Virus?!

Anônima

Esta tarde ao ligar o computador notei que este estava muito lento e decidi ver os processos no gestor de tarefas.

Notei em varios processos que nao fazem parte (ou pelo menos eu penso que nao) das funçoes pincipais do computador.

O nome destes programas sao:

-Adlock (localizado na pasta Appdata\Roaming)

-IntelDev (localizado na pasta Appdata\Local\Temp)

-2026459690(parece algo conectado com o inteldev, localiza-se na mesma pasta)

Todos eles sao executaveis(exe), notei que o Adlock tem como descriçao 'notepad' e abre automaticamente o cmd e conhost ambos exe.

Eles estao a "consumir" muito Cpu principalmente o adlock, mas o computador esta estranhamente estavel.

A ajuda é agradecida.

Pergunta bloqueada. Essa pergunta foi migrada da Comunidade de Suporte da Microsoft. É possível votar se é útil, mas não é possível adicionar comentários ou respostas ou seguir a pergunta.

0 comentários

37 respostas

Anônima

2014-03-07T22:24:42+00:00

Como está o PC após este procedimento?
Esta resposta foi útil?

0 comentários Sem comentários
Anônima

2014-03-07T22:19:22+00:00

Primeiro de tudo gostaria de desculpar a minha ausencia nos ultimos 2 dias devido a problemas de hardware no computador. Entretando aqui posto o Fixlog.txt

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x86) Version: 04-03-2014 02

Ran by Nanda at 2014-03-07 22:17:02 Run:1

Running from C:\Users\Nanda\Desktop\Downloads

Boot Mode: Normal

==============================================

Content of fixlist:

*****************

start

() C:\Users\Nanda\AppData\Roaming\f4061\e83a1.exe

(Ballistics Networking Pty Ltd.) C:\Users\Nanda\AppData\Local\Temp\1505850852.exe

Startup: C:\Users\Nanda\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\1636746858.exe ()

Startup: C:\Users\Nanda\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\2026459690.exe ()

URLSearchHook: HKLM - (No Name) - {e7cb019e-bf3b-4c48-9673-48c323b18e31} - No File

URLSearchHook: ATTENTION ==> Default URLSearchHook is missing.

SearchScopes: HKLM - DefaultScope value is missing.

SearchScopes: HKCU - ToolbarSearchProviderProgress {96bd48dd-741b-41ae-ac4a-aff96ba00f7e}

FF Plugin: @microsoft.com/GENUINE - disabled No File

CHR HomePage: hxxp://home.sweetim.com/?crg=3.26010003&st=12&barid={5EBD3937-061E-4EFA-B3D9-57140C357286}

2014-03-04 14:01 - 2014-03-04 10:21 - 02435072 _____ (Microsoft Corporation) C:\Users\Nanda\AppData\Roaming\Adlock.exe

C:\Users\Nanda\1.dat

Task: {323C12B6-C7D5-42D7-B721-7ECA325F9B4B} - \YourFile DownloaderUpdate No Task File

Task: {A9A3CFAF-6927-4BA7-94E8-325318CDF285} - \AdobeFlashPlayerUpdate 2 No Task File

Task: {EE5A8FC9-41F8-4028-98AC-EBE5F1631CE7} - \AdobeFlashPlayerUpdate No Task File

2014-03-04 20:50 - 2014-03-04 20:50 - 00004608 _____ () C:\Users\Nanda\AppData\Roaming\f4061\e83a1.exe

AlternateDataStreams: C:\ProgramData\TEMP:373E1720

end

*****************

C:\Users\Nanda\AppData\Roaming\f4061\e83a1.exe => No running process found

C:\Users\Nanda\AppData\Local\Temp\1505850852.exe => No running process found

C:\Users\Nanda\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\1636746858.exe => Moved successfully.

C:\Users\Nanda\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\2026459690.exe => Moved successfully.

HKLM\Software\Microsoft\Internet Explorer\URLSearchHooks\{e7cb019e-bf3b-4c48-9673-48c323b18e31} => Value deleted successfully.

Default URLSearchHook was restored successfully .

HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\DefaultScope => Value was restored successfully.

HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\ToolbarSearchProviderProgress => Value deleted successfully.

HKLM\Software\MozillaPlugins\FF Plugin: @microsoft.com/GENUINE - disabled No File => Key not found.

FF Plugin: @microsoft.com/GENUINE - disabled No File not found.

CHR HomePage: hxxp://home.sweetim.com/?crg=3.26010003&st=12&barid={5EBD3937-061E-4EFA-B3D9-57140C357286} ==> The Chrome "Settings" can be used to fix the entry.

C:\Users\Nanda\AppData\Roaming\Adlock.exe => Moved successfully.

C:\Users\Nanda\1.dat => Moved successfully.

HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon{323C12B6-C7D5-42D7-B721-7ECA325F9B4B} => Key deleted successfully.

HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks{323C12B6-C7D5-42D7-B721-7ECA325F9B4B} => Key deleted successfully.

HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\YourFile DownloaderUpdate => Key deleted successfully.

HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Boot{A9A3CFAF-6927-4BA7-94E8-325318CDF285} => Key deleted successfully.

HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks{A9A3CFAF-6927-4BA7-94E8-325318CDF285} => Key deleted successfully.

HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\AdobeFlashPlayerUpdate 2 => Key deleted successfully.

HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain{EE5A8FC9-41F8-4028-98AC-EBE5F1631CE7} => Key deleted successfully.

HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks{EE5A8FC9-41F8-4028-98AC-EBE5F1631CE7} => Key deleted successfully.

HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\AdobeFlashPlayerUpdate => Key deleted successfully.

C:\Users\Nanda\AppData\Roaming\f4061\e83a1.exe => Moved successfully.

C:\ProgramData\TEMP => ":373E1720" ADS removed successfully.

==== End of Fixlog ====
Esta resposta foi útil?

0 comentários Sem comentários
Anônima

2014-03-05T03:57:19+00:00

Copie todo o texto em negrito que te passei.

Abra o Bloco de notas e cole o texto copiado dentro dele. Salve-o com o nome de fixlist no mesmo lugar onde você deixou o FRST que é este abaixo:

C:\Users\Nanda\Desktop\Downloads

Execute o FRST. Clique no botão Fix.

Aguarde e ao final, o log Fixlog.txt será salvo no seu desktop.

Selecione, copie e cole o conteúdo deste log em sua próxima resposta.
Esta resposta foi útil?

0 comentários Sem comentários
Anônima

2014-03-04T22:25:37+00:00

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 04-03-2014 02

Ran by Nanda (administrator) on NANDA-PC on 04-03-2014 22:16:27

Running from C:\Users\Nanda\Desktop\Downloads

Microsoft Windows 7 Professional Service Pack 1 (X86) OS Language: Portuguese Standard

Internet Explorer Version 11

Boot Mode: Normal

The only official download link for FRST:

Download link for 32-Bit version: http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/81/

Download link for 64-Bit Version: http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/82/

Download link from any site other than Bleeping Computer is unpermitted or outdated.

See tutorial for FRST: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(Microsoft Corporation) c:\Program Files\Microsoft Security Client\MsMpEng.exe

(AMD) C:\Windows\system32\atiesrxx.exe

(AMD) C:\Windows\system32\atieclxx.exe

(Malwarebytes Corporation) C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe

(Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe

() C:\Windows\system32\PnkBstrA.exe

(Advanced Micro Devices Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe

(TuneUp Software) C:\Program Files\TuneUp Utilities 2013\TuneUpUtilitiesService32.exe

(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE

(Conexant Systems, Inc.) C:\Windows\system32\DRIVERS\xaudio.exe

(TuneUp Software) C:\Program Files\TuneUp Utilities 2013\TuneUpUtilitiesApp32.exe

(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe

(Oracle Corporation) C:\Program Files\Java\jre7\bin\javaw.exe

(ATI Technologies Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe

(Microsoft Corporation) C:\Windows\Microsoft.Net\Framework\v3.0\WPF\PresentationFontCache.exe

(Advanced Micro Devices, Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MMLoadDrv.exe

(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe

() C:\Users\Nanda\AppData\Roaming\f4061\e83a1.exe

(Ballistics Networking Pty Ltd.) C:\Users\Nanda\AppData\Local\Temp\1505850852.exe

(TuneUp Software) C:\Program Files\TuneUp Utilities 2013\Integrator.exe

(Microsoft Corporation) C:\Windows\system32\taskmgr.exe

==================== Registry (Whitelisted) ==================

HKLM...\Run: [MSC] - c:\Program Files\Microsoft Security Client\msseces.exe [948440 2013-10-23] (Microsoft Corporation)

HKLM...\Run: [StartCCC] - C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [641704 2012-11-16] (Advanced Micro Devices, Inc.)

HKLM...\Run: [AMD AVT] - C:\Program Files\AMD AVT\bin\kdbsync.exe [20992 2012-03-19] ()

HKLM...\Run: [IntelliPoint] - c:\Program Files\Microsoft IntelliPoint\ipoint.exe [1821576 2011-08-01] (Microsoft Corporation)

HKLM...\Policies\Explorer: [HideSCAHealth] 1

HKU.DEFAULT...\RunOnce: [SPReview] - C:\Windows\System32\SPReview\SPReview.exe [280576 2012-01-11] (Microsoft Corporation)

HKU\S-1-5-21-3983158026-637607574-1965650666-1001...\Run: [Steam] - C:\Program Files\Steam\steam.exe [1823424 2014-03-04] (Valve Corporation)

HKU\S-1-5-21-3983158026-637607574-1965650666-1001...\Run: [Microsoft Interface Controller] - C:\GPU_UPDATE\MSController.exe [8704 2013-10-13] ()

HKU\S-1-5-21-3983158026-637607574-1965650666-1001...\Run: [DAEMON Tools Lite] - C:\Program Files\DAEMON Tools Lite\DTLite.exe [3675352 2013-10-28] (Disc Soft Ltd)

HKU\S-1-5-21-3983158026-637607574-1965650666-1001...\Run: [jawaw] - "C:\Program Files\Java\jre7\bin\javaw.exe" -jar "C:\Users\Nanda\AppData\Roaming\jawaw.jar"

HKU\S-1-5-21-3983158026-637607574-1965650666-1001...\RunOnce: [jawawv] - C:\Users\Nanda\AppData\Local\Temp\1505850852.exe [386048 2014-03-04] (Ballistics Networking Pty Ltd.)

IFEO\cfosspeed.exe: [Debugger] "C:\Program Files\TuneUp Utilities 2013\TUAutoReactivator32.exe"

IFEO\hamachi-2-ui.exe: [Debugger] "C:\Program Files\TuneUp Utilities 2013\TUAutoReactivator32.exe"

Startup: C:\Users\Nanda\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\1636746858.exe ()

Startup: C:\Users\Nanda\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\2026459690.exe ()

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = http://pt.msn.com/?ocid=iehp

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0x4830BF7449A8CC01

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = pt

HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank

URLSearchHook: HKLM - (No Name) - {e7cb019e-bf3b-4c48-9673-48c323b18e31} - No File

URLSearchHook: ATTENTION ==> Default URLSearchHook is missing.

SearchScopes: HKLM - DefaultScope value is missing.

SearchScopes: HKCU - ToolbarSearchProviderProgress {96bd48dd-741b-41ae-ac4a-aff96ba00f7e}

SearchScopes: HKCU - {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}&ie={inputEncoding}&oe={outputEncoding}&startIndex={startIndex?}&startPage={startPage}

BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)

BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)

BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)

Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)

Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt

Tcpip..\Interfaces{DE0EF1BE-2845-405A-A52A-BF53F04EA5B1}: [NameServer]192.168.1.254,192.168.1.254

FireFox:

========

FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF32_11_7_700_224.dll ()

FF Plugin: @java.com/DTPlugin,version=10.51.2 - C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)

FF Plugin: @java.com/JavaPlugin,version=10.51.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)

FF Plugin: @microsoft.com/GENUINE - disabled No File

FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)

FF Plugin: @microsoft.com/WLPG,version=16.4.3505.0912 - C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)

FF Plugin: @pandonetworks.com/PandoWebPlugin - C:\Program Files\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)

FF Plugin: @tools.google.com/Google Update;version=3 - C:\Program Files\Google\Update\1.3.22.5\npGoogleUpdate3.dll (Google Inc.)

FF Plugin: @tools.google.com/Google Update;version=9 - C:\Program Files\Google\Update\1.3.22.5\npGoogleUpdate3.dll (Google Inc.)

FF Plugin: Adobe Reader - C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)

FF Plugin HKCU: @lightspark.github.com/Lightspark;version=1 - C:\Program Files\Lightspark 0.5.3-git\nplightsparkplugin.dll ( )

FF Plugin HKCU: @unity3d.com/UnityPlayer,version=1.0 - C:\Users\Nanda\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)

FF Plugin HKCU: pandonetworks.com/PandoWebPlugin - C:\Program Files\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)

Chrome:

=======

CHR HomePage: hxxp://home.sweetim.com/?crg=3.26010003&st=12&barid={5EBD3937-061E-4EFA-B3D9-57140C357286}

CHR Extension: (Google Docs) - C:\Users\Nanda\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-03-02]

CHR Extension: (Google Drive) - C:\Users\Nanda\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-03-02]

CHR Extension: (YouTube) - C:\Users\Nanda\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2011-12-13]

CHR Extension: (Pesquisa do Google) - C:\Users\Nanda\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-03-02]

CHR Extension: (Desprotetor de Links) - C:\Users\Nanda\AppData\Local\Google\Chrome\User Data\Default\Extensions\imcbnnnoghiihopefblgehihofbfbmei [2014-03-04]

CHR Extension: (9GAG Mini) - C:\Users\Nanda\AppData\Local\Google\Chrome\User Data\Default\Extensions\inmkmihphgjhmeabggdcokmkjhbnmdml [2014-03-04]

CHR Extension: (Grepolis) - C:\Users\Nanda\AppData\Local\Google\Chrome\User Data\Default\Extensions\kkgkognjknhcgbgbeijjondlikfkgnog [2014-03-04]

CHR Extension: (Google Wallet) - C:\Users\Nanda\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-08-24]

CHR Extension: (Gmail) - C:\Users\Nanda\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-03-02]

========================== Services (Whitelisted) =================

S4 cFosSpeedS; C:\Program Files\cFosSpeed\spd.exe [380328 2012-07-02] (cFos Software GmbH)

S4 Hamachi2Svc; C:\Program Files\LogMeIn Hamachi\hamachi-2.exe [1440080 2013-06-28] (LogMeIn Inc.)

R2 MBAMScheduler; C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation)

S2 MBAMService; C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation)

R2 MsMpSvc; c:\Program Files\Microsoft Security Client\MsMpEng.exe [22208 2013-10-23] (Microsoft Corporation)

S3 NisSrv; c:\Program Files\Microsoft Security Client\NisSrv.exe [280288 2013-10-23] (Microsoft Corporation)

R2 PnkBstrA; C:\Windows\system32\PnkBstrA.exe [76888 2013-10-12] ()

R2 TuneUp.UtilitiesSvc; C:\Program Files\TuneUp Utilities 2013\TuneUpUtilitiesService32.exe [1699680 2012-09-17] (TuneUp Software)

==================== Drivers (Whitelisted) ====================

R1 cFosSpeed; C:\Windows\System32\DRIVERS\cfosspeed6.sys [975272 2012-07-02] (cFos Software GmbH)

R3 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [243128 2013-11-03] (Disc Soft Ltd)

S3 hamachi; C:\Windows\System32\DRIVERS\hamachi.sys [26176 2009-03-18] (LogMeIn, Inc.)

R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [22856 2013-04-04] (Malwarebytes Corporation)

R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [214696 2013-09-27] (Microsoft Corporation)

R0 sptd; C:\Windows\System32\Drivers\sptd.sys [324096 2013-11-03] (Duplex Secure Ltd.)

R3 TuneUpUtilitiesDrv; C:\Program Files\TuneUp Utilities 2013\TuneUpUtilitiesDriver32.sys [10088 2012-08-29] (TuneUp Software)

U3 agmng3wt; C:\Windows\system32\Drivers\agmng3wt.sys [0 ] (Advanced Micro Devices)

S3 EagleXNt; ??\C:\Windows\system32\drivers\EagleXNt.sys [X]

U5 UnlockerDriver5; C:\Program Files\Unlocker\UnlockerDriver5.sys [4096 2010-07-04] ()

S3 WinRing0_1_2_0; ??\C:\Program Files\IObit\Game Booster 3\Driver\WinRing0.sys [X]

S3 XDva401; ??\C:\Windows\system32\XDva401.sys [X]

==================== NetSvcs (Whitelisted) ===================

==================== One Month Created Files and Folders ========

2014-03-04 22:14 - 2014-03-04 22:16 - 00000000 ____D () C:\FRST

2014-03-04 10:48 - 2014-03-04 21:53 - 00000994 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job

2014-03-04 10:48 - 2014-03-04 10:53 - 00000990 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job

2014-03-04 10:21 - 2014-03-04 14:01 - 02435072 _____ (Microsoft Corporation) C:\Users\Nanda\AppData\Roaming\Adlock.exe

2014-03-02 21:51 - 2014-03-02 21:51 - 00000000 ____D () C:\Windows\ERUNT

2014-03-02 19:47 - 2014-03-02 19:16 - 00024064 _____ () C:\Windows\zoek-delete.exe

2014-03-02 19:21 - 2014-03-02 19:49 - 00030470 _____ () C:\zoek-results.log

2014-03-02 19:16 - 2014-03-02 19:43 - 00000000 ____D () C:\zoek_backup

2014-03-02 18:24 - 2014-03-02 18:34 - 00000000 ____D () C:\AdwCleaner

2014-03-02 14:51 - 2014-03-03 20:28 - 00000000 ____D () C:\Users\Nanda\AppData\Roaming\ZHP

2014-03-02 14:51 - 2014-03-03 17:44 - 00000000 ____D () C:\Program Files\ZHPDiag

2014-02-25 18:41 - 2014-01-09 02:22 - 05694464 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll

2014-02-23 13:41 - 2014-02-23 13:42 - 404484926 _____ () C:\Users\Nanda\Documents\Nightcore - Rock Mix #4.mp4

2014-02-23 13:30 - 2014-02-23 13:31 - 253753316 _____ () C:\Users\Nanda\Documents~Nightcore~ Rock Compilation #5 SPECIAL EDITION (HD).mp4

2014-02-23 13:14 - 2014-02-23 13:14 - 26250033 _____ () C:\Users\Nanda\Documents\Nightcore- End of all Hope.mp4

2014-02-23 13:12 - 2014-02-23 13:12 - 23919946 _____ () C:\Users\Nanda\Documents\Nightcore - In the Middle of the Night.mp4

2014-02-23 13:08 - 2014-02-23 13:08 - 28941711 _____ () C:\Users\Nanda\Documents\Nightcore- Amaranth.mp4

2014-02-23 13:01 - 2014-02-23 13:01 - 20532539 _____ () C:\Users\Nanda\Documents\Nightcore- Whispers in the Dark.mp4

2014-02-20 19:34 - 2014-02-20 19:34 - 00000000 ____D () C:\Program Files\Microsoft IntelliPoint

2014-02-20 19:29 - 2014-02-20 19:29 - 00000000 ____D () C:\Users\Nanda\AppData\Roaming\Logitech

2014-02-20 19:29 - 2014-02-20 19:29 - 00000000 ____D () C:\Users\Nanda\AppData\Roaming\Logishrd

2014-02-19 19:20 - 2013-10-02 00:42 - 00049152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\TsUsbFlt.sys

2014-02-19 19:20 - 2013-10-02 00:32 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbRedirectionGroupPolicyControl.exe

2014-02-19 19:20 - 2013-10-02 00:30 - 00014336 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbRedirectionGroupPolicyExtension.dll

2014-02-19 19:20 - 2013-10-02 00:14 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\MsRdpWebAccess.dll

2014-02-19 19:20 - 2013-10-02 00:14 - 00017920 _____ (Microsoft Corporation) C:\Windows\system32\wksprtPS.dll

2014-02-19 19:20 - 2013-10-01 23:58 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\tsgqec.dll

2014-02-19 19:20 - 2013-10-01 23:45 - 00032256 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbGDCoInstaller.dll

2014-02-19 19:20 - 2013-10-01 23:08 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\rdvidcrl.dll

2014-02-19 19:20 - 2013-10-01 23:00 - 00076288 _____ (Microsoft Corporation) C:\Windows\system32\TSWbPrxy.exe

2014-02-19 19:20 - 2013-10-01 22:53 - 00350208 _____ (Microsoft Corporation) C:\Windows\system32\wksprt.exe

2014-02-19 19:20 - 2013-10-01 22:34 - 01068544 _____ (Microsoft Corporation) C:\Windows\system32\mstsc.exe

2014-02-19 19:17 - 2013-09-25 01:57 - 00792576 _____ (Microsoft Corporation) C:\Windows\system32\TSWorkspace.dll

2014-02-19 17:18 - 2014-02-21 09:39 - 00110056 _____ () C:\Users\Nanda\AppData\Local\GDIPFONTCACHEV1.DAT

2014-02-19 17:16 - 2014-03-04 10:19 - 00005836 _____ () C:\Windows\PFRO.log

2014-02-19 17:16 - 2014-03-04 10:19 - 00002310 _____ () C:\Windows\setupact.log

2014-02-19 17:16 - 2014-02-21 09:39 - 00413680 _____ () C:\Windows\system32\FNTCACHE.DAT

2014-02-19 17:16 - 2014-02-19 17:16 - 00000000 _____ () C:\Windows\setuperr.log

2014-02-16 02:30 - 2014-02-16 02:30 - 31885137 _____ () C:\Users\Nanda\Documents\_Onward_ - Pantheon's Theme.mp4

2014-02-16 02:30 - 2014-02-16 02:30 - 18256547 _____ () C:\Users\Nanda\Documents\LoL - Music for playing as ... Annie.mp4

2014-02-12 23:27 - 2014-02-06 10:20 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb

2014-02-12 23:27 - 2014-02-06 10:19 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll

2014-02-12 23:27 - 2014-02-06 10:01 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll

2014-02-12 23:27 - 2014-02-06 10:00 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll

2014-02-12 23:27 - 2014-02-06 09:57 - 02168320 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll

2014-02-12 23:27 - 2014-02-06 09:52 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll

2014-02-12 23:27 - 2014-02-06 09:52 - 00032768 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll

2014-02-12 23:27 - 2014-02-06 09:49 - 00440832 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll

2014-02-12 23:27 - 2014-02-06 09:47 - 00112128 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe

2014-02-12 23:27 - 2014-02-06 09:47 - 00108032 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe

2014-02-12 23:27 - 2014-02-06 09:46 - 00553472 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll

2014-02-12 23:27 - 2014-02-06 09:34 - 00208896 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe

2014-02-12 23:27 - 2014-02-06 09:25 - 00164864 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll

2014-02-12 23:27 - 2014-02-06 09:13 - 00524288 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll

2014-02-12 23:27 - 2014-02-06 09:09 - 01964032 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl

2014-02-12 23:27 - 2014-02-06 09:03 - 11266048 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll

2014-02-12 23:27 - 2014-02-06 08:41 - 01820160 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll

2014-02-12 23:27 - 2014-02-06 08:36 - 01156096 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll

2014-02-12 23:27 - 2014-02-06 08:34 - 00703488 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll

2014-02-12 23:26 - 2014-02-06 10:38 - 17103872 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll

2014-02-12 23:26 - 2014-02-06 09:25 - 04244480 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll

2014-02-12 23:24 - 2013-12-21 08:56 - 00454656 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll

2014-02-12 21:18 - 2013-12-31 23:05 - 00420008 _____ () C:\Windows\system32\locale.nls

2014-02-12 21:18 - 2013-12-06 02:02 - 01237504 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll

2014-02-12 21:18 - 2013-12-06 02:02 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll

2014-02-12 21:17 - 2013-12-24 23:09 - 01987584 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll

2014-02-12 21:17 - 2013-12-04 02:03 - 00428032 _____ (Microsoft Corporation) C:\Windows\system32\secproc.dll

2014-02-12 21:17 - 2013-12-04 02:03 - 00423936 _____ (Microsoft Corporation) C:\Windows\system32\secproc_isv.dll

2014-02-12 21:17 - 2013-12-04 02:03 - 00087040 _____ (Microsoft Corporation) C:\Windows\system32\secproc_ssp_isv.dll

2014-02-12 21:17 - 2013-12-04 02:03 - 00087040 _____ (Microsoft Corporation) C:\Windows\system32\secproc_ssp.dll

2014-02-12 21:17 - 2013-12-04 02:02 - 00390144 _____ (Microsoft Corporation) C:\Windows\system32\msdrm.dll

2014-02-12 21:17 - 2013-12-04 01:54 - 00594944 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_isv.exe

2014-02-12 21:17 - 2013-12-04 01:54 - 00572416 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate.exe

2014-02-12 21:17 - 2013-12-04 01:54 - 00510976 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_ssp.exe

2014-02-12 21:17 - 2013-12-04 01:54 - 00508928 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_ssp_isv.exe

2014-02-12 21:17 - 2013-11-26 08:16 - 03419136 _____ (Microsoft Corporation) C:\Windows\system32\d2d1.dll

2014-02-09 18:15 - 2014-02-09 20:45 - 00000000 ____D () C:\Program Files\Battle for Wesnoth 1.10.7

2014-02-07 19:08 - 2014-02-07 19:08 - 00000000 ____D () C:\Users\Nanda\Desktop\PokeMMO-Client

2014-02-03 18:15 - 2013-12-18 21:10 - 00094632 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge.dll

2014-02-03 18:15 - 2013-12-18 21:04 - 00264616 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe

2014-02-03 18:15 - 2013-12-18 21:04 - 00175016 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe

2014-02-03 18:15 - 2013-12-18 21:03 - 00174504 _____ (Oracle Corporation) C:\Windows\system32\java.exe

2014-02-03 18:14 - 2014-02-03 18:15 - 00005163 _____ () C:\Windows\system32\jupdate-1.7.0_51-b13.log

==================== One Month Modified Files and Folders =======

2014-03-04 22:16 - 2014-03-04 22:14 - 00000000 ____D () C:\FRST

2014-03-04 21:53 - 2014-03-04 10:48 - 00000994 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job

2014-03-04 20:50 - 2014-02-01 19:41 - 00000000 __SHD () C:\Users\Nanda\AppData\Roaming\f4061

2014-03-04 20:14 - 2012-06-08 22:08 - 00000000 ____D () C:\Users\Nanda\AppData\Roaming\Skype

2014-03-04 20:10 - 2013-11-06 18:51 - 00000000 ____D () C:\Users\Nanda\AppData\Local\PMB Files

2014-03-04 20:10 - 2013-11-06 18:51 - 00000000 ____D () C:\ProgramData\PMB Files

2014-03-04 19:18 - 2011-11-21 11:06 - 01822761 _____ () C:\Windows\WindowsUpdate.log

2014-03-04 14:02 - 2011-12-08 17:49 - 00000000 ____D () C:\Program Files\Steam

2014-03-04 14:01 - 2014-03-04 10:21 - 02435072 _____ (Microsoft Corporation) C:\Users\Nanda\AppData\Roaming\Adlock.exe

2014-03-04 10:53 - 2014-03-04 10:48 - 00000990 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job

2014-03-04 10:49 - 2012-04-01 16:49 - 00000000 ____D () C:\Program Files\Google

2014-03-04 10:47 - 2011-11-21 20:22 - 00000000 ____D () C:\Users\Nanda\AppData\Local\Deployment

2014-03-04 10:46 - 2011-11-21 20:23 - 00000000 ____D () C:\Users\Nanda\AppData\Local\Google

2014-03-04 10:35 - 2013-10-08 18:54 - 00000000 ____D () C:\Users\Nanda\Desktop\Cracks

2014-03-04 10:32 - 2009-07-14 04:34 - 00025424 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0

2014-03-04 10:32 - 2009-07-14 04:34 - 00025424 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0

2014-03-04 10:24 - 2011-12-08 17:49 - 00000000 ____D () C:\Program Files\Common Files\Steam

2014-03-04 10:19 - 2014-02-19 17:16 - 00005836 _____ () C:\Windows\PFRO.log

2014-03-04 10:19 - 2014-02-19 17:16 - 00002310 _____ () C:\Windows\setupact.log

2014-03-04 10:19 - 2009-07-14 04:53 - 00000006 ____H () C:\Windows\Tasks\SA.DAT

2014-03-03 20:28 - 2014-03-02 14:51 - 00000000 ____D () C:\Users\Nanda\AppData\Roaming\ZHP

2014-03-03 20:28 - 2012-05-05 23:26 - 00000000 ____D () C:\Program Files\YTD YouTube Downloader & Converter

2014-03-03 17:44 - 2014-03-02 14:51 - 00000000 ____D () C:\Program Files\ZHPDiag

2014-03-03 17:15 - 2013-05-25 16:07 - 00000000 ____D () C:\Users\Nanda\AppData\Roaming\PC-Gizmos

2014-03-02 21:51 - 2014-03-02 21:51 - 00000000 ____D () C:\Windows\ERUNT

2014-03-02 19:49 - 2014-03-02 19:21 - 00030470 _____ () C:\zoek-results.log

2014-03-02 19:43 - 2014-03-02 19:16 - 00000000 ____D () C:\zoek_backup

2014-03-02 19:41 - 2011-11-21 12:39 - 00000000 ____D () C:\ProgramData\Adobe

2014-03-02 19:16 - 2014-03-02 19:47 - 00024064 _____ () C:\Windows\zoek-delete.exe

2014-03-02 18:34 - 2014-03-02 18:24 - 00000000 ____D () C:\AdwCleaner

2014-03-02 18:34 - 2012-09-25 19:47 - 00000000 ____D () C:\Program Files\Mozilla Firefox

2014-03-02 18:34 - 2011-11-21 11:37 - 00000000 ____D () C:\Users\Nanda

2014-03-02 04:12 - 2012-09-27 19:14 - 00003500 _____ () C:\Users\Nanda\Desktop\vba1.ini

2014-02-26 23:21 - 2011-11-21 11:44 - 01686276 _____ () C:\Windows\system32\PerfStringBackup.INI

2014-02-26 23:21 - 2009-07-14 08:31 - 00731052 _____ () C:\Windows\system32\prfh0816.dat

2014-02-26 23:21 - 2009-07-14 08:31 - 00158542 _____ () C:\Windows\system32\prfc0816.dat

2014-02-26 15:43 - 2009-07-14 02:37 - 00000000 ____D () C:\Windows\rescache

2014-02-25 23:07 - 2009-07-14 02:37 - 00000000 ____D () C:\Windows\system32\pt-PT

2014-02-25 19:07 - 2012-07-08 22:54 - 00000000 ____D () C:\Users\Nanda\Desktop\SLOT

2014-02-23 18:51 - 2013-06-25 22:42 - 00000000 ____D () C:\Users\Nanda\Desktop\games quiet fluffy

2014-02-23 18:35 - 2014-01-19 03:39 - 00000000 ____D () C:\Users\Nanda\AppData\Roaming.minecraft

2014-02-23 14:21 - 2013-06-03 22:46 - 00723456 ___SH () C:\Users\Nanda\Documents\Thumbs.db

2014-02-23 13:42 - 2014-02-23 13:41 - 404484926 _____ () C:\Users\Nanda\Documents\Nightcore - Rock Mix #4.mp4

2014-02-23 13:31 - 2014-02-23 13:30 - 253753316 _____ () C:\Users\Nanda\Documents~Nightcore~ Rock Compilation #5 SPECIAL EDITION (HD).mp4

2014-02-23 13:14 - 2014-02-23 13:14 - 26250033 _____ () C:\Users\Nanda\Documents\Nightcore- End of all Hope.mp4

2014-02-23 13:12 - 2014-02-23 13:12 - 23919946 _____ () C:\Users\Nanda\Documents\Nightcore - In the Middle of the Night.mp4

2014-02-23 13:08 - 2014-02-23 13:08 - 28941711 _____ () C:\Users\Nanda\Documents\Nightcore- Amaranth.mp4

2014-02-23 13:01 - 2014-02-23 13:01 - 20532539 _____ () C:\Users\Nanda\Documents\Nightcore- Whispers in the Dark.mp4

2014-02-21 09:39 - 2014-02-19 17:18 - 00110056 _____ () C:\Users\Nanda\AppData\Local\GDIPFONTCACHEV1.DAT

2014-02-21 09:39 - 2014-02-19 17:16 - 00413680 _____ () C:\Windows\system32\FNTCACHE.DAT

2014-02-20 19:34 - 2014-02-20 19:34 - 00000000 ____D () C:\Program Files\Microsoft IntelliPoint

2014-02-20 19:29 - 2014-02-20 19:29 - 00000000 ____D () C:\Users\Nanda\AppData\Roaming\Logitech

2014-02-20 19:29 - 2014-02-20 19:29 - 00000000 ____D () C:\Users\Nanda\AppData\Roaming\Logishrd

2014-02-20 19:02 - 2012-09-28 19:03 - 00003002 _____ () C:\Users\Nanda\Desktop\vba2.ini

2014-02-19 17:16 - 2014-02-19 17:16 - 00000000 _____ () C:\Windows\setuperr.log

2014-02-18 18:46 - 2013-11-23 14:23 - 00000000 ____D () C:\Users\Nanda\Desktop\gyyfc

2014-02-17 18:50 - 2013-07-19 18:10 - 00000000 ____D () C:\Windows\system32\MRT

2014-02-17 18:42 - 2011-11-21 13:20 - 85946576 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe

2014-02-16 02:30 - 2014-02-16 02:30 - 31885137 _____ () C:\Users\Nanda\Documents\_Onward_ - Pantheon's Theme.mp4

2014-02-16 02:30 - 2014-02-16 02:30 - 18256547 _____ () C:\Users\Nanda\Documents\LoL - Music for playing as ... Annie.mp4

2014-02-13 19:44 - 2009-07-14 02:37 - 00000000 ____D () C:\Windows\Microsoft.NET

2014-02-09 20:45 - 2014-02-09 18:15 - 00000000 ____D () C:\Program Files\Battle for Wesnoth 1.10.7

2014-02-07 19:08 - 2014-02-07 19:08 - 00000000 ____D () C:\Users\Nanda\Desktop\PokeMMO-Client

2014-02-06 10:38 - 2014-02-12 23:26 - 17103872 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll

2014-02-06 10:20 - 2014-02-12 23:27 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb

2014-02-06 10:19 - 2014-02-12 23:27 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll

2014-02-06 10:01 - 2014-02-12 23:27 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll

2014-02-06 10:00 - 2014-02-12 23:27 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll

2014-02-06 09:57 - 2014-02-12 23:27 - 02168320 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll

2014-02-06 09:52 - 2014-02-12 23:27 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll

2014-02-06 09:52 - 2014-02-12 23:27 - 00032768 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll

2014-02-06 09:49 - 2014-02-12 23:27 - 00440832 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll

2014-02-06 09:47 - 2014-02-12 23:27 - 00112128 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe

2014-02-06 09:47 - 2014-02-12 23:27 - 00108032 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe

2014-02-06 09:46 - 2014-02-12 23:27 - 00553472 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll

2014-02-06 09:34 - 2014-02-12 23:27 - 00208896 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe

2014-02-06 09:25 - 2014-02-12 23:27 - 00164864 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll

2014-02-06 09:25 - 2014-02-12 23:26 - 04244480 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll

2014-02-06 09:13 - 2014-02-12 23:27 - 00524288 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll

2014-02-06 09:09 - 2014-02-12 23:27 - 01964032 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl

2014-02-06 09:03 - 2014-02-12 23:27 - 11266048 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll

2014-02-06 08:41 - 2014-02-12 23:27 - 01820160 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll

2014-02-06 08:36 - 2014-02-12 23:27 - 01156096 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll

2014-02-06 08:34 - 2014-02-12 23:27 - 00703488 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll

2014-02-05 17:43 - 2012-12-14 19:51 - 00000000 ____D () C:\Users\Nanda\Desktop\minecraft

2014-02-03 18:15 - 2014-02-03 18:14 - 00005163 _____ () C:\Windows\system32\jupdate-1.7.0_51-b13.log

2014-02-03 18:15 - 2013-11-05 00:21 - 00000000 ____D () C:\ProgramData\Oracle

2014-02-03 18:15 - 2013-07-01 14:30 - 00000000 ____D () C:\Program Files\Java

Files to move or delete:

====================

C:\Users\Nanda\1.dat

Some content of TEMP:

====================

C:\Users\Nanda\AppData\Local\Temp\IntelDev.exe

C:\Users\Nanda\AppData\Local\Temp\SkypeSetup.exe

===========
Esta resposta foi útil?

0 comentários Sem comentários
Anônima

2014-03-04T22:25:06+00:00

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 04-03-2014 02

Ran by Nanda (administrator) on NANDA-PC on 04-03-2014 22:16:27

Running from C:\Users\Nanda\Desktop\Downloads

Microsoft Windows 7 Professional Service Pack 1 (X86) OS Language: Portuguese Standard

Internet Explorer Version 11

Boot Mode: Normal

The only official download link for FRST:

Download link for 32-Bit version: http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/81/

Download link for 64-Bit Version: http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/82/

Download link from any site other than Bleeping Computer is unpermitted or outdated.

See tutorial for FRST: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(Microsoft Corporation) c:\Program Files\Microsoft Security Client\MsMpEng.exe

(AMD) C:\Windows\system32\atiesrxx.exe

(AMD) C:\Windows\system32\atieclxx.exe

(Malwarebytes Corporation) C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe

(Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe

() C:\Windows\system32\PnkBstrA.exe

(Advanced Micro Devices Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe

(TuneUp Software) C:\Program Files\TuneUp Utilities 2013\TuneUpUtilitiesService32.exe

(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE

(Conexant Systems, Inc.) C:\Windows\system32\DRIVERS\xaudio.exe

(TuneUp Software) C:\Program Files\TuneUp Utilities 2013\TuneUpUtilitiesApp32.exe

(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe

(Oracle Corporation) C:\Program Files\Java\jre7\bin\javaw.exe

(ATI Technologies Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe

(Microsoft Corporation) C:\Windows\Microsoft.Net\Framework\v3.0\WPF\PresentationFontCache.exe

(Advanced Micro Devices, Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MMLoadDrv.exe

(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe

() C:\Users\Nanda\AppData\Roaming\f4061\e83a1.exe

(Ballistics Networking Pty Ltd.) C:\Users\Nanda\AppData\Local\Temp\1505850852.exe

(TuneUp Software) C:\Program Files\TuneUp Utilities 2013\Integrator.exe

(Microsoft Corporation) C:\Windows\system32\taskmgr.exe

==================== Registry (Whitelisted) ==================

HKLM...\Run: [MSC] - c:\Program Files\Microsoft Security Client\msseces.exe [948440 2013-10-23] (Microsoft Corporation)

HKLM...\Run: [StartCCC] - C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [641704 2012-11-16] (Advanced Micro Devices, Inc.)

HKLM...\Run: [AMD AVT] - C:\Program Files\AMD AVT\bin\kdbsync.exe [20992 2012-03-19] ()

HKLM...\Run: [IntelliPoint] - c:\Program Files\Microsoft IntelliPoint\ipoint.exe [1821576 2011-08-01] (Microsoft Corporation)

HKLM...\Policies\Explorer: [HideSCAHealth] 1

HKU.DEFAULT...\RunOnce: [SPReview] - C:\Windows\System32\SPReview\SPReview.exe [280576 2012-01-11] (Microsoft Corporation)

HKU\S-1-5-21-3983158026-637607574-1965650666-1001...\Run: [Steam] - C:\Program Files\Steam\steam.exe [1823424 2014-03-04] (Valve Corporation)

HKU\S-1-5-21-3983158026-637607574-1965650666-1001...\Run: [Microsoft Interface Controller] - C:\GPU_UPDATE\MSController.exe [8704 2013-10-13] ()

HKU\S-1-5-21-3983158026-637607574-1965650666-1001...\Run: [DAEMON Tools Lite] - C:\Program Files\DAEMON Tools Lite\DTLite.exe [3675352 2013-10-28] (Disc Soft Ltd)

HKU\S-1-5-21-3983158026-637607574-1965650666-1001...\Run: [jawaw] - "C:\Program Files\Java\jre7\bin\javaw.exe" -jar "C:\Users\Nanda\AppData\Roaming\jawaw.jar"

HKU\S-1-5-21-3983158026-637607574-1965650666-1001...\RunOnce: [jawawv] - C:\Users\Nanda\AppData\Local\Temp\1505850852.exe [386048 2014-03-04] (Ballistics Networking Pty Ltd.)

IFEO\cfosspeed.exe: [Debugger] "C:\Program Files\TuneUp Utilities 2013\TUAutoReactivator32.exe"

IFEO\hamachi-2-ui.exe: [Debugger] "C:\Program Files\TuneUp Utilities 2013\TUAutoReactivator32.exe"

Startup: C:\Users\Nanda\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\1636746858.exe ()

Startup: C:\Users\Nanda\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\2026459690.exe ()

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = http://pt.msn.com/?ocid=iehp

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0x4830BF7449A8CC01

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = pt

HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank

URLSearchHook: HKLM - (No Name) - {e7cb019e-bf3b-4c48-9673-48c323b18e31} - No File

URLSearchHook: ATTENTION ==> Default URLSearchHook is missing.

SearchScopes: HKLM - DefaultScope value is missing.

SearchScopes: HKCU - ToolbarSearchProviderProgress {96bd48dd-741b-41ae-ac4a-aff96ba00f7e}

SearchScopes: HKCU - {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}&ie={inputEncoding}&oe={outputEncoding}&startIndex={startIndex?}&startPage={startPage}

BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)

BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)

BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)

Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)

Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt

Tcpip..\Interfaces{DE0EF1BE-2845-405A-A52A-BF53F04EA5B1}: [NameServer]192.168.1.254,192.168.1.254

FireFox:

========

FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF32_11_7_700_224.dll ()

FF Plugin: @java.com/DTPlugin,version=10.51.2 - C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)

FF Plugin: @java.com/JavaPlugin,version=10.51.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)

FF Plugin: @microsoft.com/GENUINE - disabled No File

FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)

FF Plugin: @microsoft.com/WLPG,version=16.4.3505.0912 - C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)

FF Plugin: @pandonetworks.com/PandoWebPlugin - C:\Program Files\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)

FF Plugin: @tools.google.com/Google Update;version=3 - C:\Program Files\Google\Update\1.3.22.5\npGoogleUpdate3.dll (Google Inc.)

FF Plugin: @tools.google.com/Google Update;version=9 - C:\Program Files\Google\Update\1.3.22.5\npGoogleUpdate3.dll (Google Inc.)

FF Plugin: Adobe Reader - C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)

FF Plugin HKCU: @lightspark.github.com/Lightspark;version=1 - C:\Program Files\Lightspark 0.5.3-git\nplightsparkplugin.dll ( )

FF Plugin HKCU: @unity3d.com/UnityPlayer,version=1.0 - C:\Users\Nanda\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)

FF Plugin HKCU: pandonetworks.com/PandoWebPlugin - C:\Program Files\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)

Chrome:

=======

CHR HomePage: hxxp://home.sweetim.com/?crg=3.26010003&st=12&barid={5EBD3937-061E-4EFA-B3D9-57140C357286}

CHR Extension: (Google Docs) - C:\Users\Nanda\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-03-02]

CHR Extension: (Google Drive) - C:\Users\Nanda\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-03-02]

CHR Extension: (YouTube) - C:\Users\Nanda\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2011-12-13]

CHR Extension: (Pesquisa do Google) - C:\Users\Nanda\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-03-02]

CHR Extension: (Desprotetor de Links) - C:\Users\Nanda\AppData\Local\Google\Chrome\User Data\Default\Extensions\imcbnnnoghiihopefblgehihofbfbmei [2014-03-04]

CHR Extension: (9GAG Mini) - C:\Users\Nanda\AppData\Local\Google\Chrome\User Data\Default\Extensions\inmkmihphgjhmeabggdcokmkjhbnmdml [2014-03-04]

CHR Extension: (Grepolis) - C:\Users\Nanda\AppData\Local\Google\Chrome\User Data\Default\Extensions\kkgkognjknhcgbgbeijjondlikfkgnog [2014-03-04]

CHR Extension: (Google Wallet) - C:\Users\Nanda\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-08-24]

CHR Extension: (Gmail) - C:\Users\Nanda\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-03-02]

========================== Services (Whitelisted) =================

S4 cFosSpeedS; C:\Program Files\cFosSpeed\spd.exe [380328 2012-07-02] (cFos Software GmbH)

S4 Hamachi2Svc; C:\Program Files\LogMeIn Hamachi\hamachi-2.exe [1440080 2013-06-28] (LogMeIn Inc.)

R2 MBAMScheduler; C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation)

S2 MBAMService; C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation)

R2 MsMpSvc; c:\Program Files\Microsoft Security Client\MsMpEng.exe [22208 2013-10-23] (Microsoft Corporation)

S3 NisSrv; c:\Program Files\Microsoft Security Client\NisSrv.exe [280288 2013-10-23] (Microsoft Corporation)

R2 PnkBstrA; C:\Windows\system32\PnkBstrA.exe [76888 2013-10-12] ()

R2 TuneUp.UtilitiesSvc; C:\Program Files\TuneUp Utilities 2013\TuneUpUtilitiesService32.exe [1699680 2012-09-17] (TuneUp Software)

==================== Drivers (Whitelisted) ====================

R1 cFosSpeed; C:\Windows\System32\DRIVERS\cfosspeed6.sys [975272 2012-07-02] (cFos Software GmbH)

R3 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [243128 2013-11-03] (Disc Soft Ltd)

S3 hamachi; C:\Windows\System32\DRIVERS\hamachi.sys [26176 2009-03-18] (LogMeIn, Inc.)

R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [22856 2013-04-04] (Malwarebytes Corporation)

R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [214696 2013-09-27] (Microsoft Corporation)

R0 sptd; C:\Windows\System32\Drivers\sptd.sys [324096 2013-11-03] (Duplex Secure Ltd.)

R3 TuneUpUtilitiesDrv; C:\Program Files\TuneUp Utilities 2013\TuneUpUtilitiesDriver32.sys [10088 2012-08-29] (TuneUp Software)

U3 agmng3wt; C:\Windows\system32\Drivers\agmng3wt.sys [0 ] (Advanced Micro Devices)

S3 EagleXNt; ??\C:\Windows\system32\drivers\EagleXNt.sys [X]

U5 UnlockerDriver5; C:\Program Files\Unlocker\UnlockerDriver5.sys [4096 2010-07-04] ()

S3 WinRing0_1_2_0; ??\C:\Program Files\IObit\Game Booster 3\Driver\WinRing0.sys [X]

S3 XDva401; ??\C:\Windows\system32\XDva401.sys [X]

==================== NetSvcs (Whitelisted) ===================

==================== One Month Created Files and Folders ========

2014-03-04 22:14 - 2014-03-04 22:16 - 00000000 ____D () C:\FRST

2014-03-04 10:48 - 2014-03-04 21:53 - 00000994 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job

2014-03-04 10:48 - 2014-03-04 10:53 - 00000990 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job

2014-03-04 10:21 - 2014-03-04 14:01 - 02435072 _____ (Microsoft Corporation) C:\Users\Nanda\AppData\Roaming\Adlock.exe

2014-03-02 21:51 - 2014-03-02 21:51 - 00000000 ____D () C:\Windows\ERUNT

2014-03-02 19:47 - 2014-03-02 19:16 - 00024064 _____ () C:\Windows\zoek-delete.exe

2014-03-02 19:21 - 2014-03-02 19:49 - 00030470 _____ () C:\zoek-results.log

2014-03-02 19:16 - 2014-03-02 19:43 - 00000000 ____D () C:\zoek_backup

2014-03-02 18:24 - 2014-03-02 18:34 - 00000000 ____D () C:\AdwCleaner

2014-03-02 14:51 - 2014-03-03 20:28 - 00000000 ____D () C:\Users\Nanda\AppData\Roaming\ZHP

2014-03-02 14:51 - 2014-03-03 17:44 - 00000000 ____D () C:\Program Files\ZHPDiag

2014-02-25 18:41 - 2014-01-09 02:22 - 05694464 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll

2014-02-23 13:41 - 2014-02-23 13:42 - 404484926 _____ () C:\Users\Nanda\Documents\Nightcore - Rock Mix #4.mp4

2014-02-23 13:30 - 2014-02-23 13:31 - 253753316 _____ () C:\Users\Nanda\Documents~Nightcore~ Rock Compilation #5 SPECIAL EDITION (HD).mp4

2014-02-23 13:14 - 2014-02-23 13:14 - 26250033 _____ () C:\Users\Nanda\Documents\Nightcore- End of all Hope.mp4

2014-02-23 13:12 - 2014-02-23 13:12 - 23919946 _____ () C:\Users\Nanda\Documents\Nightcore - In the Middle of the Night.mp4

2014-02-23 13:08 - 2014-02-23 13:08 - 28941711 _____ () C:\Users\Nanda\Documents\Nightcore- Amaranth.mp4

2014-02-23 13:01 - 2014-02-23 13:01 - 20532539 _____ () C:\Users\Nanda\Documents\Nightcore- Whispers in the Dark.mp4

2014-02-20 19:34 - 2014-02-20 19:34 - 00000000 ____D () C:\Program Files\Microsoft IntelliPoint

2014-02-20 19:29 - 2014-02-20 19:29 - 00000000 ____D () C:\Users\Nanda\AppData\Roaming\Logitech

2014-02-20 19:29 - 2014-02-20 19:29 - 00000000 ____D () C:\Users\Nanda\AppData\Roaming\Logishrd

2014-02-19 19:20 - 2013-10-02 00:42 - 00049152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\TsUsbFlt.sys

2014-02-19 19:20 - 2013-10-02 00:32 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbRedirectionGroupPolicyControl.exe

2014-02-19 19:20 - 2013-10-02 00:30 - 00014336 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbRedirectionGroupPolicyExtension.dll

2014-02-19 19:20 - 2013-10-02 00:14 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\MsRdpWebAccess.dll

2014-02-19 19:20 - 2013-10-02 00:14 - 00017920 _____ (Microsoft Corporation) C:\Windows\system32\wksprtPS.dll

2014-02-19 19:20 - 2013-10-01 23:58 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\tsgqec.dll

2014-02-19 19:20 - 2013-10-01 23:45 - 00032256 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbGDCoInstaller.dll

2014-02-19 19:20 - 2013-10-01 23:08 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\rdvidcrl.dll

2014-02-19 19:20 - 2013-10-01 23:00 - 00076288 _____ (Microsoft Corporation) C:\Windows\system32\TSWbPrxy.exe

2014-02-19 19:20 - 2013-10-01 22:53 - 00350208 _____ (Microsoft Corporation) C:\Windows\system32\wksprt.exe

2014-02-19 19:20 - 2013-10-01 22:34 - 01068544 _____ (Microsoft Corporation) C:\Windows\system32\mstsc.exe

2014-02-19 19:17 - 2013-09-25 01:57 - 00792576 _____ (Microsoft Corporation) C:\Windows\system32\TSWorkspace.dll

2014-02-19 17:18 - 2014-02-21 09:39 - 00110056 _____ () C:\Users\Nanda\AppData\Local\GDIPFONTCACHEV1.DAT

2014-02-19 17:16 - 2014-03-04 10:19 - 00005836 _____ () C:\Windows\PFRO.log

2014-02-19 17:16 - 2014-03-04 10:19 - 00002310 _____ () C:\Windows\setupact.log

2014-02-19 17:16 - 2014-02-21 09:39 - 00413680 _____ () C:\Windows\system32\FNTCACHE.DAT

2014-02-19 17:16 - 2014-02-19 17:16 - 00000000 _____ () C:\Windows\setuperr.log

2014-02-16 02:30 - 2014-02-16 02:30 - 31885137 _____ () C:\Users\Nanda\Documents\_Onward_ - Pantheon's Theme.mp4

2014-02-16 02:30 - 2014-02-16 02:30 - 18256547 _____ () C:\Users\Nanda\Documents\LoL - Music for playing as ... Annie.mp4

2014-02-12 23:27 - 2014-02-06 10:20 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb

2014-02-12 23:27 - 2014-02-06 10:19 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll

2014-02-12 23:27 - 2014-02-06 10:01 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll

2014-02-12 23:27 - 2014-02-06 10:00 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll

2014-02-12 23:27 - 2014-02-06 09:57 - 02168320 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll

2014-02-12 23:27 - 2014-02-06 09:52 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll

2014-02-12 23:27 - 2014-02-06 09:52 - 00032768 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll

2014-02-12 23:27 - 2014-02-06 09:49 - 00440832 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll

2014-02-12 23:27 - 2014-02-06 09:47 - 00112128 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe

2014-02-12 23:27 - 2014-02-06 09:47 - 00108032 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe

2014-02-12 23:27 - 2014-02-06 09:46 - 00553472 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll

2014-02-12 23:27 - 2014-02-06 09:34 - 00208896 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe

2014-02-12 23:27 - 2014-02-06 09:25 - 00164864 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll

2014-02-12 23:27 - 2014-02-06 09:13 - 00524288 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll

2014-02-12 23:27 - 2014-02-06 09:09 - 01964032 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl

2014-02-12 23:27 - 2014-02-06 09:03 - 11266048 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll

2014-02-12 23:27 - 2014-02-06 08:41 - 01820160 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll

2014-02-12 23:27 - 2014-02-06 08:36 - 01156096 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll

2014-02-12 23:27 - 2014-02-06 08:34 - 00703488 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll

2014-02-12 23:26 - 2014-02-06 10:38 - 17103872 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll

2014-02-12 23:26 - 2014-02-06 09:25 - 04244480 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll

2014-02-12 23:24 - 2013-12-21 08:56 - 00454656 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll

2014-02-12 21:18 - 2013-12-31 23:05 - 00420008 _____ () C:\Windows\system32\locale.nls

2014-02-12 21:18 - 2013-12-06 02:02 - 01237504 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll

2014-02-12 21:18 - 2013-12-06 02:02 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll

2014-02-12 21:17 - 2013-12-24 23:09 - 01987584 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll

2014-02-12 21:17 - 2013-12-04 02:03 - 00428032 _____ (Microsoft Corporation) C:\Windows\system32\secproc.dll

2014-02-12 21:17 - 2013-12-04 02:03 - 00423936 _____ (Microsoft Corporation) C:\Windows\system32\secproc_isv.dll

2014-02-12 21:17 - 2013-12-04 02:03 - 00087040 _____ (Microsoft Corporation) C:\Windows\system32\secproc_ssp_isv.dll

2014-02-12 21:17 - 2013-12-04 02:03 - 00087040 _____ (Microsoft Corporation) C:\Windows\system32\secproc_ssp.dll

2014-02-12 21:17 - 2013-12-04 02:02 - 00390144 _____ (Microsoft Corporation) C:\Windows\system32\msdrm.dll

2014-02-12 21:17 - 2013-12-04 01:54 - 00594944 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_isv.exe

2014-02-12 21:17 - 2013-12-04 01:54 - 00572416 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate.exe

2014-02-12 21:17 - 2013-12-04 01:54 - 00510976 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_ssp.exe

2014-02-12 21:17 - 2013-12-04 01:54 - 00508928 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_ssp_isv.exe

2014-02-12 21:17 - 2013-11-26 08:16 - 03419136 _____ (Microsoft Corporation) C:\Windows\system32\d2d1.dll

2014-02-09 18:15 - 2014-02-09 20:45 - 00000000 ____D () C:\Program Files\Battle for Wesnoth 1.10.7

2014-02-07 19:08 - 2014-02-07 19:08 - 00000000 ____D () C:\Users\Nanda\Desktop\PokeMMO-Client

2014-02-03 18:15 - 2013-12-18 21:10 - 00094632 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge.dll

2014-02-03 18:15 - 2013-12-18 21:04 - 00264616 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe

2014-02-03 18:15 - 2013-12-18 21:04 - 00175016 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe

2014-02-03 18:15 - 2013-12-18 21:03 - 00174504 _____ (Oracle Corporation) C:\Windows\system32\java.exe

2014-02-03 18:14 - 2014-02-03 18:15 - 00005163 _____ () C:\Windows\system32\jupdate-1.7.0_51-b13.log
Esta resposta foi útil?

0 comentários Sem comentários