cjoint

Publicité


Publicité

Format du document : text/plain

Prévisualisation

Resultado da Correção pela Farbar Recovery Scan Tool (x64) Versão:09-01-2015
Executado por Áleson (2016-01-13 18:27:02) Run:3
Executando a partir de C:\Users\Áleson\Desktop
Perfis Carregados: Áleson (Perfis Disponíveis: Áleson)
Modo da Inicialização: Normal
==============================================

fixlist Conteúdo:
*****************
tart
CloseProcesses:
(Navigation Co., Ltd.) C:\Users\Áleson\AppData\Roaming\ntsvc\ntsvc.exe
() C:\Program Files\MegaDownloader\MegaDownloader.exe
() C:\Program Files (x86)\Common Files\AVG Secure Search\
() C:\ProgramData\AVG Secure Search\
() C:\WINDOWS\system32\drivers\avgtpx64.sys
focus booster (HKLM-x32\...\com.focusboosterapp.focusbooster.air) (Version: 1.3.2 - UNKNOWN)
focus booster (x32 Version: 1.3.2 - UNKNOWN) Hidden
Startup: C:\Users\Áleson\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Correção da Ativação.lnk [2015-07-14]
Winsock: Catalog5 09 C:\ProgramData\System32\SafeGuard32.dll Nenhum Arquivo
Winsock: Catalog5-x64 09 C:\ProgramData\System32\SafeGuard64.dll Nenhum Arquivo
FF NewTab: hxxp://www.seekmix.com/?bd=nt&oem=ntsvc&uid=ST9750423AS_5WS32PX1XXXX5WS32PX1&version=2.3.0.10992&pid=414031160&tid=705
CHR Extension: (IDM Integration Module) - C:\Users\Áleson\AppData\Local\Google\Chrome\User Data\Default\Extensions\ngpampappnmepgilojfohadhhmbhlaek [2015-10-24]
R1 avgtp; C:\WINDOWS\system32\drivers\avgtpx64.sys [50464 2014-04-28] (AVG Technologies)
S1 gbpddfac; system32\drivers\gbpddfac64.sys [X]
2016-01-12 20:36 - 2014-06-01 22:55 - 00000000 ____D C:\Program Files\KMSpico
2016-01-12 20:36 - 2014-05-07 08:24 - 00000000 ____D C:\Users\Áleson\AppData\Local\31731
2016-01-09 19:45 - 2014-03-30 17:52 - 00871936 ___SH C:\Users\Áleson\Thumbs.db
2016-01-09 01:49 - 2014-08-28 01:55 - 00146432 ___SH C:\Users\Áleson\Documents\Thumbs.db
2015-12-05 15:00 - 2015-12-05 15:00 - 0000000 _____ () C:\Users\Áleson\AppData\Local\{B5D010D4-1156-4222-8FA8-1BDF7862729E}
2015-08-19 18:08 - 2015-08-19 18:08 - 00452608 _____ () C:\Users\Áleson\AppData\Roaming\Mactowebise\explorerEx64.dll
FirewallRules: [{DC961890-E9F7-4E19-8387-8151DEF22445}] => (Allow) C:\Program Files\KMSpico\Service_KMS.exe
FirewallRules: [{E5675594-B31F-41A6-808A-54E89FCA334B}] => (Allow) C:\Program Files\KMSpico\Service_KMS.exe
FirewallRules: [{3B6E24B1-2B7C-4976-B0CA-3E94E3499BA6}] => (Allow) C:\Program Files\KMSpico\AutoPico.exe
FirewallRules: [{4E6317AC-6570-452A-851F-E61D351B9A42}] => (Allow) C:\Program Files\KMSpico\AutoPico.exe
Task: {6BC2F8BA-BE5D-4261-B674-EC7A9091148E} - System32\Tasks\AutoPico Daily Restart => C:\Program Files\KMSpico\AutoPico.exe
Task: {CC3AFA12-4323-4B2C-A298-144A8C6A7A19} - System32\Tasks\AdobeAAMUpdater-1.0-Pc-Aleson-Áleson => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2013-03-21] (Adobe Systems Incorporated)
CMD: dir /a "C:\Program Files"
CMD: dir /a "C:\Program Files (x86)"
CMD: dir /a C:\ProgramData
Reg: reg delete "HKLM\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg" /f
Reg: reg add "HKLM\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg" /f
Reg: reg delete HKLM\SOFTWARE\Policies\Microsoft\Windows\IPSec\Policy\Local /f
Reg: reg add HKLM\SOFTWARE\Policies\Microsoft\Windows\IPSec\Policy\Local /f
CreateRestorePoint:
RemoveProxy:
EmptyTemp:
Reboot:
end
*****************

tart => Erro: Nenhuma correção automática foi encontrada para esta entrada.
Processos fechados com sucesso.
C:\Users\Áleson\AppData\Roaming\ntsvc\ntsvc.exe => Não foi encontrado em execução o processo
C:\Program Files\MegaDownloader\MegaDownloader.exe => Não foi encontrado em execução o processo
C:\Program Files (x86)\Common Files\AVG Secure Search\ => Não foi encontrado em execução o processo
C:\ProgramData\AVG Secure Search\ => Não foi encontrado em execução o processo
C:\WINDOWS\system32\drivers\avgtpx64.sys => Não foi encontrado em execução o processo
focus booster (HKLM-x32\...\com.focusboosterapp.focusbooster.air) (Version: 1.3.2 - UNKNOWN) => Erro: Nenhuma correção automática foi encontrada para esta entrada.
HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\com.focusboosterapp.focusbooster.air\\SystemComponent => valor não encontrado (a).
C:\Users\Áleson\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Correção da Ativação.lnk => movido com sucesso
"HKLM\SYSTEM\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries\000000000009" => chave removido (a) com sucesso.
"HKLM\SYSTEM\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000009" => chave removido (a) com sucesso.
Firefox "newtab" removido (a) com sucesso.
C:\Users\Áleson\AppData\Local\Google\Chrome\User Data\Default\Extensions\ngpampappnmepgilojfohadhhmbhlaek => movido com sucesso
avgtp => Não foi possível finalizar o serviço.
avgtp => serviço removido (a) com sucesso.
gbpddfac => serviço removido (a) com sucesso.
C:\Program Files\KMSpico => movido com sucesso
C:\Users\Áleson\AppData\Local\31731 => movido com sucesso
C:\Users\Áleson\Thumbs.db => movido com sucesso
C:\Users\Áleson\Documents\Thumbs.db => movido com sucesso
C:\Users\Áleson\AppData\Local\{B5D010D4-1156-4222-8FA8-1BDF7862729E} => movido com sucesso
C:\Users\Áleson\AppData\Roaming\Mactowebise\explorerEx64.dll => movido com sucesso
HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{DC961890-E9F7-4E19-8387-8151DEF22445} => valor removido (a) com sucesso.
HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{E5675594-B31F-41A6-808A-54E89FCA334B} => valor removido (a) com sucesso.
HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{3B6E24B1-2B7C-4976-B0CA-3E94E3499BA6} => valor removido (a) com sucesso.
HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{4E6317AC-6570-452A-851F-E61D351B9A42} => valor removido (a) com sucesso.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{6BC2F8BA-BE5D-4261-B674-EC7A9091148E}" => chave removido (a) com sucesso.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{6BC2F8BA-BE5D-4261-B674-EC7A9091148E}" => chave removido (a) com sucesso.
C:\WINDOWS\System32\Tasks\AutoPico Daily Restart => movido com sucesso
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\AutoPico Daily Restart" => chave removido (a) com sucesso.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{CC3AFA12-4323-4B2C-A298-144A8C6A7A19}" => chave removido (a) com sucesso.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{CC3AFA12-4323-4B2C-A298-144A8C6A7A19}" => chave removido (a) com sucesso.
C:\WINDOWS\System32\Tasks\AdobeAAMUpdater-1.0-Pc-Aleson-Áleson => movido com sucesso
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\AdobeAAMUpdater-1.0-Pc-Aleson-Áleson" => chave removido (a) com sucesso.

========= dir /a "C:\Program Files" =========

O volume na unidade C � Windows
O N�mero de S�rie do Volume � 3414-5879

Pasta de C:\Program Files

13/01/2016 18:27 .
13/01/2016 18:27 ..
08/04/2014 09:26 Adobe
03/12/2013 20:00 Arquivos Comuns [C:\Program Files\Common Files]
03/12/2013 21:04 Bonjour
17/09/2015 17:52 Canon
26/06/2015 20:43 CanonBJ
14/02/2014 00:54 CCleaner
09/04/2014 09:57 Common Files
09/04/2014 09:54 Corel
26/07/2012 05:11 174 desktop.ini
07/12/2014 18:14 Icaros
25/04/2014 19:04 Intel
11/04/2014 17:46 Internet Explorer
26/07/2015 16:19 iPod
26/07/2015 16:20 iTunes
01/10/2015 22:19 Java
01/11/2015 10:31 MediaInfo
15/08/2015 17:44 MegaDownloader
03/12/2013 20:29 Microsoft Analysis Services
03/12/2013 20:30 Microsoft Office
03/12/2013 20:30 Microsoft SQL Server
03/12/2013 20:31 Microsoft.NET
03/08/2015 22:15 MPC-HC
03/12/2013 21:15 MSBuild
24/08/2015 22:25 Neat Video for Sony Vegas
25/04/2014 17:41 Realtek
15/12/2015 20:35 Recuva
03/12/2013 21:15 Reference Assemblies
18/02/2014 18:02 Sony
26/07/2012 04:22 Uninstall Information
07/12/2014 16:13 VideoLAN
22/05/2015 23:48 VS Revo Group
08/04/2014 17:22 Windows Defender
07/04/2014 10:33 Windows Journal
26/07/2012 07:32 Windows Mail
08/04/2014 17:23 Windows Media Player
26/07/2012 05:13 Windows Multimedia Platform
03/12/2013 20:00 Windows NT
08/04/2014 17:16 Windows Photo Viewer
26/07/2012 05:13 Windows Portable Devices
07/05/2014 23:47 Windows Sidebar
25/11/2015 21:14 WindowsApps
18/11/2014 08:46 WinHTTrack
07/12/2013 13:55 WinRAR
1 arquivo(s) 174 bytes
44 pasta(s) 42.132.836.352 bytes dispon�veis

========= Fim de CMD: =========


========= dir /a "C:\Program Files (x86)" =========

O volume na unidade C � Windows
O N�mero de S�rie do Volume � 3414-5879

Pasta de C:\Program Files (x86)

12/01/2016 20:36 .
12/01/2016 20:36 ..
09/02/2014 18:57 7-Zip
09/04/2015 23:37 Adobe
29/07/2014 23:20 AIMP3
14/02/2014 22:29 Alcohol Soft
03/12/2013 21:05 Apple Software Update
19/06/2012 12:37 AviSynth 2.6
11/04/2014 08:31 Baidu Security
12/03/2014 23:39 Barnes & Noble
13/01/2014 16:38 BlueStacks
03/12/2013 21:04 Bonjour
20/11/2015 23:35 Cabri
17/09/2015 18:04 Canon
27/07/2015 18:36 ClockworkMod
28/02/2014 02:19 CloneDVD
17/03/2015 21:53 CodeBlocks
09/01/2016 00:58 Common Files
16/02/2015 22:58 Criar
26/07/2012 05:11 174 desktop.ini
25/08/2014 01:39 Dicion�rio de Sin�nimos -completo-
06/12/2013 19:20 dihav
05/12/2014 23:25 DsNET Corp
06/03/2014 21:00 DVD Shrink
02/03/2015 22:44 DVDFab 9
25/12/2014 10:35 DVDFab Media Player 2
12/01/2016 02:41 eRightSoft
21/09/2015 01:50 FastStone Image Viewer
06/04/2014 18:06 focus booster
30/10/2014 16:55 Freemake
08/06/2015 19:46 FreeTime
17/10/2015 00:02 GbPlugin
30/03/2015 20:58 GeoGebra 5.0
22/12/2015 11:16 Google
03/12/2013 20:30 Guitar Pro 6
03/03/2015 21:59 GUM1247.tmp
03/03/2015 23:14 GUM37CC.tmp
03/03/2015 22:30 GUMB079.tmp
19/02/2015 01:09 Imagenomic
26/04/2014 07:48 iMind Map
13/07/2014 01:32 Inkscape
09/01/2016 10:58 Innovative Solutions
17/11/2015 20:45 InstallShield Installation Information
29/05/2014 19:32 Intel
13/01/2016 17:27 Internet Download Manager
04/09/2014 22:17 Internet Explorer
25/02/2015 22:14 ITools
26/07/2015 16:19 iTunes
17/02/2015 17:19 JDownloader 2
05/11/2015 20:35 JetBrains
20/02/2015 23:56 Jumpstart
20/03/2015 22:17 MediaMonkey
03/12/2013 20:29 Microsoft Analysis Services
03/12/2013 20:29 Microsoft Office
06/04/2014 16:17 Microsoft OneDrive
03/12/2013 20:31 Microsoft SQL Server
03/12/2013 20:31 Microsoft.NET
14/06/2015 23:19 Mozilla Firefox
28/04/2014 23:20 3.757 Mozilla Firefoxsafeguard-secure-search.xml
22/07/2015 08:20 Mozilla Maintenance Service
31/03/2015 20:07 Mozilla Thunderbird
03/12/2013 21:16 MSBuild
03/12/2013 20:47 MSXML 4.0
27/10/2015 23:23 NewBlue
04/10/2015 17:08 PC Metronome
26/06/2014 19:28 PCSX2 0.9.8
16/05/2014 22:32 PDF Architect 2
16/05/2014 21:35 PDFCreator
11/04/2014 20:08 PhotoScape
10/04/2014 17:34 Positivo
27/10/2015 21:14 Positivo Inform�tica
15/02/2014 09:43 Protect Software ProtectBURN Video
15/02/2014 09:41 QuickTime
25/04/2014 17:35 Realtek
03/12/2013 21:16 Reference Assemblies
03/12/2013 22:43 RkSoft
04/12/2013 19:58 RocketDock
17/10/2015 00:04 Skype
12/01/2016 20:39 SkypeUpdateEx
25/04/2014 10:55 SlimDrivers
23/04/2014 09:37 SmartDoctor
29/06/2015 12:55 Sony
14/02/2014 09:47 Sony Setup
13/03/2014 01:08 Stardock
08/01/2016 13:37 TeamViewer
25/04/2014 17:42 Temp
23/08/2015 11:32 ThinkSky
09/01/2014 12:35 UltraISO
22/07/2014 20:05 Ultralingua
17/02/2015 16:46 Vitamin D Video
22/05/2015 23:53 VS Revo Group
08/08/2014 08:59 VSO
01/06/2014 22:54 Windows 8 - 8.1 KMS Activator Ultimate 2014 v1.5.1
08/04/2014 17:22 Windows Defender
26/07/2012 07:32 Windows Mail
08/04/2014 17:23 Windows Media Player
26/07/2012 05:13 Windows Multimedia Platform
26/07/2012 05:12 Windows NT
08/04/2014 17:16 Windows Photo Viewer
26/07/2012 05:13 Windows Portable Devices
07/05/2014 23:47 Windows Sidebar
18/10/2014 18:31 WinPcap
06/12/2013 20:05 WinRAR
09/12/2013 13:36 Winstep
14/04/2014 23:04 Zero G Registry
2 arquivo(s) 3.931 bytes
103 pasta(s) 42.132.836.352 bytes dispon�veis

========= Fim de CMD: =========


========= dir /a C:\ProgramData =========

O volume na unidade C � Windows
O N�mero de S�rie do Volume � 3414-5879

Pasta de C:\ProgramData

11/01/2016 00:49 .
11/01/2016 00:49 ..
26/07/2015 16:19 34BE82C4-E596-4e99-A191-52C6199EBF69
04/04/2014 17:24 4shared Desktop
09/04/2014 00:41 a2364d90ccac753b
05/02/2015 20:25 Adobe
12/04/2014 19:21 Advanced Chemistry Development
04/04/2014 23:39 Apple
03/12/2013 21:05 Apple Computer
26/07/2012 04:22 Application Data [C:\ProgramData]
18/10/2014 18:15 ashampoo
20/02/2015 23:56 Atheros
29/07/2015 02:17 Autodesk
11/05/2014 13:59 Baidu Security
13/01/2014 16:39 BlueStacks
13/01/2014 18:11 BlueStacksSetup
08/04/2014 18:03 boost_interprocess
07/07/2015 16:13 Canon IJ Network Tool
26/06/2015 20:43 CanonBJ
26/06/2015 21:31 CanonIJEGV
26/06/2015 20:35 CanonIJETV
26/06/2015 21:00 CanonIJQuickMenu
26/06/2015 21:17 CanonIJScan
17/09/2015 17:58 CanonIJWSpt
01/11/2015 10:56 clone.AD
09/04/2014 10:23 Corel
09/04/2014 09:59 CorelDRAW Graphics Suite X7 x64
03/12/2013 20:00 Dados de Aplicativos [C:\ProgramData]
05/12/2014 23:13 DatacardService
26/07/2012 04:22 Desktop [C:\Users\Public\Desktop]
03/12/2013 20:00 Documentos [C:\Users\Public\Documents]
26/07/2012 04:22 Documents [C:\Users\Public\Documents]
25/04/2014 17:41 0 DP45977C.lfl
08/08/2014 00:18 DVD Shrink
04/08/2015 14:34 eSellerate
10/04/2014 18:30 GAS Tecnologia
05/10/2015 19:22 GbPlugin
03/12/2013 20:32 Guitar Pro 6
23/05/2015 00:16 IDM
09/04/2014 00:39 InstallMate
10/12/2015 01:29 Intel
29/05/2014 19:31 Intel(R) Update Manager
19/04/2014 00:21 IsolatedStorage
09/01/2016 12:57 Kaspersky Lab Setup Files
11/04/2014 09:17 Log
16/08/2014 19:28 McAfee
20/03/2015 22:16 MediaMonkey
03/12/2013 20:00 Menu Iniciar [C:\ProgramData\Microsoft\Windows\Start Menu]
09/01/2016 03:29 Microsoft
03/12/2013 20:32 Microsoft Help
06/04/2014 16:16 Microsoft OneDrive
03/12/2013 20:00 Modelos [C:\ProgramData\Microsoft\Windows\Templates]
07/04/2014 01:44 Mozilla
14/02/2014 22:47 mpDRM
16/02/2015 23:09 Nero
11/01/2016 00:49 8 ntuser.pol
01/10/2015 22:19 Oracle
09/04/2014 09:57 Package Cache
16/05/2014 21:35 PDF Architect 2
12/03/2014 17:19 Positivo Inform�tica
03/12/2013 20:04 PRICache
09/04/2014 10:17 Protexis64
08/04/2014 09:26 regid.1986-12.com.adobe
03/12/2013 20:31 regid.1991-06.com.microsoft
23/06/2015 17:39 Skype
02/08/2014 18:27 Sony
29/06/2015 12:55 Sony Corporation
09/12/2013 13:47 Stardock
26/07/2012 04:22 Start Menu [C:\ProgramData\Microsoft\Windows\Start Menu]
24/04/2014 23:05 Sun
12/01/2016 23:54 System32
21/02/2015 00:25 TamoSoft
25/09/2015 09:15 Temp
26/07/2012 04:22 Templates [C:\ProgramData\Microsoft\Windows\Templates]
22/07/2014 20:05 Ultralingua7
22/05/2015 23:48 VS Revo Group
01/11/2015 13:50 VSO
24/06/2014 17:47 vsosdk
03/03/2015 23:06 Wondershare
2 arquivo(s) 8 bytes
77 pasta(s) 42.132.832.256 bytes dispon�veis

========= Fim de CMD: =========


========= reg delete "HKLM\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg" /f =========

ERRO: O sistema nÆo p“de localizar a chave do Registro ou valor especificado.


========= Fim de Reg: =========


========= reg add "HKLM\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg" /f =========

A opera‡Æo foi conclu¡da com ˆxito.


========= Fim de Reg: =========


========= reg delete HKLM\SOFTWARE\Policies\Microsoft\Windows\IPSec\Policy\Local /f =========

A opera‡Æo foi conclu¡da com ˆxito.


========= Fim de Reg: =========


========= reg add HKLM\SOFTWARE\Policies\Microsoft\Windows\IPSec\Policy\Local /f =========

A opera‡Æo foi conclu¡da com ˆxito.


========= Fim de Reg: =========

Ponto de Restauração criado com sucesso.

========= RemoveProxy: =========

HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\DefaultConnectionSettings => valor removido (a) com sucesso.
HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\SavedLegacySettings => valor removido (a) com sucesso.
HKU\S-1-5-21-3432586907-597726681-3595710473-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\DefaultConnectionSettings => valor removido (a) com sucesso.
HKU\S-1-5-21-3432586907-597726681-3595710473-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\SavedLegacySettings => valor removido (a) com sucesso.


========= Fim de RemoveProxy: =========

EmptyTemp: => 1.2 GB de dados temporários Removidos.


O sistema precisou ser reiniciado.

==== Fim de Fixlog 18:27:44 ====

Publicité


Signaler le contenu de ce document

Publicité