OTL logfile created on: 05/09/2015 19:05:33 - Run 1
OTL by OldTimer - Version 3.2.69.0     Folder = C:\Users\Raphael\Downloads
64bit- Professional  (Version = 6.2.9200) - Type = NTWorkstation
Internet Explorer (Version = 9.11.10240.16384)
Locale: 00000416 | Country: Brasil | Language: PTB | Date Format: dd/MM/yyyy

7,98 Gb Total Physical Memory | 3,46 Gb Available Physical Memory | 43,43% Memory free
9,29 Gb Paging File | 4,46 Gb Available in Paging File | 47,97% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 930,56 Gb Total Space | 591,86 Gb Free Space | 63,60% Space Free | Partition Type: NTFS
Drive D: | 298,09 Gb Total Space | 239,97 Gb Free Space | 80,50% Space Free | Partition Type: NTFS
Drive E: | 448,74 Mb Total Space | 0,00 Mb Free Space | 0,00% Space Free | Partition Type: CDFS
Drive G: | 931,51 Gb Total Space | 330,37 Gb Free Space | 35,47% Space Free | Partition Type: NTFS

Computer Name: RAPHAEL81 | User Name: Raphael | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Include 64bit Scans
Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 90 Days

[color=#E56717]========== Processes (SafeList) ==========[/color]

PRC - File not found --
PRC - [2015/09/05 19:04:15 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\Raphael\Downloads\OTL.exe
PRC - [2015/09/01 11:48:35 | 000,461,672 | ---- | M] (Avira Operations GmbH & Co. KG) -- C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
PRC - [2015/09/01 11:48:19 | 000,782,008 | ---- | M] (Avira Operations GmbH & Co. KG) -- C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
PRC - [2015/09/01 11:48:19 | 000,461,672 | ---- | M] (Avira Operations GmbH & Co. KG) -- C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
PRC - [2015/08/28 09:59:52 | 000,245,064 | ---- | M] (Google Inc.) -- C:\Program Files (x86)\Google\Update\1.3.28.13\GoogleCrashHandler.exe
PRC - [2015/08/27 21:17:48 | 000,815,944 | ---- | M] (Google Inc.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
PRC - [2015/08/24 16:33:22 | 003,637,160 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files (x86)\AVG\AVG2015\avgidsagent.exe
PRC - [2015/08/24 16:16:36 | 003,775,912 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files (x86)\AVG\AVG2015\avgui.exe
PRC - [2015/08/24 16:05:14 | 000,335,656 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files (x86)\AVG\AVG2015\avgwdsvc.exe
PRC - [2015/08/19 18:08:35 | 000,404,064 | ---- | M] (Microsoft Corporation) -- C:\Users\Raphael\AppData\Local\Microsoft\OneDrive\OneDrive.exe
PRC - [2015/08/19 17:39:00 | 002,899,136 | ---- | M] (Valve Corporation) -- C:\Program Files (x86)\Steam\Steam.exe
PRC - [2015/08/19 17:39:00 | 001,862,848 | ---- | M] (Valve Corporation) -- C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
PRC - [2015/08/19 17:39:00 | 000,838,336 | ---- | M] (Valve Corporation) -- C:\Program Files (x86)\Common Files\Steam\SteamService.exe
PRC - [2015/06/23 07:14:00 | 000,084,208 | ---- | M] (Microsoft Corporation) -- C:\Arquivos de Programas\Microsoft Office 15\root\vfs\ProgramFilesCommonX86\Microsoft Shared\OFFICE15\csisyncclient.exe
PRC - [2015/05/21 00:11:04 | 000,214,856 | ---- | M] (Google) -- C:\Program Files (x86)\Google\Google Earth\client\googleearth.exe
PRC - [2015/03/16 11:00:12 | 000,129,272 | ---- | M] (Avira Operations GmbH & Co. KG) -- C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe
PRC - [2014/09/10 13:26:24 | 007,406,656 | ---- | M] () -- C:\Program Files (x86)\PhotoScape\PhotoScape.exe
PRC - [2014/07/12 10:40:26 | 000,518,968 | ---- | M] (GAS Tecnologia LTDA) -- C:\Program Files (x86)\Diebold\Warsaw\core.exe


[color=#E56717]========== Modules (No Company Name) ==========[/color]

MOD - [2015/08/27 21:17:45 | 001,501,512 | ---- | M] () -- C:\Program Files (x86)\Google\Chrome\Application\45.0.2454.85\libglesv2.dll
MOD - [2015/08/27 21:17:44 | 000,081,224 | ---- | M] () -- C:\Program Files (x86)\Google\Chrome\Application\45.0.2454.85\libegl.dll
MOD - [2015/08/19 17:39:14 | 002,413,248 | ---- | M] () -- C:\Program Files (x86)\Steam\video.dll
MOD - [2015/08/19 17:39:00 | 000,704,192 | ---- | M] () -- C:\Program Files (x86)\Steam\bin\chromehtml.DLL
MOD - [2015/07/26 22:13:30 | 000,171,008 | ---- | M] () -- C:\Program Files (x86)\Steam\bin\openvr_api.dll
MOD - [2015/07/03 13:12:46 | 004,962,816 | ---- | M] () -- C:\Program Files (x86)\Steam\v8.dll
MOD - [2015/07/03 13:12:28 | 039,553,928 | ---- | M] () -- C:\Program Files (x86)\Steam\bin\libcef.dll
MOD - [2015/07/03 13:12:28 | 001,556,992 | ---- | M] () -- C:\Program Files (x86)\Steam\icui18n.dll
MOD - [2015/07/03 13:12:28 | 001,187,840 | ---- | M] () -- C:\Program Files (x86)\Steam\icuuc.dll
MOD - [2015/07/03 13:12:24 | 000,778,240 | ---- | M] () -- C:\Program Files (x86)\Steam\SDL2.dll
MOD - [2015/05/21 00:11:06 | 017,660,744 | ---- | M] () -- C:\Program Files (x86)\Google\Google Earth\client\googleearth_free.dll
MOD - [2015/05/21 00:11:04 | 000,093,000 | ---- | M] () -- C:\Program Files (x86)\Google\Google Earth\client\ge_expat.dll
MOD - [2015/05/20 23:07:20 | 000,015,872 | ---- | M] () -- C:\Program Files (x86)\Google\Google Earth\client\alchemyext.dll
MOD - [2015/05/20 23:01:50 | 000,519,168 | ---- | M] () -- C:\Program Files (x86)\Google\Google Earth\client\alchemy\ogles20\libGLESv2.dll
MOD - [2015/05/20 23:01:48 | 000,059,392 | ---- | M] () -- C:\Program Files (x86)\Google\Google Earth\client\alchemy\ogles20\libEGL.dll
MOD - [2015/05/20 23:01:22 | 001,393,664 | ---- | M] () -- C:\Program Files (x86)\Google\Google Earth\client\alchemy\ogles20\IGSg.dll
MOD - [2015/05/20 23:01:16 | 003,105,280 | ---- | M] () -- C:\Program Files (x86)\Google\Google Earth\client\alchemy\ogles20\IGGfx.dll
MOD - [2015/05/20 23:01:12 | 000,751,104 | ---- | M] () -- C:\Program Files (x86)\Google\Google Earth\client\alchemy\ogles20\IGAttrs.dll
MOD - [2015/05/20 23:00:34 | 000,290,816 | ---- | M] () -- C:\Program Files (x86)\Google\Google Earth\client\IGUtils.DLL
MOD - [2015/05/20 23:00:30 | 001,050,624 | ---- | M] () -- C:\Program Files (x86)\Google\Google Earth\client\IGOpt.dll
MOD - [2015/05/20 23:00:30 | 000,145,408 | ---- | M] () -- C:\Program Files (x86)\Google\Google Earth\client\alchemy\optimizations\IGOptExtension.dll
MOD - [2015/05/20 23:00:28 | 000,631,808 | ---- | M] () -- C:\Program Files (x86)\Google\Google Earth\client\IGMath.dll
MOD - [2015/05/20 23:00:14 | 000,726,016 | ---- | M] () -- C:\Program Files (x86)\Google\Google Earth\client\IGExportCommon.dll
MOD - [2015/05/20 23:00:12 | 001,224,704 | ---- | M] () -- C:\Program Files (x86)\Google\Google Earth\client\IGCore.dll
MOD - [2015/05/20 22:53:04 | 007,877,632 | ---- | M] () -- C:\Program Files (x86)\Google\Google Earth\client\QtWebKit4.dll
MOD - [2015/05/20 22:53:04 | 000,158,208 | ---- | M] () -- C:\Program Files (x86)\Google\Google Earth\client\imageformats\qjpeg4.dll
MOD - [2015/05/20 22:53:04 | 000,018,944 | ---- | M] () -- C:\Program Files (x86)\Google\Google Earth\client\imageformats\qgif4.dll
MOD - [2015/05/20 22:53:02 | 006,174,208 | ---- | M] () -- C:\Program Files (x86)\Google\Google Earth\client\QtGui4.dll
MOD - [2015/05/20 22:53:02 | 001,777,664 | ---- | M] () -- C:\Program Files (x86)\Google\Google Earth\client\QtCore4.dll
MOD - [2015/05/20 22:53:02 | 000,518,656 | ---- | M] () -- C:\Program Files (x86)\Google\Google Earth\client\QtNetwork4.dll
MOD - [2015/01/19 11:24:12 | 000,316,576 | ---- | M] () -- C:\Arquivos de Programas\Microsoft Office 15\root\vfs\ProgramFilesCommonX86\Microsoft Shared\OFFICE15\AppVIsvStream32.dll
MOD - [2014/12/01 18:31:16 | 002,396,672 | ---- | M] () -- C:\Program Files (x86)\Steam\libavcodec-56.dll
MOD - [2014/12/01 18:31:16 | 000,485,888 | ---- | M] () -- C:\Program Files (x86)\Steam\libswscale-3.dll
MOD - [2014/12/01 18:31:16 | 000,479,744 | ---- | M] () -- C:\Program Files (x86)\Steam\libavformat-56.dll
MOD - [2014/12/01 18:31:16 | 000,442,880 | ---- | M] () -- C:\Program Files (x86)\Steam\libavutil-54.dll
MOD - [2014/12/01 18:31:16 | 000,332,800 | ---- | M] () -- C:\Program Files (x86)\Steam\libavresample-2.dll
MOD - [2014/09/10 13:26:24 | 007,406,656 | ---- | M] () -- C:\Program Files (x86)\PhotoScape\PhotoScape.exe


[color=#E56717]========== Services (SafeList) ==========[/color]

SRV:[b]64bit:[/b] - [2015/08/18 03:58:25 | 000,187,392 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\NetSetupSvc.dll -- (NetSetupSvc)
SRV:[b]64bit:[/b] - [2015/08/18 03:55:01 | 002,178,560 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\AppXDeploymentServer.dll -- (AppXSvc)
SRV:[b]64bit:[/b] - [2015/08/18 03:54:03 | 000,322,048 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\vaultsvc.dll -- (VaultSvc)
SRV:[b]64bit:[/b] - [2015/08/13 01:22:26 | 002,093,056 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\wlidsvc.dll -- (wlidsvc)
SRV:[b]64bit:[/b] - [2015/08/11 06:50:47 | 001,643,872 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\diagtrack.dll -- (DiagTrack)
SRV:[b]64bit:[/b] - [2015/08/11 06:21:13 | 000,148,992 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\tetheringservice.dll -- (icssvc)
SRV:[b]64bit:[/b] - [2015/08/11 06:07:52 | 000,593,920 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\wcmsvc.dll -- (Wcmsvc)
SRV:[b]64bit:[/b] - [2015/08/11 06:05:10 | 000,996,352 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\RDXService.dll -- (RetailDemo)
SRV:[b]64bit:[/b] - [2015/08/02 22:24:19 | 000,503,808 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\tileobjserver.dll -- (tiledatamodelsvc)
SRV:[b]64bit:[/b] - [2015/07/30 00:44:49 | 000,280,064 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\AudioEndpointBuilder.dll -- (AudioEndpointBuilder)
SRV:[b]64bit:[/b] - [2015/07/30 00:44:28 | 000,229,376 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\SensorService.dll -- (SensorService)
SRV:[b]64bit:[/b] - [2015/07/30 00:38:27 | 001,420,288 | ---- | M] (Microsoft Corporation) [On_Demand | Unknown] -- C:\Windows\SysNative\UserDataService.dll -- (UserDataSvc)
SRV:[b]64bit:[/b] - [2015/07/29 10:51:09 | 001,031,680 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\SensorDataService.exe -- (SensorDataService)
SRV:[b]64bit:[/b] - [2015/07/29 10:51:06 | 001,203,200 | ---- | M] (Microsoft Corporation) [On_Demand | Unknown] -- C:\Windows\SysNative\Unistore.dll -- (UnistoreSvc)
SRV:[b]64bit:[/b] - [2015/07/29 10:51:06 | 001,169,408 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\SysNative\dosvc.dll -- (DoSvc)
SRV:[b]64bit:[/b] - [2015/07/29 10:51:06 | 000,808,856 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\CoreMessaging.dll -- (CoreMessagingRegistrar)
SRV:[b]64bit:[/b] - [2015/07/29 10:51:06 | 000,658,568 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\ClipSVC.dll -- (ClipSVC)
SRV:[b]64bit:[/b] - [2015/07/29 10:51:06 | 000,343,040 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\usocore.dll -- (UsoSvc)
SRV:[b]64bit:[/b] - [2015/07/16 01:17:16 | 000,246,784 | ---- | M] (AMD) [Auto | Running] -- C:\Windows\SysNative\atiesrxx.exe -- (AMD External Events Utility)
SRV:[b]64bit:[/b] - [2015/07/14 03:32:44 | 002,765,496 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Microsoft Office 15\ClientX64\OfficeClickToRun.exe -- (ClickToRunSvc)
SRV:[b]64bit:[/b] - [2015/07/10 13:48:58 | 000,200,192 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\appmgmts.dll -- (AppMgmt)
SRV:[b]64bit:[/b] - [2015/07/10 08:01:10 | 000,621,056 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\AppReadiness.dll -- (AppReadiness)
SRV:[b]64bit:[/b] - [2015/07/10 08:01:10 | 000,504,320 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\WalletService.dll -- (WalletService)
SRV:[b]64bit:[/b] - [2015/07/10 08:01:10 | 000,074,752 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\wiarpc.dll -- (WiaRpc)
SRV:[b]64bit:[/b] - [2015/07/10 08:00:41 | 000,167,424 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\NcaSvc.dll -- (NcaSvc)
SRV:[b]64bit:[/b] - [2015/07/10 08:00:38 | 001,844,736 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\workfolderssvc.dll -- (workfolderssvc)
SRV:[b]64bit:[/b] - [2015/07/10 08:00:36 | 000,115,200 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\WINDOWS\SysNative\IEEtwCollector.exe -- (IEEtwCollectorService)
SRV:[b]64bit:[/b] - [2015/07/10 08:00:20 | 000,749,056 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\lsm.dll -- (LSM)
SRV:[b]64bit:[/b] - [2015/07/10 08:00:16 | 000,075,264 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\NcdAutoSetup.dll -- (NcdAutoSetup)
SRV:[b]64bit:[/b] - [2015/07/10 08:00:09 | 000,526,336 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\bisrv.dll -- (BrokerInfrastructure)
SRV:[b]64bit:[/b] - [2015/07/10 08:00:09 | 000,337,408 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\ncbservice.dll -- (NcbService)
SRV:[b]64bit:[/b] - [2015/07/10 08:00:09 | 000,289,280 | ---- | M] (Microsoft Corporation) [On_Demand | Unknown] -- C:\Windows\SysNative\PimIndexMaintenance.dll -- (PimIndexMaintenanceSvc)
SRV:[b]64bit:[/b] - [2015/07/10 08:00:09 | 000,049,152 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\wpnservice.dll -- (WpnService)
SRV:[b]64bit:[/b] - [2015/07/10 08:00:09 | 000,033,280 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\DevQueryBroker.dll -- (DevQueryBroker)
SRV:[b]64bit:[/b] - [2015/07/10 08:00:09 | 000,027,136 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\lfsvc.dll -- (lfsvc)
SRV:[b]64bit:[/b] - [2015/07/10 08:00:07 | 002,674,176 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\Windows.StateRepository.dll -- (StateRepository)
SRV:[b]64bit:[/b] - [2015/07/10 08:00:07 | 001,149,440 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\XblGameSave.dll -- (XblGameSave)
SRV:[b]64bit:[/b] - [2015/07/10 08:00:07 | 001,019,392 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\XboxNetApiSvc.dll -- (XboxNetApiSvc)
SRV:[b]64bit:[/b] - [2015/07/10 08:00:07 | 000,512,000 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\ngcsvc.dll -- (NgcSvc)
SRV:[b]64bit:[/b] - [2015/07/10 08:00:07 | 000,268,800 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\NgcCtnrSvc.dll -- (NgcCtnrSvc)
SRV:[b]64bit:[/b] - [2015/07/10 08:00:07 | 000,062,464 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\SysNative\moshost.dll -- (MapsBroker)
SRV:[b]64bit:[/b] - [2015/07/10 08:00:07 | 000,023,040 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\AJRouter.dll -- (AJRouter)
SRV:[b]64bit:[/b] - [2015/07/10 08:00:07 | 000,021,504 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\LicenseManagerSvc.dll -- (LicenseManager)
SRV:[b]64bit:[/b] - [2015/07/10 08:00:06 | 000,134,144 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\cdpsvc.dll -- (CDPSvc)
SRV:[b]64bit:[/b] - [2015/07/10 08:00:06 | 000,087,040 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\embeddedmodesvc.dll -- (embeddedmode)
SRV:[b]64bit:[/b] - [2015/07/10 08:00:03 | 003,467,784 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\WSService.dll -- (WSService)
SRV:[b]64bit:[/b] - [2015/07/10 08:00:02 | 000,918,016 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\XblAuthManager.dll -- (XblAuthManager)
SRV:[b]64bit:[/b] - [2015/07/10 08:00:02 | 000,836,096 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\netlogon.dll -- (Netlogon)
SRV:[b]64bit:[/b] - [2015/07/10 08:00:02 | 000,055,808 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\efssvc.dll -- (EFS)
SRV:[b]64bit:[/b] - [2015/07/10 08:00:01 | 000,096,256 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\keyiso.dll -- (KeyIso)
SRV:[b]64bit:[/b] - [2015/07/10 08:00:01 | 000,027,648 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\wephostsvc.dll -- (WEPHOSTSVC)
SRV:[b]64bit:[/b] - [2015/07/10 08:00:00 | 000,717,312 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\usermgr.dll -- (UserManager)
SRV:[b]64bit:[/b] - [2015/07/10 08:00:00 | 000,181,760 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\ScDeviceEnum.dll -- (ScDeviceEnum)
SRV:[b]64bit:[/b] - [2015/07/10 07:59:59 | 000,296,960 | ---- | M] (Microsoft Corporation) [Auto | Unknown] -- C:\Windows\SysNative\APHostService.dll -- (OneSyncSvc)
SRV:[b]64bit:[/b] - [2015/07/10 07:59:59 | 000,196,096 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\dcpsvc.dll -- (DcpSvc)
SRV:[b]64bit:[/b] - [2015/07/10 07:59:59 | 000,027,136 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe -- (diagnosticshub.standardcollector.service)
SRV:[b]64bit:[/b] - [2015/07/10 07:59:58 | 000,143,872 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\dssvc.dll -- (DsSvc)
SRV:[b]64bit:[/b] - [2015/07/10 07:59:58 | 000,039,856 | ---- | M] (Microsoft Corporation) [On_Demand | Unknown] -- C:\Windows\SysNative\svchost.exe -- (UserDataSvc_Session1)
SRV:[b]64bit:[/b] - [2015/07/10 07:59:58 | 000,039,856 | ---- | M] (Microsoft Corporation) [On_Demand | Unknown] -- C:\Windows\SysNative\svchost.exe -- (UnistoreSvc_Session1)
SRV:[b]64bit:[/b] - [2015/07/10 07:59:58 | 000,039,856 | ---- | M] (Microsoft Corporation) [On_Demand | Unknown] -- C:\Windows\SysNative\svchost.exe -- (PimIndexMaintenanceSvc_Session1)
SRV:[b]64bit:[/b] - [2015/07/10 07:59:58 | 000,039,856 | ---- | M] (Microsoft Corporation) [Auto | Unknown] -- C:\Windows\SysNative\svchost.exe -- (OneSyncSvc_Session1)
SRV:[b]64bit:[/b] - [2015/07/10 07:59:57 | 000,405,504 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\das.dll -- (DeviceAssociationService)
SRV:[b]64bit:[/b] - [2015/07/10 07:59:57 | 000,237,568 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\DeviceSetupManager.dll -- (DsmSvc)
SRV:[b]64bit:[/b] - [2015/07/10 07:59:56 | 000,019,968 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\smphost.dll -- (smphost)
SRV:[b]64bit:[/b] - [2015/07/10 07:59:55 | 000,118,784 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\fhsvc.dll -- (fhsvc)
SRV:[b]64bit:[/b] - [2015/07/10 07:59:55 | 000,013,824 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\svsvc.dll -- (svsvc)
SRV:[b]64bit:[/b] - [2015/07/10 07:59:54 | 000,275,456 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\EnterpriseAppMgmtSvc.dll -- (EntAppSvc)
SRV:[b]64bit:[/b] - [2015/07/10 07:59:53 | 000,267,776 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\Windows.Internal.Management.dll -- (DmEnrollmentSvc)
SRV:[b]64bit:[/b] - [2015/07/10 07:59:53 | 000,063,488 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\SysNative\dmwappushsvc.dll -- (dmwappushservice)
SRV:[b]64bit:[/b] - [2015/07/10 07:59:51 | 000,583,680 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\SmsRouterSvc.dll -- (SmsRouter)
SRV:[b]64bit:[/b] - [2015/07/10 07:59:50 | 000,550,400 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\netprofmsvc.dll -- (netprofm)
SRV:[b]64bit:[/b] - [2015/07/10 07:59:50 | 000,379,904 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\SystemEventsBrokerServer.dll -- (SystemEventsBroker)
SRV:[b]64bit:[/b] - [2015/07/10 07:59:50 | 000,167,936 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\TimeBrokerServer.dll -- (TimeBroker)
SRV:[b]64bit:[/b] - [2015/07/10 07:59:48 | 000,506,880 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\icsvc.dll -- (vmicvss)
SRV:[b]64bit:[/b] - [2015/07/10 07:59:48 | 000,506,880 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\icsvc.dll -- (vmicvmsession)
SRV:[b]64bit:[/b] - [2015/07/10 07:59:48 | 000,506,880 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\icsvc.dll -- (vmictimesync)
SRV:[b]64bit:[/b] - [2015/07/10 07:59:48 | 000,506,880 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\icsvc.dll -- (vmicshutdown)
SRV:[b]64bit:[/b] - [2015/07/10 07:59:48 | 000,506,880 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\icsvc.dll -- (vmicrdv)
SRV:[b]64bit:[/b] - [2015/07/10 07:59:48 | 000,506,880 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\icsvc.dll -- (vmickvpexchange)
SRV:[b]64bit:[/b] - [2015/07/10 07:59:48 | 000,506,880 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\icsvc.dll -- (vmicheartbeat)
SRV:[b]64bit:[/b] - [2015/07/10 07:59:48 | 000,506,880 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\icsvc.dll -- (vmicguestinterface)
SRV:[b]64bit:[/b] - [2015/07/10 07:59:36 | 000,326,144 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\BthHFSrv.dll -- (BthHFSrv)
SRV:[b]64bit:[/b] - [2015/06/22 02:49:50 | 000,036,504 | ---- | M] (VIA Technologies, Inc.) [Auto | Running] -- C:\Windows\SysNative\ViakaraokeSrv.exe -- (VIAKaraokeService)
SRV:[b]64bit:[/b] - [2014/11/20 20:38:34 | 002,987,520 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\spool\drivers\x64\3\PrintConfig.dll -- (PrintNotify)
SRV - [2015/09/03 21:22:15 | 002,057,736 | ---- | M] (Electronic Arts) [On_Demand | Stopped] -- C:\Program Files (x86)\Origin\OriginClientService.exe -- (Origin Client Service)
SRV - [2015/09/01 11:48:35 | 000,461,672 | ---- | M] (Avira Operations GmbH & Co. KG) [Auto | Running] -- C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe -- (AntiVirSchedulerService)
SRV - [2015/09/01 11:48:23 | 001,213,072 | ---- | M] (Avira Operations GmbH & Co. KG) [Auto | Stopped] -- C:\Program Files (x86)\Avira\AntiVir Desktop\avwebg7.exe -- (AntiVirWebService)
SRV - [2015/09/01 11:48:20 | 000,887,128 | ---- | M] (Avira Operations GmbH & Co. KG) [Auto | Stopped] -- C:\Program Files (x86)\Avira\AntiVir Desktop\avmailc7.exe -- (AntiVirMailService)
SRV - [2015/09/01 11:48:19 | 000,461,672 | ---- | M] (Avira Operations GmbH & Co. KG) [Auto | Running] -- C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe -- (AntiVirService)
SRV - [2015/08/24 16:33:22 | 003,637,160 | ---- | M] (AVG Technologies CZ, s.r.o.) [Auto | Running] -- C:\Program Files (x86)\AVG\AVG2015\avgidsagent.exe -- (AVGIDSAgent)
SRV - [2015/08/24 16:05:14 | 000,335,656 | ---- | M] (AVG Technologies CZ, s.r.o.) [Auto | Running] -- C:\Program Files (x86)\AVG\AVG2015\avgwdsvc.exe -- (avgwd)
SRV - [2015/08/19 17:39:00 | 000,838,336 | ---- | M] (Valve Corporation) [On_Demand | Running] -- C:\Program Files (x86)\Common Files\Steam\SteamService.exe -- (Steam Client Service)
SRV - [2015/07/29 10:51:06 | 000,925,696 | ---- | M] (Microsoft Corporation) [On_Demand | Unknown] -- C:\Windows\SysWOW64\Unistore.dll -- (UnistoreSvc)
SRV - [2015/07/29 10:51:06 | 000,510,976 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysWOW64\CoreMessaging.dll -- (CoreMessagingRegistrar)
SRV - [2015/07/10 08:00:30 | 000,022,528 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysWOW64\lfsvc.dll -- (lfsvc)
SRV - [2015/07/10 08:00:29 | 002,049,024 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysWOW64\Windows.StateRepository.dll -- (StateRepository)
SRV - [2015/07/10 08:00:24 | 000,017,920 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysWOW64\smphost.dll -- (smphost)
SRV - [2015/07/10 08:00:23 | 000,193,024 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysWOW64\Windows.Internal.Management.dll -- (DmEnrollmentSvc)
SRV - [2015/03/16 11:00:06 | 000,201,008 | ---- | M] (Avira Operations GmbH & Co. KG) [Auto | Stopped] -- C:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe -- (Avira.OE.ServiceHost)
SRV - [2015/02/18 19:11:32 | 000,315,488 | R--- | M] (Skype Technologies) [Auto | Stopped] -- C:\Program Files (x86)\Skype\Updater\Updater.exe -- (SkypeUpdate)
SRV - [2014/11/20 20:38:34 | 002,987,520 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\WINDOWS\system32\spool\drivers\x64\3\PrintConfig.dll -- (PrintNotify)
SRV - [2014/08/12 13:21:40 | 000,547,384 | ---- | M] (GAS Tecnologia) [Auto | Stopped] -- C:\PROGRA~2\GbPlugin\GbpSv.exe -- (GbpSv)
SRV - [2014/07/12 10:40:26 | 000,518,968 | ---- | M] (GAS Tecnologia LTDA) [Auto | Running] -- C:\Program Files (x86)\Diebold\Warsaw\core.exe -- (Warsaw Technology)
SRV - [2010/02/19 12:37:14 | 000,517,096 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe -- (SwitchBoard)


[color=#E56717]========== Driver Services (SafeList) ==========[/color]

DRV:[b]64bit:[/b] - [2015/09/01 11:48:39 | 000,148,632 | ---- | M] (Avira Operations GmbH & Co. KG) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\avipbb.sys -- (avipbb)
DRV:[b]64bit:[/b] - [2015/09/01 11:48:39 | 000,137,288 | ---- | M] (Avira Operations GmbH & Co. KG) [File_System | Auto | Running] -- C:\Windows\SysNative\drivers\avgntflt.sys -- (avgntflt)
DRV:[b]64bit:[/b] - [2015/08/19 11:53:56 | 000,297,904 | ---- | M] (AVG Technologies CZ, s.r.o.) [File_System | Boot | Running] -- C:\Windows\SysNative\drivers\avgidsha.sys -- (AVGIDSHA)
DRV:[b]64bit:[/b] - [2015/08/19 11:52:30 | 000,313,264 | ---- | M] (AVG Technologies CZ, s.r.o.) [File_System | System | Running] -- C:\Windows\SysNative\drivers\avgidsdrivera.sys -- (AVGIDSDriver)
DRV:[b]64bit:[/b] - [2015/08/18 04:55:45 | 000,373,072 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\USBXHCI.SYS -- (USBXHCI)
DRV:[b]64bit:[/b] - [2015/08/11 07:02:56 | 000,080,720 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\stornvme.sys -- (stornvme)
DRV:[b]64bit:[/b] - [2015/08/06 00:17:40 | 000,200,528 | ---- | M] (Microsoft Corporation) [File_System | Boot | Running] -- C:\WINDOWS\SysNative\drivers\wof.sys -- (Wof)
DRV:[b]64bit:[/b] - [2015/08/05 23:22:03 | 000,685,568 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\WdiWiFi.sys -- (wdiwifi)
DRV:[b]64bit:[/b] - [2015/08/04 11:32:36 | 000,304,560 | ---- | M] (AVG Technologies CZ, s.r.o.) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\avgwfpa.sys -- (Avgwfpa)
DRV:[b]64bit:[/b] - [2015/08/04 11:32:32 | 000,250,800 | ---- | M] (AVG Technologies CZ, s.r.o.) [File_System | Boot | Running] -- C:\Windows\SysNative\drivers\avgmfx64.sys -- (Avgmfx64)
DRV:[b]64bit:[/b] - [2015/08/02 23:18:37 | 000,046,432 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\msgpiowin32.sys -- (msgpiowin32)
DRV:[b]64bit:[/b] - [2015/08/02 23:17:53 | 000,052,264 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\wpcfltr.sys -- (wpcfltr)
DRV:[b]64bit:[/b] - [2015/08/02 23:17:45 | 000,516,960 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\USBHUB3.SYS -- (USBHUB3)
DRV:[b]64bit:[/b] - [2015/07/30 00:44:26 | 000,065,536 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bthhfenum.sys -- (BthHFEnum)
DRV:[b]64bit:[/b] - [2015/07/29 10:51:06 | 000,934,752 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\WINDOWS\SysNative\drivers\refsv1.sys -- (ReFSv1)
DRV:[b]64bit:[/b] - [2015/07/29 10:51:06 | 000,067,072 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\usbser.sys -- (usbser)
DRV:[b]64bit:[/b] - [2015/07/29 10:51:06 | 000,061,280 | ---- | M] (Microsoft Corporation) [Kernel | System | Stopped] -- C:\Windows\SysNative\drivers\dam.sys -- (dam)
DRV:[b]64bit:[/b] - [2015/07/29 10:51:06 | 000,046,080 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\UcmUcsi.sys -- (UcmUcsi)
DRV:[b]64bit:[/b] - [2015/07/16 02:06:38 | 021,622,272 | ---- | M] (Advanced Micro Devices, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\atikmdag.sys -- (amdkmdag)
DRV:[b]64bit:[/b] - [2015/07/16 01:13:28 | 000,665,088 | ---- | M] (Advanced Micro Devices, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\atikmpag.sys -- (amdkmdap)
DRV:[b]64bit:[/b] - [2015/07/10 13:49:44 | 000,038,752 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\terminpt.sys -- (terminpt)
DRV:[b]64bit:[/b] - [2015/07/10 13:49:00 | 000,029,536 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\rdpvideominiport.sys -- (RdpVideoMiniport)
DRV:[b]64bit:[/b] - [2015/07/10 08:01:20 | 000,029,536 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\WpdUpFltr.sys -- (WpdUpFltr)
DRV:[b]64bit:[/b] - [2015/07/10 08:00:14 | 000,380,768 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\clfs.sys -- (CLFS)
DRV:[b]64bit:[/b] - [2015/07/10 08:00:14 | 000,215,552 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\ahcache.sys -- (ahcache)
DRV:[b]64bit:[/b] - [2015/07/10 08:00:10 | 000,106,520 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\WindowsTrustedRT.sys -- (WindowsTrustedRT)
DRV:[b]64bit:[/b] - [2015/07/10 08:00:10 | 000,061,952 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\UcmCx.sys -- (UcmCx0101)
DRV:[b]64bit:[/b] - [2015/07/10 08:00:10 | 000,031,072 | ---- | M] (Microsoft Corporation) [Recognizer | Boot | Unknown] -- C:\WINDOWS\SysNative\drivers\fs_rec.sys -- (Fs_Rec)
DRV:[b]64bit:[/b] - [2015/07/10 08:00:09 | 000,200,544 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\VerifierExt.sys -- (VerifierExt)
DRV:[b]64bit:[/b] - [2015/07/10 08:00:09 | 000,153,440 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\wfplwfs.sys -- (WFPLWFS)
DRV:[b]64bit:[/b] - [2015/07/10 08:00:09 | 000,061,952 | ---- | M] (Microsoft Corporation) [File_System | Auto | Running] -- C:\Windows\SysNative\drivers\storqosflt.sys -- (storqosflt)
DRV:[b]64bit:[/b] - [2015/07/10 08:00:09 | 000,041,984 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\condrv.sys -- (condrv)
DRV:[b]64bit:[/b] - [2015/07/10 08:00:09 | 000,026,624 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ioqos.sys -- (IoQos)
DRV:[b]64bit:[/b] - [2015/07/10 08:00:04 | 000,048,128 | ---- | M] (Microsoft Corporation) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\mmcss.sys -- (MMCSS)
DRV:[b]64bit:[/b] - [2015/07/10 08:00:00 | 000,245,088 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ufx01000.sys -- (Ufx01000)
DRV:[b]64bit:[/b] - [2015/07/10 08:00:00 | 000,159,072 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\msgpioclx.sys -- (GPIOClx0101)
DRV:[b]64bit:[/b] - [2015/07/10 08:00:00 | 000,077,664 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\SpbCx.sys -- (SpbCx)
DRV:[b]64bit:[/b] - [2015/07/10 08:00:00 | 000,074,592 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\SerCx.sys -- (SerCx)
DRV:[b]64bit:[/b] - [2015/07/10 08:00:00 | 000,057,696 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\urscx01000.sys -- (UrsCx01000)
DRV:[b]64bit:[/b] - [2015/07/10 08:00:00 | 000,039,264 | ---- | M] (Microsoft Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\SysNative\drivers\cnghwassist.sys -- (cnghwassist)
DRV:[b]64bit:[/b] - [2015/07/10 07:59:59 | 000,155,488 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\SerCx2.sys -- (SerCx2)
DRV:[b]64bit:[/b] - [2015/07/10 07:59:59 | 000,088,928 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\EhStorClass.sys -- (EhStorClass)
DRV:[b]64bit:[/b] - [2015/07/10 07:59:59 | 000,011,776 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\mshidumdf.sys -- (mshidumdf)
DRV:[b]64bit:[/b] - [2015/07/10 07:59:56 | 000,008,192 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\gpuenergydrv.sys -- (GpuEnergyDrv)
DRV:[b]64bit:[/b] - [2015/07/10 07:59:53 | 000,129,024 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\NdisImPlatform.sys -- (NdisImPlatform)
DRV:[b]64bit:[/b] - [2015/07/10 07:59:53 | 000,124,928 | ---- | M] (Microsoft Corporation) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\Ndu.sys -- (Ndu)
DRV:[b]64bit:[/b] - [2015/07/10 07:59:52 | 000,020,992 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\NdisVirtualBus.sys -- (NdisVirtualBus)
DRV:[b]64bit:[/b] - [2015/07/10 07:59:50 | 000,119,648 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\WdNisDrv.sys -- (WdNisDrv)
DRV:[b]64bit:[/b] - [2015/07/10 07:59:50 | 000,082,432 | ---- | M] (Microsoft Corporation) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\mslldp.sys -- (MsLldp)
DRV:[b]64bit:[/b] - [2015/07/10 07:59:48 | 000,291,680 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\WdFilter.sys -- (WdFilter)
DRV:[b]64bit:[/b] - [2015/07/10 07:59:48 | 000,209,760 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\Ucx01000.sys -- (Ucx01000)
DRV:[b]64bit:[/b] - [2015/07/10 07:59:48 | 000,127,840 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\acpiex.sys -- (acpiex)
DRV:[b]64bit:[/b] - [2015/07/10 07:59:48 | 000,098,144 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\pdc.sys -- (pdc)
DRV:[b]64bit:[/b] - [2015/07/10 07:59:48 | 000,083,968 | ---- | M] (Microsoft Corporation) [File_System | System | Running] -- C:\Windows\SysNative\drivers\filecrypt.sys -- (FileCrypt)
DRV:[b]64bit:[/b] - [2015/07/10 07:59:48 | 000,061,440 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbFlt.sys -- (TsUsbFlt)
DRV:[b]64bit:[/b] - [2015/07/10 07:59:48 | 000,044,568 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\WdBoot.sys -- (WdBoot)
DRV:[b]64bit:[/b] - [2015/07/10 07:59:48 | 000,044,032 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\Udecx.sys -- (UdeCx)
DRV:[b]64bit:[/b] - [2015/07/10 07:59:48 | 000,031,744 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\vhf.sys -- (vhf)
DRV:[b]64bit:[/b] - [2015/07/10 07:59:40 | 000,033,280 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbGD.sys -- (TsUsbGD)
DRV:[b]64bit:[/b] - [2015/07/10 07:59:40 | 000,028,512 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\urschipidea.sys -- (UrsChipidea)
DRV:[b]64bit:[/b] - [2015/07/10 07:59:40 | 000,027,488 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\urssynopsys.sys -- (UrsSynopsys)
DRV:[b]64bit:[/b] - [2015/07/10 07:59:40 | 000,026,624 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\npsvctrig.sys -- (npsvctrig)
DRV:[b]64bit:[/b] - [2015/07/10 07:59:40 | 000,017,944 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\WindowsTrustedRTProxy.sys -- (WindowsTrustedRTProxy)
DRV:[b]64bit:[/b] - [2015/07/10 07:59:39 | 000,705,376 | ---- | M] (Mellanox) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\mlx4_bus.sys -- (mlx4_bus)
DRV:[b]64bit:[/b] - [2015/07/10 07:59:39 | 000,474,464 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\spaceport.sys -- (spaceport)
DRV:[b]64bit:[/b] - [2015/07/10 07:59:39 | 000,424,800 | ---- | M] (Mellanox) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ibbus.sys -- (ibbus)
DRV:[b]64bit:[/b] - [2015/07/10 07:59:39 | 000,305,504 | ---- | M] (VIA Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\VSTXRAID.SYS -- (VSTXRAID)
DRV:[b]64bit:[/b] - [2015/07/10 07:59:39 | 000,133,984 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\storahci.sys -- (storahci)
DRV:[b]64bit:[/b] - [2015/07/10 07:59:39 | 000,129,224 | ---- | M] (Qualcomm Atheros Co., Ltd.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\L1C63x64.sys -- (L1C)
DRV:[b]64bit:[/b] - [2015/07/10 07:59:39 | 000,127,840 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ufxsynopsys.sys -- (ufxsynopsys)
DRV:[b]64bit:[/b] - [2015/07/10 07:59:39 | 000,094,048 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\UfxChipidea.sys -- (UfxChipidea)
DRV:[b]64bit:[/b] - [2015/07/10 07:59:39 | 000,077,664 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\uaspstor.sys -- (UASPStor)
DRV:[b]64bit:[/b] - [2015/07/10 07:59:39 | 000,076,128 | ---- | M] (Mellanox) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ndfltr.sys -- (ndfltr)
DRV:[b]64bit:[/b] - [2015/07/10 07:59:39 | 000,063,840 | ---- | M] (Marvell Semiconductor, Inc.) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\mvumis.sys -- (mvumis)
DRV:[b]64bit:[/b] - [2015/07/10 07:59:39 | 000,059,232 | ---- | M] (Mellanox) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\winverbs.sys -- (WinVerbs)
DRV:[b]64bit:[/b] - [2015/07/10 07:59:39 | 000,058,720 | ---- | M] (Avago Technologies) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\percsas3i.sys -- (percsas3i)
DRV:[b]64bit:[/b] - [2015/07/10 07:59:39 | 000,058,208 | ---- | M] (LSI Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\percsas2i.sys -- (percsas2i)
DRV:[b]64bit:[/b] - [2015/07/10 07:59:39 | 000,055,296 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\BasicDisplay.sys -- (BasicDisplay)
DRV:[b]64bit:[/b] - [2015/07/10 07:59:39 | 000,041,472 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\BasicRender.sys -- (BasicRender)
DRV:[b]64bit:[/b] - [2015/07/10 07:59:39 | 000,040,288 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\storufs.sys -- (storufs)
DRV:[b]64bit:[/b] - [2015/07/10 07:59:39 | 000,031,072 | ---- | M] (Promise Technology, Inc.) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor)
DRV:[b]64bit:[/b] - [2015/07/10 07:59:39 | 000,028,512 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\uefi.sys -- (UEFI)
DRV:[b]64bit:[/b] - [2015/07/10 07:59:39 | 000,026,976 | ---- | M] (Mellanox) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\winmad.sys -- (WinMad)
DRV:[b]64bit:[/b] - [2015/07/10 07:59:39 | 000,017,760 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\DriverStore\FileRepository\swenum.inf_amd64_2a699e44676b7781\swenum.sys -- (swenum)
DRV:[b]64bit:[/b] - [2015/07/10 07:59:38 | 003,436,896 | ---- | M] (QLogic Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv)
DRV:[b]64bit:[/b] - [2015/07/10 07:59:38 | 001,135,456 | ---- | M] (PMC-Sierra) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\adp80xx.sys -- (ADP80XX)
DRV:[b]64bit:[/b] - [2015/07/10 07:59:38 | 000,673,120 | ---- | M] (Intel Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\iaStorAV.sys -- (iaStorAV)
DRV:[b]64bit:[/b] - [2015/07/10 07:59:38 | 000,531,296 | ---- | M] (Broadcom Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv)
DRV:[b]64bit:[/b] - [2015/07/10 07:59:38 | 000,259,424 | ---- | M] (AMD Technologies Inc.) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs)
DRV:[b]64bit:[/b] - [2015/07/10 07:59:38 | 000,222,720 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\xboxgip.sys -- (xboxgip)
DRV:[b]64bit:[/b] - [2015/07/10 07:59:38 | 000,207,712 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\tpm.sys -- (TPM)
DRV:[b]64bit:[/b] - [2015/07/10 07:59:38 | 000,116,736 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\capimg.sys -- (CapImg)
DRV:[b]64bit:[/b] - [2015/07/10 07:59:38 | 000,107,360 | ---- | M] (LSI) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\3ware.sys -- (3ware)
DRV:[b]64bit:[/b] - [2015/07/10 07:59:38 | 000,104,800 | ---- | M] (LSI Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2i.sys -- (LSI_SAS2i)
DRV:[b]64bit:[/b] - [2015/07/10 07:59:38 | 000,099,168 | ---- | M] (Avago Technologies) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas3i.sys -- (LSI_SAS3i)
DRV:[b]64bit:[/b] - [2015/07/10 07:59:38 | 000,083,296 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata)
DRV:[b]64bit:[/b] - [2015/07/10 07:59:38 | 000,082,784 | ---- | M] (LSI Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\lsi_sss.sys -- (LSI_SSS)
DRV:[b]64bit:[/b] - [2015/07/10 07:59:38 | 000,064,352 | ---- | M] (Hewlett-Packard Company) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD)
DRV:[b]64bit:[/b] - [2015/07/10 07:59:38 | 000,050,016 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hidinterrupt.sys -- (hidinterrupt)
DRV:[b]64bit:[/b] - [2015/07/10 07:59:38 | 000,032,256 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\buttonconverter.sys -- (buttonconverter)
DRV:[b]64bit:[/b] - [2015/07/10 07:59:38 | 000,026,976 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata)
DRV:[b]64bit:[/b] - [2015/07/10 07:59:38 | 000,025,600 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\xinputhid.sys -- (xinputhid)
DRV:[b]64bit:[/b] - [2015/07/10 07:59:38 | 000,023,040 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\kdnic.sys -- (kdnic)
DRV:[b]64bit:[/b] - [2015/07/10 07:59:38 | 000,022,528 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\WSDPrint.sys -- (WSDPrintDevice)
DRV:[b]64bit:[/b] - [2015/07/10 07:59:38 | 000,020,992 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\genericusbfn.sys -- (genericusbfn)
DRV:[b]64bit:[/b] - [2015/07/10 07:59:38 | 000,017,624 | ---- | M] (Windows (R) Win 7 DDK provider) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bcmfn2.sys -- (bcmfn2)
DRV:[b]64bit:[/b] - [2015/07/10 07:59:38 | 000,012,800 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\acpitime.sys -- (acpitime)
DRV:[b]64bit:[/b] - [2015/07/10 07:59:38 | 000,012,288 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\acpipagr.sys -- (acpipagr)
DRV:[b]64bit:[/b] - [2015/07/10 07:59:37 | 000,024,576 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\WSDScan.sys -- (WSDScan)
DRV:[b]64bit:[/b] - [2015/07/10 07:59:37 | 000,012,800 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\serscan.sys -- (StillCam)
DRV:[b]64bit:[/b] - [2015/07/10 07:59:36 | 000,276,832 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\sdbus.sys -- (sdbus)
DRV:[b]64bit:[/b] - [2015/07/10 07:59:36 | 000,122,608 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\iaLPSSi_I2C.sys -- (iaLPSSi_I2C)
DRV:[b]64bit:[/b] - [2015/07/10 07:59:36 | 000,116,576 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\EhStorTcgDrv.sys -- (EhStorTcgDrv)
DRV:[b]64bit:[/b] - [2015/07/10 07:59:36 | 000,094,720 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\netvsc.sys -- (netvsc)
DRV:[b]64bit:[/b] - [2015/07/10 07:59:36 | 000,092,512 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\sdstor.sys -- (sdstor)
DRV:[b]64bit:[/b] - [2015/07/10 07:59:36 | 000,074,080 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\vpci.sys -- (vpci)
DRV:[b]64bit:[/b] - [2015/07/10 07:59:36 | 000,064,000 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\Synth3dVsc.sys -- (Synth3dVsc)
DRV:[b]64bit:[/b] - [2015/07/10 07:59:36 | 000,051,200 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hidi2c.sys -- (hidi2c)
DRV:[b]64bit:[/b] - [2015/07/10 07:59:36 | 000,043,872 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\intelpep.sys -- (intelpep)
DRV:[b]64bit:[/b] - [2015/07/10 07:59:36 | 000,042,496 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\BthAvrcpTg.sys -- (BthAvrcpTg)
DRV:[b]64bit:[/b] - [2015/07/10 07:59:36 | 000,039,936 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\DriverStore\FileRepository\compositebus.inf_amd64_98334ba6e76853ba\CompositeBus.sys -- (CompositeBus)
DRV:[b]64bit:[/b] - [2015/07/10 07:59:36 | 000,038,128 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\iaLPSSi_GPIO.sys -- (iaLPSSi_GPIO)
DRV:[b]64bit:[/b] - [2015/07/10 07:59:36 | 000,033,792 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\dmvsc.sys -- (dmvsc)
DRV:[b]64bit:[/b] - [2015/07/10 07:59:36 | 000,031,232 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\fcvsc.sys -- (fcvsc)
DRV:[b]64bit:[/b] - [2015/07/10 07:59:36 | 000,030,720 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\BthhfHid.sys -- (bthhfhid)
DRV:[b]64bit:[/b] - [2015/07/10 07:59:36 | 000,026,112 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HyperVideo.sys -- (HyperVideo)
DRV:[b]64bit:[/b] - [2015/07/10 07:59:36 | 000,016,384 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hyperkbd.sys -- (hyperkbd)
DRV:[b]64bit:[/b] - [2015/07/10 07:59:36 | 000,013,312 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\vmgencounter.sys -- (gencounter)
DRV:[b]64bit:[/b] - [2015/07/08 16:37:18 | 000,050,864 | ---- | M] (SteelSeries ApS) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\sshid.sys -- (sshid)
DRV:[b]64bit:[/b] - [2015/06/22 02:49:50 | 000,701,136 | ---- | M] (VIA Technologies, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\viahduaa.sys -- (VIAHdAudAddService)
DRV:[b]64bit:[/b] - [2015/06/16 15:55:04 | 000,259,040 | ---- | M] (AVG Technologies CZ, s.r.o.) [File_System | System | Running] -- C:\Windows\SysNative\drivers\avgldx64.sys -- (Avgldx64)
DRV:[b]64bit:[/b] - [2015/05/28 07:00:44 | 000,102,912 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\AtihdWT6.sys -- (AtiHDAudioService)
DRV:[b]64bit:[/b] - [2015/05/07 13:50:22 | 000,378,336 | ---- | M] (AVG Technologies CZ, s.r.o.) [File_System | Boot | Running] -- C:\Windows\SysNative\drivers\avgloga.sys -- (Avgloga)
DRV:[b]64bit:[/b] - [2015/03/27 08:40:48 | 000,021,152 | ---- | M] (AVG Technologies CZ, s.r.o.) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\avgboota.sys -- (Avgboota)
DRV:[b]64bit:[/b] - [2015/03/20 12:18:18 | 000,040,928 | ---- | M] (AVG Technologies CZ, s.r.o.) [File_System | Boot | Running] -- C:\Windows\SysNative\drivers\avgrkx64.sys -- (Avgrkx64)
DRV:[b]64bit:[/b] - [2015/03/11 12:16:06 | 000,162,784 | ---- | M] (AVG Technologies CZ, s.r.o.) [File_System | System | Running] -- C:\Windows\SysNative\drivers\avgdiska.sys -- (Avgdiska)
DRV:[b]64bit:[/b] - [2015/03/10 15:32:08 | 000,043,576 | ---- | M] (Avira Operations GmbH & Co. KG) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\avnetflt.sys -- (avnetflt)
DRV:[b]64bit:[/b] - [2014/11/27 07:22:01 | 000,028,600 | ---- | M] (Avira Operations GmbH & Co. KG) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\avkmgr.sys -- (avkmgr)
DRV:[b]64bit:[/b] - [2013/06/28 11:45:00 | 000,036,352 | ---- | M] (LG Electronics Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lgandnetmodem64.sys -- (ANDNetModem)
DRV:[b]64bit:[/b] - [2013/04/18 16:14:12 | 000,029,184 | ---- | M] (LG Electronics Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lgandnetdiag64.sys -- (AndNetDiag)
DRV:[b]64bit:[/b] - [2013/04/18 16:12:26 | 000,031,744 | ---- | M] (Google Inc) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lgandnetadb.sys -- (andnetadb)
DRV:[b]64bit:[/b] - [2012/10/26 16:42:22 | 004,758,176 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\lvuvc64.sys -- (LVUVC64)
DRV:[b]64bit:[/b] - [2012/10/26 16:42:22 | 000,351,520 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\lvrs64.sys -- (lvrs64)
DRV:[b]64bit:[/b] - [2012/10/26 16:42:22 | 000,026,784 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\lvbflt64.sys -- (CompFilter64)
DRV:[b]64bit:[/b] - [2012/10/03 15:14:56 | 000,033,240 | ---- | M] (GEAR Software Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\GEARAspiWDM.sys -- (GEARAspiWDM)
DRV:[b]64bit:[/b] - [2012/09/22 20:17:24 | 000,021,160 | ---- | M] (Advanced Micro Devices, Inc.) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\amdkmafd.sys -- (amdkmafd)
DRV:[b]64bit:[/b] - [2011/11/03 03:01:00 | 000,056,208 | ---- | M] (Rovi Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\PxHlpa64.sys -- (PxHlpa64)
DRV:[b]64bit:[/b] - [2010/10/19 22:34:26 | 000,056,344 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\HECIx64.sys -- (MEIx64)
DRV - [2015/07/10 07:59:39 | 000,017,760 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\System32\DriverStore\FileRepository\swenum.inf_amd64_2a699e44676b7781\swenum.sys -- (swenum)
DRV - [2015/07/10 07:59:36 | 000,039,936 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\System32\DriverStore\FileRepository\compositebus.inf_amd64_98334ba6e76853ba\CompositeBus.sys -- (CompositeBus)


[color=#E56717]========== Standard Registry (SafeList) ==========[/color]


[color=#E56717]========== Internet Explorer ==========[/color]

IE:[b]64bit:[/b] - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE:[b]64bit:[/b] - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = https://br.search.yahoo.com/?type=903578&fr=spigot-yhp-ie
IE - HKCU\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKCU\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IESR02
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0


[color=#E56717]========== FireFox ==========[/color]

FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=:  File not found
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=1.0: C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF - HKLM\Software\MozillaPlugins\@foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/pdf: C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll (Foxit Corporation)
FF - HKLM\Software\MozillaPlugins\@foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.fdf: C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll (Foxit Corporation)
FF - HKLM\Software\MozillaPlugins\@Google.com/GoogleEarthPlugin: C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/SharePoint,version=14.0: C:\Program Files\Microsoft Office 15\root\Office15\NPSPWRAP.DLL (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=16.4.3528.0331: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files (x86)\Google\Update\1.3.28.13\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files (x86)\Google\Update\1.3.28.13\npGoogleUpdate3.dll (Google Inc.)
FF - HKCU\Software\MozillaPlugins\gastecnologia.com.br/sf/uni: C:\Users\Raphael\AppData\Local\GAS Tecnologia\GBBD\npsf_uni.dll (GAS Tecnologia)


[2015/01/20 14:19:22 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Raphael\AppData\Roaming\mozilla\Firefox\Profiles\u5vHg1lw.default\extensions
[2015/01/20 14:19:23 | 000,000,000 | ---D | M] (Avira Browser Safety) -- C:\Users\Raphael\AppData\Roaming\mozilla\Firefox\Profiles\u5vHg1lw.default\extensions\abs@avira.com

[color=#E56717]========== Chrome  ==========[/color]

CHR - Extension: No name found = C:\Users\Raphael\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek\0.9_0\
CHR - Extension: No name found = C:\Users\Raphael\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\
CHR - Extension: No name found = C:\Users\Raphael\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\14.0_1\
CHR - Extension: No name found = C:\Users\Raphael\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.7_0\
CHR - Extension: No name found = C:\Users\Raphael\AppData\Local\Google\Chrome\User Data\Default\Extensions\bnbaboaihhkjoaolfnfoablhllahjnee\5.0.47.0_0\
CHR - Extension: No name found = C:\Users\Raphael\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.30_0\
CHR - Extension: No name found = C:\Users\Raphael\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap\1.1_0\
CHR - Extension: No name found = C:\Users\Raphael\AppData\Local\Google\Chrome\User Data\Default\Extensions\flliilndjeohchalpbbcdekjklbdgfkk\1.5.0_0\
CHR - Extension: No name found = C:\Users\Raphael\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi\0.5_1\
CHR - Extension: No name found = C:\Users\Raphael\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom\2.39_0\
CHR - Extension: No name found = C:\Users\Raphael\AppData\Local\Google\Chrome\User Data\Default\Extensions\imcbnnnoghiihopefblgehihofbfbmei\2.0.2.0_0\
CHR - Extension: No name found = C:\Users\Raphael\AppData\Local\Google\Chrome\User Data\Default\Extensions\jlnifkhedbahmcmnopkfjindppdejfgk\0.2.2_0\
CHR - Extension: No name found = C:\Users\Raphael\AppData\Local\Google\Chrome\User Data\Default\Extensions\kgmpojlddncminmkddkpoegdjhojjipg\3.7.1_0\
CHR - Extension: No name found = C:\Users\Raphael\AppData\Local\Google\Chrome\User Data\Default\Extensions\lccekmodgklaepjeofjdjpbminllajkg\0.3.0.5_0\
CHR - Extension: No name found = C:\Users\Raphael\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.2.0_0\
CHR - Extension: No name found = C:\Users\Raphael\AppData\Local\Google\Chrome\User Data\Default\Extensions\pbkobmcegbmmjnfhholeonfacmfkpcja\1.0.6_0\
CHR - Extension: No name found = C:\Users\Raphael\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\8.1_0\

O1 HOSTS File: ([2015/06/21 00:29:50 | 000,000,822 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts
O2:[b]64bit:[/b] - BHO: (Skype for Business Browser Helper) - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Arquivos de Programas\Microsoft Office 15\root\vfs\ProgramFilesX64\Microsoft Office\Office15\ochelper.dll (Microsoft Corporation)
O2:[b]64bit:[/b] - BHO: (Microsoft SkyDrive Pro Browser Helper) - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\Arquivos de Programas\Microsoft Office 15\root\vfs\ProgramFilesX64\Microsoft Office\Office15\grooveex.dll (Microsoft Corporation)
O2 - BHO: (GbIehObj Class) - {C41A1C0E-EA6C-11D4-B1B8-444553540008} - C:\Program Files (x86)\GbPlugin\gbiehuni.dll (Banco Itaú Unibanco)
O4:[b]64bit:[/b] - HKLM..\Run: [AdobeAAMUpdater-1.0] C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe (Adobe Systems Incorporated)
O4 - HKLM..\Run: [AdobeCS6ServiceManager] C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe (Adobe Systems Incorporated)
O4 - HKLM..\Run: [AVG_UI] C:\Program Files (x86)\AVG\AVG2015\avgui.exe (AVG Technologies CZ, s.r.o.)
O4 - HKLM..\Run: [avgnt] C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe (Avira Operations GmbH & Co. KG)
O4 - HKLM..\Run: [Avira Systray] C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe (Avira Operations GmbH & Co. KG)
O4 - HKLM..\Run: [Diebold - Warsaw] C:\Program Files (x86)\Diebold\Warsaw\core.exe (GAS Tecnologia LTDA)
O4 - HKLM..\Run: [StartCCC] C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe (Advanced Micro Devices, Inc.)
O4 - HKLM..\Run: [SwitchBoard] C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe (Adobe Systems Incorporated)
O4 - HKCU..\Run: [AdobeBridge]  File not found
O4 - HKCU..\Run: [HP Deskjet 3510 series (NET)] C:\Program Files\HP\HP Deskjet 3510 series\Bin\ScanToPCActivationApp.exe (Hewlett-Packard Co.)
O4 - HKCU..\Run: [OneDrive] C:\Users\Raphael\AppData\Local\Microsoft\OneDrive\OneDrive.exe (Microsoft Corporation)
O4 - HKCU..\Run: [Steam] C:\Program Files (x86)\Steam\steam.exe (Valve Corporation)
O4 - HKCU..\RunOnce: [Uninstall C:\Users\Raphael\AppData\Local\Microsoft\OneDrive\17.3.5907.0716_1\amd64] C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Raphael\AppData\Local\Microsoft\OneDrive\17.3.5907.0716_1\amd64" File not found
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DSCAutomationHostEnabled = 2
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableCursorSuppression = 1
O8:[b]64bit:[/b] - Extra context menu item: E&xport to Microsoft Excel - C:\Program Files\Microsoft Office 15\Root\Office15\EXCEL.EXE (Microsoft Corporation)
O8:[b]64bit:[/b] - Extra context menu item: Se&nd to OneNote - C:\Program Files\Microsoft Office 15\Root\Office15\ONBttnIE.dll (Microsoft Corporation)
O8 - Extra context menu item: E&xport to Microsoft Excel - C:\Program Files\Microsoft Office 15\Root\Office15\EXCEL.EXE (Microsoft Corporation)
O8 - Extra context menu item: Se&nd to OneNote - C:\Program Files\Microsoft Office 15\Root\Office15\ONBttnIE.dll (Microsoft Corporation)
O9:[b]64bit:[/b] - Extra Button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Arquivos de Programas\Microsoft Office 15\root\vfs\ProgramFilesX64\Microsoft Office\Office15\onbttnie.dll (Microsoft Corporation)
O9:[b]64bit:[/b] - Extra 'Tools' menuitem : Se&nd to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Arquivos de Programas\Microsoft Office 15\root\vfs\ProgramFilesX64\Microsoft Office\Office15\onbttnie.dll (Microsoft Corporation)
O9:[b]64bit:[/b] - Extra Button: Skype for Business Click to Call - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Arquivos de Programas\Microsoft Office 15\root\vfs\ProgramFilesX64\Microsoft Office\Office15\ochelper.dll (Microsoft Corporation)
O9:[b]64bit:[/b] - Extra 'Tools' menuitem : Skype for Business Click to Call - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Arquivos de Programas\Microsoft Office 15\root\vfs\ProgramFilesX64\Microsoft Office\Office15\ochelper.dll (Microsoft Corporation)
O9:[b]64bit:[/b] - Extra Button: OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Arquivos de Programas\Microsoft Office 15\root\vfs\ProgramFilesX64\Microsoft Office\Office15\onbttnielinkednotes.dll (Microsoft Corporation)
O9:[b]64bit:[/b] - Extra 'Tools' menuitem : OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Arquivos de Programas\Microsoft Office 15\root\vfs\ProgramFilesX64\Microsoft Office\Office15\onbttnielinkednotes.dll (Microsoft Corporation)
O9 - Extra Button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Arquivos de Programas\Microsoft Office 15\root\office15\onbttnie.dll (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : Se&nd to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Arquivos de Programas\Microsoft Office 15\root\office15\onbttnie.dll (Microsoft Corporation)
O9 - Extra Button: OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Arquivos de Programas\Microsoft Office 15\root\office15\onbttnielinkednotes.dll (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Arquivos de Programas\Microsoft Office 15\root\office15\onbttnielinkednotes.dll (Microsoft Corporation)
O10:[b]64bit:[/b] - NameSpace_Catalog5\Catalog_Entries64\000000000007 [] - C:\Arquivos de Programas\Bonjour\mdnsNSP.dll (Apple Inc.)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000007 [] - C:\Program Files (x86)\Bonjour\mdnsNSP.dll (Apple Inc.)
O13[b]64bit:[/b] - gopher Prefix: missing
O13 - gopher Prefix: missing
O15 - HKCU\..Trusted Domains: itau.com.br ([]* in Trusted sites)
O15 - HKCU\..Trusted Domains: itau.com.br ([bankline] * in Trusted sites)
O15 - HKCU\..Trusted Domains: itau.com.br ([bankline] https in Trusted sites)
O15 - HKCU\..Trusted Domains: itau.com.br ([clickbanking] * in Trusted sites)
O15 - HKCU\..Trusted Domains: itau.com.br ([clickbanking] https in Trusted sites)
O15 - HKCU\..Trusted Domains: itau.com.br ([guardiao] * in Trusted sites)
O15 - HKCU\..Trusted Domains: itau.com.br ([guardiao] https in Trusted sites)
O15 - HKCU\..Trusted Domains: itau.com.br ([www] * in Trusted sites)
O15 - HKCU\..Trusted Domains: itau.com.br ([www] http in Trusted sites)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.0.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{f4b0a7f2-c7a3-4d44-bf1f-fedfaac14585}: DhcpNameServer = 192.168.0.1
O18:[b]64bit:[/b] - Protocol\Handler\osf - No CLSID value found
O18:[b]64bit:[/b] - Protocol\Handler\tbauth {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\SysNative\tbauth.dll (Microsoft Corporation)
O18:[b]64bit:[/b] - Protocol\Handler\wlpg - No CLSID value found
O18 - Protocol\Handler\osf {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Arquivos de Programas\Microsoft Office 15\root\office15\msosb.dll (Microsoft Corporation)
O18 - Protocol\Handler\tbauth {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\SysWOW64\tbauth.dll (Microsoft Corporation)
O20:[b]64bit:[/b] - HKLM Winlogon: Shell - (explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O20:[b]64bit:[/b] - HKLM Winlogon: UserInit - (C:\WINDOWS\System32\Userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\WINDOWS\SysWow64\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\WINDOWS\System32\Userinit.exe) - C:\Windows\SysWOW64\userinit.exe (Microsoft Corporation)
O20 - Winlogon\Notify\ GbPluginUni: DllName - (C:\Program Files (x86)\GbPlugin\gbiehUni.dll) - C:\Program Files (x86)\GbPlugin\gbiehUni.dll (Banco Itaú Unibanco)
O21:[b]64bit:[/b] - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O28 - HKLM ShellExecuteHooks: {E37CB5F0-51F5-4395-A808-5FA49E399008} - C:\Program Files (x86)\GbPlugin\gbiehuni.dll (Banco Itaú Unibanco)
O30:[b]64bit:[/b] - LSA: Security Packages - (livessp) -  File not found
O30 - LSA: Security Packages - (livessp) -  File not found
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2006/09/18 18:43:36 | 000,000,024 | ---- | M] () - D:\autoexec.bat -- [ NTFS ]
O32 - AutoRun File - [2004/10/21 14:54:45 | 000,000,000 | ---D | M] - E:\Autorun -- [ CDFS ]
O32 - AutoRun File - [2004/10/19 15:28:35 | 000,180,224 | R--- | M] () - E:\Autorun.exe -- [ CDFS ]
O32 - AutoRun File - [2004/08/24 18:57:32 | 000,000,042 | R--- | M] () - E:\Autorun.inf -- [ CDFS ]
O32 - AutoRun File - [2010/03/01 12:05:57 | 000,000,000 | RH-D | M] - G:\autorun -- [ NTFS ]
O33 - MountPoints2\{f52d3146-9ebd-11e4-be66-806e6f6e6963}\Shell - "" = AutoRun
O33 - MountPoints2\{f52d3146-9ebd-11e4-be66-806e6f6e6963}\Shell\AutoRun\command - "" = E:\Autorun.exe -- [2004/10/19 15:28:35 | 000,180,224 | R--- | M] ()
O34 - HKLM BootExecute: (autocheck autochk *)
O35:[b]64bit:[/b] - HKLM\..comfile [open] -- "%1" %*
O35:[b]64bit:[/b] - HKLM\..exefile [open] -- "%1" %*
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37:[b]64bit:[/b] - HKLM\...com [@ = comfile] -- "%1" %*
O37:[b]64bit:[/b] - HKLM\...exe [@ = exefile] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)

CREATERESTOREPOINT
Restore point Set: OTL Restore Point


SafeBootMin:[b]64bit:[/b] Ahcache.sys - C:\Windows\SysNative\drivers\ahcache.sys (Microsoft Corporation)
SafeBootMin:[b]64bit:[/b] AppMgmt - C:\Windows\SysNative\appmgmts.dll (Microsoft Corporation)
SafeBootMin:[b]64bit:[/b] Base - Driver Group
SafeBootMin:[b]64bit:[/b] BasicDisplay.sys - C:\Windows\SysNative\drivers\BasicDisplay.sys (Microsoft Corporation)
SafeBootMin:[b]64bit:[/b] BasicRender.sys - C:\Windows\SysNative\drivers\BasicRender.sys (Microsoft Corporation)
SafeBootMin:[b]64bit:[/b] Boot Bus Extender - Driver Group
SafeBootMin:[b]64bit:[/b] Boot file system - Driver Group
SafeBootMin:[b]64bit:[/b] BrokerInfrastructure - C:\Windows\SysNative\bisrv.dll (Microsoft Corporation)
SafeBootMin:[b]64bit:[/b] CoreMessagingRegistrar - C:\Windows\SysNative\CoreMessaging.dll (Microsoft Corporation)
SafeBootMin:[b]64bit:[/b] EFS - C:\Windows\SysNative\efssvc.dll (Microsoft Corporation)
SafeBootMin:[b]64bit:[/b] File system - Driver Group
SafeBootMin:[b]64bit:[/b] Filter - Driver Group
SafeBootMin:[b]64bit:[/b] HelpSvc - Service
SafeBootMin:[b]64bit:[/b] KeyIso - C:\Windows\SysNative\keyiso.dll (Microsoft Corporation)
SafeBootMin:[b]64bit:[/b] LSM - C:\Windows\SysNative\lsm.dll (Microsoft Corporation)
SafeBootMin:[b]64bit:[/b] Netlogon - C:\Windows\SysNative\netlogon.dll (Microsoft Corporation)
SafeBootMin:[b]64bit:[/b] PCI Configuration - Driver Group
SafeBootMin:[b]64bit:[/b] PNP Filter - Driver Group
SafeBootMin:[b]64bit:[/b] Primary disk - Driver Group
SafeBootMin:[b]64bit:[/b] sacsvr - Service
SafeBootMin:[b]64bit:[/b] SCSI Class - Driver Group
SafeBootMin:[b]64bit:[/b] StateRepository - C:\Windows\SysNative\Windows.StateRepository.dll (Microsoft Corporation)
SafeBootMin:[b]64bit:[/b] System Bus Extender - Driver Group
SafeBootMin:[b]64bit:[/b] SystemEventsBroker - C:\Windows\SysNative\SystemEventsBrokerServer.dll (Microsoft Corporation)
SafeBootMin:[b]64bit:[/b] TBS - Service
SafeBootMin:[b]64bit:[/b] TileDataModelSvc - C:\Windows\SysNative\tileobjserver.dll (Microsoft Corporation)
SafeBootMin:[b]64bit:[/b] UserManager - C:\Windows\SysNative\usermgr.dll (Microsoft Corporation)
SafeBootMin:[b]64bit:[/b] vmms - Service
SafeBootMin:[b]64bit:[/b] {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers
SafeBootMin:[b]64bit:[/b] {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive
SafeBootMin:[b]64bit:[/b] {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive
SafeBootMin:[b]64bit:[/b] {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller
SafeBootMin:[b]64bit:[/b] {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc
SafeBootMin:[b]64bit:[/b] {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard
SafeBootMin:[b]64bit:[/b] {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse
SafeBootMin:[b]64bit:[/b] {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters
SafeBootMin:[b]64bit:[/b] {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter
SafeBootMin:[b]64bit:[/b] {4D36E97D-E325-11CE-BFC1-08002BE10318} - System
SafeBootMin:[b]64bit:[/b] {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive
SafeBootMin:[b]64bit:[/b] {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy
SafeBootMin:[b]64bit:[/b] {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers
SafeBootMin:[b]64bit:[/b] {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume
SafeBootMin:[b]64bit:[/b] {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices
SafeBootMin:[b]64bit:[/b] {9DA2B80F-F89F-4A49-A5C2-511B085B9E8A} - Enhanced Storage Devices
SafeBootMin:[b]64bit:[/b] {A0A588A4-C46F-4B37-B7EA-C82FE89870C6} - SDA Standard Compliant SD Host Controller
SafeBootMin:[b]64bit:[/b] {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices
SafeBootMin:[b]64bit:[/b] {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices
SafeBootMin: Base - Driver Group
SafeBootMin: Boot Bus Extender - Driver Group
SafeBootMin: Boot file system - Driver Group
SafeBootMin: CoreMessagingRegistrar - C:\Windows\SysWOW64\CoreMessaging.dll (Microsoft Corporation)
SafeBootMin: File system - Driver Group
SafeBootMin: Filter - Driver Group
SafeBootMin: HelpSvc - Service
SafeBootMin: PCI Configuration - Driver Group
SafeBootMin: PNP Filter - Driver Group
SafeBootMin: Primary disk - Driver Group
SafeBootMin: sacsvr - Service
SafeBootMin: SCSI Class - Driver Group
SafeBootMin: StateRepository - C:\Windows\SysWOW64\Windows.StateRepository.dll (Microsoft Corporation)
SafeBootMin: System Bus Extender - Driver Group
SafeBootMin: TBS - Service
SafeBootMin: vmms - Service
SafeBootMin: {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers
SafeBootMin: {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive
SafeBootMin: {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive
SafeBootMin: {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller
SafeBootMin: {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc
SafeBootMin: {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard
SafeBootMin: {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse
SafeBootMin: {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters
SafeBootMin: {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter
SafeBootMin: {4D36E97D-E325-11CE-BFC1-08002BE10318} - System
SafeBootMin: {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive
SafeBootMin: {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy
SafeBootMin: {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers
SafeBootMin: {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume
SafeBootMin: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices
SafeBootMin: {9DA2B80F-F89F-4A49-A5C2-511B085B9E8A} - Enhanced Storage Devices
SafeBootMin: {A0A588A4-C46F-4B37-B7EA-C82FE89870C6} - SDA Standard Compliant SD Host Controller
SafeBootMin: {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices
SafeBootMin: {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices

NetSvcs:[b]64bit:[/b] dosvc - C:\Windows\SysNative\dosvc.dll (Microsoft Corporation)
NetSvcs:[b]64bit:[/b] wlidsvc - C:\Windows\SysNative\wlidsvc.dll (Microsoft Corporation)
NetSvcs:[b]64bit:[/b] DcpSvc - C:\Windows\SysNative\dcpsvc.dll (Microsoft Corporation)
NetSvcs:[b]64bit:[/b] NcaSvc - C:\Windows\SysNative\NcaSvc.dll (Microsoft Corporation)
NetSvcs:[b]64bit:[/b] NetSetupSvc - C:\Windows\SysNative\NetSetupSvc.dll (Microsoft Corporation)
NetSvcs:[b]64bit:[/b] dmwappushservice - C:\Windows\SysNative\dmwappushsvc.dll (Microsoft Corporation)
NetSvcs:[b]64bit:[/b] XblGameSave - C:\Windows\SysNative\XblGameSave.dll (Microsoft Corporation)
NetSvcs:[b]64bit:[/b] XboxNetApiSvc - C:\Windows\SysNative\XboxNetApiSvc.dll (Microsoft Corporation)
NetSvcs:[b]64bit:[/b] UsoSvc - C:\Windows\SysNative\usocore.dll (Microsoft Corporation)
NetSvcs:[b]64bit:[/b] UserManager - C:\Windows\SysNative\usermgr.dll (Microsoft Corporation)
NetSvcs:[b]64bit:[/b] lfsvc - C:\Windows\SysNative\lfsvc.dll (Microsoft Corporation)
NetSvcs:[b]64bit:[/b] DmEnrollmentSvc - C:\Windows\SysNative\Windows.Internal.Management.dll (Microsoft Corporation)
NetSvcs:[b]64bit:[/b] XblAuthManager - C:\Windows\SysNative\XblAuthManager.dll (Microsoft Corporation)
NetSvcs:[b]64bit:[/b] RetailDemo - C:\Windows\SysNative\RDXService.dll (Microsoft Corporation)
NetSvcs:[b]64bit:[/b] DsmSvc - C:\Windows\SysNative\DeviceSetupManager.dll (Microsoft Corporation)
NetSvcs:[b]64bit:[/b] AppMgmt - C:\Windows\SysNative\appmgmts.dll (Microsoft Corporation)

[color=#E56717]========== Files/Folders - Created Within 90 Days ==========[/color]

[2015/09/05 17:41:23 | 000,000,000 | ---D | C] -- C:\Users\Raphael\AppData\Roaming\AVG2015
[2015/09/05 17:40:28 | 000,000,000 | ---D | C] -- C:\Users\Raphael\AppData\Roaming\TuneUp Software
[2015/09/05 17:40:28 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVG
[2015/09/05 17:40:03 | 000,000,000 | -H-D | C] -- C:\$AVG
[2015/09/05 17:40:03 | 000,000,000 | ---D | C] -- C:\ProgramData\AVG2015
[2015/09/05 17:39:39 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\AVG
[2015/09/05 17:32:53 | 000,000,000 | -H-D | C] -- C:\ProgramData\Common Files
[2015/09/05 17:32:53 | 000,000,000 | ---D | C] -- C:\Users\Raphael\AppData\Local\MFAData
[2015/09/05 17:32:53 | 000,000,000 | ---D | C] -- C:\ProgramData\MFAData
[2015/09/05 17:32:53 | 000,000,000 | ---D | C] -- C:\Users\Raphael\AppData\Local\Avg2015
[2015/09/05 17:26:28 | 000,000,000 | -H-D | C] -- C:\OneDriveTemp
[2015/09/01 22:58:59 | 000,000,000 | ---D | C] -- C:\Users\Raphael\Tracing
[2015/08/27 19:40:25 | 000,000,000 | ---D | C] -- C:\FFOutput
[2015/08/19 11:53:56 | 000,297,904 | ---- | C] (AVG Technologies CZ, s.r.o.) -- C:\WINDOWS\SysNative\drivers\avgidsha.sys
[2015/08/19 11:52:30 | 000,313,264 | ---- | C] (AVG Technologies CZ, s.r.o.) -- C:\WINDOWS\SysNative\drivers\avgidsdrivera.sys
[2015/08/18 21:21:22 | 000,000,000 | ---D | C] -- C:\Users\Raphael\AppData\Roaming\PACE Anti-Piracy
[2015/08/18 21:21:22 | 000,000,000 | ---D | C] -- C:\Users\Raphael\AppData\Local\PACE Anti-Piracy
[2015/08/18 21:21:22 | 000,000,000 | ---D | C] -- C:\ProgramData\PACE Anti-Piracy
[2015/08/18 21:21:13 | 000,000,000 | ---D | C] -- C:\Users\Raphael\Documents\Adobe
[2015/08/18 20:44:42 | 000,056,208 | ---- | C] (Rovi Corporation) -- C:\WINDOWS\SysNative\drivers\PxHlpa64.sys
[2015/08/18 20:44:42 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Sonic Shared
[2015/08/18 20:44:42 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\PX Storage Engine
[2015/08/18 20:44:37 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\My Company Name
[2015/08/18 20:43:13 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe
[2015/08/18 12:32:07 | 000,000,000 | ---D | C] -- C:\Users\Raphael\Desktop\Originals
[2015/08/17 14:03:17 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\DESIGNER
[2015/08/11 10:44:39 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\appmgmt
[2015/08/10 18:57:55 | 000,000,000 | ---D | C] -- C:\ppsfile
[2015/08/04 22:12:51 | 000,000,000 | ---D | C] -- C:\Users\Raphael\AppData\Local\Targit
[2015/08/04 11:32:36 | 000,304,560 | ---- | C] (AVG Technologies CZ, s.r.o.) -- C:\WINDOWS\SysNative\drivers\avgwfpa.sys
[2015/08/04 11:32:32 | 000,250,800 | ---- | C] (AVG Technologies CZ, s.r.o.) -- C:\WINDOWS\SysNative\drivers\avgmfx64.sys
[2015/08/03 00:07:13 | 000,000,000 | ---D | C] -- C:\WINDOWS\Minidump
[2015/08/01 16:58:23 | 000,000,000 | ---D | C] -- C:\Users\Raphael\AppData\Roaming\Leadertech
[2015/08/01 15:24:55 | 000,000,000 | ---D | C] -- C:\Users\Raphael\AppData\Roaming\AMD
[2015/08/01 15:24:08 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HP
[2015/08/01 15:23:59 | 000,000,000 | ---D | C] -- C:\ProgramData\HP
[2015/08/01 15:23:59 | 000,000,000 | ---D | C] -- C:\Program Files\HP
[2015/08/01 15:23:59 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\HP
[2015/08/01 14:58:00 | 000,000,000 | ---D | C] -- C:\Users\Raphael\AppData\Local\HP
[2015/07/31 22:22:23 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Infogrames
[2015/07/31 22:22:23 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Infogrames
[2015/07/30 11:33:30 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\SleepStudy
[2015/07/30 11:29:25 | 000,000,000 | ---D | C] -- C:\Users\Raphael\AppData\Local\PeerDistRepub
[2015/07/29 11:49:46 | 000,000,000 | ---D | C] -- C:\Users\Raphael\AppData\Local\Apps
[2015/07/29 11:40:15 | 000,000,000 | ---D | C] -- C:\Users\Raphael\AppData\Local\MicrosoftEdge
[2015/07/29 11:28:53 | 000,000,000 | ---D | C] -- C:\ProgramData\ATI
[2015/07/29 11:27:17 | 000,000,000 | ---D | C] -- C:\Users\Raphael\AppData\Local\Publishers
[2015/07/29 11:25:21 | 000,000,000 | ---D | C] -- C:\Users\Raphael\AppData\Local\Comms
[2015/07/29 11:25:09 | 000,000,000 | ---D | C] -- C:\Users\Raphael\AppData\Local\TileDataLayer
[2015/07/29 11:00:50 | 000,000,000 | --SD | C] -- C:\Users\Raphael\AppData\Roaming\Microsoft
[2015/07/29 11:00:50 | 000,000,000 | R-SD | C] -- C:\Users\Raphael\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows PowerShell
[2015/07/29 11:00:50 | 000,000,000 | R--D | C] -- C:\Users\Raphael\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
[2015/07/29 11:00:50 | 000,000,000 | R--D | C] -- C:\Users\Raphael\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
[2015/07/29 11:00:50 | 000,000,000 | R--D | C] -- C:\Users\Raphael\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
[2015/07/29 11:00:50 | 000,000,000 | -HSD | C] -- C:\Users\Raphael\AppData\Local\Temporary Internet Files
[2015/07/29 11:00:50 | 000,000,000 | -HSD | C] -- C:\Users\Raphael\SendTo
[2015/07/29 11:00:50 | 000,000,000 | -HSD | C] -- C:\Users\Raphael\Recent
[2015/07/29 11:00:50 | 000,000,000 | -HSD | C] -- C:\Users\Raphael\Modelos
[2015/07/29 11:00:50 | 000,000,000 | -HSD | C] -- C:\Users\Raphael\Documents\Minhas Músicas
[2015/07/29 11:00:50 | 000,000,000 | -HSD | C] -- C:\Users\Raphael\Documents\Minhas Imagens
[2015/07/29 11:00:50 | 000,000,000 | -HSD | C] -- C:\Users\Raphael\Documents\Meus Vídeos
[2015/07/29 11:00:50 | 000,000,000 | -HSD | C] -- C:\Users\Raphael\Meus Documentos
[2015/07/29 11:00:50 | 000,000,000 | -HSD | C] -- C:\Users\Raphael\Menu Iniciar
[2015/07/29 11:00:50 | 000,000,000 | -HSD | C] -- C:\Users\Raphael\AppData\Local\Histórico
[2015/07/29 11:00:50 | 000,000,000 | -HSD | C] -- C:\Users\Raphael\Dados de Aplicativos
[2015/07/29 11:00:50 | 000,000,000 | -HSD | C] -- C:\Users\Raphael\AppData\Local\Dados de Aplicativos
[2015/07/29 11:00:50 | 000,000,000 | -HSD | C] -- C:\Users\Raphael\Cookies
[2015/07/29 11:00:50 | 000,000,000 | -HSD | C] -- C:\Users\Raphael\Configurações Locais
[2015/07/29 11:00:50 | 000,000,000 | -HSD | C] -- C:\Users\Raphael\Ambiente de Rede
[2015/07/29 11:00:50 | 000,000,000 | -HSD | C] -- C:\Users\Raphael\Ambiente de Impressão
[2015/07/29 11:00:50 | 000,000,000 | -H-D | C] -- C:\Users\Raphael\AppData
[2015/07/29 11:00:50 | 000,000,000 | ---D | C] -- C:\Users\Raphael\AppData\Local\Temp
[2015/07/29 11:00:50 | 000,000,000 | ---D | C] -- C:\Users\Raphael\AppData\Local\Microsoft
[2015/07/29 11:00:50 | 000,000,000 | ---D | C] -- C:\Users\Raphael\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
[2015/07/29 10:58:39 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AMD Catalyst Control Center
[2015/07/29 10:58:33 | 000,000,000 | ---D | C] -- C:\Program Files\ATI Technologies
[2015/07/29 10:58:18 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\logishrd
[2015/07/29 10:58:17 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\logishrd
[2015/07/29 10:58:17 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\ATI Technologies
[2015/07/29 10:58:08 | 000,000,000 | ---D | C] -- C:\ProgramData\Package Cache
[2015/07/29 10:58:07 | 000,000,000 | ---D | C] -- C:\Program Files\VIA
[2015/07/29 10:58:06 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\SRSLabs
[2015/07/29 10:57:44 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\ATI Technologies
[2015/07/29 10:57:38 | 000,000,000 | ---D | C] -- C:\Program Files\AMD
[2015/07/29 10:55:25 | 000,000,000 | ---D | C] -- C:\WINDOWS\Prefetch
[2015/07/29 10:54:17 | 000,000,000 | ---D | C] -- C:\WINDOWS\Panther
[2015/07/29 10:47:18 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\XPSViewer
[2015/07/29 10:47:18 | 000,000,000 | ---D | C] -- C:\Program Files\Reference Assemblies
[2015/07/29 10:47:18 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Reference Assemblies
[2015/07/29 10:47:18 | 000,000,000 | ---D | C] -- C:\Program Files\MSBuild
[2015/07/29 10:47:18 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\MSBuild
[2015/07/28 20:10:52 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\PocketSoft
[2015/07/28 20:07:31 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Atari
[2015/07/28 20:07:09 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Atari
[2015/07/28 13:26:22 | 000,000,000 | ---D | C] -- C:\Users\Raphael\AppData\Local\ElevatedDiagnostics
[2015/07/27 16:27:56 | 000,000,000 | ---D | C] -- C:\Users\Raphael\AppData\Roaming\ATI
[2015/07/27 16:27:56 | 000,000,000 | ---D | C] -- C:\Users\Raphael\AppData\Local\ATI
[2015/07/27 16:22:41 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\ATI Technologies
[2015/07/27 16:22:41 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\AMD AVT
[2015/07/27 16:22:41 | 000,000,000 | ---D | C] -- C:\ProgramData\AMD
[2015/07/27 16:20:49 | 000,000,000 | ---D | C] -- C:\AMD
[2015/07/27 16:18:04 | 000,000,000 | ---D | C] -- C:\Program Files\ATI
[2015/07/23 09:52:40 | 000,000,000 | ---D | C] -- C:\Users\Raphael\AppData\Local\CEF
[2015/07/16 01:59:34 | 000,065,024 | ---- | C] (Khronos Group) -- C:\WINDOWS\SysNative\OpenCL.dll
[2015/07/16 01:59:32 | 000,059,392 | ---- | C] (Khronos Group) -- C:\WINDOWS\SysWow64\OpenCL.dll
[2015/07/16 01:17:26 | 000,029,696 | ---- | C] (AMD) -- C:\WINDOWS\SysNative\atimuixx.dll
[2015/07/16 01:17:24 | 000,672,768 | ---- | C] (AMD) -- C:\WINDOWS\SysNative\atieclxx.exe
[2015/07/16 01:17:16 | 000,246,784 | ---- | C] (AMD) -- C:\WINDOWS\SysNative\atiesrxx.exe
[2015/07/16 01:17:02 | 000,190,976 | ---- | C] (AMD) -- C:\WINDOWS\SysNative\atitmm64.dll
[2015/07/16 01:12:52 | 000,865,792 | ---- | C] (AMD) -- C:\WINDOWS\SysNative\coinst_15.20.dll
[2015/07/10 13:50:03 | 000,000,000 | ---D | C] -- C:\WINDOWS\ShellNew
[2015/07/10 13:50:02 | 000,000,000 | RH-D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Tablet PC
[2015/07/10 13:50:02 | 000,000,000 | -HSD | C] -- C:\WINDOWS\BitLockerDiscoveryVolumeContents
[2015/07/10 13:50:02 | 000,000,000 | ---D | C] -- C:\Program Files\Windows Journal
[2015/07/10 13:37:33 | 000,000,000 | ---D | C] -- C:\WINDOWS\OCR
[2015/07/10 13:37:20 | 000,000,000 | ---D | C] -- C:\WINDOWS\SKB
[2015/07/10 13:36:45 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\winrm
[2015/07/10 13:36:45 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\WCN
[2015/07/10 13:36:45 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\sysprep
[2015/07/10 13:36:45 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\slmgr
[2015/07/10 13:36:45 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\Printing_Admin_Scripts
[2015/07/10 13:36:44 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\winrm
[2015/07/10 13:36:44 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\WCN
[2015/07/10 13:36:44 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\drivers\UMDF
[2015/07/10 13:36:44 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\drivers\UMDF\pt-BR
[2015/07/10 13:36:44 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\drivers\pt-BR
[2015/07/10 13:36:44 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\drivers\UMDF\en-US
[2015/07/10 13:36:44 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\drivers\en-US
[2015/07/10 13:36:44 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\en
[2015/07/10 13:36:44 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\0409
[2015/07/10 13:36:43 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\slmgr
[2015/07/10 13:36:42 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\drivers\UMDF\pt-BR
[2015/07/10 13:36:42 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\Printing_Admin_Scripts
[2015/07/10 13:36:42 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\drivers\UMDF\en-US
[2015/07/10 13:36:42 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\en
[2015/07/10 13:36:40 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\drivers\pt-BR
[2015/07/10 13:36:40 | 000,000,000 | ---D | C] -- C:\WINDOWS\pt-BR
[2015/07/10 13:36:40 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\drivers\en-US
[2015/07/10 13:36:40 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\0409
[2015/07/10 10:19:33 | 000,000,000 | ---D | C] -- C:\WINDOWS\en-US
[2015/07/10 10:19:33 | 000,000,000 | ---D | C] -- C:\WINDOWS\DigitalLocker
[2015/07/10 09:22:45 | 000,000,000 | ---D | C] -- C:\ProgramData\USOShared
[2015/07/10 09:21:54 | 000,000,000 | -H-D | C] -- C:\Program Files\Uninstall Information
[2015/07/10 09:21:38 | 000,000,000 | -HSD | C] -- C:\ProgramData\Templates
[2015/07/10 09:21:38 | 000,000,000 | -HSD | C] -- C:\ProgramData\Start Menu
[2015/07/10 09:21:38 | 000,000,000 | -HSD | C] -- C:\Users\Public\Documents\My Videos
[2015/07/10 09:21:38 | 000,000,000 | -HSD | C] -- C:\Users\Public\Documents\My Pictures
[2015/07/10 09:21:38 | 000,000,000 | -HSD | C] -- C:\Users\Public\Documents\My Music
[2015/07/10 09:21:38 | 000,000,000 | -HSD | C] -- C:\Documents and Settings
[2015/07/10 09:21:38 | 000,000,000 | -HSD | C] -- C:\ProgramData\Documents
[2015/07/10 09:21:38 | 000,000,000 | -HSD | C] -- C:\ProgramData\Desktop
[2015/07/10 09:21:38 | 000,000,000 | -HSD | C] -- C:\ProgramData\Application Data
[2015/07/10 09:20:42 | 000,000,000 | ---D | C] -- C:\WINDOWS\ServiceProfiles
[2015/07/10 09:20:38 | 000,000,000 | --SD | C] -- C:\WINDOWS\SysNative\Microsoft
[2015/07/10 08:06:25 | 000,000,000 | ---D | C] -- C:\WINDOWS\Setup
[2015/07/10 08:04:23 | 000,000,000 | --SD | C] -- C:\WINDOWS\SysWow64\Nui
[2015/07/10 08:04:23 | 000,000,000 | --SD | C] -- C:\WINDOWS\SysWow64\F12
[2015/07/10 08:04:23 | 000,000,000 | --SD | C] -- C:\WINDOWS\SysWow64\DiagSvcs
[2015/07/10 08:04:23 | 000,000,000 | --SD | C] -- C:\WINDOWS\SysWow64\Configuration
[2015/07/10 08:04:23 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\zh-TW
[2015/07/10 08:04:23 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\zh-HK
[2015/07/10 08:04:23 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\zh-CN
[2015/07/10 08:04:23 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\WinMetadata
[2015/07/10 08:04:23 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\WindowsPowerShell
[2015/07/10 08:04:23 | 000,000,000 | ---D | C] -- C:\WINDOWS\Web
[2015/07/10 08:04:23 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\wbem
[2015/07/10 08:04:23 | 000,000,000 | ---D | C] -- C:\WINDOWS\Vss
[2015/07/10 08:04:23 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\uk-UA
[2015/07/10 08:04:23 | 000,000,000 | ---D | C] -- C:\WINDOWS\twain_32
[2015/07/10 08:04:23 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\tr-TR
[2015/07/10 08:04:23 | 000,000,000 | ---D | C] -- C:\WINDOWS\tracing
[2015/07/10 08:04:23 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\th-TH
[2015/07/10 08:04:23 | 000,000,000 | ---D | C] -- C:\WINDOWS\Temp
[2015/07/10 08:04:23 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\Tasks
[2015/07/10 08:04:23 | 000,000,000 | ---D | C] -- C:\WINDOWS\TAPI
[2015/07/10 08:04:23 | 000,000,000 | ---D | C] -- C:\WINDOWS\SystemResources
[2015/07/10 08:04:23 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\sv-SE
[2015/07/10 08:04:23 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\sru
[2015/07/10 08:04:23 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\sr-Latn-RS
[2015/07/10 08:04:23 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\sr-Latn-CS
[2015/07/10 08:04:23 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\sppui
[2015/07/10 08:04:23 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\spp
[2015/07/10 08:04:23 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\Speech_OneCore
[2015/07/10 08:04:23 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\Speech
[2015/07/10 08:04:23 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\SMI
[2015/07/10 08:04:23 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\sl-SI
[2015/07/10 08:04:23 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\sk-SK
[2015/07/10 08:04:23 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\setup
[2015/07/10 08:04:23 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\ru-RU
[2015/07/10 08:04:23 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\ro-RO
[2015/07/10 08:04:23 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\restore
[2015/07/10 08:04:23 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\Recovery
[2015/07/10 08:04:23 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\RasToast
[2015/07/10 08:04:23 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\ras
[2015/07/10 08:04:23 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\pt-PT
[2015/07/10 08:04:23 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\pt-BR
[2015/07/10 08:04:23 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\pl-PL
[2015/07/10 08:04:23 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\oobe
[2015/07/10 08:04:23 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\nl-NL
[2015/07/10 08:04:23 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\networklist
[2015/07/10 08:04:23 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\NDF
[2015/07/10 08:04:23 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\nb-NO
[2015/07/10 08:04:23 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\MUI
[2015/07/10 08:04:23 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\MsDtc
[2015/07/10 08:04:23 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\MSDRM
[2015/07/10 08:04:23 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\migwiz
[2015/07/10 08:04:23 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\migration
[2015/07/10 08:04:23 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\Macromed
[2015/07/10 08:04:23 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\lv-LV
[2015/07/10 08:04:23 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\lt-LT
[2015/07/10 08:04:23 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\LogFiles
[2015/07/10 08:04:23 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\Licenses
[2015/07/10 08:04:23 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\ko-KR
[2015/07/10 08:04:23 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\ja-JP
[2015/07/10 08:04:23 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\it-IT
[2015/07/10 08:04:23 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\Ipmi
[2015/07/10 08:04:23 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\InstallShield
[2015/07/10 08:04:23 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\InputMethod
[2015/07/10 08:04:23 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\inetsrv
[2015/07/10 08:04:23 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\IME
[2015/07/10 08:04:23 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\icsxml
[2015/07/10 08:04:23 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\hu-HU
[2015/07/10 08:04:23 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\hr-HR
[2015/07/10 08:04:23 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\he-IL
[2015/07/10 08:04:23 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\GroupPolicyUsers
[2015/07/10 08:04:23 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\GroupPolicy
[2015/07/10 08:04:23 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\FxsTmp
[2015/07/10 08:04:23 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\fr-FR
[2015/07/10 08:04:23 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\fr-CA
[2015/07/10 08:04:23 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\fi-FI
[2015/07/10 08:04:23 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\et-EE
[2015/07/10 08:04:23 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\es-MX
[2015/07/10 08:04:23 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\es-ES
[2015/07/10 08:04:23 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\en-US
[2015/07/10 08:04:23 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\en-GB
[2015/07/10 08:04:23 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\el-GR
[2015/07/10 08:04:23 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\DriverStore
[2015/07/10 08:04:23 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\drivers
[2015/07/10 08:04:23 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\de-DE
[2015/07/10 08:04:23 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\da-DK
[2015/07/10 08:04:23 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\cs-CZ
[2015/07/10 08:04:23 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\config
[2015/07/10 08:04:23 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\Com
[2015/07/10 08:04:23 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\catroot
[2015/07/10 08:04:23 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\Bthprops
[2015/07/10 08:04:23 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\bg-BG
[2015/07/10 08:04:23 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\ar-SA
[2015/07/10 08:04:23 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\AppLocker
[2015/07/10 08:04:22 | 000,000,000 | --SD | C] -- C:\Program Files\WindowsPowerShell
[2015/07/10 08:04:22 | 000,000,000 | --SD | C] -- C:\Program Files (x86)\WindowsPowerShell
[2015/07/10 08:04:22 | 000,000,000 | --SD | C] -- C:\WINDOWS\SysNative\Nui
[2015/07/10 08:04:22 | 000,000,000 | --SD | C] -- C:\ProgramData\Microsoft
[2015/07/10 08:04:22 | 000,000,000 | --SD | C] -- C:\WINDOWS\SysNative\F12
[2015/07/10 08:04:22 | 000,000,000 | --SD | C] -- C:\WINDOWS\SysNative\dsc
[2015/07/10 08:04:22 | 000,000,000 | --SD | C] -- C:\WINDOWS\Downloaded Program Files
[2015/07/10 08:04:22 | 000,000,000 | --SD | C] -- C:\WINDOWS\SysNative\DiagSvcs
[2015/07/10 08:04:22 | 000,000,000 | --SD | C] -- C:\WINDOWS\SysNative\Configuration
[2015/07/10 08:04:22 | 000,000,000 | R-SD | C] -- C:\WINDOWS\Media
[2015/07/10 08:04:22 | 000,000,000 | R-SD | C] -- C:\WINDOWS\Fonts
[2015/07/10 08:04:22 | 000,000,000 | R--D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\System Tools
[2015/07/10 08:04:22 | 000,000,000 | R--D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\StartUp
[2015/07/10 08:04:22 | 000,000,000 | R--D | C] -- C:\WINDOWS\PurchaseDialog
[2015/07/10 08:04:22 | 000,000,000 | R--D | C] -- C:\WINDOWS\PrintDialog
[2015/07/10 08:04:22 | 000,000,000 | R--D | C] -- C:\WINDOWS\Offline Web Pages
[2015/07/10 08:04:22 | 000,000,000 | R--D | C] -- C:\WINDOWS\MiracastView
[2015/07/10 08:04:22 | 000,000,000 | R--D | C] -- C:\WINDOWS\ImmersiveControlPanel
[2015/07/10 08:04:22 | 000,000,000 | R--D | C] -- C:\WINDOWS\DevicesFlow
[2015/07/10 08:04:22 | 000,000,000 | R--D | C] -- C:\WINDOWS\DesktopTileResources
[2015/07/10 08:04:22 | 000,000,000 | R--D | C] -- C:\WINDOWS\assembly
[2015/07/10 08:04:22 | 000,000,000 | R--D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools
[2015/07/10 08:04:22 | 000,000,000 | R--D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories
[2015/07/10 08:04:22 | 000,000,000 | R--D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessibility
[2015/07/10 08:04:22 | 000,000,000 | -HSD | C] -- C:\Program Files\Windows Sidebar
[2015/07/10 08:04:22 | 000,000,000 | -HSD | C] -- C:\Program Files (x86)\Windows Sidebar
[2015/07/10 08:04:22 | 000,000,000 | -HSD | C] -- C:\WINDOWS\Installer
[2015/07/10 08:04:22 | 000,000,000 | -H-D | C] -- C:\Program Files\WindowsApps
[2015/07/10 08:04:22 | 000,000,000 | -H-D | C] -- C:\ProgramData
[2015/07/10 08:04:22 | 000,000,000 | -H-D | C] -- C:\WINDOWS\ELAMBKUP
[2015/07/10 08:04:22 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\zh-TW
[2015/07/10 08:04:22 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\zh-HK
[2015/07/10 08:04:22 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\zh-CN
[2015/07/10 08:04:22 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\WinMetadata
[2015/07/10 08:04:22 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\winevt
[2015/07/10 08:04:22 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\WindowsPowerShell
[2015/07/10 08:04:22 | 000,000,000 | ---D | C] -- C:\Program Files\Windows Portable Devices
[2015/07/10 08:04:22 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Windows Portable Devices
[2015/07/10 08:04:22 | 000,000,000 | ---D | C] -- C:\Program Files\Windows Photo Viewer
[2015/07/10 08:04:22 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Windows Photo Viewer
[2015/07/10 08:04:22 | 000,000,000 | ---D | C] -- C:\Program Files\Windows NT
[2015/07/10 08:04:22 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Windows NT
[2015/07/10 08:04:22 | 000,000,000 | ---D | C] -- C:\Program Files\Windows Multimedia Platform
[2015/07/10 08:04:22 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Windows Multimedia Platform
[2015/07/10 08:04:22 | 000,000,000 | ---D | C] -- C:\Program Files\Windows Media Player
[2015/07/10 08:04:22 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Windows Media Player
[2015/07/10 08:04:22 | 000,000,000 | ---D | C] -- C:\Program Files\Windows Mail
[2015/07/10 08:04:22 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Windows Mail
[2015/07/10 08:04:22 | 000,000,000 | ---D | C] -- C:\Program Files\Windows Defender
[2015/07/10 08:04:22 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Windows Defender
[2015/07/10 08:04:22 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\WinBioPlugIns
[2015/07/10 08:04:22 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\WinBioDatabase
[2015/07/10 08:04:22 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\wfp
[2015/07/10 08:04:22 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\WDI
[2015/07/10 08:04:22 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\wbem
[2015/07/10 08:04:22 | 000,000,000 | ---D | C] -- C:\ProgramData\USOPrivate
[2015/07/10 08:04:22 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\uk-UA
[2015/07/10 08:04:22 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\tr-TR
[2015/07/10 08:04:22 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\th-TH
[2015/07/10 08:04:22 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\Tasks
[2015/07/10 08:04:22 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\SystemResetPlatform
[2015/07/10 08:04:22 | 000,000,000 | ---D | C] -- C:\WINDOWS\SystemApps
[2015/07/10 08:04:22 | 000,000,000 | ---D | C] -- C:\WINDOWS\System
[2015/07/10 08:04:22 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\System
[2015/07/10 08:04:22 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\System
[2015/07/10 08:04:22 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\sv-SE
[2015/07/10 08:04:22 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\sru
[2015/07/10 08:04:22 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\sr-Latn-RS
[2015/07/10 08:04:22 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\sr-Latn-CS
[2015/07/10 08:04:22 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\sppui
[2015/07/10 08:04:22 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\spp
[2015/07/10 08:04:22 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\spool
[2015/07/10 08:04:22 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\Speech_OneCore
[2015/07/10 08:04:22 | 000,000,000 | ---D | C] -- C:\WINDOWS\Speech_OneCore
[2015/07/10 08:04:22 | 000,000,000 | ---D | C] -- C:\WINDOWS\System\Speech
[2015/07/10 08:04:22 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\Speech
[2015/07/10 08:04:22 | 000,000,000 | ---D | C] -- C:\WINDOWS\Speech
[2015/07/10 08:04:22 | 000,000,000 | ---D | C] -- C:\ProgramData\SoftwareDistribution
[2015/07/10 08:04:22 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\sl-SI
[2015/07/10 08:04:22 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\sk-SK
[2015/07/10 08:04:22 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\setup
[2015/07/10 08:04:22 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Services
[2015/07/10 08:04:22 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Services
[2015/07/10 08:04:22 | 000,000,000 | ---D | C] -- C:\WINDOWS\security
[2015/07/10 08:04:22 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\SecureBootUpdates
[2015/07/10 08:04:22 | 000,000,000 | ---D | C] -- C:\WINDOWS\schemas
[2015/07/10 08:04:22 | 000,000,000 | ---D | C] -- C:\WINDOWS\SchCache
[2015/07/10 08:04:22 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\ru-RU
[2015/07/10 08:04:22 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\ro-RO
[2015/07/10 08:04:22 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\restore
[2015/07/10 08:04:22 | 000,000,000 | ---D | C] -- C:\WINDOWS\Resources
[2015/07/10 08:04:22 | 000,000,000 | ---D | C] -- C:\WINDOWS\rescache
[2015/07/10 08:04:22 | 000,000,000 | ---D | C] -- C:\WINDOWS\Registration
[2015/07/10 08:04:22 | 000,000,000 | ---D | C] -- C:\ProgramData\regid.1991-06.com.microsoft
[2015/07/10 08:04:22 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\Recovery
[2015/07/10 08:04:22 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\RasToast
[2015/07/10 08:04:22 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\ras
[2015/07/10 08:04:22 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\pt-PT
[2015/07/10 08:04:22 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\pt-BR
[2015/07/10 08:04:22 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\ProximityToast
[2015/07/10 08:04:22 | 000,000,000 | ---D | C] -- C:\WINDOWS\Provisioning
[2015/07/10 08:04:22 | 000,000,000 | ---D | C] -- C:\WINDOWS\PolicyDefinitions
[2015/07/10 08:04:22 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\PointOfService
[2015/07/10 08:04:22 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\pl-PL
[2015/07/10 08:04:22 | 000,000,000 | ---D | C] -- C:\WINDOWS\PLA
[2015/07/10 08:04:22 | 000,000,000 | ---D | C] -- C:\WINDOWS\Performance
[2015/07/10 08:04:22 | 000,000,000 | ---D | C] -- C:\PerfLogs
[2015/07/10 08:04:22 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\oobe
[2015/07/10 08:04:22 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\nl-NL
[2015/07/10 08:04:22 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\networklist
[2015/07/10 08:04:22 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\NDF
[2015/07/10 08:04:22 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\nb-NO
[2015/07/10 08:04:22 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\MUI
[2015/07/10 08:04:22 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\MsDtc
[2015/07/10 08:04:22 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\MSDRM
[2015/07/10 08:04:22 | 000,000,000 | ---D | C] -- C:\WINDOWS\ModemLogs
[2015/07/10 08:04:22 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\migwiz
[2015/07/10 08:04:22 | 000,000,000 | ---D | C] -- C:\WINDOWS\Migration
[2015/07/10 08:04:22 | 000,000,000 | ---D | C] -- C:\WINDOWS\Microsoft.NET
[2015/07/10 08:04:22 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Microsoft.NET
[2015/07/10 08:04:22 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\microsoft shared
[2015/07/10 08:04:22 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Microsoft Shared
[2015/07/10 08:04:22 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Maintenance
[2015/07/10 08:04:22 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\MailContactsCalendarSync
[2015/07/10 08:04:22 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\Macromed
[2015/07/10 08:04:22 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\lv-LV
[2015/07/10 08:04:22 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\lt-LT
[2015/07/10 08:04:22 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\LogFiles
[2015/07/10 08:04:22 | 000,000,000 | ---D | C] -- C:\WINDOWS\LiveKernelReports
[2015/07/10 08:04:22 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\Licenses
[2015/07/10 08:04:22 | 000,000,000 | ---D | C] -- C:\WINDOWS\L2Schemas
[2015/07/10 08:04:22 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\ko-KR
[2015/07/10 08:04:22 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\ja-JP
[2015/07/10 08:04:22 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\it-IT
[2015/07/10 08:04:22 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\Ipmi
[2015/07/10 08:04:22 | 000,000,000 | ---D | C] -- C:\Program Files\Internet Explorer
[2015/07/10 08:04:22 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Internet Explorer
[2015/07/10 08:04:22 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\InputMethod
[2015/07/10 08:04:22 | 000,000,000 | ---D | C] -- C:\WINDOWS\InputMethod
[2015/07/10 08:04:22 | 000,000,000 | ---D | C] -- C:\WINDOWS\InfusedApps
[2015/07/10 08:04:22 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\inetsrv
[2015/07/10 08:04:22 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\IME
[2015/07/10 08:04:22 | 000,000,000 | ---D | C] -- C:\WINDOWS\IME
[2015/07/10 08:04:22 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\icsxml
[2015/07/10 08:04:22 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\hu-HU
[2015/07/10 08:04:22 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\hr-HR
[2015/07/10 08:04:22 | 000,000,000 | ---D | C] -- C:\WINDOWS\Help
[2015/07/10 08:04:22 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\he-IL
[2015/07/10 08:04:22 | 000,000,000 | ---D | C] -- C:\WINDOWS\Globalization
[2015/07/10 08:04:22 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\FxsTmp
[2015/07/10 08:04:22 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\fr-FR
[2015/07/10 08:04:22 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\fr-CA
[2015/07/10 08:04:22 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\fi-FI
[2015/07/10 08:04:22 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\et-EE
[2015/07/10 08:04:22 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\drivers\etc
[2015/07/10 08:04:22 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\es-MX
[2015/07/10 08:04:22 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\es-ES
[2015/07/10 08:04:22 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\en-US
[2015/07/10 08:04:22 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\en-GB
[2015/07/10 08:04:22 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\el-GR
[2015/07/10 08:04:22 | 000,000,000 | ---D | C] -- C:\WINDOWS\diagnostics
[2015/07/10 08:04:22 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\de-DE
[2015/07/10 08:04:22 | 000,000,000 | ---D | C] -- C:\WINDOWS\debug
[2015/07/10 08:04:22 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\da-DK
[2015/07/10 08:04:22 | 000,000,000 | ---D | C] -- C:\WINDOWS\Cursors
[2015/07/10 08:04:22 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\cs-CZ
[2015/07/10 08:04:22 | 000,000,000 | ---D | C] -- C:\ProgramData\Comms
[2015/07/10 08:04:22 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\Com
[2015/07/10 08:04:22 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\CodeIntegrity
[2015/07/10 08:04:22 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\catroot2
[2015/07/10 08:04:22 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\Bthprops
[2015/07/10 08:04:22 | 000,000,000 | ---D | C] -- C:\WINDOWS\Branding
[2015/07/10 08:04:22 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\Boot
[2015/07/10 08:04:22 | 000,000,000 | ---D | C] -- C:\WINDOWS\Boot
[2015/07/10 08:04:22 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\bg-BG
[2015/07/10 08:04:22 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\ar-SA
[2015/07/10 08:04:22 | 000,000,000 | ---D | C] -- C:\WINDOWS\AppReadiness
[2015/07/10 08:04:22 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\appraiser
[2015/07/10 08:04:22 | 000,000,000 | ---D | C] -- C:\WINDOWS\AppPatch
[2015/07/10 08:04:22 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\AppLocker
[2015/07/10 08:04:22 | 000,000,000 | ---D | C] -- C:\WINDOWS\appcompat
[2015/07/10 08:04:22 | 000,000,000 | ---D | C] -- C:\WINDOWS\addins
[2015/07/10 08:03:59 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\drivers\UMDF
[2015/07/10 08:03:58 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\drivers
[2015/07/10 08:02:54 | 000,000,000 | ---D | C] -- C:\WINDOWS\INF
[2015/07/10 08:01:36 | 000,142,848 | ---- | C] (Windows (R) Win 7 DDK provider) -- C:\WINDOWS\SysWow64\DscCoreConfProv.dll
[2015/07/10 08:01:33 | 000,201,216 | ---- | C] (Windows (R) Win 7 DDK provider) -- C:\WINDOWS\SysNative\DscCoreConfProv.dll
[2015/07/10 08:00:29 | 000,198,144 | ---- | C] (Nokia) -- C:\WINDOWS\SysWow64\NmaDirect.dll
[2015/07/10 08:00:25 | 000,417,752 | ---- | C] (Windows (R) Win 7 DDK provider) -- C:\WINDOWS\SysWow64\winsqlite3.dll
[2015/07/10 08:00:07 | 000,253,952 | ---- | C] (Nokia) -- C:\WINDOWS\SysNative\NmaDirect.dll
[2015/07/10 07:59:58 | 000,657,880 | ---- | C] (Windows (R) Win 7 DDK provider) -- C:\WINDOWS\SysNative\winsqlite3.dll
[2015/07/10 07:59:39 | 000,705,376 | ---- | C] (Mellanox) -- C:\WINDOWS\SysNative\drivers\mlx4_bus.sys
[2015/07/10 07:59:39 | 000,424,800 | ---- | C] (Mellanox) -- C:\WINDOWS\SysNative\drivers\ibbus.sys
[2015/07/10 07:59:39 | 000,305,504 | ---- | C] (VIA Corporation) -- C:\WINDOWS\SysNative\drivers\VSTXRAID.SYS
[2015/07/10 07:59:39 | 000,129,224 | ---- | C] (Qualcomm Atheros Co., Ltd.) -- C:\WINDOWS\SysNative\drivers\L1C63x64.sys
[2015/07/10 07:59:39 | 000,076,128 | ---- | C] (Mellanox) -- C:\WINDOWS\SysNative\drivers\ndfltr.sys
[2015/07/10 07:59:39 | 000,063,840 | ---- | C] (Marvell Semiconductor, Inc.) -- C:\WINDOWS\SysNative\drivers\mvumis.sys
[2015/07/10 07:59:39 | 000,059,232 | ---- | C] (Mellanox) -- C:\WINDOWS\SysNative\drivers\winverbs.sys
[2015/07/10 07:59:39 | 000,058,720 | ---- | C] (Avago Technologies) -- C:\WINDOWS\SysNative\drivers\percsas3i.sys
[2015/07/10 07:59:39 | 000,058,208 | ---- | C] (LSI Corporation) -- C:\WINDOWS\SysNative\drivers\percsas2i.sys
[2015/07/10 07:59:39 | 000,026,976 | ---- | C] (Mellanox) -- C:\WINDOWS\SysNative\drivers\winmad.sys
[2015/07/10 07:59:38 | 001,135,456 | ---- | C] (PMC-Sierra) -- C:\WINDOWS\SysNative\drivers\adp80xx.sys
[2015/07/10 07:59:38 | 000,259,424 | ---- | C] (AMD Technologies Inc.) -- C:\WINDOWS\SysNative\drivers\amdsbs.sys
[2015/07/10 07:59:38 | 000,107,360 | ---- | C] (LSI) -- C:\WINDOWS\SysNative\drivers\3ware.sys
[2015/07/10 07:59:38 | 000,104,800 | ---- | C] (LSI Corporation) -- C:\WINDOWS\SysNative\drivers\lsi_sas2i.sys
[2015/07/10 07:59:38 | 000,099,168 | ---- | C] (Avago Technologies) -- C:\WINDOWS\SysNative\drivers\lsi_sas3i.sys
[2015/07/10 07:59:38 | 000,082,784 | ---- | C] (LSI Corporation) -- C:\WINDOWS\SysNative\drivers\lsi_sss.sys
[2015/07/10 07:59:38 | 000,017,624 | ---- | C] (Windows (R) Win 7 DDK provider) -- C:\WINDOWS\SysNative\drivers\bcmfn2.sys
[2015/07/10 07:55:34 | 000,000,000 | ---D | C] -- C:\WINDOWS\CbsTemp
[2015/07/10 06:07:55 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\AdvancedInstallers
[2015/07/10 06:07:54 | 000,000,000 | ---D | C] -- C:\WINDOWS\Logs
[2015/07/10 06:07:54 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\AdvancedInstallers
[2015/07/10 06:05:38 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWOW64
[2015/07/10 06:05:38 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\Sysprep
[2015/07/10 06:05:38 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\migration
[2015/07/10 06:05:38 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\downlevel
[2015/07/10 06:05:38 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\downlevel
[2015/07/10 06:05:38 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\Dism
[2015/07/10 06:05:38 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\Dism
[2015/07/10 06:05:28 | 000,000,000 | R--D | C] -- C:\Users
[2015/07/10 06:05:28 | 000,000,000 | R--D | C] -- C:\Program Files
[2015/07/10 06:05:28 | 000,000,000 | R--D | C] -- C:\Program Files (x86)
[2015/07/10 06:05:28 | 000,000,000 | ---D | C] -- C:\WINDOWS\WinSxS
[2015/07/10 06:05:28 | 000,000,000 | ---D | C] -- C:\Windows
[2015/07/10 06:05:28 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32
[2015/07/10 06:05:28 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\SMI
[2015/07/10 06:05:28 | 000,000,000 | ---D | C] -- C:\WINDOWS\servicing
[2015/07/10 06:05:28 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\DriverStore
[2015/07/10 06:05:28 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\config
[2015/07/10 06:05:28 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files
[2015/07/10 06:05:28 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files
[2015/07/10 06:05:28 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\CatRoot
[2015/07/08 16:37:18 | 000,050,864 | ---- | C] (SteelSeries ApS) -- C:\WINDOWS\SysNative\drivers\sshid.sys
[2015/06/22 02:51:28 | 027,898,680 | ---- | C] (Waves Audio Ltd.) -- C:\WINDOWS\SysNative\MaxxAudioVnA64.dll
[2015/06/22 02:51:28 | 007,235,584 | ---- | C] (Dolby Laboratories) -- C:\WINDOWS\SysNative\EEP64H.dll
[2015/06/22 02:51:28 | 002,130,448 | ---- | C] (Waves Audio Ltd.) -- C:\WINDOWS\SysNative\WavesGUILib64.dll
[2015/06/22 02:51:28 | 000,080,400 | ---- | C] (Windows (R) Codename Longhorn DDK provider) -- C:\WINDOWS\SysNative\VtSrdAPO.dll
[2015/06/22 02:51:26 | 007,235,584 | ---- | C] (Dolby Laboratories) -- C:\WINDOWS\SysNative\EEP64A.dll
[2015/06/22 02:51:26 | 001,031,376 | ---- | C] (Waves Audio Ltd.) -- C:\WINDOWS\SysNative\MaxxAudioAPOShell64.dll
[2015/06/22 02:51:26 | 000,678,176 | ---- | C] (Waves Audio Ltd.) -- C:\WINDOWS\SysNative\MaxxAudioAPO30.dll
[2015/06/22 02:51:26 | 000,446,224 | ---- | C] (Dolby Laboratories) -- C:\WINDOWS\SysNative\EED64H.dll
[2015/06/22 02:51:26 | 000,446,224 | ---- | C] (Dolby Laboratories) -- C:\WINDOWS\SysNative\EED64A.dll
[2015/06/22 02:51:26 | 000,260,120 | ---- | C] (Windows (R) Codename Longhorn DDK provider) -- C:\WINDOWS\SysNative\Dts2APO.dll
[2015/06/22 02:51:26 | 000,147,224 | ---- | C] (Dolby Laboratories) -- C:\WINDOWS\SysNative\EEL64A.dll
[2015/06/22 02:51:26 | 000,147,216 | ---- | C] (Dolby Laboratories) -- C:\WINDOWS\SysNative\EEL64H.dll
[2015/06/22 02:51:26 | 000,130,144 | ---- | C] (Dolby Laboratories) -- C:\WINDOWS\SysNative\EEA64H.dll
[2015/06/22 02:51:26 | 000,130,144 | ---- | C] (Dolby Laboratories) -- C:\WINDOWS\SysNative\EEA64A.dll
[2015/06/22 02:51:26 | 000,093,712 | ---- | C] (QSound Labs, Inc.) -- C:\WINDOWS\SysNative\nQAPO.dll
[2015/06/22 02:51:26 | 000,084,688 | ---- | C] (Dolby Laboratories) -- C:\WINDOWS\SysNative\EEG64H.dll
[2015/06/22 02:51:26 | 000,084,688 | ---- | C] (Dolby Laboratories) -- C:\WINDOWS\SysNative\EEG64A.dll
[2015/06/22 02:49:50 | 000,094,720 | ---- | C] (QSound Labs, Inc.) -- C:\WINDOWS\SysNative\nQPropPageExt.dll
[2015/06/22 02:49:50 | 000,064,152 | ---- | C] (TODO: <Company name>) -- C:\WINDOWS\SysNative\PropPageExt.dll
[2015/06/16 15:55:04 | 000,259,040 | ---- | C] (AVG Technologies CZ, s.r.o.) -- C:\WINDOWS\SysNative\drivers\avgldx64.sys
[2015/06/14 17:14:27 | 000,000,000 | ---D | C] -- C:\ProgramData\Tencent
[2015/06/14 17:14:27 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Tencent
[2015/06/14 17:09:52 | 000,000,000 | ---D | C] -- C:\Users\Raphael\AppData\Roaming\KingRoot
[2015/06/14 17:09:34 | 000,000,000 | ---D | C] -- C:\Users\Raphael\AppData\Roaming\Tencent

[color=#E56717]========== Files - Modified Within 90 Days ==========[/color]

[2015/09/05 19:12:02 | 000,016,148 | ---- | M] () -- C:\WINDOWS\SysNative\RAPHAEL81_Raphael_HistoryPrediction.bin
[2015/09/05 19:04:03 | 000,001,096 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job
[2015/09/05 18:37:38 | 006,725,004 | ---- | M] () -- C:\Users\Raphael\Desktop\DSC_0117.jpg
[2015/09/05 18:37:23 | 000,764,928 | -H-- | M] () -- C:\Users\Raphael\Desktop\photothumb.db
[2015/09/05 18:33:53 | 000,103,849 | ---- | M] () -- C:\Users\Raphael\Desktop\lost-kingdom-adventure-xQOB.jpg
[2015/09/05 18:30:45 | 002,052,712 | ---- | M] () -- C:\Users\Raphael\Desktop\20150720_163121.jpg
[2015/09/05 18:23:29 | 008,350,306 | ---- | M] () -- C:\Users\Raphael\Desktop\DSC_0102.jpg
[2015/09/05 18:23:17 | 005,665,029 | ---- | M] () -- C:\Users\Raphael\Desktop\DSC_0103.jpg
[2015/09/05 17:40:28 | 000,001,067 | ---- | M] () -- C:\Users\Public\Desktop\AVG 2015.lnk
[2015/09/05 17:32:04 | 001,810,446 | ---- | M] () -- C:\WINDOWS\SysNative\PerfStringBackup.INI
[2015/09/05 17:32:04 | 000,781,824 | ---- | M] () -- C:\WINDOWS\SysNative\prfh0416.dat
[2015/09/05 17:32:04 | 000,731,134 | ---- | M] () -- C:\WINDOWS\SysNative\perfh009.dat
[2015/09/05 17:32:04 | 000,152,812 | ---- | M] () -- C:\WINDOWS\SysNative\prfc0416.dat
[2015/09/05 17:32:04 | 000,137,964 | ---- | M] () -- C:\WINDOWS\SysNative\perfc009.dat
[2015/09/05 17:27:23 | 000,067,584 | --S- | M] () -- C:\WINDOWS\bootstat.dat
[2015/09/05 17:26:24 | 000,001,966 | ---- | M] () -- C:\Users\Raphael\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Monitorar alertas de tinta - HP Deskjet 3510 series (Rede).lnk
[2015/09/05 17:26:06 | 000,001,092 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
[2015/09/05 17:24:51 | 268,435,456 | -HS- | M] () -- C:\swapfile.sys
[2015/09/05 17:24:46 | 3426,287,616 | -HS- | M] () -- C:\hiberfil.sys
[2015/09/02 20:32:21 | 006,573,747 | ---- | M] () -- C:\Users\Raphael\Desktop\DSC_0122.jpg
[2015/09/02 20:30:10 | 008,932,313 | ---- | M] () -- C:\Users\Raphael\Desktop\20150720_144837.jpg
[2015/09/02 20:27:50 | 005,180,152 | ---- | M] () -- C:\Users\Raphael\Desktop\20150720_164411.jpg
[2015/09/02 20:27:35 | 008,424,237 | ---- | M] () -- C:\Users\Raphael\Desktop\20150720_164405.jpg
[2015/09/02 20:27:20 | 004,061,764 | ---- | M] () -- C:\Users\Raphael\Desktop\20150720_164328.jpg
[2015/09/02 20:26:59 | 004,517,778 | ---- | M] () -- C:\Users\Raphael\Desktop\20150720_163339.jpg
[2015/09/02 20:26:39 | 005,190,707 | ---- | M] () -- C:\Users\Raphael\Desktop\20150720_163108.jpg
[2015/09/02 20:26:14 | 003,493,202 | ---- | M] () -- C:\Users\Raphael\Desktop\20150720_162948.jpg
[2015/09/02 20:26:03 | 003,317,561 | ---- | M] () -- C:\Users\Raphael\Desktop\20150720_162808_HDR.jpg
[2015/09/02 20:25:51 | 001,114,421 | ---- | M] () -- C:\Users\Raphael\Desktop\20150720_162447.jpg
[2015/09/02 20:25:39 | 007,100,368 | ---- | M] () -- C:\Users\Raphael\Desktop\20150720_162404.jpg
[2015/09/02 20:25:24 | 006,559,604 | ---- | M] () -- C:\Users\Raphael\Desktop\20150720_160838.jpg
[2015/09/02 20:25:10 | 005,286,496 | ---- | M] () -- C:\Users\Raphael\Desktop\20150720_152937.jpg
[2015/09/02 20:24:55 | 005,303,128 | ---- | M] () -- C:\Users\Raphael\Desktop\20150720_135046.jpg
[2015/09/02 20:24:27 | 009,083,384 | ---- | M] () -- C:\Users\Raphael\Desktop\DSC_0243.jpg
[2015/09/02 20:24:16 | 008,935,437 | ---- | M] () -- C:\Users\Raphael\Desktop\DSC_0242.jpg
[2015/09/02 20:24:06 | 008,056,003 | ---- | M] () -- C:\Users\Raphael\Desktop\DSC_0240.jpg
[2015/09/02 20:23:56 | 007,728,620 | ---- | M] () -- C:\Users\Raphael\Desktop\DSC_0238.jpg
[2015/09/02 20:23:40 | 007,872,066 | ---- | M] () -- C:\Users\Raphael\Desktop\DSC_0237.jpg
[2015/09/02 20:23:29 | 004,009,641 | ---- | M] () -- C:\Users\Raphael\Desktop\DSC_0235.jpg
[2015/09/02 20:23:18 | 003,052,415 | ---- | M] () -- C:\Users\Raphael\Desktop\DSC_0234.jpg
[2015/09/02 20:23:06 | 004,619,136 | ---- | M] () -- C:\Users\Raphael\Desktop\DSC_0233.jpg
[2015/09/02 20:22:55 | 004,776,464 | ---- | M] () -- C:\Users\Raphael\Desktop\DSC_0232.jpg
[2015/09/02 20:22:44 | 004,589,711 | ---- | M] () -- C:\Users\Raphael\Desktop\DSC_0231.jpg
[2015/09/02 20:22:35 | 007,201,675 | ---- | M] () -- C:\Users\Raphael\Desktop\DSC_0229.jpg
[2015/09/02 20:21:50 | 007,254,064 | ---- | M] () -- C:\Users\Raphael\Desktop\DSC_0225.jpg
[2015/09/02 20:21:38 | 010,258,569 | ---- | M] () -- C:\Users\Raphael\Desktop\DSC_0223.jpg
[2015/09/02 20:21:28 | 009,596,733 | ---- | M] () -- C:\Users\Raphael\Desktop\DSC_0222.jpg
[2015/09/02 20:21:16 | 006,088,661 | ---- | M] () -- C:\Users\Raphael\Desktop\DSC_0220.jpg
[2015/09/02 20:21:06 | 006,585,061 | ---- | M] () -- C:\Users\Raphael\Desktop\DSC_0218.jpg
[2015/09/02 20:20:54 | 009,263,004 | ---- | M] () -- C:\Users\Raphael\Desktop\DSC_0216.jpg
[2015/09/02 20:20:38 | 003,874,609 | ---- | M] () -- C:\Users\Raphael\Desktop\DSC_0215.jpg
[2015/09/02 20:20:20 | 007,190,600 | ---- | M] () -- C:\Users\Raphael\Desktop\DSC_0214.jpg
[2015/09/02 20:20:10 | 007,814,645 | ---- | M] () -- C:\Users\Raphael\Desktop\DSC_0212.jpg
[2015/09/02 20:19:57 | 007,851,247 | ---- | M] () -- C:\Users\Raphael\Desktop\DSC_0210.jpg
[2015/09/02 20:19:42 | 008,862,016 | ---- | M] () -- C:\Users\Raphael\Desktop\DSC_0209.jpg
[2015/09/02 20:19:33 | 007,798,230 | ---- | M] () -- C:\Users\Raphael\Desktop\DSC_0208.jpg
[2015/09/02 20:19:20 | 008,046,077 | ---- | M] () -- C:\Users\Raphael\Desktop\DSC_0206.jpg
[2015/09/02 20:17:22 | 005,900,035 | ---- | M] () -- C:\Users\Raphael\Desktop\DSC_0203.jpg
[2015/09/02 20:17:11 | 007,177,516 | ---- | M] () -- C:\Users\Raphael\Desktop\DSC_0202.jpg
[2015/09/02 20:17:01 | 006,896,718 | ---- | M] () -- C:\Users\Raphael\Desktop\DSC_0201.jpg
[2015/09/02 20:16:51 | 006,071,597 | ---- | M] () -- C:\Users\Raphael\Desktop\DSC_0200.jpg
[2015/09/02 20:16:40 | 010,590,374 | ---- | M] () -- C:\Users\Raphael\Desktop\DSC_0199.jpg
[2015/09/02 20:16:28 | 009,578,542 | ---- | M] () -- C:\Users\Raphael\Desktop\DSC_0198.jpg
[2015/09/02 20:16:16 | 008,748,757 | ---- | M] () -- C:\Users\Raphael\Desktop\DSC_0195.jpg
[2015/09/02 20:16:01 | 010,137,836 | ---- | M] () -- C:\Users\Raphael\Desktop\DSC_0194.jpg
[2015/09/02 20:15:49 | 007,748,446 | ---- | M] () -- C:\Users\Raphael\Desktop\DSC_0192.jpg
[2015/09/02 20:15:31 | 009,096,464 | ---- | M] () -- C:\Users\Raphael\Desktop\DSC_0191.jpg
[2015/09/02 20:15:16 | 007,558,224 | ---- | M] () -- C:\Users\Raphael\Desktop\DSC_0190.jpg
[2015/09/02 20:14:57 | 006,616,724 | ---- | M] () -- C:\Users\Raphael\Desktop\DSC_0189.jpg
[2015/09/02 20:14:35 | 009,350,964 | ---- | M] () -- C:\Users\Raphael\Desktop\DSC_0187.jpg
[2015/09/02 20:14:20 | 005,366,716 | ---- | M] () -- C:\Users\Raphael\Desktop\DSC_0186.jpg
[2015/09/02 20:14:08 | 009,324,668 | ---- | M] () -- C:\Users\Raphael\Desktop\DSC_0184.jpg
[2015/09/02 20:13:58 | 009,958,908 | ---- | M] () -- C:\Users\Raphael\Desktop\DSC_0183.jpg
[2015/09/02 20:13:34 | 008,676,285 | ---- | M] () -- C:\Users\Raphael\Desktop\DSC_0181.jpg
[2015/09/02 20:13:20 | 008,383,505 | ---- | M] () -- C:\Users\Raphael\Desktop\DSC_0180.jpg
[2015/09/02 20:13:08 | 006,256,113 | ---- | M] () -- C:\Users\Raphael\Desktop\DSC_0179.jpg
[2015/09/02 20:12:41 | 006,482,220 | ---- | M] () -- C:\Users\Raphael\Desktop\DSC_0177.jpg
[2015/09/02 20:12:28 | 007,300,822 | ---- | M] () -- C:\Users\Raphael\Desktop\DSC_0176.jpg
[2015/09/02 20:12:12 | 006,243,339 | ---- | M] () -- C:\Users\Raphael\Desktop\DSC_0175.jpg
[2015/09/02 20:11:43 | 005,751,668 | ---- | M] () -- C:\Users\Raphael\Desktop\DSC_0174.jpg
[2015/09/02 20:11:20 | 006,206,020 | ---- | M] () -- C:\Users\Raphael\Desktop\DSC_0172.jpg
[2015/09/02 20:11:10 | 004,874,131 | ---- | M] () -- C:\Users\Raphael\Desktop\DSC_0171.jpg
[2015/09/02 20:10:59 | 005,710,858 | ---- | M] () -- C:\Users\Raphael\Desktop\DSC_0170.jpg
[2015/09/02 20:10:31 | 006,681,232 | ---- | M] () -- C:\Users\Raphael\Desktop\DSC_0169.jpg
[2015/09/02 20:10:17 | 010,541,128 | ---- | M] () -- C:\Users\Raphael\Desktop\DSC_0168.jpg
[2015/09/02 20:10:03 | 007,713,707 | ---- | M] () -- C:\Users\Raphael\Desktop\DSC_0165.jpg
[2015/09/02 20:09:53 | 005,256,582 | ---- | M] () -- C:\Users\Raphael\Desktop\DSC_0164.jpg
[2015/09/02 20:09:42 | 007,628,738 | ---- | M] () -- C:\Users\Raphael\Desktop\DSC_0163.jpg
[2015/09/02 20:09:18 | 007,822,822 | ---- | M] () -- C:\Users\Raphael\Desktop\DSC_0162.jpg
[2015/09/02 20:08:49 | 008,441,618 | ---- | M] () -- C:\Users\Raphael\Desktop\DSC_0160.jpg
[2015/09/02 20:08:38 | 008,329,711 | ---- | M] () -- C:\Users\Raphael\Desktop\DSC_0155.jpg
[2015/09/02 20:08:19 | 007,951,826 | ---- | M] () -- C:\Users\Raphael\Desktop\DSC_0153.jpg
[2015/09/02 20:08:07 | 008,778,557 | ---- | M] () -- C:\Users\Raphael\Desktop\DSC_0150.jpg
[2015/09/02 20:07:51 | 008,572,455 | ---- | M] () -- C:\Users\Raphael\Desktop\DSC_0149.jpg
[2015/09/02 20:07:39 | 009,168,437 | ---- | M] () -- C:\Users\Raphael\Desktop\DSC_0148.jpg
[2015/09/02 20:07:28 | 005,641,087 | ---- | M] () -- C:\Users\Raphael\Desktop\DSC_0146.jpg
[2015/09/02 20:06:21 | 008,159,654 | ---- | M] () -- C:\Users\Raphael\Desktop\DSC_0143.jpg
[2015/09/02 20:06:10 | 007,296,599 | ---- | M] () -- C:\Users\Raphael\Desktop\DSC_0140.jpg
[2015/09/02 20:05:39 | 008,282,787 | ---- | M] () -- C:\Users\Raphael\Desktop\DSC_0139.jpg
[2015/09/02 20:05:25 | 009,174,910 | ---- | M] () -- C:\Users\Raphael\Desktop\DSC_0138.jpg
[2015/09/02 20:05:15 | 008,840,121 | ---- | M] () -- C:\Users\Raphael\Desktop\DSC_0136.jpg
[2015/09/02 20:05:02 | 012,584,292 | ---- | M] () -- C:\Users\Raphael\Desktop\DSC_0135.jpg
[2015/09/02 20:04:44 | 008,578,263 | ---- | M] () -- C:\Users\Raphael\Desktop\DSC_0134.jpg
[2015/09/02 20:04:24 | 006,979,119 | ---- | M] () -- C:\Users\Raphael\Desktop\DSC_0132.jpg
[2015/09/02 20:04:12 | 010,030,614 | ---- | M] () -- C:\Users\Raphael\Desktop\DSC_0131.jpg
[2015/09/02 20:04:02 | 007,970,568 | ---- | M] () -- C:\Users\Raphael\Desktop\DSC_0130.jpg
[2015/09/02 20:03:39 | 010,213,103 | ---- | M] () -- C:\Users\Raphael\Desktop\DSC_0128.jpg
[2015/09/02 20:03:27 | 004,446,043 | ---- | M] () -- C:\Users\Raphael\Desktop\DSC_0127.jpg
[2015/09/02 20:03:14 | 003,564,686 | ---- | M] () -- C:\Users\Raphael\Desktop\DSC_0126.jpg
[2015/09/02 20:02:58 | 004,999,621 | ---- | M] () -- C:\Users\Raphael\Desktop\DSC_0125.jpg
[2015/09/02 20:02:44 | 005,740,975 | ---- | M] () -- C:\Users\Raphael\Desktop\DSC_0124.jpg
[2015/09/02 20:02:30 | 005,779,568 | ---- | M] () -- C:\Users\Raphael\Desktop\DSC_0120.jpg
[2015/09/02 20:02:20 | 005,984,362 | ---- | M] () -- C:\Users\Raphael\Desktop\DSC_0119.jpg
[2015/09/02 20:02:06 | 009,099,760 | ---- | M] () -- C:\Users\Raphael\Desktop\DSC_0116.jpg
[2015/09/02 20:01:47 | 005,385,092 | ---- | M] () -- C:\Users\Raphael\Desktop\DSC_0115.jpg
[2015/09/02 20:01:29 | 006,114,899 | ---- | M] () -- C:\Users\Raphael\Desktop\DSC_0114.jpg
[2015/09/02 20:01:14 | 005,838,512 | ---- | M] () -- C:\Users\Raphael\Desktop\DSC_0113.jpg
[2015/09/02 20:01:01 | 007,449,212 | ---- | M] () -- C:\Users\Raphael\Desktop\DSC_0112.jpg
[2015/09/02 20:00:38 | 008,693,059 | ---- | M] () -- C:\Users\Raphael\Desktop\DSC_0111.jpg
[2015/09/02 20:00:25 | 007,444,149 | ---- | M] () -- C:\Users\Raphael\Desktop\DSC_0110.jpg
[2015/09/02 20:00:06 | 004,678,667 | ---- | M] () -- C:\Users\Raphael\Desktop\DSC_0107.jpg
[2015/09/02 19:59:45 | 005,678,240 | ---- | M] () -- C:\Users\Raphael\Desktop\DSC_0106.jpg
[2015/09/02 19:59:28 | 004,626,832 | ---- | M] () -- C:\Users\Raphael\Desktop\DSC_0105.jpg
[2015/09/02 19:58:53 | 004,462,053 | ---- | M] () -- C:\Users\Raphael\Desktop\DSC_0099.jpg
[2015/09/02 19:58:36 | 006,224,695 | ---- | M] () -- C:\Users\Raphael\Desktop\DSC_0098.jpg
[2015/09/02 19:58:21 | 004,881,557 | ---- | M] () -- C:\Users\Raphael\Desktop\DSC_0096.jpg
[2015/09/02 19:58:09 | 005,380,768 | ---- | M] () -- C:\Users\Raphael\Desktop\DSC_0095.jpg
[2015/09/02 19:57:53 | 004,637,639 | ---- | M] () -- C:\Users\Raphael\Desktop\DSC_0093.jpg
[2015/09/02 19:57:30 | 007,218,299 | ---- | M] () -- C:\Users\Raphael\Desktop\DSC_0092.jpg
[2015/09/02 19:57:17 | 004,899,329 | ---- | M] () -- C:\Users\Raphael\Desktop\DSC_0089.jpg
[2015/09/02 19:57:06 | 005,905,496 | ---- | M] () -- C:\Users\Raphael\Desktop\DSC_0087.jpg
[2015/09/02 19:56:54 | 006,999,079 | ---- | M] () -- C:\Users\Raphael\Desktop\DSC_0086.jpg
[2015/09/02 19:55:27 | 004,539,240 | ---- | M] () -- C:\Users\Raphael\Desktop\DSC_0083.jpg
[2015/09/02 19:55:08 | 007,409,223 | ---- | M] () -- C:\Users\Raphael\Desktop\DSC_0081.jpg
[2015/09/02 19:54:54 | 008,296,641 | ---- | M] () -- C:\Users\Raphael\Desktop\DSC_0080.jpg
[2015/09/02 19:54:33 | 005,099,183 | ---- | M] () -- C:\Users\Raphael\Desktop\DSC_0079.jpg
[2015/09/02 19:54:09 | 006,440,978 | ---- | M] () -- C:\Users\Raphael\Desktop\DSC_0078.jpg
[2015/09/02 19:53:54 | 005,120,118 | ---- | M] () -- C:\Users\Raphael\Desktop\DSC_0077.jpg
[2015/09/02 19:53:32 | 009,526,807 | ---- | M] () -- C:\Users\Raphael\Desktop\DSC_0076.jpg
[2015/09/02 19:53:20 | 006,021,165 | ---- | M] () -- C:\Users\Raphael\Desktop\DSC_0075.jpg
[2015/09/02 19:52:26 | 004,362,899 | ---- | M] () -- C:\Users\Raphael\Desktop\DSC_0073.jpg
[2015/09/02 19:51:44 | 005,154,113 | ---- | M] () -- C:\Users\Raphael\Desktop\DSC_0071.jpg
[2015/09/02 19:51:30 | 007,792,484 | ---- | M] () -- C:\Users\Raphael\Desktop\DSC_0070.jpg
[2015/09/02 19:51:17 | 005,148,682 | ---- | M] () -- C:\Users\Raphael\Desktop\DSC_0069.jpg
[2015/09/02 19:51:04 | 004,346,792 | ---- | M] () -- C:\Users\Raphael\Desktop\DSC_0068.jpg
[2015/09/02 19:50:17 | 005,201,015 | ---- | M] () -- C:\Users\Raphael\Desktop\DSC_0067.jpg
[2015/09/01 11:48:39 | 000,148,632 | ---- | M] (Avira Operations GmbH & Co. KG) -- C:\WINDOWS\SysNative\drivers\avipbb.sys
[2015/09/01 11:48:39 | 000,137,288 | ---- | M] (Avira Operations GmbH & Co. KG) -- C:\WINDOWS\SysNative\drivers\avgntflt.sys
[2015/08/30 14:03:34 | 000,268,196 | ---- | M] () -- C:\Users\Raphael\Desktop\The+LEGO+Movie+Experience+at+LEGOLand+California+(c).jpg
[2015/08/30 14:03:29 | 000,342,074 | ---- | M] () -- C:\Users\Raphael\Desktop\12663343113_f22ace6845_b.jpg
[2015/08/30 14:03:24 | 000,164,733 | ---- | M] () -- C:\Users\Raphael\Desktop\THE-LEGO-MOVIE-EXPERIENCE-AT-LEGOLAND-CA-5.jpg
[2015/08/30 14:01:58 | 000,259,019 | ---- | M] () -- C:\Users\Raphael\Desktop\The-LEGO-Movie-Experience-at-LEGOLand-California-b.jpg
[2015/08/28 23:19:00 | 000,033,282 | ---- | M] () -- C:\Users\Raphael\Documents\Principais parques de diversão do mundo.kmz
[2015/08/28 22:03:06 | 000,000,132 | ---- | M] () -- C:\Users\Raphael\AppData\Roaming\Adobe PNG Format CS6 Prefs
[2015/08/27 17:29:32 | 107,009,281 | ---- | M] () -- C:\Users\Raphael\Desktop\Kraken Front Seat on ride HD POV Seaworld Orlando[1].mp4
[2015/08/27 17:29:32 | 090,021,786 | ---- | M] () -- C:\Users\Raphael\Desktop\Viper front seat on ride HD POV Six Flags Magic Mountain[1].mp4
[2015/08/26 09:54:44 | 027,406,924 | ---- | M] () -- C:\Users\Raphael\Desktop\The Park   Teaser[1].mp4
[2015/08/24 23:47:53 | 006,194,103 | ---- | M] () -- C:\Users\Raphael\Desktop\20150718_101459.jpg
[2015/08/24 20:35:46 | 023,897,585 | ---- | M] () -- C:\Users\Raphael\Desktop\Superman Escape from Krypton Front Seat on ride HD POV Six Flags Magic Mountain.mp4
[2015/08/23 22:04:36 | 004,638,373 | ---- | M] () -- C:\Users\Raphael\Desktop\20150718_143911.jpg
[2015/08/23 19:39:40 | 000,064,872 | ---- | M] () -- C:\Users\Raphael\Documents\comprachicobento.pdf
[2015/08/22 21:46:10 | 000,405,328 | ---- | M] () -- C:\Users\Raphael\Desktop\DivulgaçãoRJ.jpg
[2015/08/19 11:53:56 | 000,297,904 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\WINDOWS\SysNative\drivers\avgidsha.sys
[2015/08/19 11:52:30 | 000,313,264 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\WINDOWS\SysNative\drivers\avgidsdrivera.sys
[2015/08/18 20:49:40 | 004,975,904 | ---- | M] () -- C:\WINDOWS\SysNative\FNTCACHE.DAT
[2015/08/18 20:49:16 | 681,282,316 | ---- | M] () -- C:\WINDOWS\MEMORY.DMP
[2015/08/18 12:36:26 | 006,302,584 | ---- | M] () -- C:\Users\Raphael\Desktop\20150720_175458.jpg
[2015/08/18 12:32:07 | 004,529,991 | ---- | M] () -- C:\Users\Raphael\Desktop\DSC_0066.jpg
[2015/08/18 04:56:25 | 002,498,808 | ---- | M] () -- C:\WINDOWS\SysNative\CoreUIComponents.dll
[2015/08/18 04:27:23 | 001,771,592 | ---- | M] () -- C:\WINDOWS\SysWow64\CoreUIComponents.dll
[2015/08/18 03:54:11 | 000,247,296 | ---- | M] () -- C:\WINDOWS\SysNative\facecredentialprovider.dll
[2015/08/18 01:44:12 | 000,008,847 | ---- | M] () -- C:\WINDOWS\SysNative\ResPriHMImageList
[2015/08/17 20:03:11 | 2054,439,437 | ---- | M] () -- C:\Users\Raphael\Desktop\PARTII.rar
[2015/08/11 06:14:02 | 000,404,480 | ---- | M] () -- C:\WINDOWS\SysNative\diagtrack_wininternal.dll
[2015/08/11 06:13:42 | 000,413,184 | ---- | M] () -- C:\WINDOWS\SysNative\diagtrack_win.dll
[2015/08/11 06:11:40 | 002,446,336 | ---- | M] () -- C:\WINDOWS\SysNative\InputService.dll
[2015/08/11 06:10:47 | 000,293,376 | ---- | M] () -- C:\WINDOWS\SysNative\TextInputFramework.dll
[2015/08/11 05:51:33 | 001,823,232 | ---- | M] () -- C:\WINDOWS\SysWow64\InputService.dll
[2015/08/11 05:50:58 | 000,200,704 | ---- | M] () -- C:\WINDOWS\SysWow64\TextInputFramework.dll
[2015/08/04 11:32:36 | 000,304,560 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\WINDOWS\SysNative\drivers\avgwfpa.sys
[2015/08/04 11:32:32 | 000,250,800 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\WINDOWS\SysNative\drivers\avgmfx64.sys
[2015/08/01 15:24:08 | 000,002,300 | ---- | M] () -- C:\Users\Public\Desktop\HP Deskjet 3510 series.lnk
[2015/08/01 15:23:56 | 000,000,057 | ---- | M] () -- C:\ProgramData\Ament.ini
[2015/07/30 15:24:47 | 000,016,130 | ---- | M] () -- C:\Users\Raphael\Documents\rockinriocard.pdf
[2015/07/30 09:15:20 | 000,191,614 | ---- | M] () -- C:\Users\Raphael\Documents\SeguroArgentina.pdf
[2015/07/29 11:21:54 | 000,030,483 | ---- | M] () -- C:\WINDOWS\diagwrn.xml
[2015/07/29 11:21:54 | 000,030,483 | ---- | M] () -- C:\WINDOWS\diagerr.xml
[2015/07/29 11:18:59 | 000,023,056 | ---- | M] () -- C:\WINDOWS\SysNative\emptyregdb.dat
[2015/07/29 10:57:49 | 000,000,000 | ---- | M] () -- C:\WINDOWS\ativpsrm.bin
[2015/07/29 10:56:29 | 000,000,000 | -H-- | M] () -- C:\WINDOWS\SysNative\drivers\Msft_User_WpdFs_01_11_00.Wdf
[2015/07/29 10:51:06 | 000,505,344 | ---- | M] () -- C:\WINDOWS\SysNative\EditionUpgradeManagerObj.dll
[2015/07/29 10:51:06 | 000,032,768 | ---- | M] () -- C:\WINDOWS\SysNative\LicenseManagerApi.dll
[2015/07/28 20:43:36 | 000,002,160 | ---- | M] () -- C:\Users\Public\Desktop\RollerCoaster Tycoon 3.lnk
[2015/07/27 22:42:08 | 000,722,681 | ---- | M] () -- C:\Users\Raphael\Desktop\Legoland California - Star Wars.jpg
[2015/07/26 16:18:05 | 000,003,471 | ---- | M] () -- C:\Users\Raphael\Documents\WOC.wlmp
[2015/07/26 15:19:25 | 000,005,442 | ---- | M] () -- C:\Users\Raphael\Documents\PAINT THE NIGHT.wlmp
[2015/07/23 18:06:59 | 000,080,278 | ---- | M] () -- C:\Users\Raphael\Documents\comprovantefonte.pdf
[2015/07/16 02:12:22 | 000,458,472 | ---- | M] () -- C:\WINDOWS\SysNative\amdmiracast.dll
[2015/07/16 02:01:52 | 000,235,008 | ---- | M] () -- C:\WINDOWS\SysNative\clinfo.exe
[2015/07/16 02:01:48 | 001,187,342 | ---- | M] () -- C:\WINDOWS\SysNative\amdocl_as64.exe
[2015/07/16 02:01:48 | 001,061,902 | ---- | M] () -- C:\WINDOWS\SysNative\amdocl_ld64.exe
[2015/07/16 02:01:48 | 000,995,342 | ---- | M] () -- C:\WINDOWS\SysWow64\amdocl_as32.exe
[2015/07/16 02:01:48 | 000,798,734 | ---- | M] () -- C:\WINDOWS\SysWow64\amdocl_ld32.exe
[2015/07/16 01:59:34 | 000,065,024 | ---- | M] (Khronos Group) -- C:\WINDOWS\SysNative\OpenCL.dll
[2015/07/16 01:59:32 | 000,059,392 | ---- | M] (Khronos Group) -- C:\WINDOWS\SysWow64\OpenCL.dll
[2015/07/16 01:29:22 | 000,134,656 | ---- | M] () -- C:\WINDOWS\SysNative\amdhdl64.dll
[2015/07/16 01:29:20 | 000,123,392 | ---- | M] () -- C:\WINDOWS\SysWow64\amdhdl32.dll
[2015/07/16 01:23:18 | 003,437,632 | ---- | M] () -- C:\WINDOWS\SysNative\atiumd6a.cap
[2015/07/16 01:22:02 | 000,204,952 | ---- | M] () -- C:\WINDOWS\SysWow64\ativvsvl.dat
[2015/07/16 01:22:02 | 000,204,952 | ---- | M] () -- C:\WINDOWS\SysNative\ativvsvl.dat
[2015/07/16 01:22:02 | 000,157,144 | ---- | M] () -- C:\WINDOWS\SysWow64\ativvsva.dat
[2015/07/16 01:22:02 | 000,157,144 | ---- | M] () -- C:\WINDOWS\SysNative\ativvsva.dat
[2015/07/16 01:21:56 | 000,660,912 | ---- | M] () -- C:\WINDOWS\SysWow64\atiapfxx.blb
[2015/07/16 01:21:56 | 000,660,912 | ---- | M] () -- C:\WINDOWS\SysNative\atiapfxx.blb
[2015/07/16 01:18:46 | 003,471,376 | ---- | M] () -- C:\WINDOWS\SysWow64\atiumdva.cap
[2015/07/16 01:17:30 | 000,160,256 | ---- | M] () -- C:\WINDOWS\SysNative\atieah64.exe
[2015/07/16 01:17:28 | 000,204,800 | ---- | M] () -- C:\WINDOWS\SysNative\amdgfxinfo64.dll
[2015/07/16 01:17:28 | 000,143,872 | ---- | M] () -- C:\WINDOWS\SysWow64\atieah32.exe
[2015/07/16 01:17:26 | 000,189,952 | ---- | M] () -- C:\WINDOWS\SysWow64\amdgfxinfo32.dll
[2015/07/16 01:17:26 | 000,029,696 | ---- | M] (AMD) -- C:\WINDOWS\SysNative\atimuixx.dll
[2015/07/16 01:17:24 | 000,672,768 | ---- | M] (AMD) -- C:\WINDOWS\SysNative\atieclxx.exe
[2015/07/16 01:17:16 | 000,246,784 | ---- | M] (AMD) -- C:\WINDOWS\SysNative\atiesrxx.exe
[2015/07/16 01:17:02 | 000,190,976 | ---- | M] (AMD) -- C:\WINDOWS\SysNative\atitmm64.dll
[2015/07/16 01:12:52 | 000,865,792 | ---- | M] (AMD) -- C:\WINDOWS\SysNative\coinst_15.20.dll
[2015/07/16 01:12:10 | 000,102,912 | ---- | M] () -- C:\WINDOWS\SysNative\hsa-thunk64.dll
[2015/07/16 01:12:08 | 000,102,400 | ---- | M] () -- C:\WINDOWS\SysWow64\hsa-thunk.dll
[2015/07/13 15:19:34 | 000,167,456 | ---- | M] () -- C:\WINDOWS\SysNative\amde31a.dat
[2015/07/13 15:19:20 | 000,169,152 | ---- | M] () -- C:\WINDOWS\SysNative\ativce03.dat
[2015/07/10 13:49:48 | 000,147,439 | ---- | M] () -- C:\WINDOWS\SysNative\gpedit.msc
[2015/07/10 13:49:48 | 000,043,566 | ---- | M] () -- C:\WINDOWS\SysNative\rsop.msc
[2015/07/10 13:49:09 | 000,120,458 | ---- | M] () -- C:\WINDOWS\SysNative\secpol.msc
[2015/07/10 13:48:55 | 000,147,439 | ---- | M] () -- C:\WINDOWS\SysWow64\gpedit.msc
[2015/07/10 13:48:55 | 000,043,566 | ---- | M] () -- C:\WINDOWS\SysWow64\rsop.msc
[2015/07/10 13:48:44 | 000,146,389 | ---- | M] () -- C:\WINDOWS\SysNative\printmanagement.msc
[2015/07/10 13:36:32 | 000,328,354 | ---- | M] () -- C:\WINDOWS\SysNative\prfi0416.dat
[2015/07/10 13:36:32 | 000,040,752 | ---- | M] () -- C:\WINDOWS\SysNative\prfd0416.dat
[2015/07/10 13:35:20 | 000,043,409 | ---- | M] () -- C:\WINDOWS\SysWow64\license.rtf
[2015/07/10 13:35:20 | 000,043,409 | ---- | M] () -- C:\WINDOWS\SysNative\license.rtf
[2015/07/10 09:22:52 | 000,016,148 | ---- | M] () -- C:\WINDOWS\SysNative\DESKTOP-M7P1NB6_Administrator_HistoryPrediction.bin
[2015/07/10 08:02:43 | 000,215,943 | ---- | M] () -- C:\WINDOWS\SysWow64\dssec.dat
[2015/07/10 08:02:43 | 000,008,798 | ---- | M] () -- C:\WINDOWS\SysWow64\icrav03.rat
[2015/07/10 08:02:43 | 000,001,988 | ---- | M] () -- C:\WINDOWS\SysWow64\ticrf.rat
[2015/07/10 08:02:43 | 000,000,741 | ---- | M] () -- C:\WINDOWS\SysWow64\NOISE.DAT
[2015/07/10 08:02:42 | 000,003,683 | ---- | M] () -- C:\WINDOWS\SysNative\drivers\etc\lmhosts.sam
[2015/07/10 08:02:42 | 000,001,988 | ---- | M] () -- C:\WINDOWS\SysNative\ticrf.rat
[2015/07/10 08:02:41 | 000,296,742 | ---- | M] () -- C:\WINDOWS\SysNative\perfi009.dat
[2015/07/10 08:02:41 | 000,215,943 | ---- | M] () -- C:\WINDOWS\SysNative\dssec.dat
[2015/07/10 08:02:41 | 000,033,362 | ---- | M] () -- C:\WINDOWS\SysNative\perfd009.dat
[2015/07/10 08:02:41 | 000,015,462 | ---- | M] () -- C:\WINDOWS\SysNative\OEMDefaultAssociations.xml
[2015/07/10 08:02:41 | 000,008,798 | ---- | M] () -- C:\WINDOWS\SysNative\icrav03.rat
[2015/07/10 08:02:41 | 000,000,858 | ---- | M] () -- C:\WINDOWS\SysNative\DefaultQuestions.json
[2015/07/10 08:02:41 | 000,000,741 | ---- | M] () -- C:\WINDOWS\SysNative\NOISE.DAT
[2015/07/10 08:02:41 | 000,000,389 | ---- | M] () -- C:\WINDOWS\SysNative\AutoWorkplace.exe.config
[2015/07/10 08:01:36 | 000,142,848 | ---- | M] (Windows (R) Win 7 DDK provider) -- C:\WINDOWS\SysWow64\DscCoreConfProv.dll
[2015/07/10 08:01:33 | 000,201,216 | ---- | M] (Windows (R) Win 7 DDK provider) -- C:\WINDOWS\SysNative\DscCoreConfProv.dll
[2015/07/10 08:01:20 | 000,076,060 | ---- | M] () -- C:\WINDOWS\SysWow64\xpsrchvw.xml
[2015/07/10 08:01:20 | 000,076,060 | ---- | M] () -- C:\WINDOWS\SysNative\xpsrchvw.xml
[2015/07/10 08:01:19 | 000,003,458 | ---- | M] () -- C:\WINDOWS\SysWow64\ieuinit.inf
[2015/07/10 08:01:13 | 000,006,886 | ---- | M] () -- C:\WINDOWS\SysWow64\SecurityAndMaintenance_Error.png
[2015/07/10 08:01:13 | 000,005,796 | ---- | M] () -- C:\WINDOWS\SysWow64\SecurityAndMaintenance.png
[2015/07/10 08:01:13 | 000,002,626 | ---- | M] () -- C:\WINDOWS\SysWow64\SecurityAndMaintenance_Alert.png
[2015/07/10 08:01:12 | 000,006,886 | ---- | M] () -- C:\WINDOWS\SysNative\SecurityAndMaintenance_Error.png
[2015/07/10 08:01:12 | 000,005,796 | ---- | M] () -- C:\WINDOWS\SysNative\SecurityAndMaintenance.png
[2015/07/10 08:01:12 | 000,002,626 | ---- | M] () -- C:\WINDOWS\SysNative\SecurityAndMaintenance_Alert.png
[2015/07/10 08:01:10 | 000,008,260 | ---- | M] () -- C:\WINDOWS\SysNative\ResPriImageList
[2015/07/10 08:01:09 | 000,010,429 | ---- | M] () -- C:\WINDOWS\SysNative\ScavengeSpace.xml
[2015/07/10 08:00:46 | 000,032,200 | ---- | M] () -- C:\WINDOWS\Professional.xml
[2015/07/10 08:00:41 | 000,000,874 | ---- | M] () -- C:\WINDOWS\SysNative\manage-bde.wsf
[2015/07/10 08:00:36 | 001,520,828 | ---- | M] () -- C:\WINDOWS\SysNative\WpcNBModel.bin
[2015/07/10 08:00:36 | 000,526,068 | ---- | M] () -- C:\WINDOWS\SysNative\staticurllist.bin
[2015/07/10 08:00:36 | 000,316,640 | ---- | M] () -- C:\WINDOWS\WMSysPr9.prx
[2015/07/10 08:00:36 | 000,004,687 | ---- | M] () -- C:\WINDOWS\SysNative\wpcmon.png
[2015/07/10 08:00:36 | 000,003,458 | ---- | M] () -- C:\WINDOWS\SysNative\ieuinit.inf
[2015/07/10 08:00:35 | 000,161,632 | ---- | M] () -- C:\WINDOWS\SysWow64\weretw.dll
[2015/07/10 08:00:34 | 000,211,938 | ---- | M] () -- C:\WINDOWS\SysWow64\lcphrase.tbl
[2015/07/10 08:00:34 | 000,024,114 | ---- | M] () -- C:\WINDOWS\SysWow64\lcptr.tbl
[2015/07/10 08:00:33 | 000,673,088 | ---- | M] () -- C:\WINDOWS\SysWow64\mlang.dat
[2015/07/10 08:00:32 | 000,047,104 | ---- | M] () -- C:\WINDOWS\SysWow64\BWContextHandler.dll
[2015/07/10 08:00:32 | 000,003,666 | ---- | M] () -- C:\WINDOWS\SysWow64\sysprtj.sep
[2015/07/10 08:00:32 | 000,003,317 | ---- | M] () -- C:\WINDOWS\SysWow64\sysprint.sep
[2015/07/10 08:00:32 | 000,001,673 | ---- | M] () -- C:\WINDOWS\SysWow64\tcpbidi.xml
[2015/07/10 08:00:32 | 000,000,160 | ---- | M] () -- C:\WINDOWS\SysWow64\@OpenWithToastLogo.png
[2015/07/10 08:00:32 | 000,000,150 | ---- | M] () -- C:\WINDOWS\SysWow64\pcl.sep
[2015/07/10 08:00:32 | 000,000,120 | ---- | M] () -- C:\WINDOWS\SysWow64\@TileEmpty1x1Image.png
[2015/07/10 08:00:32 | 000,000,051 | ---- | M] () -- C:\WINDOWS\SysWow64\pscript.sep
[2015/07/10 08:00:31 | 000,156,672 | ---- | M] () -- C:\WINDOWS\SysWow64\MTF.dll
[2015/07/10 08:00:31 | 000,144,998 | ---- | M] () -- C:\WINDOWS\SysWow64\lusrmgr.msc
[2015/07/10 08:00:31 | 000,115,091 | ---- | M] () -- C:\WINDOWS\SysWow64\WF.msc
[2015/07/10 08:00:31 | 000,011,109 | ---- | M] () -- C:\WINDOWS\SysWow64\connectedsearch-results.searchconnector-ms
[2015/07/10 08:00:31 | 000,004,014 | ---- | M] () -- C:\WINDOWS\SysWow64\xwizard.dtd
[2015/07/10 08:00:31 | 000,001,820 | ---- | M] () -- C:\WINDOWS\SysWow64\rasctrnm.h
[2015/07/10 08:00:31 | 000,000,565 | ---- | M] () -- C:\WINDOWS\SysWow64\NdfEventView.xml
[2015/07/10 08:00:31 | 000,000,543 | ---- | M] () -- C:\WINDOWS\SysWow64\connectedsearch-appcmd.searchconnector-ms
[2015/07/10 08:00:31 | 000,000,530 | ---- | M] () -- C:\WINDOWS\SysWow64\connectedsearch-protocol.searchconnector-ms
[2015/07/10 08:00:31 | 000,000,525 | ---- | M] () -- C:\WINDOWS\SysWow64\connectedsearch-music.searchconnector-ms
[2015/07/10 08:00:31 | 000,000,001 | -HS- | M] () -- C:\BOOTNXT
[2015/07/10 08:00:30 | 000,028,672 | ---- | M] () -- C:\WINDOWS\SysWow64\dtdump.exe
[2015/07/10 08:00:30 | 000,007,784 | ---- | M] () -- C:\WINDOWS\SysWow64\connectedsearch-suggestions.searchconnector-ms
[2015/07/10 08:00:30 | 000,007,152 | ---- | M] () -- C:\WINDOWS\SysWow64\connectedsearch-zeroinput.searchconnector-ms
[2015/07/10 08:00:30 | 000,000,539 | ---- | M] () -- C:\WINDOWS\SysWow64\connectedsearch-history.searchconnector-ms
[2015/07/10 08:00:30 | 000,000,528 | ---- | M] () -- C:\WINDOWS\SysWow64\connectedsearch-contacts.searchconnector-ms
[2015/07/10 08:00:30 | 000,000,522 | ---- | M] () -- C:\WINDOWS\SysWow64\connectedsearch-paths.searchconnector-ms
[2015/07/10 08:00:29 | 000,198,144 | ---- | M] (Nokia) -- C:\WINDOWS\SysWow64\NmaDirect.dll
[2015/07/10 08:00:29 | 000,081,408 | ---- | M] () -- C:\WINDOWS\SysWow64\InputLocaleManager.dll
[2015/07/10 08:00:29 | 000,057,344 | ---- | M] () -- C:\WINDOWS\SysWow64\EditBufferTestHook.dll
[2015/07/10 08:00:29 | 000,053,760 | ---- | M] () -- C:\WINDOWS\SysWow64\WpKbdLayout.dll
[2015/07/10 08:00:29 | 000,022,016 | ---- | M] () -- C:\WINDOWS\SysWow64\WordBreakers.dll
[2015/07/10 08:00:28 | 003,440,660 | ---- | M] () -- C:\WINDOWS\SysWow64\drivers\gm.dls
[2015/07/10 08:00:28 | 000,270,848 | ---- | M] () -- C:\WINDOWS\SysWow64\HrtfApo.dll
[2015/07/10 08:00:28 | 000,004,453 | ---- | M] () -- C:\WINDOWS\SysWow64\odbcconf.rsp
[2015/07/10 08:00:27 | 000,364,544 | ---- | M] () -- C:\WINDOWS\SysWow64\msjetoledb40.dll
[2015/07/10 08:00:27 | 000,142,904 | ---- | M] () -- C:\WINDOWS\SysWow64\slmgr.vbs
[2015/07/10 08:00:27 | 000,002,233 | ---- | M] () -- C:\WINDOWS\SysWow64\12520850.cpx
[2015/07/10 08:00:27 | 000,002,151 | ---- | M] () -- C:\WINDOWS\SysWow64\12520437.cpx
[2015/07/10 08:00:26 | 000,124,118 | ---- | M] () -- C:\WINDOWS\SysWow64\comexp.msc
[2015/07/10 08:00:26 | 000,022,528 | ---- | M] () -- C:\WINDOWS\SysWow64\efsext.dll
[2015/07/10 08:00:25 | 000,417,752 | ---- | M] (Windows (R) Win 7 DDK provider) -- C:\WINDOWS\SysWow64\winsqlite3.dll
[2015/07/10 08:00:25 | 000,145,640 | ---- | M] () -- C:\WINDOWS\SysWow64\devmgmt.msc
[2015/07/10 08:00:25 | 000,144,862 | ---- | M] () -- C:\WINDOWS\SysWow64\tpm.msc
[2015/07/10 08:00:25 | 000,002,269 | ---- | M] () -- C:\WINDOWS\SysWow64\WimBootCompress.ini
[2015/07/10 08:00:24 | 003,170,304 | ---- | M] () -- C:\WINDOWS\SysWow64\boot.sdi
[2015/07/10 08:00:24 | 000,167,640 | ---- | M] () -- C:\WINDOWS\SysWow64\chs_singlechar_pinyin.dat
[2015/07/10 08:00:24 | 000,145,519 | ---- | M] () -- C:\WINDOWS\SysWow64\perfmon.msc
[2015/07/10 08:00:24 | 000,047,679 | ---- | M] () -- C:\WINDOWS\SysWow64\diskmgmt.msc
[2015/07/10 08:00:23 | 000,204,105 | ---- | M] () -- C:\WINDOWS\SysWow64\winrm.vbs
[2015/07/10 08:00:23 | 000,145,127 | ---- | M] () -- C:\WINDOWS\SysWow64\eventvwr.msc
[2015/07/10 08:00:23 | 000,145,059 | ---- | M] () -- C:\WINDOWS\SysWow64\taskschd.msc
[2015/07/10 08:00:23 | 000,144,909 | ---- | M] () -- C:\WINDOWS\SysWow64\fsmgmt.msc
[2015/07/10 08:00:23 | 000,113,256 | ---- | M] () -- C:\WINDOWS\SysWow64\compmgmt.msc
[2015/07/10 08:00:23 | 000,092,746 | ---- | M] () -- C:\WINDOWS\SysWow64\services.msc
[2015/07/10 08:00:23 | 000,063,081 | ---- | M] () -- C:\WINDOWS\SysWow64\certlm.msc
[2015/07/10 08:00:23 | 000,063,070 | ---- | M] () -- C:\WINDOWS\SysWow64\certmgr.msc
[2015/07/10 08:00:23 | 000,041,587 | ---- | M] () -- C:\WINDOWS\SysWow64\azman.msc
[2015/07/10 08:00:23 | 000,017,935 | ---- | M] () -- C:\WINDOWS\SysWow64\EventViewer_EventDetails.xsl
[2015/07/10 08:00:23 | 000,004,675 | ---- | M] () -- C:\WINDOWS\SysWow64\wsmanconfig_schema.xml
[2015/07/10 08:00:23 | 000,002,426 | ---- | M] () -- C:\WINDOWS\SysWow64\WsmTxt.xsl
[2015/07/10 08:00:23 | 000,002,125 | ---- | M] () -- C:\WINDOWS\SysWow64\AppxProvisioning.xml
[2015/07/10 08:00:23 | 000,001,559 | ---- | M] () -- C:\WINDOWS\SysWow64\WsmPty.xsl
[2015/07/10 08:00:23 | 000,000,714 | ---- | M] () -- C:\WINDOWS\SysWow64\RestartManager.mof
[2015/07/10 08:00:23 | 000,000,176 | ---- | M] () -- C:\WINDOWS\SysWow64\RestartManagerUninstall.mof
[2015/07/10 08:00:23 | 000,000,035 | ---- | M] () -- C:\WINDOWS\SysWow64\winrm.cmd
[2015/07/10 08:00:22 | 000,211,938 | ---- | M] () -- C:\WINDOWS\SysNative\lcphrase.tbl
[2015/07/10 08:00:22 | 000,024,114 | ---- | M] () -- C:\WINDOWS\SysNative\lcptr.tbl
[2015/07/10 08:00:21 | 000,215,352 | ---- | M] () -- C:\WINDOWS\SysNative\weretw.dll
[2015/07/10 08:00:17 | 000,673,088 | ---- | M] () -- C:\WINDOWS\SysNative\mlang.dat
[2015/07/10 08:00:17 | 000,000,120 | ---- | M] () -- C:\WINDOWS\SysNative\@TileEmpty1x1Image.png
[2015/07/10 08:00:16 | 000,000,600 | ---- | M] () -- C:\WINDOWS\SysNative\@language_notification_icon.png
[2015/07/10 08:00:15 | 000,055,296 | ---- | M] () -- C:\WINDOWS\SysNative\BWContextHandler.dll
[2015/07/10 08:00:15 | 000,000,600 | ---- | M] () -- C:\WINDOWS\SysNative\@optionalfeatures.png
[2015/07/10 08:00:15 | 000,000,160 | ---- | M] () -- C:\WINDOWS\SysNative\@OpenWithToastLogo.png
[2015/07/10 08:00:14 | 000,060,124 | ---- | M] () -- C:\WINDOWS\SysNative\tcpmon.ini
[2015/07/10 08:00:14 | 000,003,666 | ---- | M] () -- C:\WINDOWS\SysNative\sysprtj.sep
[2015/07/10 08:00:14 | 000,003,317 | ---- | M] () -- C:\WINDOWS\SysNative\sysprint.sep
[2015/07/10 08:00:14 | 000,001,673 | ---- | M] () -- C:\WINDOWS\SysNative\tcpbidi.xml
[2015/07/10 08:00:14 | 000,000,150 | ---- | M] () -- C:\WINDOWS\SysNative\pcl.sep
[2015/07/10 08:00:14 | 000,000,051 | ---- | M] () -- C:\WINDOWS\SysNative\pscript.sep
[2015/07/10 08:00:14 | 000,000,003 | ---- | M] () -- C:\WINDOWS\SysNative\drivers\MsftWdf_Kernel_01015_Inbox_Critical.Wdf
[2015/07/10 08:00:13 | 000,257,024 | ---- | M] () -- C:\WINDOWS\SysNative\MTFServer.dll
[2015/07/10 08:00:13 | 000,226,816 | ---- | M] () -- C:\WINDOWS\SysNative\MTF.dll
[2015/07/10 08:00:13 | 000,144,998 | ---- | M] () -- C:\WINDOWS\SysNative\lusrmgr.msc
[2015/07/10 08:00:13 | 000,009,216 | ---- | M] () -- C:\WINDOWS\SysNative\WppRecorderUM.dll
[2015/07/10 08:00:13 | 000,000,003 | ---- | M] () -- C:\WINDOWS\SysNative\drivers\MsftWdf_User_01_11_00_Inbox_Critical.Wdf
[2015/07/10 08:00:12 | 000,011,109 | ---- | M] () -- C:\WINDOWS\SysNative\connectedsearch-results.searchconnector-ms
[2015/07/10 08:00:12 | 000,007,784 | ---- | M] () -- C:\WINDOWS\SysNative\connectedsearch-suggestions.searchconnector-ms
[2015/07/10 08:00:12 | 000,007,152 | ---- | M] () -- C:\WINDOWS\SysNative\connectedsearch-zeroinput.searchconnector-ms
[2015/07/10 08:00:12 | 000,000,543 | ---- | M] () -- C:\WINDOWS\SysNative\connectedsearch-appcmd.searchconnector-ms
[2015/07/10 08:00:12 | 000,000,539 | ---- | M] () -- C:\WINDOWS\SysNative\connectedsearch-history.searchconnector-ms
[2015/07/10 08:00:12 | 000,000,530 | ---- | M] () -- C:\WINDOWS\SysNative\connectedsearch-protocol.searchconnector-ms
[2015/07/10 08:00:12 | 000,000,528 | ---- | M] () -- C:\WINDOWS\SysNative\connectedsearch-contacts.searchconnector-ms
[2015/07/10 08:00:12 | 000,000,525 | ---- | M] () -- C:\WINDOWS\SysNative\connectedsearch-music.searchconnector-ms
[2015/07/10 08:00:12 | 000,000,522 | ---- | M] () -- C:\WINDOWS\SysNative\connectedsearch-paths.searchconnector-ms
[2015/07/10 08:00:09 | 000,000,726 | ---- | M] () -- C:\WINDOWS\SysNative\wpr.config.xml
[2015/07/10 08:00:07 | 000,253,952 | ---- | M] (Nokia) -- C:\WINDOWS\SysNative\NmaDirect.dll
[2015/07/10 08:00:07 | 000,167,640 | ---- | M] () -- C:\WINDOWS\SysNative\chs_singlechar_pinyin.dat
[2015/07/10 08:00:07 | 000,106,496 | ---- | M] () -- C:\WINDOWS\SysNative\InputLocaleManager.dll
[2015/07/10 08:00:07 | 000,072,192 | ---- | M] () -- C:\WINDOWS\SysNative\EditBufferTestHook.dll
[2015/07/10 08:00:07 | 000,063,488 | ---- | M] () -- C:\WINDOWS\SysNative\WpKbdLayout.dll
[2015/07/10 08:00:07 | 000,026,112 | ---- | M] () -- C:\WINDOWS\SysNative\WordBreakers.dll
[2015/07/10 08:00:05 | 000,328,048 | ---- | M] () -- C:\WINDOWS\SysNative\LargeRoom.bin
[2015/07/10 08:00:05 | 000,246,048 | ---- | M] () -- C:\WINDOWS\SysNative\MediumRoom.bin
[2015/07/10 08:00:05 | 000,164,048 | ---- | M] () -- C:\WINDOWS\SysNative\SmallRoom.bin
[2015/07/10 08:00:05 | 000,131,248 | ---- | M] () -- C:\WINDOWS\SysNative\OutdoorAudioEnvironment.bin
[2015/07/10 08:00:04 | 007,561,248 | ---- | M] () -- C:\WINDOWS\SysNative\DefaultHrtfs.bin
[2015/07/10 08:00:04 | 003,440,660 | ---- | M] () -- C:\WINDOWS\SysNative\drivers\gm.dls
[2015/07/10 08:00:04 | 000,322,048 | ---- | M] () -- C:\WINDOWS\SysNative\HrtfApo.dll
[2015/07/10 08:00:03 | 000,000,263 | ---- | M] () -- C:\WINDOWS\SysNative\odbcconf.rsp
[2015/07/10 08:00:01 | 000,354,816 | ---- | M] () -- C:\WINDOWS\SysNative\EditionUpgradeHelper.dll
[2015/07/10 08:00:01 | 000,142,904 | ---- | M] () -- C:\WINDOWS\SysNative\slmgr.vbs
[2015/07/10 08:00:00 | 000,028,160 | ---- | M] () -- C:\WINDOWS\SysNative\efsext.dll
[2015/07/10 07:59:59 | 000,124,118 | ---- | M] () -- C:\WINDOWS\SysNative\comexp.msc
[2015/07/10 07:59:59 | 000,092,208 | ---- | M] () -- C:\WINDOWS\SysNative\DiskSnapshot.conf
[2015/07/10 07:59:58 | 000,657,880 | ---- | M] (Windows (R) Win 7 DDK provider) -- C:\WINDOWS\SysNative\winsqlite3.dll
[2015/07/10 07:59:58 | 000,145,640 | ---- | M] () -- C:\WINDOWS\SysNative\devmgmt.msc
[2015/07/10 07:59:58 | 000,002,269 | ---- | M] () -- C:\WINDOWS\SysNative\WimBootCompress.ini
[2015/07/10 07:59:58 | 000,000,843 | ---- | M] () -- C:\WINDOWS\SysNative\onlinesetup.cmd
[2015/07/10 07:59:58 | 000,000,714 | ---- | M] () -- C:\WINDOWS\SysNative\RestartManager.mof
[2015/07/10 07:59:58 | 000,000,176 | ---- | M] () -- C:\WINDOWS\SysNative\RestartManagerUninstall.mof
[2015/07/10 07:59:57 | 000,144,862 | ---- | M] () -- C:\WINDOWS\SysNative\tpm.msc
[2015/07/10 07:59:56 | 000,145,519 | ---- | M] () -- C:\WINDOWS\SysNative\perfmon.msc
[2015/07/10 07:59:56 | 000,000,614 | ---- | M] () -- C:\WINDOWS\SysNative\WdsUnattendTemplate.xml
[2015/07/10 07:59:55 | 003,170,304 | ---- | M] () -- C:\WINDOWS\SysNative\boot.sdi
[2015/07/10 07:59:55 | 000,144,909 | ---- | M] () -- C:\WINDOWS\SysNative\fsmgmt.msc
[2015/07/10 07:59:55 | 000,092,746 | ---- | M] () -- C:\WINDOWS\SysNative\services.msc
[2015/07/10 07:59:55 | 000,055,803 | ---- | M] () -- C:\WINDOWS\SysNative\srms.dat
[2015/07/10 07:59:55 | 000,047,679 | ---- | M] () -- C:\WINDOWS\SysNative\diskmgmt.msc
[2015/07/10 07:59:55 | 000,004,148 | ---- | M] () -- C:\WINDOWS\SysNative\psmodulediscoveryprovider.mof
[2015/07/10 07:59:54 | 000,204,105 | ---- | M] () -- C:\WINDOWS\SysNative\winrm.vbs
[2015/07/10 07:59:54 | 000,145,127 | ---- | M] () -- C:\WINDOWS\SysNative\eventvwr.msc
[2015/07/10 07:59:54 | 000,145,059 | ---- | M] () -- C:\WINDOWS\SysNative\taskschd.msc
[2015/07/10 07:59:54 | 000,063,081 | ---- | M] () -- C:\WINDOWS\SysNative\certlm.msc
[2015/07/10 07:59:54 | 000,063,070 | ---- | M] () -- C:\WINDOWS\SysNative\certmgr.msc
[2015/07/10 07:59:54 | 000,041,587 | ---- | M] () -- C:\WINDOWS\SysNative\azman.msc
[2015/07/10 07:59:54 | 000,017,935 | ---- | M] () -- C:\WINDOWS\SysNative\EventViewer_EventDetails.xsl
[2015/07/10 07:59:54 | 000,008,192 | ---- | M] () -- C:\WINDOWS\SysNative\settings.dat
[2015/07/10 07:59:54 | 000,004,675 | ---- | M] () -- C:\WINDOWS\SysNative\wsmanconfig_schema.xml
[2015/07/10 07:59:54 | 000,002,426 | ---- | M] () -- C:\WINDOWS\SysNative\WsmTxt.xsl
[2015/07/10 07:59:54 | 000,002,125 | ---- | M] () -- C:\WINDOWS\SysNative\AppxProvisioning.xml
[2015/07/10 07:59:54 | 000,001,559 | ---- | M] () -- C:\WINDOWS\SysNative\WsmPty.xsl
[2015/07/10 07:59:54 | 000,000,035 | ---- | M] () -- C:\WINDOWS\SysNative\winrm.cmd
[2015/07/10 07:59:53 | 000,144,673 | ---- | M] () -- C:\WINDOWS\SysNative\WmiMgmt.msc
[2015/07/10 07:59:53 | 000,113,256 | ---- | M] () -- C:\WINDOWS\SysNative\compmgmt.msc
[2015/07/10 07:59:53 | 000,004,014 | ---- | M] () -- C:\WINDOWS\SysNative\xwizard.dtd
[2015/07/10 07:59:52 | 000,411,133 | ---- | M] () -- C:\WINDOWS\SysNative\ApnDatabase.xml
[2015/07/10 07:59:51 | 000,115,091 | ---- | M] () -- C:\WINDOWS\SysNative\WF.msc
[2015/07/10 07:59:51 | 000,094,208 | ---- | M] () -- C:\WINDOWS\SysNative\BthpanContextHandler.dll
[2015/07/10 07:59:51 | 000,043,131 | ---- | M] () -- C:\WINDOWS\mib.bin
[2015/07/10 07:59:51 | 000,000,565 | ---- | M] () -- C:\WINDOWS\SysNative\NdfEventView.xml
[2015/07/10 07:59:50 | 000,075,634 | ---- | M] () -- C:\WINDOWS\SysNative\gatherNetworkInfo.vbs
[2015/07/10 07:59:50 | 000,021,656 | ---- | M] () -- C:\WINDOWS\SysNative\NetTrace.PLA.Diagnostics.xml
[2015/07/10 07:59:50 | 000,015,106 | ---- | M] () -- C:\WINDOWS\SysNative\@WiFiNotificationIcon.png
[2015/07/10 07:59:50 | 000,001,820 | ---- | M] () -- C:\WINDOWS\SysNative\rasctrnm.h
[2015/07/10 07:59:48 | 000,044,032 | ---- | M] () -- C:\WINDOWS\SysNative\drivers\Udecx.sys
[2015/07/10 07:59:39 | 000,705,376 | ---- | M] (Mellanox) -- C:\WINDOWS\SysNative\drivers\mlx4_bus.sys
[2015/07/10 07:59:39 | 000,424,800 | ---- | M] (Mellanox) -- C:\WINDOWS\SysNative\drivers\ibbus.sys
[2015/07/10 07:59:39 | 000,305,504 | ---- | M] (VIA Corporation) -- C:\WINDOWS\SysNative\drivers\VSTXRAID.SYS
[2015/07/10 07:59:39 | 000,129,224 | ---- | M] (Qualcomm Atheros Co., Ltd.) -- C:\WINDOWS\SysNative\drivers\L1C63x64.sys
[2015/07/10 07:59:39 | 000,076,128 | ---- | M] (Mellanox) -- C:\WINDOWS\SysNative\drivers\ndfltr.sys
[2015/07/10 07:59:39 | 000,063,840 | ---- | M] (Marvell Semiconductor, Inc.) -- C:\WINDOWS\SysNative\drivers\mvumis.sys
[2015/07/10 07:59:39 | 000,059,232 | ---- | M] (Mellanox) -- C:\WINDOWS\SysNative\drivers\winverbs.sys
[2015/07/10 07:59:39 | 000,058,720 | ---- | M] (Avago Technologies) -- C:\WINDOWS\SysNative\drivers\percsas3i.sys
[2015/07/10 07:59:39 | 000,058,208 | ---- | M] (LSI Corporation) -- C:\WINDOWS\SysNative\drivers\percsas2i.sys
[2015/07/10 07:59:39 | 000,026,976 | ---- | M] (Mellanox) -- C:\WINDOWS\SysNative\drivers\winmad.sys
[2015/07/10 07:59:38 | 001,135,456 | ---- | M] (PMC-Sierra) -- C:\WINDOWS\SysNative\drivers\adp80xx.sys
[2015/07/10 07:59:38 | 000,259,424 | ---- | M] (AMD Technologies Inc.) -- C:\WINDOWS\SysNative\drivers\amdsbs.sys
[2015/07/10 07:59:38 | 000,107,360 | ---- | M] (LSI) -- C:\WINDOWS\SysNative\drivers\3ware.sys
[2015/07/10 07:59:38 | 000,104,800 | ---- | M] (LSI Corporation) -- C:\WINDOWS\SysNative\drivers\lsi_sas2i.sys
[2015/07/10 07:59:38 | 000,099,168 | ---- | M] (Avago Technologies) -- C:\WINDOWS\SysNative\drivers\lsi_sas3i.sys
[2015/07/10 07:59:38 | 000,082,784 | ---- | M] (LSI Corporation) -- C:\WINDOWS\SysNative\drivers\lsi_sss.sys
[2015/07/10 07:59:38 | 000,017,624 | ---- | M] (Windows (R) Win 7 DDK provider) -- C:\WINDOWS\SysNative\drivers\bcmfn2.sys
[2015/07/10 07:40:12 | 000,833,798 | ---- | M] () -- C:\WINDOWS\SysNative\amdicdxx.dat
[2015/07/08 16:37:18 | 000,050,864 | ---- | M] (SteelSeries ApS) -- C:\WINDOWS\SysNative\drivers\sshid.sys
[2015/07/06 19:33:20 | 000,100,816 | ---- | M] () -- C:\WINDOWS\SysNative\ativce02.dat
[2015/06/22 02:51:28 | 027,898,680 | ---- | M] (Waves Audio Ltd.) -- C:\WINDOWS\SysNative\MaxxAudioVnA64.dll
[2015/06/22 02:51:28 | 007,235,584 | ---- | M] (Dolby Laboratories) -- C:\WINDOWS\SysNative\EEP64H.dll
[2015/06/22 02:51:28 | 002,130,448 | ---- | M] (Waves Audio Ltd.) -- C:\WINDOWS\SysNative\WavesGUILib64.dll
[2015/06/22 02:51:28 | 000,080,400 | ---- | M] (Windows (R) Codename Longhorn DDK provider) -- C:\WINDOWS\SysNative\VtSrdAPO.dll
[2015/06/22 02:51:26 | 007,235,584 | ---- | M] (Dolby Laboratories) -- C:\WINDOWS\SysNative\EEP64A.dll
[2015/06/22 02:51:26 | 001,031,376 | ---- | M] (Waves Audio Ltd.) -- C:\WINDOWS\SysNative\MaxxAudioAPOShell64.dll
[2015/06/22 02:51:26 | 000,678,176 | ---- | M] (Waves Audio Ltd.) -- C:\WINDOWS\SysNative\MaxxAudioAPO30.dll
[2015/06/22 02:51:26 | 000,446,224 | ---- | M] (Dolby Laboratories) -- C:\WINDOWS\SysNative\EED64H.dll
[2015/06/22 02:51:26 | 000,446,224 | ---- | M] (Dolby Laboratories) -- C:\WINDOWS\SysNative\EED64A.dll
[2015/06/22 02:51:26 | 000,260,120 | ---- | M] (Windows (R) Codename Longhorn DDK provider) -- C:\WINDOWS\SysNative\Dts2APO.dll
[2015/06/22 02:51:26 | 000,147,224 | ---- | M] (Dolby Laboratories) -- C:\WINDOWS\SysNative\EEL64A.dll
[2015/06/22 02:51:26 | 000,147,216 | ---- | M] (Dolby Laboratories) -- C:\WINDOWS\SysNative\EEL64H.dll
[2015/06/22 02:51:26 | 000,130,144 | ---- | M] (Dolby Laboratories) -- C:\WINDOWS\SysNative\EEA64H.dll
[2015/06/22 02:51:26 | 000,130,144 | ---- | M] (Dolby Laboratories) -- C:\WINDOWS\SysNative\EEA64A.dll
[2015/06/22 02:51:26 | 000,093,712 | ---- | M] (QSound Labs, Inc.) -- C:\WINDOWS\SysNative\nQAPO.dll
[2015/06/22 02:51:26 | 000,084,688 | ---- | M] (Dolby Laboratories) -- C:\WINDOWS\SysNative\EEG64H.dll
[2015/06/22 02:51:26 | 000,084,688 | ---- | M] (Dolby Laboratories) -- C:\WINDOWS\SysNative\EEG64A.dll
[2015/06/22 02:49:50 | 000,094,720 | ---- | M] (QSound Labs, Inc.) -- C:\WINDOWS\SysNative\nQPropPageExt.dll
[2015/06/22 02:49:50 | 000,064,152 | ---- | M] (TODO: <Company name>) -- C:\WINDOWS\SysNative\PropPageExt.dll
[2015/06/21 00:29:50 | 000,000,822 | ---- | M] () -- C:\WINDOWS\SysNative\drivers\etc\hosts
[2015/06/16 15:55:04 | 000,259,040 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\WINDOWS\SysNative\drivers\avgldx64.sys
[2015/06/13 07:03:25 | 000,002,412 | ---- | M] () -- C:\WINDOWS\SysWow64\lgAxconfig.ini

[color=#E56717]========== Files Created - No Company Name ==========[/color]

[2015/09/05 18:37:18 | 006,725,004 | ---- | C] () -- C:\Users\Raphael\Desktop\DSC_0117.jpg
[2015/09/05 18:33:50 | 000,103,849 | ---- | C] () -- C:\Users\Raphael\Desktop\lost-kingdom-adventure-xQOB.jpg
[2015/09/05 18:30:14 | 002,052,712 | ---- | C] () -- C:\Users\Raphael\Desktop\20150720_163121.jpg
[2015/09/05 18:08:43 | 008,350,306 | ---- | C] () -- C:\Users\Raphael\Desktop\DSC_0102.jpg
[2015/09/05 18:08:43 | 005,665,029 | ---- | C] () -- C:\Users\Raphael\Desktop\DSC_0103.jpg
[2015/09/05 17:51:11 | 000,016,148 | ---- | C] () -- C:\WINDOWS\SysNative\RAPHAEL81_Raphael_HistoryPrediction.bin
[2015/09/05 17:40:28 | 000,001,067 | ---- | C] () -- C:\Users\Public\Desktop\AVG 2015.lnk
[2015/09/02 20:31:36 | 006,573,747 | ---- | C] () -- C:\Users\Raphael\Desktop\DSC_0122.jpg
[2015/09/02 20:28:14 | 008,932,313 | ---- | C] () -- C:\Users\Raphael\Desktop\20150720_144837.jpg
[2015/09/02 20:22:14 | 000,722,681 | ---- | C] () -- C:\Users\Raphael\Desktop\Legoland California - Star Wars.jpg
[2015/09/02 13:04:49 | 007,728,620 | ---- | C] () -- C:\Users\Raphael\Desktop\DSC_0238.jpg
[2015/09/02 13:04:48 | 007,872,066 | ---- | C] () -- C:\Users\Raphael\Desktop\DSC_0237.jpg
[2015/09/02 13:04:48 | 007,254,064 | ---- | C] () -- C:\Users\Raphael\Desktop\DSC_0225.jpg
[2015/09/02 13:04:48 | 007,201,675 | ---- | C] () -- C:\Users\Raphael\Desktop\DSC_0229.jpg
[2015/09/02 13:04:48 | 004,776,464 | ---- | C] () -- C:\Users\Raphael\Desktop\DSC_0232.jpg
[2015/09/02 13:04:48 | 004,619,136 | ---- | C] () -- C:\Users\Raphael\Desktop\DSC_0233.jpg
[2015/09/02 13:04:48 | 004,589,711 | ---- | C] () -- C:\Users\Raphael\Desktop\DSC_0231.jpg
[2015/09/02 13:04:48 | 004,009,641 | ---- | C] () -- C:\Users\Raphael\Desktop\DSC_0235.jpg
[2015/09/02 13:04:48 | 003,052,415 | ---- | C] () -- C:\Users\Raphael\Desktop\DSC_0234.jpg
[2015/09/02 13:04:47 | 010,258,569 | ---- | C] () -- C:\Users\Raphael\Desktop\DSC_0223.jpg
[2015/09/02 13:04:47 | 009,596,733 | ---- | C] () -- C:\Users\Raphael\Desktop\DSC_0222.jpg
[2015/09/02 13:04:47 | 006,088,661 | ---- | C] () -- C:\Users\Raphael\Desktop\DSC_0220.jpg
[2015/09/02 13:04:46 | 009,263,004 | ---- | C] () -- C:\Users\Raphael\Desktop\DSC_0216.jpg
[2015/09/02 13:04:46 | 006,585,061 | ---- | C] () -- C:\Users\Raphael\Desktop\DSC_0218.jpg
[2015/09/02 13:04:46 | 003,874,609 | ---- | C] () -- C:\Users\Raphael\Desktop\DSC_0215.jpg
[2015/09/02 13:04:45 | 008,862,016 | ---- | C] () -- C:\Users\Raphael\Desktop\DSC_0209.jpg
[2015/09/02 13:04:45 | 007,851,247 | ---- | C] () -- C:\Users\Raphael\Desktop\DSC_0210.jpg
[2015/09/02 13:04:45 | 007,814,645 | ---- | C] () -- C:\Users\Raphael\Desktop\DSC_0212.jpg
[2015/09/02 13:04:45 | 007,798,230 | ---- | C] () -- C:\Users\Raphael\Desktop\DSC_0208.jpg
[2015/09/02 13:04:45 | 007,190,600 | ---- | C] () -- C:\Users\Raphael\Desktop\DSC_0214.jpg
[2015/09/02 13:04:44 | 010,590,374 | ---- | C] () -- C:\Users\Raphael\Desktop\DSC_0199.jpg
[2015/09/02 13:04:44 | 008,046,077 | ---- | C] () -- C:\Users\Raphael\Desktop\DSC_0206.jpg
[2015/09/02 13:04:44 | 007,177,516 | ---- | C] () -- C:\Users\Raphael\Desktop\DSC_0202.jpg
[2015/09/02 13:04:44 | 006,896,718 | ---- | C] () -- C:\Users\Raphael\Desktop\DSC_0201.jpg
[2015/09/02 13:04:44 | 006,071,597 | ---- | C] () -- C:\Users\Raphael\Desktop\DSC_0200.jpg
[2015/09/02 13:04:44 | 005,900,035 | ---- | C] () -- C:\Users\Raphael\Desktop\DSC_0203.jpg
[2015/09/02 13:04:43 | 009,578,542 | ---- | C] () -- C:\Users\Raphael\Desktop\DSC_0198.jpg
[2015/09/02 13:04:42 | 010,137,836 | ---- | C] () -- C:\Users\Raphael\Desktop\DSC_0194.jpg
[2015/09/02 13:04:42 | 008,748,757 | ---- | C] () -- C:\Users\Raphael\Desktop\DSC_0195.jpg
[2015/09/02 13:04:42 | 007,748,446 | ---- | C] () -- C:\Users\Raphael\Desktop\DSC_0192.jpg
[2015/09/02 13:04:41 | 009,958,908 | ---- | C] () -- C:\Users\Raphael\Desktop\DSC_0183.jpg
[2015/09/02 13:04:41 | 009,350,964 | ---- | C] () -- C:\Users\Raphael\Desktop\DSC_0187.jpg
[2015/09/02 13:04:41 | 009,324,668 | ---- | C] () -- C:\Users\Raphael\Desktop\DSC_0184.jpg
[2015/09/02 13:04:41 | 009,096,464 | ---- | C] () -- C:\Users\Raphael\Desktop\DSC_0191.jpg
[2015/09/02 13:04:41 | 007,558,224 | ---- | C] () -- C:\Users\Raphael\Desktop\DSC_0190.jpg
[2015/09/02 13:04:41 | 006,616,724 | ---- | C] () -- C:\Users\Raphael\Desktop\DSC_0189.jpg
[2015/09/02 13:04:41 | 005,366,716 | ---- | C] () -- C:\Users\Raphael\Desktop\DSC_0186.jpg
[2015/09/02 13:04:40 | 008,676,285 | ---- | C] () -- C:\Users\Raphael\Desktop\DSC_0181.jpg
[2015/09/02 13:04:40 | 008,383,505 | ---- | C] () -- C:\Users\Raphael\Desktop\DSC_0180.jpg
[2015/09/02 13:04:40 | 007,300,822 | ---- | C] () -- C:\Users\Raphael\Desktop\DSC_0176.jpg
[2015/09/02 13:04:40 | 006,482,220 | ---- | C] () -- C:\Users\Raphael\Desktop\DSC_0177.jpg
[2015/09/02 13:04:40 | 006,256,113 | ---- | C] () -- C:\Users\Raphael\Desktop\DSC_0179.jpg
[2015/09/02 13:04:40 | 006,243,339 | ---- | C] () -- C:\Users\Raphael\Desktop\DSC_0175.jpg
[2015/09/02 13:04:39 | 010,541,128 | ---- | C] () -- C:\Users\Raphael\Desktop\DSC_0168.jpg
[2015/09/02 13:04:39 | 006,681,232 | ---- | C] () -- C:\Users\Raphael\Desktop\DSC_0169.jpg
[2015/09/02 13:04:39 | 006,206,020 | ---- | C] () -- C:\Users\Raphael\Desktop\DSC_0172.jpg
[2015/09/02 13:04:39 | 005,751,668 | ---- | C] () -- C:\Users\Raphael\Desktop\DSC_0174.jpg
[2015/09/02 13:04:39 | 005,710,858 | ---- | C] () -- C:\Users\Raphael\Desktop\DSC_0170.jpg
[2015/09/02 13:04:39 | 004,874,131 | ---- | C] () -- C:\Users\Raphael\Desktop\DSC_0171.jpg
[2015/09/02 13:04:38 | 007,822,822 | ---- | C] () -- C:\Users\Raphael\Desktop\DSC_0162.jpg
[2015/09/02 13:04:38 | 007,713,707 | ---- | C] () -- C:\Users\Raphael\Desktop\DSC_0165.jpg
[2015/09/02 13:04:38 | 007,628,738 | ---- | C] () -- C:\Users\Raphael\Desktop\DSC_0163.jpg
[2015/09/02 13:04:38 | 005,256,582 | ---- | C] () -- C:\Users\Raphael\Desktop\DSC_0164.jpg
[2015/09/02 13:04:37 | 008,441,618 | ---- | C] () -- C:\Users\Raphael\Desktop\DSC_0160.jpg
[2015/09/02 13:04:37 | 008,329,711 | ---- | C] () -- C:\Users\Raphael\Desktop\DSC_0155.jpg
[2015/09/02 13:04:36 | 007,951,826 | ---- | C] () -- C:\Users\Raphael\Desktop\DSC_0153.jpg
[2015/09/02 13:04:35 | 008,778,557 | ---- | C] () -- C:\Users\Raphael\Desktop\DSC_0150.jpg
[2015/09/02 13:04:34 | 008,572,455 | ---- | C] () -- C:\Users\Raphael\Desktop\DSC_0149.jpg
[2015/09/02 13:04:33 | 009,168,437 | ---- | C] () -- C:\Users\Raphael\Desktop\DSC_0148.jpg
[2015/09/02 13:04:32 | 005,641,087 | ---- | C] () -- C:\Users\Raphael\Desktop\DSC_0146.jpg
[2015/09/02 13:04:30 | 008,159,654 | ---- | C] () -- C:\Users\Raphael\Desktop\DSC_0143.jpg
[2015/09/02 13:04:29 | 007,296,599 | ---- | C] () -- C:\Users\Raphael\Desktop\DSC_0140.jpg
[2015/09/02 13:04:28 | 008,282,787 | ---- | C] () -- C:\Users\Raphael\Desktop\DSC_0139.jpg
[2015/09/02 13:04:27 | 009,174,910 | ---- | C] () -- C:\Users\Raphael\Desktop\DSC_0138.jpg
[2015/09/02 13:04:27 | 008,840,121 | ---- | C] () -- C:\Users\Raphael\Desktop\DSC_0136.jpg
[2015/09/02 13:04:26 | 012,584,292 | ---- | C] () -- C:\Users\Raphael\Desktop\DSC_0135.jpg
[2015/09/02 13:04:25 | 010,030,614 | ---- | C] () -- C:\Users\Raphael\Desktop\DSC_0131.jpg
[2015/09/02 13:04:25 | 008,578,263 | ---- | C] () -- C:\Users\Raphael\Desktop\DSC_0134.jpg
[2015/09/02 13:04:25 | 006,979,119 | ---- | C] () -- C:\Users\Raphael\Desktop\DSC_0132.jpg
[2015/09/02 13:04:24 | 010,213,103 | ---- | C] () -- C:\Users\Raphael\Desktop\DSC_0128.jpg
[2015/09/02 13:04:24 | 007,970,568 | ---- | C] () -- C:\Users\Raphael\Desktop\DSC_0130.jpg
[2015/09/02 13:04:24 | 004,446,043 | ---- | C] () -- C:\Users\Raphael\Desktop\DSC_0127.jpg
[2015/09/02 13:04:24 | 003,564,686 | ---- | C] () -- C:\Users\Raphael\Desktop\DSC_0126.jpg
[2015/09/02 13:04:23 | 009,099,760 | ---- | C] () -- C:\Users\Raphael\Desktop\DSC_0116.jpg
[2015/09/02 13:04:23 | 008,693,059 | ---- | C] () -- C:\Users\Raphael\Desktop\DSC_0111.jpg
[2015/09/02 13:04:23 | 007,449,212 | ---- | C] () -- C:\Users\Raphael\Desktop\DSC_0112.jpg
[2015/09/02 13:04:23 | 007,444,149 | ---- | C] () -- C:\Users\Raphael\Desktop\DSC_0110.jpg
[2015/09/02 13:04:23 | 006,114,899 | ---- | C] () -- C:\Users\Raphael\Desktop\DSC_0114.jpg
[2015/09/02 13:04:23 | 005,984,362 | ---- | C] () -- C:\Users\Raphael\Desktop\DSC_0119.jpg
[2015/09/02 13:04:23 | 005,838,512 | ---- | C] () -- C:\Users\Raphael\Desktop\DSC_0113.jpg
[2015/09/02 13:04:23 | 005,779,568 | ---- | C] () -- C:\Users\Raphael\Desktop\DSC_0120.jpg
[2015/09/02 13:04:23 | 005,740,975 | ---- | C] () -- C:\Users\Raphael\Desktop\DSC_0124.jpg
[2015/09/02 13:04:23 | 005,385,092 | ---- | C] () -- C:\Users\Raphael\Desktop\DSC_0115.jpg
[2015/09/02 13:04:23 | 004,999,621 | ---- | C] () -- C:\Users\Raphael\Desktop\DSC_0125.jpg
[2015/09/02 13:04:22 | 007,218,299 | ---- | C] () -- C:\Users\Raphael\Desktop\DSC_0092.jpg
[2015/09/02 13:04:22 | 006,999,079 | ---- | C] () -- C:\Users\Raphael\Desktop\DSC_0086.jpg
[2015/09/02 13:04:22 | 006,224,695 | ---- | C] () -- C:\Users\Raphael\Desktop\DSC_0098.jpg
[2015/09/02 13:04:22 | 005,905,496 | ---- | C] () -- C:\Users\Raphael\Desktop\DSC_0087.jpg
[2015/09/02 13:04:22 | 005,678,240 | ---- | C] () -- C:\Users\Raphael\Desktop\DSC_0106.jpg
[2015/09/02 13:04:22 | 005,380,768 | ---- | C] () -- C:\Users\Raphael\Desktop\DSC_0095.jpg
[2015/09/02 13:04:22 | 004,899,329 | ---- | C] () -- C:\Users\Raphael\Desktop\DSC_0089.jpg
[2015/09/02 13:04:22 | 004,881,557 | ---- | C] () -- C:\Users\Raphael\Desktop\DSC_0096.jpg
[2015/09/02 13:04:22 | 004,678,667 | ---- | C] () -- C:\Users\Raphael\Desktop\DSC_0107.jpg
[2015/09/02 13:04:22 | 004,637,639 | ---- | C] () -- C:\Users\Raphael\Desktop\DSC_0093.jpg
[2015/09/02 13:04:22 | 004,626,832 | ---- | C] () -- C:\Users\Raphael\Desktop\DSC_0105.jpg
[2015/09/02 13:04:22 | 004,462,053 | ---- | C] () -- C:\Users\Raphael\Desktop\DSC_0099.jpg
[2015/09/02 13:04:21 | 009,526,807 | ---- | C] () -- C:\Users\Raphael\Desktop\DSC_0076.jpg
[2015/09/02 13:04:21 | 008,296,641 | ---- | C] () -- C:\Users\Raphael\Desktop\DSC_0080.jpg
[2015/09/02 13:04:21 | 007,792,484 | ---- | C] () -- C:\Users\Raphael\Desktop\DSC_0070.jpg
[2015/09/02 13:04:21 | 007,409,223 | ---- | C] () -- C:\Users\Raphael\Desktop\DSC_0081.jpg
[2015/09/02 13:04:21 | 006,440,978 | ---- | C] () -- C:\Users\Raphael\Desktop\DSC_0078.jpg
[2015/09/02 13:04:21 | 006,021,165 | ---- | C] () -- C:\Users\Raphael\Desktop\DSC_0075.jpg
[2015/09/02 13:04:21 | 005,154,113 | ---- | C] () -- C:\Users\Raphael\Desktop\DSC_0071.jpg
[2015/09/02 13:04:21 | 005,148,682 | ---- | C] () -- C:\Users\Raphael\Desktop\DSC_0069.jpg
[2015/09/02 13:04:21 | 005,120,118 | ---- | C] () -- C:\Users\Raphael\Desktop\DSC_0077.jpg
[2015/09/02 13:04:21 | 005,099,183 | ---- | C] () -- C:\Users\Raphael\Desktop\DSC_0079.jpg
[2015/09/02 13:04:21 | 004,539,240 | ---- | C] () -- C:\Users\Raphael\Desktop\DSC_0083.jpg
[2015/09/02 13:04:21 | 004,362,899 | ---- | C] () -- C:\Users\Raphael\Desktop\DSC_0073.jpg
[2015/09/02 13:04:20 | 008,424,237 | ---- | C] () -- C:\Users\Raphael\Desktop\20150720_164405.jpg
[2015/09/02 13:04:20 | 007,100,368 | ---- | C] () -- C:\Users\Raphael\Desktop\20150720_162404.jpg
[2015/09/02 13:04:20 | 006,559,604 | ---- | C] () -- C:\Users\Raphael\Desktop\20150720_160838.jpg
[2015/09/02 13:04:20 | 005,201,015 | ---- | C] () -- C:\Users\Raphael\Desktop\DSC_0067.jpg
[2015/09/02 13:04:20 | 005,190,707 | ---- | C] () -- C:\Users\Raphael\Desktop\20150720_163108.jpg
[2015/09/02 13:04:20 | 005,180,152 | ---- | C] () -- C:\Users\Raphael\Desktop\20150720_164411.jpg
[2015/09/02 13:04:20 | 004,517,778 | ---- | C] () -- C:\Users\Raphael\Desktop\20150720_163339.jpg
[2015/09/02 13:04:20 | 004,346,792 | ---- | C] () -- C:\Users\Raphael\Desktop\DSC_0068.jpg
[2015/09/02 13:04:20 | 004,061,764 | ---- | C] () -- C:\Users\Raphael\Desktop\20150720_164328.jpg
[2015/09/02 13:04:20 | 003,493,202 | ---- | C] () -- C:\Users\Raphael\Desktop\20150720_162948.jpg
[2015/09/02 13:04:20 | 003,317,561 | ---- | C] () -- C:\Users\Raphael\Desktop\20150720_162808_HDR.jpg
[2015/09/02 13:04:20 | 001,114,421 | ---- | C] () -- C:\Users\Raphael\Desktop\20150720_162447.jpg
[2015/09/02 13:04:19 | 009,083,384 | ---- | C] () -- C:\Users\Raphael\Desktop\DSC_0243.jpg
[2015/09/02 13:04:19 | 008,935,437 | ---- | C] () -- C:\Users\Raphael\Desktop\DSC_0242.jpg
[2015/09/02 13:04:19 | 008,056,003 | ---- | C] () -- C:\Users\Raphael\Desktop\DSC_0240.jpg
[2015/09/02 13:04:19 | 005,303,128 | ---- | C] () -- C:\Users\Raphael\Desktop\20150720_135046.jpg
[2015/09/02 13:04:19 | 005,286,496 | ---- | C] () -- C:\Users\Raphael\Desktop\20150720_152937.jpg
[2015/08/30 14:03:33 | 000,268,196 | ---- | C] () -- C:\Users\Raphael\Desktop\The+LEGO+Movie+Experience+at+LEGOLand+California+(c).jpg
[2015/08/30 14:03:28 | 000,342,074 | ---- | C] () -- C:\Users\Raphael\Desktop\12663343113_f22ace6845_b.jpg
[2015/08/30 14:03:23 | 000,164,733 | ---- | C] () -- C:\Users\Raphael\Desktop\THE-LEGO-MOVIE-EXPERIENCE-AT-LEGOLAND-CA-5.jpg
[2015/08/30 14:01:57 | 000,259,019 | ---- | C] () -- C:\Users\Raphael\Desktop\The-LEGO-Movie-Experience-at-LEGOLand-California-b.jpg
[2015/08/28 23:19:00 | 000,033,282 | ---- | C] () -- C:\Users\Raphael\Documents\Principais parques de diversão do mundo.kmz
[2015/08/28 18:23:42 | 002,498,808 | ---- | C] () -- C:\WINDOWS\SysNative\CoreUIComponents.dll
[2015/08/28 18:23:42 | 001,771,592 | ---- | C] () -- C:\WINDOWS\SysWow64\CoreUIComponents.dll
[2015/08/28 18:23:39 | 000,247,296 | ---- | C] () -- C:\WINDOWS\SysNative\facecredentialprovider.dll
[2015/08/28 18:23:39 | 000,008,847 | ---- | C] () -- C:\WINDOWS\SysNative\ResPriHMImageList
[2015/08/27 17:26:41 | 090,021,786 | ---- | C] () -- C:\Users\Raphael\Desktop\Viper front seat on ride HD POV Six Flags Magic Mountain[1].mp4
[2015/08/27 17:25:52 | 107,009,281 | ---- | C] () -- C:\Users\Raphael\Desktop\Kraken Front Seat on ride HD POV Seaworld Orlando[1].mp4
[2015/08/26 09:54:25 | 027,406,924 | ---- | C] () -- C:\Users\Raphael\Desktop\The Park   Teaser[1].mp4
[2015/08/24 20:32:55 | 023,897,585 | ---- | C] () -- C:\Users\Raphael\Desktop\Superman Escape from Krypton Front Seat on ride HD POV Six Flags Magic Mountain.mp4
[2015/08/23 19:39:39 | 000,064,872 | ---- | C] () -- C:\Users\Raphael\Documents\comprachicobento.pdf
[2015/08/22 21:46:10 | 000,405,328 | ---- | C] () -- C:\Users\Raphael\Desktop\DivulgaçãoRJ.jpg
[2015/08/20 20:15:36 | 006,194,103 | ---- | C] () -- C:\Users\Raphael\Desktop\20150718_101459.jpg
[2015/08/20 20:15:28 | 004,638,373 | ---- | C] () -- C:\Users\Raphael\Desktop\20150718_143911.jpg
[2015/08/18 21:05:31 | 002,446,336 | ---- | C] () -- C:\WINDOWS\SysNative\InputService.dll
[2015/08/18 21:05:29 | 001,823,232 | ---- | C] () -- C:\WINDOWS\SysWow64\InputService.dll
[2015/08/18 21:05:28 | 000,413,184 | ---- | C] () -- C:\WINDOWS\SysNative\diagtrack_win.dll
[2015/08/18 21:05:28 | 000,404,480 | ---- | C] () -- C:\WINDOWS\SysNative\diagtrack_wininternal.dll
[2015/08/18 21:05:27 | 000,293,376 | ---- | C] () -- C:\WINDOWS\SysNative\TextInputFramework.dll
[2015/08/18 21:05:25 | 000,200,704 | ---- | C] () -- C:\WINDOWS\SysWow64\TextInputFramework.dll
[2015/08/18 20:49:16 | 681,282,316 | ---- | C] () -- C:\WINDOWS\MEMORY.DMP
[2015/08/18 12:21:38 | 006,302,584 | ---- | C] () -- C:\Users\Raphael\Desktop\20150720_175458.jpg
[2015/08/18 12:21:20 | 004,529,991 | ---- | C] () -- C:\Users\Raphael\Desktop\DSC_0066.jpg
[2015/08/17 20:00:14 | 2054,439,437 | ---- | C] () -- C:\Users\Raphael\Desktop\PARTII.rar
[2015/08/01 15:24:52 | 000,001,966 | ---- | C] () -- C:\Users\Raphael\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Monitorar alertas de tinta - HP Deskjet 3510 series (Rede).lnk
[2015/08/01 15:24:08 | 000,002,300 | ---- | C] () -- C:\Users\Public\Desktop\HP Deskjet 3510 series.lnk
[2015/08/01 15:23:56 | 000,000,057 | ---- | C] () -- C:\ProgramData\Ament.ini
[2015/07/30 15:24:47 | 000,016,130 | ---- | C] () -- C:\Users\Raphael\Documents\rockinriocard.pdf
[2015/07/30 09:15:20 | 000,191,614 | ---- | C] () -- C:\Users\Raphael\Documents\SeguroArgentina.pdf
[2015/07/29 11:30:15 | 000,002,401 | ---- | C] () -- C:\Users\Raphael\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
[2015/07/29 11:17:33 | 001,810,446 | ---- | C] () -- C:\WINDOWS\SysNative\PerfStringBackup.INI
[2015/07/29 11:06:50 | 000,001,576 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk
[2015/07/29 10:57:49 | 000,000,000 | ---- | C] () -- C:\WINDOWS\ativpsrm.bin
[2015/07/29 10:56:29 | 000,000,000 | -H-- | C] () -- C:\WINDOWS\SysNative\drivers\Msft_User_WpdFs_01_11_00.Wdf
[2015/07/29 10:51:06 | 000,505,344 | ---- | C] () -- C:\WINDOWS\SysNative\EditionUpgradeManagerObj.dll
[2015/07/29 10:51:06 | 000,032,768 | ---- | C] () -- C:\WINDOWS\SysNative\LicenseManagerApi.dll
[2015/07/28 20:10:58 | 000,002,160 | ---- | C] () -- C:\Users\Public\Desktop\RollerCoaster Tycoon 3.lnk
[2015/07/28 20:10:52 | 000,197,120 | ---- | C] () -- C:\WINDOWS\patchw32.dll
[2015/07/26 16:18:05 | 000,003,471 | ---- | C] () -- C:\Users\Raphael\Documents\WOC.wlmp
[2015/07/26 15:19:25 | 000,005,442 | ---- | C] () -- C:\Users\Raphael\Documents\PAINT THE NIGHT.wlmp
[2015/07/23 18:06:59 | 000,080,278 | ---- | C] () -- C:\Users\Raphael\Documents\comprovantefonte.pdf
[2015/07/16 02:12:22 | 000,458,472 | ---- | C] () -- C:\WINDOWS\SysNative\amdmiracast.dll
[2015/07/16 02:01:52 | 000,235,008 | ---- | C] () -- C:\WINDOWS\SysNative\clinfo.exe
[2015/07/16 02:01:48 | 001,187,342 | ---- | C] () -- C:\WINDOWS\SysNative\amdocl_as64.exe
[2015/07/16 02:01:48 | 001,061,902 | ---- | C] () -- C:\WINDOWS\SysNative\amdocl_ld64.exe
[2015/07/16 02:01:48 | 000,995,342 | ---- | C] () -- C:\WINDOWS\SysWow64\amdocl_as32.exe
[2015/07/16 02:01:48 | 000,798,734 | ---- | C] () -- C:\WINDOWS\SysWow64\amdocl_ld32.exe
[2015/07/16 01:29:22 | 000,134,656 | ---- | C] () -- C:\WINDOWS\SysNative\amdhdl64.dll
[2015/07/16 01:29:20 | 000,123,392 | ---- | C] () -- C:\WINDOWS\SysWow64\amdhdl32.dll
[2015/07/16 01:23:18 | 003,437,632 | ---- | C] () -- C:\WINDOWS\SysNative\atiumd6a.cap
[2015/07/16 01:22:02 | 000,204,952 | ---- | C] () -- C:\WINDOWS\SysWow64\ativvsvl.dat
[2015/07/16 01:22:02 | 000,204,952 | ---- | C] () -- C:\WINDOWS\SysNative\ativvsvl.dat
[2015/07/16 01:22:02 | 000,157,144 | ---- | C] () -- C:\WINDOWS\SysWow64\ativvsva.dat
[2015/07/16 01:22:02 | 000,157,144 | ---- | C] () -- C:\WINDOWS\SysNative\ativvsva.dat
[2015/07/16 01:21:56 | 000,660,912 | ---- | C] () -- C:\WINDOWS\SysWow64\atiapfxx.blb
[2015/07/16 01:21:56 | 000,660,912 | ---- | C] () -- C:\WINDOWS\SysNative\atiapfxx.blb
[2015/07/16 01:18:46 | 003,471,376 | ---- | C] () -- C:\WINDOWS\SysWow64\atiumdva.cap
[2015/07/16 01:17:30 | 000,160,256 | ---- | C] () -- C:\WINDOWS\SysNative\atieah64.exe
[2015/07/16 01:17:28 | 000,204,800 | ---- | C] () -- C:\WINDOWS\SysNative\amdgfxinfo64.dll
[2015/07/16 01:17:28 | 000,143,872 | ---- | C] () -- C:\WINDOWS\SysWow64\atieah32.exe
[2015/07/16 01:17:26 | 000,189,952 | ---- | C] () -- C:\WINDOWS\SysWow64\amdgfxinfo32.dll
[2015/07/16 01:12:10 | 000,102,912 | ---- | C] () -- C:\WINDOWS\SysNative\hsa-thunk64.dll
[2015/07/16 01:12:08 | 000,102,400 | ---- | C] () -- C:\WINDOWS\SysWow64\hsa-thunk.dll
[2015/07/13 15:19:34 | 000,167,456 | ---- | C] () -- C:\WINDOWS\SysNative\amde31a.dat
[2015/07/13 15:19:20 | 000,169,152 | ---- | C] () -- C:\WINDOWS\SysNative\ativce03.dat
[2015/07/10 13:51:22 | 000,032,200 | ---- | C] () -- C:\WINDOWS\Professional.xml
[2015/07/10 13:36:58 | 000,781,824 | ---- | C] () -- C:\WINDOWS\SysNative\prfh0416.dat
[2015/07/10 13:36:58 | 000,328,354 | ---- | C] () -- C:\WINDOWS\SysNative\prfi0416.dat
[2015/07/10 13:36:58 | 000,152,812 | ---- | C] () -- C:\WINDOWS\SysNative\prfc0416.dat
[2015/07/10 13:36:58 | 000,040,752 | ---- | C] () -- C:\WINDOWS\SysNative\prfd0416.dat
[2015/07/10 09:22:52 | 000,016,148 | ---- | C] () -- C:\WINDOWS\SysNative\DESKTOP-M7P1NB6_Administrator_HistoryPrediction.bin
[2015/07/10 09:21:20 | 000,043,409 | ---- | C] () -- C:\WINDOWS\SysWow64\license.rtf
[2015/07/10 09:21:20 | 000,043,409 | ---- | C] () -- C:\WINDOWS\SysNative\license.rtf
[2015/07/10 09:20:52 | 000,067,584 | --S- | C] () -- C:\WINDOWS\bootstat.dat
[2015/07/10 09:20:34 | 004,975,904 | ---- | C] () -- C:\WINDOWS\SysNative\FNTCACHE.DAT
[2015/07/10 08:06:08 | 000,731,134 | ---- | C] () -- C:\WINDOWS\SysNative\perfh009.dat
[2015/07/10 08:06:08 | 000,296,742 | ---- | C] () -- C:\WINDOWS\SysNative\perfi009.dat
[2015/07/10 08:06:08 | 000,137,964 | ---- | C] () -- C:\WINDOWS\SysNative\perfc009.dat
[2015/07/10 08:06:08 | 000,033,362 | ---- | C] () -- C:\WINDOWS\SysNative\perfd009.dat
[2015/07/10 08:04:40 | 000,001,988 | ---- | C] () -- C:\WINDOWS\SysWow64\ticrf.rat
[2015/07/10 08:04:39 | 000,000,741 | ---- | C] () -- C:\WINDOWS\SysWow64\NOISE.DAT
[2015/07/10 08:04:38 | 000,215,943 | ---- | C] () -- C:\WINDOWS\SysWow64\dssec.dat
[2015/07/10 08:04:38 | 000,008,798 | ---- | C] () -- C:\WINDOWS\SysWow64\icrav03.rat
[2015/07/10 08:04:34 | 000,003,683 | ---- | C] () -- C:\WINDOWS\SysNative\drivers\etc\lmhosts.sam
[2015/07/10 08:04:34 | 000,001,988 | ---- | C] () -- C:\WINDOWS\SysNative\ticrf.rat
[2015/07/10 08:04:33 | 000,015,462 | ---- | C] () -- C:\WINDOWS\SysNative\OEMDefaultAssociations.xml
[2015/07/10 08:04:32 | 000,215,943 | ---- | C] () -- C:\WINDOWS\SysNative\dssec.dat
[2015/07/10 08:04:32 | 000,008,798 | ---- | C] () -- C:\WINDOWS\SysNative\icrav03.rat
[2015/07/10 08:04:32 | 000,000,741 | ---- | C] () -- C:\WINDOWS\SysNative\NOISE.DAT
[2015/07/10 08:04:31 | 000,000,858 | ---- | C] () -- C:\WINDOWS\SysNative\DefaultQuestions.json
[2015/07/10 08:04:31 | 000,000,389 | ---- | C] () -- C:\WINDOWS\SysNative\AutoWorkplace.exe.config
[2015/07/10 08:01:21 | 000,147,439 | ---- | C] () -- C:\WINDOWS\SysWow64\gpedit.msc
[2015/07/10 08:01:21 | 000,043,566 | ---- | C] () -- C:\WINDOWS\SysWow64\rsop.msc
[2015/07/10 08:01:20 | 000,076,060 | ---- | C] () -- C:\WINDOWS\SysWow64\xpsrchvw.xml
[2015/07/10 08:01:20 | 000,076,060 | ---- | C] () -- C:\WINDOWS\SysNative\xpsrchvw.xml
[2015/07/10 08:01:19 | 000,003,458 | ---- | C] () -- C:\WINDOWS\SysWow64\ieuinit.inf
[2015/07/10 08:01:13 | 000,006,886 | ---- | C] () -- C:\WINDOWS\SysWow64\SecurityAndMaintenance_Error.png
[2015/07/10 08:01:13 | 000,005,796 | ---- | C] () -- C:\WINDOWS\SysWow64\SecurityAndMaintenance.png
[2015/07/10 08:01:13 | 000,002,626 | ---- | C] () -- C:\WINDOWS\SysWow64\SecurityAndMaintenance_Alert.png
[2015/07/10 08:01:12 | 000,006,886 | ---- | C] () -- C:\WINDOWS\SysNative\SecurityAndMaintenance_Error.png
[2015/07/10 08:01:12 | 000,005,796 | ---- | C] () -- C:\WINDOWS\SysNative\SecurityAndMaintenance.png
[2015/07/10 08:01:12 | 000,002,626 | ---- | C] () -- C:\WINDOWS\SysNative\SecurityAndMaintenance_Alert.png
[2015/07/10 08:01:11 | 000,002,349 | R-S- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Immersive Control Panel.lnk
[2015/07/10 08:01:10 | 000,008,260 | ---- | C] () -- C:\WINDOWS\SysNative\ResPriImageList
[2015/07/10 08:01:10 | 000,002,199 | R-S- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PrintDialog.lnk
[2015/07/10 08:01:10 | 000,002,197 | R-S- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Devices Flow.lnk
[2015/07/10 08:01:09 | 000,010,429 | ---- | C] () -- C:\WINDOWS\SysNative\ScavengeSpace.xml
[2015/07/10 08:00:41 | 000,146,389 | ---- | C] () -- C:\WINDOWS\SysNative\printmanagement.msc
[2015/07/10 08:00:41 | 000,000,874 | ---- | C] () -- C:\WINDOWS\SysNative\manage-bde.wsf
[2015/07/10 08:00:40 | 000,147,439 | ---- | C] () -- C:\WINDOWS\SysNative\gpedit.msc
[2015/07/10 08:00:40 | 000,120,458 | ---- | C] () -- C:\WINDOWS\SysNative\secpol.msc
[2015/07/10 08:00:40 | 000,043,566 | ---- | C] () -- C:\WINDOWS\SysNative\rsop.msc
[2015/07/10 08:00:36 | 001,520,828 | ---- | C] () -- C:\WINDOWS\SysNative\WpcNBModel.bin
[2015/07/10 08:00:36 | 000,526,068 | ---- | C] () -- C:\WINDOWS\SysNative\staticurllist.bin
[2015/07/10 08:00:36 | 000,316,640 | ---- | C] () -- C:\WINDOWS\WMSysPr9.prx
[2015/07/10 08:00:36 | 000,004,687 | ---- | C] () -- C:\WINDOWS\SysNative\wpcmon.png
[2015/07/10 08:00:36 | 000,003,458 | ---- | C] () -- C:\WINDOWS\SysNative\ieuinit.inf
[2015/07/10 08:00:35 | 000,161,632 | ---- | C] () -- C:\WINDOWS\SysWow64\weretw.dll
[2015/07/10 08:00:34 | 000,211,938 | ---- | C] () -- C:\WINDOWS\SysWow64\lcphrase.tbl
[2015/07/10 08:00:34 | 000,024,114 | ---- | C] () -- C:\WINDOWS\SysWow64\lcptr.tbl
[2015/07/10 08:00:33 | 000,673,088 | ---- | C] () -- C:\WINDOWS\SysWow64\mlang.dat
[2015/07/10 08:00:32 | 000,047,104 | ---- | C] () -- C:\WINDOWS\SysWow64\BWContextHandler.dll
[2015/07/10 08:00:32 | 000,003,666 | ---- | C] () -- C:\WINDOWS\SysWow64\sysprtj.sep
[2015/07/10 08:00:32 | 000,003,317 | ---- | C] () -- C:\WINDOWS\SysWow64\sysprint.sep
[2015/07/10 08:00:32 | 000,001,673 | ---- | C] () -- C:\WINDOWS\SysWow64\tcpbidi.xml
[2015/07/10 08:00:32 | 000,000,160 | ---- | C] () -- C:\WINDOWS\SysWow64\@OpenWithToastLogo.png
[2015/07/10 08:00:32 | 000,000,150 | ---- | C] () -- C:\WINDOWS\SysWow64\pcl.sep
[2015/07/10 08:00:32 | 000,000,120 | ---- | C] () -- C:\WINDOWS\SysWow64\@TileEmpty1x1Image.png
[2015/07/10 08:00:32 | 000,000,051 | ---- | C] () -- C:\WINDOWS\SysWow64\pscript.sep
[2015/07/10 08:00:31 | 000,156,672 | ---- | C] () -- C:\WINDOWS\SysWow64\MTF.dll
[2015/07/10 08:00:31 | 000,144,998 | ---- | C] () -- C:\WINDOWS\SysWow64\lusrmgr.msc
[2015/07/10 08:00:31 | 000,115,091 | ---- | C] () -- C:\WINDOWS\SysWow64\WF.msc
[2015/07/10 08:00:31 | 000,011,109 | ---- | C] () -- C:\WINDOWS\SysWow64\connectedsearch-results.searchconnector-ms
[2015/07/10 08:00:31 | 000,004,014 | ---- | C] () -- C:\WINDOWS\SysWow64\xwizard.dtd
[2015/07/10 08:00:31 | 000,001,820 | ---- | C] () -- C:\WINDOWS\SysWow64\rasctrnm.h
[2015/07/10 08:00:31 | 000,000,565 | ---- | C] () -- C:\WINDOWS\SysWow64\NdfEventView.xml
[2015/07/10 08:00:31 | 000,000,543 | ---- | C] () -- C:\WINDOWS\SysWow64\connectedsearch-appcmd.searchconnector-ms
[2015/07/10 08:00:31 | 000,000,530 | ---- | C] () -- C:\WINDOWS\SysWow64\connectedsearch-protocol.searchconnector-ms
[2015/07/10 08:00:31 | 000,000,525 | ---- | C] () -- C:\WINDOWS\SysWow64\connectedsearch-music.searchconnector-ms
[2015/07/10 08:00:30 | 000,028,672 | ---- | C] () -- C:\WINDOWS\SysWow64\dtdump.exe
[2015/07/10 08:00:30 | 000,007,784 | ---- | C] () -- C:\WINDOWS\SysWow64\connectedsearch-suggestions.searchconnector-ms
[2015/07/10 08:00:30 | 000,007,152 | ---- | C] () -- C:\WINDOWS\SysWow64\connectedsearch-zeroinput.searchconnector-ms
[2015/07/10 08:00:30 | 000,000,539 | ---- | C] () -- C:\WINDOWS\SysWow64\connectedsearch-history.searchconnector-ms
[2015/07/10 08:00:30 | 000,000,528 | ---- | C] () -- C:\WINDOWS\SysWow64\connectedsearch-contacts.searchconnector-ms
[2015/07/10 08:00:30 | 000,000,522 | ---- | C] () -- C:\WINDOWS\SysWow64\connectedsearch-paths.searchconnector-ms
[2015/07/10 08:00:29 | 000,081,408 | ---- | C] () -- C:\WINDOWS\SysWow64\InputLocaleManager.dll
[2015/07/10 08:00:29 | 000,057,344 | ---- | C] () -- C:\WINDOWS\SysWow64\EditBufferTestHook.dll
[2015/07/10 08:00:29 | 000,053,760 | ---- | C] () -- C:\WINDOWS\SysWow64\WpKbdLayout.dll
[2015/07/10 08:00:29 | 000,022,016 | ---- | C] () -- C:\WINDOWS\SysWow64\WordBreakers.dll
[2015/07/10 08:00:28 | 003,440,660 | ---- | C] () -- C:\WINDOWS\SysWow64\drivers\gm.dls
[2015/07/10 08:00:28 | 000,270,848 | ---- | C] () -- C:\WINDOWS\SysWow64\HrtfApo.dll
[2015/07/10 08:00:28 | 000,004,453 | ---- | C] () -- C:\WINDOWS\SysWow64\odbcconf.rsp
[2015/07/10 08:00:27 | 000,364,544 | ---- | C] () -- C:\WINDOWS\SysWow64\msjetoledb40.dll
[2015/07/10 08:00:27 | 000,142,904 | ---- | C] () -- C:\WINDOWS\SysWow64\slmgr.vbs
[2015/07/10 08:00:27 | 000,002,233 | ---- | C] () -- C:\WINDOWS\SysWow64\12520850.cpx
[2015/07/10 08:00:27 | 000,002,151 | ---- | C] () -- C:\WINDOWS\SysWow64\12520437.cpx
[2015/07/10 08:00:26 | 000,124,118 | ---- | C] () -- C:\WINDOWS\SysWow64\comexp.msc
[2015/07/10 08:00:26 | 000,022,528 | ---- | C] () -- C:\WINDOWS\SysWow64\efsext.dll
[2015/07/10 08:00:25 | 000,145,640 | ---- | C] () -- C:\WINDOWS\SysWow64\devmgmt.msc
[2015/07/10 08:00:25 | 000,144,862 | ---- | C] () -- C:\WINDOWS\SysWow64\tpm.msc
[2015/07/10 08:00:25 | 000,002,269 | ---- | C] () -- C:\WINDOWS\SysWow64\WimBootCompress.ini
[2015/07/10 08:00:24 | 003,170,304 | ---- | C] () -- C:\WINDOWS\SysWow64\boot.sdi
[2015/07/10 08:00:24 | 000,167,640 | ---- | C] () -- C:\WINDOWS\SysWow64\chs_singlechar_pinyin.dat
[2015/07/10 08:00:24 | 000,145,519 | ---- | C] () -- C:\WINDOWS\SysWow64\perfmon.msc
[2015/07/10 08:00:24 | 000,047,679 | ---- | C] () -- C:\WINDOWS\SysWow64\diskmgmt.msc
[2015/07/10 08:00:23 | 000,204,105 | ---- | C] () -- C:\WINDOWS\SysWow64\winrm.vbs
[2015/07/10 08:00:23 | 000,145,127 | ---- | C] () -- C:\WINDOWS\SysWow64\eventvwr.msc
[2015/07/10 08:00:23 | 000,145,059 | ---- | C] () -- C:\WINDOWS\SysWow64\taskschd.msc
[2015/07/10 08:00:23 | 000,144,909 | ---- | C] () -- C:\WINDOWS\SysWow64\fsmgmt.msc
[2015/07/10 08:00:23 | 000,113,256 | ---- | C] () -- C:\WINDOWS\SysWow64\compmgmt.msc
[2015/07/10 08:00:23 | 000,092,746 | ---- | C] () -- C:\WINDOWS\SysWow64\services.msc
[2015/07/10 08:00:23 | 000,063,081 | ---- | C] () -- C:\WINDOWS\SysWow64\certlm.msc
[2015/07/10 08:00:23 | 000,063,070 | ---- | C] () -- C:\WINDOWS\SysWow64\certmgr.msc
[2015/07/10 08:00:23 | 000,041,587 | ---- | C] () -- C:\WINDOWS\SysWow64\azman.msc
[2015/07/10 08:00:23 | 000,017,935 | ---- | C] () -- C:\WINDOWS\SysWow64\EventViewer_EventDetails.xsl
[2015/07/10 08:00:23 | 000,004,675 | ---- | C] () -- C:\WINDOWS\SysWow64\wsmanconfig_schema.xml
[2015/07/10 08:00:23 | 000,002,426 | ---- | C] () -- C:\WINDOWS\SysWow64\WsmTxt.xsl
[2015/07/10 08:00:23 | 000,002,125 | ---- | C] () -- C:\WINDOWS\SysWow64\AppxProvisioning.xml
[2015/07/10 08:00:23 | 000,001,559 | ---- | C] () -- C:\WINDOWS\SysWow64\WsmPty.xsl
[2015/07/10 08:00:23 | 000,000,714 | ---- | C] () -- C:\WINDOWS\SysWow64\RestartManager.mof
[2015/07/10 08:00:23 | 000,000,176 | ---- | C] () -- C:\WINDOWS\SysWow64\RestartManagerUninstall.mof
[2015/07/10 08:00:23 | 000,000,035 | ---- | C] () -- C:\WINDOWS\SysWow64\winrm.cmd
[2015/07/10 08:00:22 | 000,211,938 | ---- | C] () -- C:\WINDOWS\SysNative\lcphrase.tbl
[2015/07/10 08:00:22 | 000,024,114 | ---- | C] () -- C:\WINDOWS\SysNative\lcptr.tbl
[2015/07/10 08:00:21 | 000,215,352 | ---- | C] () -- C:\WINDOWS\SysNative\weretw.dll
[2015/07/10 08:00:17 | 000,673,088 | ---- | C] () -- C:\WINDOWS\SysNative\mlang.dat
[2015/07/10 08:00:17 | 000,000,120 | ---- | C] () -- C:\WINDOWS\SysNative\@TileEmpty1x1Image.png
[2015/07/10 08:00:16 | 000,000,853 | R-S- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Desktop.lnk
[2015/07/10 08:00:16 | 000,000,600 | ---- | C] () -- C:\WINDOWS\SysNative\@language_notification_icon.png
[2015/07/10 08:00:15 | 000,055,296 | ---- | C] () -- C:\WINDOWS\SysNative\BWContextHandler.dll
[2015/07/10 08:00:15 | 000,000,600 | ---- | C] () -- C:\WINDOWS\SysNative\@optionalfeatures.png
[2015/07/10 08:00:15 | 000,000,160 | ---- | C] () -- C:\WINDOWS\SysNative\@OpenWithToastLogo.png
[2015/07/10 08:00:14 | 000,060,124 | ---- | C] () -- C:\WINDOWS\SysNative\tcpmon.ini
[2015/07/10 08:00:14 | 000,003,666 | ---- | C] () -- C:\WINDOWS\SysNative\sysprtj.sep
[2015/07/10 08:00:14 | 000,003,317 | ---- | C] () -- C:\WINDOWS\SysNative\sysprint.sep
[2015/07/10 08:00:14 | 000,001,673 | ---- | C] () -- C:\WINDOWS\SysNative\tcpbidi.xml
[2015/07/10 08:00:14 | 000,000,150 | ---- | C] () -- C:\WINDOWS\SysNative\pcl.sep
[2015/07/10 08:00:14 | 000,000,051 | ---- | C] () -- C:\WINDOWS\SysNative\pscript.sep
[2015/07/10 08:00:14 | 000,000,003 | ---- | C] () -- C:\WINDOWS\SysNative\drivers\MsftWdf_Kernel_01015_Inbox_Critical.Wdf
[2015/07/10 08:00:13 | 000,257,024 | ---- | C] () -- C:\WINDOWS\SysNative\MTFServer.dll
[2015/07/10 08:00:13 | 000,226,816 | ---- | C] () -- C:\WINDOWS\SysNative\MTF.dll
[2015/07/10 08:00:13 | 000,144,998 | ---- | C] () -- C:\WINDOWS\SysNative\lusrmgr.msc
[2015/07/10 08:00:13 | 000,009,216 | ---- | C] () -- C:\WINDOWS\SysNative\WppRecorderUM.dll
[2015/07/10 08:00:13 | 000,000,003 | ---- | C] () -- C:\WINDOWS\SysNative\drivers\MsftWdf_User_01_11_00_Inbox_Critical.Wdf
[2015/07/10 08:00:12 | 000,011,109 | ---- | C] () -- C:\WINDOWS\SysNative\connectedsearch-results.searchconnector-ms
[2015/07/10 08:00:12 | 000,007,784 | ---- | C] () -- C:\WINDOWS\SysNative\connectedsearch-suggestions.searchconnector-ms
[2015/07/10 08:00:12 | 000,007,152 | ---- | C] () -- C:\WINDOWS\SysNative\connectedsearch-zeroinput.searchconnector-ms
[2015/07/10 08:00:12 | 000,001,588 | R-S- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Search.lnk
[2015/07/10 08:00:12 | 000,000,543 | ---- | C] () -- C:\WINDOWS\SysNative\connectedsearch-appcmd.searchconnector-ms
[2015/07/10 08:00:12 | 000,000,539 | ---- | C] () -- C:\WINDOWS\SysNative\connectedsearch-history.searchconnector-ms
[2015/07/10 08:00:12 | 000,000,530 | ---- | C] () -- C:\WINDOWS\SysNative\connectedsearch-protocol.searchconnector-ms
[2015/07/10 08:00:12 | 000,000,528 | ---- | C] () -- C:\WINDOWS\SysNative\connectedsearch-contacts.searchconnector-ms
[2015/07/10 08:00:12 | 000,000,525 | ---- | C] () -- C:\WINDOWS\SysNative\connectedsearch-music.searchconnector-ms
[2015/07/10 08:00:12 | 000,000,522 | ---- | C] () -- C:\WINDOWS\SysNative\connectedsearch-paths.searchconnector-ms
[2015/07/10 08:00:09 | 000,000,726 | ---- | C] () -- C:\WINDOWS\SysNative\wpr.config.xml
[2015/07/10 08:00:07 | 000,167,640 | ---- | C] () -- C:\WINDOWS\SysNative\chs_singlechar_pinyin.dat
[2015/07/10 08:00:07 | 000,106,496 | ---- | C] () -- C:\WINDOWS\SysNative\InputLocaleManager.dll
[2015/07/10 08:00:07 | 000,072,192 | ---- | C] () -- C:\WINDOWS\SysNative\EditBufferTestHook.dll
[2015/07/10 08:00:07 | 000,063,488 | ---- | C] () -- C:\WINDOWS\SysNative\WpKbdLayout.dll
[2015/07/10 08:00:07 | 000,026,112 | ---- | C] () -- C:\WINDOWS\SysNative\WordBreakers.dll
[2015/07/10 08:00:05 | 000,328,048 | ---- | C] () -- C:\WINDOWS\SysNative\LargeRoom.bin
[2015/07/10 08:00:05 | 000,246,048 | ---- | C] () -- C:\WINDOWS\SysNative\MediumRoom.bin
[2015/07/10 08:00:05 | 000,164,048 | ---- | C] () -- C:\WINDOWS\SysNative\SmallRoom.bin
[2015/07/10 08:00:05 | 000,131,248 | ---- | C] () -- C:\WINDOWS\SysNative\OutdoorAudioEnvironment.bin
[2015/07/10 08:00:05 | 000,002,219 | R-S- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MiracastView.lnk
[2015/07/10 08:00:04 | 007,561,248 | ---- | C] () -- C:\WINDOWS\SysNative\DefaultHrtfs.bin
[2015/07/10 08:00:04 | 003,440,660 | ---- | C] () -- C:\WINDOWS\SysNative\drivers\gm.dls
[2015/07/10 08:00:04 | 000,322,048 | ---- | C] () -- C:\WINDOWS\SysNative\HrtfApo.dll
[2015/07/10 08:00:03 | 000,000,263 | ---- | C] () -- C:\WINDOWS\SysNative\odbcconf.rsp
[2015/07/10 08:00:01 | 000,354,816 | ---- | C] () -- C:\WINDOWS\SysNative\EditionUpgradeHelper.dll
[2015/07/10 08:00:01 | 000,142,904 | ---- | C] () -- C:\WINDOWS\SysNative\slmgr.vbs
[2015/07/10 08:00:00 | 000,028,160 | ---- | C] () -- C:\WINDOWS\SysNative\efsext.dll
[2015/07/10 07:59:59 | 000,124,118 | ---- | C] () -- C:\WINDOWS\SysNative\comexp.msc
[2015/07/10 07:59:59 | 000,092,208 | ---- | C] () -- C:\WINDOWS\SysNative\DiskSnapshot.conf
[2015/07/10 07:59:58 | 000,145,640 | ---- | C] () -- C:\WINDOWS\SysNative\devmgmt.msc
[2015/07/10 07:59:58 | 000,002,269 | ---- | C] () -- C:\WINDOWS\SysNative\WimBootCompress.ini
[2015/07/10 07:59:58 | 000,000,843 | ---- | C] () -- C:\WINDOWS\SysNative\onlinesetup.cmd
[2015/07/10 07:59:58 | 000,000,714 | ---- | C] () -- C:\WINDOWS\SysNative\RestartManager.mof
[2015/07/10 07:59:58 | 000,000,176 | ---- | C] () -- C:\WINDOWS\SysNative\RestartManagerUninstall.mof
[2015/07/10 07:59:57 | 000,144,862 | ---- | C] () -- C:\WINDOWS\SysNative\tpm.msc
[2015/07/10 07:59:56 | 000,145,519 | ---- | C] () -- C:\WINDOWS\SysNative\perfmon.msc
[2015/07/10 07:59:56 | 000,000,614 | ---- | C] () -- C:\WINDOWS\SysNative\WdsUnattendTemplate.xml
[2015/07/10 07:59:55 | 003,170,304 | ---- | C] () -- C:\WINDOWS\SysNative\boot.sdi
[2015/07/10 07:59:55 | 000,144,909 | ---- | C] () -- C:\WINDOWS\SysNative\fsmgmt.msc
[2015/07/10 07:59:55 | 000,092,746 | ---- | C] () -- C:\WINDOWS\SysNative\services.msc
[2015/07/10 07:59:55 | 000,055,803 | ---- | C] () -- C:\WINDOWS\SysNative\srms.dat
[2015/07/10 07:59:55 | 000,047,679 | ---- | C] () -- C:\WINDOWS\SysNative\diskmgmt.msc
[2015/07/10 07:59:55 | 000,004,148 | ---- | C] () -- C:\WINDOWS\SysNative\psmodulediscoveryprovider.mof
[2015/07/10 07:59:54 | 000,204,105 | ---- | C] () -- C:\WINDOWS\SysNative\winrm.vbs
[2015/07/10 07:59:54 | 000,145,127 | ---- | C] () -- C:\WINDOWS\SysNative\eventvwr.msc
[2015/07/10 07:59:54 | 000,145,059 | ---- | C] () -- C:\WINDOWS\SysNative\taskschd.msc
[2015/07/10 07:59:54 | 000,063,081 | ---- | C] () -- C:\WINDOWS\SysNative\certlm.msc
[2015/07/10 07:59:54 | 000,063,070 | ---- | C] () -- C:\WINDOWS\SysNative\certmgr.msc
[2015/07/10 07:59:54 | 000,041,587 | ---- | C] () -- C:\WINDOWS\SysNative\azman.msc
[2015/07/10 07:59:54 | 000,017,935 | ---- | C] () -- C:\WINDOWS\SysNative\EventViewer_EventDetails.xsl
[2015/07/10 07:59:54 | 000,008,192 | ---- | C] () -- C:\WINDOWS\SysNative\settings.dat
[2015/07/10 07:59:54 | 000,004,675 | ---- | C] () -- C:\WINDOWS\SysNative\wsmanconfig_schema.xml
[2015/07/10 07:59:54 | 000,002,426 | ---- | C] () -- C:\WINDOWS\SysNative\WsmTxt.xsl
[2015/07/10 07:59:54 | 000,002,125 | ---- | C] () -- C:\WINDOWS\SysNative\AppxProvisioning.xml
[2015/07/10 07:59:54 | 000,001,559 | ---- | C] () -- C:\WINDOWS\SysNative\WsmPty.xsl
[2015/07/10 07:59:54 | 000,000,035 | ---- | C] () -- C:\WINDOWS\SysNative\winrm.cmd
[2015/07/10 07:59:53 | 000,144,673 | ---- | C] () -- C:\WINDOWS\SysNative\WmiMgmt.msc
[2015/07/10 07:59:53 | 000,113,256 | ---- | C] () -- C:\WINDOWS\SysNative\compmgmt.msc
[2015/07/10 07:59:53 | 000,004,014 | ---- | C] () -- C:\WINDOWS\SysNative\xwizard.dtd
[2015/07/10 07:59:52 | 000,411,133 | ---- | C] () -- C:\WINDOWS\SysNative\ApnDatabase.xml
[2015/07/10 07:59:51 | 000,115,091 | ---- | C] () -- C:\WINDOWS\SysNative\WF.msc
[2015/07/10 07:59:51 | 000,094,208 | ---- | C] () -- C:\WINDOWS\SysNative\BthpanContextHandler.dll
[2015/07/10 07:59:51 | 000,043,131 | ---- | C] () -- C:\WINDOWS\mib.bin
[2015/07/10 07:59:51 | 000,000,565 | ---- | C] () -- C:\WINDOWS\SysNative\NdfEventView.xml
[2015/07/10 07:59:50 | 000,075,634 | ---- | C] () -- C:\WINDOWS\SysNative\gatherNetworkInfo.vbs
[2015/07/10 07:59:50 | 000,021,656 | ---- | C] () -- C:\WINDOWS\SysNative\NetTrace.PLA.Diagnostics.xml
[2015/07/10 07:59:50 | 000,015,106 | ---- | C] () -- C:\WINDOWS\SysNative\@WiFiNotificationIcon.png
[2015/07/10 07:59:50 | 000,001,820 | ---- | C] () -- C:\WINDOWS\SysNative\rasctrnm.h
[2015/07/10 07:59:48 | 000,044,032 | ---- | C] () -- C:\WINDOWS\SysNative\drivers\Udecx.sys
[2015/07/10 07:40:12 | 000,833,798 | ---- | C] () -- C:\WINDOWS\SysNative\amdicdxx.dat
[2015/07/06 19:33:20 | 000,100,816 | ---- | C] () -- C:\WINDOWS\SysNative\ativce02.dat
[2015/06/13 02:13:08 | 000,002,187 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Earth.lnk
[2015/02/28 23:54:38 | 000,053,248 | ---- | C] () -- C:\WINDOWS\SysWow64\CommonDL.dll
[2015/02/28 23:54:38 | 000,002,412 | ---- | C] () -- C:\WINDOWS\SysWow64\lgAxconfig.ini
[2015/02/05 19:48:40 | 000,000,132 | ---- | C] () -- C:\Users\Raphael\AppData\Roaming\Adobe PNG Format CS6 Prefs
[2015/01/18 17:59:14 | 000,720,082 | ---- | C] () -- C:\Users\Raphael\AppData\Roaming\unins000.exe
[2015/01/18 17:59:14 | 000,016,036 | ---- | C] () -- C:\Users\Raphael\AppData\Roaming\unins000.dat
[2015/01/18 10:57:18 | 000,989,184 | ---- | C] () -- C:\Users\Raphael\VisualBcd_0.9.3.1.msi
[2013/09/11 22:32:06 | 000,038,912 | ---- | C] () -- C:\WINDOWS\SysWow64\kdbsdk32.dll

[color=#E56717]========== ZeroAccess Check ==========[/color]


[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64

[HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]

[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] /64

[HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64
"" = C:\Windows\SysNative\windows.storage.dll -- [2015/07/29 10:51:06 | 006,488,312 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
"" = %SystemRoot%\system32\windows.storage.dll -- [2015/07/29 10:51:06 | 005,118,024 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] /64
"" = C:\Windows\SysNative\wbem\fastprox.dll -- [2015/07/10 07:59:53 | 000,995,328 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
"" = %systemroot%\system32\wbem\fastprox.dll -- [2015/07/10 08:00:23 | 000,754,688 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] /64
"" = C:\Windows\SysNative\wbem\wbemess.dll -- [2015/07/10 07:59:55 | 000,516,096 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Both

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]

[color=#E56717]========== LOP Check ==========[/color]

[2015/04/03 12:20:49 | 000,000,000 | ---D | M] -- C:\Users\Raphael\AppData\Roaming\.mono
[2015/08/01 15:24:55 | 000,000,000 | ---D | M] -- C:\Users\Raphael\AppData\Roaming\AMD
[2015/07/28 21:02:45 | 000,000,000 | ---D | M] -- C:\Users\Raphael\AppData\Roaming\Atari
[2015/09/05 17:41:23 | 000,000,000 | ---D | M] -- C:\Users\Raphael\AppData\Roaming\AVG2015
[2015/04/03 12:25:53 | 000,000,000 | ---D | M] -- C:\Users\Raphael\AppData\Roaming\Colossal Order
[2015/02/03 10:44:25 | 000,000,000 | ---D | M] -- C:\Users\Raphael\AppData\Roaming\Foxit Software
[2015/06/14 17:09:52 | 000,000,000 | ---D | M] -- C:\Users\Raphael\AppData\Roaming\KingRoot
[2015/08/01 16:58:23 | 000,000,000 | ---D | M] -- C:\Users\Raphael\AppData\Roaming\Leadertech
[2015/08/27 20:30:14 | 000,000,000 | ---D | M] -- C:\Users\Raphael\AppData\Roaming\MPC-HC
[2015/06/28 10:53:57 | 000,000,000 | ---D | M] -- C:\Users\Raphael\AppData\Roaming\Origin
[2015/08/18 21:21:22 | 000,000,000 | ---D | M] -- C:\Users\Raphael\AppData\Roaming\PACE Anti-Piracy
[2015/08/17 20:38:38 | 000,000,000 | ---D | M] -- C:\Users\Raphael\AppData\Roaming\PhotoScape
[2015/06/03 16:17:07 | 000,000,000 | ---D | M] -- C:\Users\Raphael\AppData\Roaming\StageManager.BD092818F67280F4B42B04877600987F0111B594.1
[2015/04/03 12:20:39 | 000,000,000 | ---D | M] -- C:\Users\Raphael\AppData\Roaming\Steam
[2015/06/14 17:14:30 | 000,000,000 | ---D | M] -- C:\Users\Raphael\AppData\Roaming\Tencent
[2015/09/05 17:40:28 | 000,000,000 | ---D | M] -- C:\Users\Raphael\AppData\Roaming\TuneUp Software
[2015/08/30 23:54:35 | 000,000,000 | ---D | M] -- C:\Users\Raphael\AppData\Roaming\uTorrent

[color=#E56717]========== Purity Check ==========[/color]



[color=#E56717]========== Custom Scans ==========[/color]

[color=#A23BEC]< %SYSTEMDRIVE%\*.* >[/color]
[2015/01/18 17:59:02 | 000,001,024 | ---- | M] () -- C:\.rnd
[2012/07/26 00:44:30 | 000,398,156 | RHS- | M] () -- C:\bootmgr
[2015/07/10 08:00:31 | 000,000,001 | -HS- | M] () -- C:\BOOTNXT
[2015/09/05 17:24:46 | 3426,287,616 | -HS- | M] () -- C:\hiberfil.sys
[2005/09/22 23:39:38 | 000,894,976 | ---- | M] (Microsoft Corporation) -- C:\msdia80.dll
[2015/09/05 17:24:48 | 1409,286,144 | -HS- | M] () -- C:\pagefile.sys
[2015/09/05 17:24:51 | 268,435,456 | -HS- | M] () -- C:\swapfile.sys

[color=#A23BEC]< %systemdrive%\drivers\*.* /s >[/color]

[color=#A23BEC]< %systemdrive%\drivers\*.exe >[/color]

[color=#A23BEC]< %systemroot%\system32\drivers\*.* /90 >[/color]
[2015/07/10 08:00:28 | 003,440,660 | ---- | M] () -- C:\WINDOWS\system32\drivers\gm.dls
[2015/07/10 08:00:28 | 000,000,646 | ---- | M] () -- C:\WINDOWS\system32\drivers\gmreadme.txt

[color=#A23BEC]< %systemroot%\Fonts\*.dll >[/color]

[color=#A23BEC]< %systemroot%\Fonts\*.ini >[/color]
[2015/07/10 08:02:40 | 000,000,065 | ---- | M] () -- C:\WINDOWS\Fonts\desktop.ini

[color=#A23BEC]< %systemroot%\Fonts\*.ini2 >[/color]

[color=#A23BEC]< %systemroot%\Fonts\*.com >[/color]
[2015/07/29 10:47:16 | 000,026,040 | ---- | M] () -- C:\WINDOWS\Fonts\GlobalMonospace.CompositeFont
[2015/07/29 10:47:16 | 000,026,489 | ---- | M] () -- C:\WINDOWS\Fonts\GlobalSansSerif.CompositeFont
[2015/07/29 10:47:16 | 000,029,779 | ---- | M] () -- C:\WINDOWS\Fonts\GlobalSerif.CompositeFont
[2015/07/29 10:47:16 | 000,043,318 | ---- | M] () -- C:\WINDOWS\Fonts\GlobalUserInterface.CompositeFont

[color=#A23BEC]< %systemroot%\*.scr >[/color]
[2014/03/31 20:34:22 | 000,322,248 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\WLXPGSS.SCR

[color=#A23BEC]< %PROGRAMFILES%\*.* >[/color]
[2015/07/10 08:02:40 | 000,000,174 | -HS- | M] () -- C:\Program Files (x86)\desktop.ini

[color=#A23BEC]< %LOCALAPPDATA%\*.exe >[/color]

[color=#A23BEC]< %LOCALAPPDATA%\*.txt >[/color]

[color=#A23BEC]< %LOCALAPPDATA%\*.ini >[/color]

[color=#A23BEC]< %LOCALAPPDATA%\*.dll >[/color]

[color=#A23BEC]< %LOCALAPPDATA%\*.dat >[/color]

[color=#A23BEC]< %USERPROFILE%\*.exe >[/color]

[color=#A23BEC]< %USERPROFILE%\*.txt >[/color]

[color=#A23BEC]< %USERPROFILE%\*.ini >[/color]
[2015/07/29 11:25:03 | 000,000,020 | -HS- | M] () -- C:\Users\Raphael\ntuser.ini

[color=#A23BEC]< %USERPROFILE%\*.dll >[/color]

[color=#A23BEC]< %USERPROFILE%\*.dat /30 >[/color]
[2015/09/05 17:23:53 | 005,505,024 | -HS- | M] () -- C:\Users\Raphael\NTUSER.DAT

[color=#A23BEC]< %systemroot%\system32\tasks\*.* /s >[/color]

[color=#A23BEC]< %windir%\tasks\*.* /s >[/color]
[2015/09/05 17:26:06 | 000,001,092 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
[2015/09/05 19:04:03 | 000,001,096 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job
[2015/09/05 17:25:23 | 000,000,006 | -H-- | M] () -- C:\WINDOWS\tasks\SA.DAT

[color=#A23BEC]< HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections >[/color]
"DefaultConnectionSettings" = 46 00 00 00 05 00 00 00 09 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  [binary data]
"SavedLegacySettings" = 46 00 00 00 5D 18 00 00 09 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  [binary data]

[color=#A23BEC]< HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Associations >[/color]

[color=#A23BEC]< HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Attachments >[/color]

[color=#E56717]========== Alternate Data Streams ==========[/color]

@Alternate Data Stream - 220 bytes -> C:\Users\Raphael\OneDrive:ms-properties
@Alternate Data Stream - 1087 bytes -> C:\Users\Raphael\AppData\Local\Temp:3ZSLEcfijPtPAUVznwoauaTRGF

< End of report >