Hi man here's what you requested.
Diagnostic Report (1.9.0027.0):
-----------------------------------------
Windows Validation Data-->
Validation Code: 0
Cached Online Validation Code: 0x0
Windows Product Key: *****-*****-Q6MMK-KYK6X-VKM6G
Windows Product Key Hash: 289NoAWl2ZoVfuieux/315WkDIc=
Windows Product ID: 00426-OEM-8992662-00173
Windows Product ID Type: 2
Windows License Type: OEM SLP
Windows OS version: 6.1.7601.2.00010100.1.0.001
ID: {7AEE7267-2691-4CDE-97C7-4A729404110B}(3)
Is Admin: Yes
TestCab: 0x0
LegitcheckControl ActiveX: N/A, hr = 0x80070002
Signed By: N/A, hr = 0x80070002
Product Name: Windows 7 Ultimate
Architecture: 0x00000000
Build lab: 7601.win7sp1_gdr.150722-0600
TTS Error:
Validation Diagnostic:
Resolution Status: N/A
Vista WgaER Data-->
ThreatID(s): N/A, hr = 0x80070002
Version: N/A, hr = 0x80070002
Windows XP Notifications Data-->
Cached Result: N/A, hr = 0x80070002
File Exists: No
Version: N/A, hr = 0x80070002
WgaTray.exe Signed By: N/A, hr = 0x80070002
WgaLogon.dll Signed By: N/A, hr = 0x80070002
OGA Notifications Data-->
Cached Result: N/A, hr = 0x80070002
Version: N/A, hr = 0x80070002
OGAExec.exe Signed By: N/A, hr = 0x80070002
OGAAddin.dll Signed By: N/A, hr = 0x80070002
OGA Data-->
Office Status: 109 N/A
OGA Version: N/A, 0x80070002
Signed By: N/A, hr = 0x80070002
Office Diagnostics: 025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3
Browser Data-->
Proxy settings: N/A
User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
Default Browser: C:\Program Files\Mozilla Firefox\firefox.exe
Download signed ActiveX controls: Prompt
Download unsigned ActiveX controls: Disabled
Run ActiveX controls and plug-ins: Allowed
Initialize and script ActiveX controls not marked as safe: Disabled
Allow scripting of Internet Explorer Webbrowser control: Disabled
Active scripting: Allowed
Script ActiveX controls marked as safe for scripting: Allowed
File Scan Data-->
Other data-->
Office Details: <GenuineResults><MachineData><UGUID>{7AEE7267-2691-4CDE-97C7-4A729404110B}</UGUID><Version>1.9.0027.0</Version><OS>6.1.7601.2.00010100.1.0.001</OS><Architecture>x32</Architecture><PKey>*****-*****-*****-*****-VKM6G</PKey><PID>00426-OEM-8992662-00173</PID><PIDType>2</PIDType><SID>S-1-5-21-3007010704-1703236571-3604729562</SID><SYSTEM><Manufacturer>System manufacturer</Manufacturer><Model>System Product Name</Model></SYSTEM><BIOS><Manufacturer>American Megatrends Inc.</Manufacturer><Version>0204 </Version><SMBIOSVersion major="2" minor="5"/><Date>20091221000000.000000+000</Date></BIOS><HWID>AE183807018400F8</HWID><UserLCID>0816</UserLCID><SystemLCID>0816</SystemLCID><TimeZone>Hora padrão de GMT(GMT+00:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM><OEMID>_ASUS_</OEMID><OEMTableID>Notebook</OEMTableID></OEM><GANotification/></MachineData><Software><Office><Result>109</Result><Products/><Applications/></Office></Software></GenuineResults>
Spsys.log Content: 0x80070002
Licensing Data-->
Versão do serviço de licenciamento de software: 6.1.7601.17514
Nome: Windows(R) 7, Ultimate edition
Descrição: Windows Operating System - Windows(R) 7, OEM_SLP channel
ID da Activação: 7cfd4696-69a9-4af7-af36-ff3d12b6b6c8
ID da Aplicação: 55c92734-d682-4d71-983e-d6ec3f16059f
PID Expandido: 00426-00178-926-600173-02-2070-7601.0000-1832014
ID da Instalação: 003281053823091166737455359195383552925176669583688440
URL de Certificado do Processador:
http://go.microsoft.com/fwlink/?LinkID=88338URL de Certificado do Computador:
http://go.microsoft.com/fwlink/?LinkID=88339URL da Licença de Utilização:
http://go.microsoft.com/fwlink/?LinkID=88341URL de Certificado da Chave do Produto:
http://go.microsoft.com/fwlink/?LinkID=88340Chave de Produto Parcial: VKM6G
Estado da Licença: Licenciado
Contagem de rearmamentos restantes do Windows: 1
Hora fidedigna: 04-09-2015 19:54:10
Windows Activation Technologies-->
HrOffline: 0x00000000
HrOnline: 0x00000000
HealthStatus: 0x0000000000000000
Event Time Stamp: 6:28:2015 13:38
ActiveX: Registered, Version: 7.1.7600.16395
Admin Service: Registered, Version: 7.1.7600.16395
HealthStatus Bitmask Output:
HWID Data-->
HWID Hash Current: MgAAAAIABAABAAEAAAABAAAAAQABAAEA6GFWvXTldxaqdkjkHh1a/8RIane8M/hdRso=
OEM Activation 1.0 Data-->
N/A
OEM Activation 2.0 Data-->
BIOS valid for OA 2.0: yes
Windows marker version: 0x20001
OEMID and OEMTableID Consistent: yes
BIOS Information:
ACPI Table Name OEMID Value OEMTableID Value
APIC A_M_I_ OEMAPIC
FACP A_M_I_ OEMFACP
HPET A_M_I_ OEMHPET
MCFG A_M_I_ OEMMCFG
OEMB A_M_I_ AMI_OEM
GSCI A_M_I_ GMCHSCI
SSDT DpgPmm CpuPm
SLIC _ASUS_ Notebook
-------------------------------------------------------------------------------------------------------------------
Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version:31-08-2015
Ran by Diogo (administrator) on DIOGO-PC (04-09-2015 19:55:56)
Running from C:\Users\Diogo\Desktop
Loaded Profiles: Diogo (Available Profiles: Diogo & Neusa & Rodrigo e Bernardo)
Platform: Microsoft Windows 7 Ultimate Service Pack 1 (X86) Language: Português (Portugal)
Internet Explorer Version 11 (Default browser: FF)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool:
http://www.geekstogo.com/forum/topic/33 ... scan-tool/==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(IObit) C:\Program Files\IObit\Advanced SystemCare 8\ASCService.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(SUPERAntiSpyware.com) C:\Program Files\SUPERAntiSpyware\SASCore.exe
(Microsoft Corporation) C:\Program Files\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe
(Microsoft Corporation) C:\Program Files\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe
(Maxthon) C:\Program Files\Maxthon\Modules\Service\Update\MaxthonUpdateSvc.exe
(Malwarebytes Corporation) C:\Program Files\Malwarebytes Anti-Malware\mbamscheduler.exe
(IObit) C:\Program Files\IObit\Driver Booster\AutoUpdate.exe
(Malwarebytes Corporation) C:\Program Files\Malwarebytes Anti-Malware\mbamservice.exe
(Safer-Networking Ltd.) C:\Program Files\Spybot - Search & Destroy 2\SDUpdSvc.exe
(Safer-Networking Ltd.) C:\Program Files\Spybot - Search & Destroy 2\SDWSCSvc.exe
(Avast Software) C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe
(Malwarebytes Corporation) C:\Program Files\Malwarebytes Anti-Malware\mbam.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\avastui.exe
(Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jusched.exe
(Microsoft Corporation) C:\Windows\System32\wbem\unsecapp.exe
(TeamSpeak Systems GmbH) C:\Program Files\TeamSpeak 3 Client\ts3client_win32.exe
(Maxthon International ltd.) C:\Program Files\Maxthon\Bin\Maxthon.exe
(Maxthon International ltd.) C:\Program Files\Maxthon\Bin\Maxthon.exe
(Maxthon International ltd.) C:\Program Files\Maxthon\Bin\Maxthon.exe
(Maxthon International ltd.) C:\Program Files\Maxthon\Bin\Maxthon.exe
(Microsoft Corporation) C:\Windows\System32\Wat\WatAdminSvc.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
==================== Registry (Whitelisted) ===========================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [6111824 2015-08-25] (AVAST Software)
HKLM\...\Run: [XMouseButtonControl] => C:\Program Files\Highresolution Enterprises\X-Mouse Button Control\XMouseButtonControl.exe [820208 2015-08-10] (Highresolution Enterprises)
HKLM\...\Run: [SDTray] => C:\Program Files\Spybot - Search & Destroy 2\SDTray.exe [4101576 2014-06-24] (Safer-Networking Ltd.)
HKLM\...\Run: [SunJavaUpdateSched] => C:\Program Files\Common Files\Java\Java Update\jusched.exe [597552 2015-08-04] (Oracle Corporation)
HKLM\...\Winlogon: [Userinit] C:\Windows\system32\userinit.exe,userinit.exe,
Winlogon\Notify\SDWinLogon: SDWinLogon.dll [X]
HKU\S-1-5-21-3007010704-1703236571-3604729562-1001\...\Run: [Gyazo] => C:\Program Files\Gyazo\GyStation.exe [3098424 2015-08-19] (Nota Inc.)
HKU\S-1-5-21-3007010704-1703236571-3604729562-1001\...\Run: [OscarX7Mouse5Mode] => C:\Program Files\OscarX7Editor5Mode\OscarX7Editor5Mode\OscarEditor.exe [3571712 2013-02-01] ()
HKU\S-1-5-21-3007010704-1703236571-3604729562-1001\...\Run: [SUPERAntiSpyware] => C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe [6815512 2015-07-30] (SUPERAntiSpyware)
HKU\S-1-5-21-3007010704-1703236571-3604729562-1001\...\Run: [SpybotPostWindows10UpgradeReInstall] => C:\Program Files\Common Files\AV\Spybot - Search and Destroy\Test.exe [1011200 2015-07-28] (Safer-Networking Ltd.)
HKU\S-1-5-18\...\Run: [Advanced SystemCare 8] => C:\Program Files\IObit\Advanced SystemCare 8\ASCTray.exe [2427680 2014-12-10] (IObit)
HKU\S-1-5-18\...\RunOnce: [SPReview] => C:\Windows\System32\SPReview\SPReview.exe [280576 2013-10-07] (Microsoft Corporation)
ShellIconOverlayIdentifiers: [ AccExtIco1] -> {AB9CF9F8-8A96-4F9D-BF21-CE85714C3A47} => C:\Program Files\Adobe\Adobe Creative Cloud\CoreSync\CoreSync_x86.dll [2014-05-23] ()
ShellIconOverlayIdentifiers: [ AccExtIco2] -> {853B7E05-C47D-4985-909A-D0DC5C6D7303} => C:\Program Files\Adobe\Adobe Creative Cloud\CoreSync\CoreSync_x86.dll [2014-05-23] ()
ShellIconOverlayIdentifiers: [ AccExtIco3] -> {42D38F2E-98E9-4382-B546-E24E4D6D04BB} => C:\Program Files\Adobe\Adobe Creative Cloud\CoreSync\CoreSync_x86.dll [2014-05-23] ()
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll [2015-07-29] (AVAST Software)
ShellIconOverlayIdentifiers: [DropboxExt1] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => No File
ShellIconOverlayIdentifiers: [DropboxExt2] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => No File
ShellIconOverlayIdentifiers: [DropboxExt3] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => No File
ShellIconOverlayIdentifiers: [DropboxExt4] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => No File
BootExecute: autocheck autochk * sdnclean.exe
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
Winsock: Catalog5 07 C:\Program Files\Bonjour\mdnsNSP.dll [121704 2011-08-30] (Apple Inc.)
Tcpip\Parameters: [DhcpNameServer] 213.228.128.156 213.228.128.6
Tcpip\..\Interfaces\{ABF9C699-C76D-4D1F-97D0-56F6369F1F6E}: [NameServer] 8.8.8.8,8.8.4.4
Tcpip\..\Interfaces\{ABF9C699-C76D-4D1F-97D0-56F6369F1F6E}: [DhcpNameServer] 213.228.128.156 213.228.128.6
Internet Explorer:
==================
HKU\S-1-5-21-3007010704-1703236571-3604729562-1001\Software\Microsoft\Internet Explorer\Main,Search Page =
hxxps://www.google.com/search?trackid=sp-006&q={searchTerms}
HKU\S-1-5-21-3007010704-1703236571-3604729562-1001\Software\Microsoft\Internet Explorer\Main,Start Page = google.pt
HKU\S-1-5-21-3007010704-1703236571-3604729562-1001\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache =
hxxp://pt.msn.com/?ocid=iehpHKU\S-1-5-21-3007010704-1703236571-3604729562-1001\Software\Microsoft\Internet Explorer\Main,Search Bar =
hxxps://www.google.com/?trackid=sp-006SearchScopes: HKU\S-1-5-21-3007010704-1703236571-3604729562-1001 -> DefaultScope {E9410C70-B6AE-41FF-AB71-32F4B279EA5F} URL =
hxxps://www.google.com/search?trackid=sp-006&q={searchTerms}
SearchScopes: HKU\S-1-5-21-3007010704-1703236571-3604729562-1001 -> OldSearch URL =
hxxps://www.google.com/search?trackid=sp-006&q={searchTerms}
SearchScopes: HKU\S-1-5-21-3007010704-1703236571-3604729562-1001 -> {012E1000-F331-11DB-8314-0800200C9A66} URL =
hxxp://www.google.com/search?q={searchTerms}
SearchScopes: HKU\S-1-5-21-3007010704-1703236571-3604729562-1001 -> {E9410C70-B6AE-41FF-AB71-32F4B279EA5F} URL =
hxxps://www.google.com/search?trackid=sp-006&q={searchTerms}
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_60\bin\ssv.dll [2015-09-01] (Oracle Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_60\bin\jp2ssv.dll [2015-09-01] (Oracle Corporation)
Handler: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2015-05-01] (Microsoft Corporation)
FireFox:
========
FF ProfilePath: C:\Users\Diogo\AppData\Roaming\Mozilla\Firefox\Profiles\7xmhtwtb.default
FF Homepage: google.pt
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF32_18_0_0_232.dll [2015-08-14] ()
FF Plugin: @adobe.com/ShockwavePlayer -> C:\Windows\system32\Adobe\Director\np32dsw_1218158.dll [2015-04-17] (Adobe Systems, Inc.)
FF Plugin: @Apple.com/iTunes,version=1.0 -> C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll [2014-05-06] ()
FF Plugin: @java.com/DTPlugin,version=11.60.2 -> C:\Program Files\Java\jre1.8.0_60\bin\dtplugin\npDeployJava1.dll [2015-09-01] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.60.2 -> C:\Program Files\Java\jre1.8.0_60\bin\plugin2\npjp2.dll [2015-09-01] (Oracle Corporation)
FF Plugin: @microsoft.com/GENUINE -> disabled [No File]
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.40728.0\npctrl.dll [2015-07-28] ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~3\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~1\MICROS~3\Office14\NPSPWRAP.DLL [2010-03-24] (Microsoft Corporation)
FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.28.1\npGoogleUpdate3.dll [2015-07-15] (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.28.1\npGoogleUpdate3.dll [2015-07-15] (Google Inc.)
FF Plugin: Adobe Reader -> C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2015-06-29] (Adobe Systems Inc.)
FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect32.dll [2014-05-26] (Adobe Systems)
FF Plugin HKU\S-1-5-21-3007010704-1703236571-3604729562-1001: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\Diogo\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll [2015-06-26] (Unity Technologies ApS)
FF HKLM\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: Avast Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2013-10-05]
FF ExtraCheck: C:\Program Files\mozilla firefox\defaults\pref\itms.js [2015-07-06]
FF ExtraCheck: C:\Program Files\mozilla firefox\browser\defaults\preferences\prefs.js [2015-08-23]
Chrome:
=======
CHR dev: Chrome dev build detected! <======= ATTENTION
CHR DefaultSuggestURL: Default -> {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client={google:suggestClient}&gs_ri={google:suggestRid}&xssi=t&q={searchTerms}&{google:inputType}{google:cursorPosition}{google:currentPageUrl}{google:pageClassification}{google:searchVersion}{google:sessionToken}{google:prefetchQuery}sugkey={google:suggestAPIKeyParameter}
CHR Profile: C:\Users\Diogo\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Avast Online Security) - C:\Users\Diogo\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2013-10-05]
CHR Extension: (Skype Click to Call) - C:\Users\Diogo\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl [2015-08-24]
CHR HKLM\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2015-03-17]
CHR HKLM\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files\Skype\Toolbars\ChromeExtension\skype_chrome_extension.crx [2015-05-01]
==================== Services (Whitelisted) ========================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
R2 !SASCORE; C:\Program Files\SUPERAntiSpyware\SASCORE.EXE [142648 2014-07-23] (SUPERAntiSpyware.com)
R2 AdvancedSystemCareService8; C:\Program Files\IObit\Advanced SystemCare 8\ASCService.exe [815392 2014-11-04] (IObit)
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [146600 2015-07-29] (AVAST Software)
R3 AvastVBoxSvc; C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe [3218624 2015-07-13] (Avast Software)
R2 c2cautoupdatesvc; C:\Program Files\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1394816 2015-05-01] (Microsoft Corporation)
R2 c2cpnrsvc; C:\Program Files\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1772672 2015-05-01] (Microsoft Corporation)
R2 MaxthonUpdateSvc; C:\Program Files\Maxthon\Modules\Service\Update\MaxthonUpdateSvc.exe [1871784 2015-08-24] (Maxthon)
R2 MBAMScheduler; C:\Program Files\Malwarebytes Anti-Malware\mbamscheduler.exe [1871160 2015-06-18] (Malwarebytes Corporation)
R2 MBAMService; C:\Program Files\Malwarebytes Anti-Malware\mbamservice.exe [1133880 2015-06-18] (Malwarebytes Corporation)
S3 OverwolfUpdater; C:\Program Files\Overwolf\OverwolfUpdater.exe [1001200 2015-07-19] (Overwolf LTD)
S2 SDScannerService; C:\Program Files\Spybot - Search & Destroy 2\SDFSSvc.exe [1738168 2014-06-24] (Safer-Networking Ltd.)
R2 SDUpdateService; C:\Program Files\Spybot - Search & Destroy 2\SDUpdSvc.exe [2088408 2014-06-27] (Safer-Networking Ltd.)
R2 SDWSCService; C:\Program Files\Spybot - Search & Destroy 2\SDWSCSvc.exe [171928 2014-04-25] (Safer-Networking Ltd.)
===================== Drivers (Whitelisted) ==========================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [24016 2015-07-29] (AVAST Software)
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [76000 2015-07-29] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [81728 2015-07-29] (AVAST Software)
R0 aswRvrt; C:\Windows\system32\Drivers\aswRvrt.sys [49776 2015-07-29] (AVAST Software)
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [788784 2015-07-29] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [433264 2015-07-29] (AVAST Software)
R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [113592 2015-07-29] (AVAST Software)
S3 aswTap; C:\Windows\System32\DRIVERS\aswTap.sys [38984 2014-07-04] (The OpenVPN Project)
R0 aswVmm; C:\Windows\system32\Drivers\aswVmm.sys [208664 2015-07-29] (AVAST Software)
S3 AVEO; C:\Windows\System32\DRIVERS\AVEOdcnt.sys [278528 2011-10-24] (AVEO)
R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [243128 2013-12-08] (Disc Soft Ltd)
R1 HWiNFO32; C:\Windows\system32\drivers\HWiNFO32.SYS [23840 2015-01-07] (REALiX(tm))
R3 KMWDFILTERx86; C:\Windows\System32\DRIVERS\KMWDFILTER.sys [25088 2009-04-29] (Windows (R) Codename Longhorn DDK provider)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [23256 2015-06-18] (Malwarebytes Corporation)
R3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [98520 2015-09-04] (Malwarebytes Corporation)
R3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [51928 2015-06-18] (Malwarebytes Corporation)
R3 MTsensor; C:\Windows\System32\DRIVERS\ASACPI.sys [5810 2004-08-13] ()
R0 ngvss; C:\Windows\system32\Drivers\ngvss.sys [95112 2015-07-29] (AVAST Software)
R1 SASDIFSV; C:\Program Files\SUPERAntiSpyware\SASDIFSV.SYS [12880 2011-07-22] (SUPERAdBlocker.com and SUPERAntiSpyware.com)
R1 SASKUTIL; C:\Program Files\SUPERAntiSpyware\SASKUTIL.SYS [67664 2011-07-12] (SUPERAdBlocker.com and SUPERAntiSpyware.com)
R2 VBoxAswDrv; C:\Program Files\AVAST Software\Avast\ng\vbox\VBoxAswDrv.sys [220752 2015-07-13] (Avast Software)
S3 WinRing0_1_2_0; C:\Program Files\IObit\Game Booster 3\Driver\WinRing0.sys [14416 2010-11-01] (OpenLibSys.org)
S3 Synth3dVsc; System32\drivers\synth3dvsc.sys [X]
S3 tsusbhub; system32\drivers\tsusbhub.sys [X]
S3 VGPU; System32\drivers\rdvgkmd.sys [X]
S3 XDva409; no ImagePath
S3 XDva410; no ImagePath
S3 XDva424; \??\C:\Windows\system32\XDva424.sys [X]
S3 XDva425; \??\C:\Windows\system32\XDva425.sys [X]
S3 XDva511; \??\C:\Windows\system32\XDva511.sys [X]
==================== NetSvcs (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
==================== One Month Created files and folders ========
(If an entry is included in the fixlist, the file/folder will be moved.)
2015-09-02 22:00 - 2015-09-02 22:00 - 00000000 ____D C:\Users\Diogo\AppData\Roaming\Mozilla
2015-09-02 22:00 - 2015-09-02 22:00 - 00000000 ____D C:\Users\Diogo\AppData\Local\Mozilla
2015-09-02 21:59 - 2015-09-02 21:59 - 00001081 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2015-09-02 21:59 - 2015-09-02 21:59 - 00001069 _____ C:\Users\Public\Desktop\Mozilla Firefox.lnk
2015-09-02 21:58 - 2015-09-02 21:58 - 00242912 _____ C:\Users\Diogo\Desktop\Firefox Setup Stub 40.0.3(2).exe
2015-09-02 18:30 - 2015-09-02 18:30 - 00000000 ____D C:\Users\Neusa\.android
2015-09-02 16:11 - 2015-07-28 21:04 - 00015808 _____ (Microsoft Corporation) C:\Windows\system32\CompatTelRunner.exe
2015-09-02 16:11 - 2015-07-28 21:00 - 00952832 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll
2015-09-02 16:11 - 2015-07-28 21:00 - 00635904 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll
2015-09-02 16:11 - 2015-07-28 21:00 - 00598528 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
2015-09-02 16:11 - 2015-07-28 21:00 - 00346112 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll
2015-09-02 16:11 - 2015-07-28 21:00 - 00202752 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2015-09-02 16:11 - 2015-07-28 21:00 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\acmigration.dll
2015-09-02 16:11 - 2015-07-28 20:54 - 00934400 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2015-09-02 15:28 - 2015-09-02 15:28 - 00007186 _____ C:\Users\Diogo\Desktop\Attach(1).txt
2015-09-02 15:26 - 2015-09-02 15:26 - 00022144 _____ C:\Users\Diogo\DDS.txt
2015-09-02 15:26 - 2015-09-02 15:26 - 00007186 _____ C:\Users\Diogo\Desktop\attach.txt
2015-09-02 15:26 - 2015-09-02 15:26 - 00007186 _____ C:\Users\Diogo\Attach.txt
2015-09-02 15:26 - 2015-09-02 15:25 - 00022144 _____ C:\Users\Diogo\Desktop\dds.txt
2015-09-02 15:23 - 2015-09-02 15:23 - 00688992 ____R (Swearware) C:\Users\Diogo\Desktop\dds.scr
2015-09-01 20:51 - 2015-09-01 20:51 - 00000000 ____D C:\Users\Neusa\AppData\Roaming\Sun
2015-09-01 20:51 - 2015-09-01 20:51 - 00000000 ____D C:\Users\Neusa\.oracle_jre_usage
2015-09-01 18:44 - 2015-09-01 18:44 - 00068802 _____ C:\4137c314-ff84-4f83-9561-cf4d1b202cc7.dmp
2015-09-01 18:38 - 2015-09-01 18:38 - 00058074 _____ C:\8ce326d7-06a5-4e14-b7a9-25df20e191e0.dmp
2015-09-01 18:37 - 2015-09-01 18:37 - 00000000 ____D C:\Program Files\Common Files\Java
2015-09-01 18:36 - 2015-09-01 18:37 - 00000000 ____D C:\ProgramData\Oracle
2015-09-01 18:36 - 2015-09-01 18:36 - 00000000 ____D C:\Users\Diogo\AppData\Roaming\Sun
2015-09-01 18:36 - 2015-09-01 18:36 - 00000000 ____D C:\Users\Diogo\.oracle_jre_usage
2015-09-01 18:35 - 2015-09-01 18:35 - 00584288 _____ (Oracle Corporation) C:\Users\Diogo\Downloads\jre-8u60-windows-i586-iftw.exe
2015-09-01 18:19 - 2015-09-01 18:19 - 00584288 _____ (Oracle Corporation) C:\Users\Diogo\Desktop\chromeinstall-8u60.exe
2015-09-01 18:19 - 2015-09-01 18:19 - 00004877 _____ C:\Users\Diogo\Desktop\MGAdiagggg.txt
2015-09-01 18:18 - 2015-09-01 18:18 - 00049728 _____ C:\Users\Diogo\Desktop\Addition_01-09-2015_11-35-58.txt
2015-09-01 18:12 - 2015-09-01 18:12 - 00004877 _____ C:\Users\Diogo\MGAdiagggg.txt
2015-09-01 18:11 - 2015-09-04 19:54 - 00000000 ____D C:\MGADiagToolOutput
2015-09-01 18:10 - 2015-09-01 18:10 - 02031992 _____ (Microsoft Corporation) C:\Users\Diogo\Desktop\MGADiag.exe
2015-09-01 18:10 - 2015-09-01 18:10 - 00000000 ____D C:\ProgramData\Office Genuine Advantage
2015-09-01 11:40 - 2015-09-01 11:40 - 00242912 _____ C:\Users\Diogo\Desktop\Firefox Setup Stub 40.0.3(1).exe
2015-09-01 11:35 - 2015-09-01 11:35 - 00049728 _____ C:\Users\Diogo\Desktop\Addition.txt
2015-09-01 11:34 - 2015-09-04 19:56 - 00016127 _____ C:\Users\Diogo\Desktop\FRST.txt
2015-09-01 11:33 - 2015-09-04 19:55 - 00000000 ____D C:\FRST
2015-09-01 11:33 - 2015-09-01 11:33 - 01690624 _____ (Farbar) C:\Users\Diogo\Desktop\FRST.exe
2015-08-31 20:33 - 2015-08-31 20:33 - 30668968 _____ (Riot Games) C:\Users\Neusa\Downloads\LeagueofLegends_EUW_Installer_9_15_2014(1).exe
2015-08-31 19:00 - 2015-08-31 19:00 - 00000000 ____D C:\Users\Neusa\AppData\Roaming\ProductData
2015-08-31 18:58 - 2015-08-31 18:58 - 00000000 ____D C:\Users\Neusa\AppData\Local\VirtualStore
2015-08-30 20:25 - 2015-09-01 11:41 - 00000000 ____D C:\Program Files\OldFirefox
2015-08-30 20:25 - 2015-08-30 20:25 - 00242912 _____ C:\Users\Diogo\Desktop\Firefox Setup Stub 40.0.3.exe
2015-08-30 20:24 - 2015-08-30 20:24 - 00000000 ____D C:\Users\Diogo\AppData\Roaming\ProductData
2015-08-30 20:22 - 2015-08-30 20:22 - 00000000 ____D C:\ProgramData\ProductData
2015-08-30 20:17 - 2015-08-30 20:17 - 00000000 ____D C:\Users\Diogo\AppData\Local\VirtualStore
2015-08-30 20:04 - 2015-08-30 19:02 - 00024064 _____ C:\Windows\zoek-delete.exe
2015-08-30 19:05 - 2015-08-30 20:20 - 00094752 _____ C:\zoek-results.log
2015-08-30 19:03 - 2015-08-30 20:16 - 00000000 ____D C:\zoek_backup
2015-08-30 19:03 - 2015-08-30 19:03 - 04180806 _____ C:\Users\Diogo\Desktop\zoek.zip
2015-08-30 19:02 - 2015-08-30 19:02 - 01308672 _____ C:\Users\Diogo\Desktop\zoek.exe
2015-08-28 18:19 - 2015-08-28 18:19 - 00774144 _____ C:\Users\Neusa\Downloads\KogamaLauncher (3).msi
2015-08-28 18:18 - 2015-08-28 18:18 - 00774144 _____ C:\Users\Neusa\Downloads\KogamaLauncher (2).msi
2015-08-28 13:16 - 2015-08-28 13:16 - 00000000 ____D C:\Program Files\Common Files\AV
2015-08-28 13:16 - 2015-07-28 17:52 - 00821920 _____ (Safer-Networking Ltd. ) C:\Users\Public\Desktop\Post Win10 Spybot-install.exe
2015-08-28 12:57 - 2015-09-02 16:45 - 00000000 ____D C:\AdwCleaner
2015-08-28 12:55 - 2015-08-28 12:55 - 00000000 ____D C:\SUPERDelete
2015-08-28 12:50 - 2015-08-28 12:50 - 00000000 ____D C:\ProgramData\Kaspersky Lab Setup Files
2015-08-28 12:49 - 2015-08-28 12:49 - 00717656 _____ (Kaspersky Lab) C:\Users\Diogo\Desktop\setup.exe
2015-08-28 12:48 - 2015-08-28 13:16 - 00000000 ____D C:\Program Files\Spybot - Search & Destroy 2
2015-08-28 12:48 - 2015-08-28 12:48 - 00002095 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spybot-S&D Start Center.lnk
2015-08-28 12:48 - 2015-08-28 12:48 - 00002083 _____ C:\Users\Public\Desktop\Spybot-S&D Start Center.lnk
2015-08-28 12:48 - 2015-08-28 12:48 - 00000000 ____D C:\ProgramData\Spybot - Search & Destroy
2015-08-28 12:48 - 2015-08-28 12:48 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spybot - Search & Destroy 2
2015-08-28 12:48 - 2013-09-20 10:49 - 00018968 _____ (Safer Networking Limited) C:\Windows\system32\sdnclean.exe
2015-08-28 12:47 - 2015-08-28 12:47 - 46525608 _____ (Safer-Networking Ltd. ) C:\Users\Diogo\Desktop\spybot-2.4.exe
2015-08-28 12:44 - 2015-08-28 12:44 - 140774152 _____ (Microsoft Corporation) C:\Users\Diogo\Desktop\msert.exe
2015-08-28 12:43 - 2015-09-04 12:43 - 00000510 _____ C:\Windows\Tasks\SUPERAntiSpyware Scheduled Task e97ada84-ce00-4d95-a3ce-b336d0707f80.job
2015-08-28 12:43 - 2015-09-01 02:00 - 00000510 _____ C:\Windows\Tasks\SUPERAntiSpyware Scheduled Task 98d3f2e1-96df-40fb-8258-2e7facba5dfe.job
2015-08-28 12:43 - 2015-08-28 12:43 - 23161872 _____ (SUPERAntiSpyware) C:\Users\Diogo\Desktop\SUPERAntiSpyware.exe
2015-08-28 12:43 - 2015-08-28 12:43 - 00001925 _____ C:\Users\Diogo\Desktop\SUPERAntiSpyware Free Edition.lnk
2015-08-28 12:43 - 2015-08-28 12:43 - 00000000 ____D C:\Users\Diogo\AppData\Roaming\SUPERAntiSpyware.com
2015-08-28 12:43 - 2015-08-28 12:43 - 00000000 ____D C:\Users\Diogo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SUPERAntiSpyware
2015-08-28 12:43 - 2015-08-28 12:43 - 00000000 ____D C:\ProgramData\SUPERAntiSpyware.com
2015-08-28 12:43 - 2015-08-28 12:43 - 00000000 ____D C:\Program Files\SUPERAntiSpyware
2015-08-28 12:42 - 2015-08-28 12:42 - 01618432 _____ C:\Users\Diogo\Desktop\AdwCleaner.exe
2015-08-28 11:49 - 2015-08-28 11:49 - 00000000 ____D C:\Users\Neusa\B969199164D3435B8A8369CC21016936.TMP
2015-08-27 15:03 - 2015-08-27 15:05 - 00000000 ____D C:\Program Files\Mozilla
2015-08-27 15:03 - 2015-08-27 15:03 - 00242760 _____ C:\Users\Diogo\Desktop\Firefox Setup Stub 40.0.2(4).exe
2015-08-27 14:55 - 2015-08-27 15:03 - 00000000 ____D C:\Program Files\OldMozilla
2015-08-26 17:41 - 2015-08-26 17:41 - 00000000 ____D C:\Users\Neusa\AppData\Roaming\Highresolution Enterprises
2015-08-26 12:37 - 2015-08-26 12:37 - 04286768 _____ C:\Users\Diogo\Desktop\XMouseButtonControlSetup.2.11.1.exe
2015-08-26 12:37 - 2015-08-26 12:37 - 00000000 ____D C:\Users\Diogo\AppData\Roaming\Highresolution Enterprises
2015-08-26 12:37 - 2015-08-26 12:37 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Highresolution Enterprises
2015-08-26 12:37 - 2015-08-26 12:37 - 00000000 ____D C:\Program Files\Highresolution Enterprises
2015-08-26 09:02 - 2015-08-26 09:02 - 00001613 _____ C:\Users\Public\Desktop\League of Legends.lnk
2015-08-26 09:02 - 2015-08-26 09:02 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\League of Legends
2015-08-25 13:10 - 2015-09-01 18:42 - 00000000 ____D C:\Users\Diogo\Desktop\Dados antigos do Firefox
2015-08-25 10:06 - 2015-08-25 10:06 - 00000000 ____D C:\Users\Neusa\AppData\Roaming\Maxthon3
2015-08-24 21:07 - 2015-08-24 21:07 - 41944904 _____ C:\Users\Diogo\Downloads\Firefox Setup 40.0.2(2).exe
2015-08-24 18:34 - 2015-08-24 18:34 - 00242760 _____ C:\Users\Diogo\Desktop\Firefox Setup Stub 40.0.2.exe
2015-08-24 15:48 - 2015-08-24 15:48 - 41944904 _____ C:\Users\Diogo\Downloads\Firefox Setup 40.0.2.exe
2015-08-24 15:48 - 2015-08-24 15:48 - 41944904 _____ C:\Users\Diogo\Downloads\Firefox Setup 40.0.2(1).exe
2015-08-24 15:37 - 2015-08-24 15:37 - 09980608 _____ (MEGA Limited) C:\Users\Diogo\Desktop\MEGAsyncSetup.exe
2015-08-24 15:37 - 2015-08-24 15:37 - 00501248 _____ (Haxball ANL v3) C:\Users\Diogo\Desktop\Antilag.exe
2015-08-24 15:12 - 2015-08-24 15:12 - 00001003 _____ C:\Users\Public\Desktop\Maxthon Cloud Browser.lnk
2015-08-24 15:12 - 2015-08-24 15:12 - 00000000 ____D C:\Users\Diogo\AppData\Roaming\Maxthon3
2015-08-24 15:12 - 2015-08-24 15:12 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Maxthon Cloud Browser
2015-08-24 15:11 - 2015-08-24 15:12 - 00000000 ____D C:\Program Files\Maxthon
2015-08-24 15:06 - 2015-08-24 15:06 - 01558792 _____ (Maxthon International ltd.) C:\Users\Diogo\Downloads\mxsetup(1).exe
2015-08-24 14:57 - 2015-08-27 18:03 - 00000000 ____D C:\Program Files\Mozilla Maintenance Service
2015-08-24 14:56 - 2015-08-24 14:56 - 00242760 _____ C:\Users\Diogo\Downloads\Firefox Setup Stub 40.0.2 (1).exe
2015-08-24 12:58 - 2015-08-24 12:58 - 00000000 ____D C:\Users\Diogo\AppData\Local\Apps\2.0
2015-08-24 12:29 - 2015-08-24 12:29 - 00242768 _____ C:\Users\Diogo\Downloads\Firefox Setup Stub 40.0.2.exe
2015-08-24 07:43 - 2015-08-24 07:43 - 00001229 _____ C:\anti.txt
2015-08-23 21:50 - 2015-09-04 11:23 - 00001848 _____ C:\Windows\setupact.log
2015-08-23 21:50 - 2015-09-04 10:04 - 00479516 _____ C:\Windows\PFRO.log
2015-08-23 21:50 - 2015-08-23 21:50 - 00000000 _____ C:\Windows\setuperr.log
2015-08-23 21:27 - 2015-09-04 19:48 - 00098520 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2015-08-23 21:27 - 2015-08-23 21:28 - 00001024 _____ C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2015-08-23 21:27 - 2015-08-23 21:28 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2015-08-23 21:27 - 2015-08-23 21:28 - 00000000 ____D C:\Program Files\Malwarebytes Anti-Malware
2015-08-23 21:27 - 2015-08-23 21:27 - 00000000 ____D C:\ProgramData\Malwarebytes
2015-08-23 21:27 - 2015-06-18 09:48 - 00051928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2015-08-23 21:27 - 2015-06-18 09:47 - 00094936 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2015-08-23 21:27 - 2015-06-18 09:47 - 00023256 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2015-08-23 21:24 - 2015-08-23 21:25 - 21545336 _____ (Malwarebytes Corporation ) C:\Users\Diogo\Downloads\mbam-setup-sem-2.1.6.1022(1).exe
2015-08-23 21:24 - 2015-08-23 21:24 - 21545336 _____ (Malwarebytes Corporation ) C:\Users\Diogo\Downloads\mbam-setup-sem-2.1.6.1022.exe
2015-08-23 20:45 - 2015-08-23 20:45 - 01372160 _____ (Microsoft Corporation) C:\Windows\system32\dwmcore.dll
2015-08-23 20:45 - 2015-08-23 20:45 - 00067584 _____ (Microsoft Corporation) C:\Windows\system32\dwmapi.dll
2015-08-23 20:44 - 2015-08-23 20:44 - 01805824 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll
2015-08-23 20:44 - 2015-08-23 20:44 - 00105408 _____ (Microsoft Corporation) C:\Windows\system32\consent.exe
2015-08-23 20:44 - 2015-08-23 20:44 - 00047104 _____ (Microsoft Corporation) C:\Windows\system32\appinfo.dll
2015-08-23 20:43 - 2015-08-23 20:43 - 03989952 _____ (Microsoft Corporation) C:\Windows\system32\ntkrnlpa.exe
2015-08-23 20:43 - 2015-08-23 20:43 - 03934656 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2015-08-23 20:43 - 2015-08-23 20:43 - 01308160 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2015-08-23 20:43 - 2015-08-23 20:43 - 01061376 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2015-08-23 20:43 - 2015-08-23 20:43 - 00937984 _____ (Microsoft Corporation) C:\Windows\system32\diagtrack.dll
2015-08-23 20:43 - 2015-08-23 20:43 - 00686080 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2015-08-23 20:43 - 2015-08-23 20:43 - 00655360 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2015-08-23 20:43 - 2015-08-23 20:43 - 00641536 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll
2015-08-23 20:43 - 2015-08-23 20:43 - 00635392 _____ (Microsoft Corporation) C:\Windows\system32\tdh.dll
2015-08-23 20:43 - 2015-08-23 20:43 - 00552960 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2015-08-23 20:43 - 2015-08-23 20:43 - 00400896 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll
2015-08-23 20:43 - 2015-08-23 20:43 - 00262656 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe
2015-08-23 20:43 - 2015-08-23 20:43 - 00259584 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2015-08-23 20:43 - 2015-08-23 20:43 - 00248832 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2015-08-23 20:43 - 2015-08-23 20:43 - 00225792 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys
2015-08-23 20:43 - 2015-08-23 20:43 - 00221184 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2015-08-23 20:43 - 2015-08-23 20:43 - 00172032 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2015-08-23 20:43 - 2015-08-23 20:43 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2015-08-23 20:43 - 2015-08-23 20:43 - 00137664 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2015-08-23 20:43 - 2015-08-23 20:43 - 00124416 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys
2015-08-23 20:43 - 2015-08-23 20:43 - 00100352 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2015-08-23 20:43 - 2015-08-23 20:43 - 00098304 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys
2015-08-23 20:43 - 2015-08-23 20:43 - 00069632 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe
2015-08-23 20:43 - 2015-08-23 20:43 - 00067520 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2015-08-23 20:43 - 2015-08-23 20:43 - 00065536 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2015-08-23 20:43 - 2015-08-23 20:43 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll
2015-08-23 20:43 - 2015-08-23 20:43 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe
2015-08-23 20:43 - 2015-08-23 20:43 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll
2015-08-23 20:43 - 2015-08-23 20:43 - 00041984 _____ (Microsoft Corporation) C:\Windows\system32\UtcResources.dll
2015-08-23 20:43 - 2015-08-23 20:43 - 00038912 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll
2015-08-23 20:43 - 2015-08-23 20:43 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\cryptbase.dll
2015-08-23 20:43 - 2015-08-23 20:43 - 00022528 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2015-08-23 20:43 - 2015-08-23 20:43 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2015-08-23 20:43 - 2015-08-23 20:43 - 00017408 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2015-08-23 20:43 - 2015-08-23 20:43 - 00015872 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2015-08-23 20:43 - 2015-08-23 20:43 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll
2015-08-23 20:40 - 2015-08-23 20:40 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2015-08-19 18:06 - 2015-08-11 01:33 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2015-08-19 18:06 - 2015-08-11 01:20 - 19871232 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2015-08-19 09:12 - 2015-08-19 09:12 - 00242760 _____ C:\Users\Neusa\Downloads\Firefox Setup Stub 40.0.2 (1).exe
2015-08-18 20:39 - 2015-08-18 20:40 - 00020705 _____ C:\Users\Neusa\Downloads\Sniper_HaxMaps_1438799084(1).hbs
2015-08-18 20:39 - 2015-08-18 20:39 - 00005058 _____ C:\Users\Neusa\Downloads\Orduspor_HaxMaps_1438815736.hbs
2015-08-18 20:37 - 2015-08-18 20:37 - 00004859 _____ C:\Users\Neusa\Downloads\Volleball_HaxMaps_1439145121.hbs
2015-08-18 20:36 - 2015-08-18 20:36 - 00311402 _____ C:\Users\Neusa\Downloads\NIEZNANY_HaxMaps_1439205579.hbs
2015-08-18 20:36 - 2015-08-18 20:36 - 00009665 _____ C:\Users\Neusa\Downloads\OLD_HaxMaps_1439225996.hbs
2015-08-18 20:25 - 2015-08-18 20:26 - 00242760 _____ C:\Users\Neusa\Downloads\Firefox Setup Stub 40.0.2.exe
2015-08-18 19:15 - 2015-08-19 09:15 - 00000004 _____ C:\Windows\system32\029B560A371F4E00AB32838EBC01B9E7
2015-08-18 18:51 - 2015-08-18 18:51 - 00000000 _____ C:\Windows\prleth.sys
2015-08-18 18:51 - 2015-08-18 18:51 - 00000000 _____ C:\Windows\hgfs.sys
2015-08-15 13:42 - 2015-08-15 13:42 - 00774144 _____ C:\Users\Neusa\Downloads\KogamaLauncher (1).msi
2015-08-13 13:53 - 2015-08-13 13:53 - 00001211 _____ C:\Users\Diogo\Desktop\KogamaLauncher-WWW.lnk
2015-08-13 13:53 - 2015-08-13 13:53 - 00000000 ____D C:\Users\Diogo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\KogamaLauncher-WWW
2015-08-13 13:53 - 2015-08-13 13:53 - 00000000 ____D C:\Users\Diogo\AppData\Local\KogamaLauncher-WWW
2015-08-13 13:52 - 2015-08-13 13:52 - 00774144 _____ C:\Users\Diogo\Downloads\KogamaLauncher.msi
2015-08-13 00:01 - 2015-07-30 14:13 - 00103120 _____ (Microsoft Corporation) C:\Windows\system32\PresentationCFFRasterizerNative_v0300.dll
2015-08-12 20:32 - 2015-08-12 20:32 - 00020705 _____ C:\Users\Neusa\Downloads\Sniper_HaxMaps_1438799084.hbs
2015-08-12 20:32 - 2015-08-12 20:32 - 00008877 _____ C:\Users\Neusa\Downloads\Space_HaxMaps_1438679315.hbs
2015-08-12 20:31 - 2015-08-12 20:31 - 00022663 _____ C:\Users\Neusa\Downloads\FindTheGoal_HaxMaps_1438877473.hbs
2015-08-12 08:35 - 2015-07-20 18:56 - 02943488 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2015-08-12 08:35 - 2015-07-20 18:56 - 02061312 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2015-08-12 08:35 - 2015-07-20 18:56 - 00566784 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2015-08-12 08:35 - 2015-07-20 18:56 - 00173056 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
2015-08-12 08:35 - 2015-07-20 18:56 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2015-08-12 08:35 - 2015-07-20 18:56 - 00093184 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
2015-08-12 08:35 - 2015-07-20 18:56 - 00073728 _____ (Microsoft Corporation) C:\Windows\system32\WinSetupUI.dll
2015-08-12 08:35 - 2015-07-20 18:56 - 00035840 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
2015-08-12 08:35 - 2015-07-20 18:56 - 00034816 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
2015-08-12 08:35 - 2015-07-20 18:56 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
2015-08-12 08:35 - 2015-07-20 18:56 - 00011776 _____ (Microsoft Corporation) C:\Windows\system32\wu.upgrade.ps.dll
2015-08-12 08:34 - 2015-07-30 18:57 - 01987584 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll
2015-08-12 08:34 - 2015-07-30 18:57 - 01251328 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll
2015-08-12 08:34 - 2015-07-30 18:57 - 00909824 _____ (Microsoft Corporation) C:\Windows\system32\FntCache.dll
2015-08-12 08:34 - 2015-07-30 18:57 - 00070656 _____ (Microsoft Corporation) C:\Windows\system32\fontsub.dll
2015-08-12 08:34 - 2015-07-30 18:57 - 00034304 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll
2015-08-12 08:34 - 2015-07-30 18:57 - 00026624 _____ (Microsoft Corporation) C:\Windows\system32\lpk.dll
2015-08-12 08:34 - 2015-07-30 18:57 - 00010240 _____ (Microsoft Corporation) C:\Windows\system32\dciman32.dll
2015-08-12 08:34 - 2015-07-30 17:52 - 02384384 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2015-08-12 08:34 - 2015-07-30 17:49 - 00299520 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll
2015-08-12 08:34 - 2015-07-21 01:12 - 00342736 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2015-08-12 08:34 - 2015-07-16 21:06 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2015-08-12 08:34 - 2015-07-16 20:51 - 00504320 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2015-08-12 08:34 - 2015-07-16 20:51 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2015-08-12 08:34 - 2015-07-16 20:50 - 00341504 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2015-08-12 08:34 - 2015-07-16 20:50 - 00047616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2015-08-12 08:34 - 2015-07-16 20:49 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2015-08-12 08:34 - 2015-07-16 20:45 - 02279424 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2015-08-12 08:34 - 2015-07-16 20:43 - 00047104 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2015-08-12 08:34 - 2015-07-16 20:43 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2015-08-12 08:34 - 2015-07-16 20:41 - 00479232 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2015-08-12 08:34 - 2015-07-16 20:39 - 00664064 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2015-08-12 08:34 - 2015-07-16 20:39 - 00115712 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2015-08-12 08:34 - 2015-07-16 20:39 - 00102912 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2015-08-12 08:34 - 2015-07-16 20:38 - 00620032 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2015-08-12 08:34 - 2015-07-16 20:32 - 00667648 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2015-08-12 08:34 - 2015-07-16 20:29 - 00418304 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2015-08-12 08:34 - 2015-07-16 20:24 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2015-08-12 08:34 - 2015-07-16 20:20 - 00168960 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2015-08-12 08:34 - 2015-07-16 20:19 - 00076288 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2015-08-12 08:34 - 2015-07-16 20:17 - 00285696 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2015-08-12 08:34 - 2015-07-16 20:12 - 04922368 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll
2015-08-12 08:34 - 2015-07-16 20:12 - 04520448 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2015-08-12 08:34 - 2015-07-16 20:12 - 00269824 _____ (Microsoft Corporation) C:\Windows\system32\aaclient.dll
2015-08-12 08:34 - 2015-07-16 20:12 - 00037376 _____ (Microsoft Corporation) C:\Windows\system32\tsgqec.dll
2015-08-12 08:34 - 2015-07-16 20:10 - 12856832 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2015-08-12 08:34 - 2015-07-16 20:06 - 02052608 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2015-08-12 08:34 - 2015-07-16 20:06 - 00689152 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2015-08-12 08:34 - 2015-07-16 20:06 - 00685568 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2015-08-12 08:34 - 2015-07-16 20:05 - 01155072 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2015-08-12 08:34 - 2015-07-16 19:42 - 01951232 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2015-08-12 08:34 - 2015-07-16 19:38 - 01310720 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2015-08-12 08:34 - 2015-07-16 19:37 - 00710144 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2015-08-12 08:34 - 2015-07-15 18:59 - 00078784 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mountmgr.sys
2015-08-12 08:34 - 2015-07-15 18:55 - 01159168 _____ (Microsoft Corporation) C:\Windows\system32\sysmain.dll
2015-08-12 08:34 - 2015-07-15 18:54 - 00010752 _____ (Microsoft Corporation) C:\Windows\system32\msmmsp.dll
2015-08-12 08:34 - 2015-07-15 03:55 - 01390592 _____ (Microsoft Corporation) C:\Windows\system32\msxml6.dll
2015-08-12 08:34 - 2015-07-15 03:55 - 01241088 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
2015-08-12 08:34 - 2015-07-15 03:55 - 00044032 _____ (Microsoft Corporation) C:\Windows\system32\basesrv.dll
2015-08-12 08:34 - 2015-07-15 03:51 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml6r.dll
2015-08-12 08:34 - 2015-07-15 03:51 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll
2015-08-12 08:34 - 2015-07-10 18:34 - 12875776 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2015-08-12 08:34 - 2015-07-09 18:42 - 00179712 _____ (Microsoft Corporation) C:\Windows\system32\notepad.exe
2015-08-12 08:34 - 2015-07-09 18:42 - 00179712 _____ (Microsoft Corporation) C:\Windows\notepad.exe
2015-08-12 08:34 - 2015-07-01 21:30 - 00206848 _____ (Microsoft Corporation) C:\Windows\system32\WebClnt.dll
2015-08-12 08:34 - 2015-07-01 21:30 - 00082432 _____ (Microsoft Corporation) C:\Windows\system32\davclnt.dll
2015-08-10 09:41 - 2015-08-10 09:41 - 00006001 _____ C:\Users\Neusa\Downloads\Classic_HaxMaps_1438760610.hbs
2015-08-10 09:40 - 2015-08-10 09:40 - 00005604 _____ C:\Users\Neusa\Downloads\Rainbow_HaxMaps_1428226671.hbs
2015-08-10 09:40 - 2015-08-10 09:40 - 00005587 _____ C:\Users\Neusa\Downloads\Strong_HaxMaps_1406483277.hbs
2015-08-09 13:40 - 2015-08-09 13:40 - 00004092 _____ C:\Users\Neusa\Downloads\Total_1383514507.hbs
2015-08-09 13:40 - 2015-08-09 13:40 - 00002697 _____ C:\Users\Neusa\Downloads\Spaceball_HaxMaps_1408359492.hbs
2015-08-09 13:38 - 2015-08-09 13:38 - 00007415 _____ C:\Users\Neusa\Downloads\SpaceBounce_1382105147.hbs
2015-08-09 13:38 - 2015-08-09 13:38 - 00002783 _____ C:\Users\Neusa\Downloads\Spaceball_1382121479.hbs
2015-08-09 13:38 - 2015-08-09 13:38 - 00000421 _____ C:\Users\Neusa\Downloads\VolleyBall_HaxMaps_1382631317.hbs
2015-08-09 13:37 - 2015-08-09 13:37 - 00044303 _____ C:\Users\Neusa\Downloads\Yellow_1381965795.hbs
2015-08-09 13:37 - 2015-08-09 13:37 - 00014208 _____ C:\Users\Neusa\Downloads\Pokemon_HaxMaps_1410286611.hbs
2015-08-09 13:37 - 2015-08-09 13:37 - 00004187 _____ C:\Users\Neusa\Downloads\SpeedGol_1381960781.hbs
2015-08-08 20:13 - 2015-07-04 18:48 - 01414656 _____ (Microsoft Corporation) C:\Windows\system32\ole32.dll
2015-08-08 20:13 - 2015-06-17 18:39 - 00305664 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2015-08-08 20:13 - 2015-06-15 22:43 - 02364416 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll
2015-08-08 20:13 - 2015-06-15 22:43 - 00337408 _____ (Microsoft Corporation) C:\Windows\system32\msihnd.dll
2015-08-08 20:13 - 2015-06-15 22:42 - 00073216 _____ (Microsoft Corporation) C:\Windows\system32\msiexec.exe
2015-08-08 20:13 - 2015-06-15 22:37 - 00025088 _____ (Microsoft Corporation) C:\Windows\system32\msimsg.dll
2015-08-08 20:12 - 2015-06-09 20:35 - 02745856 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorets.dll
2015-08-08 20:12 - 2015-06-09 20:35 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\RdpGroupPolicyExtension.dll
2015-08-08 20:12 - 2015-06-02 00:47 - 00210432 _____ (Microsoft Corporation) C:\Windows\system32\cewmdm.dll
2015-08-07 19:03 - 2015-08-07 19:03 - 00774144 _____ C:\Users\Neusa\Downloads\KogamaLauncher.msi
2015-08-06 08:20 - 2015-08-06 08:20 - 00002506 _____ C:\Users\Rodrigo e Bernardo\2015-08-06-replay.hbr
2015-08-06 08:05 - 2015-08-06 08:05 - 00001351 _____ C:\Users\Neusa\Documents\AutoHotkey.ahk
2015-08-05 10:05 - 2015-08-27 16:05 - 00000000 ____D C:\Program Files\Overwolf
2015-08-05 10:05 - 2015-08-27 08:22 - 00000000 ____D C:\Program Files\Common Files\Overwolf
2015-08-05 10:05 - 2015-08-06 12:05 - 00000000 ____D C:\ProgramData\Overwolf
2015-08-05 10:05 - 2015-08-05 10:05 - 00001881 _____ C:\Users\Public\Desktop\Overwolf.lnk
2015-08-05 10:05 - 2015-08-05 10:05 - 00000000 ____D C:\Users\Neusa\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Overwolf
2015-08-05 10:04 - 2015-09-04 11:28 - 00000000 ____D C:\Users\Neusa\AppData\Local\Overwolf
2015-08-05 10:04 - 2015-08-05 10:04 - 00001084 _____ C:\Users\Public\Desktop\TeamSpeak 3 Client.lnk
==================== One Month Modified files and folders ========
(If an entry is included in the fixlist, the file/folder will be moved.)
2015-09-04 19:49 - 2013-12-30 16:06 - 00000000 ____D C:\Users\Diogo\AppData\Roaming\TS3Client
2015-09-04 19:03 - 2014-12-02 15:34 - 00000830 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2015-09-04 18:53 - 2015-06-23 21:27 - 01509314 _____ C:\Windows\WindowsUpdate.log
2015-09-04 18:21 - 2013-10-12 09:16 - 00000980 _____ C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-3007010704-1703236571-3604729562-1006UA.job
2015-09-04 13:03 - 2014-02-12 16:45 - 00000000 ____D C:\Program Files\Opera Next
2015-09-04 11:35 - 2009-07-14 05:34 - 00023312 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-09-04 11:35 - 2009-07-14 05:34 - 00023312 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-09-04 11:29 - 2014-07-20 09:23 - 00000000 ____D C:\Users\Neusa\AppData\Roaming\Skype
2015-09-04 11:28 - 2014-07-08 20:37 - 00000000 ____D C:\Users\Neusa\AppData\Local\CrashDumps
2015-09-04 11:23 - 2009-07-14 05:53 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2015-09-03 11:55 - 2013-10-05 18:37 - 00000000 ____D C:\Windows\Panther
2015-09-03 11:49 - 2015-07-10 14:41 - 00000000 ___HD C:\$Windows.~BT
2015-09-03 09:21 - 2013-10-12 09:16 - 00000958 _____ C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-3007010704-1703236571-3604729562-1006Core.job
2015-09-02 22:02 - 2014-06-27 21:58 - 00000000 ____D C:\Users\Diogo\AppData\Local\CrashDumps
2015-09-02 21:59 - 2015-07-06 14:24 - 00000000 ____D C:\Program Files\Mozilla Firefox
2015-09-02 20:19 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\system32\NDF
2015-09-02 18:30 - 2013-10-06 10:10 - 00000000 ____D C:\Users\Neusa
2015-09-02 17:37 - 2015-04-05 16:42 - 00000000 ___SD C:\Windows\system32\GWX
2015-09-02 17:37 - 2014-12-10 15:15 - 00000000 ____D C:\Windows\system32\appraiser
2015-09-02 17:37 - 2014-05-07 16:16 - 00000000 ___SD C:\Windows\system32\CompatTel
2015-09-02 15:26 - 2013-10-05 17:43 - 00000000 ____D C:\Users\Diogo
2015-09-02 13:09 - 2014-07-09 21:10 - 00000000 ____D C:\Users\Diogo\AppData\Local\Adobe
2015-09-01 19:24 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\system
2015-09-01 18:37 - 2014-12-02 15:37 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2015-09-01 18:36 - 2014-12-02 15:37 - 00274016 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe
2015-09-01 18:36 - 2014-12-02 15:37 - 00097888 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge.dll
2015-09-01 18:36 - 2013-10-13 10:19 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java Development Kit
2015-09-01 18:35 - 2013-10-13 10:18 - 00000000 ____D C:\Program Files\Java
2015-08-31 18:58 - 2014-05-10 11:37 - 00000008 __RSH C:\Users\Neusa\ntuser.pol
2015-08-30 21:39 - 2009-07-14 09:56 - 00000000 ____D C:\Windows\ShellNew
2015-08-30 20:18 - 2014-05-10 15:40 - 00000008 __RSH C:\Users\Diogo\ntuser.pol
2015-08-30 20:09 - 2014-02-02 10:12 - 00000008 __RSH C:\ProgramData\ntuser.pol
2015-08-30 19:49 - 2009-07-14 03:37 - 00000000 ___HD C:\Windows\system32\GroupPolicy
2015-08-28 13:07 - 2014-12-02 15:34 - 00780488 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2015-08-28 13:07 - 2014-12-02 15:34 - 00142536 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl
2015-08-28 12:26 - 2015-04-05 15:31 - 00000000 ____D C:\Users\Neusa\AppData\Roaming\TS3Client
2015-08-28 11:47 - 2013-10-08 19:40 - 00000000 ____D C:\Users\Neusa\AppData\Roaming\Adobe
2015-08-26 09:04 - 2015-05-04 17:31 - 00000000 ____D C:\Users\Neusa\AppData\Roaming\Riot Games
2015-08-26 08:45 - 2015-01-07 15:27 - 00002015 _____ C:\Users\Public\Desktop\Advanced SystemCare 8.lnk
2015-08-25 08:17 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\AppCompat
2015-08-24 22:01 - 2013-12-26 22:51 - 00000000 ____D C:\Users\Diogo\Desktop\Windows Loader
2015-08-24 14:40 - 2013-10-05 17:47 - 00001204 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2015-08-24 14:40 - 2013-10-05 17:44 - 00001098 _____ C:\Users\Diogo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2015-08-24 13:08 - 2014-05-12 14:45 - 57409536 _____ C:\Windows\system32\config\SOFTWARE.iobit
2015-08-24 13:08 - 2014-05-12 14:45 - 00372736 _____ C:\Windows\system32\config\DEFAULT.iobit
2015-08-24 13:08 - 2014-05-12 14:45 - 00143360 _____ C:\Windows\system32\config\SAM.iobit
2015-08-24 13:08 - 2014-05-12 14:45 - 00032768 _____ C:\Windows\system32\config\SECURITY.iobit
2015-08-24 12:17 - 2015-04-06 08:19 - 00000000 ____D C:\Users\Rodrigo e Bernardo\AppData\Roaming\TS3Client
2015-08-24 12:13 - 2015-02-18 19:35 - 00000000 ____D C:\Users\Rodrigo e Bernardo\AppData\Local\CrashDumps
2015-08-24 01:18 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\rescache
2015-08-23 22:23 - 2014-04-19 00:22 - 00000000 ____D C:\ProgramData\IObit
2015-08-23 22:23 - 2014-04-19 00:22 - 00000000 ____D C:\Program Files\IObit
2015-08-23 22:22 - 2015-05-19 15:47 - 00000000 ____D C:\Program Files\Opera
2015-08-23 22:22 - 2014-02-12 16:45 - 00000000 ____D C:\Users\Diogo\AppData\Roaming\Opera Software
2015-08-23 22:22 - 2014-02-12 16:45 - 00000000 ____D C:\Users\Diogo\AppData\Local\Opera Software
2015-08-23 21:57 - 2013-10-05 17:49 - 01654886 _____ C:\Windows\system32\PerfStringBackup.INI
2015-08-23 21:57 - 2009-07-14 09:31 - 00720612 _____ C:\Windows\system32\prfh0816.dat
2015-08-23 21:57 - 2009-07-14 09:31 - 00152564 _____ C:\Windows\system32\prfc0816.dat
2015-08-23 21:49 - 2015-04-03 17:03 - 00000000 ____D C:\Windows\MasterSword
2015-08-23 21:48 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\system32\pt-PT
2015-08-23 20:25 - 2014-05-07 15:19 - 00000000 ____D C:\temp
2015-08-22 19:26 - 2013-10-05 17:47 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
2015-08-21 11:07 - 2014-04-19 20:52 - 00000000 ____D C:\Users\Neusa\AppData\Roaming\IObit
2015-08-21 11:07 - 2014-04-19 08:01 - 00000000 ____D C:\Users\Rodrigo e Bernardo\AppData\Roaming\IObit
2015-08-21 11:06 - 2015-03-20 18:10 - 00000478 _____ C:\Users\Rodrigo e Bernardo\Documents\AutoHotkey.ahk
2015-08-20 14:36 - 2015-04-03 17:03 - 00000000 ____D C:\Windows\bcaec5924d27
2015-08-20 14:06 - 2014-06-21 15:59 - 00000000 ____D C:\Program Files\Gyazo
2015-08-20 13:54 - 2014-09-25 14:28 - 00000000 ____D C:\Users\Diogo\AppData\Roaming\Audacity
2015-08-19 18:49 - 2013-10-09 17:15 - 00000000 ____D C:\Program Files\Steam
2015-08-19 12:49 - 2013-10-06 10:11 - 00001098 _____ C:\Users\Neusa\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2015-08-19 12:49 - 2013-10-05 18:14 - 00000000 ____D C:\Users\Rodrigo e Bernardo
2015-08-18 09:56 - 2014-03-05 11:26 - 00000000 ____D C:\Users\Diogo\Documents\Cross Fire
2015-08-13 15:02 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\Microsoft.NET
2015-08-13 08:09 - 2009-07-14 05:33 - 00287320 _____ C:\Windows\system32\FNTCACHE.DAT
2015-08-13 08:06 - 2009-07-14 09:30 - 00000000 ____D C:\Windows\system32\Drivers\pt-PT
2015-08-13 00:18 - 2015-04-05 16:42 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
2015-08-13 00:17 - 2015-04-03 17:00 - 00000000 ____D C:\Program Files\Microsoft Silverlight
2015-08-13 00:17 - 2014-11-05 18:51 - 00000000 ____D C:\ProgramData\Microsoft Help
2015-08-13 00:04 - 2013-10-11 19:38 - 129304528 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2015-08-13 00:04 - 2013-10-11 19:38 - 00000000 ____D C:\Windows\system32\MRT
2015-08-09 14:07 - 2013-10-08 19:39 - 00002441 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader XI.lnk
2015-08-07 15:53 - 2013-12-30 16:05 - 00000000 ____D C:\Users\Diogo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\TeamSpeak 3 Client
2015-08-06 08:07 - 2014-05-03 18:33 - 00000664 _____ C:\Users\Rodrigo e Bernardo\Downloads\server.properties
2015-08-06 08:07 - 2014-05-03 18:33 - 00000002 _____ C:\Users\Rodrigo e Bernardo\Downloads\usercache.json
2015-08-06 08:07 - 2014-05-03 18:33 - 00000002 _____ C:\Users\Rodrigo e Bernardo\Downloads\ops.json
2015-08-06 08:07 - 2014-05-03 18:33 - 00000002 _____ C:\Users\Rodrigo e Bernardo\Downloads\banned-players.json
2015-08-06 08:07 - 2014-05-03 18:33 - 00000002 _____ C:\Users\Rodrigo e Bernardo\Downloads\banned-ips.json
2015-08-06 08:07 - 2014-05-03 18:33 - 00000000 ____D C:\Users\Rodrigo e Bernardo\Downloads\world
2015-08-05 21:46 - 2015-04-05 15:30 - 00000000 ____D C:\Program Files\TeamSpeak 3 Client
2015-08-05 10:04 - 2015-04-05 15:30 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamSpeak 3 Client
==================== Files in the root of some directories =======
2015-05-21 21:32 - 2015-07-28 12:00 - 0000079 _____ () C:\Program Files\prefs.js
2015-05-19 15:36 - 2015-06-20 02:35 - 0000024 _____ () C:\Users\Diogo\AppData\Roaming\appdataFr25.bin
2014-04-26 19:17 - 2014-06-19 10:58 - 0000125 _____ () C:\Users\Diogo\AppData\Roaming\Camdata.ini
2014-04-26 19:17 - 2014-06-19 10:58 - 0000408 _____ () C:\Users\Diogo\AppData\Roaming\CamLayout.ini
2014-04-26 19:17 - 2014-06-19 10:58 - 0000408 _____ () C:\Users\Diogo\AppData\Roaming\CamShapes.ini
2014-06-08 11:26 - 2014-06-19 10:58 - 0004534 _____ () C:\Users\Diogo\AppData\Roaming\CamStudio.cfg
2014-04-14 12:20 - 2014-04-14 12:20 - 0000004 _____ () C:\Users\Diogo\AppData\Roaming\steam_md4.dat
2014-04-26 17:49 - 2014-06-19 10:56 - 0000096 _____ () C:\Users\Diogo\AppData\Roaming\version2.xml
Some files in TEMP:
====================
C:\Users\Diogo\AppData\Local\Temp\sqlite3.dll
==================== Bamital & volsnap =================
(There is no automatic fix for files that do not pass verification.)
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\dnsapi.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed
LastRegBack: 2015-09-01 00:04
==================== End of FRST.txt ============================