Resultado do análise da Farbar Recovery Scan Tool (FRST) (x64) Versão: 21-05-2023 Executado por Leão de Judá (administrador) em LION (Dell Inc. Inspiron 5402) (22-05-2023 10:26:36) Executando a partir de C:\Users\Leão de Judá\Desktop\FRST64.exe Perfis Carregados: Leão de Judá Plataforma: Microsoft Windows 11 Home Single Language Versão 22H2 22621.1702 (X64) Idioma: Português (Brasil) Navegador padrão: Chrome Modo da Inicialização: Normal ==================== Processos (Whitelisted) ================= (Se uma entrada for incluída na fixlist, o processo será fechado. O arquivo não será movido.) (C:\Program Files (x86)\Kaspersky Lab\Kaspersky VPN 5.13\ksde.exe ->) (Kaspersky Lab JSC -> AO Kaspersky Lab) C:\Program Files (x86)\Kaspersky Lab\Kaspersky VPN 5.13\ksdeui.exe (C:\Program Files\WindowsApps\MicrosoftWindows.Client.WebExperience_423.11600.0.0_x64__cw5n1h2txyewy\Dashboard\Widgets.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\EdgeWebView\Application\113.0.1774.50\msedgewebview2.exe <6> (DriverStore\FileRepository\cui_dch.inf_amd64_b18a4e283f67c0b5\igfxCUIServiceN.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\cui_dch.inf_amd64_b18a4e283f67c0b5\igfxEMN.exe (DriverStore\FileRepository\dptf_cpu.inf_amd64_1da48d5885266bb7\esif_uf.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\dptf_cpu.inf_amd64_1da48d5885266bb7\dptf_helper.exe (services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\cui_dch.inf_amd64_b18a4e283f67c0b5\igfxCUIServiceN.exe (services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\dptf_cpu.inf_amd64_1da48d5885266bb7\esif_uf.exe (services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\igcc_dch.inf_amd64_5fe2e31c542e0065\OneApp.IGCC.WinService.exe (services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_4a6499af445e8e69\IntelCpHDCPSvc.exe (services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\mewmiprov.inf_amd64_d4564390a9b1e980\WMIRegistrationService.exe (services.exe ->) (Intel Corporation -> Intel) C:\Windows\System32\DriverStore\FileRepository\intcoed.inf_amd64_0c5a889d0c28d3cc\AS\IAS\IntelAudioService.exe (services.exe ->) (Intel(R) Embedded Subsystems and IP Blocks Group -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\dal.inf_amd64_b5484efd38adbe8d\jhi_service.exe (services.exe ->) (Intel(R) Wireless Connectivity Solutions -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\piecomponent.inf_amd64_6ea7dc2752605c07\Intel_PIE_Service.exe (services.exe ->) (Kaspersky Lab JSC -> AO Kaspersky Lab) C:\Program Files (x86)\Kaspersky Lab\Kaspersky VPN 5.13\ksde.exe (services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2304.8-0\MsMpEng.exe (services.exe ->) (Nvidia Corporation -> NVIDIA Corporation) C:\Windows\System32\DriverStore\FileRepository\nvdm.inf_amd64_008995e2454cd6de\Display.NvContainer\NVDisplay.Container.exe <2> (services.exe ->) (Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Windows\System32\DriverStore\FileRepository\realtekservice.inf_amd64_5d66730f577c60c7\RtkAudUService64.exe <2> (services.exe ->) (Shenzhen Goodix Technology Co., Ltd. -> Goodix) C:\Windows\System32\drivers\SessionService.exe (services.exe ->) (Waves Inc -> Waves Audio Ltd.) C:\Windows\System32\DriverStore\FileRepository\wavesapo9de.inf_amd64_e99a314c3593d5e7\WavesSysSvc64.exe (svchost.exe ->) (Microsoft Windows -> ) C:\Program Files\WindowsApps\MicrosoftWindows.Client.WebExperience_423.11600.0.0_x64__cw5n1h2txyewy\Dashboard\WidgetService.exe (svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\ImmersiveControlPanel\SystemSettings.exe (svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe <2> (svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe (svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\wlanext.exe (svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\SysWOW64\wbem\WmiPrvSE.exe ==================== Registro (Whitelisted) =================== (Se uma entrada for incluída na fixlist, o ítem no Registro será restaurado para o padrão ou removido. O arquivo não será movido.) HKLM\...\Run: [RtkAudUService] => C:\WINDOWS\System32\DriverStore\FileRepository\realtekservice.inf_amd64_5d66730f577c60c7\RtkAudUService64.exe [3495880 2022-09-04] (Realtek Semiconductor Corp. -> Realtek Semiconductor) HKLM\...\Run: [WavesSvc] => C:\WINDOWS\System32\DriverStore\FileRepository\wavesapo9de.inf_amd64_e99a314c3593d5e7\WavesSvc64.exe [4175056 2021-06-19] (Waves Inc -> Waves Audio Ltd.) HKLM\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate: Restrição <==== ATENÇÃO HKU\S-1-5-21-3369751713-1115460351-828220276-1001\...\Run: [MicrosoftEdgeAutoLaunch_3376729631545DF97C777909444A5AC3] => "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start /prefetch:5 [4152216 2023-05-18] (Microsoft Corporation -> Microsoft Corporation) HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files\Google\Chrome\Application\113.0.5672.127\Installer\chrmstp.exe [2023-05-19] (Google LLC -> Google LLC) HKLM\Software\...\Authentication\Credential Providers: [{C885AA15-1764-4293-B82A-0586ADD46B35}] -> ==================== Tarefas Agendadas (Whitelisted) ================= (Se uma entrada for incluída na fixlist, será removida do Registro. O arquivo não será movido, a menos que seja colocado separadamente.) Task: {23CF2FAF-54E6-470D-96F8-2CE6F389FB90} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\Reboot_Battery => C:\WINDOWS\system32\MusNotification.exe/RunOnBattery RebootDialog Task: {331D09F6-49B9-447F-B3CB-BD32C273B1ED} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2304.8-0\MpCmdRun.exe [1650024 2023-05-19] (Microsoft Windows Publisher -> Microsoft Corporation) Task: {414C49BE-FA76-4E2C-8770-F71B6502210C} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2304.8-0\MpCmdRun.exe [1650024 2023-05-19] (Microsoft Windows Publisher -> Microsoft Corporation) Task: {69A53C4F-1393-44E0-A186-D3B8B2E9C49D} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2304.8-0\MpCmdRun.exe [1650024 2023-05-19] (Microsoft Windows Publisher -> Microsoft Corporation) Task: {AA6749DD-943D-4988-9151-E0EA9CBC0139} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\Reboot_AC => C:\WINDOWS\system32\MusNotification.exe/RunOnAC RebootDialog Task: {C8692B9E-7F1C-4301-A888-811E91AECC47} - System32\Tasks\Microsoft\Windows\Mobile Broadband Accounts\MNO Metadata Parser => C:\WINDOWS\System32\MbaeParserTask.exe (Nenhum Arquivo) Task: {E0F10DCF-44AD-40E8-9370-FB5DA59F93FB} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\USO_UxBroker => C:\WINDOWS\system32\MusNotification.exe (Nenhum Arquivo) Task: {E5B3682C-44C9-4B5A-9F99-34C345148F2D} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2304.8-0\MpCmdRun.exe [1650024 2023-05-19] (Microsoft Windows Publisher -> Microsoft Corporation) Task: {E9D4654C-C3E7-40C1-AE7A-BC2DCC6B1E8D} - System32\Tasks\GoogleUpdateTaskMachineUA{39EB0AE1-A1D8-4812-B95B-69185408EA78} => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [162072 2023-05-19] (Google LLC -> Google LLC) Task: {ECF5852E-EA4F-4D67-8E0A-70FA76D8078C} - System32\Tasks\GoogleUpdateTaskMachineCore{9E03E65C-F2BA-4624-AF7C-FD71C759EC18} => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [162072 2023-05-19] (Google LLC -> Google LLC) (Se uma entrada for incluída na fixlist, o arquivo da tarefa (.job) será movido. O arquivo que está sendo executado pela tarefa não será movido.) ==================== Internet (Whitelisted) ==================== (Se um ítem for incluído na fixlist, sendo um ítem do Registro, será removido ou restaurado para o padrão.) Tcpip\Parameters: [DhcpNameServer] 179.233.128.22 179.233.128.17 Tcpip\..\Interfaces\{2aec0f97-c676-44d3-8574-417891f25e1b}: [DhcpNameServer] 179.233.128.22 179.233.128.17 Edge: ======= Edge Profile: C:\Users\Leão de Judá\AppData\Local\Microsoft\Edge\User Data\Default [2023-05-19] Edge Extension: (Edge relevant text changes) - C:\Users\Leão de Judá\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\jmjflgjpcpepeafmmgdpfkogkghcpiha [2023-05-19] Chrome: ======= CHR Profile: C:\Users\Leão de Judá\AppData\Local\Google\Chrome\User Data\Default [2023-05-22] CHR Session Restore: Default -> está habilitado. CHR Extension: (Kaspersky Protection) - C:\Users\Leão de Judá\AppData\Local\Google\Chrome\User Data\Default\Extensions\ahkjpbeeocnddjkakilopmfdlnjdpcdm [2023-05-19] CHR Extension: (Documentos Google off-line) - C:\Users\Leão de Judá\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2023-05-19] CHR Extension: (Pagamentos da Chrome Web Store) - C:\Users\Leão de Judá\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2023-05-19] ==================== Serviços (Whitelisted) =================== (Se uma entrada for incluída na fixlist, será removida do Registro. O arquivo não será movido, a menos que seja colocado separadamente.) R2 AVP21.13; C:\Program Files (x86)\Kaspersky Lab\Kaspersky 21.13\avp.exe [32008 2023-04-15] (Kaspersky Lab JSC -> AO Kaspersky Lab) R2 IntelAudioService; C:\WINDOWS\System32\DriverStore\FileRepository\intcoed.inf_amd64_0c5a889d0c28d3cc\\AS\\IAS\\IntelAudioService.exe [532000 ] (Intel Corporation -> Intel) S3 klvssbridge64_21.13; C:\Program Files (x86)\Kaspersky Lab\Kaspersky 21.13\x64\vssbridge64.exe [501008 2023-04-15] (Kaspersky Lab JSC -> AO Kaspersky Lab) R2 KSDE5.13; C:\Program Files (x86)\Kaspersky Lab\Kaspersky VPN 5.13\ksde.exe [32008 2023-04-15] (Kaspersky Lab JSC -> AO Kaspersky Lab) S3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2304.8-0\NisSrv.exe [3216064 2023-05-19] (Microsoft Windows Publisher -> Microsoft Corporation) R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2304.8-0\MsMpEng.exe [133544 2023-05-19] (Microsoft Windows Publisher -> Microsoft Corporation) R2 NVDisplay.ContainerLocalSystem; C:\WINDOWS\System32\DriverStore\FileRepository\nvdm.inf_amd64_008995e2454cd6de\Display.NvContainer\NVDisplay.Container.exe -s NVDisplay.ContainerLocalSystem -f %ProgramData%\NVIDIA\NVDisplay.ContainerLocalSystem.log -l 3 -d C:\WINDOWS\System32\DriverStore\FileRepository\nvdm.inf_amd64_008995e2454cd6de\Display.NvContainer\plugins\LocalSystem -r -p 30000 -cfg NVDisplay.ContainerLocalSystem\LocalSystem ===================== Drivers (Whitelisted) =================== (Se uma entrada for incluída na fixlist, será removida do Registro. O arquivo não será movido, a menos que seja colocado separadamente.) S3 BTHMODEM; C:\WINDOWS\System32\drivers\bthmodem.sys [106496 2022-05-07] (Microsoft Corporation) [Arquivo não assinado] R0 cm_km; C:\WINDOWS\System32\DRIVERS\cm_km.sys [240264 2023-04-15] (Microsoft Windows Hardware Compatibility Publisher -> AO Kaspersky Lab) S3 dcdbas; C:\WINDOWS\System32\drivers\dcdbas64.sys [48464 2023-04-11] (Dell Inc. -> Dell Inc.) R3 iaLPSS2_GPIO2_TGL; C:\WINDOWS\System32\DriverStore\FileRepository\ialpss2_gpio2_tgl.inf_amd64_c330c09d72f3e083\iaLPSS2_GPIO2_TGL.sys [128664 2021-01-27] (Intel Corporation -> Intel Corporation) R3 iaLPSS2_I2C_TGL; C:\WINDOWS\System32\DriverStore\FileRepository\ialpss2_i2c_tgl.inf_amd64_312c3014729186bd\iaLPSS2_I2C_TGL.sys [201376 2021-01-27] (Intel Corporation -> Intel Corporation) R3 IntcUSB; C:\WINDOWS\System32\DriverStore\FileRepository\intcusb.inf_amd64_566db4e95fcf6757\IntcUSB.sys [891944 2022-06-13] (Intel Corporation -> Intel(R) Corporation) R1 klbackupdisk.Kaspersky4Win-21-13; C:\WINDOWS\system32\DRIVERS\Kaspersky4Win-21-13\klbackupdisk.sys [112936 2023-04-15] (Microsoft Windows Hardware Compatibility Publisher -> AO Kaspersky Lab) R1 klbackupflt.Kaspersky4Win-21-13; C:\WINDOWS\System32\DRIVERS\Kaspersky4Win-21-13\klbackupflt.sys [234216 2023-04-15] (Microsoft Windows Hardware Compatibility Publisher -> AO Kaspersky Lab) R1 kldisk.Kaspersky4Win-21-13; C:\WINDOWS\system32\DRIVERS\Kaspersky4Win-21-13\kldisk.sys [125736 2023-04-15] (Microsoft Windows Hardware Compatibility Publisher -> AO Kaspersky Lab) S0 klelam; C:\WINDOWS\System32\DRIVERS\klelam.sys [53576 2023-04-15] (Microsoft Windows Early Launch Anti-malware Publisher -> AO Kaspersky Lab) R1 klflt.Kaspersky4Win-21-13; C:\WINDOWS\system32\DRIVERS\Kaspersky4Win-21-13\klflt.sys [548072 2023-04-15] (Microsoft Windows Hardware Compatibility Publisher -> AO Kaspersky Lab) R1 klgse.Kaspersky4Win-21-13; C:\WINDOWS\System32\DRIVERS\Kaspersky4Win-21-13\klgse.sys [713264 2023-05-19] (Microsoft Windows Hardware Compatibility Publisher -> AO Kaspersky Lab) R1 klhk.Kaspersky4Win-21-13; C:\WINDOWS\system32\DRIVERS\Kaspersky4Win-21-13\klhk.sys [1826328 2023-05-19] (Microsoft Windows Hardware Compatibility Publisher -> AO Kaspersky Lab) R3 klids.Kaspersky4Win-21-13; C:\ProgramData\Kaspersky Lab\AVP21.13\Bases\klids.sys [235720 2023-05-19] (Microsoft Windows Hardware Compatibility Publisher -> AO Kaspersky Lab) R1 KLIF.Kaspersky4Win-21-13; C:\WINDOWS\System32\DRIVERS\Kaspersky4Win-21-13\klif.sys [1163544 2023-04-15] (Microsoft Windows Hardware Compatibility Publisher -> AO Kaspersky Lab) R1 klim6; C:\WINDOWS\system32\DRIVERS\klim6.sys [98552 2023-04-15] (Microsoft Windows Hardware Compatibility Publisher -> AO Kaspersky Lab) R1 klkbdflt.Kaspersky4Win-21-13; C:\WINDOWS\system32\DRIVERS\Kaspersky4Win-21-13\klkbdflt.sys [115960 2023-04-15] (Microsoft Windows Hardware Compatibility Publisher -> AO Kaspersky Lab) R3 klmouflt.Kaspersky4Win-21-13; C:\WINDOWS\system32\DRIVERS\Kaspersky4Win-21-13\klmouflt.sys [113448 2023-04-15] (Microsoft Windows Hardware Compatibility Publisher -> AO Kaspersky Lab) R1 klpd.Kaspersky4Win-21-13; C:\WINDOWS\System32\DRIVERS\Kaspersky4Win-21-13\klpd.sys [80672 2023-04-15] (Microsoft Windows Hardware Compatibility Publisher -> AO Kaspersky Lab) R1 klpnpflt.Kaspersky4Win-21-13; C:\WINDOWS\system32\DRIVERS\Kaspersky4Win-21-13\klpnpflt.sys [98040 2023-04-15] (Microsoft Windows Hardware Compatibility Publisher -> AO Kaspersky Lab) R3 kltun; C:\WINDOWS\system32\DRIVERS\kltun.sys [86776 2023-04-15] (Microsoft Windows Hardware Compatibility Publisher -> AO Kaspersky Lab) R0 klupd_Kaspersky4Win-21-13_arkmon; C:\WINDOWS\System32\Drivers\klupd_Kaspersky4Win-21-13_arkmon.sys [353896 2023-05-19] (Microsoft Windows Hardware Compatibility Publisher -> AO Kaspersky Lab) R3 klupd_Kaspersky4Win-21-13_klark; C:\WINDOWS\System32\Drivers\klupd_Kaspersky4Win-21-13_klark.sys [350352 2023-05-19] (Microsoft Windows Hardware Compatibility Publisher -> AO Kaspersky Lab) U3 klupd_Kaspersky4Win-21-13_klark_1041663D; C:\ProgramData\Kaspersky Lab\AVP21.13\Temp\1041663D66D9E8146A94DECE266F7EE3\klupd_Kaspersky4Win-21-13_klark.sys [350848 2023-05-22] (Microsoft Windows Hardware Compatibility Publisher -> AO Kaspersky Lab) R0 klupd_Kaspersky4Win-21-13_klbg; C:\WINDOWS\System32\Drivers\klupd_Kaspersky4Win-21-13_klbg.sys [179864 2023-05-22] (Microsoft Windows Hardware Compatibility Publisher -> AO Kaspersky Lab) R3 klupd_Kaspersky4Win-21-13_mark; C:\WINDOWS\System32\Drivers\klupd_Kaspersky4Win-21-13_mark.sys [259440 2023-05-19] (Microsoft Windows Hardware Compatibility Publisher -> AO Kaspersky Lab) R1 klwfp.Kaspersky4Win-21-13; C:\WINDOWS\system32\DRIVERS\Kaspersky4Win-21-13\klwfp.sys [179960 2023-04-15] (Microsoft Windows Hardware Compatibility Publisher -> AO Kaspersky Lab) R1 klwtp.Kaspersky4Win-21-13; C:\WINDOWS\system32\DRIVERS\Kaspersky4Win-21-13\klwtp.sys [415480 2023-04-15] (Microsoft Windows Hardware Compatibility Publisher -> AO Kaspersky Lab) R1 kneps.Kaspersky4Win-21-13; C:\WINDOWS\system32\DRIVERS\Kaspersky4Win-21-13\kneps.sys [340264 2023-04-15] (Microsoft Windows Hardware Compatibility Publisher -> AO Kaspersky Lab) S0 WdBoot; C:\WINDOWS\System32\drivers\wd\WdBoot.sys [49616 2023-05-19] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation) R0 WdFilter; C:\WINDOWS\System32\drivers\wd\WdFilter.sys [498944 2023-05-19] (Microsoft Windows -> Microsoft Corporation) S3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [99608 2023-05-19] (Microsoft Windows -> Microsoft Corporation) R3 WiManH; C:\WINDOWS\System32\DriverStore\FileRepository\wiman.inf_amd64_f54d0a27ac206b8c\WiManH\WiManH.sys [175672 2021-07-28] (Intel Corporation -> Intel Corporation) S1 WinSetupMon; system32\DRIVERS\WinSetupMon.sys [X] ==================== NetSvcs (Whitelisted) =================== (Se uma entrada for incluída na fixlist, será removida do Registro. O arquivo não será movido, a menos que seja colocado separadamente.) ==================== Um mês (criados) (Whitelisted) ========= (Se uma entrada for incluída na fixlist, o arquivo/pasta será movido.) 2023-05-22 10:26 - 2023-05-22 10:26 - 000032768 _____ C:\WINDOWS\SysWOW64\DnsStorage-shm 2023-05-22 10:26 - 2023-05-22 10:26 - 000032768 _____ C:\WINDOWS\SysWOW64\AppRulesStorage-shm 2023-05-22 10:26 - 2023-05-22 10:26 - 000024752 _____ C:\WINDOWS\SysWOW64\AppRulesStorage-wal 2023-05-22 10:26 - 2023-05-22 10:26 - 000000000 ____D C:\Users\Leão de Judá\Desktop\FRST-OlderVersion 2023-05-22 10:26 - 2023-05-22 10:26 - 000000000 _____ C:\WINDOWS\SysWOW64\DnsStorage-wal 2023-05-22 09:10 - 2023-05-22 09:10 - 000732744 _____ C:\WINDOWS\system32\prfh0416.dat 2023-05-22 09:10 - 2023-05-22 09:10 - 000146898 _____ C:\WINDOWS\system32\prfc0416.dat 2023-05-19 17:18 - 2023-05-19 17:18 - 000016216 _____ C:\Users\Leão de Judá\Desktop\Addition.txt 2023-05-19 17:17 - 2023-05-22 10:27 - 000017636 _____ C:\Users\Leão de Judá\Desktop\FRST.txt 2023-05-19 14:55 - 2023-05-19 14:55 - 000000000 ___RD C:\Users\Leão de Judá\Documents\Microsoft.SecHealthUI_8wekyb3d8bbwe!SecHealthUI 2023-05-19 14:47 - 2023-05-19 14:47 - 000000000 ____D C:\WINDOWS\system32\Tasks\Agent Activation Runtime 2023-05-19 14:47 - 2023-05-19 14:47 - 000000000 ____D C:\ProgramData\Microsoft OneDrive 2023-05-19 14:46 - 2023-05-22 09:10 - 001682094 _____ C:\WINDOWS\system32\PerfStringBackup.INI 2023-05-19 14:46 - 2023-05-19 14:46 - 000000020 ___SH C:\Users\Leão de Judá\ntuser.ini 2023-05-19 14:45 - 2023-05-22 09:02 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT 2023-05-19 14:45 - 2023-05-19 14:45 - 000003602 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA 2023-05-19 14:45 - 2023-05-19 14:45 - 000003602 _____ C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineUA{39EB0AE1-A1D8-4812-B95B-69185408EA78} 2023-05-19 14:45 - 2023-05-19 14:45 - 000003378 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore 2023-05-19 14:45 - 2023-05-19 14:45 - 000003378 _____ C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineCore{9E03E65C-F2BA-4624-AF7C-FD71C759EC18} 2023-05-19 14:44 - 2023-05-19 14:45 - 000011433 _____ C:\WINDOWS\diagwrn.xml 2023-05-19 14:44 - 2023-05-19 14:45 - 000011433 _____ C:\WINDOWS\diagerr.xml 2023-05-19 14:42 - 2023-05-19 14:42 - 000000000 ____D C:\Users\Leão de Judá\AppData\Roaming\Microsoft\SystemCertificates 2023-05-19 14:42 - 2023-05-19 14:42 - 000000000 ____D C:\Users\Leão de Judá\AppData\Roaming\Microsoft\Network 2023-05-19 14:42 - 2023-05-19 14:42 - 000000000 ____D C:\Users\Leão de Judá\AppData\Roaming\Microsoft\Crypto 2023-05-19 14:42 - 2023-05-19 14:42 - 000000000 ____D C:\Users\Default\AppData\Roaming\Microsoft\Network 2023-05-19 14:40 - 2023-05-19 14:47 - 000000000 ____D C:\Users\Leão de Judá\AppData\Roaming\Microsoft\Windows 2023-05-19 14:40 - 2023-05-19 14:46 - 000000000 ____D C:\Users\Leão de Judá\AppData\Roaming\Microsoft\Spelling 2023-05-19 14:40 - 2023-05-19 14:46 - 000000000 ____D C:\Users\Leão de Judá 2023-05-19 14:40 - 2023-05-19 14:40 - 000000000 _SHDL C:\Users\Leão de Judá\Modelos 2023-05-19 14:40 - 2023-05-19 14:40 - 000000000 _SHDL C:\Users\Leão de Judá\Meus Documentos 2023-05-19 14:40 - 2023-05-19 14:40 - 000000000 _SHDL C:\Users\Leão de Judá\Menu Iniciar 2023-05-19 14:40 - 2023-05-19 14:40 - 000000000 _SHDL C:\Users\Leão de Judá\Documents\Minhas Músicas 2023-05-19 14:40 - 2023-05-19 14:40 - 000000000 _SHDL C:\Users\Leão de Judá\Documents\Minhas Imagens 2023-05-19 14:40 - 2023-05-19 14:40 - 000000000 _SHDL C:\Users\Leão de Judá\Documents\Meus Vídeos 2023-05-19 14:40 - 2023-05-19 14:40 - 000000000 _SHDL C:\Users\Leão de Judá\Dados de Aplicativos 2023-05-19 14:40 - 2023-05-19 14:40 - 000000000 _SHDL C:\Users\Leão de Judá\Configurações Locais 2023-05-19 14:40 - 2023-05-19 14:40 - 000000000 _SHDL C:\Users\Leão de Judá\AppData\Roaming\Microsoft\Windows\Start Menu\Programas 2023-05-19 14:40 - 2023-05-19 14:40 - 000000000 _SHDL C:\Users\Leão de Judá\AppData\Local\Histórico 2023-05-19 14:40 - 2023-05-19 14:40 - 000000000 _SHDL C:\Users\Leão de Judá\AppData\Local\Dados de Aplicativos 2023-05-19 14:40 - 2023-05-19 14:40 - 000000000 _SHDL C:\Users\Leão de Judá\Ambiente de Rede 2023-05-19 14:40 - 2023-05-19 14:40 - 000000000 _SHDL C:\Users\Leão de Judá\Ambiente de Impressão 2023-05-19 14:38 - 2023-05-19 14:53 - 000001623 _____ C:\WINDOWS\system32\config\VSMIDK 2023-05-19 14:38 - 2023-05-19 14:45 - 000000000 ____D C:\Windows.old 2023-05-19 14:38 - 2023-05-19 14:38 - 000294016 _____ C:\WINDOWS\system32\FNTCACHE.DAT 2023-05-19 14:38 - 2023-05-19 14:38 - 000000000 ____D C:\WINDOWS\system32\SleepStudy 2023-05-19 14:38 - 2023-05-19 14:38 - 000000000 ____D C:\WINDOWS\system32\config\BFS 2023-05-19 14:37 - 2023-05-19 14:38 - 000000000 ____D C:\WINDOWS\system32\config\bbimigrate 2023-05-19 14:37 - 2023-05-19 14:37 - 000000000 ____D C:\WINDOWS\ServiceProfiles 2023-05-19 14:36 - 2023-05-19 14:36 - 000008192 _____ C:\WINDOWS\system32\config\userdiff 2023-05-19 13:48 - 2023-05-19 14:46 - 000000000 ___DC C:\WINDOWS\Panther 2023-05-19 13:47 - 2023-05-19 13:48 - 000000036 _____ C:\WINDOWS\progress.ini 2023-05-19 13:44 - 2023-05-19 13:47 - 000000000 ___HD C:\$GetCurrent 2023-05-19 13:44 - 2023-05-19 13:46 - 000000000 ____D C:\Program Files (x86)\WindowsInstallationAssistant 2023-05-19 13:36 - 2023-05-22 10:26 - 000012288 _____ C:\WINDOWS\SysWOW64\AppRulesStorage 2023-05-19 13:36 - 2023-05-19 13:36 - 000012288 _____ C:\WINDOWS\SysWOW64\DnsStorage 2023-05-19 13:35 - 2023-05-19 14:44 - 000001300 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Kaspersky VPN.lnk 2023-05-19 13:35 - 2023-05-19 13:35 - 000002437 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Kaspersky.lnk 2023-05-19 13:35 - 2023-05-19 13:35 - 000000000 ____D C:\Program Files\Common Files\AV 2023-05-19 13:34 - 2023-05-19 13:36 - 000000000 ____D C:\WINDOWS\system32\Drivers\Kaspersky4Win-21-13 2023-05-19 13:34 - 2023-05-19 13:35 - 000000000 ____D C:\ProgramData\Kaspersky Lab 2023-05-19 13:34 - 2023-05-19 13:35 - 000000000 ____D C:\Program Files (x86)\Kaspersky Lab 2023-05-19 13:34 - 2023-05-19 13:34 - 000000000 ____D C:\ProgramData\Package Cache 2023-05-19 13:34 - 2023-05-19 13:34 - 000000000 ____D C:\Program Files (x86)\dotnet 2023-05-19 13:31 - 2023-05-19 13:31 - 000000000 ____D C:\ProgramData\Kaspersky Lab Setup Files 2023-05-19 13:17 - 2023-05-19 13:19 - 000000000 ____D C:\WINDOWS\Microsoft Antimalware 2023-05-19 10:12 - 2023-05-19 14:46 - 000000000 ____D C:\Users\Leão de Judá\AppData\Local\PlaceholderTileLogoFolder 2023-05-19 09:59 - 2023-05-19 10:01 - 000000000 ____D C:\Users\Leão de Judá\AppData\Roaming\AnyDesk 2023-05-19 09:57 - 2023-05-19 09:58 - 004038720 _____ (AnyDesk Software GmbH) C:\Users\Leão de Judá\Downloads\AnyDesk.exe 2023-05-19 09:08 - 2023-05-19 09:08 - 000000000 ___HD C:\$WinREAgent 2023-05-19 09:05 - 2023-05-19 09:05 - 000000000 ____D C:\Users\Leão de Judá\AppData\Local\OneDrive 2023-05-19 08:59 - 2023-05-19 08:59 - 000000000 ____D C:\Users\Leão de Judá\AppData\Local\TeamViewer 2023-05-19 08:54 - 2023-05-19 12:03 - 000000000 ____D C:\Users\Leão de Judá\AppData\Roaming\Microsoft\MMC 2023-05-19 08:47 - 2023-05-19 14:44 - 000002247 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk 2023-05-19 08:47 - 2023-05-19 14:44 - 000002206 _____ C:\Users\Public\Desktop\Google Chrome.lnk 2023-05-19 08:47 - 2023-05-19 08:47 - 000000000 ____D C:\Users\Leão de Judá\AppData\Local\Google 2023-05-19 08:47 - 2023-05-19 08:47 - 000000000 ____D C:\Program Files\Google 2023-05-19 08:43 - 2023-05-22 10:10 - 000000000 ____D C:\Program Files (x86)\Google 2023-05-19 08:34 - 2023-05-19 08:34 - 000000000 ____D C:\Users\Leão de Judá\AppData\Local\DBG 2023-05-19 08:33 - 2023-05-19 08:33 - 000000000 ____D C:\ProgramData\PLUG 2023-05-19 08:30 - 2023-05-19 08:31 - 000000000 ____D C:\WINDOWS\system32\MRT 2023-05-19 08:29 - 2022-06-27 00:17 - 004946512 _____ (Intel Corporation) C:\WINDOWS\system32\Drivers\Netwtw10.sys 2023-05-19 08:29 - 2022-06-27 00:17 - 001626200 _____ (Intel Corporation) C:\WINDOWS\system32\IntelIHVRouter10.dll 2023-05-19 08:27 - 2023-05-19 15:21 - 000000000 ____D C:\Program Files\Microsoft Update Health Tools 2023-05-19 08:27 - 2023-05-19 14:37 - 000000000 ____D C:\WINDOWS\Firmware 2023-05-19 08:27 - 2023-05-19 08:27 - 000001148 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PC Health Check.lnk 2023-05-19 08:27 - 2023-05-19 08:27 - 000000000 ____D C:\Program Files\RUXIM 2023-05-19 08:27 - 2023-05-19 08:27 - 000000000 ____D C:\Program Files\PCHealthCheck 2023-05-19 08:22 - 2023-05-19 08:22 - 000000000 ____D C:\Users\Leão de Judá\AppData\Local\Comms 2023-05-19 08:15 - 2023-05-19 13:43 - 000000000 ___RD C:\Users\Leão de Judá\OneDrive 2023-05-19 08:14 - 2023-05-19 12:52 - 000000000 ____D C:\Users\Leão de Judá\AppData\Local\D3DSCache 2023-05-19 08:14 - 2023-05-19 08:14 - 000001818 _____ C:\Users\Leão de Judá\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MaxxAudio Pro by Waves - Controle de Áudio de Alto-falante e Microfone e Som Nx 3D.lnk 2023-05-19 08:12 - 2023-05-22 09:22 - 000000000 ____D C:\Users\Leão de Judá\AppData\Local\Packages 2023-05-19 08:12 - 2023-05-19 17:28 - 000000000 ____D C:\ProgramData\Packages 2023-05-19 08:12 - 2023-05-19 14:46 - 000000000 __RHD C:\Users\Public\AccountPictures 2023-05-19 08:12 - 2023-05-19 09:16 - 000000000 ____D C:\Users\Leão de Judá\AppData\Local\ConnectedDevicesPlatform 2023-05-19 08:12 - 2023-05-19 08:22 - 000000000 ____D C:\Users\Leão de Judá\AppData\Local\Publishers 2023-05-19 08:12 - 2023-05-19 08:12 - 000000000 ____D C:\Users\Leão de Judá\AppData\Roaming\Adobe 2023-05-19 08:12 - 2023-05-19 08:12 - 000000000 ____D C:\Users\Leão de Judá\AppData\Local\VirtualStore 2023-05-19 04:05 - 2023-05-19 14:38 - 000000000 ____D C:\WINDOWS\SysWOW64\Macromed 2023-05-19 04:05 - 2023-05-19 14:38 - 000000000 ____D C:\WINDOWS\system32\Tasks_Migrated 2023-05-19 04:05 - 2023-05-19 14:38 - 000000000 ____D C:\WINDOWS\system32\MsDtc 2023-05-19 04:05 - 2023-05-19 14:38 - 000000000 ____D C:\WINDOWS\system32\Macromed 2023-05-19 04:05 - 2023-05-19 04:05 - 000000000 ____D C:\WINDOWS\system32\ti-et 2023-05-19 04:05 - 2023-05-19 04:05 - 000000000 ____D C:\WINDOWS\system32\ta-lk 2023-05-19 04:05 - 2023-05-19 04:05 - 000000000 ____D C:\WINDOWS\system32\ta-in 2023-05-19 04:05 - 2023-05-19 04:05 - 000000000 ____D C:\WINDOWS\system32\si-lk 2023-05-19 04:05 - 2023-05-19 04:05 - 000000000 ____D C:\WINDOWS\system32\osa-Osge-001 2023-05-19 04:05 - 2023-05-19 04:05 - 000000000 ____D C:\WINDOWS\system32\my-mm 2023-05-19 04:05 - 2023-05-19 04:05 - 000000000 ____D C:\WINDOWS\system32\GroupPolicyUsers 2023-05-19 04:05 - 2023-05-19 04:05 - 000000000 ____D C:\WINDOWS\system32\GroupPolicy 2023-05-19 04:05 - 2023-05-19 04:05 - 000000000 ____D C:\WINDOWS\system32\ff-Adlm-SN 2023-05-19 04:05 - 2023-05-19 04:05 - 000000000 ____D C:\WINDOWS\system32\ContainerSettingsProviders 2023-05-19 04:05 - 2023-05-19 04:05 - 000000000 ____D C:\WINDOWS\system32\am-et 2023-05-19 04:05 - 2023-05-19 04:04 - 000017635 _____ C:\WINDOWS\system32\Drivers\etc\services 2023-05-19 04:05 - 2023-05-19 04:04 - 000001358 _____ C:\WINDOWS\system32\Drivers\etc\protocol 2023-05-19 04:05 - 2023-05-19 04:04 - 000000407 _____ C:\WINDOWS\system32\Drivers\etc\networks 2023-05-19 00:14 - 2023-05-19 00:14 - 000000000 ____D C:\Program Files\NVIDIA Corporation 2023-05-18 23:53 - 2023-05-18 23:53 - 000000000 _SHDL C:\Users\Usuário Padrão 2023-05-18 23:53 - 2023-05-18 23:53 - 000000000 _SHDL C:\Users\Todos os Usuários 2023-05-18 23:53 - 2023-05-18 23:53 - 000000000 _SHDL C:\Users\Default\AppData\Local\Histórico 2023-05-18 23:53 - 2023-05-18 23:53 - 000000000 _SHDL C:\Users\Default\AppData\Local\Dados de Aplicativos 2023-05-18 23:53 - 2023-05-18 23:53 - 000000000 _SHDL C:\ProgramData\Modelos 2023-05-18 23:53 - 2023-05-18 23:53 - 000000000 _SHDL C:\ProgramData\Menu Iniciar 2023-05-18 23:53 - 2023-05-18 23:53 - 000000000 _SHDL C:\ProgramData\Documentos 2023-05-18 23:53 - 2023-05-18 23:53 - 000000000 _SHDL C:\ProgramData\Dados de Aplicativos 2023-05-18 23:53 - 2023-05-18 23:53 - 000000000 _SHDL C:\Program Files\Common Files\Sistema 2023-05-18 23:53 - 2023-05-18 23:53 - 000000000 _SHDL C:\Program Files\Arquivos Comuns 2023-05-18 23:43 - 2023-05-18 23:43 - 000000000 ____D C:\Users\Leão de Judá\AppData\Roaming\Microsoft\InputMethod 2023-05-18 23:43 - 2023-05-18 23:43 - 000000000 ____D C:\Users\Leão de Judá\AppData\Roaming\Microsoft\IME 2023-05-18 23:25 - 2023-05-22 09:02 - 000000000 ____D C:\ProgramData\NVIDIA 2023-05-18 23:25 - 2023-05-19 14:40 - 000000000 ____D C:\WINDOWS\system32\Drivers\NVIDIA Corporation 2023-05-18 23:25 - 2023-05-19 01:41 - 000000000 ____D C:\ProgramData\NVIDIA Corporation 2023-05-18 23:24 - 2023-05-22 09:02 - 000000000 ____D C:\ProgramData\Goodix 2023-05-18 23:24 - 2023-05-19 14:38 - 000002440 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk 2023-05-18 23:24 - 2023-05-19 08:28 - 000000000 ____D C:\WINDOWS\system32\Drivers\wd 2023-05-18 23:24 - 2023-05-18 23:24 - 000000000 ____D C:\ProgramData\Intel 2023-05-18 17:57 - 2023-05-18 19:51 - 000000000 ____D C:\KVRT2020_Data 2023-05-18 14:53 - 2023-05-22 09:02 - 000000000 __SHD C:\Users\Leão de Judá\IntelGraphicsProfiles 2023-05-18 14:53 - 2023-05-18 14:53 - 000000000 ____D C:\Users\Leão de Judá\AppData\LocalLow\Intel 2023-05-18 14:48 - 2023-05-22 09:02 - 000000000 ____D C:\Intel 2023-05-18 10:58 - 2023-05-22 10:26 - 000000000 ____D C:\FRST 2023-05-18 10:47 - 2023-05-22 10:26 - 002382336 _____ (Farbar) C:\Users\Leão de Judá\Desktop\FRST64.exe 2023-05-18 10:36 - 2023-05-18 10:37 - 105773752 _____ (AO Kaspersky Lab) C:\Users\Leão de Judá\Desktop\KVRT.exe 2023-05-18 10:07 - 2022-02-16 23:58 - 000277912 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RTHDASIO64.dll 2023-05-18 10:07 - 2022-02-16 23:58 - 000232312 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\SysWOW64\RTHDASIO.dll 2023-05-18 10:05 - 2022-09-04 19:31 - 006181288 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\Drivers\RTKVHD64.sys 2023-05-18 10:04 - 2020-09-29 06:40 - 002876264 _____ (Intel Corporation) C:\WINDOWS\system32\Drivers\TbtBusDrv.sys 2023-05-18 09:46 - 2022-06-14 04:19 - 000534560 _____ (Intel) C:\WINDOWS\system32\libvpl.dll 2023-05-18 09:46 - 2022-06-14 04:19 - 000465256 _____ (Intel) C:\WINDOWS\SysWOW64\libvpl.dll 2023-05-18 09:46 - 2022-06-14 04:17 - 000966464 _____ (Intel Corporation) C:\WINDOWS\system32\libmfxhw64.dll 2023-05-18 09:46 - 2022-06-14 04:17 - 000725200 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\libmfxhw32.dll 2023-05-18 09:46 - 2022-06-14 04:16 - 000609120 _____ (Intel Corporation) C:\WINDOWS\system32\intel_gfx_api-x64.dll 2023-05-18 09:46 - 2022-06-14 04:16 - 000468120 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\intel_gfx_api-x86.dll 2023-05-18 09:46 - 2022-06-14 04:16 - 000364024 _____ C:\WINDOWS\SysWOW64\IntelControlLib32.dll 2023-05-18 09:46 - 2022-06-14 04:12 - 000250720 _____ C:\WINDOWS\system32\ControlLib.dll 2023-05-18 09:46 - 2022-06-14 04:12 - 000204368 _____ C:\WINDOWS\SysWOW64\ControlLib32.dll 2023-05-18 09:46 - 2022-06-14 04:12 - 000204368 _____ C:\WINDOWS\system32\ControlLib32.dll 2023-05-18 09:42 - 2023-02-13 11:21 - 002237032 _____ C:\WINDOWS\system32\vulkaninfo-1-999-0-0-0.exe 2023-05-18 09:42 - 2023-02-13 11:21 - 002237032 _____ C:\WINDOWS\system32\vulkaninfo.exe 2023-05-18 09:42 - 2023-02-13 11:21 - 001642600 _____ C:\WINDOWS\SysWOW64\vulkaninfo-1-999-0-0-0.exe 2023-05-18 09:42 - 2023-02-13 11:21 - 001642600 _____ C:\WINDOWS\SysWOW64\vulkaninfo.exe 2023-05-18 09:42 - 2023-02-13 11:21 - 001487920 _____ (Khronos Group) C:\WINDOWS\system32\OpenCL.dll 2023-05-18 09:42 - 2023-02-13 11:21 - 001444456 _____ C:\WINDOWS\system32\vulkan-1-999-0-0-0.dll 2023-05-18 09:42 - 2023-02-13 11:21 - 001444456 _____ C:\WINDOWS\system32\vulkan-1.dll 2023-05-18 09:42 - 2023-02-13 11:21 - 001227312 _____ (Khronos Group) C:\WINDOWS\SysWOW64\OpenCL.dll 2023-05-18 09:42 - 2023-02-13 11:21 - 001169000 _____ C:\WINDOWS\SysWOW64\vulkan-1-999-0-0-0.dll 2023-05-18 09:42 - 2023-02-13 11:21 - 001169000 _____ C:\WINDOWS\SysWOW64\vulkan-1.dll 2023-05-18 09:42 - 2023-02-13 11:15 - 000852016 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvml.dll 2023-05-18 09:42 - 2023-02-13 11:15 - 000673328 _____ C:\WINDOWS\system32\nvofapi64.dll 2023-05-18 09:42 - 2023-02-13 11:15 - 000506904 _____ C:\WINDOWS\SysWOW64\nvofapi.dll 2023-05-18 09:42 - 2023-02-13 11:14 - 002163728 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvFBC64.dll 2023-05-18 09:42 - 2023-02-13 11:14 - 001619984 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvFBC.dll 2023-05-18 09:42 - 2023-02-13 11:14 - 001531888 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvIFR64.dll 2023-05-18 09:42 - 2023-02-13 11:14 - 001191920 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvIFR.dll 2023-05-18 09:42 - 2023-02-13 11:14 - 000737816 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvidia-smi.exe 2023-05-18 09:42 - 2023-02-13 11:13 - 000457720 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdebugdump.exe 2023-05-18 09:42 - 2023-02-13 11:12 - 012453904 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuvid.dll 2023-05-18 09:42 - 2023-02-13 11:12 - 010220560 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuvid.dll 2023-05-18 09:42 - 2023-02-13 11:12 - 005891088 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuda.dll 2023-05-18 09:42 - 2023-02-13 11:12 - 005856752 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcudadebugger.dll 2023-05-18 09:42 - 2023-02-13 11:12 - 005816312 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcpl.dll 2023-05-18 09:42 - 2023-02-13 11:12 - 003334672 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuda.dll 2023-05-18 09:42 - 2023-02-13 11:10 - 000853552 _____ (NVIDIA Corporation) C:\WINDOWS\system32\MCU.exe 2023-05-18 09:42 - 2023-02-13 11:09 - 007645912 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvapi64.dll 2023-05-18 09:42 - 2023-02-13 11:09 - 006514448 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvapi.dll 2023-05-18 09:42 - 2023-02-13 10:29 - 000100741 _____ C:\WINDOWS\system32\nvinfo.pb 2023-05-17 10:57 - 2023-05-19 09:04 - 000000000 ___SD C:\Users\Leão de Judá\AppData\Roaming\Microsoft\Protect 2023-05-17 10:57 - 2023-05-19 08:12 - 000000000 ___RD C:\Users\Leão de Judá\3D Objects 2023-05-17 10:57 - 2023-05-17 10:57 - 000000000 ___SD C:\Users\Leão de Judá\AppData\Roaming\Microsoft\Credentials 2023-05-17 10:57 - 2023-05-17 10:57 - 000000000 ____D C:\Users\Leão de Judá\AppData\Roaming\Microsoft\Vault 2023-05-17 10:51 - 2023-05-17 10:51 - 000000000 _SHDL C:\Users\Public\Documents\Minhas Músicas 2023-05-17 10:51 - 2023-05-17 10:51 - 000000000 _SHDL C:\Users\Public\Documents\Minhas Imagens 2023-05-17 10:51 - 2023-05-17 10:51 - 000000000 _SHDL C:\Users\Public\Documents\Meus Vídeos 2023-05-17 10:51 - 2023-05-17 10:51 - 000000000 _SHDL C:\Users\Default\Modelos 2023-05-17 10:51 - 2023-05-17 10:51 - 000000000 _SHDL C:\Users\Default\Meus Documentos 2023-05-17 10:51 - 2023-05-17 10:51 - 000000000 _SHDL C:\Users\Default\Menu Iniciar 2023-05-17 10:51 - 2023-05-17 10:51 - 000000000 _SHDL C:\Users\Default\Documents\Minhas Músicas 2023-05-17 10:51 - 2023-05-17 10:51 - 000000000 _SHDL C:\Users\Default\Documents\Minhas Imagens 2023-05-17 10:51 - 2023-05-17 10:51 - 000000000 _SHDL C:\Users\Default\Documents\Meus Vídeos 2023-05-17 10:51 - 2023-05-17 10:51 - 000000000 _SHDL C:\Users\Default\Dados de Aplicativos 2023-05-17 10:51 - 2023-05-17 10:51 - 000000000 _SHDL C:\Users\Default\Configurações Locais 2023-05-17 10:51 - 2023-05-17 10:51 - 000000000 _SHDL C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programas 2023-05-17 10:51 - 2023-05-17 10:51 - 000000000 _SHDL C:\Users\Default\Ambiente de Rede 2023-05-17 10:51 - 2023-05-17 10:51 - 000000000 _SHDL C:\Users\Default\Ambiente de Impressão 2023-05-17 10:51 - 2023-05-17 10:51 - 000000000 _SHDL C:\ProgramData\Microsoft\Windows\Start Menu\Programas 2023-05-17 10:51 - 2023-05-17 10:51 - 000000000 _SHDL C:\Documents and Settings 2023-05-17 10:51 - 2023-05-17 10:51 - 000000000 _SHDL C:\Arquivos de Programas 2023-05-17 10:50 - 2023-05-19 14:37 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dell 2023-05-17 10:47 - 2023-05-22 09:02 - 000012288 ___SH C:\DumpStack.log.tmp 2023-05-17 09:59 - 2023-04-11 07:31 - 000048464 _____ (Dell Inc.) C:\WINDOWS\system32\Drivers\dcdbas64.sys 2023-05-17 09:58 - 2020-09-13 14:06 - 000037584 _____ (Goodix) C:\WINDOWS\system32\Drivers\SessionService.exe 2023-05-17 09:58 - 2020-09-10 21:33 - 009908832 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\SysWOW64\RsCRIcon.dll 2023-05-17 09:58 - 2020-09-10 21:33 - 000448096 _____ (Realsil Semiconductor Corporation) C:\WINDOWS\system32\Drivers\RtsUer.sys ==================== Um mês (modificados) ================== (Se uma entrada for incluída na fixlist, o arquivo/pasta será movido.) 2023-05-22 10:18 - 2022-05-07 02:24 - 000000000 ____D C:\WINDOWS\SystemTemp 2023-05-22 10:17 - 2022-05-07 02:24 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft 2023-05-22 09:30 - 2022-05-07 02:24 - 000000000 ____D C:\WINDOWS\AppReadiness 2023-05-22 09:29 - 2022-05-07 02:24 - 000000000 ___HD C:\Program Files\WindowsApps 2023-05-22 09:10 - 2022-05-07 02:22 - 000000000 ____D C:\WINDOWS\INF 2023-05-22 09:02 - 2022-05-07 02:24 - 000000000 ____D C:\WINDOWS\ServiceState 2023-05-19 18:41 - 2022-05-07 02:17 - 000524288 _____ C:\WINDOWS\system32\config\BBI 2023-05-19 17:30 - 2022-05-07 02:24 - 000000000 ____D C:\WINDOWS\appcompat 2023-05-19 15:20 - 2022-05-07 02:24 - 000000000 ____D C:\WINDOWS\system32\SecurityHealth 2023-05-19 14:54 - 2022-05-07 02:24 - 000000000 ___RD C:\WINDOWS\PrintDialog 2023-05-19 14:46 - 2022-05-07 02:24 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel 2023-05-19 14:45 - 2022-05-07 02:24 - 000000000 ____D C:\WINDOWS\system32\oobe 2023-05-19 14:45 - 2022-05-07 02:24 - 000000000 ____D C:\Program Files\Windows NT 2023-05-19 14:45 - 2022-05-07 02:24 - 000000000 ____D C:\Program Files\Windows Defender 2023-05-19 14:45 - 2022-05-07 02:17 - 000008192 _____ C:\WINDOWS\system32\config\ELAM 2023-05-19 14:41 - 2022-05-07 02:24 - 000000000 ____D C:\Program Files\Common Files\microsoft shared 2023-05-19 14:40 - 2022-05-07 02:24 - 000000000 ____D C:\Users\Default\AppData\Roaming\Microsoft\Windows 2023-05-19 14:38 - 2022-05-07 02:24 - 000028672 _____ C:\WINDOWS\system32\config\BCD-Template 2023-05-19 14:38 - 2022-05-07 02:24 - 000000000 __RHD C:\Users\Public\Libraries 2023-05-19 14:38 - 2022-05-07 02:24 - 000000000 ____D C:\WINDOWS\system32\WinBioPlugIns 2023-05-19 14:38 - 2022-05-07 02:24 - 000000000 ____D C:\WINDOWS\system32\WinBioDatabase 2023-05-19 14:38 - 2022-05-07 02:24 - 000000000 ____D C:\WINDOWS\system32\spool 2023-05-19 14:38 - 2022-05-07 02:24 - 000000000 ____D C:\WINDOWS\system32\Drivers\DriverData 2023-05-19 14:38 - 2022-05-07 02:24 - 000000000 ____D C:\WINDOWS\LiveKernelReports 2023-05-19 14:38 - 2022-05-07 02:24 - 000000000 ____D C:\ProgramData\USOPrivate 2023-05-19 14:37 - 2022-05-07 02:28 - 000000000 ____D C:\WINDOWS\Setup 2023-05-19 14:36 - 2022-05-07 02:24 - 000000000 ___SD C:\WINDOWS\system32\UNP 2023-05-19 14:36 - 2022-05-07 02:24 - 000000000 ____D C:\WINDOWS\UUS 2023-05-19 14:36 - 2022-05-07 02:24 - 000000000 ____D C:\WINDOWS\SysWOW64\WinMetadata 2023-05-19 14:36 - 2022-05-07 02:24 - 000000000 ____D C:\WINDOWS\SysWOW64\setup 2023-05-19 14:36 - 2022-05-07 02:24 - 000000000 ____D C:\WINDOWS\SysWOW64\oobe 2023-05-19 14:36 - 2022-05-07 02:24 - 000000000 ____D C:\WINDOWS\SysWOW64\Dism 2023-05-19 14:36 - 2022-05-07 02:24 - 000000000 ____D C:\WINDOWS\SystemResources 2023-05-19 14:36 - 2022-05-07 02:24 - 000000000 ____D C:\WINDOWS\SystemApps 2023-05-19 14:36 - 2022-05-07 02:24 - 000000000 ____D C:\WINDOWS\system32\WinMetadata 2023-05-19 14:36 - 2022-05-07 02:24 - 000000000 ____D C:\WINDOWS\system32\ShellExperiences 2023-05-19 14:36 - 2022-05-07 02:24 - 000000000 ____D C:\WINDOWS\system32\Sgrm 2023-05-19 14:36 - 2022-05-07 02:24 - 000000000 ____D C:\WINDOWS\system32\setup 2023-05-19 14:36 - 2022-05-07 02:24 - 000000000 ____D C:\WINDOWS\system32\SecureBootUpdates 2023-05-19 14:36 - 2022-05-07 02:24 - 000000000 ____D C:\WINDOWS\system32\PerceptionSimulation 2023-05-19 14:36 - 2022-05-07 02:24 - 000000000 ____D C:\WINDOWS\system32\es-MX 2023-05-19 14:36 - 2022-05-07 02:24 - 000000000 ____D C:\WINDOWS\system32\Dism 2023-05-19 14:36 - 2022-05-07 02:24 - 000000000 ____D C:\WINDOWS\system32\appraiser 2023-05-19 14:36 - 2022-05-07 02:24 - 000000000 ____D C:\WINDOWS\ShellExperiences 2023-05-19 14:36 - 2022-05-07 02:24 - 000000000 ____D C:\WINDOWS\ShellComponents 2023-05-19 14:36 - 2022-05-07 02:24 - 000000000 ____D C:\WINDOWS\Provisioning 2023-05-19 14:36 - 2022-05-07 02:24 - 000000000 ____D C:\WINDOWS\PolicyDefinitions 2023-05-19 14:36 - 2022-05-07 02:24 - 000000000 ____D C:\WINDOWS\Globalization 2023-05-19 14:36 - 2022-05-07 02:24 - 000000000 ____D C:\WINDOWS\bcastdvr 2023-05-19 14:36 - 2022-05-07 02:24 - 000000000 ____D C:\Program Files\Common Files\System 2023-05-19 14:36 - 2022-05-07 02:17 - 000000000 ____D C:\WINDOWS\CbsTemp 2023-05-19 14:35 - 2022-05-07 07:40 - 000036864 _____ (Microsoft Corporation) C:\WINDOWS\system32\OEMDefaultAssociations.dll 2023-05-19 14:35 - 2022-05-07 07:40 - 000023775 _____ C:\WINDOWS\system32\OEMDefaultAssociations.xml 2023-05-19 14:35 - 2022-05-07 02:25 - 000209920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msclmd.dll 2023-05-19 14:35 - 2022-05-07 02:24 - 000249856 _____ (Microsoft Corporation) C:\WINDOWS\system32\msclmd.dll 2023-05-19 14:30 - 2022-05-07 07:40 - 000000000 ____D C:\Program Files\Windows Photo Viewer 2023-05-19 14:30 - 2022-05-07 07:40 - 000000000 ____D C:\Program Files (x86)\Windows Photo Viewer 2023-05-19 14:30 - 2022-05-07 07:31 - 000000000 ____D C:\WINDOWS\SysWOW64\winrm 2023-05-19 14:30 - 2022-05-07 07:31 - 000000000 ____D C:\WINDOWS\SysWOW64\WCN 2023-05-19 14:30 - 2022-05-07 07:31 - 000000000 ____D C:\WINDOWS\SysWOW64\slmgr 2023-05-19 14:30 - 2022-05-07 07:31 - 000000000 ____D C:\WINDOWS\SysWOW64\Printing_Admin_Scripts 2023-05-19 14:30 - 2022-05-07 07:31 - 000000000 ____D C:\WINDOWS\system32\winrm 2023-05-19 14:30 - 2022-05-07 07:31 - 000000000 ____D C:\WINDOWS\system32\WCN 2023-05-19 14:30 - 2022-05-07 07:31 - 000000000 ____D C:\WINDOWS\system32\slmgr 2023-05-19 14:30 - 2022-05-07 07:31 - 000000000 ____D C:\WINDOWS\system32\Printing_Admin_Scripts 2023-05-19 14:30 - 2022-05-07 02:24 - 000000000 ___SD C:\WINDOWS\SysWOW64\F12 2023-05-19 14:30 - 2022-05-07 02:24 - 000000000 ___SD C:\WINDOWS\SysWOW64\DiagSvcs 2023-05-19 14:30 - 2022-05-07 02:24 - 000000000 ___SD C:\WINDOWS\system32\F12 2023-05-19 14:30 - 2022-05-07 02:24 - 000000000 ___SD C:\WINDOWS\system32\dsc 2023-05-19 14:30 - 2022-05-07 02:24 - 000000000 ___SD C:\WINDOWS\system32\DiagSvcs 2023-05-19 14:30 - 2022-05-07 02:24 - 000000000 ____D C:\WINDOWS\system32\SystemResetPlatform 2023-05-19 14:30 - 2022-05-07 02:24 - 000000000 ____D C:\WINDOWS\system32\migwiz 2023-05-19 14:30 - 2022-05-07 02:24 - 000000000 ____D C:\WINDOWS\OCR 2023-05-19 14:30 - 2022-05-07 02:24 - 000000000 ____D C:\Program Files (x86)\Windows Defender 2023-05-19 14:30 - 2022-05-07 02:17 - 000000000 ____D C:\WINDOWS\servicing ==================== SigCheck ============================ (Não há correção automática para arquivos que não passaram na verificação.) ==================== Fim de FRST.txt ========================