Konishi
Posts: 149 +0
Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version:24-02-2016
Ran by Konishi (administrator) on KONISHI-PC (24-02-2016 15:18:54)
Running from C:\Users\Konishi\Desktop
Loaded Profiles: Konishi (Available Profiles: Konishi)
Platform: Windows 7 Ultimate Service Pack 1 (X64) Language: English (United States)
Internet Explorer Version 11 (Default browser: Chrome)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool:
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(GAS Tecnologia) C:\Program Files (x86)\GbPlugin\gbpsv.exe
(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Sunbelt Software) C:\Program Files (x86)\Sunbelt Software\VIPRE\SBAMSvc.exe
(Sunbelt Software) C:\Program Files (x86)\Sunbelt Software\VIPRE\SBPIMSvc.exe
(GGS) C:\Users\Konishi\AppData\Local\THORN\Thorn.exe
(GGS) C:\Users\Konishi\AppData\Local\THORN\ThornHelper.exe
(GAS Tecnologia LTDA) C:\Program Files\Diebold\Warsaw\core.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(GAS Tecnologia LTDA) C:\Program Files\Diebold\Warsaw\core.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Sunbelt Software) C:\Program Files (x86)\Sunbelt Software\VIPRE\SBAMTray.exe
() C:\GIGABYTE FORCE\GIGABYTE FORCE.exe
(GAS Tecnologia) C:\Program Files (x86)\GbPlugin\gbpsv.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
==================== Registry (Whitelisted) ===========================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [SBRegRebootCleaner] => C:\Program Files (x86)\Sunbelt Software\VIPRE\SBRC.exe [197968 2011-05-11] (Sunbelt Software)
HKLM\...\Run: [Diebold - Warsaw] => C:\Program Files\Diebold\Warsaw\core.exe [847160 2015-02-13] (GAS Tecnologia LTDA)
HKLM-x32\...\Run: [SBAMTray] => C:\Program Files (x86)\Sunbelt Software\VIPRE\SBAMTray.exe [1353040 2011-05-11] (Sunbelt Software)
HKLM-x32\...\Run: [GMouse] => C:\GIGABYTE FORCE\GIGABYTE FORCE.EXE [1253376 2012-10-04] ()
Winlogon\Notify\ GbPluginBb: C:\Program Files (x86)\GbPlugin\gbieh.dll [2015-10-20] (Banco do Brasil)
HKU\S-1-5-21-1519485860-2903035351-2837986310-1000\...\Run: [DAEMON Tools Lite] => C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3696912 2014-03-04] (Disc Soft Ltd)
ShellExecuteHooks-x32: GbPluginObj Class - {E37CB5F0-51F5-4395-A808-5FA49E399F83} - C:\Program Files (x86)\GbPlugin\gbieh.dll [1945472 2015-10-20] (Banco do Brasil)
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1 192.168.1.1
Tcpip\..\Interfaces\{363960C9-CA6B-4BB1-8E41-AFFABA666BE0}: [DhcpNameServer] 7.254.254.254
Tcpip\..\Interfaces\{B56C9954-5873-414B-B39F-267B05C3B6F0}: [DhcpNameServer] 192.168.1.1 192.168.1.1
Internet Explorer:
==================
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=msnhome
HKU\S-1-5-21-1519485860-2903035351-2837986310-1000\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKU\S-1-5-21-1519485860-2903035351-2837986310-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://df.nexon.com
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17] (Microsoft Corp.)
BHO-x32: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17] (Microsoft Corp.)
BHO-x32: GbIehObj Class -> {C41A1C0E-EA6C-11D4-B1B8-444553540000} -> C:\Program Files (x86)\GbPlugin\gbieh.dll [2015-10-20] (Banco do Brasil)
FireFox:
========
FF ProfilePath: C:\Users\Konishi\AppData\Roaming\Mozilla\Firefox\Profiles\s1rehta2.default-1442513781816
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_20_0_0_286.dll [2016-01-24] ()
FF Plugin: @microsoft.com/GENUINE -> disabled [No File]
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_20_0_0_286.dll [2016-01-24] ()
FF Plugin-x32: @microsoft.com/GENUINE -> disabled [No File]
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3528.0331 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2014-03-31] (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.29.5\npGoogleUpdate3.dll [2016-02-01] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.29.5\npGoogleUpdate3.dll [2016-02-01] (Google Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2015-12-18] (Adobe Systems Inc.)
FF Plugin HKU\S-1-5-21-1519485860-2903035351-2837986310-1000: @neople.co.kr/NeopleGameInstaller -> C:\ProgramData\NeoplePlugin\npNeopleGameInstaller.dll [2014-08-16] ( )
FF Plugin HKU\S-1-5-21-1519485860-2903035351-2837986310-1000: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\Konishi\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll [2015-08-28] (Unity Technologies ApS)
FF Extension: Adblock Plus - C:\Users\Konishi\AppData\Roaming\Mozilla\Firefox\Profiles\s1rehta2.default-1442513781816\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2016-01-26]
FF HKU\S-1-5-21-1519485860-2903035351-2837986310-1000\...\Firefox\Extensions: [{87F8774F-B485-47E2-A755-A40A8A5E886C}] - C:\Users\Konishi\AppData\Local\GAS Tecnologia\GBBD\bb\xpi => not found
Chrome:
=======
CHR Plugin: (Widevine Content Decryption Module) - C:\Users\Konishi\AppData\Local\Google\Chrome\User Data\WidevineCDM\1.4.8.824\_platform_specific\win_x86\widevinecdmadapter.dll => No File
CHR Plugin: (Shockwave Flash) - C:\Program Files (x86)\Google\Chrome\Application\48.0.2564.116\PepperFlash\pepflashplayer.dll ()
CHR Profile: C:\Users\Konishi\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Docs) - C:\Users\Konishi\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-04-13]
CHR Extension: (Google Drive) - C:\Users\Konishi\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-10-21]
CHR Extension: (YouTube) - C:\Users\Konishi\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-09-24]
CHR Extension: (Google Search) - C:\Users\Konishi\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-10-27]
CHR Extension: (Documentos Google off-line) - C:\Users\Konishi\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2015-11-17]
CHR Extension: (AdBlock) - C:\Users\Konishi\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2016-02-15]
CHR Extension: (Pagamentos da Chrome Web Store) - C:\Users\Konishi\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-09-17]
CHR Extension: (Gmail) - C:\Users\Konishi\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-04-28]
==================== Services (Whitelisted) ========================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
S3 EvoSvc; C:\Program Files\Echobit\Evolve\EvoSvc.exe [1583488 2016-01-24] (Echobit LLC)
R2 GbpSv; C:\Program Files (x86)\GbPlugin\gbpsv.exe [593120 2015-09-22] (GAS Tecnologia)
S3 npggsvc; C:\Windows\SysWOW64\GameMon.des [3310176 2014-05-13] (INCA Internet Co., Ltd.)
S3 OverwolfUpdater; C:\Program Files (x86)\Overwolf\OverwolfUpdater.exe [1009904 2016-02-11] (Overwolf LTD)
R2 SBAMSvc; C:\Program Files (x86)\Sunbelt Software\VIPRE\SBAMSvc.exe [2804280 2011-05-11] (Sunbelt Software)
R2 SBPIMSvc; C:\Program Files (x86)\Sunbelt Software\VIPRE\SBPIMSvc.exe [181584 2011-05-11] (Sunbelt Software)
R2 Thorn; C:\Users\Konishi\AppData\Local\THORN\Thorn.exe [56824 2015-10-01] (GGS)
S3 TunngleService; C:\Program Files (x86)\Tunngle\TnglCtrl.exe [792016 2015-02-09] (Tunngle.net GmbH) [File not signed]
R2 Warsaw Technology; C:\Program Files\Diebold\Warsaw\core.exe [847160 2015-02-13] (GAS Tecnologia LTDA)
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)
===================== Drivers (Whitelisted) ==========================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
R3 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283064 2014-09-25] (Disc Soft Ltd)
S3 ebdrv; C:\Windows\system32\DRIVERS\evbda.sys [3286016 2009-06-10] (Broadcom Corporation)
R3 EvolveVirtualAdapter; C:\Windows\System32\DRIVERS\evolve.sys [21656 2014-07-27] (Echobit, LLC)
R1 gbpddfac; C:\Windows\System32\drivers\gbpddfac64.sys [28888 2016-02-24] (GAS Tecnologia)
R3 GBPRCM; C:\Program Files (x86)\GbPlugin\gbprcm64.sys [29912 2015-11-25] (GAS Tecnologia)
S3 Neo_VPN; C:\Windows\System32\DRIVERS\Neo_0036.sys [40704 2015-07-18] (SoftEther Corporation)
R2 sbapifs; C:\Windows\System32\DRIVERS\sbapifs.sys [72280 2011-05-11] (Sunbelt Software)
R1 SbFw; C:\Windows\System32\drivers\SbFw.sys [253528 2011-04-05] (Sunbelt Software, Inc.)
S3 SBFWIMCL; C:\Windows\System32\DRIVERS\sbfwim.sys [84568 2011-02-08] (Sunbelt Software, Inc.)
R3 SBFWIMCLMP; C:\Windows\System32\DRIVERS\SBFWIM.sys [84568 2011-02-08] (Sunbelt Software, Inc.)
S3 sbhips; C:\Windows\System32\drivers\sbhips.sys [60504 2011-04-05] (Sunbelt Software, Inc.)
R1 SBRE; C:\Windows\system32\drivers\SBREdrv.sys [55384 2011-04-29] (Sunbelt Software)
R1 SBRE; C:\Windows\SysWOW64\drivers\SBREdrv.sys [101720 2011-04-29] (Sunbelt Software)
R1 SbTis; C:\Windows\System32\drivers\sbtis.sys [94296 2011-04-05] (Sunbelt Software, Inc.)
S3 tap0901t; C:\Windows\System32\DRIVERS\tap0901t.sys [31232 2009-09-16] (Tunngle.net)
S3 Thetta; C:\Windows\System32\DRIVERS\Thetta64.sys [312536 2015-08-31] (Windows (R) Win 7 DDK provider)
U3 TrueSight; C:\Windows\System32\drivers\TrueSight.sys [35064 2015-06-02] ()
R3 Warsaw_PP; C:\Program Files (x86)\GbPlugin\wsftprp64.sys [24792 2015-11-25] (GAS Tecnologia LTDA)
S3 EagleX64; \??\C:\Windows\system32\drivers\EagleX64.sys [X]
S0 gbpddreg; system32\drivers\gbpddreg64.sys [X]
S3 xhunter1; \??\C:\Windows\xhunter1.sys [X]
==================== NetSvcs (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
==================== One Month Created files and folders ========
(If an entry is included in the fixlist, the file/folder will be moved.)
2016-02-24 15:18 - 2016-02-24 15:19 - 00011711 _____ C:\Users\Konishi\Desktop\FRST.txt
2016-02-24 15:02 - 2016-02-24 15:03 - 00268960 _____ C:\Windows\system32\FNTCACHE.DAT
2016-02-24 14:54 - 2016-02-24 15:18 - 00000000 ____D C:\FRST
2016-02-24 14:53 - 2016-02-24 14:53 - 02371072 _____ (Farbar) C:\Users\Konishi\Desktop\FRST64.exe
2016-02-24 14:50 - 2016-02-24 15:08 - 00058800 _____ C:\Users\Konishi\AppData\Local\GDIPFONTCACHEV1.DAT
2016-02-24 14:31 - 2016-02-24 14:32 - 06837784 _____ (Piriform Ltd) C:\Users\Konishi\Downloads\ccsetup515.exe
2016-02-23 01:43 - 2016-02-23 01:48 - 00000000 ____D C:\Users\Konishi\Downloads\Better.Call.Saul.S02E02.HDTV.x264-KILLERS[rarbg]
2016-02-22 18:00 - 2016-02-22 18:00 - 00355826 _____ C:\Users\Konishi\Downloads\FichaDnD5.pdf
2016-02-22 17:11 - 2016-02-24 15:07 - 00000000 ____D C:\Users\Konishi\Desktop\New folder (4)
2016-02-22 02:51 - 2016-02-22 02:52 - 00000000 ____D C:\Users\Konishi\Downloads\Kill la Kill
2016-02-19 14:53 - 2016-02-19 14:58 - 00000000 ____D C:\Users\Konishi\Downloads\The.Blacklist.S03E15.720p.HDTV.x264-AVS[rarbg]
2016-02-18 22:51 - 2016-02-18 22:51 - 00000000 ____D C:\Users\Konishi\Desktop\New folder
2016-02-18 18:01 - 2016-02-18 18:03 - 00000000 ____D C:\Users\Konishi\Desktop\ePSXe200
2016-02-18 16:04 - 2016-02-20 02:45 - 00000000 ____D C:\Users\Konishi\AppData\Local\Teeching Feeling
2016-02-18 15:58 - 2016-02-18 16:06 - 730390479 ____R C:\Users\Konishi\Downloads\[HorribleSubs] Assassination Classroom S2 - 07 [1080p].mkv
2016-02-18 14:46 - 2016-02-18 14:52 - 547891453 _____ C:\Users\Konishi\Downloads\[HorribleSubs] Boku dake ga Inai Machi - 07 [1080p].mkv
2016-02-18 00:46 - 2016-02-18 00:46 - 00000000 ____D C:\Users\Konishi\Documents\Miconisomi
2016-02-17 15:19 - 2016-02-17 15:19 - 00000000 ____D C:\Users\Konishi\Desktop\Darkest
2016-02-16 18:23 - 2016-02-16 18:28 - 00000000 ____D C:\Users\Konishi\Documents\SEGA Mega Drive Classics
2016-02-16 11:22 - 2016-02-16 11:22 - 00000000 ____D C:\Users\Konishi\Documents\Square Enix
2016-02-16 07:53 - 2016-02-18 09:39 - 00000000 ____D C:\Users\Konishi\Downloads\Better.Call.Saul.S02E01.720p.HDTV.x264-AVS[rarbg]
2016-02-15 14:54 - 2016-02-15 14:54 - 00389036 _____ C:\Users\Konishi\Downloads\minisuka.tv-Photo-2004.txt
2016-02-15 12:29 - 2016-02-16 07:53 - 00000000 ____D C:\Users\Konishi\Downloads\The.Blacklist.S03E14.720p.HDTV.x264-AVS[rarbg]
2016-02-14 12:00 - 2016-02-14 12:00 - 00000000 ____D C:\Users\Konishi\AppData\LocalLow\CampoSanto
2016-02-13 13:02 - 2016-02-13 13:07 - 772805486 ____R C:\Users\Konishi\Downloads\[HorribleSubs] Dagashi Kashi - 05 [1080p].mkv
2016-02-11 15:32 - 2016-02-11 15:41 - 737864166 _____ C:\Users\Konishi\Downloads\[HorribleSubs] Assassination Classroom S2 - 06 [1080p].mkv
2016-02-11 15:32 - 2016-02-11 15:38 - 548280019 _____ C:\Users\Konishi\Downloads\[HorribleSubs] Boku dake ga Inai Machi - 06 [1080p].mkv
2016-02-11 14:48 - 2016-02-11 14:52 - 574915547 _____ C:\Users\Konishi\Downloads\[HorribleSubs] Gintama - 309 [1080p].mkv
2016-02-10 21:20 - 2016-02-10 21:20 - 00085867 _____ C:\Users\Konishi\Downloads\autoload.sc
2016-02-09 17:46 - 2016-02-09 17:46 - 06650718 _____ C:\Users\Konishi\Downloads\Book Of Challenges.pdf
2016-02-09 15:16 - 2016-02-09 15:35 - 00000000 ____D C:\Users\Konishi\Desktop\Hope Sound
2016-02-09 13:12 - 2016-02-09 13:12 - 00000000 ____D C:\Users\Konishi\AppData\LocalLow\Microids
2016-02-08 11:24 - 2016-02-22 14:08 - 00000000 ____D C:\Users\Konishi\AppData\Local\HearthstoneTracker
2016-02-08 11:24 - 2016-02-08 11:24 - 00000098 _____ C:\ProgramData\Microsoft.SqlServer.Compact.400.32.bc
2016-02-06 21:20 - 2016-01-16 14:02 - 00000000 ____D C:\Users\Konishi\Desktop\Antenna
2016-02-05 08:03 - 2016-02-05 08:10 - 771822279 ____R C:\Users\Konishi\Downloads\[HorribleSubs] Dagashi Kashi - 04 [1080p].mkv
2016-02-05 08:03 - 2016-02-05 08:09 - 548051313 _____ C:\Users\Konishi\Downloads\[HorribleSubs] Boku dake ga Inai Machi - 05 [1080p].mkv
2016-02-05 08:02 - 2016-02-05 08:12 - 739822474 ____R C:\Users\Konishi\Downloads\[HorribleSubs] Assassination Classroom S2 - 05 [1080p].mkv
2016-02-01 13:38 - 2016-02-01 13:39 - 65497711 _____ C:\Users\Konishi\Downloads\[Blaze077] One Punch Man BD - OVA 02 [480p].mp4
2016-02-01 13:12 - 2016-02-01 13:12 - 00023115 _____ C:\Users\Konishi\Downloads\[DeadFish] One Punch Man- Road to Hero - OVA [DVD][576p][AAC].mp4.torrent
2016-01-31 16:48 - 2016-02-08 21:39 - 00093662 _____ C:\Users\Konishi\Desktop\autoload.sc
2016-01-30 23:09 - 2016-02-12 21:04 - 00000000 ____D C:\Users\Konishi\Desktop\Injection_09_08_2015
2016-01-30 22:52 - 2016-01-30 22:52 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\EA Games
2016-01-30 03:13 - 2016-01-30 03:13 - 00001284 _____ C:\Users\Konishi\Desktop\Client - Shortcut.lnk
2016-01-30 02:56 - 2016-01-30 22:48 - 00000000 ____D C:\Program Files (x86)\EA Games
2016-01-29 15:21 - 2016-01-29 15:25 - 357516477 ____R C:\Users\Konishi\Downloads\[Mori] Dagashi Kashi - 04 [1767DF66].mkv
2016-01-29 13:05 - 2016-01-29 13:11 - 736592362 ____R C:\Users\Konishi\Downloads\[HorribleSubs] Assassination Classroom S2 - 04 [1080p].mkv
2016-01-29 13:05 - 2016-01-29 13:10 - 547914491 ____R C:\Users\Konishi\Downloads\[HorribleSubs] Boku dake ga Inai Machi - 04 [1080p].mkv
2016-01-28 23:02 - 2016-01-28 23:02 - 00000000 ____D C:\Users\Konishi\Documents\League of Legends
2016-01-26 22:28 - 2016-02-22 16:29 - 00000000 ____D C:\Users\Konishi\Desktop\New folder (2)
2016-01-26 22:01 - 2016-01-26 22:07 - 37271741 _____ C:\Users\Konishi\Desktop\Dark Forest 1.2.exe
2016-01-26 09:36 - 2016-01-27 21:05 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
==================== One Month Modified files and folders ========
(If an entry is included in the fixlist, the file/folder will be moved.)
2016-02-24 15:08 - 2014-08-16 14:40 - 00705474 _____ C:\Windows\system32\prfh0416.dat
2016-02-24 15:08 - 2014-08-16 14:40 - 00420018 _____ C:\Windows\system32\perfh012.dat
2016-02-24 15:08 - 2014-08-16 14:40 - 00147314 _____ C:\Windows\system32\prfc0416.dat
2016-02-24 15:08 - 2014-08-16 14:40 - 00120042 _____ C:\Windows\system32\perfc012.dat
2016-02-24 15:08 - 2009-07-14 02:13 - 02174476 _____ C:\Windows\system32\PerfStringBackup.INI
2016-02-24 15:08 - 2009-07-14 00:20 - 00000000 ____D C:\Windows\inf
2016-02-24 15:03 - 2015-10-20 03:00 - 00000000 ____D C:\Users\Konishi\AppData\Local\THORN
2016-02-24 15:03 - 2015-09-16 05:28 - 00028888 _____ (GAS Tecnologia) C:\Windows\system32\Drivers\gbpddfac64.sys
2016-02-24 15:03 - 2014-11-17 12:43 - 00000000 ____D C:\Program Files (x86)\GbPlugin
2016-02-24 15:03 - 2014-08-18 20:24 - 00000894 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2016-02-24 15:03 - 2009-07-14 02:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2016-02-24 15:02 - 2014-07-27 21:32 - 00000000 ____D C:\Users\Konishi\AppData\Roaming\uTorrent
2016-02-24 15:02 - 2009-07-14 01:45 - 00010320 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2016-02-24 15:02 - 2009-07-14 01:45 - 00010320 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2016-02-24 14:54 - 2014-07-27 21:56 - 00000000 ____D C:\Users\Konishi\AppData\Roaming\vlc
2016-02-24 14:48 - 2015-05-22 13:06 - 00000000 ____D C:\Users\Konishi\Desktop\Trash
2016-02-24 14:45 - 2015-09-18 15:00 - 00000000 ____D C:\Users\Konishi\AppData\LocalLow\uTorrent
2016-02-24 14:43 - 2014-09-25 11:22 - 00000000 ____D C:\Users\Konishi\AppData\Roaming\DAEMON Tools Lite
2016-02-24 14:43 - 2014-07-27 02:35 - 00000000 ____D C:\Program Files (x86)\Steam
2016-02-24 14:41 - 2015-06-04 00:35 - 00000000 ____D C:\Users\Konishi\AppData\Local\CrashDumps
2016-02-24 14:40 - 2015-06-01 13:55 - 00000822 _____ C:\Users\Public\Desktop\CCleaner.lnk
2016-02-24 14:26 - 2014-08-18 20:24 - 00000898 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2016-02-24 13:26 - 2015-06-02 17:58 - 00113880 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2016-02-23 22:16 - 2014-09-12 18:10 - 00000000 ____D C:\Users\Konishi\AppData\Roaming\dvdcss
2016-02-23 14:36 - 2015-06-08 04:46 - 00000000 ____D C:\Users\Konishi\AppData\Roaming\Tibia
2016-02-23 11:53 - 2015-06-08 04:41 - 00000000 ____D C:\Program Files (x86)\Tibia
2016-02-22 17:53 - 2015-11-14 23:52 - 00000000 ____D C:\Program Files (x86)\Overwolf
2016-02-19 17:30 - 2014-08-18 20:27 - 00002210 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2016-02-18 14:46 - 2015-06-22 23:02 - 00000769 _____ C:\Users\Konishi\Desktop\test.txt
2016-02-18 07:57 - 2015-06-16 15:25 - 00002441 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk
2016-02-18 00:25 - 2016-01-13 04:42 - 00000000 ____D C:\Users\Konishi\Desktop\New folder (7)
2016-02-17 14:40 - 2015-03-04 04:43 - 00000000 ____D C:\Users\Konishi\AppData\Local\Battle.net
2016-02-17 14:28 - 2015-03-04 04:43 - 00000000 ____D C:\Program Files (x86)\Battle.net
2016-02-15 17:09 - 2015-05-12 06:43 - 00000000 ____D C:\Users\Konishi\AppData\Roaming\mIRC
2016-02-15 16:50 - 2014-07-27 04:21 - 00000000 ____D C:\Users\Konishi\AppData\Local\VirtualStore
2016-02-12 08:46 - 2014-07-27 09:09 - 00000000 ____D C:\Users\Konishi\AppData\Roaming\Skype
2016-02-12 08:44 - 2016-01-14 16:58 - 00000000 ____D C:\Program Files (x86)\UOS
2016-02-09 10:55 - 2015-11-11 03:46 - 00000000 ____D C:\Users\Konishi\AppData\Local\Overwolf
2016-02-07 01:15 - 2016-01-14 18:55 - 00000000 ____D C:\Users\Konishi\Desktop\euo
2016-02-01 22:21 - 2014-08-18 20:24 - 00003894 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2016-02-01 22:21 - 2014-08-18 20:24 - 00003642 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2016-01-30 22:48 - 2014-07-27 04:42 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2016-01-30 03:17 - 2015-02-17 17:19 - 00000000 ____D C:\Users\Konishi\Desktop\RPG
2016-01-27 21:26 - 2015-09-27 03:38 - 00003643 _____ C:\Users\Konishi\Desktop\RPG Sexta.txt
2016-01-27 21:05 - 2014-07-27 04:47 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2016-01-25 00:26 - 2014-07-27 09:34 - 00000000 ____D C:\Users\Konishi\Desktop\ppsspp
==================== Files in the root of some directories =======
2015-11-21 04:48 - 2015-11-21 04:48 - 0007597 _____ () C:\Users\Konishi\AppData\Local\Resmon.ResmonCfg
2016-02-08 11:24 - 2016-02-08 11:24 - 0000098 _____ () C:\ProgramData\Microsoft.SqlServer.Compact.400.32.bc
==================== Bamital & volsnap =================
(There is no automatic fix for files that do not pass verification.)
C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll
[2014-07-27 02:38] - [2015-10-03 19:15] - 1008640 ____A (Microsoft Corporation) 2C353B6CE0C8D03225CAA2AF33B68D79
C:\Windows\SysWOW64\User32.dll
[2014-07-27 02:38] - [2015-10-03 19:15] - 0833024 ____A (Microsoft Corporation) 861C4346F9281DC0380DE72C8D55D6BE
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\dnsapi.dll => File is digitally signed
C:\Windows\SysWOW64\dnsapi.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed
LastRegBack: 2016-02-07 23:54
==================== End of FRST.txt ============================
Ran by Konishi (administrator) on KONISHI-PC (24-02-2016 15:18:54)
Running from C:\Users\Konishi\Desktop
Loaded Profiles: Konishi (Available Profiles: Konishi)
Platform: Windows 7 Ultimate Service Pack 1 (X64) Language: English (United States)
Internet Explorer Version 11 (Default browser: Chrome)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool:
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(GAS Tecnologia) C:\Program Files (x86)\GbPlugin\gbpsv.exe
(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Sunbelt Software) C:\Program Files (x86)\Sunbelt Software\VIPRE\SBAMSvc.exe
(Sunbelt Software) C:\Program Files (x86)\Sunbelt Software\VIPRE\SBPIMSvc.exe
(GGS) C:\Users\Konishi\AppData\Local\THORN\Thorn.exe
(GGS) C:\Users\Konishi\AppData\Local\THORN\ThornHelper.exe
(GAS Tecnologia LTDA) C:\Program Files\Diebold\Warsaw\core.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(GAS Tecnologia LTDA) C:\Program Files\Diebold\Warsaw\core.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Sunbelt Software) C:\Program Files (x86)\Sunbelt Software\VIPRE\SBAMTray.exe
() C:\GIGABYTE FORCE\GIGABYTE FORCE.exe
(GAS Tecnologia) C:\Program Files (x86)\GbPlugin\gbpsv.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
==================== Registry (Whitelisted) ===========================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [SBRegRebootCleaner] => C:\Program Files (x86)\Sunbelt Software\VIPRE\SBRC.exe [197968 2011-05-11] (Sunbelt Software)
HKLM\...\Run: [Diebold - Warsaw] => C:\Program Files\Diebold\Warsaw\core.exe [847160 2015-02-13] (GAS Tecnologia LTDA)
HKLM-x32\...\Run: [SBAMTray] => C:\Program Files (x86)\Sunbelt Software\VIPRE\SBAMTray.exe [1353040 2011-05-11] (Sunbelt Software)
HKLM-x32\...\Run: [GMouse] => C:\GIGABYTE FORCE\GIGABYTE FORCE.EXE [1253376 2012-10-04] ()
Winlogon\Notify\ GbPluginBb: C:\Program Files (x86)\GbPlugin\gbieh.dll [2015-10-20] (Banco do Brasil)
HKU\S-1-5-21-1519485860-2903035351-2837986310-1000\...\Run: [DAEMON Tools Lite] => C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3696912 2014-03-04] (Disc Soft Ltd)
ShellExecuteHooks-x32: GbPluginObj Class - {E37CB5F0-51F5-4395-A808-5FA49E399F83} - C:\Program Files (x86)\GbPlugin\gbieh.dll [1945472 2015-10-20] (Banco do Brasil)
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1 192.168.1.1
Tcpip\..\Interfaces\{363960C9-CA6B-4BB1-8E41-AFFABA666BE0}: [DhcpNameServer] 7.254.254.254
Tcpip\..\Interfaces\{B56C9954-5873-414B-B39F-267B05C3B6F0}: [DhcpNameServer] 192.168.1.1 192.168.1.1
Internet Explorer:
==================
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=msnhome
HKU\S-1-5-21-1519485860-2903035351-2837986310-1000\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKU\S-1-5-21-1519485860-2903035351-2837986310-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://df.nexon.com
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17] (Microsoft Corp.)
BHO-x32: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17] (Microsoft Corp.)
BHO-x32: GbIehObj Class -> {C41A1C0E-EA6C-11D4-B1B8-444553540000} -> C:\Program Files (x86)\GbPlugin\gbieh.dll [2015-10-20] (Banco do Brasil)
FireFox:
========
FF ProfilePath: C:\Users\Konishi\AppData\Roaming\Mozilla\Firefox\Profiles\s1rehta2.default-1442513781816
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_20_0_0_286.dll [2016-01-24] ()
FF Plugin: @microsoft.com/GENUINE -> disabled [No File]
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_20_0_0_286.dll [2016-01-24] ()
FF Plugin-x32: @microsoft.com/GENUINE -> disabled [No File]
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3528.0331 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2014-03-31] (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.29.5\npGoogleUpdate3.dll [2016-02-01] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.29.5\npGoogleUpdate3.dll [2016-02-01] (Google Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2015-12-18] (Adobe Systems Inc.)
FF Plugin HKU\S-1-5-21-1519485860-2903035351-2837986310-1000: @neople.co.kr/NeopleGameInstaller -> C:\ProgramData\NeoplePlugin\npNeopleGameInstaller.dll [2014-08-16] ( )
FF Plugin HKU\S-1-5-21-1519485860-2903035351-2837986310-1000: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\Konishi\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll [2015-08-28] (Unity Technologies ApS)
FF Extension: Adblock Plus - C:\Users\Konishi\AppData\Roaming\Mozilla\Firefox\Profiles\s1rehta2.default-1442513781816\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2016-01-26]
FF HKU\S-1-5-21-1519485860-2903035351-2837986310-1000\...\Firefox\Extensions: [{87F8774F-B485-47E2-A755-A40A8A5E886C}] - C:\Users\Konishi\AppData\Local\GAS Tecnologia\GBBD\bb\xpi => not found
Chrome:
=======
CHR Plugin: (Widevine Content Decryption Module) - C:\Users\Konishi\AppData\Local\Google\Chrome\User Data\WidevineCDM\1.4.8.824\_platform_specific\win_x86\widevinecdmadapter.dll => No File
CHR Plugin: (Shockwave Flash) - C:\Program Files (x86)\Google\Chrome\Application\48.0.2564.116\PepperFlash\pepflashplayer.dll ()
CHR Profile: C:\Users\Konishi\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Docs) - C:\Users\Konishi\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-04-13]
CHR Extension: (Google Drive) - C:\Users\Konishi\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-10-21]
CHR Extension: (YouTube) - C:\Users\Konishi\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-09-24]
CHR Extension: (Google Search) - C:\Users\Konishi\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-10-27]
CHR Extension: (Documentos Google off-line) - C:\Users\Konishi\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2015-11-17]
CHR Extension: (AdBlock) - C:\Users\Konishi\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2016-02-15]
CHR Extension: (Pagamentos da Chrome Web Store) - C:\Users\Konishi\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-09-17]
CHR Extension: (Gmail) - C:\Users\Konishi\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-04-28]
==================== Services (Whitelisted) ========================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
S3 EvoSvc; C:\Program Files\Echobit\Evolve\EvoSvc.exe [1583488 2016-01-24] (Echobit LLC)
R2 GbpSv; C:\Program Files (x86)\GbPlugin\gbpsv.exe [593120 2015-09-22] (GAS Tecnologia)
S3 npggsvc; C:\Windows\SysWOW64\GameMon.des [3310176 2014-05-13] (INCA Internet Co., Ltd.)
S3 OverwolfUpdater; C:\Program Files (x86)\Overwolf\OverwolfUpdater.exe [1009904 2016-02-11] (Overwolf LTD)
R2 SBAMSvc; C:\Program Files (x86)\Sunbelt Software\VIPRE\SBAMSvc.exe [2804280 2011-05-11] (Sunbelt Software)
R2 SBPIMSvc; C:\Program Files (x86)\Sunbelt Software\VIPRE\SBPIMSvc.exe [181584 2011-05-11] (Sunbelt Software)
R2 Thorn; C:\Users\Konishi\AppData\Local\THORN\Thorn.exe [56824 2015-10-01] (GGS)
S3 TunngleService; C:\Program Files (x86)\Tunngle\TnglCtrl.exe [792016 2015-02-09] (Tunngle.net GmbH) [File not signed]
R2 Warsaw Technology; C:\Program Files\Diebold\Warsaw\core.exe [847160 2015-02-13] (GAS Tecnologia LTDA)
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)
===================== Drivers (Whitelisted) ==========================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
R3 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283064 2014-09-25] (Disc Soft Ltd)
S3 ebdrv; C:\Windows\system32\DRIVERS\evbda.sys [3286016 2009-06-10] (Broadcom Corporation)
R3 EvolveVirtualAdapter; C:\Windows\System32\DRIVERS\evolve.sys [21656 2014-07-27] (Echobit, LLC)
R1 gbpddfac; C:\Windows\System32\drivers\gbpddfac64.sys [28888 2016-02-24] (GAS Tecnologia)
R3 GBPRCM; C:\Program Files (x86)\GbPlugin\gbprcm64.sys [29912 2015-11-25] (GAS Tecnologia)
S3 Neo_VPN; C:\Windows\System32\DRIVERS\Neo_0036.sys [40704 2015-07-18] (SoftEther Corporation)
R2 sbapifs; C:\Windows\System32\DRIVERS\sbapifs.sys [72280 2011-05-11] (Sunbelt Software)
R1 SbFw; C:\Windows\System32\drivers\SbFw.sys [253528 2011-04-05] (Sunbelt Software, Inc.)
S3 SBFWIMCL; C:\Windows\System32\DRIVERS\sbfwim.sys [84568 2011-02-08] (Sunbelt Software, Inc.)
R3 SBFWIMCLMP; C:\Windows\System32\DRIVERS\SBFWIM.sys [84568 2011-02-08] (Sunbelt Software, Inc.)
S3 sbhips; C:\Windows\System32\drivers\sbhips.sys [60504 2011-04-05] (Sunbelt Software, Inc.)
R1 SBRE; C:\Windows\system32\drivers\SBREdrv.sys [55384 2011-04-29] (Sunbelt Software)
R1 SBRE; C:\Windows\SysWOW64\drivers\SBREdrv.sys [101720 2011-04-29] (Sunbelt Software)
R1 SbTis; C:\Windows\System32\drivers\sbtis.sys [94296 2011-04-05] (Sunbelt Software, Inc.)
S3 tap0901t; C:\Windows\System32\DRIVERS\tap0901t.sys [31232 2009-09-16] (Tunngle.net)
S3 Thetta; C:\Windows\System32\DRIVERS\Thetta64.sys [312536 2015-08-31] (Windows (R) Win 7 DDK provider)
U3 TrueSight; C:\Windows\System32\drivers\TrueSight.sys [35064 2015-06-02] ()
R3 Warsaw_PP; C:\Program Files (x86)\GbPlugin\wsftprp64.sys [24792 2015-11-25] (GAS Tecnologia LTDA)
S3 EagleX64; \??\C:\Windows\system32\drivers\EagleX64.sys [X]
S0 gbpddreg; system32\drivers\gbpddreg64.sys [X]
S3 xhunter1; \??\C:\Windows\xhunter1.sys [X]
==================== NetSvcs (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
==================== One Month Created files and folders ========
(If an entry is included in the fixlist, the file/folder will be moved.)
2016-02-24 15:18 - 2016-02-24 15:19 - 00011711 _____ C:\Users\Konishi\Desktop\FRST.txt
2016-02-24 15:02 - 2016-02-24 15:03 - 00268960 _____ C:\Windows\system32\FNTCACHE.DAT
2016-02-24 14:54 - 2016-02-24 15:18 - 00000000 ____D C:\FRST
2016-02-24 14:53 - 2016-02-24 14:53 - 02371072 _____ (Farbar) C:\Users\Konishi\Desktop\FRST64.exe
2016-02-24 14:50 - 2016-02-24 15:08 - 00058800 _____ C:\Users\Konishi\AppData\Local\GDIPFONTCACHEV1.DAT
2016-02-24 14:31 - 2016-02-24 14:32 - 06837784 _____ (Piriform Ltd) C:\Users\Konishi\Downloads\ccsetup515.exe
2016-02-23 01:43 - 2016-02-23 01:48 - 00000000 ____D C:\Users\Konishi\Downloads\Better.Call.Saul.S02E02.HDTV.x264-KILLERS[rarbg]
2016-02-22 18:00 - 2016-02-22 18:00 - 00355826 _____ C:\Users\Konishi\Downloads\FichaDnD5.pdf
2016-02-22 17:11 - 2016-02-24 15:07 - 00000000 ____D C:\Users\Konishi\Desktop\New folder (4)
2016-02-22 02:51 - 2016-02-22 02:52 - 00000000 ____D C:\Users\Konishi\Downloads\Kill la Kill
2016-02-19 14:53 - 2016-02-19 14:58 - 00000000 ____D C:\Users\Konishi\Downloads\The.Blacklist.S03E15.720p.HDTV.x264-AVS[rarbg]
2016-02-18 22:51 - 2016-02-18 22:51 - 00000000 ____D C:\Users\Konishi\Desktop\New folder
2016-02-18 18:01 - 2016-02-18 18:03 - 00000000 ____D C:\Users\Konishi\Desktop\ePSXe200
2016-02-18 16:04 - 2016-02-20 02:45 - 00000000 ____D C:\Users\Konishi\AppData\Local\Teeching Feeling
2016-02-18 15:58 - 2016-02-18 16:06 - 730390479 ____R C:\Users\Konishi\Downloads\[HorribleSubs] Assassination Classroom S2 - 07 [1080p].mkv
2016-02-18 14:46 - 2016-02-18 14:52 - 547891453 _____ C:\Users\Konishi\Downloads\[HorribleSubs] Boku dake ga Inai Machi - 07 [1080p].mkv
2016-02-18 00:46 - 2016-02-18 00:46 - 00000000 ____D C:\Users\Konishi\Documents\Miconisomi
2016-02-17 15:19 - 2016-02-17 15:19 - 00000000 ____D C:\Users\Konishi\Desktop\Darkest
2016-02-16 18:23 - 2016-02-16 18:28 - 00000000 ____D C:\Users\Konishi\Documents\SEGA Mega Drive Classics
2016-02-16 11:22 - 2016-02-16 11:22 - 00000000 ____D C:\Users\Konishi\Documents\Square Enix
2016-02-16 07:53 - 2016-02-18 09:39 - 00000000 ____D C:\Users\Konishi\Downloads\Better.Call.Saul.S02E01.720p.HDTV.x264-AVS[rarbg]
2016-02-15 14:54 - 2016-02-15 14:54 - 00389036 _____ C:\Users\Konishi\Downloads\minisuka.tv-Photo-2004.txt
2016-02-15 12:29 - 2016-02-16 07:53 - 00000000 ____D C:\Users\Konishi\Downloads\The.Blacklist.S03E14.720p.HDTV.x264-AVS[rarbg]
2016-02-14 12:00 - 2016-02-14 12:00 - 00000000 ____D C:\Users\Konishi\AppData\LocalLow\CampoSanto
2016-02-13 13:02 - 2016-02-13 13:07 - 772805486 ____R C:\Users\Konishi\Downloads\[HorribleSubs] Dagashi Kashi - 05 [1080p].mkv
2016-02-11 15:32 - 2016-02-11 15:41 - 737864166 _____ C:\Users\Konishi\Downloads\[HorribleSubs] Assassination Classroom S2 - 06 [1080p].mkv
2016-02-11 15:32 - 2016-02-11 15:38 - 548280019 _____ C:\Users\Konishi\Downloads\[HorribleSubs] Boku dake ga Inai Machi - 06 [1080p].mkv
2016-02-11 14:48 - 2016-02-11 14:52 - 574915547 _____ C:\Users\Konishi\Downloads\[HorribleSubs] Gintama - 309 [1080p].mkv
2016-02-10 21:20 - 2016-02-10 21:20 - 00085867 _____ C:\Users\Konishi\Downloads\autoload.sc
2016-02-09 17:46 - 2016-02-09 17:46 - 06650718 _____ C:\Users\Konishi\Downloads\Book Of Challenges.pdf
2016-02-09 15:16 - 2016-02-09 15:35 - 00000000 ____D C:\Users\Konishi\Desktop\Hope Sound
2016-02-09 13:12 - 2016-02-09 13:12 - 00000000 ____D C:\Users\Konishi\AppData\LocalLow\Microids
2016-02-08 11:24 - 2016-02-22 14:08 - 00000000 ____D C:\Users\Konishi\AppData\Local\HearthstoneTracker
2016-02-08 11:24 - 2016-02-08 11:24 - 00000098 _____ C:\ProgramData\Microsoft.SqlServer.Compact.400.32.bc
2016-02-06 21:20 - 2016-01-16 14:02 - 00000000 ____D C:\Users\Konishi\Desktop\Antenna
2016-02-05 08:03 - 2016-02-05 08:10 - 771822279 ____R C:\Users\Konishi\Downloads\[HorribleSubs] Dagashi Kashi - 04 [1080p].mkv
2016-02-05 08:03 - 2016-02-05 08:09 - 548051313 _____ C:\Users\Konishi\Downloads\[HorribleSubs] Boku dake ga Inai Machi - 05 [1080p].mkv
2016-02-05 08:02 - 2016-02-05 08:12 - 739822474 ____R C:\Users\Konishi\Downloads\[HorribleSubs] Assassination Classroom S2 - 05 [1080p].mkv
2016-02-01 13:38 - 2016-02-01 13:39 - 65497711 _____ C:\Users\Konishi\Downloads\[Blaze077] One Punch Man BD - OVA 02 [480p].mp4
2016-02-01 13:12 - 2016-02-01 13:12 - 00023115 _____ C:\Users\Konishi\Downloads\[DeadFish] One Punch Man- Road to Hero - OVA [DVD][576p][AAC].mp4.torrent
2016-01-31 16:48 - 2016-02-08 21:39 - 00093662 _____ C:\Users\Konishi\Desktop\autoload.sc
2016-01-30 23:09 - 2016-02-12 21:04 - 00000000 ____D C:\Users\Konishi\Desktop\Injection_09_08_2015
2016-01-30 22:52 - 2016-01-30 22:52 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\EA Games
2016-01-30 03:13 - 2016-01-30 03:13 - 00001284 _____ C:\Users\Konishi\Desktop\Client - Shortcut.lnk
2016-01-30 02:56 - 2016-01-30 22:48 - 00000000 ____D C:\Program Files (x86)\EA Games
2016-01-29 15:21 - 2016-01-29 15:25 - 357516477 ____R C:\Users\Konishi\Downloads\[Mori] Dagashi Kashi - 04 [1767DF66].mkv
2016-01-29 13:05 - 2016-01-29 13:11 - 736592362 ____R C:\Users\Konishi\Downloads\[HorribleSubs] Assassination Classroom S2 - 04 [1080p].mkv
2016-01-29 13:05 - 2016-01-29 13:10 - 547914491 ____R C:\Users\Konishi\Downloads\[HorribleSubs] Boku dake ga Inai Machi - 04 [1080p].mkv
2016-01-28 23:02 - 2016-01-28 23:02 - 00000000 ____D C:\Users\Konishi\Documents\League of Legends
2016-01-26 22:28 - 2016-02-22 16:29 - 00000000 ____D C:\Users\Konishi\Desktop\New folder (2)
2016-01-26 22:01 - 2016-01-26 22:07 - 37271741 _____ C:\Users\Konishi\Desktop\Dark Forest 1.2.exe
2016-01-26 09:36 - 2016-01-27 21:05 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
==================== One Month Modified files and folders ========
(If an entry is included in the fixlist, the file/folder will be moved.)
2016-02-24 15:08 - 2014-08-16 14:40 - 00705474 _____ C:\Windows\system32\prfh0416.dat
2016-02-24 15:08 - 2014-08-16 14:40 - 00420018 _____ C:\Windows\system32\perfh012.dat
2016-02-24 15:08 - 2014-08-16 14:40 - 00147314 _____ C:\Windows\system32\prfc0416.dat
2016-02-24 15:08 - 2014-08-16 14:40 - 00120042 _____ C:\Windows\system32\perfc012.dat
2016-02-24 15:08 - 2009-07-14 02:13 - 02174476 _____ C:\Windows\system32\PerfStringBackup.INI
2016-02-24 15:08 - 2009-07-14 00:20 - 00000000 ____D C:\Windows\inf
2016-02-24 15:03 - 2015-10-20 03:00 - 00000000 ____D C:\Users\Konishi\AppData\Local\THORN
2016-02-24 15:03 - 2015-09-16 05:28 - 00028888 _____ (GAS Tecnologia) C:\Windows\system32\Drivers\gbpddfac64.sys
2016-02-24 15:03 - 2014-11-17 12:43 - 00000000 ____D C:\Program Files (x86)\GbPlugin
2016-02-24 15:03 - 2014-08-18 20:24 - 00000894 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2016-02-24 15:03 - 2009-07-14 02:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2016-02-24 15:02 - 2014-07-27 21:32 - 00000000 ____D C:\Users\Konishi\AppData\Roaming\uTorrent
2016-02-24 15:02 - 2009-07-14 01:45 - 00010320 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2016-02-24 15:02 - 2009-07-14 01:45 - 00010320 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2016-02-24 14:54 - 2014-07-27 21:56 - 00000000 ____D C:\Users\Konishi\AppData\Roaming\vlc
2016-02-24 14:48 - 2015-05-22 13:06 - 00000000 ____D C:\Users\Konishi\Desktop\Trash
2016-02-24 14:45 - 2015-09-18 15:00 - 00000000 ____D C:\Users\Konishi\AppData\LocalLow\uTorrent
2016-02-24 14:43 - 2014-09-25 11:22 - 00000000 ____D C:\Users\Konishi\AppData\Roaming\DAEMON Tools Lite
2016-02-24 14:43 - 2014-07-27 02:35 - 00000000 ____D C:\Program Files (x86)\Steam
2016-02-24 14:41 - 2015-06-04 00:35 - 00000000 ____D C:\Users\Konishi\AppData\Local\CrashDumps
2016-02-24 14:40 - 2015-06-01 13:55 - 00000822 _____ C:\Users\Public\Desktop\CCleaner.lnk
2016-02-24 14:26 - 2014-08-18 20:24 - 00000898 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2016-02-24 13:26 - 2015-06-02 17:58 - 00113880 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2016-02-23 22:16 - 2014-09-12 18:10 - 00000000 ____D C:\Users\Konishi\AppData\Roaming\dvdcss
2016-02-23 14:36 - 2015-06-08 04:46 - 00000000 ____D C:\Users\Konishi\AppData\Roaming\Tibia
2016-02-23 11:53 - 2015-06-08 04:41 - 00000000 ____D C:\Program Files (x86)\Tibia
2016-02-22 17:53 - 2015-11-14 23:52 - 00000000 ____D C:\Program Files (x86)\Overwolf
2016-02-19 17:30 - 2014-08-18 20:27 - 00002210 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2016-02-18 14:46 - 2015-06-22 23:02 - 00000769 _____ C:\Users\Konishi\Desktop\test.txt
2016-02-18 07:57 - 2015-06-16 15:25 - 00002441 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk
2016-02-18 00:25 - 2016-01-13 04:42 - 00000000 ____D C:\Users\Konishi\Desktop\New folder (7)
2016-02-17 14:40 - 2015-03-04 04:43 - 00000000 ____D C:\Users\Konishi\AppData\Local\Battle.net
2016-02-17 14:28 - 2015-03-04 04:43 - 00000000 ____D C:\Program Files (x86)\Battle.net
2016-02-15 17:09 - 2015-05-12 06:43 - 00000000 ____D C:\Users\Konishi\AppData\Roaming\mIRC
2016-02-15 16:50 - 2014-07-27 04:21 - 00000000 ____D C:\Users\Konishi\AppData\Local\VirtualStore
2016-02-12 08:46 - 2014-07-27 09:09 - 00000000 ____D C:\Users\Konishi\AppData\Roaming\Skype
2016-02-12 08:44 - 2016-01-14 16:58 - 00000000 ____D C:\Program Files (x86)\UOS
2016-02-09 10:55 - 2015-11-11 03:46 - 00000000 ____D C:\Users\Konishi\AppData\Local\Overwolf
2016-02-07 01:15 - 2016-01-14 18:55 - 00000000 ____D C:\Users\Konishi\Desktop\euo
2016-02-01 22:21 - 2014-08-18 20:24 - 00003894 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2016-02-01 22:21 - 2014-08-18 20:24 - 00003642 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2016-01-30 22:48 - 2014-07-27 04:42 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2016-01-30 03:17 - 2015-02-17 17:19 - 00000000 ____D C:\Users\Konishi\Desktop\RPG
2016-01-27 21:26 - 2015-09-27 03:38 - 00003643 _____ C:\Users\Konishi\Desktop\RPG Sexta.txt
2016-01-27 21:05 - 2014-07-27 04:47 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2016-01-25 00:26 - 2014-07-27 09:34 - 00000000 ____D C:\Users\Konishi\Desktop\ppsspp
==================== Files in the root of some directories =======
2015-11-21 04:48 - 2015-11-21 04:48 - 0007597 _____ () C:\Users\Konishi\AppData\Local\Resmon.ResmonCfg
2016-02-08 11:24 - 2016-02-08 11:24 - 0000098 _____ () C:\ProgramData\Microsoft.SqlServer.Compact.400.32.bc
==================== Bamital & volsnap =================
(There is no automatic fix for files that do not pass verification.)
C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll
[2014-07-27 02:38] - [2015-10-03 19:15] - 1008640 ____A (Microsoft Corporation) 2C353B6CE0C8D03225CAA2AF33B68D79
C:\Windows\SysWOW64\User32.dll
[2014-07-27 02:38] - [2015-10-03 19:15] - 0833024 ____A (Microsoft Corporation) 861C4346F9281DC0380DE72C8D55D6BE
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\dnsapi.dll => File is digitally signed
C:\Windows\SysWOW64\dnsapi.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed
LastRegBack: 2016-02-07 23:54
==================== End of FRST.txt ============================