24 20:21 - 2017-04-13 20:35 - 001433600 _____ (Microsoft Corporation) C:\Windows\system32\SystemSettings.Handlers.dll
2017-07-24 20:21 - 2017-04-13 20:35 - 000257024 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2017-07-24 20:21 - 2017-04-13 20:33 - 001269760 _____ (Microsoft Corporation) C:\Windows\system32\enterprisecsps.dll
2017-07-24 20:21 - 2017-04-13 20:31 - 001611776 _____ (Microsoft Corporation) C:\Windows\system32\SpeechPal.dll
2017-07-24 20:21 - 2017-04-13 20:31 - 000673280 _____ (Microsoft Corporation) C:\Windows\system32\LockAppBroker.dll
2017-07-24 20:21 - 2017-04-13 20:29 - 001583616 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2017-07-24 20:21 - 2017-04-13 20:29 - 000647168 _____ (Microsoft Corporation) C:\Windows\system32\RDXService.dll
2017-07-24 20:21 - 2017-04-13 20:26 - 001257472 _____ (Microsoft Corporation) C:\Windows\system32\wpnapps.dll
2017-07-24 20:21 - 2017-04-13 20:25 - 000750080 _____ (Microsoft Corporation) C:\Windows\system32\StorSvc.dll
2017-07-24 20:21 - 2017-04-13 20:24 - 001628160 _____ (Microsoft Corporation) C:\Windows\system32\comsvcs.dll
2017-07-24 20:21 - 2017-04-13 20:21 - 000078848 _____ (Microsoft Corporation) C:\Windows\system32\offreg.dll
2017-07-24 20:21 - 2017-04-13 20:18 - 000731136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mmgaserver.exe
2017-07-24 20:21 - 2017-04-13 20:15 - 000232448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\CloudBackupSettings.dll
2017-07-24 20:21 - 2017-04-13 20:13 - 000232960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2017-07-24 20:21 - 2017-04-13 20:08 - 001463296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2017-07-24 20:21 - 2017-04-13 20:06 - 000987648 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wpnapps.dll
2017-07-24 20:21 - 2017-04-13 20:04 - 000392704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PlayToManager.dll
2017-07-24 20:21 - 2017-04-13 20:01 - 000057856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\offreg.dll
2017-07-24 20:21 - 2017-03-31 21:28 - 000354360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\bcryptprimitives.dll
2017-07-24 20:21 - 2017-03-31 21:02 - 000252928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XpsDocumentTargetPrint.dll
2017-07-24 20:21 - 2017-03-31 20:58 - 001506816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\quartz.dll
2017-07-24 20:21 - 2017-03-31 20:56 - 001060352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XpsPrint.dll
2017-07-24 20:21 - 2017-03-31 20:55 - 000347136 _____ (Microsoft Corporation) C:\Windows\system32\XpsDocumentTargetPrint.dll
2017-07-24 20:21 - 2017-03-31 20:52 - 000081408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfmjpegdec.dll
2017-07-24 20:21 - 2017-03-31 20:52 - 000078336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\asycfilt.dll
2017-07-24 20:21 - 2017-03-31 20:50 - 001657344 _____ (Microsoft Corporation) C:\Windows\system32\XpsPrint.dll
2017-07-24 20:21 - 2017-03-31 20:50 - 001605632 _____ (Microsoft Corporation) C:\Windows\system32\quartz.dll
2017-07-24 20:21 - 2017-03-31 20:45 - 000091648 _____ (Microsoft Corporation) C:\Windows\system32\mfmjpegdec.dll
2017-07-24 20:21 - 2017-03-31 20:44 - 000087552 _____ (Microsoft Corporation) C:\Windows\system32\asycfilt.dll
2017-07-24 20:20 - 2017-06-03 07:00 - 000321376 _____ (Microsoft Corporation) C:\Windows\system32\capauthz.dll
2017-07-24 20:20 - 2017-06-03 07:00 - 000219040 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tpm.sys
2017-07-24 20:20 - 2017-06-03 06:11 - 000035840 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\BasicRender.sys
2017-07-24 20:20 - 2017-06-03 06:07 - 000197120 _____ (Microsoft Corporation) C:\Windows\system32\bcdboot.exe
2017-07-24 20:20 - 2017-06-03 05:51 - 000064512 _____ (Microsoft Corporation) C:\Windows\bfsvc.exe
2017-07-24 20:20 - 2017-05-20 04:08 - 000543648 _____ (Microsoft Corporation) C:\Windows\system32\securekernel.exe
2017-07-24 20:20 - 2017-05-20 04:07 - 000287648 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\sdbus.sys
2017-07-24 20:20 - 2017-05-20 03:58 - 000188824 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dumpsd.sys
2017-07-24 20:20 - 2017-05-20 03:55 - 000211872 _____ (Microsoft Corporation) C:\Windows\system32\browserbroker.dll
2017-07-24 20:20 - 2017-05-20 03:54 - 000730016 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\vhdmp.sys
2017-07-24 20:20 - 2017-05-20 03:53 - 000654976 _____ (Microsoft Corporation) C:\Windows\system32\AppXDeploymentClient.dll
2017-07-24 20:20 - 2017-05-20 03:07 - 000277504 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\xboxgip.sys
2017-07-24 20:20 - 2017-05-20 03:03 - 000892416 _____ (Microsoft Corporation) C:\Windows\system32\MessagingDataModel2.dll
2017-07-24 20:20 - 2017-05-20 03:03 - 000549888 _____ (Microsoft Corporation) C:\Windows\system32\DictationManager.dll
2017-07-24 20:20 - 2017-05-20 03:02 - 000616960 _____ (Microsoft Corporation) C:\Windows\system32\WindowManagement.dll
2017-07-24 20:20 - 2017-05-20 03:01 - 000149504 _____ (Microsoft Corporation) C:\Windows\system32\embeddedmodesvc.dll
2017-07-24 20:20 - 2017-05-20 02:54 - 001275904 _____ (Microsoft Corporation) C:\Windows\system32\ShareHost.dll
2017-07-24 20:20 - 2017-04-27 21:59 - 000388000 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\USBXHCI.SYS
2017-07-24 20:20 - 2017-04-27 21:59 - 000027040 _____ (Microsoft Corporation) C:\Windows\system32\browser_broker.exe
2017-07-24 20:20 - 2017-04-27 20:54 - 000970240 _____ (Microsoft Corporation) C:\Windows\system32\autochk.exe
2017-07-24 20:20 - 2017-04-19 03:18 - 000118784 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netvsc.sys
2017-07-24 20:20 - 2017-04-13 21:35 - 000673112 _____ (Microsoft Corporation) C:\Windows\system32\AppResolver.dll
2017-07-24 20:20 - 2017-04-13 21:33 - 002085280 _____ (Microsoft Corporation) C:\Windows\system32\UpdateAgent.dll
2017-07-24 20:20 - 2017-04-13 20:41 - 000164864 _____ (Microsoft Corporation) C:\Windows\system32\EnterpriseModernAppMgmtCSP.dll
2017-07-24 20:20 - 2017-04-13 20:38 - 000208896 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.AppDefaults.dll
2017-07-24 20:20 - 2017-04-13 20:37 - 000450048 _____ (Microsoft Corporation) C:\Windows\system32\bcdedit.exe
2017-07-24 20:20 - 2017-04-13 20:36 - 000524800 _____ (Microsoft Corporation) C:\Windows\system32\TileDataRepository.dll
2017-07-24 20:20 - 2017-04-13 20:36 - 000296448 _____ (Microsoft Corporation) C:\Windows\system32\CloudBackupSettings.dll
2017-07-24 20:20 - 2017-04-13 20:33 - 000864256 _____ (Microsoft Corporation) C:\Windows\system32\NotificationController.dll
2017-07-24 20:16 - 2017-07-24 20:16 - 000000000 ____H C:\Windows\system32\Drivers\Msft_User_WpdMtpDr_01_11_00.Wdf
2017-07-24 20:14 - 2017-07-24 19:41 - 000565416 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
2017-07-24 20:13 - 2017-07-24 20:14 - 000000000 ____D C:\Windows\system32\MRT
2017-07-24 20:13 - 2017-07-24 20:13 - 135225752 ____C (Microsoft Corporation) C:\Windows\system32\MRT.exe
2017-07-24 20:09 - 2017-07-24 22:14 - 000290304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\subinacl.exe
2017-07-24 20:09 - 2017-07-24 20:09 - 000000000 ____D C:\Program Files (x86)\Adware Removal Tool by TSA
2017-07-24 20:08 - 2017-07-24 20:08 - 000000000 ____D C:\Users\bruno\AppData\Local\ElevatedDiagnostics
2017-07-24 20:07 - 2017-07-24 20:07 - 000000000 ____D C:\Windows\SysWOW64\XPSViewer
2017-07-24 20:07 - 2017-07-24 20:07 - 000000000 ____D C:\Program Files\Reference Assemblies
2017-07-24 20:07 - 2017-07-24 20:07 - 000000000 ____D C:\Program Files\MSBuild
2017-07-24 20:07 - 2017-07-24 20:07 - 000000000 ____D C:\Program Files (x86)\Reference Assemblies
2017-07-24 20:07 - 2017-07-24 20:07 - 000000000 ____D C:\Program Files (x86)\MSBuild
2017-07-24 20:07 - 2017-02-10 11:26 - 001166520 _____ (Microsoft Corporation) C:\Windows\system32\PresentationNative_v0300.dll
2017-07-24 20:07 - 2017-02-10 11:26 - 000124624 _____ (Microsoft Corporation) C:\Windows\system32\PresentationCFFRasterizerNative_v0300.dll
2017-07-24 20:07 - 2017-02-10 11:26 - 000035480 _____ (Microsoft Corporation) C:\Windows\system32\TsWpfWrp.exe
2017-07-24 20:07 - 2017-02-10 11:21 - 000778936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PresentationNative_v0300.dll
2017-07-24 20:07 - 2017-02-10 11:21 - 000103120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PresentationCFFRasterizerNative_v0300.dll
2017-07-24 20:07 - 2017-02-10 11:21 - 000035480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TsWpfWrp.exe
2017-07-24 19:57 - 2017-08-04 16:56 - 000000180 _____ C:\Windows\system32\{A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat
2017-07-24 19:57 - 2017-08-04 16:56 - 000000000 __SHD C:\Users\bruno\IntelGraphicsProfiles
2017-07-24 19:57 - 2017-07-24 19:59 - 000000200 _____ C:\Windows\system32\{EC94D02F-D200-4428-9531-05AF7F9799CB}.bat
2017-07-24 19:57 - 2017-07-24 19:57 - 000000000 ____D C:\Program Files\Intel
2017-07-24 19:57 - 2017-07-24 19:57 - 000000000 ____D C:\Program Files (x86)\Intel
2017-07-24 19:57 - 2017-07-24 19:57 - 000000000 ____D C:\Intel
2017-07-24 19:57 - 2017-07-24 19:57 - 000000000 _____ C:\Windows\system32\GfxValDisplayLog.bin
2017-07-24 19:54 - 2017-08-04 16:56 - 000000000 ____D C:\Users\Todos os Usuários\NVIDIA
2017-07-24 19:54 - 2017-08-04 16:56 - 000000000 ____D C:\ProgramData\NVIDIA
2017-07-24 19:54 - 2017-07-18 20:24 - 006463608 _____ (NVIDIA Corporation) C:\Windows\system32\nvcpl.dll
2017-07-24 19:54 - 2017-07-18 20:24 - 002479040 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvc64.dll
2017-07-24 19:54 - 2017-07-18 20:24 - 001762936 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvcr.dll
2017-07-24 19:54 - 2017-07-18 20:24 - 000549312 _____ (NVIDIA Corporation) C:\Windows\system32\nv3dappshext.dll
2017-07-24 19:54 - 2017-07-18 20:24 - 000392312 _____ (NVIDIA Corporation) C:\Windows\system32\nvmctray.dll
2017-07-24 19:54 - 2017-07-18 20:24 - 000081856 _____ (NVIDIA Corporation) C:\Windows\system32\nv3dappshextr.dll
2017-07-24 19:54 - 2017-07-18 20:24 - 000069752 _____ (NVIDIA Corporation) C:\Windows\system32\nvshext.dll
2017-07-24 19:54 - 2017-07-18 19:54 - 000001951 _____ C:\Windows\NvContainerRecovery.bat
2017-07-24 19:54 - 2017-07-12 22:37 - 008095171 _____ C:\Windows\system32\nvcoproc.bin
2017-07-24 19:54 - 2017-05-19 18:07 - 000521816 _____ (Khronos Group) C:\Windows\system32\OpenCL.dll
2017-07-24 19:53 - 2017-07-25 00:04 - 000000000 ____D C:\Users\Todos os Usuários\NVIDIA Corporation
2017-07-24 19:53 - 2017-07-25 00:04 - 000000000 ____D C:\ProgramData\NVIDIA Corporation
2017-07-24 19:53 - 2017-07-25 00:04 - 000000000 ____D C:\Program Files\NVIDIA Corporation
2017-07-24 19:53 - 2017-07-25 00:04 - 000000000 ____D C:\Program Files (x86)\NVIDIA Corporation
2017-07-24 19:46 - 2013-01-15 13:13 - 017853323 _____ C:\Users\bruno\OneDrive\Documentos\Strength Training Anatomy.pdf
2017-07-24 19:46 - 2011-06-16 19:58 - 000000031 _____ C:\Users\bruno\OneDrive\Documentos\youinc.txt
2017-07-24 19:45 - 2017-08-04 16:51 - 000000000 ____D C:\Users\bruno\AppData\Local\Google
2017-07-24 19:45 - 2017-07-24 19:45 - 000000000 ____D C:\Users\bruno\AppData\Roaming\Skype
2017-07-24 19:43 - 2017-07-24 19:44 - 000000000 ____D C:\Users\bruno\AppData\Local\MicrosoftEdge
2017-07-24 19:39 - 2017-08-04 16:57 - 000000000 ___RD C:\Users\bruno\OneDrive
2017-07-24 19:39 - 2017-07-25 19:46 - 000002373 _____ C:\Users\bruno\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2017-07-24 19:39 - 2017-07-24 19:39 - 000000000 ____D C:\Users\bruno\AppData\Local\Comms
2017-07-24 19:38 - 2017-07-24 19:38 - 000000000 ____D C:\Users\Todos os Usuários\Microsoft OneDrive
2017-07-24 19:38 - 2017-07-24 19:38 - 000000000 ____D C:\ProgramData\Microsoft OneDrive
2017-07-24 19:37 - 2017-07-24 19:37 - 000000000 ____D C:\Users\bruno\AppData\Local\Publishers
2017-07-24 19:36 - 2017-08-04 16:13 - 000000000 ____D C:\Users\bruno\AppData\Local\Packages
2017-07-24 19:36 - 2017-07-24 20:42 - 000000000 __RHD C:\Users\Public\AccountPictures
2017-07-24 19:36 - 2017-07-24 19:38 - 000000000 ____D C:\Users\bruno\AppData\Local\ConnectedDevicesPlatform
2017-07-24 19:36 - 2017-07-24 19:36 - 000000000 ____D C:\Users\bruno\AppData\Roaming\Adobe
2017-07-24 19:36 - 2017-07-24 19:36 - 000000000 ____D C:\Users\bruno\AppData\Local\VirtualStore
2017-07-24 19:36 - 2017-07-24 19:36 - 000000000 ____D C:\Users\bruno\AppData\Local\TileDataLayer
2017-07-24 19:35 - 2017-07-24 19:35 - 000000000 ____D C:\Users\Todos os Usuários\USOShared
2017-07-24 19:35 - 2017-07-24 19:35 - 000000000 ____D C:\ProgramData\USOShared
2017-07-24 19:34 - 2017-08-04 16:56 - 000000000 ____D C:\Users\bruno
2017-07-24 19:34 - 2017-07-26 17:12 - 001991180 _____ C:\Windows\system32\PerfStringBackup.INI
2017-07-24 19:34 - 2017-07-24 19:34 - 000000020 ___SH C:\Users\bruno\ntuser.ini
2017-07-24 19:34 - 2017-07-24 19:34 - 000000000 _SHDL C:\Users\bruno\Modelos
2017-07-24 19:34 - 2017-07-24 19:34 - 000000000 _SHDL C:\Users\bruno\Meus Documentos
2017-07-24 19:34 - 2017-07-24 19:34 - 000000000 _SHDL C:\Users\bruno\Menu Iniciar
2017-07-24 19:34 - 2017-07-24 19:34 - 000000000 _SHDL C:\Users\bruno\Dados de Aplicativos
2017-07-24 19:34 - 2017-07-24 19:34 - 000000000 _SHDL C:\Users\bruno\Configurações Locais
2017-07-24 19:34 - 2017-07-24 19:34 - 000000000 _SHDL C:\Users\bruno\AppData\Roaming\Microsoft\Windows\Start Menu\Programas
2017-07-24 19:34 - 2017-07-24 19:34 - 000000000 _SHDL C:\Users\bruno\AppData\Local\Histórico
2017-07-24 19:34 - 2017-07-24 19:34 - 000000000 _SHDL C:\Users\bruno\AppData\Local\Dados de Aplicativos
2017-07-24 19:34 - 2017-07-24 19:34 - 000000000 _SHDL C:\Users\bruno\Ambiente de Rede
2017-07-24 19:34 - 2017-07-24 19:34 - 000000000 _SHDL C:\Users\bruno\Ambiente de Impressão
2017-07-24 19:32 - 2017-07-24 19:32 - 000000000 ____D C:\Windows\CSC
2017-07-24 19:32 - 2017-03-18 17:56 - 002233344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PrintConfig.dll
2017-07-24 19:30 - 2017-07-24 19:30 - 000000000 _SHDL C:\Users\Usuário Padrão\AppData\Roaming\Microsoft\Windows\Start Menu\Programas
2017-07-24 19:30 - 2017-07-24 19:30 - 000000000 _SHDL C:\Users\Usuário Padrão\AppData\Local\Histórico
2017-07-24 19:30 - 2017-07-24 19:30 - 000000000 _SHDL C:\Users\Usuário Padrão\AppData\Local\Dados de Aplicativos
2017-07-24 19:30 - 2017-07-24 19:30 - 000000000 _SHDL C:\Users\Usuário Padrão
2017-07-24 19:30 - 2017-07-24 19:30 - 000000000 _SHDL C:\Users\Todos os Usuários\Modelos
2017-07-24 19:30 - 2017-07-24 19:30 - 000000000 _SHDL C:\Users\Todos os Usuários\Menu Iniciar
2017-07-24 19:30 - 2017-07-24 19:30 - 000000000 _SHDL C:\Users\Todos os Usuários\Documentos
2017-07-24 19:30 - 2017-07-24 19:30 - 000000000 _SHDL C:\Users\Todos os Usuários\Dados de Aplicativos
2017-07-24 19:30 - 2017-07-24 19:30 - 000000000 _SHDL C:\Users\Todos os Usuários
2017-07-24 19:30 - 2017-07-24 19:30 - 000000000 _SHDL C:\Users\Default\Modelos
2017-07-24 19:30 - 2017-07-24 19:30 - 000000000 _SHDL C:\Users\Default\Meus Documentos
2017-07-24 19:30 - 2017-07-24 19:30 - 000000000 _SHDL C:\Users\Default\Menu Iniciar
2017-07-24 19:30 - 2017-07-24 19:30 - 000000000 _SHDL C:\Users\Default\Dados de Aplicativos
2017-07-24 19:30 - 2017-07-24 19:30 - 000000000 _SHDL C:\Users\Default\Configurações Locais
2017-07-24 19:30 - 2017-07-24 19:30 - 000000000 _SHDL C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programas
2017-07-24 19:30 - 2017-07-24 19:30 - 000000000 _SHDL C:\Users\Default\AppData\Local\Histórico
2017-07-24 19:30 - 2017-07-24 19:30 - 000000000 _SHDL C:\Users\Default\AppData\Local\Dados de Aplicativos
2017-07-24 19:30 - 2017-07-24 19:30 - 000000000 _SHDL C:\Users\Default\Ambiente de Rede
2017-07-24 19:30 - 2017-07-24 19:30 - 000000000 _SHDL C:\Users\Default\Ambiente de Impressão
2017-07-24 19:30 - 2017-07-24 19:30 - 000000000 _SHDL C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programas
2017-07-24 19:30 - 2017-07-24 19:30 - 000000000 _SHDL C:\Users\Default User\AppData\Local\Histórico
2017-07-24 19:30 - 2017-07-24 19:30 - 000000000 _SHDL C:\Users\Default User\AppData\Local\Dados de Aplicativos
2017-07-24 19:30 - 2017-07-24 19:30 - 000000000 _SHDL C:\ProgramData\Modelos
2017-07-24 19:30 - 2017-07-24 19:30 - 000000000 _SHDL C:\ProgramData\Microsoft\Windows\Start Menu\Programas
2017-07-24 19:30 - 2017-07-24 19:30 - 000000000 _SHDL C:\ProgramData\Menu Iniciar
2017-07-24 19:30 - 2017-07-24 19:30 - 000000000 _SHDL C:\ProgramData\Documentos
2017-07-24 19:30 - 2017-07-24 19:30 - 000000000 _SHDL C:\ProgramData\Dados de Aplicativos
2017-07-24 19:30 - 2017-07-24 19:30 - 000000000 _SHDL C:\Program Files\Common Files\Sistema
2017-07-24 19:30 - 2017-07-24 19:30 - 000000000 _SHDL C:\Program Files\Arquivos Comuns
2017-07-24 19:30 - 2017-07-24 19:30 - 000000000 _SHDL C:\Documents and Settings
2017-07-24 19:30 - 2017-07-24 19:30 - 000000000 _SHDL C:\Arquivos de Programas
2017-07-24 19:26 - 2017-07-24 19:26 - 000000000 ____H C:\Windows\system32\Drivers\Msft_User_WpdFs_01_11_00.Wdf
2017-07-24 19:25 - 2017-08-04 16:56 - 000000006 ____H C:\Windows\Tasks\SA.DAT
2017-07-24 19:25 - 2017-08-04 16:52 - 000000000 ____D C:\Windows\Panther
2017-07-24 19:25 - 2017-08-04 14:16 - 000000000 ____D C:\Windows\system32\SleepStudy
2017-07-24 19:25 - 2017-07-25 13:09 - 000299768 _____ C:\Windows\system32\FNTCACHE.DAT
2017-07-24 19:25 - 2017-07-24 19:25 - 000000000 ____D C:\Windows\ServiceProfiles
2017-07-24 19:19 - 2017-07-24 19:19 - 000000000 ____D C:\Windows.old

==================== Um Mês Modificados arquivos e pastas ========

(Se uma entrada for incluída na fixlist, o arquivo/pasta será movido.)

2017-08-04 17:01 - 2017-03-18 18:03 - 000000000 ____D C:\Windows\AppReadiness
2017-08-04 16:55 - 2017-03-18 08:40 - 001572864 _____ C:\Windows\system32\config\BBI
2017-08-04 16:52 - 2017-03-18 18:01 - 000000000 ____D C:\Windows\INF
2017-08-04 16:13 - 2017-03-18 18:03 - 000000000 ___HD C:\Program Files\WindowsApps
2017-07-29 13:19 - 2017-03-18 18:03 - 000000000 ____D C:\Windows\rescache
2017-07-26 17:12 - 2017-03-20 00:57 - 000830696 _____ C:\Windows\system32\prfh0416.dat
2017-07-26 17:12 - 2017-03-20 00:57 - 000192018 _____ C:\Windows\system32\prfc0416.dat
2017-07-25 02:22 - 2017-03-18 18:03 - 000000000 ____D C:\Users\Todos os Usuários\regid.1991-06.com.microsoft
2017-07-25 02:22 - 2017-03-18 18:03 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2017-07-25 02:22 - 2017-03-18 18:03 - 000000000 ____D C:\Program Files\Common Files\microsoft shared
2017-07-25 02:20 - 2017-03-18 18:03 - 000000167 _____ C:\Windows\win.ini
2017-07-25 02:20 - 2017-03-18 18:03 - 000000000 ____D C:\Program Files\Common Files\System
2017-07-24 20:41 - 2017-03-18 18:03 - 000000000 ____D C:\Windows\appcompat
2017-07-24 20:38 - 2017-03-18 18:03 - 000000000 ___SD C:\Windows\SysWOW64\F12
2017-07-24 20:38 - 2017-03-18 18:03 - 000000000 ___SD C:\Windows\system32\F12
2017-07-24 20:38 - 2017-03-18 18:03 - 000000000 ___RD C:\Windows\ImmersiveControlPanel
2017-07-24 20:38 - 2017-03-18 18:03 - 000000000 ____D C:\Windows\SysWOW64\Dism
2017-07-24 20:38 - 2017-03-18 18:03 - 000000000 ____D C:\Windows\system32\WinBioPlugIns
2017-07-24 20:38 - 2017-03-18 18:03 - 000000000 ____D C:\Windows\system32\oobe
2017-07-24 20:38 - 2017-03-18 18:03 - 000000000 ____D C:\Windows\system32\migwiz
2017-07-24 20:38 - 2017-03-18 18:03 - 000000000 ____D C:\Windows\system32\appraiser
2017-07-24 20:38 - 2017-03-18 18:03 - 000000000 ____D C:\Windows\ShellExperiences
2017-07-24 20:38 - 2017-03-18 18:03 - 000000000 ____D C:\Windows\Provisioning
2017-07-24 20:38 - 2017-03-18 18:03 - 000000000 ____D C:\Windows\PolicyDefinitions
2017-07-24 20:38 - 2017-03-18 18:03 - 000000000 ____D C:\Program Files\Windows Photo Viewer
2017-07-24 20:38 - 2017-03-18 18:03 - 000000000 ____D C:\Program Files\Windows Defender
2017-07-24 20:38 - 2017-03-18 18:03 - 000000000 ____D C:\Program Files (x86)\Windows Photo Viewer
2017-07-24 20:38 - 2017-03-18 18:03 - 000000000 ____D C:\Program Files (x86)\Windows Defender
2017-07-24 20:38 - 2017-03-18 08:40 - 000000000 ____D C:\Windows\system32\Dism
2017-07-24 20:25 - 2017-03-18 17:51 - 000000000 ____D C:\Windows\CbsTemp
2017-07-24 20:07 - 2017-03-18 18:03 - 000000000 ____D C:\Windows\SysWOW64\MUI
2017-07-24 20:07 - 2017-03-18 18:03 - 000000000 ____D C:\Windows\system32\MUI
2017-07-24 19:54 - 2017-03-18 18:03 - 000000000 ____D C:\Windows\Help
2017-07-24 19:35 - 2017-03-18 18:03 - 000000000 ____D C:\Users\Todos os Usuários\USOPrivate
2017-07-24 19:35 - 2017-03-18 18:03 - 000000000 ____D C:\ProgramData\USOPrivate
2017-07-24 19:32 - 2017-03-18 18:03 - 000000000 ____D C:\Windows\system32\WinBioDatabase
2017-07-24 19:32 - 2017-03-18 18:03 - 000000000 ____D C:\Windows\system32\spool
2017-07-24 19:32 - 2017-03-18 18:03 - 000000000 ____D C:\Windows\system32\FxsTmp
2017-07-24 19:30 - 2017-03-18 18:03 - 000000000 ____D C:\Program Files\Windows NT
2017-07-24 19:28 - 2017-03-18 08:40 - 000000000 ____D C:\Windows\system32\Sysprep
2017-07-24 19:26 - 2017-03-20 00:59 - 000000000 ____D C:\Windows\HoloShell
2017-07-24 19:26 - 2017-03-18 18:03 - 000000000 ___RD C:\Windows\PrintDialog
2017-07-24 19:26 - 2017-03-18 18:03 - 000000000 ___RD C:\Windows\MiracastView
2017-07-24 19:26 - 2017-03-18 08:40 - 000032768 _____ C:\Windows\system32\config\ELAM
2017-07-24 19:24 - 2017-03-18 18:03 - 000028672 _____ C:\Windows\system32\config\BCD-Template
2017-07-18 21:40 - 2017-05-19 18:03 - 001615448 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdagenco6420103.dll
2017-07-18 21:40 - 2017-05-19 18:03 - 000218712 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvhda64v.sys
2017-07-18 21:40 - 2017-05-19 17:47 - 004210032 _____ (NVIDIA Corporation) C:\Windows\system32\nvapi64.dll
2017-07-18 21:40 - 2017-05-19 14:22 - 000046463 _____ C:\Windows\system32\nvinfo.pb

==================== Arquivos na raiz de alguns diretórios =======

2017-07-26 14:30 - 2017-07-26 14:30 - 000000000 ____H () C:\ProgramData\DP45977C.lfl

Alguns arquivos em TEMP:
====================
2017-07-25 21:42 - 2017-08-04 03:58 - 000000000 _____ () C:\Users\bruno\AppData\Local\Temp\33968ec9ed0abde4ce703a532c809fc9.dll
2017-07-25 21:43 - 2017-08-04 01:38 - 000000044 _____ () C:\Users\bruno\AppData\Local\Temp\dc930d09d6333096f155a6c80f8c77b0.dll
2017-07-24 19:54 - 2017-05-01 17:14 - 000869200 _____ (NVIDIA Corporation) C:\Users\bruno\AppData\Local\Temp\nvSCPAPI64.dll
2017-07-25 00:02 - 2017-05-01 17:14 - 000367552 _____ (NVIDIA Corporation) C:\Users\bruno\AppData\Local\Temp\nvStInst.exe
2017-07-24 21:20 - 2017-08-04 14:18 - 000492544 _____ () C:\Users\bruno\AppData\Local\Temp\s3.exe

==================== Bamital & volsnap ======================

(Não há correção automática para arquivos que não passaram na verificação.)

C:\Windows\system32\winlogon.exe => O arquivo é assinado digitalmente
C:\Windows\system32\wininit.exe => O arquivo é assinado digitalmente
C:\Windows\explorer.exe => O arquivo é assinado digitalmente
C:\Windows\SysWOW64\explorer.exe => O arquivo é assinado digitalmente
C:\Windows\system32\svchost.exe => O arquivo é assinado digitalmente
C:\Windows\SysWOW64\svchost.exe => O arquivo é assinado digitalmente
C:\Windows\system32\services.exe => O arquivo é assinado digitalmente
C:\Windows\system32\User32.dll => O arquivo é assinado digitalmente
C:\Windows\SysWOW64\User32.dll => O arquivo é assinado digitalmente
C:\Windows\system32\userinit.exe => O arquivo é assinado digitalmente
C:\Windows\SysWOW64\userinit.exe => O arquivo é assinado digitalmente
C:\Windows\system32\rpcss.dll => O arquivo é assinado digitalmente
C:\Windows\system32\dnsapi.dll => O arquivo é assinado digitalmente
C:\Windows\SysWOW64\dnsapi.dll => O arquivo é assinado digitalmente
C:\Windows\system32\Drivers\volsnap.sys => O arquivo é assinado digitalmente

LastRegBack: 2017-08-04 16:19

==================== Fim de FRST.txt ============================

Addition.txt:

Spoiler

Resultado do exame Adicional Farbar Recovery Scan Tool (x64) Versão: 31-07-2017
Executado por bruno (04-08-2017 17:02:31)
Executando a partir de C:\Users\bruno\Desktop\Limpeza e manutenção
Windows 10 Pro Versão 1703 (X64) (2017-07-24 22:30:24)
Modo da Inicialização: Normal
==========================================================

==================== Contas: =============================

Administrador (S-1-5-21-3125324295-4109617892-1090203428-500 - Administrator - Disabled)
bruno (S-1-5-21-3125324295-4109617892-1090203428-1001 - Administrator - Enabled) => C:\Users\bruno
Convidado (S-1-5-21-3125324295-4109617892-1090203428-501 - Limited - Disabled)
DefaultAccount (S-1-5-21-3125324295-4109617892-1090203428-503 - Limited - Disabled)

==================== Central de Segurança ========================

(Se uma entrada for incluída na fixlist, será removida.)

AV: Avast Antivirus (Enabled - Up to date) {8EA8924E-BC81-DC44-8BB0-8BAE75D86EBF}
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AV: Malwarebytes (Enabled - Up to date) {23007AD3-69FE-687C-2629-D584AFFAF72B}
AS: Malwarebytes (Enabled - Up to date) {98619B37-4FC4-67F2-1C99-EEF6D47DBD96}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Avast Antivirus (Enabled - Up to date) {35C973AA-9ABB-D3CA-B100-B0DC0E5F2402}

==================== Programas Instalados ======================

(Somente os programas adwares com a indicação "Oculto" podem ser adicionados à fixlist para desocultá-los. Os programas adwares devem ser desinstalados manualmente.)

Adobe Acrobat Reader DC - Português (HKLM-x32\...\{AC76BA86-7AD7-1046-7B44-AC0F074E4100}) (Version: 17.009.20058 - Adobe Systems Incorporated)
Ansel (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Ansel) (Version: 384.94 - NVIDIA Corporation) Hidden
Avast Free Antivirus (HKLM-x32\...\Avast Antivirus) (Version: 17.5.2303 - AVAST Software)
Blizzard App (HKLM-x32\...\Battle.net) (Version: - Blizzard Entertainment)
CCleaner (HKLM\...\CCleaner) (Version: 5.32 - Piriform)
DAEMON Tools Lite (HKLM\...\DAEMON Tools Lite) (Version: 10.4.0.0190 - Disc Soft Ltd)
Discord (HKU\S-1-5-21-3125324295-4109617892-1090203428-1001\...\Discord) (Version: 0.0.297 - Hammer & Chisel, Inc.)
Hearthstone (HKLM-x32\...\Hearthstone) (Version: - Blizzard Entertainment)
Herramientas de corrección de Microsoft Office 2016: español (HKLM\...\{90160000-001F-0C0A-1000-0000000FF1CE}) (Version: 16.0.4266.1001 - Microsoft Corporation) Hidden
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 20.19.15.4624 - Intel Corporation)
Malwarebytes versão 3.1.2.1733 (HKLM\...\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1) (Version: 3.1.2.1733 - Malwarebytes)
Mass Effect™: Andromeda (HKLM-x32\...\{72BBCA87-9350-48BC-9E2F-6DBC1E80C993}) (Version: 1.0.0.9 - Electronic Arts)
MEmu (HKLM-x32\...\MEmu) (Version: 3.1.2.4 - Microvirt Software Technology Co. Ltd.)
Microsoft Office Professional Plus 2016 (HKLM\...\Office16.PROPLUS) (Version: 16.0.4266.1001 - Microsoft Corporation)
Microsoft OneDrive (HKU\S-1-5-21-3125324295-4109617892-1090203428-1001\...\OneDriveSetup.exe) (Version: 17.3.6943.0625 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.50907.0 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.50727 (HKLM-x32\...\{15134cb0-b767-4960-a911-f2d16ae54797}) (Version: 11.0.50727.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.50727 (HKLM-x32\...\{22154f09-719a-4619-bb71-5b3356999fbf}) (Version: 11.0.50727.1 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x64) - 14.0.23506 (HKLM-x32\...\{3ee5e5bb-b7cc-4556-8861-a00a82977d6c}) (Version: 14.0.23506.0 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.23506 (HKLM-x32\...\{23daf363-3020-4059-b3ae-dc4ad39fed19}) (Version: 14.0.23506.0 - Microsoft Corporation)
NVIDIA Driver de áudio HD 1.3.34.27 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.34.27 - NVIDIA Corporation)
NVIDIA Driver de gráficos 384.94 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 384.94 - NVIDIA Corporation)
NVIDIA Software do sistema PhysX 9.17.0524 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.17.0524 - NVIDIA Corporation)
Origin (HKLM-x32\...\Origin) (Version: 10.4.16.25850 - Electronic Arts, Inc.)
Painel de controle da NVIDIA 384.94 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.ControlPanel) (Version: 384.94 - NVIDIA Corporation) Hidden
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.8186 - Realtek Semiconductor Corp.)
Revisores de Texto do Microsoft Office 2016 – Português (Brasil) (HKLM\...\{90160000-001F-0416-1000-0000000FF1CE}) (Version: 16.0.4266.1001 - Microsoft Corporation) Hidden
RogueKiller version 12.11.8.0 (HKLM\...\8B3D7924-ED89-486B-8322-E8594065D5CB_is1) (Version: 12.11.8.0 - Adlice Software)
SafeZone Stable 3.55.2393.609 (HKLM-x32\...\SafeZone 3.55.2393.609) (Version: 3.55.2393.609 - Avast Software) Hidden
VLC media player (HKLM-x32\...\VLC media player) (Version: 2.2.6 - VideoLAN)
Vulkan Run Time Libraries 1.0.42.1 (HKLM\...\VulkanRT1.0.42.1) (Version: 1.0.42.1 - LunarG, Inc.)
WinRAR 5.40 (64-bit) (HKLM\...\WinRAR archiver) (Version: 5.40.0 - win.rar GmbH)

==================== Exame Personalizado CLSID (Whitelisted): ==========================

(Se uma entrada for incluída na fixlist, será removida do Registro. O arquivo não será movido, a menos que seja colocado separadamente.)

ShellIconOverlayIdentifiers: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2017-07-24] (AVAST Software)
ContextMenuHandlers1: [avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2017-07-24] (AVAST Software)
ContextMenuHandlers1: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2016-08-15] (Alexander Roshal)
ContextMenuHandlers1-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2016-08-15] (Alexander Roshal)
ContextMenuHandlers3: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2017-07-24] (AVAST Software)
ContextMenuHandlers3: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files (x86)\Malwarebytes\mbshlext.dll [2017-05-09] (Malwarebytes)
ContextMenuHandlers5: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} => -> Nenhum Arquivo
ContextMenuHandlers5: [igfxDTCM] -> {9B5F5829-A529-4B12-814A-E81BCB8D93FC} => C:\Windows\system32\igfxDTCM.dll [2017-03-17] (Intel Corporation)
ContextMenuHandlers5: [NvCplDesktopContext] -> {3D1975AF-48C6-4f8e-A182-BE0E08FA86A9} => C:\Windows\system32\nvshext.dll [2017-07-18] (NVIDIA Corporation)
ContextMenuHandlers6: [avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2017-07-24] (AVAST Software)
ContextMenuHandlers6: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files (x86)\Malwarebytes\mbshlext.dll [2017-05-09] (Malwarebytes)
ContextMenuHandlers6: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2016-08-15] (Alexander Roshal)
ContextMenuHandlers6-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2016-08-15] (Alexander Roshal)

==================== Tarefas Agendadas (Whitelisted) =============

(Se uma entrada for incluída na fixlist, será removida do Registro. O arquivo não será movido, a menos que seja colocado separadamente.)

Task: {167D57C3-5B7E-4DC2-AD0F-F2200596E3AB} - System32\Tasks\NvTmRepOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmRep.exe [2017-07-18] (NVIDIA Corporation)
Task: {2F72FE21-AC0C-4CD5-B728-E80BFE334773} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack2016 => C:\Program Files\Microsoft Office\Office16\msoia.exe [2015-07-31] (Microsoft Corporation)
Task: {41E9326E-B2F3-4D63-A7BF-0DD709DB0725} - System32\Tasks\NvTmRep_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmRep.exe [2017-07-18] (NVIDIA Corporation)
Task: {4FF294A1-F77A-4F2D-9586-9CB5916440C8} - System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [2017-07-18] (NVIDIA Corporation)
Task: {6D22C978-84EE-4EF6-8175-8B815F622D57} - System32\Tasks\Avast Emergency Update => C:\Program Files\AVAST Software\Avast\AvEmUpdate.exe [2017-07-24] (AVAST Software)
Task: {844EBCD8-6D53-46B8-A8C2-604D12EE228D} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2017-04-25] (Adobe Systems Incorporated)
Task: {97AEED9C-1D4F-4F9F-9787-900A09783D27} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2017-06-30] (Piriform Ltd)
Task: {A5653C03-E4C5-4913-8A16-6450F538028E} - System32\Tasks\Microsoft\Office\Office 15 Subscription Heartbeat => C:\Program Files\Common Files\Microsoft Shared\Office16\OLicenseHeartbeat.exe [2015-07-31] (Microsoft Corporation)
Task: {B010F042-8DDB-4C31-A66A-C50CBB9EE69A} - System32\Tasks\S-1-5-21-3125324295-4109617892-1090203428-1001\DataSenseLiveTileTask => C:\Windows\System32\DataUsageLiveTileTask.exe [2017-03-18] (Microsoft Corporation)
Task: {B45C0068-3B23-4251-B771-A3D349D1CA16} - System32\Tasks\SafeZone scheduled Autoupdate 1500941838 => C:\Program Files\AVAST Software\SZBrowser\launcher.exe [2017-06-13] (Avast Software)
Task: {C85C1850-4677-459A-8A7C-3F0A2A73696D} - System32\Tasks\NvTmMon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmMon.exe [2017-07-18] (NVIDIA Corporation)
Task: {D9B1E5BB-F211-4D7F-BAFA-15BCAB4020CF} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn2016 => C:\Program Files\Microsoft Office\Office16\msoia.exe [2015-07-31] (Microsoft Corporation)
Task: {FF496275-C20F-483C-BC55-5627D5E1EF0F} - System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [2017-07-18] (NVIDIA Corporation)

(Se uma entrada for incluída na fixlist, o arquivo da tarefa (.job) será movido. O arquivo que está sendo executado pela tarefa não será movido.)

==================== Atalhos & WMI ========================

(As entradas podem ser listadas para serem restauradas ou removidas.)

==================== Módulos Carregados (Whitelisted) ==============

2017-07-24 23:12 - 2017-06-27 12:06 - 002260432 _____ () C:\PROGRAM FILES (X86)\MALWAREBYTES\MwacLib.dll
2017-03-18 17:58 - 2017-03-18 17:58 - 000138000 _____ () C:\Windows\SYSTEM32\inputhost.dll
2017-03-18 17:59 - 2017-03-20 00:59 - 001731072 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll
2017-07-24 20:13 - 2017-07-24 20:14 - 000074752 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.19.820.0_x64__kzf8qxf38zg5c\SkypeHost.exe
2017-07-24 20:13 - 2017-07-24 20:14 - 000203264 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.19.820.0_x64__kzf8qxf38zg5c\SkypeBackgroundTasks.dll
2017-07-24 20:13 - 2017-07-24 20:14 - 043573248 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.19.820.0_x64__kzf8qxf38zg5c\SkyWrap.dll
2017-07-24 20:13 - 2017-07-24 20:14 - 002435584 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.19.820.0_x64__kzf8qxf38zg5c\skypert.dll
2017-07-24 21:15 - 2017-07-24 21:15 - 000170224 _____ () C:\Program Files\AVAST Software\Avast\JsonRpcServer.dll
2017-07-24 21:15 - 2017-07-24 21:15 - 001065936 _____ () C:\Program Files\AVAST Software\Avast\AvChrome.dll
2017-07-24 21:15 - 2017-07-24 21:15 - 067109376 _____ () C:\Program Files\AVAST Software\Avast\libcef.dll
2017-07-24 21:15 - 2017-07-24 21:15 - 000192664 _____ () C:\Program Files\AVAST Software\Avast\event_routing_rpc.dll
2017-07-24 21:15 - 2017-07-24 21:15 - 000224256 _____ () C:\Program Files\AVAST Software\Avast\tasks_core.dll
2017-07-24 21:14 - 2017-07-24 21:14 - 000292920 _____ () C:\Program Files\AVAST Software\Avast\gaming_mode_ui.dll
2017-07-24 23:11 - 2017-01-04 13:28 - 001958912 _____ () C:\Users\bruno\AppData\Local\Discord\app-0.0.297\ffmpeg.dll
2017-07-24 23:11 - 2017-07-24 23:11 - 001082880 _____ () \\?\C:\Users\bruno\AppData\Roaming\discord\0.0.297\modules\discord_voice\discord_voice.node
2017-07-24 23:11 - 2017-07-24 23:11 - 003750400 _____ () \\?\C:\Users\bruno\AppData\Roaming\discord\0.0.297\modules\discord_voice\libdiscord.dll
2017-07-24 23:11 - 2017-07-24 23:11 - 000914432 _____ () \\?\C:\Users\bruno\AppData\Roaming\discord\0.0.297\modules\discord_utils\discord_utils.node
2017-07-24 23:11 - 2017-07-24 23:11 - 001127424 _____ () \\?\C:\Users\bruno\AppData\Roaming\discord\0.0.297\modules\discord_toaster\discord_toaster.node
2017-07-24 23:11 - 2017-01-04 13:28 - 002278912 _____ () C:\Users\bruno\AppData\Local\Discord\app-0.0.297\libglesv2.dll
2017-07-24 23:11 - 2017-01-04 13:28 - 000096768 _____ () C:\Users\bruno\AppData\Local\Discord\app-0.0.297\libegl.dll
2017-08-04 16:58 - 2017-08-04 16:58 - 000148992 _____ () \\?\C:\Users\bruno\AppData\Local\Temp\E0D1.tmp.node
2017-07-24 23:11 - 2017-07-24 23:11 - 002658296 _____ () \\?\C:\Users\bruno\AppData\Roaming\discord\0.0.297\modules\discord_rpc\discord_rpc.node
2017-07-24 23:12 - 2017-07-24 23:12 - 002665976 _____ () \\?\C:\Users\bruno\AppData\Roaming\discord\0.0.297\modules\discord_contact_import\discord_contact_import.node

==================== Alternate Data Streams (Whitelisted) =========

(Se uma entrada for incluída na fixlist, somente o ADS será removido.)

==================== Modo de Segurança (Whitelisted) ===================

(Se uma entrada for incluída na fixlist, será removida do Registro. O valor "AlternateShell" será restaurado.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMService => ""="Service"

==================== Associação (Whitelisted) ===============

(Se uma entrada for incluída na fixlist, o ítem no Registro será restaurado para o padrão ou removido.)

==================== Internet Explorer confiável/restrito ===============

(Se uma entrada for incluída na fixlist, será removida do Registro.)

==================== Hosts Conteúdo: ===============================

(Se necessário, a diretiva Hosts: pode ser incluída na fixlist para redefinir o Hosts.)

2017-03-18 18:03 - 2017-03-18 18:01 - 000000824 _____ C:\Windows\system32\Drivers\etc\hosts

==================== Outras Áreas ============================

(Atualmente não há nenhuma correção automática para esta seção.)

HKU\S-1-5-21-3125324295-4109617892-1090203428-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\bruno\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper
DNS Servers: 192.168.1.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: Off)
Firewall do Windows está habilitado.

==================== MSCONFIG/TASK MANAGER ítens desabilitados ==

==================== Regras do Firewall (Whitelisted) ===============

(Se uma entrada for incluída na fixlist, será removida do Registro. O arquivo não será movido, a menos que seja colocado separadamente.)

FirewallRules: [{25DD0207-2E97-4964-96E4-8ED88207F846}] => (Allow) C:\Program Files\AVAST Software\SZBrowser\3.55.2393.609\SZBrowser.exe
FirewallRules: [{1AF45FE7-6D3B-45EE-9BFF-6C0C7CCF18AD}] => (Allow) C:\Program Files (x86)\Origin Games\Mass Effect Andromeda\MassEffectAndromedaTrial.exe
FirewallRules: [{7A30358D-FA90-4180-9A44-C914D2C40589}] => (Allow) C:\Program Files (x86)\Origin Games\Mass Effect Andromeda\MassEffectAndromedaTrial.exe
FirewallRules: [{56C04338-0E68-44E8-A4F7-B78600CD1B36}] => (Allow) C:\Program Files (x86)\Origin Games\Mass Effect Andromeda\MassEffectAndromeda.exe
FirewallRules: [{F17B01E7-8197-4137-AD92-1410CC2418D5}] => (Allow) C:\Program Files (x86)\Origin Games\Mass Effect Andromeda\MassEffectAndromeda.exe
FirewallRules: [TCP Query User{7D2883ED-29D9-4074-B738-0C6481E973CD}C:\program files (x86)\hearthstone\hearthstone.exe] => (Allow) C:\program files (x86)\hearthstone\hearthstone.exe
FirewallRules: [UDP Query User{6BE1D659-E317-453C-8731-9DE8F32BC1ED}C:\program files (x86)\hearthstone\hearthstone.exe] => (Allow) C:\program files (x86)\hearthstone\hearthstone.exe

==================== Pontos de Restauração =========================

24-07-2017 18:59:19 JRT Pre-Junkware Removal
03-08-2017 13:56:38 Ponto de Verificação Agendado

==================== Dispositivos Apresentando Falhas No Gerenciador =============

==================== Erros no Log de eventos: =========================

Erros em Aplicativos:
==================
Error: (08/04/2017 02:38:59 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Nome do aplicativo com falha: MicrosoftEdgeCP.exe, versão: 11.0.15063.483, carimbo de data/hora: 0x595f2577
Nome do módulo com falha: edgehtml.dll, versão: 11.0.15063.483, carimbo de data/hora: 0x1f909eb0
Código de exceção: 0xc0000005
Deslocamento da falha: 0x0000000000697332
ID do processo com falha: 0x1c50
Hora de início do aplicativo com falha: 0x01d30d464dec6dbd
Caminho do aplicativo com falha: C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
Caminho do módulo com falha: C:\Windows\SYSTEM32\edgehtml.dll
ID do Relatório: bfaecd58-d1ee-4c26-bb24-02792e763576
Nome completo do pacote com falha: Microsoft.MicrosoftEdge_40.15063.0.0_neutral__8wekyb3d8bbwe
ID do aplicativo relativo ao pacote com falha: ContentProcess

Error: (08/04/2017 02:22:21 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Nome do aplicativo com falha: MicrosoftEdgeCP.exe, versão: 11.0.15063.483, carimbo de data/hora: 0x595f2577
Nome do módulo com falha: EdgeContent.dll, versão: 11.0.15063.483, carimbo de data/hora: 0x66c96869
Código de exceção: 0xc0000409
Deslocamento da falha: 0x000000000006842b
ID do processo com falha: 0x3540
Hora de início do aplicativo com falha: 0x01d30d458df92726
Caminho do aplicativo com falha: C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
Caminho do módulo com falha: C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\EdgeContent.dll
ID do Relatório: 532d0510-844e-4a71-8082-59274e39fa91
Nome completo do pacote com falha: Microsoft.MicrosoftEdge_40.15063.0.0_neutral__8wekyb3d8bbwe
ID do aplicativo relativo ao pacote com falha: ContentProcess

Error: (08/04/2017 12:41:09 AM) (Source: Application Hang) (EventID: 1002) (User: )
Description: O programa BlackDesert64.exe versão 0.0.0.0 parou de interagir com o Windows e foi fechado. Para ver se há mais informações disponíveis sobre o problema, verifique o histórico de problemas no painel de controle Segurança e Manutenção.

ID do Processo: 5e0

Hora de Início: 01d30c8dedc77044

Hora de Término: 14

Caminho do Aplicativo: C:\Program Files (x86)\Black Desert\bin64\BlackDesert64.exe

ID do Relatório: 55b9644e-98a1-4f29-8526-f3b8d9a99a64

Nome completo do pacote com falha:

ID do aplicativo relativo ao pacote com falha:

Error: (08/02/2017 10:34:19 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Nome do aplicativo com falha: MicrosoftEdgeCP.exe, versão: 11.0.15063.483, carimbo de data/hora: 0x595f2577
Nome do módulo com falha: EdgeContent.dll, versão: 11.0.15063.483, carimbo de data/hora: 0x66c96869
Código de exceção: 0xc0000409
Deslocamento da falha: 0x000000000006842b
ID do processo com falha: 0x38e4
Hora de início do aplicativo com falha: 0x01d30bf684c96804
Caminho do aplicativo com falha: C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
Caminho do módulo com falha: C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\EdgeContent.dll
ID do Relatório: 343bee45-809a-4fe2-8d46-ab86c7a10781
Nome completo do pacote com falha: Microsoft.MicrosoftEdge_40.15063.0.0_neutral__8wekyb3d8bbwe
ID do aplicativo relativo ao pacote com falha: ContentProcess

Error: (08/02/2017 01:27:04 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Nome do aplicativo com falha: MicrosoftEdgeCP.exe, versão: 11.0.15063.483, carimbo de data/hora: 0x595f2577
Nome do módulo com falha: ntdll.dll, versão: 10.0.15063.447, carimbo de data/hora: 0xa329d3a8
Código de exceção: 0xcfffffff
Deslocamento da falha: 0x00000000000a5424
ID do processo com falha: 0x2b80
Hora de início do aplicativo com falha: 0x01d30ba6b52e3b5d
Caminho do aplicativo com falha: C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
Caminho do módulo com falha: C:\Windows\SYSTEM32\ntdll.dll
ID do Relatório: e5d032d2-37d9-48ff-88c4-d13144e7989c
Nome completo do pacote com falha: Microsoft.MicrosoftEdge_40.15063.0.0_neutral__8wekyb3d8bbwe
ID do aplicativo relativo ao pacote com falha: ContentProcess

Error: (08/02/2017 03:26:39 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Nome do aplicativo com falha: MicrosoftEdgeCP.exe, versão: 11.0.15063.483, carimbo de data/hora: 0x595f2577
Nome do módulo com falha: EdgeContent.dll, versão: 11.0.15063.483, carimbo de data/hora: 0x66c96869
Código de exceção: 0xc0000409
Deslocamento da falha: 0x000000000006842b
ID do processo com falha: 0x4604
Hora de início do aplicativo com falha: 0x01d30b57508cc28f
Caminho do aplicativo com falha: C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
Caminho do módulo com falha: C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\EdgeContent.dll
ID do Relatório: 74c7c5a5-2ab4-43cc-b46c-b8d58cd4738e
Nome completo do pacote com falha: Microsoft.MicrosoftEdge_40.15063.0.0_neutral__8wekyb3d8bbwe
ID do aplicativo relativo ao pacote com falha: ContentProcess

Error: (08/01/2017 05:50:25 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Nome do aplicativo com falha: MicrosoftEdgeCP.exe, versão: 11.0.15063.483, carimbo de data/hora: 0x595f2577
Nome do módulo com falha: ntdll.dll, versão: 10.0.15063.447, carimbo de data/hora: 0xa329d3a8
Código de exceção: 0xcfffffff
Deslocamento da falha: 0x00000000000a5ef4
ID do processo com falha: 0x2c4c
Hora de início do aplicativo com falha: 0x01d30b05d3915558
Caminho do aplicativo com falha: C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
Caminho do módulo com falha: C:\Windows\SYSTEM32\ntdll.dll
ID do Relatório: de2cc5b9-e9af-4bac-8080-3e1e41bff470
Nome completo do pacote com falha: Microsoft.MicrosoftEdge_40.15063.0.0_neutral__8wekyb3d8bbwe
ID do aplicativo relativo ao pacote com falha: ContentProcess

Error: (08/01/2017 05:41:38 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Nome do aplicativo com falha: MicrosoftEdgeCP.exe, versão: 11.0.15063.483, carimbo de data/hora: 0x595f2577
Nome do módulo com falha: EdgeContent.dll, versão: 11.0.15063.483, carimbo de data/hora: 0x66c96869
Código de exceção: 0xc0000409
Deslocamento da falha: 0x000000000006842b
ID do processo com falha: 0x41fc
Hora de início do aplicativo com falha: 0x01d30b05730c5899
Caminho do aplicativo com falha: C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
Caminho do módulo com falha: C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\EdgeContent.dll
ID do Relatório: 3346b322-6457-406a-a2b9-4e34ddc319cc
Nome completo do pacote com falha: Microsoft.MicrosoftEdge_40.15063.0.0_neutral__8wekyb3d8bbwe
ID do aplicativo relativo ao pacote com falha: ContentProcess

Error: (08/01/2017 12:40:47 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 2484) (User: DESKTOP-75435FS)
Description: O pacote Microsoft.MicrosoftEdge_40.15063.0.0_neutral__8wekyb3d8bbwe+ContentProcess#{00071402-0002-0000-b018-f21d00000000} foi terminado porque levou muito tempo para ser suspenso.

Error: (08/01/2017 03:29:13 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Nome do aplicativo com falha: MicrosoftEdgeCP.exe, versão: 11.0.15063.483, carimbo de data/hora: 0x595f2577
Nome do módulo com falha: ntdll.dll, versão: 10.0.15063.447, carimbo de data/hora: 0xa329d3a8
Código de exceção: 0xcfffffff
Deslocamento da falha: 0x00000000000a5ef4
ID do processo com falha: 0x3528
Hora de início do aplicativo com falha: 0x01d30a5199681833
Caminho do aplicativo com falha: C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
Caminho do módulo com falha: C:\Windows\SYSTEM32\ntdll.dll
ID do Relatório: 4cf1b8f5-6bcf-405d-b70f-ff3be2b35ec8
Nome completo do pacote com falha: Microsoft.MicrosoftEdge_40.15063.0.0_neutral__8wekyb3d8bbwe
ID do aplicativo relativo ao pacote com falha: ContentProcess

Erros de Sistema:
=============
Error: (08/04/2017 04:56:45 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Não foi possível iniciar o serviço Origin Web Helper Service devido ao seguinte erro:
O serviço não respondeu à requisição de início ou controle em tempo hábil.

Error: (08/04/2017 04:56:45 PM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Tempo limite esgotado (30000 milissegundos) ao aguardar a conexão do serviço Origin Web Helper Service.

Error: (08/04/2017 04:56:04 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Não foi possível iniciar o serviço CldFlt devido ao seguinte erro:
Não há suporte para o pedido.

Error: (08/04/2017 04:55:19 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: O serviço Windows Search foi finalizado inesperadamente. Isto aconteceu 1 vez(es). A seguinte ação corretiva será tomada em 30000 milissegundos: Reiniciar o serviço.

Error: (08/04/2017 04:55:19 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: O serviço Malwarebytes Service foi finalizado inesperadamente. Isto aconteceu 1 vez(es). A seguinte ação corretiva será tomada em 5000 milissegundos: Reiniciar o serviço.

Error: (08/04/2017 04:55:19 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: O serviço NVIDIA Telemetry Container foi finalizado inesperadamente. Isto aconteceu 1 vez(es). A seguinte ação corretiva será tomada em 1000 milissegundos: Reiniciar o serviço.

Error: (08/04/2017 04:55:03 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: O serviço Disc Soft Lite Bus Service foi encerrado inesperadamente. Isso aconteceu 1 vez(es).

Error: (08/04/2017 04:55:03 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: O serviço NVIDIA Display Container LS foi finalizado inesperadamente. Isto aconteceu 1 vez(es). A seguinte ação corretiva será tomada em 1000 milissegundos: Reiniciar o serviço.

Error: (08/04/2017 04:55:03 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: O serviço Windows Presentation Foundation Font Cache 3.0.0.0 foi finalizado inesperadamente. Isto aconteceu 1 vez(es). A seguinte ação corretiva será tomada em 0 milissegundos: Reiniciar o serviço.

Error: (08/04/2017 04:55:03 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: O serviço MEmusvc foi encerrado inesperadamente. Isso aconteceu 1 vez(es).

CodeIntegrity:
===================================
Date: 2017-08-04 16:51:09.228
Description: Code Integrity determined that a process (\Device\HarddiskVolume6\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume6\Program Files (x86)\Malwarebytes\mbae64.dll that did not meet the Store signing level requirements.

Date: 2017-08-04 16:51:09.058
Description: Code Integrity determined that a process (\Device\HarddiskVolume6\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume6\Program Files (x86)\Malwarebytes\mbae64.dll that did not meet the Store signing level requirements.

Date: 2017-08-04 16:51:08.930
Description: Code Integrity determined that a process (\Device\HarddiskVolume6\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume6\Program Files (x86)\Malwarebytes\mbae64.dll that did not meet the Store signing level requirements.

Date: 2017-08-04 16:48:13.719
Description: Code Integrity determined that a process (\Device\HarddiskVolume6\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume6\Program Files (x86)\Malwarebytes\mbae64.dll that did not meet the Store signing level requirements.

Date: 2017-08-04 16:48:11.328
Description: Code Integrity determined that a process (\Device\HarddiskVolume6\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume6\Program Files (x86)\Malwarebytes\mbae64.dll that did not meet the Store signing level requirements.

Date: 2017-08-04 16:47:49.721
Description: Code Integrity determined that a process (\Device\HarddiskVolume6\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume6\Program Files (x86)\Malwarebytes\mbae64.dll that did not meet the Store signing level requirements.

Date: 2017-08-04 16:47:49.564
Description: Code Integrity determined that a process (\Device\HarddiskVolume6\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume6\Program Files (x86)\Malwarebytes\mbae64.dll that did not meet the Store signing level requirements.

Date: 2017-08-04 16:47:49.464
Description: Code Integrity determined that a process (\Device\HarddiskVolume6\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume6\Program Files (x86)\Malwarebytes\mbae64.dll that did not meet the Store signing level requirements.

Date: 2017-08-04 16:06:08.124
Description: Code Integrity determined that a process (\Device\HarddiskVolume6\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume6\Program Files (x86)\Malwarebytes\mbae64.dll that did not meet the Store signing level requirements.

Date: 2017-08-04 16:06:07.892
Description: Code Integrity determined that a process (\Device\HarddiskVolume6\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume6\Program Files (x86)\Malwarebytes\mbae64.dll that did not meet the Store signing level requirements.

==================== Informações da Memória ===========================

Processador: Intel(R) Core(TM) i5-4460 CPU @ 3.20GHz
Percentagem de memória em uso: 29%
RAM física total: 7937.92 MB
RAM física disponível: 5592.5 MB
Virtual Total: 15361.92 MB
Virtual disponível: 12869.98 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:390.61 GB) (Free:188.62 GB) NTFS
Drive d: () (Fixed) (Total:465.09 GB) (Free:464.24 GB) NTFS
Drive e: () (Fixed) (Total:540.89 GB) (Free:329.82 GB) NTFS
Drive f: () (Removable) (Total:7.2 GB) (Free:3.2 GB) FAT32

==================== MBR & Tabela de Partições ==================

========================================================
Disk: 0 (Size: 465.8 GB) (Disk ID: A1F28503)

Partition: GPT.

========================================================
Disk: 1 (MBR Code: Windows 7 or 8) (Size: 931.5 GB) (Disk ID: 00000000)

Partition: GPT.

========================================================
Disk: 2 (MBR Code: Windows 7 or 8) (Size: 7.2 GB) (Disk ID: 130CBA6F)
Partition 1: (Not Active) - (Size=7.2 GB) - (Type=0C)

==================== Fim de Addition.txt ============================

Aura · August 4, 2017

Can you rename the FRST executable with "English" in it and run a new scan? This will produce English logs. EnglishFRST64.exe for instance.

brunobyof · August 4, 2017

FRST

Spoiler

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 31-07-2017
Ran by bruno (administrator) on DESKTOP-75435FS (04-08-2017 18:00:59)
Running from C:\Users\bruno\Desktop\Limpeza e manutenção
Loaded Profiles: bruno (Available Profiles: bruno)
Platform: Windows 10 Pro Version 1703 (X64) Language: Português (Brasil)
Internet Explorer Version 11 (Default browser: Edge)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(Intel Corporation) C:\Windows\System32\igfxCUIService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe
(Malwarebytes) C:\Program Files (x86)\Malwarebytes\MBAMService.exe
(Microvirt Software Technology Co. Ltd.) C:\Program Files (x86)\Microvirt\MEmu\MemuService.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(AVAST Software s.r.o.) C:\Program Files\AVAST Software\Avast\x64\aswidsagenta.exe
(Intel Corporation) C:\Windows\System32\igfxEM.exe
(Microsoft Corporation) C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\RemindersServer.exe
() C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.19.820.0_x64__kzf8qxf38zg5c\SkypeHost.exe
(Microsoft Corporation) C:\Windows\System32\Speech_OneCore\common\SpeechRuntime.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MSASCuiL.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\avastui.exe
(Malwarebytes) C:\Program Files (x86)\Malwarebytes\mbamtray.exe
(Disc Soft Ltd) C:\Program Files (x86)\DAEMON Tools Lite\DiscSoftBusServiceLite.exe
(Piriform Ltd) C:\Program Files\CCleaner\CCleaner64.exe
(Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\OFFICE16\CSISYNCCLIENT.EXE
(Farbar) C:\Users\bruno\Desktop\Limpeza e manutenção\EnglishFRST64.exe
(Hammer & Chisel, Inc.) C:\Users\bruno\AppData\Local\Discord\app-0.0.297\Discord.exe
(Hammer & Chisel, Inc.) C:\Users\bruno\AppData\Local\Discord\app-0.0.297\Discord.exe
(Hammer & Chisel, Inc.) C:\Users\bruno\AppData\Local\Discord\app-0.0.297\Discord.exe
(Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe
(Microsoft Corporation) C:\Windows\System32\browser_broker.exe
(Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
(Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
(Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
(Microsoft Corporation) C:\Windows\System32\InstallAgent.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
(Microsoft Corporation) C:\Windows\ImmersiveControlPanel\SystemSettings.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Farbar) C:\Users\bruno\Desktop\Limpeza e manutenção\EnglishFRST64.exe

==================== Registry (Whitelisted) ====================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [SecurityHealth] => C:\Program Files\Windows Defender\MSASCuiL.exe [629152 2017-03-18] (Microsoft Corporation)
HKLM\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvLaunch.exe [213832 2017-07-24] (AVAST Software)
HKLM\...\Run: [Malwarebytes TrayApp] => C:\PROGRAM FILES (X86)\MALWAREBYTES\mbamtray.exe [3146704 2017-05-09] (Malwarebytes)
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [9228800 2017-06-29] (Realtek Semiconductor)
HKLM Group Policy restriction on software: %systemroot%\system32\mrt.exe <==== ATTENTION
HKU\S-1-5-21-3125324295-4109617892-1090203428-1001\...\Run: [DAEMON Tools Lite Automount] => C:\Program Files (x86)\DAEMON Tools Lite\DTAgent.exe [4299968 2016-05-30] (Disc Soft Ltd)
HKU\S-1-5-21-3125324295-4109617892-1090203428-1001\...\Run: [Discord] => C:\Users\bruno\AppData\Local\Discord\app-0.0.297\Discord.exe [64290304 2017-01-04] (Hammer & Chisel, Inc.)
HKU\S-1-5-21-3125324295-4109617892-1090203428-1001\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [9818328 2017-06-30] (Piriform Ltd)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{4f4792c9-62a1-4c8d-912b-82d74d3638d8}: [DhcpNameServer] 192.168.1.1

Internet Explorer:
==================
BHO-x32: Microsoft OneDrive for Business Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\Office16\GROOVEEX.DLL [2015-11-12] (Microsoft Corporation)
Handler: mso-minsb.16 - {3459B272-CC19-4448-86C9-DDC3B4B2FAD3} - C:\Program Files\Microsoft Office\Office16\MSOSB.DLL [2015-11-10] (Microsoft Corporation)
Handler-x32: mso-minsb.16 - {3459B272-CC19-4448-86C9-DDC3B4B2FAD3} - C:\Program Files (x86)\Microsoft Office\Office16\MSOSB.DLL [2015-11-10] (Microsoft Corporation)
Handler: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\Office16\MSOSB.DLL [2015-11-10] (Microsoft Corporation)
Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files (x86)\Microsoft Office\Office16\MSOSB.DLL [2015-11-10] (Microsoft Corporation)

Edge:
======
Edge Extension: (Adblock Plus) -> 10_EyeoGmbHAdblockPlus_d55gg7py3s0m0 => C:\Program Files\WindowsApps\EyeoGmbH.AdblockPlus_0.9.9.0_neutral__d55gg7py3s0m0 [2017-07-26]
Edge Extension: (uBlock Origin) -> EdgeExtension_37833NikRollsuBlockOrigin_f8jsg5mm64m62 => C:\Program Files\WindowsApps\37833NikRolls.uBlockOrigin_1.13.8.0_neutral__f8jsg5mm64m62 [2017-07-25]

FireFox:
========
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.50907.0\npctrl.dll [2017-05-03] ( Microsoft Corporation)
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~1\MICROS~2\Office16\NPSPWRAP.DLL [2015-07-31] (Microsoft Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.50907.0\npctrl.dll [2017-05-03] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~2\Office16\NPSPWRAP.DLL [2015-07-31] (Microsoft Corporation)
FF Plugin-x32: @videolan.org/vlc,version=2.2.6 -> C:\Program Files (x86)\VLC\npvlc.dll [2017-05-24] (VideoLAN)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2017-04-04] (Adobe Systems Inc.)

==================== Services (Whitelisted) ====================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R3 aswbIDSAgent; C:\Program Files\AVAST Software\Avast\x64\aswidsagenta.exe [7430992 2017-07-24] (AVAST Software s.r.o.)
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [263312 2017-07-24] (AVAST Software)
R3 Disc Soft Lite Bus Service; C:\Program Files (x86)\DAEMON Tools Lite\DiscSoftBusServiceLite.exe [1467072 2016-05-30] (Disc Soft Ltd)
R2 igfxCUIService2.0.0.0; C:\Windows\system32\igfxCUIService.exe [365040 2017-03-17] (Intel Corporation)
R2 MBAMService; C:\Program Files (x86)\Malwarebytes\mbamservice.exe [4470736 2017-05-09] (Malwarebytes)
R2 MEmusvc; C:\Program Files (x86)\Microvirt\MEmu\MemuService.exe [269480 2017-05-26] (Microvirt Software Technology Co. Ltd.)
R2 NVDisplay.ContainerLocalSystem; C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe [462968 2017-07-18] (NVIDIA Corporation)
R2 NvTelemetryContainer; C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe [449984 2017-07-18] (NVIDIA Corporation)
S3 Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [2169696 2017-07-24] (Electronic Arts)
S2 Origin Web Helper Service; C:\Program Files (x86)\Origin\OriginWebHelperService.exe [3149664 2017-07-05] (Electronic Arts)
S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [3913064 2017-03-20] (Microsoft Corporation)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [342264 2017-03-18] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [102816 2017-06-20] (Microsoft Corporation)

===================== Drivers (Whitelisted) ======================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R1 aswbidsdriver; C:\Windows\system32\drivers\aswbidsdrivera.sys [320008 2017-07-24] (AVAST Software s.r.o.)
R0 aswbidsh; C:\Windows\system32\drivers\aswbidsha.sys [198976 2017-07-24] (AVAST Software s.r.o.)
R0 aswblog; C:\Windows\system32\drivers\aswbloga.sys [343288 2017-07-24] (AVAST Software s.r.o.)
R0 aswbuniv; C:\Windows\system32\drivers\aswbuniva.sys [57728 2017-07-24] (AVAST Software s.r.o.)
S3 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [46984 2017-07-24] (AVAST Software)
R1 aswKbd; C:\Windows\system32\drivers\aswKbd.sys [41800 2017-07-24] (AVAST Software)
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [146696 2017-07-24] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [110352 2017-07-24] (AVAST Software)
R0 aswRvrt; C:\Windows\system32\drivers\aswRvrt.sys [84392 2017-07-24] (AVAST Software)
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1015848 2017-07-24] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [585608 2017-07-24] (AVAST Software)
R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [198768 2017-07-24] (AVAST Software)
R0 aswVmm; C:\Windows\system32\drivers\aswVmm.sys [361336 2017-07-24] (AVAST Software)
R3 dtlitescsibus; C:\Windows\System32\drivers\dtlitescsibus.sys [30264 2017-07-24] (Disc Soft Ltd)
R3 dtliteusbbus; C:\Windows\System32\drivers\dtliteusbbus.sys [47672 2017-07-24] (Disc Soft Ltd)
R1 ESProtectionDriver; C:\Windows\system32\drivers\mbae64.sys [77376 2017-06-27] ()
S3 hitmanpro37; C:\Windows\system32\drivers\hitmanpro37.sys [41080 2017-07-25] ()
R2 MBAMChameleon; C:\Windows\system32\drivers\MBAMChameleon.sys [188352 2017-07-25] (Malwarebytes)
R3 MBAMFarflt; C:\Windows\system32\drivers\farflt.sys [101784 2017-08-04] (Malwarebytes)
R3 MBAMProtection; C:\Windows\system32\drivers\mbam.sys [45472 2017-08-04] (Malwarebytes)
R3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [253856 2017-08-04] (Malwarebytes)
R3 MBAMWebProtection; C:\Windows\system32\drivers\mwac.sys [93600 2017-08-04] (Malwarebytes)
R2 memudrv; C:\Program Files (x86)\Microvirt\MEmuHyperv\MEmuDrv.sys [260368 2015-11-02] (Microvirt Corporation)
R3 nvlddmkm; C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_24ddebfb518b5a55\nvlddmkm.sys [15668664 2017-07-19] (NVIDIA Corporation)
R3 rt640x64; C:\Windows\System32\drivers\rt640x64.sys [604160 2017-03-18] (Realtek )
S3 SDFRd; C:\Windows\System32\drivers\SDFRd.sys [31128 2017-03-18] ()
S3 WdBoot; C:\Windows\system32\drivers\WdBoot.sys [44632 2017-03-18] (Microsoft Corporation)
S3 WdFilter; C:\Windows\system32\drivers\WdFilter.sys [294816 2017-03-18] (Microsoft Corporation)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [121248 2017-03-18] (Microsoft Corporation)
S3 xhunter1; C:\Windows\xhunter1.sys [37344 2017-08-04] (Wellbia.com Co., Ltd.)

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2017-08-04 16:57 - 2017-08-04 16:57 - 000000000 ____D C:\Users\Todos os Usuários\SWCUTemp
2017-08-04 16:57 - 2017-08-04 16:57 - 000000000 ____D C:\ProgramData\SWCUTemp
2017-08-04 16:53 - 2017-08-04 16:53 - 000106312 _____ C:\Users\bruno\Desktop\cc_20170804_165318.reg
2017-08-04 16:49 - 2017-08-04 16:51 - 000000000 ____D C:\Program Files (x86)\Google
2017-08-04 16:49 - 2017-08-04 16:49 - 000002870 _____ C:\Windows\System32\Tasks\CCleanerSkipUAC
2017-08-04 16:49 - 2017-08-04 16:49 - 000000863 _____ C:\Users\Public\Desktop\CCleaner.lnk
2017-08-04 16:49 - 2017-08-04 16:49 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
2017-08-04 16:49 - 2017-08-04 16:49 - 000000000 ____D C:\Program Files\CCleaner
2017-08-04 16:39 - 2017-08-04 18:00 - 000000000 ____D C:\FRST
2017-08-04 14:43 - 2017-08-04 16:22 - 305270882 _____ C:\Users\bruno\Downloads\2ddl.pro_g.o.t.704.AAC.MP4.mp4
2017-08-04 12:58 - 2017-08-04 12:58 - 000000000 ___HD C:\OneDriveTemp
2017-07-26 14:34 - 2017-07-26 14:34 - 000000000 ____D C:\Windows\System32\Tasks\S-1-5-21-3125324295-4109617892-1090203428-1001
2017-07-26 14:31 - 2017-07-26 14:31 - 000000000 ____D C:\Windows\LastGood.Tmp
2017-07-26 14:30 - 2017-07-26 14:31 - 000000000 ____D C:\Windows\SysWOW64\RTCOM
2017-07-26 14:30 - 2017-07-26 14:30 - 000000000 ____H C:\Users\Todos os Usuários\DP45977C.lfl
2017-07-26 14:30 - 2017-07-26 14:30 - 000000000 ____H C:\ProgramData\DP45977C.lfl
2017-07-26 14:30 - 2017-07-26 14:30 - 000000000 ____D C:\Program Files\Realtek
2017-07-26 14:29 - 2017-06-29 18:55 - 003509256 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RltkAPO64.dll
2017-07-26 14:29 - 2017-06-29 18:55 - 003507688 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkApi64.dll
2017-07-26 14:29 - 2017-06-29 18:55 - 001347136 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RTCOM64.dll
2017-07-26 14:29 - 2017-06-29 18:55 - 000691680 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtDataProc64.dll
2017-07-26 14:29 - 2017-06-29 18:55 - 000447712 _____ (Dolby Laboratories) C:\Windows\system32\R4EED64A.dll
2017-07-26 14:29 - 2017-06-29 18:55 - 000343704 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtlCPAPI64.dll
2017-07-26 14:29 - 2017-06-29 18:55 - 000192976 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkCfg64.dll
2017-07-26 14:29 - 2017-06-29 18:55 - 000151784 _____ (Dolby Laboratories) C:\Windows\system32\R4EEL64A.dll
2017-07-26 14:29 - 2017-06-29 18:55 - 000134200 _____ (Dolby Laboratories) C:\Windows\system32\R4EEA64A.dll
2017-07-26 14:29 - 2017-06-29 18:55 - 000084608 _____ (Dolby Laboratories) C:\Windows\system32\R4EEG64A.dll
2017-07-26 14:29 - 2017-06-29 18:54 - 001780616 _____ (DTS) C:\Windows\system32\DTSS2SpeakerDLL64.dll
2017-07-26 14:29 - 2017-06-29 18:54 - 001591056 _____ (DTS) C:\Windows\system32\DTSS2HeadphoneDLL64.dll
2017-07-26 14:29 - 2017-06-29 18:54 - 000727432 _____ (DTS) C:\Windows\system32\DTSSymmetryDLL64.dll
2017-07-26 14:29 - 2017-06-29 18:54 - 000708312 _____ (DTS) C:\Windows\system32\DTSVoiceClarityDLL64.dll
2017-07-26 14:29 - 2017-06-29 18:53 - 001965808 _____ (Dolby Laboratories) C:\Windows\system32\DDPD64A.dll
2017-07-26 14:29 - 2017-06-29 18:53 - 001508928 _____ (DTS) C:\Windows\system32\DTSBoostDLL64.dll
2017-07-26 14:29 - 2017-06-29 18:53 - 000743960 _____ (DTS) C:\Windows\system32\DTSBassEnhancementDLL64.dll
2017-07-26 14:29 - 2017-06-29 18:53 - 000504304 _____ (DTS) C:\Windows\system32\DTSNeoPCDLL64.dll
2017-07-26 14:29 - 2017-06-29 18:53 - 000445392 _____ (DTS) C:\Windows\system32\DTSLimiterDLL64.dll
2017-07-26 14:29 - 2017-06-29 18:53 - 000441264 _____ (DTS) C:\Windows\system32\DTSGainCompensatorDLL64.dll
2017-07-26 14:29 - 2017-06-29 18:53 - 000327448 _____ (Dolby Laboratories) C:\Windows\system32\DDPO64A.dll
2017-07-26 14:29 - 2017-06-29 18:53 - 000272712 _____ (Dolby Laboratories) C:\Windows\system32\DDPA64.dll
2017-07-26 14:29 - 2017-06-29 18:53 - 000253896 _____ (DTS) C:\Windows\system32\DTSGFXAPO64.dll
2017-07-26 14:29 - 2017-06-29 18:53 - 000253864 _____ (DTS) C:\Windows\system32\DTSLFXAPO64.dll
2017-07-26 14:29 - 2017-06-29 18:53 - 000252872 _____ (DTS) C:\Windows\system32\DTSGFXAPONS64.dll
2017-07-26 14:29 - 2017-06-29 18:52 - 005826560 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\Drivers\RTKVHD64.sys
2017-07-26 14:29 - 2017-06-29 18:52 - 003677160 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RTSnMg64.cpl
2017-07-26 14:29 - 2017-06-29 18:52 - 003205120 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtPgEx64.dll
2017-07-26 14:29 - 2017-06-29 18:51 - 072520712 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RCoRes64.dat
2017-07-26 14:29 - 2017-06-29 18:51 - 007172912 _____ (Dolby Laboratories) C:\Windows\system32\R4EEP64A.dll
2017-07-26 14:29 - 2017-06-29 18:51 - 007096184 _____ (Dolby Laboratories) C:\Windows\system32\DDPP64A.dll
2017-07-26 14:29 - 2017-06-29 18:51 - 002210304 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RCoInstII64.dll
2017-07-26 14:29 - 2017-06-29 18:51 - 000023688 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkCoLDR64.dll
2017-07-26 14:29 - 2017-06-29 03:05 - 012334923 _____ C:\Windows\system32\Drivers\RTAIODAT.DAT
2017-07-26 14:28 - 2017-07-26 14:32 - 000000000 ___HD C:\Program Files (x86)\Temp
2017-07-26 14:28 - 2017-07-26 14:28 - 000000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2017-07-26 14:28 - 2017-07-26 14:28 - 000000000 ____D C:\Program Files (x86)\Realtek
2017-07-26 14:28 - 2017-06-29 18:50 - 000118584 _____ C:\Windows\system32\AcpiServiceVnA64.dll
2017-07-26 14:28 - 2017-06-29 18:50 - 000105304 _____ C:\Windows\system32\audioLibVc.dll
2017-07-26 14:28 - 2016-09-22 14:55 - 002839520 _____ (Realtek Semiconductor Corp.) C:\Windows\RtlExUpd.dll
2017-07-26 14:05 - 2017-08-04 16:52 - 000000000 ____D C:\Users\bruno\AppData\Local\CrashDumps
2017-07-25 21:42 - 2017-08-04 01:38 - 000037344 _____ (Wellbia.com Co., Ltd.) C:\Windows\xhunter1.sys
2017-07-25 21:42 - 2017-07-25 21:42 - 000000000 ____D C:\Users\bruno\ansel
2017-07-25 19:46 - 2017-07-25 19:46 - 000003378 _____ C:\Windows\System32\Tasks\OneDrive Standalone Update Task-S-1-5-21-3125324295-4109617892-1090203428-1001
2017-07-25 16:33 - 2017-07-25 16:33 - 000002107 _____ C:\Users\bruno\Downloads\contatos.csv
2017-07-25 13:43 - 2017-07-28 23:59 - 000000000 ____D C:\Users\bruno\OneDrive\Documentos\Black Desert
2017-07-25 13:43 - 2017-07-25 13:43 - 000001756 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Black Desert.lnk
2017-07-25 13:43 - 2017-07-25 13:43 - 000000000 ____D C:\Users\Todos os Usuários\.mono
2017-07-25 13:43 - 2017-07-25 13:43 - 000000000 ____D C:\Users\bruno\AppData\Roaming\.mono
2017-07-25 13:43 - 2017-07-25 13:43 - 000000000 ____D C:\ProgramData\.mono
2017-07-25 13:42 - 2017-07-25 13:42 - 000000000 ____D C:\Users\bruno\AppData\LocalLow\Blizzard Entertainment
2017-07-25 13:42 - 2017-07-25 13:42 - 000000000 ____D C:\Users\bruno\AppData\Local\Blizzard
2017-07-25 03:32 - 2017-07-25 03:32 - 000000884 _____ C:\Windows\system32\.crusader
2017-07-25 02:42 - 2017-07-25 13:09 - 000041080 _____ C:\Windows\system32\Drivers\hitmanpro37.sys
2017-07-25 02:41 - 2017-07-25 03:32 - 000000000 ____D C:\Users\Todos os Usuários\HitmanPro
2017-07-25 02:41 - 2017-07-25 03:32 - 000000000 ____D C:\ProgramData\HitmanPro
2017-07-25 02:38 - 2017-07-25 02:38 - 000004608 _____ C:\Windows\SECOH-QAD.exe
2017-07-25 02:38 - 2017-07-25 02:38 - 000003584 _____ C:\Windows\SECOH-QAD.dll
2017-07-25 02:23 - 2017-07-25 02:23 - 000002729 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Outlook 2016.lnk
2017-07-25 02:23 - 2017-07-25 02:23 - 000002656 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Word 2016.lnk
2017-07-25 02:23 - 2017-07-25 02:23 - 000002648 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Excel 2016.lnk
2017-07-25 02:23 - 2017-07-25 02:23 - 000002642 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PowerPoint 2016.lnk
2017-07-25 02:23 - 2017-07-25 02:23 - 000000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Ferramentas do Microsoft Office 2016
2017-07-25 02:22 - 2017-07-25 02:22 - 000000000 ____D C:\Windows\PCHEALTH
2017-07-25 02:22 - 2017-07-25 02:22 - 000000000 ____D C:\Program Files\Microsoft SQL Server
2017-07-25 02:22 - 2017-07-25 02:22 - 000000000 ____D C:\Program Files\Common Files\DESIGNER
2017-07-25 02:22 - 2017-07-25 02:22 - 000000000 ____D C:\Program Files (x86)\Microsoft SQL Server
2017-07-25 02:20 - 2017-07-25 02:29 - 000000000 ____D C:\Users\Todos os Usuários\Microsoft Help
2017-07-25 02:20 - 2017-07-25 02:22 - 000000000 ____D C:\Program Files\Microsoft Office
2017-07-25 02:20 - 2017-07-25 02:20 - 000000000 __RHD C:\MSOCache
2017-07-25 02:20 - 2017-07-25 02:20 - 000000000 ____D C:\Windows\SHELLNEW
2017-07-25 02:20 - 2017-07-25 02:20 - 000000000 ____D C:\Users\bruno\AppData\Local\Microsoft Help
2017-07-25 02:20 - 2017-07-25 02:20 - 000000000 ____D C:\Program Files\Microsoft Analysis Services
2017-07-25 02:20 - 2017-07-25 02:20 - 000000000 ____D C:\Program Files (x86)\Microsoft Analysis Services
2017-07-25 02:18 - 2017-07-25 02:18 - 000000000 ____D C:\Users\bruno\AppData\Roaming\WinRAR
2017-07-25 02:18 - 2017-02-11 20:28 - 000000000 ____D C:\Users\bruno\Downloads\Office 2016 - EasyTutors
2017-07-25 02:18 - 2017-02-11 20:28 - 000000000 ____D C:\Users\bruno\Downloads\Ativador Office 2016
2017-07-25 02:17 - 2017-07-25 02:17 - 000000000 ____D C:\Users\bruno\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
2017-07-25 02:17 - 2017-07-25 02:17 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
2017-07-25 02:17 - 2017-07-25 02:17 - 000000000 ____D C:\Program Files\WinRAR
2017-07-25 02:16 - 2017-07-25 02:16 - 000000000 ____D C:\Program Files (x86)\WinRAR
2017-07-25 00:50 - 2017-07-25 00:50 - 000000000 ____D C:\Users\bruno\Downloads\MEmu Download
2017-07-25 00:45 - 2017-07-25 00:45 - 003117028 _____ C:\Users\bruno\Downloads\Ativador Office 2016.rar
2017-07-25 00:44 - 2017-07-25 01:46 - 1797974327 _____ C:\Users\bruno\Downloads\Office 2016 - EasyTutors.rar
2017-07-25 00:42 - 2017-07-25 00:42 - 000000000 ____D C:\Windows\pss
2017-07-25 00:14 - 2017-07-25 00:14 - 000000000 ____D C:\Users\bruno\AppData\Local\NVIDIA Corporation
2017-07-25 00:10 - 2017-07-25 00:10 - 000253856 _____ (Malwarebytes) C:\Windows\system32\Drivers\54B92069.sys
2017-07-25 00:10 - 2017-07-25 00:10 - 000000000 ____D C:\Users\bruno\AppData\Local\PeerDistRepub
2017-07-25 00:09 - 2017-07-25 00:09 - 000001689 _____ C:\Users\bruno\Desktop\Clima.lnk
2017-07-25 00:05 - 2017-07-25 00:05 - 000000000 ____D C:\Users\bruno\AppData\Local\Apps\2.0
2017-07-25 00:04 - 2017-07-25 00:04 - 000003894 _____ C:\Windows\System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2017-07-25 00:04 - 2017-07-25 00:04 - 000003866 _____ C:\Windows\System32\Tasks\NvTmRep_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2017-07-25 00:04 - 2017-07-25 00:04 - 000003858 _____ C:\Windows\System32\Tasks\NvTmMon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2017-07-25 00:04 - 2017-07-25 00:04 - 000003696 _____ C:\Windows\System32\Tasks\NvTmRepOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2017-07-25 00:04 - 2017-07-25 00:04 - 000003654 _____ C:\Windows\System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2017-07-25 00:04 - 2017-07-25 00:04 - 000000000 ____D C:\Program Files (x86)\VulkanRT
2017-07-25 00:04 - 2017-07-18 21:40 - 000001951 _____ C:\Windows\NvTelemetryContainerRecovery.bat
2017-07-25 00:04 - 2017-03-10 18:17 - 000536864 _____ C:\Windows\system32\vulkan-1.dll
2017-07-25 00:04 - 2017-03-10 18:17 - 000525600 _____ C:\Windows\SysWOW64\vulkan-1.dll
2017-07-25 00:04 - 2017-03-10 18:17 - 000254240 _____ C:\Windows\system32\vulkaninfo.exe
2017-07-25 00:04 - 2017-03-10 18:17 - 000233760 _____ C:\Windows\SysWOW64\vulkaninfo.exe
2017-07-25 00:01 - 2017-07-18 21:40 - 040239736 _____ (NVIDIA Corporation) C:\Windows\system32\nvcompiler.dll
2017-07-25 00:01 - 2017-07-18 21:40 - 035844728 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll
2017-07-25 00:01 - 2017-07-18 21:40 - 035314296 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcompiler.dll
2017-07-25 00:01 - 2017-07-18 21:40 - 028960376 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll
2017-07-25 00:01 - 2017-07-18 21:40 - 013655672 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll
2017-07-25 00:01 - 2017-07-18 21:40 - 012451424 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll
2017-07-25 00:01 - 2017-07-18 21:40 - 012133112 _____ (NVIDIA Corporation) C:\Windows\system32\nvptxJitCompiler.dll
2017-07-25 00:01 - 2017-07-18 21:40 - 011591576 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll
2017-07-25 00:01 - 2017-07-18 21:40 - 010487760 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll
2017-07-25 00:01 - 2017-07-18 21:40 - 009982968 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvptxJitCompiler.dll
2017-07-25 00:01 - 2017-07-18 21:40 - 004163520 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll
2017-07-25 00:01 - 2017-07-18 21:40 - 003711328 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvapi.dll
2017-07-25 00:01 - 2017-07-18 21:40 - 003595896 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll
2017-07-25 00:01 - 2017-07-18 21:40 - 001988216 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6438494.dll
2017-07-25 00:01 - 2017-07-18 21:40 - 001598072 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6438494.dll
2017-07-25 00:01 - 2017-07-18 21:40 - 001278528 _____ (NVIDIA Corporation) C:\Windows\system32\nvEncMFTH264.dll
2017-07-25 00:01 - 2017-07-18 21:40 - 001276992 _____ (NVIDIA Corporation) C:\Windows\system32\nvEncMFThevc.dll
2017-07-25 00:01 - 2017-07-18 21:40 - 001068152 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll
2017-07-25 00:01 - 2017-07-18 21:40 - 001004992 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll
2017-07-25 00:01 - 2017-07-18 21:40 - 000996760 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvEncMFTH264.dll
2017-07-25 00:01 - 2017-07-18 21:40 - 000995408 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvEncMFThevc.dll
2017-07-25 00:01 - 2017-07-18 21:40 - 000972920 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll
2017-07-25 00:01 - 2017-07-18 21:40 - 000924280 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll
2017-07-25 00:01 - 2017-07-18 21:40 - 000781544 _____ (NVIDIA Corporation) C:\Windows\system32\nvEncodeAPI64.dll
2017-07-25 00:01 - 2017-07-18 21:40 - 000725112 _____ (NVIDIA Corporation) C:\Windows\system32\nvDecMFTMjpeg.dll
2017-07-25 00:01 - 2017-07-18 21:40 - 000689992 _____ (NVIDIA Corporation) C:\Windows\system32\nvfatbinaryLoader.dll
2017-07-25 00:01 - 2017-07-18 21:40 - 000618744 _____ (NVIDIA Corporation) C:\Windows\system32\nvmcumd.dll
2017-07-25 00:01 - 2017-07-18 21:40 - 000617416 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvEncodeAPI.dll
2017-07-25 00:01 - 2017-07-18 21:40 - 000609912 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFROpenGL.dll
2017-07-25 00:01 - 2017-07-18 21:40 - 000584312 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvDecMFTMjpeg.dll
2017-07-25 00:01 - 2017-07-18 21:40 - 000578056 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvfatbinaryLoader.dll
2017-07-25 00:01 - 2017-07-18 21:40 - 000499136 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFROpenGL.dll
2017-07-25 00:01 - 2017-07-18 21:40 - 000045976 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdap64.dll
2017-07-25 00:01 - 2017-07-18 21:40 - 000000669 _____ C:\Windows\SysWOW64\nv-vk32.json
2017-07-25 00:01 - 2017-07-18 21:40 - 000000669 _____ C:\Windows\system32\nv-vk64.json
2017-07-24 23:56 - 2017-08-04 17:55 - 000000000 ____D C:\Users\bruno\AppData\Roaming\vlc
2017-07-24 23:56 - 2017-07-25 00:24 - 000004562 _____ C:\Windows\System32\Tasks\Adobe Acrobat Update Task
2017-07-24 23:56 - 2017-07-25 00:24 - 000002457 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk
2017-07-24 23:56 - 2017-07-24 23:56 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN
2017-07-24 23:56 - 2017-07-24 23:56 - 000000000 ____D C:\Program Files (x86)\Adobe
2017-07-24 23:55 - 2017-07-25 00:24 - 000000000 ____D C:\Users\Todos os Usuários\Adobe
2017-07-24 23:55 - 2017-07-25 00:24 - 000000000 ____D C:\ProgramData\Adobe
2017-07-24 23:55 - 2017-07-24 23:56 - 000000000 ____D C:\Program Files (x86)\VLC
2017-07-24 23:55 - 2017-07-24 23:55 - 000000000 ____D C:\Program Files (x86)\NVidia Driver
2017-07-24 23:54 - 2017-07-25 00:04 - 000000000 ____D C:\Users\bruno\AppData\Local\Adobe
2017-07-24 23:50 - 2017-07-24 23:50 - 000000903 _____ C:\Users\bruno\Desktop\BRUNO.lnk
2017-07-24 23:43 - 2017-07-24 23:43 - 000000000 ____D C:\Program Files (x86)\Microsoft Office
2017-07-24 23:31 - 2017-07-24 23:31 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\RogueKiller
2017-07-24 23:31 - 2017-07-24 23:31 - 000000000 ____D C:\Program Files\RogueKiller
2017-07-24 23:29 - 2017-07-24 23:29 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
2017-07-24 23:29 - 2017-07-24 23:29 - 000000000 ____D C:\Program Files\Microsoft Silverlight
2017-07-24 23:29 - 2017-07-24 23:29 - 000000000 ____D C:\Program Files (x86)\Microsoft Silverlight
2017-07-24 23:12 - 2017-08-04 16:56 - 000253856 _____ (Malwarebytes) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2017-07-24 23:12 - 2017-08-04 16:56 - 000101784 _____ (Malwarebytes) C:\Windows\system32\Drivers\farflt.sys
2017-07-24 23:12 - 2017-08-04 16:56 - 000093600 _____ (Malwarebytes) C:\Windows\system32\Drivers\mwac.sys
2017-07-24 23:12 - 2017-08-04 16:56 - 000045472 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbam.sys
2017-07-24 23:12 - 2017-07-25 13:10 - 000188352 _____ (Malwarebytes) C:\Windows\system32\Drivers\MBAMChameleon.sys
2017-07-24 23:12 - 2017-07-24 23:12 - 000000000 ____D C:\Users\Todos os Usuários\Malwarebytes
2017-07-24 23:12 - 2017-07-24 23:12 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes
2017-07-24 23:12 - 2017-07-24 23:12 - 000000000 ____D C:\ProgramData\Malwarebytes
2017-07-24 23:12 - 2017-07-24 23:12 - 000000000 ____D C:\Program Files (x86)\Malwarebytes
2017-07-24 23:12 - 2017-06-27 12:06 - 000077376 _____ C:\Windows\system32\Drivers\mbae64.sys
2017-07-24 23:11 - 2017-07-24 23:12 - 000000000 ____D C:\Users\bruno\AppData\Roaming\discord
2017-07-24 23:11 - 2017-07-24 23:11 - 000000000 ____D C:\Users\bruno\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Hammer & Chisel, Inc
2017-07-24 23:11 - 2017-07-24 23:11 - 000000000 ____D C:\Users\bruno\AppData\Local\SquirrelTemp
2017-07-24 23:11 - 2017-07-24 23:11 - 000000000 ____D C:\Users\bruno\AppData\Local\Discord
2017-07-24 23:07 - 2017-08-04 16:52 - 000000000 ____D C:\Users\bruno\AppData\Roaming\DAEMON Tools Lite
2017-07-24 23:07 - 2017-07-24 23:07 - 000047672 _____ (Disc Soft Ltd) C:\Windows\system32\Drivers\dtliteusbbus.sys
2017-07-24 23:07 - 2017-07-24 23:07 - 000030264 _____ (Disc Soft Ltd) C:\Windows\system32\Drivers\dtlitescsibus.sys
2017-07-24 23:07 - 2017-07-24 23:07 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DAEMON Tools Lite
2017-07-24 23:07 - 2017-07-24 23:07 - 000000000 ____D C:\Program Files (x86)\DAEMON Tools Lite
2017-07-24 23:06 - 2017-07-24 23:06 - 000000000 ____D C:\Users\Todos os Usuários\DAEMON Tools Lite
2017-07-24 23:06 - 2017-07-24 23:06 - 000000000 ____D C:\ProgramData\DAEMON Tools Lite
2017-07-24 23:05 - 2017-07-24 23:05 - 000000000 ____D C:\Users\Todos os Usuários\Blizzard Entertainment
2017-07-24 23:05 - 2017-07-24 23:05 - 000000000 ____D C:\ProgramData\Blizzard Entertainment
2017-07-24 23:04 - 2017-07-24 23:05 - 000000000 ____D C:\Users\bruno\AppData\Roaming\Battle.net
2017-07-24 23:04 - 2017-07-24 23:04 - 000000000 ____D C:\Users\bruno\AppData\Local\DBG
2017-07-24 23:04 - 2017-07-24 23:04 - 000000000 ____D C:\Users\bruno\AppData\Local\Blizzard Entertainment
2017-07-24 23:04 - 2017-07-24 23:04 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Blizzard App
2017-07-24 23:03 - 2017-08-04 16:10 - 000000000 ____D C:\Users\bruno\AppData\Local\Battle.net
2017-07-24 23:03 - 2017-08-04 14:17 - 000000000 ____D C:\Program Files (x86)\Blizzard App
2017-07-24 23:03 - 2017-07-24 23:03 - 000000000 ____D C:\Users\Todos os Usuários\Battle.net
2017-07-24 23:03 - 2017-07-24 23:03 - 000000000 ____D C:\ProgramData\Battle.net
2017-07-24 23:01 - 2017-07-25 13:43 - 000000000 ____D C:\Program Files (x86)\Hearthstone
2017-07-24 23:01 - 2017-07-24 23:01 - 000000000 ___HD C:\Program Files\Common Files\EAInstaller
2017-07-24 23:01 - 2017-07-24 23:01 - 000000000 ____D C:\Users\Todos os Usuários\Electronic Arts
2017-07-24 23:01 - 2017-07-24 23:01 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mass Effect Andromeda
2017-07-24 23:01 - 2017-07-24 23:01 - 000000000 ____D C:\ProgramData\Electronic Arts
2017-07-24 22:50 - 2017-07-24 23:01 - 000000000 ____D C:\Users\bruno\AppData\Roaming\Origin
2017-07-24 22:44 - 2017-07-24 23:01 - 000000000 ____D C:\Users\Todos os Usuários\Package Cache
2017-07-24 22:44 - 2017-07-24 23:01 - 000000000 ____D C:\ProgramData\Package Cache
2017-07-24 22:44 - 2017-07-24 22:44 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Origin
2017-07-24 22:43 - 2017-07-24 22:44 - 000000000 ____D C:\Program Files (x86)\Origin
2017-07-24 22:41 - 2017-07-24 23:03 - 000000000 ____D C:\Users\Todos os Usuários\Origin
2017-07-24 22:41 - 2017-07-24 23:03 - 000000000 ____D C:\ProgramData\Origin
2017-07-24 22:41 - 2017-07-24 22:52 - 000000000 ____D C:\Users\bruno\AppData\Local\Origin
2017-07-24 22:41 - 2017-07-24 22:41 - 000000000 ____D C:\Users\bruno\.QtWebEngineProcess
2017-07-24 22:41 - 2017-07-24 22:41 - 000000000 ____D C:\Users\bruno\.Origin
2017-07-24 22:38 - 2017-07-24 22:38 - 000000000 ____D C:\Program Files (x86)\Origin Games
2017-07-24 22:17 - 2017-07-24 22:17 - 000000000 ____D C:\Users\bruno\AppData\Roaming\Macromedia
2017-07-24 21:31 - 2017-08-04 18:00 - 000000000 ____D C:\Users\bruno\Desktop\Limpeza e manutenção
2017-07-24 21:20 - 2017-07-24 21:20 - 000000000 ____D C:\Users\bruno\AppData\Roaming\NVIDIA
2017-07-24 21:19 - 2017-08-04 16:11 - 000000000 ____D C:\Users\bruno\.MemuHyperv
2017-07-24 21:19 - 2017-07-24 21:20 - 000000000 ____D C:\Users\bruno\.android
2017-07-24 21:19 - 2017-07-24 21:19 - 000000000 ____D C:\Users\bruno\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MEmu
2017-07-24 21:19 - 2017-07-24 21:19 - 000000000 ____D C:\Program Files (x86)\Microvirt
2017-07-24 21:17 - 2017-07-24 21:17 - 000041800 _____ (AVAST Software) C:\Windows\system32\Drivers\aswKbd.sys
2017-07-24 21:17 - 2017-07-24 21:17 - 000004028 _____ C:\Windows\System32\Tasks\SafeZone scheduled Autoupdate 1500941838
2017-07-24 21:17 - 2017-07-24 21:17 - 000001088 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avast SafeZone Browser.lnk
2017-07-24 21:15 - 2017-07-24 21:15 - 000585608 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSP.sys
2017-07-24 21:15 - 2017-07-24 21:15 - 000400464 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe
2017-07-24 21:15 - 2017-07-24 21:15 - 000361336 _____ (AVAST Software) C:\Windows\system32\Drivers\aswVmm.sys
2017-07-24 21:15 - 2017-07-24 21:15 - 000198768 _____ (AVAST Software) C:\Windows\system32\Drivers\aswStm.sys
2017-07-24 21:15 - 2017-07-24 21:15 - 000146696 _____ (AVAST Software) C:\Windows\system32\Drivers\aswmonflt.sys
2017-07-24 21:15 - 2017-07-24 21:15 - 000110352 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRdr2.sys
2017-07-24 21:15 - 2017-07-24 21:15 - 000084392 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRvrt.sys
2017-07-24 21:15 - 2017-07-24 21:15 - 000061304 _____ () C:\Windows\system32\Drivers\lpsport.sys
2017-07-24 21:15 - 2017-07-24 21:15 - 000046984 _____ (AVAST Software) C:\Windows\system32\Drivers\aswHwid.sys
2017-07-24 21:15 - 2017-07-24 21:15 - 000003994 _____ C:\Windows\System32\Tasks\Avast Emergency Update
2017-07-24 21:15 - 2017-07-24 21:15 - 000001979 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avast Free Antivirus.lnk
2017-07-24 21:15 - 2017-07-24 21:15 - 000000000 ____D C:\Users\bruno\AppData\Roaming\AVAST Software
2017-07-24 21:15 - 2017-07-24 21:15 - 000000000 ____D C:\Users\bruno\AppData\Local\CEF
2017-07-24 21:15 - 2017-07-24 21:14 - 001015848 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSnx.sys
2017-07-24 21:15 - 2017-07-24 21:14 - 000343288 _____ (AVAST Software s.r.o.) C:\Windows\system32\Drivers\aswbloga.sys
2017-07-24 21:15 - 2017-07-24 21:14 - 000320008 _____ (AVAST Software s.r.o.) C:\Windows\system32\Drivers\aswbidsdrivera.sys
2017-07-24 21:15 - 2017-07-24 21:14 - 000198976 _____ (AVAST Software s.r.o.) C:\Windows\system32\Drivers\aswbidsha.sys
2017-07-24 21:15 - 2017-07-24 21:14 - 000057728 _____ (AVAST Software s.r.o.) C:\Windows\system32\Drivers\aswbuniva.sys
2017-07-24 21:13 - 2017-07-24 21:17 - 000000000 ____D C:\Program Files\AVAST Software
2017-07-24 21:12 - 2017-07-25 00:07 - 000000000 ____D C:\Users\Todos os Usuários\AVAST Software
2017-07-24 21:12 - 2017-07-25 00:07 - 000000000 ____D C:\ProgramData\AVAST Software
2017-07-24 20:49 - 2017-08-04 01:38 - 000000000 ____D C:\Program Files (x86)\Black Desert
2017-07-24 20:31 - 2017-08-04 16:55 - 000000000 ____D C:\AdwCleaner
2017-07-24 20:22 - 2017-07-07 11:00 - 000947712 _____ (Microsoft Corporation) C:\Windows\system32\HoloSI.PCShell.dll
2017-07-24 20:22 - 2017-07-07 04:27 - 000750560 _____ (Microsoft Corporation) C:\Windows\system32\fontdrvhost.exe
2017-07-24 20:22 - 2017-07-07 04:26 - 001065104 _____ (Microsoft Corporation) C:\Windows\system32\winresume.efi
2017-07-24 20:22 - 2017-07-07 04:25 - 000899824 _____ (Microsoft Corporation) C:\Windows\system32\winresume.exe
2017-07-24 20:22 - 2017-07-07 04:24 - 000117664 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\pdc.sys
2017-07-24 20:22 - 2017-07-07 04:23 - 002399728 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2017-07-24 20:22 - 2017-07-07 04:22 - 008318880 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2017-07-24 20:22 - 2017-07-07 04:22 - 001186464 _____ (Microsoft Corporation) C:\Windows\system32\winload.exe
2017-07-24 20:22 - 2017-07-07 04:22 - 000119384 _____ (Microsoft Corporation) C:\Windows\system32\dmcmnutils.dll
2017-07-24 20:22 - 2017-07-07 04:21 - 032688336 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecsRaw.dll
2017-07-24 20:22 - 2017-07-07 04:21 - 002969880 _____ (Microsoft Corporation) C:\Windows\system32\CoreUIComponents.dll
2017-07-24 20:22 - 2017-07-07 04:20 - 002021680 _____ (Microsoft Corporation) C:\Windows\system32\wmpmde.dll
2017-07-24 20:22 - 2017-07-07 04:20 - 000519584 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netio.sys
2017-07-24 20:22 - 2017-07-07 04:20 - 000382368 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\clfs.sys
2017-07-24 20:22 - 2017-07-07 04:17 - 001017760 _____ (Microsoft Corporation) C:\Windows\system32\SecConfig.efi
2017-07-24 20:22 - 2017-07-07 04:15 - 002444696 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys
2017-07-24 20:22 - 2017-07-07 04:14 - 007325584 _____ (Microsoft Corporation) C:\Windows\system32\windows.storage.dll
2017-07-24 20:22 - 2017-07-07 04:14 - 005477088 _____ (Microsoft Corporation) C:\Windows\system32\OneCoreUAPCommonProxyStub.dll
2017-07-24 20:22 - 2017-07-07 04:14 - 001760264 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll
2017-07-24 20:22 - 2017-07-07 04:14 - 001171032 _____ (Microsoft Corporation) C:\Windows\system32\dcomp.dll
2017-07-24 20:22 - 2017-07-07 04:13 - 000336320 _____ (Microsoft Corporation) C:\Windows\system32\SecurityHealthService.exe
2017-07-24 20:22 - 2017-07-07 04:12 - 000411040 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2017-07-24 20:22 - 2017-07-07 04:12 - 000318232 _____ (Microsoft Corporation) C:\Windows\system32\wininit.exe
2017-07-24 20:22 - 2017-07-07 04:12 - 000228256 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys
2017-07-24 20:22 - 2017-07-07 04:11 - 007904784 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.Protection.PlayReady.dll
2017-07-24 20:22 - 2017-07-07 04:11 - 000094624 _____ (Microsoft Corporation) C:\Windows\system32\rdpudd.dll
2017-07-24 20:22 - 2017-07-07 04:10 - 021353208 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2017-07-24 20:22 - 2017-07-07 04:10 - 001670496 _____ (Microsoft Corporation) C:\Windows\system32\winmde.dll
2017-07-24 20:22 - 2017-07-07 04:10 - 001337848 _____ (Microsoft Corporation) C:\Windows\system32\AudioEng.dll
2017-07-24 20:22 - 2017-07-07 04:10 - 001325968 _____ (Microsoft Corporation) C:\Windows\system32\ole32.dll
2017-07-24 20:22 - 2017-07-07 04:10 - 000372128 _____ (Microsoft Corporation) C:\Windows\system32\CloudExperienceHost.dll
2017-07-24 20:22 - 2017-07-07 04:10 - 000254168 _____ (Microsoft Corporation) C:\Windows\system32\mfps.dll
2017-07-24 20:22 - 2017-07-07 04:09 - 000041376 _____ (Microsoft Corporation) C:\Windows\system32\wininitext.dll
2017-07-24 20:22 - 2017-07-07 04:08 - 002229152 _____ (Microsoft Corporation) C:\Windows\system32\AppVEntSubsystems64.dll
2017-07-24 20:22 - 2017-07-07 04:07 - 001106848 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\http.sys
2017-07-24 20:22 - 2017-07-07 04:07 - 000058488 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2017-07-24 20:22 - 2017-07-07 03:57 - 000626528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fontdrvhost.exe
2017-07-24 20:22 - 2017-07-07 03:57 - 000125344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dwmapi.dll
2017-07-24 20:22 - 2017-07-07 03:40 - 023677440 _____ (Microsoft Corporation) C:\Windows\system32\edgehtml.dll
2017-07-24 20:22 - 2017-07-07 03:39 - 001839872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2017-07-24 20:22 - 2017-07-07 03:39 - 000096128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dmcmnutils.dll
2017-07-24 20:22 - 2017-07-07 03:37 - 031652264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecsRaw.dll
2017-07-24 20:22 - 2017-07-07 03:37 - 002259760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\CoreUIComponents.dll
2017-07-24 20:22 - 2017-07-07 03:37 - 001339352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmpmde.dll
2017-07-24 20:22 - 2017-07-07 03:31 - 005820984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\windows.storage.dll
2017-07-24 20:22 - 2017-07-07 03:31 - 001518088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll
2017-07-24 20:22 - 2017-07-07 03:31 - 000129184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll
2017-07-24 20:22 - 2017-07-07 03:30 - 002165752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2017-07-24 20:22 - 2017-07-07 03:30 - 000949920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dcomp.dll
2017-07-24 20:22 - 2017-07-07 03:30 - 000750496 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WWAHost.exe
2017-07-24 20:22 - 2017-07-07 03:29 - 000349600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2017-07-24 20:22 - 2017-07-07 03:29 - 000123520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Clipc.dll
2017-07-24 20:22 - 2017-07-07 03:27 - 006759512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.Protection.PlayReady.dll
2017-07-24 20:22 - 2017-07-07 03:27 - 003670016 _____ (Microsoft Corporation) C:\Windows\system32\win32kfull.sys
2017-07-24 20:22 - 2017-07-07 03:27 - 001640448 _____ (Microsoft Corporation) C:\Windows\system32\GdiPlus.dll
2017-07-24 20:22 - 2017-07-07 03:27 - 001050624 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.dll
2017-07-24 20:22 - 2017-07-07 03:27 - 000859136 _____ (Microsoft Corporation) C:\Windows\system32\uDWM.dll
2017-07-24 20:22 - 2017-07-07 03:27 - 000577024 _____ (Microsoft Corporation) C:\Windows\system32\duser.dll
2017-07-24 20:22 - 2017-07-07 03:27 - 000557568 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2017-07-24 20:22 - 2017-07-07 03:27 - 000443392 _____ (Microsoft Corporation) C:\Windows\system32\PerceptionSimulationExtensions.dll
2017-07-24 20:22 - 2017-07-07 03:27 - 000360960 _____ (Microsoft Corporation) C:\Windows\system32\ConhostV2.dll
2017-07-24 20:22 - 2017-07-07 03:26 - 020373408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2017-07-24 20:22 - 2017-07-07 03:26 - 017364992 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Xaml.dll
2017-07-24 20:22 - 2017-07-07 03:26 - 001529384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winmde.dll
2017-07-24 20:22 - 2017-07-07 03:26 - 001195240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioEng.dll
2017-07-24 20:22 - 2017-07-07 03:26 - 000988168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ole32.dll
2017-07-24 20:22 - 2017-07-07 03:25 - 002199552 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Xaml.Resources.dll
2017-07-24 20:22 - 2017-07-07 03:25 - 000035232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininitext.dll
2017-07-24 20:22 - 2017-07-07 03:24 - 001517472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AppVEntSubsystems32.dll
2017-07-24 20:22 - 2017-07-07 03:24 - 000114688 _____ (Microsoft Corporation) C:\Windows\system32\officecsp.dll
2017-07-24 20:22 - 2017-07-07 03:23 - 000583160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\CoreMessaging.dll
2017-07-24 20:22 - 2017-07-07 03:23 - 000113152 _____ (Microsoft Corporation) C:\Windows\system32\wuuhosdeployment.dll
2017-07-24 20:22 - 2017-07-07 03:23 - 000110592 _____ (Microsoft Corporation) C:\Windows\system32\Chakradiag.dll
2017-07-24 20:22 - 2017-07-07 03:23 - 000095232 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
2017-07-24 20:22 - 2017-07-07 03:23 - 000029696 _____ (Microsoft Corporation) C:\Windows\system32\eapprovp.dll
2017-07-24 20:22 - 2017-07-07 03:22 - 007931392 _____ (Microsoft Corporation) C:\Windows\system32\twinui.dll
2017-07-24 20:22 - 2017-07-07 03:21 - 000096256 _____ (Microsoft Corporation) C:\Windows\system32\ActiveSyncCsp.dll
2017-07-24 20:22 - 2017-07-07 03:21 - 000064512 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll
2017-07-24 20:22 - 2017-07-07 03:20 - 023681536 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2017-07-24 20:22 - 2017-07-07 03:20 - 008331264 _____ (Microsoft Corporation) C:\Windows\system32\BingMaps.dll
2017-07-24 20:22 - 2017-07-07 03:20 - 000175616 _____ (Microsoft Corporation) C:\Windows\system32\prntvpt.dll
2017-07-24 20:22 - 2017-07-07 03:19 - 007149056 _____ (Microsoft Corporation) C:\Windows\system32\mos.dll
2017-07-24 20:22 - 2017-07-07 03:19 - 000527360 _____ (Microsoft Corporation) C:\Windows\system32\aadcloudap.dll
2017-07-24 20:22 - 2017-07-07 03:19 - 000256000 _____ (Microsoft Corporation) C:\Windows\system32\domgmt.dll
2017-07-24 20:22 - 2017-07-07 03:19 - 000165888 _____ (Microsoft Corporation) C:\Windows\system32\storewuauth.dll
2017-07-24 20:22 - 2017-07-07 03:19 - 000137216 _____ (Microsoft Corporation) C:\Windows\system32\raschap.dll
2017-07-24 20:22 - 2017-07-07 03:18 - 007336448 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Data.Pdf.dll
2017-07-24 20:22 - 2017-07-07 03:18 - 000563712 _____ (Microsoft Corporation) C:\Windows\system32\DevicePairing.dll
2017-07-24 20:22 - 2017-07-07 03:18 - 000548864 _____ (Microsoft Corporation) C:\Windows\system32\SensorService.dll
2017-07-24 20:22 - 2017-07-07 03:18 - 000353280 _____ (Microsoft Corporation) C:\Windows\system32\Wldap32.dll
2017-07-24 20:22 - 2017-07-07 03:18 - 000274944 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecsExt.dll
2017-07-24 20:22 - 2017-07-07 03:17 - 001878016 _____ (Microsoft Corporation) C:\Windows\system32\AzureSettingSyncProvider.dll
2017-07-24 20:22 - 2017-07-07 03:17 - 001260544 _____ (Microsoft Corporation) C:\Windows\system32\GamePanel.exe
2017-07-24 20:22 - 2017-07-07 03:17 - 000692736 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2017-07-24 20:22 - 2017-07-07 03:17 - 000588800 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2017-07-24 20:22 - 2017-07-07 03:17 - 000536064 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Internal.Management.dll
2017-07-24 20:22 - 2017-07-07 03:17 - 000422400 _____ (Microsoft Corporation) C:\Windows\system32\WpAXHolder.dll
2017-07-24 20:22 - 2017-07-07 03:17 - 000229888 _____ (Microsoft Corporation) C:\Windows\system32\SIHClient.exe
2017-07-24 20:22 - 2017-07-07 03:16 - 012786176 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2017-07-24 20:22 - 2017-07-07 03:16 - 000925696 _____ (Microsoft Corporation) C:\Windows\system32\WpcWebFilter.dll
2017-07-24 20:22 - 2017-07-07 03:16 - 000545792 _____ (Microsoft Corporation) C:\Windows\system32\winspool.drv
2017-07-24 20:22 - 2017-07-07 03:15 - 008238080 _____ (Microsoft Corporation) C:\Windows\system32\Chakra.dll
2017-07-24 20:22 - 2017-07-07 03:15 - 000922112 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2017-07-24 20:22 - 2017-07-07 03:14 - 008211968 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll
2017-07-24 20:22 - 2017-07-07 03:14 - 003784704 _____ (Microsoft Corporation) C:\Windows\system32\MapRouter.dll
2017-07-24 20:22 - 2017-07-07 03:14 - 002956800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\win32kfull.sys
2017-07-24 20:22 - 2017-07-07 03:14 - 001802240 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2017-07-24 20:22 - 2017-07-07 03:14 - 001448960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\GdiPlus.dll
2017-07-24 20:22 - 2017-07-07 03:14 - 000790016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.dll
2017-07-24 20:22 - 2017-07-07 03:14 - 000570880 _____ (Microsoft Corporation) C:\Windows\system32\PhotoScreensaver.scr
2017-07-24 20:22 - 2017-07-07 03:14 - 000497152 _____ (Microsoft Corporation) C:\Windows\system32\rastls.dll
2017-07-24 20:22 - 2017-07-07 03:13 - 013839872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Xaml.dll
2017-07-24 20:22 - 2017-07-07 03:13 - 005892096 _____ (Microsoft Corporation) C:\Windows\system32\d2d1.dll
2017-07-24 20:22 - 2017-07-07 03:13 - 000840192 _____ (Microsoft Corporation) C:\Windows\system32\fveapi.dll
2017-07-24 20:22 - 2017-07-07 03:12 - 004730880 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2017-07-24 20:22 - 2017-07-07 03:12 - 003307008 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2017-07-24 20:22 - 2017-07-07 03:12 - 002499584 _____ (Microsoft Corporation) C:\Windows\system32\twinui.pcshell.dll
2017-07-24 20:22 - 2017-07-07 03:12 - 002199552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Xaml.Resources.dll
2017-07-24 20:22 - 2017-07-07 03:12 - 002055168 _____ (Microsoft Corporation) C:\Windows\system32\win32kbase.sys
2017-07-24 20:22 - 2017-07-07 03:12 - 001713664 _____ (Microsoft Corporation) C:\Windows\system32\ActiveSyncProvider.dll
2017-07-24 20:22 - 2017-07-07 03:12 - 001420800 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Xaml.Maps.dll
2017-07-24 20:22 - 2017-07-07 03:12 - 001305088 _____ (Microsoft Corporation) C:\Windows\system32\dosvc.dll
2017-07-24 20:22 - 2017-07-07 03:12 - 001293824 _____ (Microsoft Corporation) C:\Windows\system32\aadtb.dll
2017-07-24 20:22 - 2017-07-07 03:12 - 001142272 _____ (Microsoft Corporation) C:\Windows\system32\localspl.dll
2017-07-24 20:22 - 2017-07-07 03:12 - 000706560 _____ (Microsoft Corporation) C:\Windows\system32\winlogon.exe
2017-07-24 20:22 - 2017-07-07 03:11 - 003139584 _____ (Microsoft Corporation) C:\Windows\system32\msftedit.dll
2017-07-24 20:22 - 2017-07-07 03:11 - 002829824 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll
2017-07-24 20:22 - 2017-07-07 03:11 - 002649600 _____ (Microsoft Corporation) C:\Windows\system32\dwmcore.dll
2017-07-24 20:22 - 2017-07-07 03:11 - 002177024 _____ (Microsoft Corporation) C:\Windows\system32\OpcServices.dll
2017-07-24 20:22 - 2017-07-07 03:11 - 001888256 _____ (Microsoft Corporation) C:\Windows\system32\FntCache.dll
2017-07-24 20:22 - 2017-07-07 03:11 - 001812480 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
2017-07-24 20:22 - 2017-07-07 03:11 - 000986112 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2017-07-24 20:22 - 2017-07-07 03:11 - 000406528 _____ (Microsoft Corporation) C:\Windows\system32\wuuhext.dll
2017-07-24 20:22 - 2017-07-07 03:10 - 005557760 _____ (Microsoft Corporation) C:\Windows\system32\dbgeng.dll
2017-07-24 20:22 - 2017-07-07 03:10 - 004707840 _____ (Microsoft Corporation) C:\Windows\system32\ExplorerFrame.dll
2017-07-24 20:22 - 2017-07-07 03:10 - 002444288 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2017-07-24 20:22 - 2017-07-07 03:10 - 000079872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll
2017-07-24 20:22 - 2017-07-07 03:10 - 000025088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\eapprovp.dll
2017-07-24 20:22 - 2017-07-07 03:09 - 020504576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\edgehtml.dll
2017-07-24 20:22 - 2017-07-07 03:09 - 000365056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\daxexec.dll
2017-07-24 20:22 - 2017-07-07 03:08 - 000285696 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys
2017-07-24 20:22 - 2017-07-07 03:07 - 000430080 _____ (Microsoft Corporation) C:\Windows\system32\PlayToDevice.dll
2017-07-24 20:22 - 2017-07-07 03:07 - 000391168 _____ (Microsoft Corporation) C:\Windows\system32\WMPhoto.dll
2017-07-24 20:22 - 2017-07-07 03:07 - 000272896 _____ (Microsoft Corporation) C:\Windows\system32\PlayToReceiver.dll
2017-07-24 20:22 - 2017-07-07 03:07 - 000117248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\raschap.dll
2017-07-24 20:22 - 2017-07-07 03:06 - 000412160 _____ (Microsoft Corporation) C:\Windows\system32\SensorsApi.dll
2017-07-24 20:22 - 2017-07-07 03:06 - 000241152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecsExt.dll
2017-07-24 20:22 - 2017-07-07 03:06 - 000205824 _____ (Microsoft Corporation) C:\Windows\system32\sensrsvc.dll
2017-07-24 20:22 - 2017-07-07 03:05 - 019335168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2017-07-24 20:22 - 2017-07-07 03:05 - 011870720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2017-07-24 20:22 - 2017-07-07 03:05 - 006728192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\twinui.dll
2017-07-24 20:22 - 2017-07-07 03:05 - 005719040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\BingMaps.dll
2017-07-24 20:22 - 2017-07-07 03:05 - 000502784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DevicePairing.dll
2017-07-24 20:22 - 2017-07-07 03:05 - 000370176 _____ (Microsoft Corporation) C:\Windows\system32\msinfo32.exe
2017-07-24 20:22 - 2017-07-07 03:05 - 000312320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Wldap32.dll
2017-07-24 20:22 - 2017-07-07 03:04 - 005961216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Data.Pdf.dll
2017-07-24 20:22 - 2017-07-07 03:04 - 001703424 _____ (Microsoft Corporation) C:\Windows\system32\aitstatic.exe
2017-07-24 20:22 - 2017-07-07 03:04 - 001403392 _____ (Microsoft Corporation) C:\Windows\system32\wdc.dll
2017-07-24 20:22 - 2017-07-07 03:04 - 001248768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AzureSettingSyncProvider.dll
2017-07-24 20:22 - 2017-07-07 03:04 - 000754176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2017-07-24 20:22 - 2017-07-07 03:04 - 000506368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2017-07-24 20:22 - 2017-07-07 03:04 - 000394240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Internal.Management.dll
2017-07-24 20:22 - 2017-07-07 03:04 - 000058368 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll
2017-07-24 20:22 - 2017-07-07 03:03 - 006123520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mos.dll
2017-07-24 20:22 - 2017-07-07 03:03 - 000636416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WpcWebFilter.dll
2017-07-24 20:22 - 2017-07-07 03:03 - 000446464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rastls.dll
2017-07-24 20:22 - 2017-07-07 03:02 - 000952832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\comdlg32.dll
2017-07-24 20:22 - 2017-07-07 03:02 - 000508416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PhotoScreensaver.scr
2017-07-24 20:22 - 2017-07-07 03:01 - 006287360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Chakra.dll
2017-07-24 20:22 - 2017-07-07 03:01 - 002859520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2017-07-24 20:22 - 2017-07-07 03:00 - 007596544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstscax.dll
2017-07-24 20:22 - 2017-07-07 03:00 - 005225984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d2d1.dll
2017-07-24 20:22 - 2017-07-07 03:00 - 002588160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MapRouter.dll
2017-07-24 20:22 - 2017-07-07 03:00 - 001626624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2017-07-24 20:22 - 2017-07-07 03:00 - 001565184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll
2017-07-24 20:22 - 2017-07-07 03:00 - 001019904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\aadtb.dll
2017-07-24 20:22 - 2017-07-07 02:59 - 004417024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ExplorerFrame.dll
2017-07-24 20:22 - 2017-07-07 02:59 - 003656704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2017-07-24 20:22 - 2017-07-07 02:59 - 001494016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ActiveSyncProvider.dll
2017-07-24 20:22 - 2017-07-07 02:59 - 001355264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\OpcServices.dll
2017-07-24 20:22 - 2017-07-07 02:59 - 000787456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll
2017-07-24 20:22 - 2017-07-07 02:58 - 004559360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dbgeng.dll
2017-07-24 20:22 - 2017-07-07 02:58 - 002782720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msftedit.dll
2017-07-24 20:22 - 2017-07-07 02:58 - 002298368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dwmcore.dll
2017-07-24 20:22 - 2017-07-07 02:58 - 001237504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Xaml.Maps.dll
2017-07-24 20:22 - 2017-07-07 02:55 - 000342528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMPhoto.dll
2017-07-24 20:22 - 2017-07-07 02:55 - 000329216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SensorsApi.dll
2017-07-24 20:22 - 2017-07-07 02:53 - 001301504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdc.dll
2017-07-24 20:22 - 2017-07-07 02:53 - 000338432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msinfo32.exe
2017-07-24 20:22 - 2017-07-01 19:52 - 000031932 _____ C:\Windows\system32\edgehtmlpluginpolicy.bin
2017-07-24 20:22 - 2017-06-20 03:18 - 001564576 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll
2017-07-24 20:22 - 2017-06-20 03:18 - 000096672 _____ (Microsoft Corporation) C:\Windows\system32\CompatTelRunner.exe
2017-07-24 20:22 - 2017-06-20 03:17 - 000629152 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
2017-07-24 20:22 - 2017-06-20 03:17 - 000544160 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll
2017-07-24 20:22 - 2017-06-20 03:17 - 000334240 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll
2017-07-24 20:22 - 2017-06-20 03:17 - 000136096 _____ (Microsoft Corporation) C:\Windows\system32\acmigration.dll
2017-07-24 20:22 - 2017-06-20 03:17 - 000034720 _____ (Microsoft Corporation) C:\Windows\system32\DeviceCensus.exe
2017-07-24 20:22 - 2017-06-20 03:16 - 001214880 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2017-07-24 20:22 - 2017-06-20 03:16 - 000335776 _____ (Microsoft Corporation) C:\Windows\system32\dcntel.dll
2017-07-24 20:22 - 2017-06-20 03:11 - 001395152 _____ (Microsoft Corporation) C:\Windows\system32\winload.efi
2017-07-24 20:22 - 2017-06-20 03:11 - 000411992 _____ (Microsoft Corporation) C:\Windows\system32\MSAudDecMFT.dll
2017-07-24 20:22 - 2017-06-20 03:10 - 002327456 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ntfs.sys
2017-07-24 20:22 - 2017-06-20 03:10 - 001930320 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2017-07-24 20:22 - 2017-06-20 03:08 - 001242528 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ndis.sys
2017-07-24 20:22 - 2017-06-20 03:05 - 001057832 _____ (Microsoft Corporation) C:\Windows\system32\MrmCoreR.dll
2017-07-24 20:22 - 2017-06-20 03:04 - 004847424 _____ (Microsoft Corporation) C:\Windows\explorer.exe
2017-07-24 20:22 - 2017-06-20 03:04 - 000472728 _____ (Microsoft Corporation) C:\Windows\system32\policymanager.dll
2017-07-24 20:22 - 2017-06-20 03:03 - 000820128 _____ (Microsoft Corporation) C:\Windows\system32\WWAHost.exe
2017-07-24 20:22 - 2017-06-20 03:02 - 002645688 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2017-07-24 20:22 - 2017-06-20 03:02 - 001055648 _____ (Microsoft Corporation) C:\Windows\system32\LicenseManager.dll
2017-07-24 20:22 - 2017-06-20 03:00 - 000558920 _____ (Microsoft Corporation) C:\Windows\system32\Windows.ApplicationModel.dll
2017-07-24 20:22 - 2017-06-20 03:00 - 000255904 _____ (Microsoft Corporation) C:\Windows\system32\AppxAllUserStore.dll
2017-07-24 20:22 - 2017-06-20 03:00 - 000142752 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\wcifs.sys
2017-07-24 20:22 - 2017-06-20 02:59 - 006554928 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.dll
2017-07-24 20:22 - 2017-06-20 02:59 - 001220072 _____ (Microsoft Corporation) C:\Windows\system32\mfsvr.dll
2017-07-24 20:22 - 2017-06-20 02:59 - 001054280 _____ (Microsoft Corporation) C:\Windows\system32\AudioSes.dll
2017-07-24 20:22 - 2017-06-20 02:59 - 000583304 _____ (Microsoft Corporation) C:\Windows\system32\audiodg.exe
2017-07-24 20:22 - 2017-06-20 02:59 - 000467504 _____ (Microsoft Corporation) C:\Windows\system32\MFCaptureEngine.dll
2017-07-24 20:22 - 2017-06-20 02:58 - 000833160 _____ (Microsoft Corporation) C:\Windows\system32\EditionUpgradeManagerObj.dll
2017-07-24 20:22 - 2017-06-20 02:58 - 000406072 _____ (Microsoft Corporation) C:\Windows\system32\MMDevAPI.dll
2017-07-24 20:22 - 2017-06-20 02:58 - 000203168 _____ (Microsoft Corporation) C:\Windows\system32\CloudExperienceHostBroker.dll
2017-07-24 20:22 - 2017-06-20 02:57 - 002681760 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2017-07-24 20:22 - 2017-06-20 02:57 - 000204192 _____ (Microsoft Corporation) C:\Windows\system32\basecsp.dll
2017-07-24 20:22 - 2017-06-20 02:34 - 000192416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\aepic.dll
2017-07-24 20:22 - 2017-06-20 02:16 - 000970752 _____ (Microsoft Corporation) C:\Windows\system32\msctfuimanager.dll
2017-07-24 20:22 - 2017-06-20 02:16 - 000417280 _____ (Microsoft Corporation) C:\Windows\system32\oleacc.dll
2017-07-24 20:22 - 2017-06-20 02:15 - 001620368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2017-07-24 20:22 - 2017-06-20 02:15 - 000455104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MSAudDecMFT.dll
2017-07-24 20:22 - 2017-06-20 02:14 - 001150784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ucrtbase.dll
2017-07-24 20:22 - 2017-06-20 02:14 - 000032768 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mskssrv.sys
2017-07-24 20:22 - 2017-06-20 02:13 - 000787712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll
2017-07-24 20:22 - 2017-06-20 02:13 - 000081408 _____ (Microsoft Corporation) C:\Windows\system32\wwanprotdim.dll
2017-07-24 20:22 - 2017-06-20 02:13 - 000064000 _____ (Microsoft Corporation) C:\Windows\system32\WFDSConMgr.dll
2017-07-24 20:22 - 2017-06-20 02:13 - 000056832 _____ (Microsoft Corporation) C:\Windows\system32\WinBioDataModelOOBE.exe
2017-07-24 20:22 - 2017-06-20 02:12 - 000293376 _____ (Microsoft Corporation) C:\Windows\system32\MusNotification.exe
2017-07-24 20:22 - 2017-06-20 02:12 - 000231936 _____ (Microsoft Corporation) C:\Windows\system32\DolbyMATEnc.dll
2017-07-24 20:22 - 2017-06-20 02:12 - 000144384 _____ (Microsoft Corporation) C:\Windows\system32\Windows.System.Profile.RetailInfo.dll
2017-07-24 20:22 - 2017-06-20 02:12 - 000115712 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\bridge.sys
2017-07-24 20:22 - 2017-06-20 02:11 - 000200192 _____ (Microsoft Corporation) C:\Windows\system32\ScDeviceEnum.dll
2017-07-24 20:22 - 2017-06-20 02:11 - 000084992 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2017-07-24 20:22 - 2017-06-20 02:10 - 000722432 _____ (Microsoft Corporation) C:\Windows\system32\MusUpdateHandlers.dll
2017-07-24 20:22 - 2017-06-20 02:10 - 000315392 _____ (Microsoft Corporation) C:\Windows\system32\SettingsEnvironment.Desktop.dll
2017-07-24 20:22 - 2017-06-20 02:10 - 000188928 _____ (Microsoft Corporation) C:\Windows\system32\wincredui.dll
2017-07-24 20:22 - 2017-06-20 02:10 - 000096256 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2017-07-24 20:22 - 2017-06-20 02:09 - 000555008 _____ (Microsoft Corporation) C:\Windows\system32\WFDSConMgrSvc.dll
2017-07-24 20:22 - 2017-06-20 02:09 - 000551424 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Payments.dll
2017-07-24 20:22 - 2017-06-20 02:09 - 000497152 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Shell.BlueLightReduction.dll
2017-07-24 20:22 - 2017-06-20 02:09 - 000427008 _____ (Microsoft Corporation) C:\Windows\system32\provengine.dll
2017-07-24 20:22 - 2017-06-20 02:09 - 000406032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\policymanager.dll
2017-07-24 20:22 - 2017-06-20 02:09 - 000357888 _____ (Microsoft Corporation) C:\Windows\system32\Narrator.exe
2017-07-24 20:22 - 2017-06-20 02:09 - 000250368 _____ (Microsoft Corporation) C:\Windows\system32\SCardSvr.dll
2017-07-24 20:22 - 2017-06-20 02:09 - 000208384 _____ (Microsoft Corporation) C:\Windows\system32\psmsrv.dll
2017-07-24 20:22 - 2017-06-20 02:09 - 000205312 _____ (Microsoft Corporation) C:\Windows\system32\ClipboardServer.dll
2017-07-24 20:22 - 2017-06-20 02:09 - 000189952 _____ (Microsoft Corporation) C:\Windows\system32\certprop.dll
2017-07-24 20:22 - 2017-06-20 02:09 - 000140288 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll
2017-07-24 20:22 - 2017-06-20 02:09 - 000135680 _____ (Microsoft Corporation) C:\Windows\system32\sendmail.dll
2017-07-24 20:22 - 2017-06-20 02:09 - 000062464 _____ (Microsoft Corporation) C:\Windows\system32\dataclen.dll
2017-07-24 20:22 - 2017-06-20 02:08 - 004469840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\explorer.exe
2017-07-24 20:22 - 2017-06-20 02:08 - 000791040 _____ (Microsoft Corporation) C:\Windows\system32\certca.dll
2017-07-24 20:22 - 2017-06-20 02:08 - 000646656 _____ (Microsoft Corporation) C:\Windows\system32\LockHostingFramework.dll
2017-07-24 20:22 - 2017-06-20 02:08 - 000386560 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2017-07-24 20:22 - 2017-06-20 02:08 - 000365056 _____ (Microsoft Corporation) C:\Windows\system32\SettingsHandlers_Notifications.dll
2017-07-24 20:22 - 2017-06-20 02:08 - 000328704 _____ (Microsoft Corporation) C:\Windows\system32\PsmServiceExtHost.dll
2017-07-24 20:22 - 2017-06-20 02:08 - 000327168 _____ (Microsoft Corporation) C:\Windows\system32\WinBioDataModel.dll
2017-07-24 20:22 - 2017-06-20 02:08 - 000274944 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2017-07-24 20:22 - 2017-06-20 02:08 - 000251392 _____ (Microsoft Corporation) C:\Windows\system32\scksp.dll
2017-07-24 20:22 - 2017-06-20 02:07 - 002475136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10warp.dll
2017-07-24 20:22 - 2017-06-20 02:07 - 000823296 _____ (Microsoft Corporation) C:\Windows\system32\MbaeApi.dll
2017-07-24 20:22 - 2017-06-20 02:07 - 000757248 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdiWiFi.sys
2017-07-24 20:22 - 2017-06-20 02:07 - 000632832 _____ (Microsoft Corporation) C:\Windows\system32\tileobjserver.dll
2017-07-24 20:22 - 2017-06-20 02:07 - 000626176 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Internal.Bluetooth.dll
2017-07-24 20:22 - 2017-06-20 02:07 - 000621056 _____ (Microsoft Corporation) C:\Windows\system32\SndVolSSO.dll
2017-07-24 20:22 - 2017-06-20 02:07 - 000510976 _____ (Microsoft Corporation) C:\Windows\system32\TDLMigration.dll
2017-07-24 20:22 - 2017-06-20 02:07 - 000411136 _____ (Microsoft Corporation) C:\Windows\system32\updatehandlers.dll
2017-07-24 20:22 - 2017-06-20 02:07 - 000346016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\CloudExperienceHostCommon.dll
2017-07-24 20:22 - 2017-06-20 02:07 - 000138656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\CloudExperienceHostUser.dll
2017-07-24 20:22 - 2017-06-20 02:06 - 000942592 _____ (Microsoft Corporation) C:\Windows\system32\wbiosrvc.dll
2017-07-24 20:22 - 2017-06-20 02:06 - 000847872 _____ (Microsoft Corporation) C:\Windows\system32\bisrv.dll
2017-07-24 20:22 - 2017-06-20 02:06 - 000754592 _____ (Microsoft Corporation) C:\Windows\SysWOW64\LicenseManager.dll
2017-07-24 20:22 - 2017-06-20 02:06 - 000751104 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2017-07-24 20:22 - 2017-06-20 02:06 - 000455680 _____ (Microsoft Corporation) C:\Windows\system32\certcli.dll
2017-07-24 20:22 - 2017-06-20 02:06 - 000411648 _____ (Microsoft Corporation) C:\Windows\system32\ActivationManager.dll
2017-07-24 20:22 - 2017-06-20 02:06 - 000335872 _____ (Microsoft Corporation) C:\Windows\system32\CloudDomainJoinDataModelServer.dll
2017-07-24 20:22 - 2017-06-20 02:06 - 000299520 _____ (Microsoft Corporation) C:\Windows\system32\AboveLockAppHost.dll
2017-07-24 20:22 - 2017-06-20 02:06 - 000278944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\thumbcache.dll
2017-07-24 20:22 - 2017-06-20 02:06 - 000253440 _____ (Microsoft Corporation) C:\Windows\system32\edputil.dll
2017-07-24 20:22 - 2017-06-20 02:06 - 000045056 _____ (Microsoft Corporation) C:\Windows\system32\TokenBrokerUI.dll
2017-07-24 20:22 - 2017-06-20 02:05 - 004447744 _____ (Microsoft Corporation) C:\Windows\system32\SettingsHandlers_nt.dll
2017-07-24 20:22 - 2017-06-20 02:05 - 002873344 _____ (Microsoft Corporation) C:\Windows\system32\themeui.dll
2017-07-24 20:22 - 2017-06-20 02:05 - 001468416 _____ (Microsoft Corporation) C:\Windows\system32\AppXDeploymentExtensions.desktop.dll
2017-07-24 20:22 - 2017-06-20 02:05 - 000873472 _____ (Microsoft Corporation) C:\Windows\system32\rasmans.dll
2017-07-24 20:22 - 2017-06-20 02:05 - 000696320 _____ (Microsoft Corporation) C:\Windows\system32\mmsys.cpl
2017-07-24 20:22 - 2017-06-20 02:05 - 000687616 _____ (Microsoft Corporation) C:\Windows\system32\LogonController.dll
2017-07-24 20:22 - 2017-06-20 02:05 - 000438096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.ApplicationModel.dll
2017-07-24 20:22 - 2017-06-20 02:05 - 000417792 _____ (Microsoft Corporation) C:\Windows\system32\InstallAgentUserBroker.exe
2017-07-24 20:22 - 2017-06-20 02:05 - 000406528 _____ (Microsoft Corporation) C:\Windows\system32\InputSwitch.dll
2017-07-24 20:22 - 2017-06-20 02:05 - 000374784 _____ (Microsoft Corporation) C:\Windows\system32\InstallAgent.exe
2017-07-24 20:22 - 2017-06-20 02:05 - 000364032 _____ (Microsoft Corporation) C:\Windows\system32\SearchProtocolHost.exe
2017-07-24 20:22 - 2017-06-20 02:05 - 000056832 _____ (Microsoft Corporation) C:\Windows\system32\cldapi.dll
2017-07-24 20:22 - 2017-06-20 02:04 - 002330520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\combase.dll
2017-07-24 20:22 - 2017-06-20 02:04 - 001818624 _____ (Microsoft Corporation) C:\Windows\system32\UIAutomationCore.dll
2017-07-24 20:22 - 2017-06-20 02:04 - 001425920 _____ (Microsoft Corporation) C:\Windows\system32\certutil.exe
2017-07-24 20:22 - 2017-06-20 02:04 - 001178528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AppxPackaging.dll
2017-07-24 20:22 - 2017-06-20 02:04 - 001177600 _____ (Microsoft Corporation) C:\Windows\system32\Unistore.dll
2017-07-24 20:22 - 2017-06-20 02:04 - 001077496 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webservices.dll
2017-07-24 20:22 - 2017-06-20 02:04 - 000802816 _____ (Microsoft Corporation) C:\Windows\system32\wcmsvc.dll
2017-07-24 20:22 - 2017-06-20 02:04 - 000400896 _____ (Microsoft Corporation) C:\Windows\system32\RDXTaskFactory.dll
2017-07-24 20:22 - 2017-06-20 02:04 - 000181656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AppxAllUserStore.dll
2017-07-24 20:22 - 2017-06-20 02:04 - 000178176 _____ (Microsoft Corporation) C:\Windows\system32\EditionUpgradeHelper.dll
2017-07-24 20:22 - 2017-06-20 02:04 - 000049656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msasn1.dll
2017-07-24 20:22 - 2017-06-20 02:03 - 005806048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.dll
2017-07-24 20:22 - 2017-06-20 02:03 - 002077184 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2017-07-24 20:22 - 2017-06-20 02:03 - 001396224 _____ (Microsoft Corporation) C:\Windows\system32\wwansvc.dll
2017-07-24 20:22 - 2017-06-20 02:03 - 000864240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioSes.dll
2017-07-24 20:22 - 2017-06-20 02:03 - 000443728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MFCaptureEngine.dll
2017-07-24 20:22 - 2017-06-20 02:02 - 003377664 _____ (Microsoft Corporation) C:\Windows\system32\tquery.dll
2017-07-24 20:22 - 2017-06-20 02:02 - 002804736 _____ (Microsoft Corporation) C:\Windows\system32\AppXDeploymentServer.dll
2017-07-24 20:22 - 2017-06-20 02:02 - 001886208 _____ (Microsoft Corporation) C:\Windows\system32\AppXDeploymentExtensions.onecore.dll
2017-07-24 20:22 - 2017-06-20 02:02 - 001121928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfsvr.dll
2017-07-24 20:22 - 2017-06-20 02:02 - 000681984 _____ (Microsoft Corporation) C:\Windows\system32\usocore.dll
2017-07-24 20:22 - 2017-06-20 02:02 - 000354400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MMDevAPI.dll
2017-07-24 20:22 - 2017-06-20 02:02 - 000081920 _____ (Microsoft Corporation) C:\Windows\system32\CloudDomainJoinAUG.dll
2017-07-24 20:22 - 2017-06-20 02:01 - 004536320 _____ (Microsoft Corporation) C:\Windows\system32\MFMediaEngine.dll
2017-07-24 20:22 - 2017-06-20 02:01 - 004396032 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_47.dll
2017-07-24 20:22 - 2017-06-20 02:01 - 003803136 _____ (Microsoft Corporation) C:\Windows\system32\SystemSettingsThresholdAdminFlowUI.dll
2017-07-24 20:22 - 2017-06-20 02:01 - 003332096 _____ (Microsoft Corporation) C:\Windows\system32\SRH.dll
2017-07-24 20:22 - 2017-06-20 02:01 - 003059200 _____ (Microsoft Corporation) C:\Windows\system32\NetworkMobileSettings.dll
2017-07-24 20:22 - 2017-06-20 02:01 - 001076736 _____ (Microsoft Corporation) C:\Windows\system32\twinui.appcore.dll
2017-07-24 20:22 - 2017-06-20 02:01 - 000809984 _____ (Microsoft Corporation) C:\Windows\system32\rasapi32.dll
2017-07-24 20:22 - 2017-06-20 02:01 - 000397312 _____ (Microsoft Corporation) C:\Windows\system32\rascustom.dll
2017-07-24 20:22 - 2017-06-20 02:01 - 000176032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\basecsp.dll
2017-07-24 20:22 - 2017-06-20 02:00 - 003057664 _____ (Microsoft Corporation) C:\Windows\system32\CertEnroll.dll
2017-07-24 20:22 - 2017-06-20 02:00 - 002597888 _____ (Microsoft Corporation) C:\Windows\system32\mssrch.dll
2017-07-24 20:22 - 2017-06-20 02:00 - 002171392 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.Bluetooth.dll
2017-07-24 20:22 - 2017-06-20 01:59 - 002938880 _____ (Microsoft Corporation) C:\Windows\system32\InputService.dll
2017-07-24 20:22 - 2017-06-20 01:59 - 001674240 _____ (Microsoft Corporation) C:\Windows\system32\wpncore.dll
2017-07-24 20:22 - 2017-06-20 01:59 - 001357824 _____ (Microsoft Corporation) C:\Windows\system32\audiosrv.dll
2017-07-24 20:22 - 2017-06-20 01:58 - 000625152 _____ (Microsoft Corporation) C:\Windows\system32\AudioEndpointBuilder.dll
2017-07-24 20:22 - 2017-06-20 01:57 - 000290816 _____ (Microsoft Corporation) C:\Windows\system32\omadmclient.exe
2017-07-24 20:22 - 2017-06-20 01:57 - 000138752 _____ (Microsoft Corporation) C:\Windows\system32\DMPushRouterCore.dll
2017-07-24 20:22 - 2017-06-20 01:56 - 000985600 _____ (Microsoft Corporation) C:\Windows\system32\TSWorkspace.dll
2017-07-24 20:22 - 2017-06-20 01:56 - 000600064 _____ (Microsoft Corporation) C:\Windows\system32\FrameServer.dll
2017-07-24 20:22 - 2017-06-20 01:56 - 000241152 _____ (Microsoft Corporation) C:\Windows\system32\wdmaud.drv
2017-07-24 20:22 - 2017-06-20 01:54 - 000059392 _____ (Microsoft Corporation) C:\Windows\system32\DmApiSetExtImplDesktop.dll
2017-07-24 20:22 - 2017-06-20 01:49 - 000899072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msctfuimanager.dll
2017-07-24 20:22 - 2017-06-20 01:49 - 000331776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleacc.dll
2017-07-24 20:22 - 2017-06-20 01:46 - 000132096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Microsoft.Bluetooth.Profiles.Gatt.Interface.dll
2017-07-24 20:22 - 2017-06-20 01:45 - 000111104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.System.Profile.RetailInfo.dll
2017-07-24 20:22 - 2017-06-20 01:45 - 000064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2017-07-24 20:22 - 2017-06-20 01:43 - 000329728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webplatstorageserver.dll
2017-07-24 20:22 - 2017-06-20 01:43 - 000173568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ClipboardServer.dll
2017-07-24 20:22 - 2017-06-20 01:43 - 000151552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wincredui.dll
2017-07-24 20:22 - 2017-06-20 01:43 - 000139776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\BluetoothApis.dll
2017-07-24 20:22 - 2017-06-20 01:43 - 000124928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll
2017-07-24 20:22 - 2017-06-20 01:43 - 000080384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2017-07-24 20:22 - 2017-06-20 01:43 - 000052224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dataclen.dll
2017-07-24 20:22 - 2017-06-20 01:42 - 000641024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certca.dll
2017-07-24 20:22 - 2017-06-20 01:42 - 000387584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Payments.dll
2017-07-24 20:22 - 2017-06-20 01:42 - 000338432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2017-07-24 20:22 - 2017-06-20 01:42 - 000266240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2017-07-24 20:22 - 2017-06-20 01:42 - 000226304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\scksp.dll
2017-07-24 20:22 - 2017-06-20 01:42 - 000121856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sendmail.dll
2017-07-24 20:22 - 2017-06-20 01:41 - 000734208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\bcastdvr.exe
2017-07-24 20:22 - 2017-06-20 01:41 - 000646656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MbaeApi.dll
2017-07-24 20:22 - 2017-06-20 01:41 - 000601088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SndVolSSO.dll
2017-07-24 20:22 - 2017-06-20 01:41 - 000433152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Internal.Bluetooth.dll
2017-07-24 20:22 - 2017-06-20 01:41 - 000201216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credprovhost.dll
2017-07-24 20:22 - 2017-06-20 01:40 - 000368128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\InstallAgentUserBroker.exe
2017-07-24 20:22 - 2017-06-20 01:40 - 000356864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ActivationManager.dll
2017-07-24 20:22 - 2017-06-20 01:40 - 000342016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certcli.dll
2017-07-24 20:22 - 2017-06-20 01:40 - 000247808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AboveLockAppHost.dll
2017-07-24 20:22 - 2017-06-20 01:40 - 000230912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\edputil.dll
2017-07-24 20:22 - 2017-06-20 01:40 - 000038400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TokenBrokerUI.dll
2017-07-24 20:22 - 2017-06-20 01:39 - 002814464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\themeui.dll
2017-07-24 20:22 - 2017-06-20 01:39 - 002671616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tquery.dll
2017-07-24 20:22 - 2017-06-20 01:39 - 000969728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Unistore.dll
2017-07-24 20:22 - 2017-06-20 01:39 - 000646144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mmsys.cpl
2017-07-24 20:22 - 2017-06-20 01:39 - 000471040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\VAN.dll
2017-07-24 20:22 - 2017-06-20 01:39 - 000312320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchProtocolHost.exe
2017-07-24 20:22 - 2017-06-20 01:38 - 001451008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UIAutomationCore.dll
2017-07-24 20:22 - 2017-06-20 01:38 - 001285120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dbghelp.dll
2017-07-24 20:22 - 2017-06-20 01:38 - 001171968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certutil.exe
2017-07-24 20:22 - 2017-06-20 01:38 - 000663040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2017-07-24 20:22 - 2017-06-20 01:38 - 000648192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SmartcardCredentialProvider.dll
2017-07-24 20:22 - 2017-06-20 01:38 - 000329728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\InstallAgent.exe
2017-07-24 20:22 - 2017-06-20 01:37 - 002008576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2017-07-24 20:22 - 2017-06-20 01:36 - 003667456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_47.dll
2017-07-24 20:22 - 2017-06-20 01:35 - 002679296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SRH.dll
2017-07-24 20:22 - 2017-06-20 01:35 - 002132480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssrch.dll
2017-07-24 20:22 - 2017-06-20 01:35 - 000050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cldapi.dll
2017-07-24 20:22 - 2017-06-20 01:34 - 004056576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MFMediaEngine.dll
2017-07-24 20:22 - 2017-06-20 01:34 - 002750464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\CertEnroll.dll
2017-07-24 20:22 - 2017-06-20 01:34 - 002211328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\InputService.dll
2017-07-24 20:22 - 2017-06-20 01:34 - 001492480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Devices.Bluetooth.dll
2017-07-24 20:22 - 2017-06-20 01:34 - 000760832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rasapi32.dll
2017-07-24 20:22 - 2017-06-20 01:31 - 000334848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PlayToDevice.dll
2017-07-24 20:22 - 2017-06-20 01:30 - 000209920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdmaud.drv
2017-07-24 20:22 - 2017-06-20 01:30 - 000157696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpchttp.dll
2017-07-24 20:22 - 2017-06-20 01:30 - 000089088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\olepro32.dll
2017-07-24 20:22 - 2017-06-20 01:28 - 000584192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apphelp.dll
2017-07-24 20:22 - 2017-06-03 07:15 - 000382368 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll
2017-07-24 20:22 - 2017-06-03 07:09 - 001003624 _____ (Microsoft Corporation) C:\Windows\system32\ucrtbase.dll
2017-07-24 20:22 - 2017-06-03 06:59 - 000311200 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll
2017-07-24 20:22 - 2017-06-03 06:14 - 000047104 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll
2017-07-24 20:22 - 2017-06-03 06:11 - 000128000 _____ (Microsoft Corporation) C:\Windows\system32\mssprxy.dll
2017-07-24 20:22 - 2017-06-03 06:11 - 000038912 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll
2017-07-24 20:22 - 2017-06-03 06:00 - 000933376 _____ (Microsoft Corporation) C:\Windows\system32\SearchIndexer.exe
2017-07-24 20:22 - 2017-06-03 05:59 - 002625024 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Logon.dll
2017-07-24 20:22 - 2017-06-03 05:57 - 000797184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchIndexer.exe
2017-07-24 20:22 - 2017-06-03 05:54 - 002341376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll
2017-07-24 20:22 - 2017-05-20 05:43 - 004672848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfcore.dll
2017-07-24 20:22 - 2017-05-20 05:20 - 000807424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\StoreAgent.dll
2017-07-24 20:22 - 2017-05-20 05:16 - 000899584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\twinui.appcore.dll
2017-07-24 20:22 - 2017-05-20 05:15 - 002088960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MapGeocoder.dll
2017-07-24 20:22 - 2017-05-20 03:56 - 000712608 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgmms2.sys
2017-07-24 20:22 - 2017-05-20 03:56 - 000370928 _____ (Microsoft Corporation) C:\Windows\system32\SystemSettingsAdminFlows.exe
2017-07-24 20:22 - 2017-05-20 03:52 - 004709528 _____ (Microsoft Corporation) C:\Windows\system32\mfcore.dll
2017-07-24 20:22 - 2017-05-20 03:00 - 001078272 _____ (Microsoft Corporation) C:\Windows\system32\StoreAgent.dll
2017-07-24 20:22 - 2017-05-20 02:59 - 001141760 _____ (Microsoft Corporation) C:\Windows\system32\MapsStore.dll
2017-07-24 20:22 - 2017-05-20 02:58 - 003135488 _____ (Microsoft Corporation) C:\Windows\system32\MapGeocoder.dll
2017-07-24 20:22 - 2017-05-20 02:58 - 001046016 _____ (Microsoft Corporation) C:\Windows\system32\comdlg32.dll
2017-07-24 20:22 - 2017-05-20 02:52 - 000476160 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Core.TextInput.dll
2017-07-24 20:22 - 2017-04-27 21:57 - 003116184 _____ (Microsoft Corporation) C:\Windows\system32\combase.dll
2017-07-24 20:22 - 2017-04-27 21:08 - 000457728 _____ (Microsoft Corporation) C:\Windows\system32\webplatstorageserver.dll
2017-07-24 20:22 - 2017-04-19 03:15 - 000232960 _____ (Microsoft Corporation) C:\Windows\system32\wcmcsp.dll
2017-07-24 20:22 - 2017-04-19 03:10 - 001600512 _____ (Microsoft Corporation) C:\Windows\system32\dbghelp.dll
2017-07-24 20:22 - 2017-04-13 20:37 - 000315392 _____ (Microsoft Corporation) C:\Windows\system32\NotificationObjFactory.dll
2017-07-24 20:22 - 2017-04-13 20:15 - 000282112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\VEEventDispatcher.dll
2017-07-24 20:22 - 2017-04-13 20:13 - 000354304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\InputSwitch.dll
2017-07-24 20:22 - 2017-03-31 21:52 - 000409504 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgmms1.sys
2017-07-24 20:22 - 2017-03-31 21:04 - 000364032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msIso.dll
2017-07-24 20:22 - 2017-03-31 21:01 - 000429568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winspool.drv
2017-07-24 20:22 - 2017-03-31 20:58 - 000433664 _____ (Microsoft Corporation) C:\Windows\system32\msIso.dll
2017-07-24 20:21 - 2017-07-07 04:27 - 001147288 _____ (Microsoft Corporation) C:\Windows\system32\hvix64.exe
2017-07-24 20:21 - 2017-07-07 04:27 - 001024928 _____ (Microsoft Corporation) C:\Windows\system32\hvax64.exe
2017-07-24 20:21 - 2017-07-07 04:27 - 000965024 _____ (Microsoft Corporation) C:\Windows\system32\hvloader.efi
2017-07-24 20:21 - 2017-07-07 04:27 - 000821664 _____ (Microsoft Corporation) C:\Windows\system32\hvloader.exe
2017-07-24 20:21 - 2017-07-07 04:20 - 000923040 _____ (Microsoft Corporation) C:\Windows\system32\CoreMessaging.dll
2017-07-24 20:21 - 2017-07-07 04:13 - 000872472 _____ (Microsoft Corporation) C:\Windows\system32\ClipSVC.dll
2017-07-24 20:21 - 2017-07-07 04:13 - 000554392 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\USBHUB3.SYS
2017-07-24 20:21 - 2017-07-07 04:13 - 000147800 _____ (Microsoft Corporation) C:\Windows\system32\Clipc.dll
2017-07-24 20:21 - 2017-07-07 04:08 - 001854880 _____ (Microsoft Corporation) C:\Windows\system32\AppVEntVirtualization.dll
2017-07-24 20:21 - 2017-07-07 04:08 - 001693600 _____ (Microsoft Corporation) C:\Windows\system32\AppVIntegration.dll
2017-07-24 20:21 - 2017-07-07 04:08 - 001458584 _____ (Microsoft Corporation) C:\Windows\system32\AppVEntSubsystemController.dll
2017-07-24 20:21 - 2017-07-07 04:08 - 001100704 _____ (Microsoft Corporation) C:\Windows\system32\AppVPolicy.dll
2017-07-24 20:21 - 2017-07-07 04:08 - 000992672 _____ (Microsoft Corporation) C:\Windows\system32\AppVManifest.dll
2017-07-24 20:21 - 2017-07-07 04:08 - 000848280 _____ (Microsoft Corporation) C:\Windows\system32\AppVOrchestration.dll
2017-07-24 20:21 - 2017-07-07 04:08 - 000846752 _____ (Microsoft Corporation) C:\Windows\system32\AppVClient.exe
2017-07-24 20:21 - 2017-07-07 04:08 - 000844704 _____ (Microsoft Corporation) C:\Windows\system32\AppVEntStreamingManager.dll
2017-07-24 20:21 - 2017-07-07 04:08 - 000774560 _____ (Microsoft Corporation) C:\Windows\system32\AppVReporting.dll
2017-07-24 20:21 - 2017-07-07 04:08 - 000699808 _____ (Microsoft Corporation) C:\Windows\system32\AppVCatalog.dll
2017-07-24 20:21 - 2017-07-07 04:08 - 000672672 _____ (Microsoft Corporation) C:\Windows\system32\AppVPublishing.dll
2017-07-24 20:21 - 2017-07-07 04:08 - 000506776 _____ (Microsoft Corporation) C:\Windows\system32\TransportDSA.dll
2017-07-24 20:21 - 2017-07-07 04:08 - 000399264 _____ (Microsoft Corporation) C:\Windows\system32\AppVScripting.dll
2017-07-24 20:21 - 2017-07-07 03:22 - 000520704 _____ (Microsoft Corporation) C:\Windows\system32\daxexec.dll
2017-07-24 20:21 - 2017-06-20 03:15 - 000233376 _____ (Microsoft Corporation) C:\Windows\system32\aepic.dll
2017-07-24 20:21 - 2017-06-20 03:06 - 000279968 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\msiscsi.sys
2017-07-24 20:21 - 2017-06-20 03:03 - 000179608 _____ (Microsoft Corporation) C:\Windows\system32\CloudExperienceHostUser.dll
2017-07-24 20:21 - 2017-06-20 03:03 - 000102312 _____ (Microsoft Corporation) C:\Windows\system32\CredentialUIBroker.exe
2017-07-24 20:21 - 2017-06-20 03:02 - 000426912 _____ (Microsoft Corporation) C:\Windows\system32\CloudExperienceHostCommon.dll
2017-07-24 20:21 - 2017-06-20 02:13 - 000216064 _____ (Microsoft Corporation) C:\Windows\system32\Microsoft.Bluetooth.Profiles.Gatt.Interface.dll
2017-07-24 20:21 - 2017-06-20 02:12 - 000086528 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hdaudbus.sys
2017-07-24 20:21 - 2017-06-20 02:10 - 000778240 _____ (Microsoft Corporation) C:\Windows\system32\DolbyHrtfEnc.dll
2017-07-24 20:21 - 2017-06-20 02:10 - 000189440 _____ (Microsoft Corporation) C:\Windows\system32\BluetoothApis.dll
2017-07-24 20:21 - 2017-06-20 02:07 - 000916992 _____ (Microsoft Corporation) C:\Windows\system32\bcastdvr.exe
2017-07-24 20:21 - 2017-06-20 02:05 - 000585216 _____ (Microsoft Corporation) C:\Windows\system32\AppReadiness.dll
2017-07-24 20:21 - 2017-06-20 02:04 - 000899072 _____ (Microsoft Corporation) C:\Windows\system32\SmartcardCredentialProvider.dll
2017-07-24 20:21 - 2017-06-20 02:02 - 003204096 _____ (Microsoft Corporation) C:\Windows\system32\Microsoft.Bluetooth.Profiles.Gatt.dll
2017-07-24 20:21 - 2017-06-03 07:15 - 001596600 _____ (Microsoft Corporation) C:\Windows\system32\gdi32full.dll
2017-07-24 20:21 - 2017-06-03 07:10 - 000130464 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tm.sys
2017-07-24 20:21 - 2017-06-03 07:07 - 000119712 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tdx.sys
2017-07-24 20:21 - 2017-06-03 06:59 - 001409048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32full.dll
2017-07-24 20:21 - 2017-06-03 06:59 - 000259400 _____ (Microsoft Corporation) C:\Windows\system32\MusNotifyIcon.exe
2017-07-24 20:21 - 2017-06-03 06:58 - 000660384 _____ (Microsoft Corporation) C:\Windows\system32\comctl32.dll
2017-07-24 20:21 - 2017-06-03 06:26 - 000266640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\capauthz.dll
2017-07-24 20:21 - 2017-06-03 06:23 - 000573856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\comctl32.dll
2017-07-24 20:21 - 2017-06-03 06:14 - 000142848 _____ (Microsoft Corporation) C:\Windows\system32\dwmredir.dll
2017-07-24 20:21 - 2017-06-03 06:14 - 000099328 _____ (Microsoft Corporation) C:\Windows\system32\utcutil.dll
2017-07-24 20:21 - 2017-06-03 06:12 - 000119296 _____ (Microsoft Corporation) C:\Windows\system32\UserDataTimeUtil.dll
2017-07-24 20:21 - 2017-06-03 06:11 - 000052736 _____ (Microsoft Corporation) C:\Windows\system32\musdialoghandlers.dll
2017-07-24 20:21 - 2017-06-03 06:11 - 000002560 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2017-07-24 20:21 - 2017-06-03 06:10 - 000102400 _____ (Microsoft Corporation) C:\Windows\system32\MusNotificationUx.exe
2017-07-24 20:21 - 2017-06-03 06:10 - 000076800 _____ (Microsoft Corporation) C:\Windows\system32\DeviceCredentialDeployment.exe
2017-07-24 20:21 - 2017-06-03 06:09 - 000271872 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Security.Authentication.Identity.Provider.dll
2017-07-24 20:21 - 2017-06-03 06:09 - 000221184 _____ (Microsoft Corporation) C:\Windows\system32\devicengccredprov.dll
2017-07-24 20:21 - 2017-06-03 06:09 - 000094720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UserDataTimeUtil.dll
2017-07-24 20:21 - 2017-06-03 06:07 - 000778240 _____ C:\Windows\system32\MBR2GPT.EXE
2017-07-24 20:21 - 2017-06-03 06:07 - 000002560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll
2017-07-24 20:21 - 2017-06-03 06:06 - 000551936 _____ (Microsoft Corporation) C:\Windows\system32\TpmCoreProvisioning.dll
2017-07-24 20:21 - 2017-06-03 06:05 - 000198656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Security.Authentication.Identity.Provider.dll
2017-07-24 20:21 - 2017-06-03 06:05 - 000169984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\devicengccredprov.dll
2017-07-24 20:21 - 2017-06-03 06:04 - 000805888 _____ (Microsoft Corporation) C:\Windows\system32\ieproxy.dll
2017-07-24 20:21 - 2017-06-03 06:03 - 000467456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TpmCoreProvisioning.dll
2017-07-24 20:21 - 2017-06-03 06:01 - 006726656 _____ (Microsoft Corporation) C:\Windows\system32\mspaint.exe
2017-07-24 20:21 - 2017-06-03 06:00 - 000358400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieproxy.dll
2017-07-24 20:21 - 2017-06-03 05:59 - 000975360 _____ (Microsoft Corporation) C:\Windows\HelpPane.exe
2017-07-24 20:21 - 2017-06-03 05:58 - 002516480 _____ (Microsoft Corporation) C:\Windows\system32\diagtrack.dll
2017-07-24 20:21 - 2017-06-03 05:58 - 001046016 _____ (Microsoft Corporation) C:\Windows\system32\ngcsvc.dll
2017-07-24 20:21 - 2017-06-03 05:58 - 000827392 _____ (Microsoft Corporation) C:\Windows\system32\win32spl.dll
2017-07-24 20:21 - 2017-06-03 05:57 - 006535168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mspaint.exe
2017-07-24 20:21 - 2017-06-03 05:54 - 000794112 _____ (Microsoft Corporation) C:\Windows\system32\pwcreator.exe
2017-07-24 20:21 - 2017-05-20 06:13 - 001333136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msctf.dll
2017-07-24 20:21 - 2017-05-20 05:55 - 000606960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleaut32.dll
2017-07-24 20:21 - 2017-05-20 05:47 - 001474800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.ApplicationModel.Store.dll
2017-07-24 20:21 - 2017-05-20 05:46 - 001266544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\twinapi.appcore.dll
2017-07-24 20:21 - 2017-05-20 05:44 - 000519680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AppXDeploymentClient.dll
2017-07-24 20:21 - 2017-05-20 05:43 - 002424016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfmp4srcsnk.dll
2017-07-24 20:21 - 2017-05-20 05:43 - 001455592 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfplat.dll
2017-07-24 20:21 - 2017-05-20 05:29 - 000584192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UIRibbonRes.dll
2017-07-24 20:21 - 2017-05-20 05:27 - 000141824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\smartscreenps.dll
2017-07-24 20:21 - 2017-05-20 05:26 - 000059904 _____ C:\Windows\SysWOW64\xboxgipsynthetic.dll
2017-07-24 20:21 - 2017-05-20 05:26 - 000025088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\odbcconf.dll
2017-07-24 20:21 - 2017-05-20 05:25 - 000826368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\NPSMDesktopProvider.dll
2017-07-24 20:21 - 2017-05-20 05:25 - 000174080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Web.Diagnostics.dll
2017-07-24 20:21 - 2017-05-20 05:22 - 001292288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MSVPXENC.dll
2017-07-24 20:21 - 2017-05-20 05:22 - 000754176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MessagingDataModel2.dll
2017-07-24 20:21 - 2017-05-20 05:22 - 000394240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DictationManager.dll
2017-07-24 20:21 - 2017-05-20 05:21 - 001984000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DeviceFlows.DataModel.dll
2017-07-24 20:21 - 2017-05-20 05:21 - 000476672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\OneDriveSettingSyncProvider.dll
2017-07-24 20:21 - 2017-05-20 05:21 - 000444928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.System.Launcher.dll
2017-07-24 20:21 - 2017-05-20 05:17 - 000909312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SettingSyncCore.dll
2017-07-24 20:21 - 2017-05-20 05:14 - 001035264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ShareHost.dll
2017-07-24 20:21 - 2017-05-20 05:11 - 001536512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Immersive.dll
2017-07-24 20:21 - 2017-05-20 05:10 - 000332800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Devices.Midi.dll
2017-07-24 20:21 - 2017-05-20 05:10 - 000128000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\NPSM.dll
2017-07-24 20:21 - 2017-05-20 05:08 - 000174080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RstrtMgr.dll
2017-07-24 20:21 - 2017-05-20 04:08 - 001459728 _____ (Microsoft Corporation) C:\Windows\system32\msctf.dll
2017-07-24 20:21 - 2017-05-20 04:03 - 000777400 _____ (Microsoft Corporation) C:\Windows\system32\oleaut32.dll
2017-07-24 20:21 - 2017-05-20 03:59 - 000112544 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dam.sys
2017-07-24 20:21 - 2017-05-20 03:55 - 001911752 _____ (Microsoft Corporation) C:\Windows\system32\Windows.ApplicationModel.Store.dll
2017-07-24 20:21 - 2017-05-20 03:55 - 001506712 _____ (Microsoft Corporation) C:\Windows\system32\twinapi.appcore.dll
2017-07-24 20:21 - 2017-05-20 03:55 - 000961952 _____ (Microsoft Corporation) C:\Windows\system32\efscore.dll
2017-07-24 20:21 - 2017-05-20 03:54 - 000546208 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\storport.sys
2017-07-24 20:21 - 2017-05-20 03:54 - 000144288 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\storahci.sys
2017-07-24 20:21 - 2017-05-20 03:53 - 000363424 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fastfat.sys
2017-07-24 20:21 - 2017-05-20 03:52 - 001700408 _____ (Microsoft Corporation) C:\Windows\system32\mfplat.dll
2017-07-24 20:21 - 2017-05-20 03:51 - 002604256 _____ (Microsoft Corporation) C:\Windows\system32\mfmp4srcsnk.dll
2017-07-24 20:21 - 2017-05-20 03:48 - 000387928 _____ (Microsoft Corporation) C:\Windows\system32\wmpps.dll
2017-07-24 20:21 - 2017-05-20 03:10 - 000809472 _____ (Microsoft Corporation) C:\Windows\system32\SecurityHealthSSO.dll
2017-07-24 20:21 - 2017-05-20 03:10 - 000584192 _____ (Microsoft Corporation) C:\Windows\system32\UIRibbonRes.dll
2017-07-24 20:21 - 2017-05-20 03:10 - 000088576 _____ (Microsoft Corporation) C:\Windows\system32\winsrvext.dll
2017-07-24 20:21 - 2017-05-20 03:10 - 000027136 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksthunk.sys
2017-07-24 20:21 - 2017-05-20 03:09 - 000209408 _____ (Microsoft Corporation) C:\Windows\system32\smartscreenps.dll
2017-07-24 20:21 - 2017-05-20 03:08 - 000086016 _____ C:\Windows\system32\xboxgipsynthetic.dll
2017-07-24 20:21 - 2017-05-20 03:08 - 000029696 _____ (Microsoft Corporation) C:\Windows\system32\odbcconf.dll
2017-07-24 20:21 - 2017-05-20 03:08 - 000013312 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rootmdm.sys
2017-07-24 20:21 - 2017-05-20 03:07 - 000133120 _____ (Microsoft Corporation) C:\Windows\system32\XblGameSaveExt.dll
2017-07-24 20:21 - 2017-05-20 03:07 - 000015872 _____ (Microsoft Corporation) C:\Windows\system32\snmptrap.exe
2017-07-24 20:21 - 2017-05-20 03:06 - 000866816 _____ (Microsoft Corporation) C:\Windows\system32\NPSMDesktopProvider.dll
2017-07-24 20:21 - 2017-05-20 03:06 - 000232448 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Web.Diagnostics.dll
2017-07-24 20:21 - 2017-05-20 03:06 - 000192512 _____ (Microsoft Corporation) C:\Windows\system32\Windows.SharedPC.AccountManager.dll
2017-07-24 20:21 - 2017-05-20 03:03 - 000491520 _____ (Microsoft Corporation) C:\Windows\system32\SettingsHandlers_Display.dll
2017-07-24 20:21 - 2017-05-20 03:02 - 000601088 _____ (Microsoft Corporation) C:\Windows\system32\Windows.System.Launcher.dll
2017-07-24 20:21 - 2017-05-20 03:01 - 002347520 _____ (Microsoft Corporation) C:\Windows\system32\DeviceFlows.DataModel.dll
2017-07-24 20:21 - 2017-05-20 03:01 - 000970240 _____ (Microsoft Corporation) C:\Windows\system32\cdpsvc.dll
2017-07-24 20:21 - 2017-05-20 03:01 - 000586240 _____ (Microsoft Corporation) C:\Windows\system32\OneDriveSettingSyncProvider.dll
2017-07-24 20:21 - 2017-05-20 03:00 - 001067008 _____ (Microsoft Corporation) C:\Windows\system32\XboxNetApiSvc.dll
2017-07-24 20:21 - 2017-05-20 02:59 - 001028608 _____ (Microsoft Corporation) C:\Windows\system32\modernexecserver.dll
2017-07-24 20:21 - 2017-05-20 02:59 - 000972800 _____ (Microsoft Corporation) C:\Windows\system32\sysmain.dll
2017-07-24 20:21 - 2017-05-20 02:58 - 000909824 _____ (Microsoft Corporation) C:\Windows\system32\ISM.dll
2017-07-24 20:21 - 2017-05-20 02:56 - 002730496 _____ (Microsoft Corporation) C:\Windows\system32\smartscreen.exe
2017-07-24 20:21 - 2017-05-20 02:55 - 001102848 _____ (Microsoft Corporation) C:\Windows\system32\SettingSyncCore.dll
2017-07-24 20:21 - 2017-05-20 02:52 - 000557568 _____ (Microsoft Corporation) C:\Windows\system32\wpnprv.dll
2017-07-24 20:21 - 2017-05-20 02:51 - 001706496 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Immersive.dll
2017-07-24 20:21 - 2017-05-20 02:51 - 000148480 _____ (Microsoft Corporation) C:\Windows\system32\umpo.dll
2017-07-24 20:21 - 2017-05-20 02:50 - 000439808 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.Midi.dll
2017-07-24 20:21 - 2017-05-20 02:50 - 000159744 _____ (Microsoft Corporation) C:\Windows\system32\NPSM.dll
2017-07-24 20:21 - 2017-05-20 02:48 - 002438656 _____ (Microsoft Corporation) C:\Windows\system32\ResetEngine.dll
2017-07-24 20:21 - 2017-05-20 02:48 - 000061952 _____ (Microsoft Corporation) C:\Windows\system32\vss_ps.dll
2017-07-24 20:21 - 2017-05-20 02:47 - 000641536 _____ (Microsoft Corporation) C:\Windows\system32\rdbui.dll
2017-07-24 20:21 - 2017-05-20 02:47 - 000199680 _____ (Microsoft Corporation) C:\Windows\system32\RstrtMgr.dll
2017-07-24 20:21 - 2017-04-27 22:16 - 000599576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll
2017-07-24 20:21 - 2017-04-27 22:09 - 001557288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll
2017-07-24 20:21 - 2017-04-27 22:06 - 000708712 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
2017-07-24 20:21 - 2017-04-27 22:03 - 000667040 _____ (Microsoft Corporation) C:\Windows\system32\ci.dll
2017-07-24 20:21 - 2017-04-27 21:58 - 001852776 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2017-07-24 20:21 - 2017-04-27 21:49 - 000072192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx
2017-07-24 20:21 - 2017-04-27 21:40 - 000799232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TokenBroker.dll
2017-07-24 20:21 - 2017-04-27 21:34 - 000891904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\autochk.exe
2017-07-24 20:21 - 2017-04-27 21:11 - 000082944 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx
2017-07-24 20:21 - 2017-04-27 21:06 - 001302528 _____ (Microsoft Corporation) C:\Windows\system32\MSVPXENC.dll
2017-07-24 20:21 - 2017-04-27 21:05 - 000224256 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2017-07-24 20:21 - 2017-04-27 21:03 - 001085440 _____ (Microsoft Corporation) C:\Windows\system32\rpcss.dll
2017-07-24 20:21 - 2017-04-27 20:58 - 001054208 _____ (Microsoft Corporation) C:\Windows\system32\TokenBroker.dll
2017-07-24 20:21 - 2017-04-27 20:54 - 000722944 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv2.sys
2017-07-24 20:21 - 2017-04-27 20:54 - 000414208 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv.sys
2017-07-24 20:21 - 2017-04-27 20:52 - 000218624 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.Streaming.ps.dll
2017-07-24 20:21 - 2017-04-19 04:06 - 000651680 _____ (Microsoft Corporation) C:\Windows\system32\SettingSyncHost.exe
2017-07-24 20:21 - 2017-04-19 04:02 - 000716440 _____ (Microsoft Corporation) C:\Windows\system32\MSVideoDSP.dll
2017-07-24 20:21 - 2017-04-19 03:16 - 000280064 _____ (Microsoft Corporation) C:\Windows\system32\WiFiDisplay.dll
2017-07-24 20:21 - 2017-04-19 03:12 - 000203776 _____ (Microsoft Corporation) C:\Windows\system32\PackageStateRoaming.dll
2017-07-24 20:21 - 2017-04-19 03:10 - 004175872 _____ (Microsoft Corporation) C:\Windows\system32\StartTileData.dll
2017-07-24 20:21 - 2017-04-19 03:10 - 002765824 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Shell.UnifiedTile.CuratedTileCollections.dll
2017-07-24 20:21 - 2017-04-19 03:07 - 001242624 _____ (Microsoft Corporation) C:\Windows\system32\SharedStartModel.dll
2017-07-24 20:21 - 2017-04-19 03:02 - 000559000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SettingSyncHost.exe
2017-07-24 20:21 - 2017-04-19 03:01 - 000050176 _____ (Microsoft Corporation) C:\Windows\system32\catsrvps.dll
2017-07-24 20:21 - 2017-04-19 02:59 - 001087488 _____ (Microsoft Corporation) C:\Windows\system32\reseteng.dll
2017-07-24 20:21 - 2017-04-19 02:37 - 000233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WiFiDisplay.dll
2017-07-24 20:21 - 2017-04-19 02:34 - 000175616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PackageStateRoaming.dll
2017-07-24 20:21 - 2017-04-13 21:35 - 000741784 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Internal.Shell.Broker.dll
2017-07-24 20:21 - 2017-04-13 21:32 - 001320352 _____ (Microsoft Corporation) C:\Windows\system32\wpx.dll
2017-07-24 20:21 - 2017-04-13 21:30 - 000105456 _____ (Microsoft Corporation) C:\Windows\system32\imagehlp.dll
2017-07-24 20:21 - 2017-04-13 20:43 - 000523296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AppResolver.dll
2017-07-24 20:21 - 2017-04-13 20:40 - 000095584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imagehlp.dll
2017-07-24 20:21 - 2017-04-13 20:39 - 000974848 _____ (Microsoft Corporation) C:\Windows\system32\mmgaserver.exe
2017-07-24 20:21 - 2017-04-13 20:39 - 000334336 _____ (Microsoft Corporation) C:\Windows\system32\wc_storage.dll
2017-07-24 20:21 - 2017-04-13 20:39 - 000155136 _____ (Microsoft Corporation) C:\Windows\system32\VEStoreEventHandlers.dll
2017-07-24 20:21 - 2017-04-13 20:38 - 000251904 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Gaming.Preview.dll
2017-07-24 20:21 - 2017-04-13 20:37 - 000301056 _____ (Microsoft Corporation) C:\Windows\system32\EnterpriseAppMgmtSvc.dll
2017-07-24 20:21 - 2017-04-13 20:35 - 001433600 _____ (Microsoft Corporation) C:\Windows\system32\SystemSettings.Handlers.dll
2017-07-24 20:21 - 2017-04-13 20:35 - 000257024 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2017-07-24 20:21 - 2017-04-13 20:33 - 001269760 _____ (Microsoft Corporation) C:\Windows\system32\enterprisecsps.dll
2017-07-24 20:21 - 2017-04-13 20:31 - 001611776 _____ (Microsoft Corporation) C:\Windows\system32\SpeechPal.dll
2017-07-24 20:21 - 2017-04-13 20:31 - 000673280 _____ (Microsoft Corporation) C:\Windows\system32\LockAppBroker.dll
2017-07-24 20:21 - 2017-04-13 20:29 - 001583616 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2017-07-24 20:21 - 2017-04-13 20:29 - 000647168 _____ (Microsoft Corporation) C:\Windows\system32\RDXService.dll
2017-07-24 20:21 - 2017-04-13 20:26 - 001257472 _____ (Microsoft Corporation) C:\Windows\system32\wpnapps.dll
2017-07-24 20:21 - 2017-04-13 20:25 - 000750080 _____ (Microsoft Corporation) C:\Windows\system32\StorSvc.dll
2017-07-24 20:21 - 2017-04-13 20:24 - 001628160 _____ (Microsoft Corporation) C:\Windows\system32\comsvcs.dll
2017-07-24 20:21 - 2017-04-13 20:21 - 000078848 _____ (Microsoft Corporation) C:\Windows\system32\offreg.dll
2017-07-24 20:21 - 2017-04-13 20:18 - 000731136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mmgaserver.exe
2017-07-24 20:21 - 2017-04-13 20:15 - 000232448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\CloudBackupSettings.dll
2017-07-24 20:21 - 2017-04-13 20:13 - 000232960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2017-07-24 20:21 - 2017-04-13 20:08 - 001463296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2017-07-24 20:21 - 2017-04-13 20:06 - 000987648 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wpnapps.dll
2017-07-24 20:21 - 2017-04-13 20:04 - 000392704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PlayToManager.dll
2017-07-24 20:21 - 2017-04-13 20:01 - 000057856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\offreg.dll
2017-07-24 20:21 - 2017-03-31 21:28 - 000354360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\bcryptprimitives.dll
2017-07-24 20:21 - 2017-03-31 21:02 - 000252928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XpsDocumentTargetPrint.dll
2017-07-24 20:21 - 2017-03-31 20:58 - 001506816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\quartz.dll
2017-07-24 20:21 - 2017-03-31 20:56 - 001060352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XpsPrint.dll
2017-07-24 20:21 - 2017-03-31 20:55 - 000347136 _____ (Microsoft Corporation) C:\Windows\system32\XpsDocumentTargetPrint.dll
2017-07-24 20:21 - 2017-03-31 20:52 - 000081408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfmjpegdec.dll
2017-07-24 20:21 - 2017-03-31 20:52 - 000078336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\asycfilt.dll
2017-07-24 20:21 - 2017-03-31 20:50 - 001657344 _____ (Microsoft Corporation) C:\Windows\system32\XpsPrint.dll
2017-07-24 20:21 - 2017-03-31 20:50 - 001605632 _____ (Microsoft Corporation) C:\Windows\system32\quartz.dll
2017-07-24 20:21 - 2017-03-31 20:45 - 000091648 _____ (Microsoft Corporation) C:\Windows\system32\mfmjpegdec.dll
2017-07-24 20:21 - 2017-03-31 20:44 - 000087552 _____ (Microsoft Corporation) C:\Windows\system32\asycfilt.dll
2017-07-24 20:20 - 2017-06-03 07:00 - 000321376 _____ (Microsoft Corporation) C:\Windows\system32\capauthz.dll
2017-07-24 20:20 - 2017-06-03 07:00 - 000219040 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tpm.sys
2017-07-24 20:20 - 2017-06-03 06:11 - 000035840 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\BasicRender.sys
2017-07-24 20:20 - 2017-06-03 06:07 - 000197120 _____ (Microsoft Corporation) C:\Windows\system32\bcdboot.exe
2017-07-24 20:20 - 2017-06-03 05:51 - 000064512 _____ (Microsoft Corporation) C:\Windows\bfsvc.exe
2017-07-24 20:20 - 2017-05-20 04:08 - 000543648 _____ (Microsoft Corporation) C:\Windows\system32\securekernel.exe
2017-07-24 20:20 - 2017-05-20 04:07 - 000287648 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\sdbus.sys
2017-07-24 20:20 - 2017-05-20 03:58 - 000188824 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dumpsd.sys
2017-07-24 20:20 - 2017-05-20 03:55 - 000211872 _____ (Microsoft Corporation) C:\Windows\system32\browserbroker.dll
2017-07-24 20:20 - 2017-05-20 03:54 - 000730016 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\vhdmp.sys
2017-07-24 20:20 - 2017-05-20 03:53 - 000654976 _____ (Microsoft Corporation) C:\Windows\system32\AppXDeploymentClient.dll
2017-07-24 20:20 - 2017-05-20 03:07 - 000277504 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\xboxgip.sys
2017-07-24 20:20 - 2017-05-20 03:03 - 000892416 _____ (Microsoft Corporation) C:\Windows\system32\MessagingDataModel2.dll
2017-07-24 20:20 - 2017-05-20 03:03 - 000549888 _____ (Microsoft Corporation) C:\Windows\system32\DictationManager.dll
2017-07-24 20:20 - 2017-05-20 03:02 - 000616960 _____ (Microsoft Corporation) C:\Windows\system32\WindowManagement.dll
2017-07-24 20:20 - 2017-05-20 03:01 - 000149504 _____ (Microsoft Corporation) C:\Windows\system32\embeddedmodesvc.dll
2017-07-24 20:20 - 2017-05-20 02:54 - 001275904 _____ (Microsoft Corporation) C:\Windows\system32\ShareHost.dll
2017-07-24 20:20 - 2017-04-27 21:59 - 000388000 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\USBXHCI.SYS
2017-07-24 20:20 - 2017-04-27 21:59 - 000027040 _____ (Microsoft Corporation) C:\Windows\system32\browser_broker.exe
2017-07-24 20:20 - 2017-04-27 20:54 - 000970240 _____ (Microsoft Corporation) C:\Windows\system32\autochk.exe
2017-07-24 20:20 - 2017-04-19 03:18 - 000118784 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netvsc.sys
2017-07-24 20:20 - 2017-04-13 21:35 - 000673112 _____ (Microsoft Corporation) C:\Windows\system32\AppResolver.dll
2017-07-24 20:20 - 2017-04-13 21:33 - 002085280 _____ (Microsoft Corporation) C:\Windows\system32\UpdateAgent.dll
2017-07-24 20:20 - 2017-04-13 20:41 - 000164864 _____ (Microsoft Corporation) C:\Windows\system32\EnterpriseModernAppMgmtCSP.dll
2017-07-24 20:20 - 2017-04-13 20:38 - 000208896 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.AppDefaults.dll
2017-07-24 20:20 - 2017-04-13 20:37 - 000450048 _____ (Microsoft Corporation) C:\Windows\system32\bcdedit.exe
2017-07-24 20:20 - 2017-04-13 20:36 - 000524800 _____ (Microsoft Corporation) C:\Windows\system32\TileDataRepository.dll
2017-07-24 20:20 - 2017-04-13 20:36 - 000296448 _____ (Microsoft Corporation) C:\Windows\system32\CloudBackupSettings.dll
2017-07-24 20:20 - 2017-04-13 20:33 - 000864256 _____ (Microsoft Corporation) C:\Windows\system32\NotificationController.dll
2017-07-24 20:16 - 2017-07-24 20:16 - 000000000 ____H C:\Windows\system32\Drivers\Msft_User_WpdMtpDr_01_11_00.Wdf
2017-07-24 20:14 - 2017-07-24 19:41 - 000565416 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
2017-07-24 20:13 - 2017-07-24 20:14 - 000000000 ____D C:\Windows\system32\MRT
2017-07-24 20:13 - 2017-07-24 20:13 - 135225752 ____C (Microsoft Corporation) C:\Windows\system32\MRT.exe
2017-07-24 20:09 - 2017-07-24 22:14 - 000290304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\subinacl.exe
2017-07-24 20:09 - 2017-07-24 20:09 - 000000000 ____D C:\Program Files (x86)\Adware Removal Tool by TSA
2017-07-24 20:08 - 2017-07-24 20:08 - 000000000 ____D C:\Users\bruno\AppData\Local\ElevatedDiagnostics
2017-07-24 20:07 - 2017-07-24 20:07 - 000000000 ____D C:\Windows\SysWOW64\XPSViewer
2017-07-24 20:07 - 2017-07-24 20:07 - 000000000 ____D C:\Program Files\Reference Assemblies
2017-07-24 20:07 - 2017-07-24 20:07 - 000000000 ____D C:\Program Files\MSBuild
2017-07-24 20:07 - 2017-07-24 20:07 - 000000000 ____D C:\Program Files (x86)\Reference Assemblies
2017-07-24 20:07 - 2017-07-24 20:07 - 000000000 ____D C:\Program Files (x86)\MSBuild
2017-07-24 20:07 - 2017-02-10 11:26 - 001166520 _____ (Microsoft Corporation) C:\Windows\system32\PresentationNative_v0300.dll
2017-07-24 20:07 - 2017-02-10 11:26 - 000124624 _____ (Microsoft Corporation) C:\Windows\system32\PresentationCFFRasterizerNative_v0300.dll
2017-07-24 20:07 - 2017-02-10 11:26 - 000035480 _____ (Microsoft Corporation) C:\Windows\system32\TsWpfWrp.exe
2017-07-24 20:07 - 2017-02-10 11:21 - 000778936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PresentationNative_v0300.dll
2017-07-24 20:07 - 2017-02-10 11:21 - 000103120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PresentationCFFRasterizerNative_v0300.dll
2017-07-24 20:07 - 2017-02-10 11:21 - 000035480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TsWpfWrp.exe
2017-07-24 19:57 - 2017-08-04 16:56 - 000000180 _____ C:\Windows\system32\{A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat
2017-07-24 19:57 - 2017-08-04 16:56 - 000000000 __SHD C:\Users\bruno\IntelGraphicsProfiles
2017-07-24 19:57 - 2017-07-24 19:59 - 000000200 _____ C:\Windows\system32\{EC94D02F-D200-4428-9531-05AF7F9799CB}.bat
2017-07-24 19:57 - 2017-07-24 19:57 - 000000000 ____D C:\Program Files\Intel
2017-07-24 19:57 - 2017-07-24 19:57 - 000000000 ____D C:\Program Files (x86)\Intel
2017-07-24 19:57 - 2017-07-24 19:57 - 000000000 ____D C:\Intel
2017-07-24 19:57 - 2017-07-24 19:57 - 000000000 _____ C:\Windows\system32\GfxValDisplayLog.bin
2017-07-24 19:54 - 2017-08-04 16:56 - 000000000 ____D C:\Users\Todos os Usuários\NVIDIA
2017-07-24 19:54 - 2017-08-04 16:56 - 000000000 ____D C:\ProgramData\NVIDIA
2017-07-24 19:54 - 2017-07-18 20:24 - 006463608 _____ (NVIDIA Corporation) C:\Windows\system32\nvcpl.dll
2017-07-24 19:54 - 2017-07-18 20:24 - 002479040 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvc64.dll
2017-07-24 19:54 - 2017-07-18 20:24 - 001762936 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvcr.dll
2017-07-24 19:54 - 2017-07-18 20:24 - 000549312 _____ (NVIDIA Corporation) C:\Windows\system32\nv3dappshext.dll
2017-07-24 19:54 - 2017-07-18 20:24 - 000392312 _____ (NVIDIA Corporation) C:\Windows\system32\nvmctray.dll
2017-07-24 19:54 - 2017-07-18 20:24 - 000081856 _____ (NVIDIA Corporation) C:\Windows\system32\nv3dappshextr.dll
2017-07-24 19:54 - 2017-07-18 20:24 - 000069752 _____ (NVIDIA Corporation) C:\Windows\system32\nvshext.dll
2017-07-24 19:54 - 2017-07-18 19:54 - 000001951 _____ C:\Windows\NvContainerRecovery.bat
2017-07-24 19:54 - 2017-07-12 22:37 - 008095171 _____ C:\Windows\system32\nvcoproc.bin
2017-07-24 19:54 - 2017-05-19 18:07 - 000521816 _____ (Khronos Group) C:\Windows\system32\OpenCL.dll
2017-07-24 19:53 - 2017-07-25 00:04 - 000000000 ____D C:\Users\Todos os Usuários\NVIDIA Corporation
2017-07-24 19:53 - 2017-07-25 00:04 - 000000000 ____D C:\ProgramData\NVIDIA Corporation
2017-07-24 19:53 - 2017-07-25 00:04 - 000000000 ____D C:\Program Files\NVIDIA Corporation
2017-07-24 19:53 - 2017-07-25 00:04 - 000000000 ____D C:\Program Files (x86)\NVIDIA Corporation
2017-07-24 19:46 - 2013-01-15 13:13 - 017853323 _____ C:\Users\bruno\OneDrive\Documentos\Strength Training Anatomy.pdf
2017-07-24 19:46 - 2011-06-16 19:58 - 000000031 _____ C:\Users\bruno\OneDrive\Documentos\youinc.txt
2017-07-24 19:45 - 2017-08-04 16:51 - 000000000 ____D C:\Users\bruno\AppData\Local\Google
2017-07-24 19:45 - 2017-07-24 19:45 - 000000000 ____D C:\Users\bruno\AppData\Roaming\Skype
2017-07-24 19:43 - 2017-07-24 19:44 - 000000000 ____D C:\Users\bruno\AppData\Local\MicrosoftEdge
2017-07-24 19:39 - 2017-08-04 16:57 - 000000000 ___RD C:\Users\bruno\OneDrive
2017-07-24 19:39 - 2017-07-25 19:46 - 000002373 _____ C:\Users\bruno\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2017-07-24 19:39 - 2017-07-24 19:39 - 000000000 ____D C:\Users\bruno\AppData\Local\Comms
2017-07-24 19:38 - 2017-07-24 19:38 - 000000000 ____D C:\Users\Todos os Usuários\Microsoft OneDrive
2017-07-24 19:38 - 2017-07-24 19:38 - 000000000 ____D C:\ProgramData\Microsoft OneDrive
2017-07-24 19:37 - 2017-07-24 19:37 - 000000000 ____D C:\Users\bruno\AppData\Local\Publishers
2017-07-24 19:36 - 2017-08-04 16:13 - 000000000 ____D C:\Users\bruno\AppData\Local\Packages
2017-07-24 19:36 - 2017-07-24 20:42 - 000000000 __RHD C:\Users\Public\AccountPictures
2017-07-24 19:36 - 2017-07-24 19:38 - 000000000 ____D C:\Users\bruno\AppData\Local\ConnectedDevicesPlatform
2017-07-24 19:36 - 2017-07-24 19:36 - 000000000 ____D C:\Users\bruno\AppData\Roaming\Adobe
2017-07-24 19:36 - 2017-07-24 19:36 - 000000000 ____D C:\Users\bruno\AppData\Local\VirtualStore
2017-07-24 19:36 - 2017-07-24 19:36 - 000000000 ____D C:\Users\bruno\AppData\Local\TileDataLayer
2017-07-24 19:35 - 2017-07-24 19:35 - 000000000 ____D C:\Users\Todos os Usuários\USOShared
2017-07-24 19:35 - 2017-07-24 19:35 - 000000000 ____D C:\ProgramData\USOShared
2017-07-24 19:34 - 2017-08-04 17:02 - 002008476 _____ C:\Windows\system32\PerfStringBackup.INI
2017-07-24 19:34 - 2017-08-04 16:56 - 000000000 ____D C:\Users\bruno
2017-07-24 19:34 - 2017-07-24 19:34 - 000000020 ___SH C:\Users\bruno\ntuser.ini
2017-07-24 19:34 - 2017-07-24 19:34 - 000000000 _SHDL C:\Users\bruno\Modelos
2017-07-24 19:34 - 2017-07-24 19:34 - 000000000 _SHDL C:\Users\bruno\Meus Documentos
2017-07-24 19:34 - 2017-07-24 19:34 - 000000000 _SHDL C:\Users\bruno\Menu Iniciar
2017-07-24 19:34 - 2017-07-24 19:34 - 000000000 _SHDL C:\Users\bruno\Dados de Aplicativos
2017-07-24 19:34 - 2017-07-24 19:34 - 000000000 _SHDL C:\Users\bruno\Configurações Locais
2017-07-24 19:34 - 2017-07-24 19:34 - 000000000 _SHDL C:\Users\bruno\AppData\Roaming\Microsoft\Windows\Start Menu\Programas
2017-07-24 19:34 - 2017-07-24 19:34 - 000000000 _SHDL C:\Users\bruno\AppData\Local\Histórico
2017-07-24 19:34 - 2017-07-24 19:34 - 000000000 _SHDL C:\Users\bruno\AppData\Local\Dados de Aplicativos
2017-07-24 19:34 - 2017-07-24 19:34 - 000000000 _SHDL C:\Users\bruno\Ambiente de Rede
2017-07-24 19:34 - 2017-07-24 19:34 - 000000000 _SHDL C:\Users\bruno\Ambiente de Impressão
2017-07-24 19:32 - 2017-07-24 19:32 - 000000000 ____D C:\Windows\CSC
2017-07-24 19:32 - 2017-03-18 17:56 - 002233344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PrintConfig.dll
2017-07-24 19:30 - 2017-07-24 19:30 - 000000000 _SHDL C:\Users\Usuário Padrão\AppData\Roaming\Microsoft\Windows\Start Menu\Programas
2017-07-24 19:30 - 2017-07-24 19:30 - 000000000 _SHDL C:\Users\Usuário Padrão\AppData\Local\Histórico
2017-07-24 19:30 - 2017-07-24 19:30 - 000000000 _SHDL C:\Users\Usuário Padrão\AppData\Local\Dados de Aplicativos
2017-07-24 19:30 - 2017-07-24 19:30 - 000000000 _SHDL C:\Users\Usuário Padrão
2017-07-24 19:30 - 2017-07-24 19:30 - 000000000 _SHDL C:\Users\Todos os Usuários\Modelos
2017-07-24 19:30 - 2017-07-24 19:30 - 000000000 _SHDL C:\Users\Todos os Usuários\Menu Iniciar
2017-07-24 19:30 - 2017-07-24 19:30 - 000000000 _SHDL C:\Users\Todos os Usuários\Documentos
2017-07-24 19:30 - 2017-07-24 19:30 - 000000000 _SHDL C:\Users\Todos os Usuários\Dados de Aplicativos
2017-07-24 19:30 - 2017-07-24 19:30 - 000000000 _SHDL C:\Users\Todos os Usuários
2017-07-24 19:30 - 2017-07-24 19:30 - 000000000 _SHDL C:\Users\Default\Modelos
2017-07-24 19:30 - 2017-07-24 19:30 - 000000000 _SHDL C:\Users\Default\Meus Documentos
2017-07-24 19:30 - 2017-07-24 19:30 - 000000000 _SHDL C:\Users\Default\Menu Iniciar
2017-07-24 19:30 - 2017-07-24 19:30 - 000000000 _SHDL C:\Users\Default\Dados de Aplicativos
2017-07-24 19:30 - 2017-07-24 19:30 - 000000000 _SHDL C:\Users\Default\Configurações Locais
2017-07-24 19:30 - 2017-07-24 19:30 - 000000000 _SHDL C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programas
2017-07-24 19:30 - 2017-07-24 19:30 - 000000000 _SHDL C:\Users\Default\AppData\Local\Histórico
2017-07-24 19:30 - 2017-07-24 19:30 - 000000000 _SHDL C:\Users\Default\AppData\Local\Dados de Aplicativos
2017-07-24 19:30 - 2017-07-24 19:30 - 000000000 _SHDL C:\Users\Default\Ambiente de Rede
2017-07-24 19:30 - 2017-07-24 19:30 - 000000000 _SHDL C:\Users\Default\Ambiente de Impressão
2017-07-24 19:30 - 2017-07-24 19:30 - 000000000 _SHDL C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programas
2017-07-24 19:30 - 2017-07-24 19:30 - 000000000 _SHDL C:\Users\Default User\AppData\Local\Histórico
2017-07-24 19:30 - 2017-07-24 19:30 - 000000000 _SHDL C:\Users\Default User\AppData\Local\Dados de Aplicativos
2017-07-24 19:30 - 2017-07-24 19:30 - 000000000 _SHDL C:\ProgramData\Modelos
2017-07-24 19:30 - 2017-07-24 19:30 - 000000000 _SHDL C:\ProgramData\Microsoft\Windows\Start Menu\Programas
2017-07-24 19:30 - 2017-07-24 19:30 - 000000000 _SHDL C:\ProgramData\Menu Iniciar
2017-07-24 19:30 - 2017-07-24 19:30 - 000000000 _SHDL C:\ProgramData\Documentos
2017-07-24 19:30 - 2017-07-24 19:30 - 000000000 _SHDL C:\ProgramData\Dados de Aplicativos
2017-07-24 19:30 - 2017-07-24 19:30 - 000000000 _SHDL C:\Program Files\Common Files\Sistema
2017-07-24 19:30 - 2017-07-24 19:30 - 000000000 _SHDL C:\Program Files\Arquivos Comuns
2017-07-24 19:30 - 2017-07-24 19:30 - 000000000 _SHDL C:\Documents and Settings
2017-07-24 19:30 - 2017-07-24 19:30 - 000000000 _SHDL C:\Arquivos de Programas
2017-07-24 19:26 - 2017-07-24 19:26 - 000000000 ____H C:\Windows\system32\Drivers\Msft_User_WpdFs_01_11_00.Wdf
2017-07-24 19:25 - 2017-08-04 17:53 - 000000000 ____D C:\Windows\system32\SleepStudy
2017-07-24 19:25 - 2017-08-04 16:56 - 000000006 ____H C:\Windows\Tasks\SA.DAT
2017-07-24 19:25 - 2017-08-04 16:52 - 000000000 ____D C:\Windows\Panther
2017-07-24 19:25 - 2017-07-25 13:09 - 000299768 _____ C:\Windows\system32\FNTCACHE.DAT
2017-07-24 19:25 - 2017-07-24 19:25 - 000000000 ____D C:\Windows\ServiceProfiles
2017-07-24 19:19 - 2017-07-24 19:19 - 000000000 ____D C:\Windows.old

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2017-08-04 17:02 - 2017-03-20 00:57 - 000834948 _____ C:\Windows\system32\prfh0416.dat
2017-08-04 17:02 - 2017-03-20 00:57 - 000196078 _____ C:\Windows\system32\prfc0416.dat
2017-08-04 17:01 - 2017-03-18 18:03 - 000000000 ____D C:\Windows\AppReadiness
2017-08-04 16:55 - 2017-03-18 08:40 - 001572864 _____ C:\Windows\system32\config\BBI
2017-08-04 16:52 - 2017-03-18 18:01 - 000000000 ____D C:\Windows\INF
2017-08-04 16:13 - 2017-03-18 18:03 - 000000000 ___HD C:\Program Files\WindowsApps
2017-07-29 13:19 - 2017-03-18 18:03 - 000000000 ____D C:\Windows\rescache
2017-07-25 02:22 - 2017-03-18 18:03 - 000000000 ____D C:\Users\Todos os Usuários\regid.1991-06.com.microsoft
2017-07-25 02:22 - 2017-03-18 18:03 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2017-07-25 02:22 - 2017-03-18 18:03 - 000000000 ____D C:\Program Files\Common Files\microsoft shared
2017-07-25 02:20 - 2017-03-18 18:03 - 000000167 _____ C:\Windows\win.ini
2017-07-25 02:20 - 2017-03-18 18:03 - 000000000 ____D C:\Program Files\Common Files\System
2017-07-24 20:41 - 2017-03-18 18:03 - 000000000 ____D C:\Windows\appcompat
2017-07-24 20:38 - 2017-03-18 18:03 - 000000000 ___SD C:\Windows\SysWOW64\F12
2017-07-24 20:38 - 2017-03-18 18:03 - 000000000 ___SD C:\Windows\system32\F12
2017-07-24 20:38 - 2017-03-18 18:03 - 000000000 ___RD C:\Windows\ImmersiveControlPanel
2017-07-24 20:38 - 2017-03-18 18:03 - 000000000 ____D C:\Windows\SysWOW64\Dism
2017-07-24 20:38 - 2017-03-18 18:03 - 000000000 ____D C:\Windows\system32\WinBioPlugIns
2017-07-24 20:38 - 2017-03-18 18:03 - 000000000 ____D C:\Windows\system32\oobe
2017-07-24 20:38 - 2017-03-18 18:03 - 000000000 ____D C:\Windows\system32\migwiz
2017-07-24 20:38 - 2017-03-18 18:03 - 000000000 ____D C:\Windows\system32\appraiser
2017-07-24 20:38 - 2017-03-18 18:03 - 000000000 ____D C:\Windows\ShellExperiences
2017-07-24 20:38 - 2017-03-18 18:03 - 000000000 ____D C:\Windows\Provisioning
2017-07-24 20:38 - 2017-03-18 18:03 - 000000000 ____D C:\Windows\PolicyDefinitions
2017-07-24 20:38 - 2017-03-18 18:03 - 000000000 ____D C:\Program Files\Windows Photo Viewer
2017-07-24 20:38 - 2017-03-18 18:03 - 000000000 ____D C:\Program Files\Windows Defender
2017-07-24 20:38 - 2017-03-18 18:03 - 000000000 ____D C:\Program Files (x86)\Windows Photo Viewer
2017-07-24 20:38 - 2017-03-18 18:03 - 000000000 ____D C:\Program Files (x86)\Windows Defender
2017-07-24 20:38 - 2017-03-18 08:40 - 000000000 ____D C:\Windows\system32\Dism
2017-07-24 20:25 - 2017-03-18 17:51 - 000000000 ____D C:\Windows\CbsTemp
2017-07-24 20:07 - 2017-03-18 18:03 - 000000000 ____D C:\Windows\SysWOW64\MUI
2017-07-24 20:07 - 2017-03-18 18:03 - 000000000 ____D C:\Windows\system32\MUI
2017-07-24 19:54 - 2017-03-18 18:03 - 000000000 ____D C:\Windows\Help
2017-07-24 19:35 - 2017-03-18 18:03 - 000000000 ____D C:\Users\Todos os Usuários\USOPrivate
2017-07-24 19:35 - 2017-03-18 18:03 - 000000000 ____D C:\ProgramData\USOPrivate
2017-07-24 19:32 - 2017-03-18 18:03 - 000000000 ____D C:\Windows\system32\WinBioDatabase
2017-07-24 19:32 - 2017-03-18 18:03 - 000000000 ____D C:\Windows\system32\spool
2017-07-24 19:32 - 2017-03-18 18:03 - 000000000 ____D C:\Windows\system32\FxsTmp
2017-07-24 19:30 - 2017-03-18 18:03 - 000000000 ____D C:\Program Files\Windows NT
2017-07-24 19:28 - 2017-03-18 08:40 - 000000000 ____D C:\Windows\system32\Sysprep
2017-07-24 19:26 - 2017-03-20 00:59 - 000000000 ____D C:\Windows\HoloShell
2017-07-24 19:26 - 2017-03-18 18:03 - 000000000 ___RD C:\Windows\PrintDialog
2017-07-24 19:26 - 2017-03-18 18:03 - 000000000 ___RD C:\Windows\MiracastView
2017-07-24 19:26 - 2017-03-18 08:40 - 000032768 _____ C:\Windows\system32\config\ELAM
2017-07-24 19:24 - 2017-03-18 18:03 - 000028672 _____ C:\Windows\system32\config\BCD-Template
2017-07-18 21:40 - 2017-05-19 18:03 - 001615448 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdagenco6420103.dll
2017-07-18 21:40 - 2017-05-19 18:03 - 000218712 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvhda64v.sys
2017-07-18 21:40 - 2017-05-19 17:47 - 004210032 _____ (NVIDIA Corporation) C:\Windows\system32\nvapi64.dll
2017-07-18 21:40 - 2017-05-19 14:22 - 000046463 _____ C:\Windows\system32\nvinfo.pb

==================== Files in the root of some directories =======

2017-07-26 14:30 - 2017-07-26 14:30 - 000000000 ____H () C:\ProgramData\DP45977C.lfl

Some files in TEMP:
====================
2017-07-25 21:42 - 2017-08-04 03:58 - 000000000 _____ () C:\Users\bruno\AppData\Local\Temp\33968ec9ed0abde4ce703a532c809fc9.dll
2017-07-25 21:43 - 2017-08-04 01:38 - 000000044 _____ () C:\Users\bruno\AppData\Local\Temp\dc930d09d6333096f155a6c80f8c77b0.dll
2017-07-24 19:54 - 2017-05-01 17:14 - 000869200 _____ (NVIDIA Corporation) C:\Users\bruno\AppData\Local\Temp\nvSCPAPI64.dll
2017-07-25 00:02 - 2017-05-01 17:14 - 000367552 _____ (NVIDIA Corporation) C:\Users\bruno\AppData\Local\Temp\nvStInst.exe
2017-07-24 21:20 - 2017-08-04 14:18 - 000492544 _____ () C:\Users\bruno\AppData\Local\Temp\s3.exe

==================== Bamital & volsnap ======================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\dnsapi.dll => File is digitally signed
C:\Windows\SysWOW64\dnsapi.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed

LastRegBack: 2017-08-04 16:19

==================== End of FRST.txt ============================

Addition

Spoiler

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 31-07-2017
Ran by bruno (04-08-2017 18:01:23)
Running from C:\Users\bruno\Desktop\Limpeza e manutenção
Windows 10 Pro Version 1703 (X64) (2017-07-24 22:30:24)
Boot Mode: Normal
==========================================================

==================== Accounts: =============================

Administrador (S-1-5-21-3125324295-4109617892-1090203428-500 - Administrator - Disabled)
bruno (S-1-5-21-3125324295-4109617892-1090203428-1001 - Administrator - Enabled) => C:\Users\bruno
Convidado (S-1-5-21-3125324295-4109617892-1090203428-501 - Limited - Disabled)
DefaultAccount (S-1-5-21-3125324295-4109617892-1090203428-503 - Limited - Disabled)

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Avast Antivirus (Enabled - Up to date) {8EA8924E-BC81-DC44-8BB0-8BAE75D86EBF}
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AV: Malwarebytes (Enabled - Up to date) {23007AD3-69FE-687C-2629-D584AFFAF72B}
AS: Malwarebytes (Enabled - Up to date) {98619B37-4FC4-67F2-1C99-EEF6D47DBD96}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Avast Antivirus (Enabled - Up to date) {35C973AA-9ABB-D3CA-B100-B0DC0E5F2402}

==================== Installed Programs ======================

(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

Adobe Acrobat Reader DC - Português (HKLM-x32\...\{AC76BA86-7AD7-1046-7B44-AC0F074E4100}) (Version: 17.009.20058 - Adobe Systems Incorporated)
Ansel (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Ansel) (Version: 384.94 - NVIDIA Corporation) Hidden
Avast Free Antivirus (HKLM-x32\...\Avast Antivirus) (Version: 17.5.2303 - AVAST Software)
Blizzard App (HKLM-x32\...\Battle.net) (Version: - Blizzard Entertainment)
CCleaner (HKLM\...\CCleaner) (Version: 5.32 - Piriform)
DAEMON Tools Lite (HKLM\...\DAEMON Tools Lite) (Version: 10.4.0.0190 - Disc Soft Ltd)
Discord (HKU\S-1-5-21-3125324295-4109617892-1090203428-1001\...\Discord) (Version: 0.0.297 - Hammer & Chisel, Inc.)
Hearthstone (HKLM-x32\...\Hearthstone) (Version: - Blizzard Entertainment)
Herramientas de corrección de Microsoft Office 2016: español (HKLM\...\{90160000-001F-0C0A-1000-0000000FF1CE}) (Version: 16.0.4266.1001 - Microsoft Corporation) Hidden
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 20.19.15.4624 - Intel Corporation)
Malwarebytes versão 3.1.2.1733 (HKLM\...\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1) (Version: 3.1.2.1733 - Malwarebytes)
Mass Effect™: Andromeda (HKLM-x32\...\{72BBCA87-9350-48BC-9E2F-6DBC1E80C993}) (Version: 1.0.0.9 - Electronic Arts)
MEmu (HKLM-x32\...\MEmu) (Version: 3.1.2.4 - Microvirt Software Technology Co. Ltd.)
Microsoft Office Professional Plus 2016 (HKLM\...\Office16.PROPLUS) (Version: 16.0.4266.1001 - Microsoft Corporation)
Microsoft OneDrive (HKU\S-1-5-21-3125324295-4109617892-1090203428-1001\...\OneDriveSetup.exe) (Version: 17.3.6943.0625 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.50907.0 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.50727 (HKLM-x32\...\{15134cb0-b767-4960-a911-f2d16ae54797}) (Version: 11.0.50727.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.50727 (HKLM-x32\...\{22154f09-719a-4619-bb71-5b3356999fbf}) (Version: 11.0.50727.1 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x64) - 14.0.23506 (HKLM-x32\...\{3ee5e5bb-b7cc-4556-8861-a00a82977d6c}) (Version: 14.0.23506.0 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.23506 (HKLM-x32\...\{23daf363-3020-4059-b3ae-dc4ad39fed19}) (Version: 14.0.23506.0 - Microsoft Corporation)
NVIDIA Driver de áudio HD 1.3.34.27 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.34.27 - NVIDIA Corporation)
NVIDIA Driver de gráficos 384.94 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 384.94 - NVIDIA Corporation)
NVIDIA Software do sistema PhysX 9.17.0524 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.17.0524 - NVIDIA Corporation)
Origin (HKLM-x32\...\Origin) (Version: 10.4.16.25850 - Electronic Arts, Inc.)
Painel de controle da NVIDIA 384.94 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.ControlPanel) (Version: 384.94 - NVIDIA Corporation) Hidden
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.8186 - Realtek Semiconductor Corp.)
Revisores de Texto do Microsoft Office 2016 – Português (Brasil) (HKLM\...\{90160000-001F-0416-1000-0000000FF1CE}) (Version: 16.0.4266.1001 - Microsoft Corporation) Hidden
RogueKiller version 12.11.8.0 (HKLM\...\8B3D7924-ED89-486B-8322-E8594065D5CB_is1) (Version: 12.11.8.0 - Adlice Software)
SafeZone Stable 3.55.2393.609 (HKLM-x32\...\SafeZone 3.55.2393.609) (Version: 3.55.2393.609 - Avast Software) Hidden
VLC media player (HKLM-x32\...\VLC media player) (Version: 2.2.6 - VideoLAN)
Vulkan Run Time Libraries 1.0.42.1 (HKLM\...\VulkanRT1.0.42.1) (Version: 1.0.42.1 - LunarG, Inc.)
WinRAR 5.40 (64-bit) (HKLM\...\WinRAR archiver) (Version: 5.40.0 - win.rar GmbH)

==================== Custom CLSID (Whitelisted): ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

ShellIconOverlayIdentifiers: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2017-07-24] (AVAST Software)
ContextMenuHandlers1: [avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2017-07-24] (AVAST Software)
ContextMenuHandlers1: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2016-08-15] (Alexander Roshal)
ContextMenuHandlers1-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2016-08-15] (Alexander Roshal)
ContextMenuHandlers3: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2017-07-24] (AVAST Software)
ContextMenuHandlers3: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files (x86)\Malwarebytes\mbshlext.dll [2017-05-09] (Malwarebytes)
ContextMenuHandlers5: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} => -> No File
ContextMenuHandlers5: [igfxDTCM] -> {9B5F5829-A529-4B12-814A-E81BCB8D93FC} => C:\Windows\system32\igfxDTCM.dll [2017-03-17] (Intel Corporation)
ContextMenuHandlers5: [NvCplDesktopContext] -> {3D1975AF-48C6-4f8e-A182-BE0E08FA86A9} => C:\Windows\system32\nvshext.dll [2017-07-18] (NVIDIA Corporation)
ContextMenuHandlers6: [avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2017-07-24] (AVAST Software)
ContextMenuHandlers6: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files (x86)\Malwarebytes\mbshlext.dll [2017-05-09] (Malwarebytes)
ContextMenuHandlers6: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2016-08-15] (Alexander Roshal)
ContextMenuHandlers6-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2016-08-15] (Alexander Roshal)

==================== Scheduled Tasks (Whitelisted) =============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {167D57C3-5B7E-4DC2-AD0F-F2200596E3AB} - System32\Tasks\NvTmRepOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmRep.exe [2017-07-18] (NVIDIA Corporation)
Task: {2F72FE21-AC0C-4CD5-B728-E80BFE334773} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack2016 => C:\Program Files\Microsoft Office\Office16\msoia.exe [2015-07-31] (Microsoft Corporation)
Task: {41E9326E-B2F3-4D63-A7BF-0DD709DB0725} - System32\Tasks\NvTmRep_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmRep.exe [2017-07-18] (NVIDIA Corporation)
Task: {4FF294A1-F77A-4F2D-9586-9CB5916440C8} - System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [2017-07-18] (NVIDIA Corporation)
Task: {6D22C978-84EE-4EF6-8175-8B815F622D57} - System32\Tasks\Avast Emergency Update => C:\Program Files\AVAST Software\Avast\AvEmUpdate.exe [2017-07-24] (AVAST Software)
Task: {844EBCD8-6D53-46B8-A8C2-604D12EE228D} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2017-04-25] (Adobe Systems Incorporated)
Task: {97AEED9C-1D4F-4F9F-9787-900A09783D27} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2017-06-30] (Piriform Ltd)
Task: {A5653C03-E4C5-4913-8A16-6450F538028E} - System32\Tasks\Microsoft\Office\Office 15 Subscription Heartbeat => C:\Program Files\Common Files\Microsoft Shared\Office16\OLicenseHeartbeat.exe [2015-07-31] (Microsoft Corporation)
Task: {B010F042-8DDB-4C31-A66A-C50CBB9EE69A} - System32\Tasks\S-1-5-21-3125324295-4109617892-1090203428-1001\DataSenseLiveTileTask => C:\Windows\System32\DataUsageLiveTileTask.exe [2017-03-18] (Microsoft Corporation)
Task: {B45C0068-3B23-4251-B771-A3D349D1CA16} - System32\Tasks\SafeZone scheduled Autoupdate 1500941838 => C:\Program Files\AVAST Software\SZBrowser\launcher.exe [2017-06-13] (Avast Software)
Task: {C85C1850-4677-459A-8A7C-3F0A2A73696D} - System32\Tasks\NvTmMon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmMon.exe [2017-07-18] (NVIDIA Corporation)
Task: {D9B1E5BB-F211-4D7F-BAFA-15BCAB4020CF} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn2016 => C:\Program Files\Microsoft Office\Office16\msoia.exe [2015-07-31] (Microsoft Corporation)
Task: {FF496275-C20F-483C-BC55-5627D5E1EF0F} - System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [2017-07-18] (NVIDIA Corporation)

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)

==================== Shortcuts & WMI ========================

(The entries could be listed to be restored or removed.)

==================== Loaded Modules (Whitelisted) ==============

2017-07-24 23:12 - 2017-06-27 12:06 - 002260432 _____ () C:\PROGRAM FILES (X86)\MALWAREBYTES\MwacLib.dll
2017-03-18 17:58 - 2017-03-18 17:58 - 000138000 _____ () C:\Windows\SYSTEM32\inputhost.dll
2017-03-18 17:59 - 2017-03-20 00:59 - 001731072 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll
2017-07-24 20:13 - 2017-07-24 20:14 - 000074752 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.19.820.0_x64__kzf8qxf38zg5c\SkypeHost.exe
2017-07-24 20:13 - 2017-07-24 20:14 - 000203264 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.19.820.0_x64__kzf8qxf38zg5c\SkypeBackgroundTasks.dll
2017-07-24 20:13 - 2017-07-24 20:14 - 043573248 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.19.820.0_x64__kzf8qxf38zg5c\SkyWrap.dll
2017-07-24 20:13 - 2017-07-24 20:14 - 002435584 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.19.820.0_x64__kzf8qxf38zg5c\skypert.dll
2017-07-24 21:15 - 2017-07-24 21:15 - 000170224 _____ () C:\Program Files\AVAST Software\Avast\JsonRpcServer.dll
2017-07-24 21:15 - 2017-07-24 21:15 - 001065936 _____ () C:\Program Files\AVAST Software\Avast\AvChrome.dll
2017-07-24 21:15 - 2017-07-24 21:15 - 067109376 _____ () C:\Program Files\AVAST Software\Avast\libcef.dll
2017-07-24 21:15 - 2017-07-24 21:15 - 000192664 _____ () C:\Program Files\AVAST Software\Avast\event_routing_rpc.dll
2017-07-24 21:15 - 2017-07-24 21:15 - 000224256 _____ () C:\Program Files\AVAST Software\Avast\tasks_core.dll
2017-07-24 21:14 - 2017-07-24 21:14 - 000292920 _____ () C:\Program Files\AVAST Software\Avast\gaming_mode_ui.dll
2017-07-24 21:15 - 2017-07-24 21:15 - 000689272 _____ () C:\Program Files\AVAST Software\Avast\ffl2.dll
2017-07-24 23:11 - 2017-01-04 13:28 - 001958912 _____ () C:\Users\bruno\AppData\Local\Discord\app-0.0.297\ffmpeg.dll
2017-07-24 23:11 - 2017-07-24 23:11 - 001082880 _____ () \\?\C:\Users\bruno\AppData\Roaming\discord\0.0.297\modules\discord_voice\discord_voice.node
2017-07-24 23:11 - 2017-07-24 23:11 - 003750400 _____ () \\?\C:\Users\bruno\AppData\Roaming\discord\0.0.297\modules\discord_voice\libdiscord.dll
2017-07-24 23:11 - 2017-07-24 23:11 - 000914432 _____ () \\?\C:\Users\bruno\AppData\Roaming\discord\0.0.297\modules\discord_utils\discord_utils.node
2017-07-24 23:11 - 2017-07-24 23:11 - 001127424 _____ () \\?\C:\Users\bruno\AppData\Roaming\discord\0.0.297\modules\discord_toaster\discord_toaster.node
2017-07-24 23:11 - 2017-01-04 13:28 - 002278912 _____ () C:\Users\bruno\AppData\Local\Discord\app-0.0.297\libglesv2.dll
2017-07-24 23:11 - 2017-01-04 13:28 - 000096768 _____ () C:\Users\bruno\AppData\Local\Discord\app-0.0.297\libegl.dll
2017-08-04 16:58 - 2017-08-04 16:58 - 000148992 _____ () \\?\C:\Users\bruno\AppData\Local\Temp\E0D1.tmp.node
2017-07-24 23:11 - 2017-07-24 23:11 - 002658296 _____ () \\?\C:\Users\bruno\AppData\Roaming\discord\0.0.297\modules\discord_rpc\discord_rpc.node
2017-07-24 23:12 - 2017-07-24 23:12 - 002665976 _____ () \\?\C:\Users\bruno\AppData\Roaming\discord\0.0.297\modules\discord_contact_import\discord_contact_import.node

==================== Alternate Data Streams (Whitelisted) =========

(If an entry is included in the fixlist, only the ADS will be removed.)

==================== Safe Mode (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMService => ""="Service"

==================== Association (Whitelisted) ===============

(If an entry is included in the fixlist, the registry item will be restored to default or removed.)

==================== Internet Explorer trusted/restricted ===============

(If an entry is included in the fixlist, it will be removed from the registry.)

==================== Hosts content: ===============================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2017-03-18 18:03 - 2017-03-18 18:01 - 000000824 _____ C:\Windows\system32\Drivers\etc\hosts

==================== Other Areas ============================

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-3125324295-4109617892-1090203428-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\bruno\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper
DNS Servers: 192.168.1.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: Off)
Windows Firewall is enabled.

==================== MSCONFIG/TASK MANAGER disabled items ==

==================== FirewallRules (Whitelisted) ===============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

FirewallRules: [{25DD0207-2E97-4964-96E4-8ED88207F846}] => (Allow) C:\Program Files\AVAST Software\SZBrowser\3.55.2393.609\SZBrowser.exe
FirewallRules: [{1AF45FE7-6D3B-45EE-9BFF-6C0C7CCF18AD}] => (Allow) C:\Program Files (x86)\Origin Games\Mass Effect Andromeda\MassEffectAndromedaTrial.exe
FirewallRules: [{7A30358D-FA90-4180-9A44-C914D2C40589}] => (Allow) C:\Program Files (x86)\Origin Games\Mass Effect Andromeda\MassEffectAndromedaTrial.exe
FirewallRules: [{56C04338-0E68-44E8-A4F7-B78600CD1B36}] => (Allow) C:\Program Files (x86)\Origin Games\Mass Effect Andromeda\MassEffectAndromeda.exe
FirewallRules: [{F17B01E7-8197-4137-AD92-1410CC2418D5}] => (Allow) C:\Program Files (x86)\Origin Games\Mass Effect Andromeda\MassEffectAndromeda.exe
FirewallRules: [TCP Query User{7D2883ED-29D9-4074-B738-0C6481E973CD}C:\program files (x86)\hearthstone\hearthstone.exe] => (Allow) C:\program files (x86)\hearthstone\hearthstone.exe
FirewallRules: [UDP Query User{6BE1D659-E317-453C-8731-9DE8F32BC1ED}C:\program files (x86)\hearthstone\hearthstone.exe] => (Allow) C:\program files (x86)\hearthstone\hearthstone.exe

==================== Restore Points =========================

24-07-2017 18:59:19 JRT Pre-Junkware Removal
03-08-2017 13:56:38 Ponto de Verificação Agendado

==================== Faulty Device Manager Devices =============

==================== Event log errors: =========================

Application errors:
==================
Error: (08/04/2017 02:38:59 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Nome do aplicativo com falha: MicrosoftEdgeCP.exe, versão: 11.0.15063.483, carimbo de data/hora: 0x595f2577
Nome do módulo com falha: edgehtml.dll, versão: 11.0.15063.483, carimbo de data/hora: 0x1f909eb0
Código de exceção: 0xc0000005
Deslocamento da falha: 0x0000000000697332
ID do processo com falha: 0x1c50
Hora de início do aplicativo com falha: 0x01d30d464dec6dbd
Caminho do aplicativo com falha: C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
Caminho do módulo com falha: C:\Windows\SYSTEM32\edgehtml.dll
ID do Relatório: bfaecd58-d1ee-4c26-bb24-02792e763576
Nome completo do pacote com falha: Microsoft.MicrosoftEdge_40.15063.0.0_neutral__8wekyb3d8bbwe
ID do aplicativo relativo ao pacote com falha: ContentProcess

Error: (08/04/2017 02:22:21 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Nome do aplicativo com falha: MicrosoftEdgeCP.exe, versão: 11.0.15063.483, carimbo de data/hora: 0x595f2577
Nome do módulo com falha: EdgeContent.dll, versão: 11.0.15063.483, carimbo de data/hora: 0x66c96869
Código de exceção: 0xc0000409
Deslocamento da falha: 0x000000000006842b
ID do processo com falha: 0x3540
Hora de início do aplicativo com falha: 0x01d30d458df92726
Caminho do aplicativo com falha: C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
Caminho do módulo com falha: C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\EdgeContent.dll
ID do Relatório: 532d0510-844e-4a71-8082-59274e39fa91
Nome completo do pacote com falha: Microsoft.MicrosoftEdge_40.15063.0.0_neutral__8wekyb3d8bbwe
ID do aplicativo relativo ao pacote com falha: ContentProcess

Error: (08/04/2017 12:41:09 AM) (Source: Application Hang) (EventID: 1002) (User: )
Description: O programa BlackDesert64.exe versão 0.0.0.0 parou de interagir com o Windows e foi fechado. Para ver se há mais informações disponíveis sobre o problema, verifique o histórico de problemas no painel de controle Segurança e Manutenção.

ID do Processo: 5e0

Hora de Início: 01d30c8dedc77044

Hora de Término: 14

Caminho do Aplicativo: C:\Program Files (x86)\Black Desert\bin64\BlackDesert64.exe

ID do Relatório: 55b9644e-98a1-4f29-8526-f3b8d9a99a64

Nome completo do pacote com falha:

ID do aplicativo relativo ao pacote com falha:

Error: (08/02/2017 10:34:19 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Nome do aplicativo com falha: MicrosoftEdgeCP.exe, versão: 11.0.15063.483, carimbo de data/hora: 0x595f2577
Nome do módulo com falha: EdgeContent.dll, versão: 11.0.15063.483, carimbo de data/hora: 0x66c96869
Código de exceção: 0xc0000409
Deslocamento da falha: 0x000000000006842b
ID do processo com falha: 0x38e4
Hora de início do aplicativo com falha: 0x01d30bf684c96804
Caminho do aplicativo com falha: C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
Caminho do módulo com falha: C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\EdgeContent.dll
ID do Relatório: 343bee45-809a-4fe2-8d46-ab86c7a10781
Nome completo do pacote com falha: Microsoft.MicrosoftEdge_40.15063.0.0_neutral__8wekyb3d8bbwe
ID do aplicativo relativo ao pacote com falha: ContentProcess

Error: (08/02/2017 01:27:04 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Nome do aplicativo com falha: MicrosoftEdgeCP.exe, versão: 11.0.15063.483, carimbo de data/hora: 0x595f2577
Nome do módulo com falha: ntdll.dll, versão: 10.0.15063.447, carimbo de data/hora: 0xa329d3a8
Código de exceção: 0xcfffffff
Deslocamento da falha: 0x00000000000a5424
ID do processo com falha: 0x2b80
Hora de início do aplicativo com falha: 0x01d30ba6b52e3b5d
Caminho do aplicativo com falha: C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
Caminho do módulo com falha: C:\Windows\SYSTEM32\ntdll.dll
ID do Relatório: e5d032d2-37d9-48ff-88c4-d13144e7989c
Nome completo do pacote com falha: Microsoft.MicrosoftEdge_40.15063.0.0_neutral__8wekyb3d8bbwe
ID do aplicativo relativo ao pacote com falha: ContentProcess

Error: (08/02/2017 03:26:39 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Nome do aplicativo com falha: MicrosoftEdgeCP.exe, versão: 11.0.15063.483, carimbo de data/hora: 0x595f2577
Nome do módulo com falha: EdgeContent.dll, versão: 11.0.15063.483, carimbo de data/hora: 0x66c96869
Código de exceção: 0xc0000409
Deslocamento da falha: 0x000000000006842b
ID do processo com falha: 0x4604
Hora de início do aplicativo com falha: 0x01d30b57508cc28f
Caminho do aplicativo com falha: C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
Caminho do módulo com falha: C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\EdgeContent.dll
ID do Relatório: 74c7c5a5-2ab4-43cc-b46c-b8d58cd4738e
Nome completo do pacote com falha: Microsoft.MicrosoftEdge_40.15063.0.0_neutral__8wekyb3d8bbwe
ID do aplicativo relativo ao pacote com falha: ContentProcess

Error: (08/01/2017 05:50:25 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Nome do aplicativo com falha: MicrosoftEdgeCP.exe, versão: 11.0.15063.483, carimbo de data/hora: 0x595f2577
Nome do módulo com falha: ntdll.dll, versão: 10.0.15063.447, carimbo de data/hora: 0xa329d3a8
Código de exceção: 0xcfffffff
Deslocamento da falha: 0x00000000000a5ef4
ID do processo com falha: 0x2c4c
Hora de início do aplicativo com falha: 0x01d30b05d3915558
Caminho do aplicativo com falha: C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
Caminho do módulo com falha: C:\Windows\SYSTEM32\ntdll.dll
ID do Relatório: de2cc5b9-e9af-4bac-8080-3e1e41bff470
Nome completo do pacote com falha: Microsoft.MicrosoftEdge_40.15063.0.0_neutral__8wekyb3d8bbwe
ID do aplicativo relativo ao pacote com falha: ContentProcess

Error: (08/01/2017 05:41:38 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Nome do aplicativo com falha: MicrosoftEdgeCP.exe, versão: 11.0.15063.483, carimbo de data/hora: 0x595f2577
Nome do módulo com falha: EdgeContent.dll, versão: 11.0.15063.483, carimbo de data/hora: 0x66c96869
Código de exceção: 0xc0000409
Deslocamento da falha: 0x000000000006842b
ID do processo com falha: 0x41fc
Hora de início do aplicativo com falha: 0x01d30b05730c5899
Caminho do aplicativo com falha: C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
Caminho do módulo com falha: C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\EdgeContent.dll
ID do Relatório: 3346b322-6457-406a-a2b9-4e34ddc319cc
Nome completo do pacote com falha: Microsoft.MicrosoftEdge_40.15063.0.0_neutral__8wekyb3d8bbwe
ID do aplicativo relativo ao pacote com falha: ContentProcess

Error: (08/01/2017 12:40:47 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 2484) (User: DESKTOP-75435FS)
Description: O pacote Microsoft.MicrosoftEdge_40.15063.0.0_neutral__8wekyb3d8bbwe+ContentProcess#{00071402-0002-0000-b018-f21d00000000} foi terminado porque levou muito tempo para ser suspenso.

Error: (08/01/2017 03:29:13 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Nome do aplicativo com falha: MicrosoftEdgeCP.exe, versão: 11.0.15063.483, carimbo de data/hora: 0x595f2577
Nome do módulo com falha: ntdll.dll, versão: 10.0.15063.447, carimbo de data/hora: 0xa329d3a8
Código de exceção: 0xcfffffff
Deslocamento da falha: 0x00000000000a5ef4
ID do processo com falha: 0x3528
Hora de início do aplicativo com falha: 0x01d30a5199681833
Caminho do aplicativo com falha: C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
Caminho do módulo com falha: C:\Windows\SYSTEM32\ntdll.dll
ID do Relatório: 4cf1b8f5-6bcf-405d-b70f-ff3be2b35ec8
Nome completo do pacote com falha: Microsoft.MicrosoftEdge_40.15063.0.0_neutral__8wekyb3d8bbwe
ID do aplicativo relativo ao pacote com falha: ContentProcess

System errors:
=============
Error: (08/04/2017 04:56:45 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Não foi possível iniciar o serviço Origin Web Helper Service devido ao seguinte erro:
O serviço não respondeu à requisição de início ou controle em tempo hábil.