For the 3rd time my Pc seems to be infected [Solved]

Fix result of Farbar Recovery Scan Tool (x64) Version: 12-09-2016
Ran by [removed] (14-09-2016 20:10:32) Run:3
Running from C:\Users\[removed]\Desktop
[removed] Boot Mode: Normal
==============================================

fixlist content:
*****************
Start
CloseProcesses:
CreateRestorePoint:
C:\Users\Rafael Sobreiro\AppData\Local\Google
EmptyTemp:
End
*****************

Processes closed successfully.
Restore point was successfully created.
C:\Users\Rafael Sobreiro\AppData\Local\Google => moved successfully

=========== EmptyTemp: ==========

BITS transfer queue => 9108507 B
DOMStore, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 13912757 B
Java, Flash, Steam htmlcache => 2054 B
Windows/system/drivers => 33578 B
Edge => 0 B
Chrome => 0 B
Firefox => 379673643 B
Opera => 0 B

Temp, IE cache, history, cookies, recent:
Default => 0 B
ProgramData => 0 B
Public => 0 B
systemprofile => 0 B
systemprofile32 => 128 B
LocalService => 0 B
NetworkService => -550 B
Rafael Sobreiro => 50256632 B

RecycleBin => 0 B
EmptyTemp: => 432 MB temporary data Removed.

================================


The system needed a reboot.

==== End of Fixlog 20:10:40 ====

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 12-09-2016
Ran by [removed] (administrator) on LAPTOP-8E1TS1M5 (14-09-2016 21:07:12)
Running from C:\Users\[removed]\Desktop
[removed] Platform: Windows 10 Home (X64) Language: Português (Portugal)
Internet Explorer Version 11 (Default browser: FF)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Intel Corporation) C:\Windows\System32\igfxCUIService.exe
(Windows (R) Win 7 DDK provider) C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\AdminService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
(Seiko Epson Corporation) C:\Windows\System32\escsvc64.exe
(Vodafone) C:\Program Files (x86)\Vodafone\Vodafone Mobile Broadband\Bin\VmbService.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MsMpEng.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe
(Acer Incorporated) C:\Program Files (x86)\Acer\AOP Framework\CCDMonitorService.exe
() C:\Program Files\AVAST Software\SecureLine\vpnsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\NisSrv.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Intel Corporation) C:\Windows\System32\igfxEM.exe
(Intel Corporation) C:\Windows\System32\igfxHK.exe
() C:\Windows\System32\igfxTray.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(Acer Incorporated) C:\Program Files\Acer\Acer Quick Access\QASvc.exe
(Acer Incorporated) C:\Program Files\Acer\Acer Quick Access\QALSvc.exe
(Acer Incorporated) C:\Program Files\Acer\Acer Quick Access\QAAgent.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MpCmdRun.exe
(Acer Incorporated) C:\Program Files\Acer\Acer Quick Access\QALockHandler.exe
(Acer Incorporated) C:\Program Files\Acer\Acer Quick Access\QAAdminAgent.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Vodafone) C:\Program Files (x86)\Vodafone\Vodafone Mobile Broadband\Bin\MobileBroadband.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Vodafone) C:\Program Files (x86)\Vodafone\Vodafone Mobile Wi-Fi\Launcher.exe
(SEIKO EPSON CORPORATION) C:\Program Files (x86)\EPSON Software\Event Manager\EEventManager.exe
(Acer Incorporated) C:\Program Files\Acer\Acer Power Management\ePowerSvc.exe
(Acer Incorporated) C:\Program Files\Acer\Acer Power Management\ePowerTray.exe
(Intel Corporation) C:\Windows\System32\igfxext.exe
(Acer Incorporated) C:\Program Files\Acer\Acer Power Management\ePowerEvent.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.6004.42261.0_x64__8wekyb3d8bbwe\HxMail.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.6004.42261.0_x64__8wekyb3d8bbwe\HxTsr.exe
(Acer Incorporated) C:\Program Files (x86)\Acer\AOP Framework\BackgroundAgent.exe
(Acer) C:\Program Files (x86)\Acer\Acer Portal\AcerPortal.exe
(AVAST Software) C:\Program Files\AVAST Software\SecureLine\secureline.exe
(Acer Cloud Technology) C:\Program Files (x86)\Acer\AOP Framework\acer\ccd.exe
() C:\Program Files (x86)\Acer\Care Center\ACCStd.exe
(Acer Incorporated) C:\Program Files\Acer\Acer Power Management\ePowerButton_NB.exe
(acer) C:\Program Files\Acer\User Experience Improvement Program\Framework\UBTService.exe
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_22_0_0_209.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_22_0_0_209.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Security Assist\isa.exe


==================== Registry (Whitelisted) ===========================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\…\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [14040792 2015-07-06] (Realtek Semiconductor)
HKLM\…\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2397120 2016-06-14] (NVIDIA Corporation)
HKLM\…\Run: [ShadowPlay] => C:\Windows\system32\nvspcap64.dll [1767944 2016-06-14] (NVIDIA Corporation)
HKLM-x32\…\Run: [MobileBroadband] => C:\Program Files (x86)\Vodafone\Vodafone Mobile Broadband\Bin\MobileBroadband.exe [69632 2012-03-20] (Vodafone)
HKLM-x32\…\Run: [SunJavaUpdateSched] => "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
HKLM-x32\…\Run: [VodafoneMobileWiFi] => C:\Program Files (x86)\Vodafone\Vodafone Mobile Wi-Fi\Launcher.exe [145920 2014-03-11] (Vodafone)
HKLM-x32\…\Run: [EEventManager] => C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe [1087184 2016-01-20] (SEIKO EPSON CORPORATION)
HKU\S-1-5-21-1796416936-1353488523-4272779061-1001\…\RunOnce: [Uninstall C:\Users\Rafael Sobreiro\AppData\Local\Microsoft\OneDrive\17.3.5892.0626\amd64] => C:\Windows\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Rafael Sobreiro\AppData\Local\Microsoft\OneDrive\17.3.5892.0626\amd64"
HKU\S-1-5-21-1796416936-1353488523-4272779061-1001\…\RunOnce: [Uninstall C:\Users\Rafael Sobreiro\AppData\Local\Microsoft\OneDrive\17.3.5892.0626] => C:\Windows\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Rafael Sobreiro\AppData\Local\Microsoft\OneDrive\17.3.5892.0626"
HKU\S-1-5-21-1796416936-1353488523-4272779061-1001\…\RunOnce: [Uninstall C:\Users\Rafael Sobreiro\AppData\Local\Microsoft\OneDrive\17.3.6390.0509\amd64] => C:\Windows\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Rafael Sobreiro\AppData\Local\Microsoft\OneDrive\17.3.6390.0509\amd64"
HKU\S-1-5-21-1796416936-1353488523-4272779061-1001\…\RunOnce: [Uninstall C:\Users\Rafael Sobreiro\AppData\Local\Microsoft\OneDrive\17.3.6390.0509] => C:\Windows\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Rafael Sobreiro\AppData\Local\Microsoft\OneDrive\17.3.6390.0509"
HKU\S-1-5-21-1796416936-1353488523-4272779061-1001\…\MountPoints2: {41aa1307-5d8b-11e6-9be6-54ab3a2c2168} - "E:\setup_vmb_lite.exe" /checkApplicationPresence
HKU\S-1-5-21-1796416936-1353488523-4272779061-1001\…\MountPoints2: {e34076f6-5e42-11e6-9be8-54ab3a2c2168} - "D:\setup_vmb_lite.exe" /checkApplicationPresence
HKU\S-1-5-21-1796416936-1353488523-4272779061-1001\…\MountPoints2: {e623694c-5e12-11e6-9be7-54ab3a2c2168} - "D:\SetupWi-Fi.exe"
HKU\S-1-5-21-1796416936-1353488523-4272779061-1001\…\MountPoints2: {f130394a-4c8e-11e6-9bcd-3052cb5e098b} - "D:\setup_vmb_lite.exe" /checkApplicationPresence
HKU\S-1-5-21-1796416936-1353488523-4272779061-1001\…\MountPoints2: {f1303a4b-4c8e-11e6-9bcd-3052cb5e098b} - "D:\setup_vmb_lite.exe" /checkApplicationPresence
ShellIconOverlayIdentifiers: [ ACloudSynced] -> {5CCE71FA-9F61-4F24-9CD1-98D819B40D68} => C:\Program Files (x86)\Acer\shellext\x64\shellext_win.dll [2016-06-27] (Acer Incorporated)
ShellIconOverlayIdentifiers: [ ACloudSyncing] -> {C1E1456F-C2D8-4C96-870D-35F1E13941EE} => C:\Program Files (x86)\Acer\shellext\x64\shellext_win.dll [2016-06-27] (Acer Incorporated)
ShellIconOverlayIdentifiers: [ ACloudToBeSynced] -> {307523FA-DDC0-4068-983F-2A6B34627744} => C:\Program Files (x86)\Acer\shellext\x64\shellext_win.dll [2016-06-27] (Acer Incorporated)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Tcpip\Parameters: [DhcpNameServer] [removed]
Tcpip\..\Interfaces\{1e8e9d5e-2b9c-4bf6-a51b-ef48487b130e}: [DhcpNameServer] [removed]
Tcpip\..\Interfaces\{2b7bdd77-99c4-428f-ae3d-281d34bf9c0b}: [NameServer] 87.103.113.145 87.103.113.177
Tcpip\..\Interfaces\{2b7bdd77-99c4-428f-ae3d-281d34bf9c0b}: [DhcpNameServer] [removed] [removed]
Tcpip\..\Interfaces\{8834f845-ecd9-43d2-a855-73fe734e0741}: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{ae3a38cb-4f1d-46c8-9663-cf415c79f774}: [NameServer] 87.103.113.145 87.103.113.177
ManualProxies:

Internet Explorer:
==================
HKU\S-1-5-21-1796416936-1353488523-4272779061-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://acer15.msn.com/?pc=ACTE
HKU\S-1-5-21-1796416936-1353488523-4272779061-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://acer15.msn.com/?pc=ACTE
BHO-x32: Java™ Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_101\bin\ssv.dll [2016-07-20] (Oracle Corporation)
BHO-x32: Java™ Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_101\bin\jp2ssv.dll [2016-07-20] (Oracle Corporation)

FireFox:
========
FF ProfilePath: C:\Users\Rafael Sobreiro\AppData\Roaming\Mozilla\Firefox\Profiles\iz0nvtgx.default
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_22_0_0_209.dll [2016-07-18] ()
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_22_0_0_209.dll [2016-07-18] ()
FF Plugin-x32: @foxitsoftware.com/Foxit PhantomPDF Plugin,version=1.0,application/pdf -> C:\Program Files (x86)\Foxit PhantomPDF\plugins\npFoxitPhantomPDFPlugin.dll [2014-10-20] (Foxit Corporation)
FF Plugin-x32: @foxitsoftware.com/Foxit PhantomPDF Plugin,version=1.0,application/vnd.fdf -> C:\Program Files (x86)\Foxit PhantomPDF\plugins\npFoxitPhantomPDFPlugin.dll [2014-10-20] (Foxit Corporation)
FF Plugin-x32: @foxitsoftware.com/Foxit PhantomPDF Plugin,version=1.0,application/vnd.xdp -> C:\Program Files (x86)\Foxit PhantomPDF\plugins\npFoxitPhantomPDFPlugin.dll [2014-10-20] (Foxit Corporation)
FF Plugin-x32: @foxitsoftware.com/Foxit PhantomPDF Plugin,version=1.0,application/vnd.xfdf -> C:\Program Files (x86)\Foxit PhantomPDF\plugins\npFoxitPhantomPDFPlugin.dll [2014-10-20] (Foxit Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.68 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2015-04-21] (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2015-04-21] (Intel Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=11.101.2 -> C:\Program Files (x86)\Java\jre1.8.0_101\bin\dtplugin\npDeployJava1.dll [2016-07-20] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.101.2 -> C:\Program Files (x86)\Java\jre1.8.0_101\bin\plugin2\npjp2.dll [2016-07-20] (Oracle Corporation)
FF Plugin-x32: @WildTangent.com/GamesAppPresenceDetector,Version=1.0 -> C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\0\NP_wtapp.dll [2016-05-23] ()
FF Extension: (Ad-Aware Ad Block) - C:\Users\Rafael Sobreiro\AppData\Roaming\Mozilla\Firefox\Profiles\iz0nvtgx.default\Extensions\[removed] [2016-09-14]
FF Extension: (Firefox Hotfix) - C:\Users\Rafael Sobreiro\AppData\Roaming\Mozilla\Firefox\Profiles\iz0nvtgx.default\Extensions\[removed] [2016-08-31]
FF Extension: (Português (Portugal) Language Pack) - C:\Users\Rafael Sobreiro\AppData\Roaming\Mozilla\Firefox\Profiles\iz0nvtgx.default\Extensions\[removed] [2016-09-13]

==================== Services (Whitelisted) ========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 AtherosSvc; C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\adminservice.exe [315472 2015-07-20] (Windows (R) Win 7 DDK provider)
R2 CCDMonitorService; C:\Program Files (x86)\Acer\AOP Framework\CCDMonitorService.exe [2267352 2016-08-15] (Acer Incorporated)
S3 cplspcon; C:\Windows\system32\IntelCpHDCPSvc.exe [588904 2015-08-18] ()
R3 ePowerSvc; C:\Program Files\Acer\Acer Power Management\ePowerSvc.exe [2573568 2015-05-14] (Acer Incorporated)
R2 EpsonScanSvc; C:\Windows\system32\EscSvc64.exe [144560 2012-05-17] (Seiko Epson Corporation)
S2 GamesAppIntegrationService; C:\Program Files (x86)\WildTangent Games\App\GamesAppIntegrationService.exe [350064 2016-05-23] (WildTangent)
R2 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [1163712 2016-06-14] (NVIDIA Corporation)
R2 igfxCUIService2.0.0.0; C:\Windows\system32\igfxCUIService.exe [350312 2015-08-18] (Intel Corporation)
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [881152 2015-05-22] (Intel(R) Corporation)
R3 Intel(R) Security Assist; C:\Program Files (x86)\Intel\Intel(R) Security Assist\isa.exe [335872 2015-05-19] (Intel Corporation) [File not signed]
S2 isaHelperSvc; C:\Program Files (x86)\Intel\Intel(R) Security Assist\isaHelperService.exe [7680 2015-05-19] () [File not signed]
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [207648 2015-08-14] (Intel Corporation)
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1879488 2016-06-14] (NVIDIA Corporation)
R3 NvStreamNetworkSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe [3632576 2016-06-14] (NVIDIA Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe [2521024 2016-06-14] (NVIDIA Corporation)
R3 QALSvc; C:\Program Files\Acer\Acer Quick Access\QALSvc.exe [401248 2015-09-04] (Acer Incorporated)
R3 QASvc; C:\Program Files\Acer\Acer Quick Access\QASvc.exe [453984 2015-09-04] (Acer Incorporated)
R2 SecureLine; C:\Program Files\AVAST Software\SecureLine\VpnSvc.exe [592392 2016-07-17] ()
R3 UEIPSvc; C:\Program Files\Acer\User Experience Improvement Program\Framework\UBTService.exe [247040 2015-05-27] (acer)
R2 VmbService; C:\Program Files (x86)\Vodafone\Vodafone Mobile Broadband\Bin\VmbService.exe [8704 2012-03-20] (Vodafone) [File not signed]
S3 vmicvss; C:\Windows\System32\ICSvc.dll [506880 2015-07-10] (Microsoft Corporation)
R3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [362928 2015-07-10] (Microsoft Corporation)
R2 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [24856 2016-08-03] (Microsoft Corporation)
S2 InstallerService; "C:\Program Files\TrueKey\Mcafee.TrueKey.InstallerService.exe" [X]
S2 mccspsvc; "C:\Program Files\Common Files\McAfee\CSP\1.5.471.0\McCSPServiceHost.exe" [X]

===================== Drivers (Whitelisted) ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S3 huawei_wwanecm; C:\Windows\System32\drivers\ew_juwwanecm.sys [227840 2012-03-16] (Huawei Technologies Co., Ltd.)
R3 iaLPSS2_I2C; C:\Windows\System32\drivers\iaLPSS2_I2C.sys [185128 2015-06-16] (Intel Corporation)
R3 LMDriver; C:\Windows\System32\drivers\LMDriver.sys [21344 2015-09-04] (Acer Incorporated)
S3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [192216 2016-08-24] (Malwarebytes)
R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [26560 2016-06-14] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\Windows\system32\drivers\nvvad64v.sys [56384 2016-04-14] (NVIDIA Corporation)
S3 Qcamain; C:\Windows\System32\drivers\Qcamainx64.sys [2276352 2015-07-10] (Qualcomm Atheros, Inc.)
R3 Qcamain10x64; C:\Windows\system32\DRIVERS\Qcamain10x64.sys [2340240 2015-07-20] (Qualcomm Atheros, Inc.)
R3 RadioShim; C:\Windows\System32\drivers\RadioShim.sys [14688 2015-09-04] (Acer Incorporated)
R3 rt640x64; C:\Windows\System32\drivers\rt640x64.sys [895256 2015-06-05] (Realtek                                            )
R3 RTSUER; C:\Windows\system32\Drivers\RtsUer.sys [402136 2015-05-27] (Realsil Semiconductor Corporation)
R3 SGXEPC; C:\Windows\System32\drivers\sgx_driver.sys [54760 2016-07-22] (Windows (R) Win 7 DDK provider)
R3 SynRMIHID; C:\Windows\system32\DRIVERS\SynRMIHID.sys [47784 2015-07-29] (Synaptics Incorporated)
U3 TrueSight; C:\Windows\System32\drivers\TrueSight.sys [28272 2016-08-31] ()
S3 UdeCx; C:\Windows\System32\drivers\udecx.sys [44032 2015-07-10] ()
S0 WdBoot; C:\Windows\System32\drivers\WdBoot.sys [44568 2015-07-10] (Microsoft Corporation)
R0 WdFilter; C:\Windows\System32\drivers\WdFilter.sys [291680 2015-07-10] (Microsoft Corporation)
R2 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [119648 2015-07-10] (Microsoft Corporation)

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2016-09-14 20:14 - 2016-09-14 20:14 - 00016148 _____ C:\Windows\system32\LAPTOP-8E1TS1M5_Rafael Sobreiro_HistoryPrediction.bin
2016-09-13 21:55 - 2016-09-14 20:10 - 00001305 _____ C:\Users\Rafael Sobreiro\Desktop\Fixlog.txt
2016-09-13 21:20 - 2016-09-13 21:20 - 00005991 _____ C:\Users\Rafael Sobreiro\Downloads\LOL_OPGG_Observer_2840991359_spectate.bat
2016-09-13 20:26 - 2016-09-13 22:35 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2016-09-13 18:49 - 2016-09-13 19:00 - 00036119 _____ C:\Users\Rafael Sobreiro\Desktop\Addition.txt
2016-09-13 18:48 - 2016-09-14 21:07 - 00018029 _____ C:\Users\Rafael Sobreiro\Desktop\FRST.txt
2016-09-13 18:46 - 2016-09-14 21:06 - 00000000 ____D C:\FRST
2016-09-13 18:46 - 2016-09-13 18:46 - 02398720 _____ (Farbar) C:\Users\Rafael Sobreiro\Desktop\FRST64.exe
2016-09-10 01:06 - 2016-09-10 01:06 - 00000000 ____D C:\Users\Rafael Sobreiro\Desktop\PDF
2016-09-09 14:19 - 2016-09-09 14:19 - 00005988 _____ C:\Users\Rafael Sobreiro\Downloads\LOL_OPGG_Observer_2288487360_spectate.bat
2016-09-08 22:49 - 2016-09-08 22:49 - 00000000 ____D C:\Users\Rafael Sobreiro\Downloads\002 7 Audio
2016-09-08 18:21 - 2016-09-08 18:21 - 00005991 _____ C:\Users\Rafael Sobreiro\Downloads\LOL_OPGG_Observer_2833453605_spectate.bat
2016-09-08 18:16 - 2016-09-14 20:16 - 00000951 _____ C:\Windows\Tasks\EPSON XP-235 Series Update {AE01210B-99CB-43FA-9308-6C9A5E21D494}.job
2016-09-08 18:16 - 2016-09-08 18:16 - 00004148 _____ C:\Windows\System32\Tasks\EPSON XP-235 Series Update {AE01210B-99CB-43FA-9308-6C9A5E21D494}
2016-09-08 15:05 - 2016-09-08 15:08 - 82716613 _____ C:\Users\Rafael Sobreiro\Downloads\CC - Live at Reading & Leeds 2016.zip
2016-09-07 17:31 - 2016-09-07 17:31 - 00487807 _____ C:\Users\Rafael Sobreiro\Documents\E-Serviços%20ao%20Cidadão%20Académico.pdf.pdf
2016-09-07 17:30 - 2016-09-07 17:30 - 00316141 _____ C:\Users\Rafael Sobreiro\Documents\rptNotificacaoDocsEmFalta.pdf (2).pdf
2016-09-07 17:29 - 2016-09-07 17:29 - 00316141 _____ C:\Users\Rafael Sobreiro\Documents\rptNotificacaoDocsEmFalta.pdf.pdf
2016-09-07 17:29 - 2016-09-07 17:29 - 00316141 _____ C:\Users\Rafael Sobreiro\Documents\rptNotificacaoDocsEmFalta.pdf (1).pdf
2016-09-07 14:26 - 2016-09-07 14:26 - 00002265 _____ C:\Users\Rafael Sobreiro\Downloads\NotificacaoDocumentosEmFalta_20160907124604.PDF
2016-09-06 22:36 - 2016-09-06 22:36 - 00005991 _____ C:\Users\Rafael Sobreiro\Downloads\LOL_OPGG_Observer_2830996581_spectate.bat
2016-09-05 12:44 - 2016-09-08 20:20 - 00000000 ____D C:\Users\Rafael Sobreiro\AppData\Roaming\Epson
2016-09-05 12:36 - 2016-09-14 20:36 - 00000951 _____ C:\Windows\Tasks\EPSON XP-235 Series Update {FB326052-AA28-4F72-A12C-3129D03BA244}.job
2016-09-05 12:36 - 2016-09-05 12:36 - 00004148 _____ C:\Windows\System32\Tasks\EPSON XP-235 Series Update {FB326052-AA28-4F72-A12C-3129D03BA244}
2016-09-05 12:35 - 2016-09-14 20:35 - 00000951 _____ C:\Windows\Tasks\EPSON XP-235 Series Update {4E92EF8E-2792-4348-85C3-7979FE897D63}.job
2016-09-05 12:35 - 2016-09-05 12:35 - 00004148 _____ C:\Windows\System32\Tasks\EPSON XP-235 Series Update {4E92EF8E-2792-4348-85C3-7979FE897D63}
2016-09-05 12:35 - 2016-09-05 12:35 - 00000000 ____D C:\Program Files\Common Files\EPSON
2016-09-05 12:31 - 2016-09-05 12:31 - 00000000 ____D C:\Program Files\EpsonNet
2016-09-05 12:30 - 2016-09-05 12:43 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\EPSON Software
2016-09-05 12:30 - 2016-09-05 12:43 - 00000000 ____D C:\Program Files (x86)\EPSON Software
2016-09-05 12:30 - 2016-09-05 12:30 - 00001465 _____ C:\Users\Public\Desktop\Manuais EPSON.lnk
2016-09-05 12:30 - 2016-09-05 12:30 - 00000123 _____ C:\Users\Public\Desktop\Epson Connect Site.url
2016-09-05 12:29 - 2016-09-05 12:43 - 00000000 ____D C:\Program Files (x86)\epson
2016-09-05 12:29 - 2016-09-05 12:30 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\EPSON
2016-09-05 12:29 - 2016-09-05 12:29 - 00001011 _____ C:\Users\Public\Desktop\EPSON Scan.lnk
2016-09-05 12:29 - 2014-06-03 00:00 - 00472064 _____ (Seiko Epson Corporation) C:\Windows\system32\esxw2ud.dll
2016-09-05 12:29 - 2014-03-05 04:06 - 00180224 _____ (SEIKO EPSON CORPORATION) C:\Windows\system32\E_YLMBPFE.DLL
2016-09-05 12:29 - 2012-05-17 00:00 - 00144560 _____ (Seiko Epson Corporation) C:\Windows\system32\escsvc64.exe
2016-09-05 12:29 - 2011-03-15 03:03 - 00083968 _____ (SEIKO EPSON CORPORATION) C:\Windows\system32\E_YD4BPFE.DLL
2016-09-05 12:25 - 2016-09-05 12:35 - 00000000 ____D C:\ProgramData\Epson
2016-09-05 12:25 - 2016-09-05 12:25 - 08410048 _____ (SEIKO EPSON CORPORATION) C:\Users\Rafael Sobreiro\Downloads\Epson_XP-235_Series_EA_11_Web.EXE
2016-09-05 03:05 - 2016-09-05 03:05 - 00003460 _____ C:\Users\Rafael Sobreiro\AppData\Local\recently-used.xbel
2016-09-05 00:13 - 2016-09-05 00:13 - 00005991 _____ C:\Users\Rafael Sobreiro\Downloads\LOL_OPGG_Observer_2828683892_spectate.bat
2016-09-04 03:35 - 2016-09-04 03:36 - 00005991 _____ C:\Users\Rafael Sobreiro\Downloads\LOL_OPGG_Observer_2827215766_spectate.bat
2016-09-03 17:53 - 2016-09-03 17:53 - 00005991 _____ C:\Users\Rafael Sobreiro\Downloads\LOL_OPGG_Observer_2826330583_spectate.bat
2016-09-03 12:56 - 2016-09-03 12:56 - 00000000 ____D C:\Windows\%LOCALAPPDATA%
2016-09-03 02:49 - 2016-09-03 02:49 - 00005991 _____ C:\Users\Rafael Sobreiro\Downloads\LOL_OPGG_Observer_2825667539_spectate.bat
2016-09-03 02:32 - 2016-09-03 02:33 - 00005991 _____ C:\Users\Rafael Sobreiro\Downloads\LOL_OPGG_Observer_2825657785_spectate.bat
2016-09-02 19:43 - 2016-09-02 19:43 - 00410521 _____ C:\Users\Rafael Sobreiro\Desktop\E-Serviços ao Cidadão Académico.pdf
2016-09-02 16:25 - 2016-09-02 16:25 - 01065376 _____ (Google Inc.) C:\Users\Rafael Sobreiro\Downloads\ChromeSetup(2).exe
2016-09-02 12:17 - 2016-09-02 12:17 - 00146422 _____ C:\Users\Rafael Sobreiro\Downloads\comprovativo_244085892.pdf
2016-09-01 01:21 - 2016-09-01 01:21 - 00005991 _____ C:\Users\Rafael Sobreiro\Downloads\LOL_OPGG_Observer_2822735307_spectate.bat
2016-08-31 23:57 - 2016-08-31 23:57 - 00005991 _____ C:\Users\Rafael Sobreiro\Downloads\LOL_OPGG_Observer_2822693542_spectate (1).bat
2016-08-31 23:31 - 2016-08-31 23:31 - 00005991 _____ C:\Users\Rafael Sobreiro\Downloads\LOL_OPGG_Observer_2822693542_spectate.bat
2016-08-31 22:45 - 2016-08-31 22:46 - 00005991 _____ C:\Users\Rafael Sobreiro\Downloads\LOL_OPGG_Observer_2822626074_spectate.bat
2016-08-31 22:23 - 2016-08-31 22:23 - 00005991 _____ C:\Users\Rafael Sobreiro\Downloads\LOL_OPGG_Observer_2822560201_spectate.bat
2016-08-31 18:27 - 2016-08-31 18:28 - 00005991 _____ C:\Users\Rafael Sobreiro\Downloads\LOL_OPGG_Observer_2822179117_spectate.bat
2016-08-31 18:03 - 2016-08-31 18:03 - 00005991 _____ C:\Users\Rafael Sobreiro\Downloads\LOL_OPGG_Observer_2822187480_spectate.bat
2016-08-31 17:38 - 2016-08-31 17:38 - 00005991 _____ C:\Users\Rafael Sobreiro\Downloads\LOL_OPGG_Observer_2822171447_spectate.bat
2016-08-31 17:00 - 2016-08-31 17:00 - 00005991 _____ C:\Users\Rafael Sobreiro\Downloads\LOL_OPGG_Observer_2822036968_spectate.bat
2016-08-31 16:08 - 2016-08-31 16:09 - 01065376 _____ (Google Inc.) C:\Users\Rafael Sobreiro\Downloads\ChromeSetup (1).exe
2016-08-31 04:49 - 2016-08-31 04:49 - 00005991 _____ C:\Users\Rafael Sobreiro\Downloads\LOL_OPGG_Observer_2821299437_spectate (1).bat
2016-08-31 04:36 - 2016-08-31 04:36 - 00005991 _____ C:\Users\Rafael Sobreiro\Downloads\LOL_OPGG_Observer_2821299437_spectate.bat
2016-08-31 04:10 - 2016-08-31 04:11 - 00005991 _____ C:\Users\Rafael Sobreiro\Downloads\LOL_OPGG_Observer_2821299103_spectate.bat
2016-08-31 04:00 - 2016-08-31 04:00 - 00005991 _____ C:\Users\Rafael Sobreiro\Downloads\LOL_OPGG_Observer_2821289581_spectate.bat
2016-08-31 01:06 - 2016-06-14 21:01 - 00112216 _____ C:\Windows\system32\NvRtmpStreamer64.dll
2016-08-31 01:05 - 2016-04-14 06:38 - 00102976 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvaudcap32v.dll
2016-08-30 23:57 - 2016-08-30 23:59 - 31930936 _____ (Adlice Software ) C:\Users\Rafael Sobreiro\Desktop\setup (1).exe
2016-08-29 20:33 - 2016-08-29 20:34 - 00005991 _____ C:\Users\Rafael Sobreiro\Downloads\LOL_OPGG_Observer_2819425019_spectate.bat
2016-08-29 16:33 - 2016-08-29 16:33 - 00005991 _____ C:\Users\Rafael Sobreiro\Downloads\LOL_OPGG_Observer_2818659478_spectate.bat
2016-08-29 16:01 - 2016-08-29 16:01 - 00005991 _____ C:\Users\Rafael Sobreiro\Downloads\LOL_OPGG_Observer_2818655882_spectate.bat
2016-08-29 01:23 - 2016-08-29 01:23 - 00005991 _____ C:\Users\Rafael Sobreiro\Downloads\LOL_OPGG_Observer_2818191346_spectate.bat
2016-08-28 21:57 - 2016-08-28 21:58 - 00005994 _____ C:\Users\Rafael Sobreiro\Downloads\LOL_OPGG_Observer_2816732061_replay (1).bat
2016-08-28 21:14 - 2016-08-28 21:14 - 00005994 _____ C:\Users\Rafael Sobreiro\Downloads\LOL_OPGG_Observer_2816732061_replay.bat
2016-08-28 20:35 - 2016-08-28 20:35 - 00005991 _____ C:\Users\Rafael Sobreiro\Downloads\LOL_OPGG_Observer_2817808965_spectate.bat
2016-08-28 08:57 - 2016-08-28 08:58 - 00005991 _____ C:\Users\Rafael Sobreiro\Downloads\LOL_OPGG_Observer_2816734419_spectate.bat
2016-08-27 14:51 - 2016-08-27 14:51 - 00005991 _____ C:\Users\Rafael Sobreiro\Downloads\LOL_OPGG_Observer_2815579894_spectate.bat
2016-08-27 13:57 - 2016-08-27 13:59 - 129545180 _____ C:\Users\Rafael Sobreiro\Downloads\Crystal Castles Live @ Reading 2016.mp4
2016-08-25 21:53 - 2016-08-25 23:07 - 00000000 ____D C:\Users\Rafael Sobreiro\Desktop\X
2016-08-25 21:22 - 2016-08-25 21:34 - 00000000 ____D C:\Users\Rafael Sobreiro\Desktop\Omega Ruby
2016-08-25 20:56 - 2016-08-25 20:57 - 00005992 _____ C:\Users\Rafael Sobreiro\Downloads\LOL_OPGG_Observer_2270917110_replay (1).bat
2016-08-25 19:54 - 2016-08-25 19:54 - 00005991 _____ C:\Users\Rafael Sobreiro\Downloads\LOL_OPGG_Observer_2813287350_spectate.bat
2016-08-25 19:43 - 2016-08-25 19:43 - 00005991 _____ C:\Users\Rafael Sobreiro\Downloads\LOL_OPGG_Observer_2813281988_spectate.bat
2016-08-25 19:30 - 2016-08-25 19:30 - 00005991 _____ C:\Users\Rafael Sobreiro\Downloads\LOL_OPGG_Observer_2813245867_spectate.bat
2016-08-25 17:25 - 2016-08-25 17:25 - 00844597 _____ C:\Users\Rafael Sobreiro\Downloads\Forest Guardian Janna v1 (By Damonix).wxy
2016-08-25 15:41 - 2016-08-25 15:41 - 00005991 _____ C:\Users\Rafael Sobreiro\Downloads\LOL_OPGG_Observer_2812980127_spectate.bat
2016-08-25 15:02 - 2016-08-25 15:02 - 00005991 _____ C:\Users\Rafael Sobreiro\Downloads\LOL_OPGG_Observer_2812981339_spectate.bat
2016-08-25 14:51 - 2016-08-25 14:51 - 00005991 _____ C:\Users\Rafael Sobreiro\Downloads\LOL_OPGG_Observer_2812914913_spectate.bat
2016-08-25 13:23 - 2016-08-25 13:23 - 00005991 _____ C:\Users\Rafael Sobreiro\Downloads\LOL_OPGG_Observer_2812854945_spectate.bat
2016-08-25 12:31 - 2016-08-25 12:31 - 04914507 _____ C:\Users\Rafael Sobreiro\Downloads\Lime and Hot Pink v6.7 (By LoneOkami).wxy
2016-08-25 03:14 - 2016-08-25 03:15 - 00005991 _____ C:\Users\Rafael Sobreiro\Downloads\LOL_OPGG_Observer_2812218434_spectate.bat
2016-08-24 19:47 - 2016-08-24 19:47 - 00005991 _____ C:\Users\Rafael Sobreiro\Downloads\LOL_OPGG_Observer_2811841384_spectate.bat
2016-08-24 19:45 - 2016-08-24 19:45 - 00005991 _____ C:\Users\Rafael Sobreiro\Downloads\LOL_OPGG_Observer_2811816176_spectate.bat
2016-08-24 18:30 - 2016-08-24 18:30 - 01085539 _____ C:\Users\Rafael Sobreiro\Downloads\ChampionSkinList.jpeg
2016-08-20 22:08 - 2016-08-20 22:08 - 00005992 _____ C:\Users\Rafael Sobreiro\Downloads\LOL_OPGG_Observer_2270917110_replay.bat
2016-08-20 22:01 - 2016-08-20 22:01 - 00005992 _____ C:\Users\Rafael Sobreiro\Downloads\LOL_OPGG_Observer_2271703264_replay.bat
2016-08-19 23:04 - 2016-08-19 23:08 - 00000000 ____D C:\Users\Rafael Sobreiro\Desktop\Nova pasta
2016-08-18 13:51 - 2016-08-18 13:51 - 00005906 _____ C:\Users\Rafael Sobreiro\Downloads\LOL_OPGG_Observer_2268313055_replay (1).bat
2016-08-18 13:49 - 2016-08-18 13:49 - 00005902 _____ C:\Users\Rafael Sobreiro\Downloads\LOL_OPGG_Observer_2269849539_spectate (3).bat
2016-08-18 13:49 - 2016-08-18 13:49 - 00005902 _____ C:\Users\Rafael Sobreiro\Downloads\LOL_OPGG_Observer_2269849539_spectate (2).bat
2016-08-18 13:48 - 2016-08-18 13:48 - 00005902 _____ C:\Users\Rafael Sobreiro\Downloads\LOL_OPGG_Observer_2269849539_spectate (1).bat
2016-08-18 13:46 - 2016-08-18 13:47 - 00005902 _____ C:\Users\Rafael Sobreiro\Downloads\LOL_OPGG_Observer_2269849539_spectate.bat
2016-08-17 20:03 - 2016-08-17 20:04 - 00005920 _____ C:\Users\Rafael Sobreiro\Downloads\LOL_OPGG_Observer_2269331971_spectate.bat
2016-08-17 18:08 - 2016-08-17 18:08 - 00005920 _____ C:\Users\Rafael Sobreiro\Downloads\LOL_OPGG_Observer_2269294665_spectate.bat
2016-08-17 17:21 - 2016-08-17 17:22 - 00005920 _____ C:\Users\Rafael Sobreiro\Downloads\LOL_OPGG_Observer_2269282885_spectate.bat
2016-08-17 15:30 - 2016-08-17 16:56 - 00005920 _____ C:\Users\Rafael Sobreiro\Downloads\LOL_OPGG_Observer_2269207620_spectate.bat
2016-08-17 14:45 - 2016-08-17 14:46 - 00005920 _____ C:\Users\Rafael Sobreiro\Downloads\LOL_OPGG_Observer_2269225670_spectate.bat
2016-08-17 13:43 - 2016-08-17 13:43 - 00005920 _____ C:\Users\Rafael Sobreiro\Downloads\LOL_OPGG_Observer_2269224689_spectate.bat
2016-08-17 13:18 - 2016-08-17 13:52 - 106222323 _____ C:\Users\Rafael Sobreiro\Downloads\cc2016.rar
2016-08-16 22:41 - 2016-08-16 22:41 - 00005920 _____ C:\Users\Rafael Sobreiro\Downloads\LOL_OPGG_Observer_2268481313_spectate.bat
2016-08-16 22:03 - 2016-08-16 22:03 - 00005920 _____ C:\Users\Rafael Sobreiro\Downloads\LOL_OPGG_Observer_2268465687_spectate.bat
2016-08-16 21:30 - 2016-08-16 21:30 - 00005920 _____ C:\Users\Rafael Sobreiro\Downloads\LOL_OPGG_Observer_2268461836_spectate.bat
2016-08-16 20:34 - 2016-08-16 20:34 - 00005924 _____ C:\Users\Rafael Sobreiro\Downloads\LOL_OPGG_Observer_2268313055_replay.bat
2016-08-16 20:31 - 2016-08-16 20:32 - 00005924 _____ C:\Users\Rafael Sobreiro\Downloads\LOL_OPGG_Observer_2268247364_replay.bat
2016-08-16 13:39 - 2016-08-16 13:39 - 00003382 _____ C:\Windows\System32\Tasks\OneDrive Standalone Update Task
2016-08-16 13:08 - 2016-08-16 13:09 - 00005920 _____ C:\Users\Rafael Sobreiro\Downloads\LOL_OPGG_Observer_2268247364_spectate.bat
2016-08-16 12:23 - 2016-08-16 12:29 - 00005920 _____ C:\Users\Rafael Sobreiro\Downloads\LOL_OPGG_Observer_2268256266_spectate.bat
2016-08-15 14:38 - 2016-09-05 03:05 - 00000000 ____D C:\Users\Rafael Sobreiro\AppData\Local\gtk-2.0

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2016-09-14 21:03 - 2016-07-17 19:55 - 00000000 ____D C:\Users\Rafael Sobreiro\AppData\Roaming\Skype
2016-09-14 20:16 - 2016-07-17 20:04 - 00004204 _____ C:\Windows\System32\Tasks\User_Feed_Synchronization-{82888F8C-4B09-44AD-BA85-C62F95B6D1F6}
2016-09-14 20:14 - 2016-07-18 03:34 - 00000000 __SHD C:\Users\Rafael Sobreiro\IntelGraphicsProfiles
2016-09-14 20:14 - 2016-07-18 03:30 - 00000180 _____ C:\Windows\system32\{A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat
2016-09-14 20:12 - 2015-07-10 13:21 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2016-09-14 20:11 - 2015-07-10 10:05 - 00262144 ___SH C:\Windows\system32\config\BBI
2016-09-14 13:19 - 2015-07-10 12:04 - 00000000 ____D C:\Windows\AppReadiness
2016-09-14 04:48 - 2016-07-24 22:30 - 00000000 ____D C:\Users\Rafael Sobreiro\AppData\Roaming\Audacity
2016-09-14 04:18 - 2016-08-12 04:19 - 00000000 ____D C:\Users\Rafael Sobreiro\Desktop\azx
2016-09-14 03:41 - 2016-08-09 20:15 - 144199024 ____C (Microsoft Corporation) C:\Windows\system32\MRT.exe
2016-09-14 03:41 - 2016-08-09 20:15 - 00000000 ____D C:\Windows\system32\MRT
2016-09-14 03:36 - 2016-07-17 00:56 - 00000000 ___HD C:\$WINDOWS.~BT
2016-09-14 03:17 - 2015-08-31 12:45 - 00000000 ____D C:\Windows\Panther
2016-09-14 03:17 - 2015-07-10 11:55 - 00000000 ____D C:\Windows\CbsTemp
2016-09-13 22:35 - 2015-08-31 11:51 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2016-09-13 19:30 - 2016-07-17 18:55 - 00000000 ____D C:\Program Files (x86)\Google
2016-09-13 13:11 - 2015-07-10 12:04 - 00000000 ___HD C:\Program Files\WindowsApps
2016-09-13 13:07 - 2016-07-18 03:35 - 00000000 ____D C:\Users\Rafael Sobreiro\AppData\Local\Packages
2016-09-12 22:22 - 2015-07-10 12:04 - 00000000 ____D C:\Windows\system32\NDF
2016-09-12 15:55 - 2015-12-22 20:42 - 00795894 _____ C:\Windows\system32\prfh0816.dat
2016-09-12 15:55 - 2015-12-22 20:42 - 00156194 _____ C:\Windows\system32\prfc0816.dat
2016-09-12 15:55 - 2015-08-31 12:01 - 01827502 _____ C:\Windows\system32\PerfStringBackup.INI
2016-09-12 15:55 - 2015-07-10 12:02 - 00000000 ____D C:\Windows\INF
2016-09-12 03:06 - 2016-08-01 22:43 - 00000000 ____D C:\Users\Rafael Sobreiro\AppData\Local\CrashDumps
2016-09-09 18:25 - 2016-07-18 03:34 - 00000000 ____D C:\Users\Rafael Sobreiro
2016-09-09 14:44 - 2016-07-19 21:48 - 00000000 ____D C:\Users\Rafael Sobreiro\AppData\Roaming\Foxit Software
2016-09-08 14:54 - 2015-08-31 11:50 - 00004252 _____ C:\Windows\System32\Tasks\avast! SL Update
2016-09-07 02:02 - 2016-08-09 23:09 - 00828408 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2016-09-07 02:02 - 2016-08-09 23:09 - 00176632 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2016-09-05 17:14 - 2016-08-12 15:01 - 00000794 _____ C:\DelFix.txt
2016-09-05 12:43 - 2015-12-22 13:40 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2016-09-05 04:56 - 2016-08-13 21:38 - 00000000 ____D C:\Users\Rafael Sobreiro\.gimp-2.8
2016-09-04 16:04 - 2016-07-25 05:43 - 00000000 ____D C:\Wooxy
2016-08-31 15:57 - 2015-08-31 11:50 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
2016-08-31 15:57 - 2015-08-31 11:50 - 00000000 ____D C:\Program Files (x86)\WildGames
2016-08-31 01:06 - 2016-07-18 03:34 - 00000000 ____D C:\Users\Rafael Sobreiro\AppData\Local\NVIDIA Corporation
2016-08-31 01:06 - 2016-07-18 03:34 - 00000000 ____D C:\Users\Rafael Sobreiro\AppData\Local\NVIDIA
2016-08-31 01:06 - 2015-12-22 13:52 - 00000000 ____D C:\ProgramData\NVIDIA Corporation
2016-08-31 00:21 - 2016-08-11 02:53 - 00000000 ____D C:\Program Files\RogueKiller
2016-08-31 00:00 - 2016-08-11 02:54 - 00028272 _____ C:\Windows\system32\Drivers\TrueSight.sys
2016-08-31 00:00 - 2016-08-11 02:53 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\RogueKiller
2016-08-25 23:44 - 2016-07-19 03:43 - 00000000 ____D C:\Users\Rafael Sobreiro\AppData\Local\ElevatedDiagnostics
2016-08-24 23:58 - 2015-07-10 12:04 - 00000000 ____D C:\Windows\system32\WinBioDatabase
2016-08-24 11:36 - 2016-08-08 16:51 - 00192216 _____ (Malwarebytes) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2016-08-18 11:36 - 2016-07-19 04:05 - 00003508 _____ C:\Windows\System32\Tasks\BacKGroundAgent
2016-08-18 11:36 - 2015-08-31 12:43 - 00000000 ___HD C:\OEM
2016-08-18 11:36 - 2015-08-31 11:50 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acer
2016-08-18 11:34 - 2016-07-18 03:37 - 00000000 ____D C:\Users\Rafael Sobreiro\AppData\Local\clear.fi
2016-08-17 15:02 - 2016-07-17 19:55 - 00000000 ___RD C:\Program Files (x86)\Skype
2016-08-17 15:02 - 2016-07-17 19:55 - 00000000 ____D C:\ProgramData\Skype
2016-08-16 13:39 - 2016-07-18 03:38 - 00002401 _____ C:\Users\Rafael Sobreiro\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2016-08-16 13:39 - 2016-07-18 03:38 - 00000000 ___RD C:\Users\Rafael Sobreiro\OneDrive

==================== Files in the root of some directories =======

2016-09-05 03:05 - 2016-09-05 03:05 - 0003460 _____ () C:\Users\Rafael Sobreiro\AppData\Local\recently-used.xbel
2012-03-16 14:55 - 2012-03-16 14:55 - 0286678 ____R () C:\ProgramData\DeviceManager.xml.rc4
2015-12-22 13:42 - 2015-12-22 13:42 - 0000000 ____H () C:\ProgramData\DP45977C.lfl

==================== Bamital & volsnap =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\dnsapi.dll => File is digitally signed
C:\Windows\SysWOW64\dnsapi.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2016-09-08 23:18

==================== End of FRST.txt ============================