[Arquivado] Malware de difícil remoção - HELP!

Jéssica Natani · Abril 17, 2017

Boa noite!

Estou há alguns dias com um malware do capiroto instalado como Toolbar no Google Chrome. Seu nome é Secure Search e ele não quer sair daqui de jeito nenhum. Essa semana enquanto tentava achar uma forma de obter a licença do Office 2016 ~~por meios ilícitos~~ nas internetches (não me julguem), acabei adquirindo essa m*. Desde então janelas, pop-ups e arquivos são baixados sem permissão. Tento fechar tudo que aparece mas só tenho conseguido pelo gerenciador de tarefas.

Baixei o Adwcleaner, hijackthis, JRT, IObit, e por último o Spy Hunter 4, que acabei adquirindo a versão Pró por ser o único que durante a varredura apontou alguns malwares que antes não haviam sido identificados. Infelizmente gastei pra nada, o negócio ta firme e forte aqui, inclusive durante a escrita desse post fechei pelo menos umas 8 janelas.

Então peço POR FAVOOOOR, tenham compaixão dessa pobre garotinha lerda que já não sabe mais o que fazer.

Muito obrigada, conto com vocês!

LINK RELATÓRIOS FRST:

http://www.cjoint.com/c/GDrbwiTy6pB

http://www.cjoint.com/c/GDrby5BWbPB

DigRam · Abril 17, 2017

/_ Boa Tarde! Jéssica Natani _\

> Desinstale: <2>

RegHunter
SpyHunter 4

> Copie estas informações que estão em vermelho,para o Bloco de Notas.
> Salve-as com o nome fixlist. << Texto!
> Salve-as no desktop! ( Área de trabalho ... )
> Mova a ferramenta FRST.exe ao desktop,pois a mesma está em pasta errada! (C:\Users\jskna\Downloads)

start
CloseProcesses:
ShellIconOverlayIdentifiers: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => -> Nenhum Arquivo
AutoConfigURL: [S-1-5-21-3580695165-2611896491-3998447638-1001] => hxxp://tech-access.biz/wpad.dat?ab4dc06080ff0e9e51fbb32dde2fd95728024287
ManualProxies: 0hxxp://tech-access.biz/wpad.dat?ab4dc06080ff0e9e51fbb32dde2fd95728024287
SearchScopes: HKU\S-1-5-21-3580695165-2611896491-3998447638-1001 -> DefaultScope {9100172C-9D20-49E3-9717-14A13608D8F6} URL =
U1 aswbdisk; não ImagePath
S1 gbpddfac; system32\drivers\gbpddfac64.sys [X]
S0 gbpddreg; system32\drivers\gbpddreg64.sys [X]
2017-04-16 12:59 - 2017-04-16 13:02 - 00000000 ____D C:\Users\Todos os Usuários\ProductData
2017-04-16 12:59 - 2017-04-16 13:02 - 00000000 ____D C:\ProgramData\ProductData
2016-12-19 12:06 - 2016-12-19 12:06 - 0000000 ____H () C:\ProgramData\DP45977C.lfl
2017-04-16 14:50 - 2017-04-16 13:41 - 4615856 _____ (Enigma Software Group USA, LLC.) C:\Users\jskna\AppData\Local\Temp\EsgInstallerResumeAction_d0f0112f31a82dce19f6f1539add3443.exe
2017-04-16 15:41 - 2017-04-16 15:41 - 3516080 _____ (Enigma Software Group USA, LLC.) C:\Users\jskna\AppData\Local\Temp\esgsetup.exe
2017-03-04 14:01 - 2017-03-04 14:32 - 54267784 _____ (SweetLabs,Inc.) C:\Users\jskna\AppData\Local\Temp\octB701.tmp.exe
2017-03-08 23:52 - 2017-03-09 00:18 - 54267784 _____ (SweetLabs,Inc.) C:\Users\lenit\AppData\Local\Temp\oct307D.tmp.exe
Task: {3801DC0C-E5A8-412E-8E3D-6F5D1A0C8145} - System32\Tasks\RegHunterStartup => C:\Program Files\Enigma Software Group\RegHunter\RegHunter.exe [2017-04-16] (Enigma Software Group USA, LLC.)
Task: {7BAD7760-7419-415B-8151-6A0E643D969A} - System32\Tasks\SpyHunter4Startup => C:\Program Files\Enigma Software Group\SpyHunter\Spyhunter4.exe [2017-04-16] (Enigma Software Group USA, LLC.)
AlternateDataStreams: C:\Program Files (x86)\GbPlugin:IncompleteStartProcessProtection.cnt [10]
AlternateDataStreams: C:\Program Files (x86)\GbPlugin:u6eBQrM0Z2K3FKLVBMG8dY3IkKT2rqFO+Sf68h8fDg== [32]
AlternateDataStreams: C:\Windows\System32:BF72DB64_Cef.gbp [2]
AlternateDataStreams: C:\Windows\system32\Drivers\wsddfac.sys:X5ZN8aGXs4 [2166]
AlternateDataStreams: C:\ProgramData\GbPlugin:IncompleteStartGbprcm.cnt [10]
AlternateDataStreams: C:\Users\Todos os Usuários\GbPlugin:IncompleteStartGbprcm.cnt [10]
CreateRestorePoint:
EmptyTemp:
Reboot:
end

> Execute FRST/FRST64 >> Clique "Corrigir" << Aguarde!
> Na mensagem,clique Executar.
> Poste o relatório! (Fixlog.txt)
> Este e outros relatórios,podem ser encontrados na pasta: Disco Local (C) > FRST > Logs

< Peço aos visitantes que não utilizem este script em outros computadores,sob risco de danos aos mesmos! >

[A+]

Jéssica Natani · Abril 18, 2017

Obrigada por responder DigRam!

Segue relatório FRST:

Resultado do exame da Farbar Recovery Scan Tool (FRST) (x64) Versão: 17-04-2017 01
Executado por jskna (administrador) em LAPTOP-0QLSAAC6 (18-04-2017 01:03:28)
Executando a partir de C:\Users\jskna\Desktop
Perfis Carregados: jskna (Perfis Disponíveis: defaultuser0 & jskna & lenit)
Platform: Windows 10 Home Single Language Versão 1607 (X64) Idioma: Português (Brasil)
Internet Explorer Versão 11 (Navegador padrão: Chrome)
Modo da Inicialização: Normal
Tutorial da Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processos (Whitelisted) =================

(Se uma entrada for incluída na fixlist, o processo será fechado. O arquivo não será movido.)

(Intel Corporation) C:\Windows\System32\igfxCUIService.exe
(GAS Tecnologia) C:\Program Files (x86)\GbPlugin\GbpSv.exe
(Windows (R) Win 7 DDK provider) C:\Program Files (x86)\Bluetooth Suite\AdminService.exe
(Conexant Systems Inc.) C:\Windows\System32\CxAudMsg64.exe
() C:\Program Files\Dolby\Dolby DAX2\DAX2_API\DolbyDAX2API.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\ImController\Service\Lenovo.Modern.ImController.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe
(GAS Tecnologia LTDA) C:\Program Files\Diebold\Warsaw\core.exe
(Conexant Systems, Inc.) C:\Windows\System32\SASrv.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MsMpEng.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\NisSrv.exe
(Lenovo) C:\Program Files (x86)\Lenovo\CCSDK\CCSDK.exe
(Lenovo) C:\Program Files (x86)\Lenovo\GDCAgentSetupRed\GDCAgent.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.33.3\GoogleCrashHandler.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.33.3\GoogleCrashHandler64.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Intel Corporation) C:\Windows\System32\igfxEM.exe
(Intel Corporation) C:\Windows\System32\igfxHK.exe
() C:\Windows\System32\igfxTray.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
() C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.13.133.0_x64__kzf8qxf38zg5c\SkypeHost.exe
(GAS Tecnologia) C:\Program Files (x86)\GbPlugin\GbpSv.exe
(Conexant Systems, Inc) C:\Program Files\CONEXANT\SAII\SmartAudio.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Lenovo Group Limited) C:\Program Files (x86)\Lenovo\ImController\PluginHost\Lenovo.Modern.ImController.PluginHost.SettingsApp.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
() C:\Program Files\Lenovo\LenovoUtility\utility.exe
() C:\Program Files\CONEXANT\ForteConfig\fmapp.exe
() C:\Program Files\Dolby\Dolby DAX2\DAX2_APP\DolbyDAX2TrayIcon.exe
(Conexant Systems, Inc.) C:\Program Files\CONEXANT\cAudioFilterAgent\CAudioFilterAgent64.exe
(GAS Tecnologia LTDA) C:\Program Files\Diebold\Warsaw\core.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MSASCuiL.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Spotify Ltd) C:\Users\jskna\AppData\Roaming\Spotify\SpotifyWebHelper.exe
(CyberLink) C:\Program Files (x86)\Lenovo\Power2Go\CLMLSvc_P2G8.exe
(CyberLink Corp.) C:\Program Files (x86)\Lenovo\PowerDVD12\PDVD12Serv.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Intel Corporation) C:\Windows\SysWOW64\IntelCpHeciSvc.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MpCmdRun.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\ImController\PluginHost\Lenovo.Modern.ImController.PluginHost.SettingsApp.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\ImController\PluginHost\Lenovo.Modern.ImController.PluginHost.Device.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\ImController\PluginHost\Lenovo.Modern.ImController.PluginHost.Device.exe
(Lenovo Group Limited) C:\Program Files (x86)\Lenovo\ImController\PluginHost\Lenovo.Modern.ImController.PluginHost.SettingsApp.exe

==================== Registro (Whitelisted) ====================

(Se uma entrada for incluída na fixlist, o ítem no Registro será restaurado para o padrão ou removido. O arquivo não será movido.)

HKLM\...\Run: [LenovoUtility] => C:\Program Files\Lenovo\LenovoUtility\utility.exe [791848 2016-12-19] ()
HKLM\...\Run: [ForteConfig] => C:\Program Files\Conexant\ForteConfig\fmapp.exe [49056 2010-10-26] ()
HKLM\...\Run: [DAX2_APP] => C:\Program Files\Dolby\Dolby DAX2\DAX2_APP\DolbyDAX2TrayIcon.exe [809472 2016-05-16] ()
HKLM\...\Run: [SmartAudio] => C:\Program Files\CONEXANT\SAII\SACpl.exe [1830232 2016-03-08] (Conexant Systems, Inc.)
HKLM\...\Run: [cAudioFilterAgent] => C:\Program Files\Conexant\cAudioFilterAgent\cAudioFilterAgent64.exe [602968 2015-12-07] (Conexant Systems, Inc.)
HKLM\...\Run: [IAStorIcon] => C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [323056 2015-11-04] (Intel Corporation)
HKLM\...\Run: [Diebold - Warsaw] => C:\Program Files\Diebold\Warsaw\core.exe [925744 2016-06-23] (GAS Tecnologia LTDA)
HKLM\...\Run: [WindowsDefender] => C:\Program Files\Windows Defender\MSASCuiL.exe [631808 2017-03-28] (Microsoft Corporation)
HKLM-x32\...\Run: [CLMLServer_For_P2G8] => C:\Program Files (x86)\Lenovo\Power2Go\CLMLSvc_P2G8.exe [110008 2015-07-21] (CyberLink)
HKLM-x32\...\Run: [CLVirtualDrive] => C:\Program Files (x86)\Lenovo\Power2Go\VirtualDrive.exe [492472 2015-07-21] (CyberLink Corp.)
Winlogon\Notify\ GbPluginCef: C:\Program Files (x86)\GbPlugin\gbiehCef.dll [2016-08-10] (Caixa Economica Federal)
HKU\S-1-5-21-3580695165-2611896491-3998447638-1001\...\Run: [Spotify] => C:\Users\jskna\AppData\Roaming\Spotify\Spotify.exe [7064176 2017-04-10] (Spotify Ltd)
HKU\S-1-5-21-3580695165-2611896491-3998447638-1001\...\Run: [Spotify Web Helper] => C:\Users\jskna\AppData\Roaming\Spotify\SpotifyWebHelper.exe [1446000 2017-04-10] (Spotify Ltd)
ShellExecuteHooks-x32: GbPluginObj Class - {E37CB5F0-51F5-4395-A808-5FA49E399003} - C:\Program Files (x86)\GbPlugin\gbiehcef.dll [1903328 2016-08-10] (Caixa Economica Federal)
ShellIconOverlayIdentifiers: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => -> Nenhum Arquivo

==================== Internet (Whitelisted) ====================

(Se um ítem for incluído na fixlist, sendo um ítem do Registro, será removido ou restaurado para o padrão.)

AutoConfigURL: [S-1-5-21-3580695165-2611896491-3998447638-1001] => hxxp://tech-access.biz/wpad.dat?ab4dc06080ff0e9e51fbb32dde2fd95728024287
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{67755072-5b99-4b6a-8543-4184c6fd43ac}: [DhcpNameServer] 192.168.1.1
ManualProxies: 0hxxp://tech-access.biz/wpad.dat?ab4dc06080ff0e9e51fbb32dde2fd95728024287

Internet Explorer:
==================
HKU\S-1-5-21-3580695165-2611896491-3998447638-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://lenovo17win10.msn.com/?pc=LCTE/
HKU\S-1-5-21-3580695165-2611896491-3998447638-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://lenovo17win10.msn.com/?pc=LCTE
SearchScopes: HKU\S-1-5-21-3580695165-2611896491-3998447638-1001 -> DefaultScope {9100172C-9D20-49E3-9717-14A13608D8F6} URL =
BHO-x32: GbIehObj Class -> {C41A1C0E-EA6C-11D4-B1B8-444553540003} -> C:\Program Files (x86)\GbPlugin\gbiehcef.dll [2016-08-10] (Caixa Economica Federal)

FireFox:
========
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.33.3\npGoogleUpdate3.dll [2017-04-12] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.33.3\npGoogleUpdate3.dll [2017-04-12] (Google Inc.)

Chrome:
=======
CHR Profile: C:\Users\jskna\AppData\Local\Google\Chrome\User Data\Default [2017-04-18]
CHR Extension: (Google Apresentações) - C:\Users\jskna\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2017-04-16]
CHR Extension: (Duolingo na Web) - C:\Users\jskna\AppData\Local\Google\Chrome\User Data\Default\Extensions\aiahmijlpehemcpleichkcokhegllfjl [2017-03-05]
CHR Extension: (Google Docs) - C:\Users\jskna\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2017-03-04]
CHR Extension: (Google Drive) - C:\Users\jskna\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2017-03-04]
CHR Extension: (YouTube) - C:\Users\jskna\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2017-03-04]
CHR Extension: (Planilhas do Google) - C:\Users\jskna\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2017-04-16]
CHR Extension: (Documentos Google off-line) - C:\Users\jskna\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2017-03-04]
CHR Extension: (Pagamentos da Chrome Web Store) - C:\Users\jskna\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2017-03-08]
CHR Extension: (Gmail) - C:\Users\jskna\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2017-03-04]
CHR Extension: (Chrome Media Router) - C:\Users\jskna\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2017-04-09]

==================== Serviços (Whitelisted) ====================

(Se uma entrada for incluída na fixlist, será removida do Registro. O arquivo não será movido, a menos que seja colocado separadamente.)

R2 AtherosSvc; C:\Program Files (x86)\Bluetooth Suite\adminservice.exe [338312 2016-06-29] (Windows (R) Win 7 DDK provider)
R2 CCSDK; C:\Program Files (x86)\Lenovo\CCSDK\CCSDK.exe [666608 2016-03-22] (Lenovo)
S3 cplspcon; C:\Windows\system32\IntelCpHDCPSvc.exe [457184 2016-09-03] (Intel Corporation)
R2 DAX2API; C:\Program Files\Dolby\Dolby DAX2\DAX2_API\DolbyDAX2API.exe [146944 2016-05-16] () [Arquivo não assinado]
R2 GbpSv; C:\Program Files (x86)\GbPlugin\GbpSv.exe [631520 2016-08-10] (GAS Tecnologia)
R2 GDCAgent; C:\Program Files (x86)\Lenovo\GDCAgentSetupRed\GDCAgent.exe [1210352 2016-03-22] (Lenovo)
S2 IAStorDataMgrSvc; C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [19440 2015-11-04] (Intel Corporation)
R2 igfxCUIService2.0.0.0; C:\Windows\system32\igfxCUIService.exe [382440 2016-09-03] (Intel Corporation)
R2 ImControllerService; C:\Program Files\Lenovo\ImController\Service\Lenovo.Modern.ImController.exe [58688 2017-03-03] (Lenovo Group Limited)
R2 SAService; C:\Windows\system32\SAsrv.exe [431960 2015-09-14] (Conexant Systems, Inc.)
R2 SynTPEnhService; C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe [260192 2016-11-03] (Synaptics Incorporated)
R2 Warsaw Technology; C:\Program Files\Diebold\Warsaw\core.exe [925744 2016-06-23] (GAS Tecnologia LTDA)
R3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [347328 2017-03-28] (Microsoft Corporation)
R2 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [103720 2017-03-28] (Microsoft Corporation)

===================== Drivers (Whitelisted) ======================

(Se uma entrada for incluída na fixlist, será removida do Registro. O arquivo não será movido, a menos que seja colocado separadamente.)

R1 CLVirtualDrive; C:\Windows\system32\DRIVERS\CLVirtualDrive.sys [91912 2013-11-12] (CyberLink)
S3 dg_ssudbus; C:\Windows\system32\DRIVERS\ssudbus.sys [131712 2016-09-05] (Samsung Electronics Co., Ltd.)
R3 GBPRCM; C:\Program Files (x86)\GbPlugin\gbprcm64.sys [29912 2016-08-10] (GAS Tecnologia)
S3 NetAdapterCx; C:\Windows\System32\drivers\NetAdapterCx.sys [90624 2016-07-16] ()
S3 NETwNe64; C:\Windows\System32\drivers\NETwew01.sys [3343872 2016-07-16] (Intel Corporation)
R3 Qcamain10x64; C:\Windows\System32\drivers\Qcamain10x64.sys [2400184 2016-06-28] (Qualcomm Atheros, Inc.)
R3 rt640x64; C:\Windows\System32\drivers\rt640x64.sys [935168 2016-01-21] (Realtek )
R3 RTSUER; C:\Windows\system32\Drivers\RtsUer.sys [416472 2016-05-17] (Realsil Semiconductor Corporation)
R3 rtsuvc; C:\Windows\system32\DRIVERS\rtsuvc.sys [3118848 2016-05-12] (Realtek Semiconductor Corp.)
S3 ssudmdm; C:\Windows\system32\DRIVERS\ssudmdm.sys [165504 2016-09-05] (Samsung Electronics Co., Ltd.)
R3 Warsaw_PP; C:\Program Files (x86)\GbPlugin\wsftprp64.sys [24792 2016-08-10] (GAS Tecnologia LTDA)
S0 WdBoot; C:\Windows\System32\drivers\WdBoot.sys [44056 2016-07-16] (Microsoft Corporation)
R0 WdFilter; C:\Windows\System32\drivers\WdFilter.sys [290144 2016-07-16] (Microsoft Corporation)
R3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [123232 2016-07-16] (Microsoft Corporation)
R1 wsddfac; C:\Windows\System32\drivers\wsddfac.sys [101080 2017-04-18] (GAS Tecnologia)
R1 wsddntf; C:\Windows\system32\DRIVERS\wsddntf.sys [47176 2016-06-21] (GAS Tecnologia)
R1 wsddpp; C:\Windows\system32\drivers\wsddpp.sys [97376 2016-06-08] (GAS Tecnologia)
S3 wsvd; C:\Windows\system32\DRIVERS\wsvd.sys [102376 2012-06-13] ("CyberLink)
U1 aswbdisk; não ImagePath
S1 gbpddfac; system32\drivers\gbpddfac64.sys [X]
S0 gbpddreg; system32\drivers\gbpddreg64.sys [X]

==================== NetSvcs (Whitelisted) ===================

(Se uma entrada for incluída na fixlist, será removida do Registro. O arquivo não será movido, a menos que seja colocado separadamente.)

==================== Um Mês Criados arquivos e pastas ========

(Se uma entrada for incluída na fixlist, o arquivo/pasta será movido.)

2017-04-18 01:03 - 2017-04-18 01:03 - 00000000 ____D C:\Users\jskna\Desktop\FRST-OlderVersion
2017-04-18 01:01 - 2017-04-18 01:01 - 00002377 _____ C:\Users\jskna\Desktop\fixlist.txt
2017-04-18 00:58 - 2017-04-18 00:58 - 00000000 ___HD C:\OneDriveTemp
2017-04-17 23:41 - 2017-04-17 23:41 - 10731470 _____ (DsNET Corp ) C:\Users\jskna\Downloads\Não confirmado 272122.crdownload
2017-04-16 22:20 - 2017-04-18 01:03 - 00013948 _____ C:\Users\jskna\Desktop\FRST.txt
2017-04-16 22:20 - 2017-04-16 22:20 - 00031950 _____ C:\Users\jskna\Desktop\Addition.txt
2017-04-16 22:19 - 2017-04-16 22:20 - 00031947 _____ C:\Users\jskna\Downloads\Addition.txt
2017-04-16 22:16 - 2017-04-18 01:03 - 02424832 _____ (Farbar) C:\Users\jskna\Desktop\FRST64.exe
2017-04-16 22:16 - 2017-04-18 01:03 - 00000000 ____D C:\FRST
2017-04-16 22:16 - 2017-04-16 22:20 - 00230519 _____ C:\Users\jskna\Downloads\FRST.txt
2017-04-16 22:15 - 2017-04-16 22:15 - 01766400 _____ (Farbar) C:\Users\jskna\Downloads\FRST.exe
2017-04-16 22:15 - 2017-04-16 22:15 - 01766400 _____ (Farbar) C:\Users\jskna\Downloads\FRST (1).exe
2017-04-16 21:48 - 2017-04-16 21:48 - 00044914 _____ C:\Users\jskna\Downloads\AppAdobePlayer2017_16042017003.exe
2017-04-16 19:21 - 2017-04-16 19:26 - 221130752 _____ C:\Users\jskna\Downloads\LibreOffice_5.3.2_Win_x86.msi
2017-04-16 18:56 - 2017-04-16 18:57 - 04615856 _____ (Enigma Software Group USA, LLC.) C:\Users\jskna\Downloads\SpyHunter-Installer (2).exe
2017-04-16 18:55 - 2017-04-16 18:55 - 04615856 _____ (Enigma Software Group USA, LLC.) C:\Users\jskna\Downloads\SpyHunter-Installer (1).exe
2017-04-16 15:41 - 2017-04-16 15:41 - 02659840 _____ C:\Users\jskna\Downloads\SH-Alt-Install.exe
2017-04-16 15:41 - 2017-04-16 15:41 - 02659840 _____ C:\Users\jskna\Downloads\SH-Alt-Install (1).exe
2017-04-16 14:46 - 2017-04-16 15:34 - 00000000 ____D C:\Windows\4FC9DA9DF608454E8191D7EFFDCC5726.TMP
2017-04-16 14:46 - 2017-04-16 14:46 - 00000000 ____D C:\Program Files (x86)\Enigma Software Group
2017-04-16 13:44 - 2017-04-16 13:44 - 00000000 _____ C:\autoexec.bat
2017-04-16 13:40 - 2017-04-16 13:41 - 04615856 _____ (Enigma Software Group USA, LLC.) C:\Users\jskna\Downloads\SpyHunter-Installer.exe
2017-04-16 13:23 - 2017-04-16 13:23 - 00000000 ____D C:\zoek_backup
2017-04-16 13:22 - 2017-04-16 13:22 - 01309184 ____N C:\Users\jskna\Downloads\zoek.exe
2017-04-16 12:59 - 2017-04-16 13:02 - 00000000 ____D C:\Users\Todos os Usuários\ProductData
2017-04-16 12:59 - 2017-04-16 13:02 - 00000000 ____D C:\ProgramData\ProductData
2017-04-16 12:57 - 2017-04-16 12:57 - 00000755 _____ C:\Users\jskna\Desktop\JRT.txt
2017-04-16 12:36 - 2017-04-16 12:36 - 01663672 _____ (Malwarebytes) C:\Users\jskna\Downloads\JRT.exe
2017-04-13 18:13 - 2017-04-13 18:30 - 00000596 _____ C:\Users\jskna\Desktop\CHAT.txt
2017-04-12 23:28 - 2017-04-16 13:10 - 00000000 ____D C:\AdwCleaner
2017-04-12 23:27 - 2017-04-12 23:28 - 04089296 _____ C:\Users\jskna\Downloads\AdwCleaner.exe
2017-04-11 23:45 - 2017-03-28 03:05 - 01504056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll
2017-04-11 23:45 - 2017-03-28 03:04 - 05721808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\windows.storage.dll
2017-04-11 23:45 - 2017-03-28 03:04 - 02262776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2017-04-11 23:45 - 2017-03-28 02:59 - 06667520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.Protection.PlayReady.dll
2017-04-11 23:45 - 2017-03-28 02:58 - 20967840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2017-04-11 23:45 - 2017-03-28 02:58 - 01851688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfmp4srcsnk.dll
2017-04-11 23:45 - 2017-03-28 02:58 - 01344448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfsrcsnk.dll
2017-04-11 23:45 - 2017-03-28 02:58 - 01277856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfasfsrcsnk.dll
2017-04-11 23:45 - 2017-03-28 02:58 - 01202936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfmpeg2srcsnk.dll
2017-04-11 23:45 - 2017-03-28 02:58 - 00981888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfnetcore.dll
2017-04-11 23:45 - 2017-03-28 02:58 - 00961192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ole32.dll
2017-04-11 23:45 - 2017-03-28 02:53 - 01414728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32full.dll
2017-04-11 23:45 - 2017-03-28 02:28 - 00755712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2017-04-11 23:45 - 2017-03-28 02:24 - 04614656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.dll
2017-04-11 23:45 - 2017-03-28 02:20 - 03307008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MFMediaEngine.dll
2017-04-11 23:45 - 2017-03-28 02:17 - 06109696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mos.dll
2017-04-11 23:45 - 2017-03-28 02:14 - 07468544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstscax.dll
2017-04-11 23:45 - 2017-03-28 02:14 - 00641024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MCRecvSrc.dll
2017-04-11 23:45 - 2017-03-28 02:11 - 02994176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\win32kfull.sys
2017-04-11 23:45 - 2017-03-28 02:11 - 01600000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2017-04-11 23:45 - 2017-03-28 02:08 - 00783360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSWorkspace.dll
2017-04-11 23:44 - 2017-03-28 04:10 - 00484584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioSes.dll
2017-04-11 23:44 - 2017-03-28 04:10 - 00315744 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll
2017-04-11 23:44 - 2017-03-28 03:21 - 00167848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wscapi.dll
2017-04-11 23:44 - 2017-03-28 03:19 - 00601712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleaut32.dll
2017-04-11 23:44 - 2017-03-28 03:15 - 02048496 _____ C:\Windows\SysWOW64\CoreUIComponents.dll
2017-04-11 23:44 - 2017-03-28 03:07 - 00263472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Storage.ApplicationData.dll
2017-04-11 23:44 - 2017-03-28 03:04 - 01431232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.ApplicationModel.Store.dll
2017-04-11 23:44 - 2017-03-28 03:04 - 00975744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\twinapi.appcore.dll
2017-04-11 23:44 - 2017-03-28 03:04 - 00861024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\LicenseManager.dll
2017-04-11 23:44 - 2017-03-28 03:04 - 00277344 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\msiscsi.sys
2017-04-11 23:44 - 2017-03-28 03:04 - 00136032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\CloudExperienceHostUser.dll
2017-04-11 23:44 - 2017-03-28 03:04 - 00116568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\CloudExperienceHostCommon.dll
2017-04-11 23:44 - 2017-03-28 03:02 - 01980768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml6.dll
2017-04-11 23:44 - 2017-03-28 03:02 - 00846560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WinTypes.dll
2017-04-11 23:44 - 2017-03-28 03:02 - 00576408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wer.dll
2017-04-11 23:44 - 2017-03-28 02:59 - 04023008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfcore.dll
2017-04-11 23:44 - 2017-03-28 02:58 - 01360464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfnetsrc.dll
2017-04-11 23:44 - 2017-03-28 02:53 - 00545944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fontdrvhost.exe
2017-04-11 23:44 - 2017-03-28 02:52 - 00306800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.MediaControl.dll
2017-04-11 23:44 - 2017-03-28 02:48 - 05685760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Data.Pdf.dll
2017-04-11 23:44 - 2017-03-28 02:42 - 00095232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UserDataTimeUtil.dll
2017-04-11 23:44 - 2017-03-28 02:42 - 00051712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\usoapi.dll
2017-04-11 23:44 - 2017-03-28 02:41 - 00026112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\odbcconf.dll
2017-04-11 23:44 - 2017-03-28 02:40 - 00224256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ExSMime.dll
2017-04-11 23:44 - 2017-03-28 02:40 - 00049664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XblAuthManagerProxy.dll
2017-04-11 23:44 - 2017-03-28 02:40 - 00037376 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll
2017-04-11 23:44 - 2017-03-28 02:39 - 00141824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Devices.Radios.dll
2017-04-11 23:44 - 2017-03-28 02:39 - 00040960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TokenBrokerUI.dll
2017-04-11 23:44 - 2017-03-28 02:38 - 00156672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UserDeviceRegistration.dll
2017-04-11 23:44 - 2017-03-28 02:38 - 00070656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XblAuthTokenBrokerExt.dll
2017-04-11 23:44 - 2017-03-28 02:37 - 00255488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\unimdm.tsp
2017-04-11 23:44 - 2017-03-28 02:37 - 00215552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apds.dll
2017-04-11 23:44 - 2017-03-28 02:37 - 00177664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Web.Diagnostics.dll
2017-04-11 23:44 - 2017-03-28 02:37 - 00138240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DisplayManager.dll
2017-04-11 23:44 - 2017-03-28 02:37 - 00123904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Networking.HostName.dll
2017-04-11 23:44 - 2017-03-28 02:37 - 00097792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.System.SystemManagement.dll
2017-04-11 23:44 - 2017-03-28 02:37 - 00041472 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\BasicRender.sys
2017-04-11 23:44 - 2017-03-28 02:36 - 00769024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ipsecsnp.dll
2017-04-11 23:44 - 2017-03-28 02:36 - 00237568 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Web.Diagnostics.dll
2017-04-11 23:44 - 2017-03-28 02:36 - 00136192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WinRtTracing.dll
2017-04-11 23:44 - 2017-03-28 02:36 - 00129024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Devices.SerialCommunication.dll
2017-04-11 23:44 - 2017-03-28 02:36 - 00123904 _____ (Microsoft Corporation) C:\Windows\system32\mssprxy.dll
2017-04-11 23:44 - 2017-03-28 02:36 - 00094208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.StateRepositoryClient.dll
2017-04-11 23:44 - 2017-03-28 02:36 - 00087040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Networking.ServiceDiscovery.Dnssd.dll
2017-04-11 23:44 - 2017-03-28 02:36 - 00059904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.System.UserDeviceAssociation.dll
2017-04-11 23:44 - 2017-03-28 02:36 - 00056320 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\BasicDisplay.sys
2017-04-11 23:44 - 2017-03-28 02:35 - 00505856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\bcastdvr.exe
2017-04-11 23:44 - 2017-03-28 02:35 - 00392192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Gaming.Input.dll
2017-04-11 23:44 - 2017-03-28 02:35 - 00374784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Devices.LowLevel.dll
2017-04-11 23:44 - 2017-03-28 02:35 - 00315904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Gaming.XboxLive.Storage.dll
2017-04-11 23:44 - 2017-03-28 02:35 - 00231936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.ApplicationModel.LockScreen.dll
2017-04-11 23:44 - 2017-03-28 02:35 - 00184320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UserMgrProxy.dll
2017-04-11 23:44 - 2017-03-28 02:35 - 00180224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\InstallAgent.exe
2017-04-11 23:44 - 2017-03-28 02:35 - 00142336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Devices.WiFi.dll
2017-04-11 23:44 - 2017-03-28 02:35 - 00118272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AppointmentActivation.dll
2017-04-11 23:44 - 2017-03-28 02:35 - 00113152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Devices.Lights.dll
2017-04-11 23:44 - 2017-03-28 02:35 - 00092672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.ApplicationModel.Background.SystemEventsBroker.dll
2017-04-11 23:44 - 2017-03-28 02:34 - 00299520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UserDataAccountApis.dll
2017-04-11 23:44 - 2017-03-28 02:34 - 00237568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SyncSettings.dll
2017-04-11 23:44 - 2017-03-28 02:34 - 00117760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AuthBroker.dll
2017-04-11 23:44 - 2017-03-28 02:34 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.ApplicationModel.Core.dll
2017-04-11 23:44 - 2017-03-28 02:33 - 00670208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Devices.PointOfService.dll
2017-04-11 23:44 - 2017-03-28 02:33 - 00609280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.Import.dll
2017-04-11 23:44 - 2017-03-28 02:33 - 00557568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\StoreAgent.dll
2017-04-11 23:44 - 2017-03-28 02:33 - 00483840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Devices.AllJoyn.dll
2017-04-11 23:44 - 2017-03-28 02:33 - 00467968 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Gaming.XboxLive.Storage.dll
2017-04-11 23:44 - 2017-03-28 02:33 - 00436736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ipsmsnap.dll
2017-04-11 23:44 - 2017-03-28 02:33 - 00265728 _____ C:\Windows\SysWOW64\Windows.Perception.Stub.dll
2017-04-11 23:44 - 2017-03-28 02:33 - 00193536 _____ (Microsoft Corporation) C:\Windows\system32\WinRtTracing.dll
2017-04-11 23:44 - 2017-03-28 02:33 - 00149504 _____ (Microsoft Corporation) C:\Windows\system32\Windows.ApplicationModel.Core.dll
2017-04-11 23:44 - 2017-03-28 02:32 - 01243136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.FaceAnalysis.dll
2017-04-11 23:44 - 2017-03-28 02:32 - 00562176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Devices.SmartCards.dll
2017-04-11 23:44 - 2017-03-28 02:32 - 00426496 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.ApplicationModel.Wallet.dll
2017-04-11 23:44 - 2017-03-28 02:32 - 00386048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Devices.WiFiDirect.dll
2017-04-11 23:44 - 2017-03-28 02:32 - 00332288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Internal.Bluetooth.dll
2017-04-11 23:44 - 2017-03-28 02:32 - 00325120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleacc.dll
2017-04-11 23:44 - 2017-03-28 02:32 - 00298496 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Internal.Management.dll
2017-04-11 23:44 - 2017-03-28 02:32 - 00284672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apprepsync.dll
2017-04-11 23:44 - 2017-03-28 02:32 - 00271360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\deviceaccess.dll
2017-04-11 23:44 - 2017-03-28 02:32 - 00223232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\InstallAgentUserBroker.exe
2017-04-11 23:44 - 2017-03-28 02:32 - 00218624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WwaApi.dll
2017-04-11 23:44 - 2017-03-28 02:32 - 00206336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vaultcli.dll
2017-04-11 23:44 - 2017-03-28 02:32 - 00202752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Devices.HumanInterfaceDevice.dll
2017-04-11 23:44 - 2017-03-28 02:32 - 00185856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Security.Authentication.Identity.Provider.dll
2017-04-11 23:44 - 2017-03-28 02:32 - 00175616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Devices.Scanners.dll
2017-04-11 23:44 - 2017-03-28 02:32 - 00125952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apprepapi.dll
2017-04-11 23:44 - 2017-03-28 02:31 - 00711680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll
2017-04-11 23:44 - 2017-03-28 02:31 - 00498688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mbsmsapi.dll
2017-04-11 23:44 - 2017-03-28 02:31 - 00431616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\efswrt.dll
2017-04-11 23:44 - 2017-03-28 02:31 - 00390656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\CredProvDataModel.dll
2017-04-11 23:44 - 2017-03-28 02:30 - 00846336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WebcamUi.dll
2017-04-11 23:44 - 2017-03-28 02:30 - 00819200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AppContracts.dll
2017-04-11 23:44 - 2017-03-28 02:30 - 00816640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\NaturalLanguage6.dll
2017-04-11 23:44 - 2017-03-28 02:30 - 00787968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sbe.dll
2017-04-11 23:44 - 2017-03-28 02:30 - 00262144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Devices.Picker.dll
2017-04-11 23:44 - 2017-03-28 02:30 - 00075264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\updatepolicy.dll
2017-04-11 23:44 - 2017-03-28 02:29 - 00747520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.Ocr.dll
2017-04-11 23:44 - 2017-03-28 02:29 - 00529920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\StructuredQuery.dll
2017-04-11 23:44 - 2017-03-28 02:29 - 00314368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Devices.Usb.dll
2017-04-11 23:44 - 2017-03-28 02:29 - 00284672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.ApplicationModel.dll
2017-04-11 23:44 - 2017-03-28 02:29 - 00238080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AboveLockAppHost.dll
2017-04-11 23:44 - 2017-03-28 02:28 - 00584192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Security.Authentication.Web.Core.dll
2017-04-11 23:44 - 2017-03-28 02:28 - 00561664 _____ (Microsoft Corporation) C:\Windows\system32\Windows.ApplicationModel.Wallet.dll
2017-04-11 23:44 - 2017-03-28 02:28 - 00551936 _____ (Microsoft Corporation) C:\Windows\system32\MusUpdateHandlers.dll
2017-04-11 23:44 - 2017-03-28 02:28 - 00500224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Graphics.Printing.dll
2017-04-11 23:44 - 2017-03-28 02:28 - 00358912 _____ (Microsoft Corporation) C:\Windows\system32\Windows.ApplicationModel.dll
2017-04-11 23:44 - 2017-03-28 02:27 - 01388544 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Cred.dll
2017-04-11 23:44 - 2017-03-28 02:27 - 00288256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\CryptoWinRT.dll
2017-04-11 23:44 - 2017-03-28 02:27 - 00245760 _____ (Microsoft Corporation) C:\Windows\system32\WwaApi.dll
2017-04-11 23:44 - 2017-03-28 02:26 - 01534464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Graphics.Printing.3D.dll
2017-04-11 23:44 - 2017-03-28 02:26 - 00642048 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Xaml.InkControls.dll
2017-04-11 23:44 - 2017-03-28 02:26 - 00468992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Xaml.InkControls.dll
2017-04-11 23:44 - 2017-03-28 02:26 - 00313856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AppXDeploymentClient.dll
2017-04-11 23:44 - 2017-03-28 02:25 - 02333184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WsmSvc.dll
2017-04-11 23:44 - 2017-03-28 02:25 - 01196544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wscui.cpl
2017-04-11 23:44 - 2017-03-28 02:25 - 00963584 _____ (Microsoft Corporation) C:\Windows\system32\WebcamUi.dll
2017-04-11 23:44 - 2017-03-28 02:25 - 00653312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.AccountsControl.dll
2017-04-11 23:44 - 2017-03-28 02:24 - 06474752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mspaint.exe
2017-04-11 23:44 - 2017-03-28 02:24 - 00901120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Devices.Bluetooth.dll
2017-04-11 23:44 - 2017-03-28 02:24 - 00675840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Networking.dll
2017-04-11 23:44 - 2017-03-28 02:23 - 03733504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_47.dll
2017-04-11 23:44 - 2017-03-28 02:23 - 00886272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\aadtb.dll
2017-04-11 23:44 - 2017-03-28 02:23 - 00589312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Devices.Sensors.dll
2017-04-11 23:44 - 2017-03-28 02:23 - 00395264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dmenrollengine.dll
2017-04-11 23:44 - 2017-03-28 02:22 - 00516096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wlidcli.dll
2017-04-11 23:44 - 2017-03-28 02:22 - 00355328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RTMediaFrame.dll
2017-04-11 23:44 - 2017-03-28 02:22 - 00157696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\enrollmentapi.dll
2017-04-11 23:44 - 2017-03-28 02:21 - 01077760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.Editing.dll
2017-04-11 23:44 - 2017-03-28 02:20 - 00795648 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MiracastReceiver.dll
2017-04-11 23:44 - 2017-03-28 02:20 - 00078336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfmjpegdec.dll
2017-04-11 23:44 - 2017-03-28 02:19 - 00746496 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msdtcprx.dll
2017-04-11 23:44 - 2017-03-28 02:19 - 00713216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wpnapps.dll
2017-04-11 23:44 - 2017-03-28 02:19 - 00343040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PlayToDevice.dll
2017-04-11 23:44 - 2017-03-28 02:19 - 00248832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dlnashext.dll
2017-04-11 23:44 - 2017-03-28 02:19 - 00141312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dialclient.dll
2017-04-11 23:44 - 2017-03-28 02:18 - 01255936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AzureSettingSyncProvider.dll
2017-04-11 23:44 - 2017-03-28 02:17 - 00895488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.Streaming.dll
2017-04-11 23:44 - 2017-03-28 02:17 - 00220672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PlayToReceiver.dll
2017-04-11 23:44 - 2017-03-28 02:17 - 00090624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\olepro32.dll
2017-04-11 23:44 - 2017-03-28 02:16 - 03198464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cdp.dll
2017-04-11 23:44 - 2017-03-28 02:16 - 01221120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.Audio.dll
2017-04-11 23:44 - 2017-03-28 02:16 - 00134144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ErrorDetails.dll
2017-04-11 23:44 - 2017-03-28 02:15 - 01247232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Globalization.dll
2017-04-11 23:44 - 2017-03-28 02:14 - 03520512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xpsrchvw.exe
2017-04-11 23:44 - 2017-03-28 02:14 - 01080320 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.Ocr.dll
2017-04-11 23:44 - 2017-03-28 02:14 - 00400384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PlayToManager.dll
2017-04-11 23:44 - 2017-03-28 02:14 - 00357376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Geolocation.dll
2017-04-11 23:44 - 2017-03-28 02:14 - 00103936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.Devices.dll
2017-04-11 23:44 - 2017-03-28 02:13 - 04596224 _____ (Microsoft Corporation) C:\Windows\system32\xpsrchvw.exe
2017-04-11 23:44 - 2017-03-28 02:13 - 02138112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\InputService.dll
2017-04-11 23:44 - 2017-03-28 02:13 - 01656320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Devices.Perception.dll
2017-04-11 23:44 - 2017-03-28 02:13 - 01232384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Xaml.Maps.dll
2017-04-11 23:44 - 2017-03-28 02:13 - 01170944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.Speech.dll
2017-04-11 23:44 - 2017-03-28 02:13 - 00816640 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.dll
2017-04-11 23:44 - 2017-03-28 02:13 - 00079360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\asycfilt.dll
2017-04-11 23:44 - 2017-03-28 02:12 - 02682880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netshell.dll
2017-04-11 23:44 - 2017-03-28 02:12 - 01013248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Web.Http.dll
2017-04-11 23:44 - 2017-03-28 02:12 - 01004544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Input.Inking.dll
2017-04-11 23:44 - 2017-03-28 02:12 - 00862208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SettingSyncCore.dll
2017-04-11 23:44 - 2017-03-28 02:12 - 00827904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\twinui.appcore.dll
2017-04-11 23:44 - 2017-03-28 02:12 - 00691200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TokenBroker.dll
2017-04-11 23:44 - 2017-03-28 02:12 - 00654336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MbaeApiPublic.dll
2017-04-11 23:44 - 2017-03-28 02:12 - 00620544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.dll
2017-04-11 23:44 - 2017-03-28 02:12 - 00598528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Web.dll
2017-04-11 23:44 - 2017-03-28 02:12 - 00566784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ShareHost.dll
2017-04-11 23:44 - 2017-03-28 02:12 - 00542208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Networking.Connectivity.dll
2017-04-11 23:44 - 2017-03-28 02:12 - 00348160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Devices.Midi.dll
2017-04-11 23:44 - 2017-03-28 02:11 - 02646528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\CertEnroll.dll
2017-04-11 23:44 - 2017-03-28 02:11 - 01576448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\actxprxy.dll
2017-04-11 23:44 - 2017-03-28 02:11 - 01170944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Xaml.Phone.dll
2017-04-11 23:44 - 2017-03-28 02:11 - 00751104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Networking.BackgroundTransfer.dll
2017-04-11 23:44 - 2017-03-28 02:10 - 02483200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2017-04-11 23:44 - 2017-03-28 02:10 - 02424320 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.Perception.dll
2017-04-11 23:44 - 2017-03-28 02:10 - 01424896 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Xaml.Maps.dll
2017-04-11 23:44 - 2017-03-28 02:10 - 01266176 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Input.Inking.dll
2017-04-11 23:44 - 2017-03-28 02:10 - 00391168 _____ (Microsoft Corporation) C:\Windows\system32\wuuhext.dll
2017-04-11 23:44 - 2017-03-28 02:09 - 03106304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstsc.exe
2017-04-11 23:44 - 2017-03-28 02:09 - 01369088 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Xaml.Phone.dll
2017-04-11 23:44 - 2017-03-28 02:08 - 01564160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\quartz.dll
2017-04-11 23:44 - 2017-03-28 02:08 - 00299008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RADCUI.dll
2017-04-11 23:44 - 2017-03-28 01:48 - 00483840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\CoreMessaging.dll
2017-04-11 23:44 - 2017-03-16 01:38 - 00034088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\CompPkgSup.dll
2017-04-11 23:43 - 2017-03-28 03:32 - 00198856 _____ (Microsoft Corporation) C:\Windows\system32\wscapi.dll
2017-04-11 23:43 - 2017-03-28 03:29 - 02213248 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2017-04-11 23:43 - 2017-03-28 03:28 - 00773720 _____ (Microsoft Corporation) C:\Windows\system32\oleaut32.dll
2017-04-11 23:43 - 2017-03-28 03:26 - 00218520 _____ (Microsoft Corporation) C:\Windows\system32\LsaIso.exe
2017-04-11 23:43 - 2017-03-28 03:20 - 01181024 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ndis.sys
2017-04-11 23:43 - 2017-03-28 03:18 - 01705976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2017-04-11 23:43 - 2017-03-28 03:11 - 01860288 _____ (Microsoft Corporation) C:\Windows\system32\Windows.ApplicationModel.Store.dll
2017-04-11 23:43 - 2017-03-28 03:11 - 00360040 _____ (Microsoft Corporation) C:\Windows\system32\SystemSettingsAdminFlows.exe
2017-04-11 23:43 - 2017-03-28 03:10 - 07220184 _____ (Microsoft Corporation) C:\Windows\system32\windows.storage.dll
2017-04-11 23:43 - 2017-03-28 03:10 - 01293152 _____ (Microsoft Corporation) C:\Windows\system32\LicenseManager.dll
2017-04-11 23:43 - 2017-03-28 03:09 - 00097128 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Security.Credentials.UI.CredentialPicker.dll
2017-04-11 23:43 - 2017-03-28 03:06 - 00092512 _____ (Microsoft Corporation) C:\Windows\system32\rdpudd.dll
2017-04-11 23:43 - 2017-03-28 03:05 - 22221368 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2017-04-11 23:43 - 2017-03-28 03:05 - 08168512 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.Protection.PlayReady.dll
2017-04-11 23:43 - 2017-03-28 03:05 - 04260576 _____ (Microsoft Corporation) C:\Windows\system32\mfcore.dll
2017-04-11 23:43 - 2017-03-28 03:05 - 01988048 _____ (Microsoft Corporation) C:\Windows\system32\mfmp4srcsnk.dll
2017-04-11 23:43 - 2017-03-28 03:05 - 01848584 _____ (Microsoft Corporation) C:\Windows\system32\mfsrcsnk.dll
2017-04-11 23:43 - 2017-03-28 03:05 - 01702392 _____ (Microsoft Corporation) C:\Windows\system32\mfasfsrcsnk.dll
2017-04-11 23:43 - 2017-03-28 03:05 - 01302136 _____ (Microsoft Corporation) C:\Windows\system32\mfmpeg2srcsnk.dll
2017-04-11 23:43 - 2017-03-28 03:05 - 01072248 _____ (Microsoft Corporation) C:\Windows\system32\mfnetcore.dll
2017-04-11 23:43 - 2017-03-28 02:59 - 02533728 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2017-04-11 23:43 - 2017-03-28 02:58 - 00387872 _____ (Microsoft Corporation) C:\Windows\system32\wmpps.dll
2017-04-11 23:43 - 2017-03-28 02:38 - 00119808 _____ (Microsoft Corporation) C:\Windows\system32\UserDataTimeUtil.dll
2017-04-11 23:43 - 2017-03-28 02:37 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\musdialoghandlers.dll
2017-04-11 23:43 - 2017-03-28 02:35 - 00233472 _____ (Microsoft Corporation) C:\Windows\system32\MusNotification.exe
2017-04-11 23:43 - 2017-03-28 02:35 - 00093696 _____ (Microsoft Corporation) C:\Windows\system32\MusNotificationUx.exe
2017-04-11 23:43 - 2017-03-28 02:31 - 00337408 _____ (Microsoft Corporation) C:\Windows\system32\NetworkBindingEngineMigPlugin.dll
2017-04-11 23:43 - 2017-03-28 02:30 - 00748544 _____ (Microsoft Corporation) C:\Windows\system32\StoreAgent.dll
2017-04-11 23:43 - 2017-03-28 02:29 - 00590336 _____ (Microsoft Corporation) C:\Windows\system32\efswrt.dll
2017-04-11 23:43 - 2017-03-28 02:29 - 00293888 _____ (Microsoft Corporation) C:\Windows\system32\updatehandlers.dll
2017-04-11 23:43 - 2017-03-28 02:29 - 00216576 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.Scanners.dll
2017-04-11 23:43 - 2017-03-28 02:28 - 00456192 _____ (Microsoft Corporation) C:\Windows\system32\puiobj.dll
2017-04-11 23:43 - 2017-03-28 02:27 - 00671744 _____ (Microsoft Corporation) C:\Windows\system32\mbsmsapi.dll
2017-04-11 23:43 - 2017-03-28 02:27 - 00441856 _____ (Microsoft Corporation) C:\Windows\system32\AccountsRt.dll
2017-04-11 23:43 - 2017-03-28 02:26 - 01145344 _____ (Microsoft Corporation) C:\Windows\system32\EmailApis.dll
2017-04-11 23:43 - 2017-03-28 02:26 - 00549376 _____ (Microsoft Corporation) C:\Windows\system32\usocore.dll
2017-04-11 23:43 - 2017-03-28 02:24 - 06288384 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.dll
2017-04-11 23:43 - 2017-03-28 02:22 - 00175616 _____ (Microsoft Corporation) C:\Windows\system32\SystemSettings.DeviceEncryptionHandlers.dll
2017-04-11 23:43 - 2017-03-28 02:21 - 03778048 _____ (Microsoft Corporation) C:\Windows\system32\MFMediaEngine.dll
2017-04-11 23:43 - 2017-03-28 02:21 - 01403392 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.Editing.dll
2017-04-11 23:43 - 2017-03-28 02:21 - 00458752 _____ (Microsoft Corporation) C:\Windows\system32\RTMediaFrame.dll
2017-04-11 23:43 - 2017-03-28 02:19 - 07655424 _____ (Microsoft Corporation) C:\Windows\system32\mos.dll
2017-04-11 23:43 - 2017-03-28 02:19 - 00864256 _____ (Microsoft Corporation) C:\Windows\system32\wpnapps.dll
2017-04-11 23:43 - 2017-03-28 02:18 - 01078784 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.Streaming.dll
2017-04-11 23:43 - 2017-03-28 02:16 - 01217024 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.Audio.dll
2017-04-11 23:43 - 2017-03-28 02:15 - 02390016 _____ (Microsoft Corporation) C:\Windows\system32\smartscreen.exe
2017-04-11 23:43 - 2017-03-28 02:14 - 00947712 _____ (Microsoft Corporation) C:\Windows\system32\MSVP9DEC.dll
2017-04-11 23:43 - 2017-03-28 02:13 - 00611328 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Graphics.Printing.dll
2017-04-11 23:43 - 2017-03-28 02:12 - 00846336 _____ (Microsoft Corporation) C:\Windows\system32\MbaeApiPublic.dll
2017-04-11 23:43 - 2017-03-28 02:11 - 01981440 _____ (Microsoft Corporation) C:\Windows\system32\diagtrack.dll
2017-04-11 23:43 - 2017-03-28 02:11 - 00765440 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.Sensors.dll
2017-04-11 23:43 - 2017-03-28 02:10 - 08076288 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll
2017-04-11 23:43 - 2017-03-28 02:09 - 04149248 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorets.dll
2017-04-11 23:43 - 2017-03-28 02:06 - 00999424 _____ (Microsoft Corporation) C:\Windows\system32\TSWorkspace.dll
2017-04-11 23:42 - 2017-03-28 03:11 - 02187616 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys
2017-04-11 23:42 - 2017-03-28 03:11 - 01738560 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll
2017-04-11 23:42 - 2017-03-28 03:10 - 02758648 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2017-04-11 23:42 - 2017-03-28 03:04 - 01276760 _____ (Microsoft Corporation) C:\Windows\system32\ole32.dll
2017-04-11 23:42 - 2017-03-28 02:41 - 00372736 _____ (Microsoft Corporation) C:\Windows\system32\RDXTaskFactory.dll
2017-04-11 23:42 - 2017-03-28 02:37 - 22568960 _____ (Microsoft Corporation) C:\Windows\system32\edgehtml.dll
2017-04-11 23:42 - 2017-03-28 02:36 - 00216576 _____ (Microsoft Corporation) C:\Windows\system32\RdpRelayTransport.dll
2017-04-11 23:42 - 2017-03-28 02:34 - 00295424 _____ (Microsoft Corporation) C:\Windows\system32\unimdm.tsp
2017-04-11 23:42 - 2017-03-28 02:34 - 00113664 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Networking.ServiceDiscovery.Dnssd.dll
2017-04-11 23:42 - 2017-03-28 02:31 - 00418304 _____ C:\Windows\system32\Windows.Perception.Stub.dll
2017-04-11 23:42 - 2017-03-28 02:31 - 00360448 _____ (Microsoft Corporation) C:\Windows\system32\rdpencom.dll
2017-04-11 23:42 - 2017-03-28 02:31 - 00211968 _____ (Microsoft Corporation) C:\Windows\system32\InstallAgent.exe
2017-04-11 23:42 - 2017-03-28 02:29 - 00260608 _____ (Microsoft Corporation) C:\Windows\system32\InstallAgentUserBroker.exe
2017-04-11 23:42 - 2017-03-28 02:28 - 00252416 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Security.Authentication.Identity.Provider.dll
2017-04-11 23:42 - 2017-03-28 02:26 - 00284160 _____ (Microsoft Corporation) C:\Windows\system32\AboveLockAppHost.dll
2017-04-11 23:42 - 2017-03-28 02:25 - 18364928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\edgehtml.dll
2017-04-11 23:42 - 2017-03-28 02:24 - 19416576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2017-04-11 23:42 - 2017-03-28 02:24 - 01220096 _____ (Microsoft Corporation) C:\Windows\system32\wscui.cpl
2017-04-11 23:42 - 2017-03-28 02:23 - 00932864 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2017-04-11 23:42 - 2017-03-28 02:21 - 23681536 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2017-04-11 23:42 - 2017-03-28 02:18 - 12181504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2017-04-11 23:42 - 2017-03-28 02:18 - 01908224 _____ (Microsoft Corporation) C:\Windows\system32\AzureSettingSyncProvider.dll
2017-04-11 23:42 - 2017-03-28 02:18 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\wpninprc.dll
2017-04-11 23:42 - 2017-03-28 02:17 - 13087232 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2017-04-11 23:42 - 2017-03-28 02:15 - 00937984 _____ (Microsoft Corporation) C:\Windows\system32\MCRecvSrc.dll
2017-04-11 23:42 - 2017-03-28 02:15 - 00411648 _____ (Microsoft Corporation) C:\Windows\system32\SensorsApi.dll
2017-04-11 23:42 - 2017-03-28 02:14 - 08126976 _____ (Microsoft Corporation) C:\Windows\system32\Chakra.dll
2017-04-11 23:42 - 2017-03-28 02:13 - 06045184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Chakra.dll
2017-04-11 23:42 - 2017-03-28 02:10 - 01783296 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2017-04-11 23:42 - 2017-03-28 02:09 - 01513472 _____ (Microsoft Corporation) C:\Windows\system32\win32kbase.sys
2017-04-11 23:42 - 2017-03-28 02:09 - 01131008 _____ (Microsoft Corporation) C:\Windows\system32\localspl.dll
2017-04-11 23:42 - 2017-03-28 02:05 - 01633792 _____ (Microsoft Corporation) C:\Windows\system32\quartz.dll
2017-04-11 23:41 - 2017-03-28 03:28 - 07786336 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2017-04-11 23:41 - 2017-03-28 03:26 - 00603488 _____ (Microsoft Corporation) C:\Windows\system32\ContentDeliveryManager.Utilities.dll
2017-04-11 23:41 - 2017-03-28 03:22 - 02681200 _____ C:\Windows\system32\CoreUIComponents.dll
2017-04-11 23:41 - 2017-03-28 03:12 - 00328008 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Storage.ApplicationData.dll
2017-04-11 23:41 - 2017-03-28 03:11 - 00402784 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgmms1.sys
2017-04-11 23:41 - 2017-03-28 03:10 - 01157008 _____ (Microsoft Corporation) C:\Windows\system32\twinapi.appcore.dll
2017-04-11 23:41 - 2017-03-28 03:04 - 00241504 _____ (Microsoft Corporation) C:\Windows\system32\CloudExperienceHost.dll
2017-04-11 23:41 - 2017-03-28 03:04 - 00160088 _____ (Microsoft Corporation) C:\Windows\system32\CloudExperienceHostBroker.dll
2017-04-11 23:41 - 2017-03-28 02:38 - 00081408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2017-04-11 23:41 - 2017-03-28 02:37 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\DdcWnsListener.dll
2017-04-11 23:41 - 2017-03-28 02:36 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\odbcconf.dll
2017-04-11 23:41 - 2017-03-28 02:35 - 00185344 _____ (Microsoft Corporation) C:\Windows\system32\DisplayManager.dll
2017-04-11 23:41 - 2017-03-28 02:35 - 00090624 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.Printers.dll
2017-04-11 23:41 - 2017-03-28 02:33 - 00270336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2017-04-11 23:41 - 2017-03-28 02:33 - 00182272 _____ (Microsoft Corporation) C:\Windows\system32\DeviceDirectoryClient.dll
2017-04-11 23:41 - 2017-03-28 02:32 - 00635904 _____ (Microsoft Corporation) C:\Windows\system32\FlightSettings.dll
2017-04-11 23:41 - 2017-03-28 02:32 - 00306176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieproxy.dll
2017-04-11 23:41 - 2017-03-28 02:31 - 00418304 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.BlockedShutdown.dll
2017-04-11 23:41 - 2017-03-28 02:31 - 00343552 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.SmartCards.Phone.dll
2017-04-11 23:41 - 2017-03-28 02:31 - 00276992 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2017-04-11 23:41 - 2017-03-28 02:31 - 00236544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2017-04-11 23:41 - 2017-03-28 02:31 - 00223744 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2017-04-11 23:41 - 2017-03-28 02:31 - 00171520 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.SerialCommunication.dll
2017-04-11 23:41 - 2017-03-28 02:31 - 00144896 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.Lights.dll
2017-04-11 23:41 - 2017-03-28 02:30 - 00692224 _____ (Microsoft Corporation) C:\Windows\system32\CellularAPI.dll
2017-04-11 23:41 - 2017-03-28 02:30 - 00568320 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.LowLevel.dll
2017-04-11 23:41 - 2017-03-28 02:30 - 00505856 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.WiFiDirect.dll
2017-04-11 23:41 - 2017-03-28 02:30 - 00340480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2017-04-11 23:41 - 2017-03-28 02:30 - 00239104 _____ (Microsoft Corporation) C:\Windows\system32\dafpos.dll
2017-04-11 23:41 - 2017-03-28 02:29 - 00912384 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.SmartCards.dll
2017-04-11 23:41 - 2017-03-28 02:29 - 00387584 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2017-04-11 23:41 - 2017-03-28 02:29 - 00311296 _____ (Microsoft Corporation) C:\Windows\system32\SyncSettings.dll
2017-04-11 23:41 - 2017-03-28 02:29 - 00279552 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.HumanInterfaceDevice.dll
2017-04-11 23:41 - 2017-03-28 02:29 - 00088576 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2017-04-11 23:41 - 2017-03-28 02:28 - 00661504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WpcWebFilter.dll
2017-04-11 23:41 - 2017-03-28 02:28 - 00431616 _____ (Microsoft Corporation) C:\Windows\system32\WpAXHolder.dll
2017-04-11 23:41 - 2017-03-28 02:28 - 00337408 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.Picker.dll
2017-04-11 23:41 - 2017-03-28 02:28 - 00261632 _____ (Microsoft Corporation) C:\Windows\system32\indexeddbserver.dll
2017-04-11 23:41 - 2017-03-28 02:27 - 00949248 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.PointOfService.dll
2017-04-11 23:41 - 2017-03-28 02:27 - 00472064 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Internal.Bluetooth.dll
2017-04-11 23:41 - 2017-03-28 02:27 - 00425984 _____ (Microsoft Corporation) C:\Windows\system32\aadcloudap.dll
2017-04-11 23:41 - 2017-03-28 02:26 - 00437248 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.Usb.dll
2017-04-11 23:41 - 2017-03-28 02:25 - 01010176 _____ (Microsoft Corporation) C:\Windows\system32\enterprisecsps.dll
2017-04-11 23:41 - 2017-03-28 02:25 - 00262144 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2017-04-11 23:41 - 2017-03-28 02:23 - 00691712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2017-04-11 23:41 - 2017-03-28 02:21 - 01589760 _____ (Microsoft Corporation) C:\Windows\system32\msdtctm.dll
2017-04-11 23:41 - 2017-03-28 02:21 - 00104960 _____ (Microsoft Corporation) C:\Windows\system32\CastLaunch.dll
2017-04-11 23:41 - 2017-03-28 02:20 - 01105408 _____ (Microsoft Corporation) C:\Windows\system32\MiracastReceiver.dll
2017-04-11 23:41 - 2017-03-28 02:20 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\mfmjpegdec.dll
2017-04-11 23:41 - 2017-03-28 02:19 - 00442368 _____ (Microsoft Corporation) C:\Windows\system32\PlayToDevice.dll
2017-04-11 23:41 - 2017-03-28 02:19 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\flvprophandler.dll
2017-04-11 23:41 - 2017-03-28 02:17 - 00279552 _____ (Microsoft Corporation) C:\Windows\system32\PlayToReceiver.dll
2017-04-11 23:41 - 2017-03-28 02:15 - 00981504 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Security.Authentication.OnlineId.dll
2017-04-11 23:41 - 2017-03-28 02:15 - 00945664 _____ (Microsoft Corporation) C:\Windows\system32\WpcWebFilter.dll
2017-04-11 23:41 - 2017-03-28 02:15 - 00539136 _____ (Microsoft Corporation) C:\Windows\system32\PlayToManager.dll
2017-04-11 23:41 - 2017-03-28 02:15 - 00467968 _____ (Microsoft Corporation) C:\Windows\system32\Geolocation.dll
2017-04-11 23:41 - 2017-03-28 02:14 - 00975872 _____ (Microsoft Corporation) C:\Windows\HelpPane.exe
2017-04-11 23:41 - 2017-03-28 02:14 - 00913920 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Networking.dll
2017-04-11 23:41 - 2017-03-28 02:14 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Security.Authentication.Web.Core.dll
2017-04-11 23:41 - 2017-03-28 02:14 - 00089088 _____ (Microsoft Corporation) C:\Windows\system32\asycfilt.dll
2017-04-11 23:41 - 2017-03-28 02:13 - 04474368 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_47.dll
2017-04-11 23:41 - 2017-03-28 02:13 - 02095616 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2017-04-11 23:41 - 2017-03-28 02:13 - 01359872 _____ (Microsoft Corporation) C:\Windows\system32\SharedStartModel.dll
2017-04-11 23:41 - 2017-03-28 02:13 - 01040896 _____ (Microsoft Corporation) C:\Windows\system32\NaturalLanguage6.dll
2017-04-11 23:41 - 2017-03-28 02:13 - 00759296 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2017-04-11 23:41 - 2017-03-28 02:13 - 00650752 _____ (Microsoft Corporation) C:\Windows\system32\RDXService.dll
2017-04-11 23:41 - 2017-03-28 02:12 - 05611008 _____ (Microsoft Corporation) C:\Windows\system32\d2d1.dll
2017-04-11 23:41 - 2017-03-28 02:12 - 02208768 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Graphics.Printing.3D.dll
2017-04-11 23:41 - 2017-03-28 02:12 - 02026496 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2017-04-11 23:41 - 2017-03-28 02:12 - 01509376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2017-04-11 23:41 - 2017-03-28 02:11 - 01275392 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.Bluetooth.dll
2017-04-11 23:41 - 2017-03-28 02:10 - 02316288 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2017-04-11 23:41 - 2017-03-28 02:10 - 01637888 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2017-04-11 23:41 - 2017-03-28 02:10 - 01231872 _____ (Microsoft Corporation) C:\Windows\system32\dosvc.dll
2017-04-11 23:41 - 2017-03-28 02:10 - 00875520 _____ (Microsoft Corporation) C:\Windows\system32\TokenBroker.dll
2017-04-11 23:41 - 2017-03-28 02:10 - 00774656 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Web.dll
2017-04-11 23:41 - 2017-03-28 02:09 - 01328640 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Web.Http.dll
2017-04-11 23:41 - 2017-03-28 02:08 - 03612672 _____ (Microsoft Corporation) C:\Windows\system32\win32kfull.sys
2017-04-11 23:41 - 2017-03-28 02:08 - 02895872 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2017-04-11 23:41 - 2017-03-28 02:07 - 00908800 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Search.dll
2017-04-11 23:41 - 2017-03-28 02:07 - 00701952 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Networking.Connectivity.dll
2017-04-11 23:41 - 2017-03-28 02:07 - 00122368 _____ (Microsoft Corporation) C:\Windows\system32\FontProvider.dll
2017-04-11 23:41 - 2017-03-28 02:06 - 01121280 _____ (Microsoft Corporation) C:\Windows\system32\aadtb.dll
2017-04-11 23:41 - 2017-03-28 02:06 - 00924672 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Networking.BackgroundTransfer.dll
2017-04-11 23:41 - 2017-03-18 13:35 - 02278400 _____ (Microsoft Corporation) C:\Windows\system32\AppXDeploymentServer.dll
2017-04-11 23:40 - 2017-03-28 03:36 - 01617760 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll
2017-04-11 23:40 - 2017-03-28 03:36 - 01294688 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2017-04-11 23:40 - 2017-03-28 03:36 - 00565088 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll
2017-04-11 23:40 - 2017-03-28 03:36 - 00343904 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll
2017-04-11 23:40 - 2017-03-28 03:36 - 00142176 _____ (Microsoft Corporation) C:\Windows\system32\acmigration.dll
2017-04-11 23:40 - 2017-03-28 03:35 - 00379232 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll
2017-04-11 23:40 - 2017-03-28 03:20 - 00764392 _____ (Microsoft Corporation) C:\Windows\system32\CoreMessaging.dll
2017-04-11 23:40 - 2017-03-28 03:10 - 00178528 _____ (Microsoft Corporation) C:\Windows\system32\CloudExperienceHostUser.dll
2017-04-11 23:40 - 2017-03-28 03:10 - 00146776 _____ (Microsoft Corporation) C:\Windows\system32\CloudExperienceHostCommon.dll
2017-04-11 23:40 - 2017-03-28 03:09 - 02446704 _____ (Microsoft Corporation) C:\Windows\system32\msxml6.dll
2017-04-11 23:40 - 2017-03-28 03:09 - 00682816 _____ (Microsoft Corporation) C:\Windows\system32\wer.dll
2017-04-11 23:40 - 2017-03-28 03:09 - 00624048 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys
2017-04-11 23:40 - 2017-03-28 03:08 - 01267504 _____ (Microsoft Corporation) C:\Windows\system32\WinTypes.dll
2017-04-11 23:40 - 2017-03-28 03:08 - 01100128 _____ (Microsoft Corporation) C:\Windows\system32\hvix64.exe
2017-04-11 23:40 - 2017-03-28 03:08 - 00989024 _____ (Microsoft Corporation) C:\Windows\system32\hvax64.exe
2017-04-11 23:40 - 2017-03-28 03:04 - 01600632 _____ (Microsoft Corporation) C:\Windows\system32\sppobjs.dll
2017-04-11 23:40 - 2017-03-28 03:00 - 01569184 _____ (Microsoft Corporation) C:\Windows\system32\gdi32full.dll
2017-04-11 23:40 - 2017-03-28 03:00 - 00628552 _____ (Microsoft Corporation) C:\Windows\system32\fontdrvhost.exe
2017-04-11 23:40 - 2017-03-28 02:58 - 00372440 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.MediaControl.dll
2017-04-11 23:40 - 2017-03-28 02:44 - 07216640 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Data.Pdf.dll
2017-04-11 23:40 - 2017-03-28 02:38 - 00584192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UIRibbonRes.dll
2017-04-11 23:40 - 2017-03-28 02:37 - 00078848 _____ (Microsoft Corporation) C:\Windows\system32\XblAuthManagerProxy.dll
2017-04-11 23:40 - 2017-03-28 02:36 - 00584192 _____ (Microsoft Corporation) C:\Windows\system32\UIRibbonRes.dll
2017-04-11 23:40 - 2017-03-28 02:36 - 00045056 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll
2017-04-11 23:40 - 2017-03-28 02:35 - 00156160 _____ (Microsoft Corporation) C:\Windows\system32\Family.Client.dll
2017-04-11 23:40 - 2017-03-28 02:35 - 00124416 _____ (Microsoft Corporation) C:\Windows\system32\Windows.System.SystemManagement.dll
2017-04-11 23:40 - 2017-03-28 02:34 - 00259072 _____ (Microsoft Corporation) C:\Windows\system32\Family.SyncEngine.dll
2017-04-11 23:40 - 2017-03-28 02:34 - 00162304 _____ (Microsoft Corporation) C:\Windows\system32\dmcertinst.exe
2017-04-11 23:40 - 2017-03-28 02:34 - 00129536 _____ (Microsoft Corporation) C:\Windows\system32\SettingsHandlers_ClosedCaptioning.dll
2017-04-11 23:40 - 2017-03-28 02:34 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\XblAuthTokenBrokerExt.dll
2017-04-11 23:40 - 2017-03-28 02:33 - 00196096 _____ (Microsoft Corporation) C:\Windows\system32\UserDeviceRegistration.dll
2017-04-11 23:40 - 2017-03-28 02:33 - 00193536 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.WiFi.dll
2017-04-11 23:40 - 2017-03-28 02:33 - 00122880 _____ (Microsoft Corporation) C:\Windows\system32\Windows.StateRepositoryClient.dll
2017-04-11 23:40 - 2017-03-28 02:33 - 00101888 _____ (Microsoft Corporation) C:\Windows\system32\UserDeviceRegistration.Ngc.dll
2017-04-11 23:40 - 2017-03-28 02:33 - 00082432 _____ (Microsoft Corporation) C:\Windows\system32\Windows.System.UserDeviceAssociation.dll
2017-04-11 23:40 - 2017-03-28 02:32 - 00368640 _____ (Microsoft Corporation) C:\Windows\system32\OneBackupHandler.dll
2017-04-11 23:40 - 2017-03-28 02:32 - 00186368 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.Radios.dll
2017-04-11 23:40 - 2017-03-28 02:31 - 00547840 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Gaming.Input.dll
2017-04-11 23:40 - 2017-03-28 02:31 - 00289792 _____ (Microsoft Corporation) C:\Windows\system32\DeveloperOptionsSettingsHandlers.dll
2017-04-11 23:40 - 2017-03-28 02:31 - 00257024 _____ (Microsoft Corporation) C:\Windows\system32\CloudDomainJoinDataModelServer.dll
2017-04-11 23:40 - 2017-03-28 02:30 - 00651264 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.AllJoyn.dll
2017-04-11 23:40 - 2017-03-28 02:30 - 00268800 _____ (Microsoft Corporation) C:\Windows\system32\UserMgrProxy.dll
2017-04-11 23:40 - 2017-03-28 02:30 - 00049664 _____ (Microsoft Corporation) C:\Windows\system32\TokenBrokerUI.dll
2017-04-11 23:40 - 2017-03-28 02:29 - 00852480 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.Import.dll
2017-04-11 23:40 - 2017-03-28 02:29 - 00391168 _____ (Microsoft Corporation) C:\Windows\system32\oleacc.dll
2017-04-11 23:40 - 2017-03-28 02:29 - 00379904 _____ (Microsoft Corporation) C:\Windows\system32\apprepsync.dll
2017-04-11 23:40 - 2017-03-28 02:29 - 00324608 _____ (Microsoft Corporation) C:\Windows\system32\Windows.ApplicationModel.LockScreen.dll
2017-04-11 23:40 - 2017-03-28 02:29 - 00267264 _____ (Microsoft Corporation) C:\Windows\system32\vaultcli.dll
2017-04-11 23:40 - 2017-03-28 02:29 - 00206336 _____ (Microsoft Corporation) C:\Windows\system32\psmsrv.dll
2017-04-11 23:40 - 2017-03-28 02:29 - 00147456 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll
2017-04-11 23:40 - 2017-03-28 02:29 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\AuthBroker.dll
2017-04-11 23:40 - 2017-03-28 02:28 - 00407552 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Internal.Management.dll
2017-04-11 23:40 - 2017-03-28 02:28 - 00176128 _____ (Microsoft Corporation) C:\Windows\system32\apprepapi.dll
2017-04-11 23:40 - 2017-03-28 02:27 - 01060352 _____ (Microsoft Corporation) C:\Windows\system32\AppContracts.dll
2017-04-11 23:40 - 2017-03-28 02:27 - 00645120 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll
2017-04-11 23:40 - 2017-03-28 02:27 - 00091136 _____ (Microsoft Corporation) C:\Windows\system32\updatepolicy.dll
2017-04-11 23:40 - 2017-03-28 02:26 - 00329728 _____ (Microsoft Corporation) C:\Windows\system32\deviceaccess.dll
2017-04-11 23:40 - 2017-03-28 02:25 - 00966144 _____ (Microsoft Corporation) C:\Windows\system32\sbe.dll
2017-04-11 23:40 - 2017-03-28 02:25 - 00896512 _____ (Microsoft Corporation) C:\Windows\system32\Windows.AccountsControl.dll
2017-04-11 23:40 - 2017-03-28 02:25 - 00775168 _____ (Microsoft Corporation) C:\Windows\system32\GamePanel.exe
2017-04-11 23:40 - 2017-03-28 02:24 - 00410112 _____ (Microsoft Corporation) C:\Windows\system32\AppXDeploymentClient.dll
2017-04-11 23:40 - 2017-03-28 02:23 - 09130496 _____ (Microsoft Corporation) C:\Windows\system32\twinui.dll
2017-04-11 23:40 - 2017-03-28 02:23 - 00073728 _____ (Microsoft Corporation) C:\Windows\system32\WSManMigrationPlugin.dll
2017-04-11 23:40 - 2017-03-28 02:19 - 00295424 _____ (Microsoft Corporation) C:\Windows\system32\dlnashext.dll
2017-04-11 23:40 - 2017-03-28 02:17 - 05114368 _____ (Microsoft Corporation) C:\Windows\system32\cdp.dll
2017-04-11 23:40 - 2017-03-28 02:17 - 04749312 _____ (Microsoft Corporation) C:\Windows\system32\SettingsHandlers_nt.dll
2017-04-11 23:40 - 2017-03-28 02:16 - 00167936 _____ (Microsoft Corporation) C:\Windows\system32\ErrorDetails.dll
2017-04-11 23:40 - 2017-03-28 02:16 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\vss_ps.dll
2017-04-11 23:40 - 2017-03-28 02:15 - 00139776 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.Devices.dll
2017-04-11 23:40 - 2017-03-28 02:14 - 01692160 _____ (Microsoft Corporation) C:\Windows\system32\AppXDeploymentExtensions.onecore.dll
2017-04-11 23:40 - 2017-03-28 02:14 - 01643008 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.Speech.dll
2017-04-11 23:40 - 2017-03-28 02:14 - 00869888 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2017-04-11 23:40 - 2017-03-28 02:13 - 00460800 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.Midi.dll
2017-04-11 23:40 - 2017-03-28 02:12 - 00376832 _____ (Microsoft Corporation) C:\Windows\system32\CryptoWinRT.dll
2017-04-11 23:40 - 2017-03-28 02:11 - 02914816 _____ (Microsoft Corporation) C:\Windows\system32\CertEnroll.dll
2017-04-11 23:40 - 2017-03-28 02:10 - 01586176 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Globalization.dll
2017-04-11 23:40 - 2017-03-28 02:09 - 01064448 _____ (Microsoft Corporation) C:\Windows\system32\SettingSyncCore.dll
2017-04-11 23:40 - 2017-03-28 02:09 - 00716800 _____ (Microsoft Corporation) C:\Windows\system32\ShareHost.dll
2017-04-11 23:40 - 2017-03-28 02:08 - 03542016 _____ (Microsoft Corporation) C:\Windows\system32\actxprxy.dll
2017-04-11 23:40 - 2017-03-28 02:08 - 00180224 _____ (Microsoft Corporation) C:\Windows\system32\enrollmentapi.dll
2017-04-11 23:40 - 2017-03-18 13:50 - 00956416 _____ (Microsoft Corporation) C:\Windows\system32\AppXDeploymentExtensions.desktop.dll
2017-04-11 23:40 - 2017-03-16 01:47 - 00038768 _____ (Microsoft Corporation) C:\Windows\system32\CompPkgSup.dll
2017-04-11 11:25 - 2017-04-11 11:25 - 00000000 ____D C:\Users\lenit\AppData\Roaming\IObit
2017-04-10 14:53 - 2017-04-16 16:53 - 00000000 ____D C:\Users\jskna\AppData\LocalLow\IObit
2017-04-10 14:53 - 2017-04-10 14:53 - 00000000 ____D C:\Users\jskna\AppData\Roaming\IObit
2017-04-10 14:52 - 2017-04-10 14:52 - 00000000 ____D C:\Program Files (x86)\IObit
2017-04-10 14:50 - 2017-04-10 14:53 - 00000000 ____D C:\Users\Todos os Usuários\IObit
2017-04-10 14:50 - 2017-04-10 14:53 - 00000000 ____D C:\ProgramData\IObit
2017-04-10 14:50 - 2017-04-10 14:50 - 00000000 ____D C:\Users\Todos os Usuários\{BE2ACE5C-32B7-4777-9BDF-ECF87CDAB705}
2017-04-10 14:50 - 2017-04-10 14:50 - 00000000 ____D C:\ProgramData\{BE2ACE5C-32B7-4777-9BDF-ECF87CDAB705}
2017-04-10 14:48 - 2017-04-10 14:49 - 41832840 _____ (IObit ) C:\Users\jskna\Downloads\iobit-malware-fighter-5-0-2-3788.exe
2017-04-09 09:45 - 2017-04-09 09:45 - 01679872 _____ C:\Users\jskna\Downloads\43934.PPT
2017-04-09 00:34 - 2017-04-09 00:36 - 00000000 ____D C:\Users\jskna\AppData\Local\Adobe
2017-04-09 00:08 - 2017-04-09 00:09 - 03670677 _____ C:\Users\jskna\Downloads\Re%3a_Turma_1ª_semetre_de_Nutrição.zip
2017-04-08 23:24 - 2017-04-08 23:24 - 00006054 _____ C:\Users\jskna\Downloads\download.htm
2017-04-08 22:33 - 2017-04-16 18:21 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\KMSpico
2017-04-08 22:33 - 2017-04-10 07:42 - 00000000 ____D C:\Program Files\KMSpico
2017-04-08 22:33 - 2017-04-08 22:33 - 00004608 _____ C:\Windows\SECOH-QAD.exe
2017-04-08 22:33 - 2017-04-08 22:33 - 00003584 _____ C:\Windows\SECOH-QAD.dll
2017-04-08 22:33 - 2010-12-05 23:16 - 00090112 _____ (Vestris Inc.) C:\Windows\system32\Vestris.ResourceLib.dll
2017-04-08 22:23 - 2017-04-17 22:48 - 00004184 _____ C:\Windows\System32\Tasks\User_Feed_Synchronization-{2C21ED99-1E18-48E8-A91F-7846746A6256}
2017-04-06 14:50 - 2017-04-06 14:51 - 11110479 _____ C:\Users\jskna\Downloads\Controle de Roedores e Artrópodes.pdf
2017-04-06 13:14 - 2017-04-06 13:14 - 00341822 _____ C:\Users\jskna\Downloads\aula02.pdf
2017-04-06 13:14 - 2017-04-06 13:14 - 00341822 _____ C:\Users\jskna\Downloads\aula02 (3).pdf
2017-04-06 13:14 - 2017-04-06 13:14 - 00341822 _____ C:\Users\jskna\Downloads\aula02 (2).pdf
2017-04-06 13:14 - 2017-04-06 13:14 - 00341822 _____ C:\Users\jskna\Downloads\aula02 (1).pdf
2017-04-06 12:46 - 2017-04-06 12:46 - 00130679 _____ C:\Users\jskna\Downloads\WhatsApp Image 2017-04-06 at 12.31.16.jpeg
2017-04-06 12:46 - 2017-04-06 12:46 - 00121786 _____ C:\Users\jskna\Downloads\WhatsApp Image 2017-04-06 at 12.31.34.jpeg
2017-04-06 09:49 - 2017-04-06 09:49 - 00078336 _____ C:\Users\jskna\Downloads\SISTEMAS-DE-SERVIÇOS-DE-SAÚDE.ppt
2017-04-06 01:29 - 2017-04-06 01:33 - 00103798 _____ C:\Users\jskna\Downloads\WhatsApp Image 2017-04-05 at 21.54.29.jpeg
2017-04-06 01:29 - 2017-04-06 01:33 - 00097868 _____ C:\Users\jskna\Downloads\WhatsApp Image 2017-04-05 at 21.54.28.jpeg
2017-04-06 01:29 - 2017-04-06 01:33 - 00094535 _____ C:\Users\jskna\Downloads\WhatsApp Image 2017-04-05 at 21.54.30.jpeg
2017-04-06 01:29 - 2017-04-06 01:33 - 00092741 _____ C:\Users\jskna\Downloads\WhatsApp Image 2017-04-05 at 21.54.29 (1).jpeg
2017-04-06 01:29 - 2017-04-06 01:32 - 00100767 _____ C:\Users\jskna\Downloads\WhatsApp Image 2017-04-05 at 21.54.14.jpeg
2017-04-06 01:29 - 2017-04-06 01:32 - 00093579 _____ C:\Users\jskna\Downloads\WhatsApp Image 2017-04-05 at 21.54.13.jpeg
2017-04-06 01:29 - 2017-04-06 01:29 - 00093019 _____ C:\Users\jskna\Downloads\WhatsApp Image 2017-04-05 at 21.54.15.jpeg
2017-04-06 01:28 - 2017-04-06 01:34 - 00102423 _____ C:\Users\jskna\Downloads\WhatsApp Image 2017-04-05 at 21.53.53.jpeg
2017-04-06 01:28 - 2017-04-06 01:34 - 00093719 _____ C:\Users\jskna\Downloads\WhatsApp Image 2017-04-05 at 21.53.51.jpeg
2017-04-06 01:28 - 2017-04-06 01:33 - 00099525 _____ C:\Users\jskna\Downloads\WhatsApp Image 2017-04-05 at 21.53.52.jpeg
2017-04-06 01:28 - 2017-04-06 01:32 - 00102747 _____ C:\Users\jskna\Downloads\WhatsApp Image 2017-04-05 at 21.54.11.jpeg
2017-04-06 01:28 - 2017-04-06 01:32 - 00097844 _____ C:\Users\jskna\Downloads\WhatsApp Image 2017-04-05 at 21.54.12.jpeg
2017-04-06 01:28 - 2017-04-06 01:32 - 00097807 _____ C:\Users\jskna\Downloads\WhatsApp Image 2017-04-05 at 21.54.10.jpeg
2017-04-06 01:28 - 2017-04-06 01:31 - 00104861 _____ C:\Users\jskna\Downloads\WhatsApp Image 2017-04-05 at 21.53.55.jpeg
2017-04-06 01:28 - 2017-04-06 01:31 - 00103862 _____ C:\Users\jskna\Downloads\WhatsApp Image 2017-04-05 at 21.53.56.jpeg
2017-04-06 01:28 - 2017-04-06 01:31 - 00100184 _____ C:\Users\jskna\Downloads\WhatsApp Image 2017-04-05 at 21.54.09.jpeg
2017-04-06 01:28 - 2017-04-06 01:31 - 00099114 _____ C:\Users\jskna\Downloads\WhatsApp Image 2017-04-05 at 21.54.08.jpeg
2017-04-06 01:28 - 2017-04-06 01:31 - 00092022 _____ C:\Users\jskna\Downloads\WhatsApp Image 2017-04-05 at 21.54.07.jpeg
2017-04-06 01:28 - 2017-04-06 01:31 - 00087334 _____ C:\Users\jskna\Downloads\WhatsApp Image 2017-04-05 at 21.54.08 (1).jpeg
2017-04-06 01:28 - 2017-04-06 01:30 - 00095914 _____ C:\Users\jskna\Downloads\WhatsApp Image 2017-04-05 at 21.53.55 (1).jpeg
2017-04-04 21:15 - 2017-04-04 21:15 - 00315315 _____ C:\Users\jskna\Downloads\exemplo-artigo.pdf
2017-04-04 21:15 - 2017-04-04 21:15 - 00008920 _____ C:\Users\jskna\Downloads\aula_pratica_1_-_Química.pdf
2017-04-03 00:03 - 2017-04-03 00:04 - 07674508 _____ C:\Users\jskna\Downloads\psicopatologia-e-semiologia-dos-transtornos-mentais-paulo-dalgalarrondo.pdf
2017-04-01 11:49 - 2017-04-01 11:49 - 00000000 ____D C:\Users\lenit\AppData\Roaming\WinRAR
2017-03-31 13:59 - 2017-04-02 16:01 - 00000000 ___RD C:\Users\jskna\Desktop\CS SANTA ROSA
2017-03-28 16:30 - 2017-03-28 18:32 - 00007913 _____ C:\Users\jskna\Downloads\POLITICAS ANTI FUMO.odt
2017-03-28 00:13 - 2017-03-28 00:13 - 01432363 _____ C:\Users\jskna\Downloads\LIVRO Antropologia e Nutrição - um diálogo possível.pdf
2017-03-28 00:13 - 2017-03-28 00:13 - 00205465 _____ C:\Users\jskna\Downloads\Cultura Alimentar 2004 Vivian Braga.pdf
2017-03-28 00:13 - 2017-03-28 00:13 - 00082387 _____ C:\Users\jskna\Downloads\Cultura e Alimentação o que tem aver os macaquinhos....pdf
2017-03-28 00:12 - 2017-03-28 00:13 - 01928053 _____ C:\Users\jskna\Downloads\O corpo o comer a comida livro Ligia Santos (3).pdf
2017-03-28 00:12 - 2017-03-28 00:12 - 01928053 _____ C:\Users\jskna\Downloads\O corpo o comer a comida livro Ligia Santos (2).pdf
2017-03-26 23:26 - 2017-04-10 21:34 - 00000000 ____D C:\Users\jskna\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
2017-03-26 23:26 - 2017-04-10 21:34 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
2017-03-26 23:26 - 2017-03-26 23:26 - 00000000 ____D C:\Users\jskna\AppData\Roaming\WinRAR
2017-03-26 23:25 - 2017-04-10 21:34 - 00000000 ____D C:\Program Files (x86)\WinRAR
2017-03-26 23:17 - 2017-03-26 23:19 - 01928053 _____ C:\Users\jskna\Downloads\O corpo o comer a comida livro Ligia Santos (1).pdf
2017-03-26 23:17 - 2017-03-26 23:18 - 01928053 _____ C:\Users\jskna\Downloads\O corpo o comer a comida livro Ligia Santos.pdf
2017-03-25 17:53 - 2017-04-15 19:43 - 00000000 ____D C:\Users\jskna\AppData\Local\Spotify
2017-03-25 17:53 - 2017-03-25 17:53 - 00001857 _____ C:\Users\jskna\Desktop\Spotify.lnk
2017-03-25 17:53 - 2017-03-25 17:53 - 00001843 _____ C:\Users\jskna\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Spotify.lnk
2017-03-25 17:45 - 2017-04-18 01:02 - 00000000 ____D C:\Users\jskna\AppData\Roaming\Spotify
2017-03-23 23:51 - 2017-03-23 23:51 - 00000165 ____H C:\Users\jskna\Desktop\~$PLANILHA DE GASTOS.xlsx
2017-03-22 16:11 - 2017-04-18 00:49 - 00101080 _____ (GAS Tecnologia) C:\Windows\system32\Drivers\wsddfac.sys
2017-03-22 16:11 - 2017-03-22 16:12 - 00001024 _____ C:\.rnd
2017-03-22 16:11 - 2017-03-22 16:11 - 00000000 ___HD C:\Program Files (x86)\GAS Tecnologia
2017-03-22 16:11 - 2017-03-22 16:11 - 00000000 ___HD C:\Program Files (x86)\Diebold
2017-03-22 16:11 - 2017-03-22 16:11 - 00000000 ____D C:\Program Files\Diebold
2017-03-22 16:11 - 2016-06-21 16:24 - 00047176 _____ (GAS Tecnologia) C:\Windows\system32\Drivers\wsddntf.sys
2017-03-22 16:11 - 2016-06-21 16:24 - 00010345 _____ C:\Windows\system32\Drivers\wsddntf.cat
2017-03-22 16:11 - 2016-06-08 18:43 - 00097376 ____N (GAS Tecnologia) C:\Windows\system32\Drivers\wsddpp.sys
2017-03-22 16:08 - 2017-04-18 00:57 - 00000000 ____D C:\Users\Todos os Usuários\GbPlugin
2017-03-22 16:08 - 2017-04-18 00:57 - 00000000 ____D C:\ProgramData\GbPlugin
2017-03-22 16:08 - 2017-04-18 00:49 - 00000000 ____D C:\Program Files (x86)\GbPlugin
2017-03-22 16:08 - 2017-03-22 16:08 - 00000000 ____D C:\Users\Todos os Usuários\GAS Tecnologia
2017-03-22 16:08 - 2017-03-22 16:08 - 00000000 ____D C:\ProgramData\GAS Tecnologia
2017-03-22 15:32 - 2017-03-26 22:38 - 00006153 _____ C:\Users\jskna\Downloads\tabagismo.odt
2017-03-20 17:12 - 2017-04-02 16:04 - 00000000 ___RD C:\Users\jskna\Desktop\PASTA MÃE

==================== Um Mês Modificados arquivos e pastas ========

(Se uma entrada for incluída na fixlist, o arquivo/pasta será movido.)

2017-04-18 01:02 - 2017-03-05 21:12 - 00064046 _____ C:\Windows\system32\InstallUtil.InstallLog
2017-04-18 00:58 - 2017-03-04 14:02 - 00000000 ___RD C:\Users\jskna\OneDrive
2017-04-18 00:57 - 2017-03-04 13:59 - 00000000 __SHD C:\Users\jskna\IntelGraphicsProfiles
2017-04-18 00:57 - 2017-03-04 13:54 - 00000180 _____ C:\Windows\system32\{A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat
2017-04-18 00:49 - 2016-07-29 14:26 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2017-04-18 00:49 - 2016-07-16 03:04 - 00786432 _____ C:\Windows\system32\config\BBI
2017-04-18 00:25 - 2016-07-29 14:26 - 00000000 ____D C:\Windows\system32\SleepStudy
2017-04-16 22:20 - 2016-07-16 08:45 - 00000000 ____D C:\Windows\INF
2017-04-16 18:53 - 2016-07-16 08:47 - 00000000 ____D C:\Windows\rescache
2017-04-16 18:09 - 2017-03-04 13:56 - 00000000 ____D C:\Users\jskna
2017-04-16 15:33 - 2017-03-04 13:59 - 00000000 ____D C:\Users\jskna\AppData\Local\VirtualStore
2017-04-16 15:31 - 2016-12-19 11:32 - 00000000 ____D C:\Program Files (x86)\Microsoft Office
2017-04-16 15:31 - 2016-07-16 08:47 - 00000000 ____D C:\Users\Todos os Usuários\regid.1991-06.com.microsoft
2017-04-16 15:31 - 2016-07-16 08:47 - 00000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2017-04-16 13:10 - 2017-03-04 15:22 - 00001384 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2017-04-16 13:10 - 2017-03-04 15:22 - 00001372 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2017-04-16 13:02 - 2016-07-16 08:47 - 00000000 ____D C:\Windows\AppReadiness
2017-04-15 19:46 - 2016-12-19 17:13 - 00445920 _____ C:\Windows\system32\prfh0416.dat
2017-04-15 19:46 - 2016-12-19 17:13 - 00130096 _____ C:\Windows\system32\prfc0416.dat
2017-04-15 19:46 - 2016-07-29 14:31 - 01633276 _____ C:\Windows\system32\PerfStringBackup.INI
2017-04-14 20:39 - 2016-07-16 08:47 - 00000000 ___HD C:\Program Files\WindowsApps
2017-04-14 20:34 - 2016-07-29 14:27 - 00000000 __RHD C:\Users\Public\AccountPictures
2017-04-14 19:08 - 2016-07-29 14:25 - 00342184 _____ C:\Windows\system32\FNTCACHE.DAT
2017-04-14 19:07 - 2016-07-16 08:47 - 00000000 ___SD C:\Windows\SysWOW64\F12
2017-04-14 19:07 - 2016-07-16 08:47 - 00000000 ___SD C:\Windows\system32\F12
2017-04-14 19:07 - 2016-07-16 08:47 - 00000000 ____D C:\Windows\SysWOW64\setup
2017-04-14 19:07 - 2016-07-16 08:47 - 00000000 ____D C:\Windows\system32\setup
2017-04-14 19:07 - 2016-07-16 08:47 - 00000000 ____D C:\Windows\system32\appraiser
2017-04-14 19:07 - 2016-07-16 03:04 - 00000000 ____D C:\Windows\system32\Dism
2017-04-14 19:06 - 2016-07-16 08:47 - 00000000 ___RD C:\Windows\ImmersiveControlPanel
2017-04-14 19:06 - 2016-07-16 08:47 - 00000000 ___RD C:\Program Files\Windows Defender
2017-04-14 19:06 - 2016-07-16 08:47 - 00000000 ____D C:\Windows\ShellExperiences
2017-04-14 19:06 - 2016-07-16 08:47 - 00000000 ____D C:\Windows\Provisioning
2017-04-14 19:06 - 2016-07-16 08:47 - 00000000 ____D C:\Program Files\Windows Photo Viewer
2017-04-14 19:06 - 2016-07-16 08:47 - 00000000 ____D C:\Program Files (x86)\Windows Photo Viewer
2017-04-14 19:06 - 2016-07-16 08:47 - 00000000 ____D C:\Program Files (x86)\Windows Defender
2017-04-14 13:45 - 2017-03-05 00:10 - 00000000 ____D C:\Windows\system32\MRT
2017-04-14 13:42 - 2017-03-05 00:10 - 148601744 ____C (Microsoft Corporation) C:\Windows\system32\MRT.exe
2017-04-14 13:42 - 2016-07-16 08:36 - 00000000 ____D C:\Windows\CbsTemp
2017-04-14 11:41 - 2017-03-05 14:22 - 00003290 _____ C:\Windows\System32\Tasks\OneDrive Standalone Update Task v2
2017-04-14 11:41 - 2017-03-04 14:02 - 00002380 _____ C:\Users\jskna\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2017-04-13 18:54 - 2016-07-16 08:47 - 00000000 ____D C:\Windows\registration
2017-04-13 18:15 - 2017-03-05 16:45 - 00000000 ____D C:\Users\Todos os Usuários\AVAST Software
2017-04-13 18:15 - 2017-03-05 16:45 - 00000000 ____D C:\ProgramData\AVAST Software
2017-04-13 18:15 - 2016-12-19 11:41 - 00000000 ____D C:\Program Files\Common Files\AV
2017-04-12 23:25 - 2017-03-04 14:28 - 00003586 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2017-04-12 23:25 - 2017-03-04 14:28 - 00003462 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2017-04-12 00:01 - 2017-03-05 21:11 - 00000000 ___RD C:\Users\lenit\OneDrive
2017-04-12 00:01 - 2017-03-05 21:07 - 00000000 ____D C:\Users\lenit\AppData\Local\Packages
2017-04-11 11:25 - 2017-03-05 21:07 - 00000000 __SHD C:\Users\lenit\IntelGraphicsProfiles
2017-04-10 20:49 - 2016-07-16 08:47 - 00000000 ____D C:\Windows\system32\NDF
2017-04-10 07:59 - 2017-03-04 14:25 - 00000000 ____D C:\Users\jskna\AppData\Local\Google
2017-04-09 20:13 - 2016-07-16 08:47 - 00000000 ___HD C:\Windows\ELAMBKUP
2017-04-09 20:13 - 2016-07-16 03:04 - 00032768 _____ C:\Windows\system32\config\ELAM
2017-04-09 20:05 - 2017-03-05 14:28 - 00532136 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
2017-04-09 16:36 - 2017-03-04 13:59 - 00000000 ____D C:\Users\jskna\AppData\Local\Packages
2017-04-07 19:08 - 2017-03-12 13:50 - 00000000 ____D C:\Users\lenit\AppData\Local\MicrosoftEdge
2017-04-04 17:05 - 2016-12-19 11:33 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Ferramentas do Microsoft Office 2016
2017-04-02 19:05 - 2017-03-06 10:29 - 00013294 _____ C:\Users\jskna\Desktop\PLANILHA DE GASTOS.xlsx
2017-04-02 16:03 - 2017-03-11 09:43 - 00000000 ___RD C:\Users\jskna\Desktop\CELULAR MEMORIA INTERNA
2017-04-02 15:59 - 2017-03-05 00:00 - 00000000 ___RD C:\Users\jskna\Desktop\NUTRIÇÃO
2017-04-01 15:52 - 2016-07-16 08:49 - 00835576 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2017-04-01 15:52 - 2016-07-16 08:49 - 00177656 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2017-03-30 18:26 - 2016-07-16 08:47 - 00000000 ____D C:\Windows\LiveKernelReports
2017-03-29 00:27 - 2017-03-05 21:07 - 00000000 ____D C:\Users\lenit
2017-03-28 03:20 - 2016-07-29 14:29 - 02717184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PrintConfig.dll
2017-03-22 16:15 - 2016-12-19 11:45 - 00000000 ____D C:\Users\Todos os Usuários\Temp
2017-03-22 16:15 - 2016-12-19 11:45 - 00000000 ____D C:\ProgramData\Temp
2017-03-21 11:57 - 2017-03-12 20:36 - 00000000 ____D C:\Users\lenit\Desktop\PP 1° SEMESTRE
2017-03-19 03:08 - 2016-07-16 08:47 - 00000000 ___RD C:\Windows\PrintDialog
2017-03-19 03:08 - 2016-07-16 08:47 - 00000000 ____D C:\Windows\system32\oobe
2017-03-19 03:08 - 2016-07-16 08:47 - 00000000 ____D C:\Windows\bcastdvr

==================== Arquivos na raiz de alguns diretórios =======

2016-12-19 12:06 - 2016-12-19 12:06 - 0000000 ____H () C:\ProgramData\DP45977C.lfl
2016-12-19 12:06 - 2016-12-19 12:06 - 0000102 _____ () C:\ProgramData\Microsoft.SqlServer.Compact.400.64.bc

Alguns arquivos em TEMP:
====================
2017-04-17 23:41 - 2017-04-17 23:41 - 22213840 _____ (DsNET Corp ) C:\Users\jskna\AppData\Local\Temp\atcMedia1921492472468.exe
2017-04-16 14:50 - 2017-04-16 13:41 - 4615856 _____ (Enigma Software Group USA, LLC.) C:\Users\jskna\AppData\Local\Temp\EsgInstallerResumeAction_d0f0112f31a82dce19f6f1539add3443.exe
2017-03-04 14:01 - 2017-03-04 14:32 - 54267784 _____ (SweetLabs,Inc.) C:\Users\jskna\AppData\Local\Temp\octB701.tmp.exe
2017-03-08 23:52 - 2017-03-09 00:18 - 54267784 _____ (SweetLabs,Inc.) C:\Users\lenit\AppData\Local\Temp\oct307D.tmp.exe

==================== Bamital & volsnap ======================

(Não há correção automática para arquivos que não passaram na verificação.)

C:\Windows\system32\winlogon.exe => O arquivo é assinado digitalmente
C:\Windows\system32\wininit.exe => O arquivo é assinado digitalmente
C:\Windows\explorer.exe => O arquivo é assinado digitalmente
C:\Windows\SysWOW64\explorer.exe => O arquivo é assinado digitalmente
C:\Windows\system32\svchost.exe => O arquivo é assinado digitalmente
C:\Windows\SysWOW64\svchost.exe => O arquivo é assinado digitalmente
C:\Windows\system32\services.exe => O arquivo é assinado digitalmente
C:\Windows\system32\User32.dll => O arquivo é assinado digitalmente
C:\Windows\SysWOW64\User32.dll => O arquivo é assinado digitalmente
C:\Windows\system32\userinit.exe => O arquivo é assinado digitalmente
C:\Windows\SysWOW64\userinit.exe => O arquivo é assinado digitalmente
C:\Windows\system32\rpcss.dll => O arquivo é assinado digitalmente
C:\Windows\system32\dnsapi.dll => O arquivo é assinado digitalmente
C:\Windows\SysWOW64\dnsapi.dll => O arquivo é assinado digitalmente
C:\Windows\system32\Drivers\volsnap.sys => O arquivo é assinado digitalmente

LastRegBack: 2017-04-08 20:19

==================== Fim de FRST.txt ============================

Qual o próximo passo?

No aguardo.

DigRam · Abril 18, 2017

/_ Bom Dia! Jéssica Natani _\

O relatório pedido foi o Fixlog e não o FRST.txt.

Leia cuidadosamente as instruções,que você perceberá o engano.

[Abs]

DigRam · Junho 15, 2017

Tópico Arquivado Como o autor não respondeu por mais de 10 dias, o tópico foi arquivado. Caso você seja o autor do tópico e quer reabrir, envie uma mensagem privada para um moderador da área juntamente com o link para este tópico e explique o motivo da reabertura.

Entrar

Arquivado

[Arquivado] Malware de difícil remoção - HELP!

Recommended Posts

Jéssica Natani 0

Compartilhar este post

Link para o post

Compartilhar em outros sites

DigRam 144

Compartilhar este post

Link para o post

Compartilhar em outros sites

Jéssica Natani 0

Compartilhar este post

Link para o post

Compartilhar em outros sites

DigRam 144

Compartilhar este post

Link para o post

Compartilhar em outros sites

DigRam 144

Compartilhar este post

Link para o post

Compartilhar em outros sites

recuperando parametros simplexml_load_file

PHP+Codeigniter - Adicionar Registro Plano de Contas

Javascript - Passar Parâmetros para uma Função.

Conteúdo Similar

Este projeto é apoiado pelas empresas

Fóruns

Tempo Real

Informação importante