cjoint

Publicité


Publicité

Format du document : text/plain

Prévisualisation

Additional scan result of Farbar Recovery Scan Tool (x86) Version:27-02-2016
Ran by user (2016-03-01 13:09:07)
Running from C:\Users\user\Desktop
Microsoft Windows 7 Ultimate (X86) (2011-05-09 08:10:02)
Boot Mode: Normal
==========================================================


==================== Accounts: =============================

Administrator (S-1-5-21-3761744562-1818560080-4106710990-500 - Administrator - Disabled)
Guest (S-1-5-21-3761744562-1818560080-4106710990-501 - Limited - Enabled)
LogMeInRemoteUser (S-1-5-21-3761744562-1818560080-4106710990-1001 - Administrator - Enabled) => C:\Users\LogMeInRemoteUser
user (S-1-5-21-3761744562-1818560080-4106710990-1000 - Administrator - Enabled) => C:\Users\user

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: avast! Antivirus (Enabled - Out of date) {C37D8F93-0602-E43C-40AA-47DAD597F308}
AS: avast! Antivirus (Enabled - Out of date) {781C6E77-2038-EBB2-7A1A-7CA8AE10B9B5}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

Adobe Reader 8.1.0 - Português (HKLM\...\{AC76BA86-7AD7-1046-7B44-A81000000003}) (Version: 8.1.0 - Adobe Systems Incorporated)
Advanced SystemCare 8 (HKLM\...\Advanced SystemCare 8_is1) (Version: 8.0.3 - IObit)
avast! Free Antivirus (HKLM\...\avast5) (Version: 5.0.418.0 - Alwil Software)
Corel Graphics - Windows Shell Extension (HKLM\...\_{B865FDD4-E96E-4166-BB69-6E8C207E3E29}) (Version: 17.0.0.491 - Corel Corporation)
Corel Graphics - Windows Shell Extension (Version: 17.0.491 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X7 - BR (Version: 17.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X7 - Capture (Version: 17.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X7 - Common (Version: 17.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X7 - Connect (Version: 17.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X7 - Custom Data (Version: 17.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X7 - Draw (Version: 17.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X7 - Filters (Version: 17.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X7 - FontNav (Version: 17.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X7 - IPM Content (Version: 17.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X7 - IPM T (Version: 17.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X7 - PHOTO-PAINT (Version: 17.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X7 - Photozoom Plugin (Version: 17.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X7 - Redist (Version: 17.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X7 - Setup Files (Version: 17.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X7 - VBA (Version: 17.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X7 - VideoBrowser (Version: 17.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X7 - Writing Tools (Version: 17.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X7 (HKLM\...\_{C5D9CECB-A66F-473F-B406-5C8C2DCA4DF0}) (Version: 17.0.0.491 - Corel Corporation)
CorelDRAW Graphics Suite X7 (Version: 17.0 - Corel Corporation) Hidden
CutePDF Professional 3.73 (Evaluation) (HKLM\...\CutePDF Professional (Evaluation)_is1) (Version: 3.7.3.1 - Acro Software Inc.)
Desinstalar Impressora EPSON L355 Series (HKLM\...\EPSON L355 Series) (Version: - SEIKO EPSON Corporation)
EPSON Scan (HKLM\...\EPSON Scanner) (Version: - Seiko Epson Corporation)
Gemini InterBase ODBC Driver 2.1 (HKLM\...\Gemini InterBase ODBC Driver 2.1) (Version: 2.01.21.1 - Aleksey Karyakin)
Google Chrome (HKU\S-1-5-21-3761744562-1818560080-4106710990-1000\...\Google Chrome) (Version: 48.0.2564.116 - Google Inc.)
Google Drive (HKLM\...\{EF61675D-9BBC-4EC7-B906-F13BE8D3BD20}) (Version: 1.27.1227.2094 - Google, Inc.)
Google Update Helper (Version: 1.3.29.5 - Google Inc.) Hidden
HK-Software IBExpert Developer Studio Personal Version (HKLM\...\HK-Software IBExpert Developer Studio Personal Version_is1) (Version: - )
Intuictive 3.064 (HKLM\...\Intuictive_is1) (Version: - Intuictive Sistemas Ltda.)
IObit Uninstaller (HKLM\...\IObitUninstall) (Version: 4.1.5.24 - IObit)
LogMeIn (HKLM\...\{F099EA75-A298-4A13-93CB-D2446436B137}) (Version: 4.1.3888 - LogMeIn, Inc.)
Microsoft .NET Framework 4.5 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50709 - Microsoft Corporation)
Microsoft Office 2010 Service Pack 1 (SP1) (HKLM\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{047B0968-E622-4FAA-9B4B-121FA109EDDE}) (Version: - Microsoft)
Microsoft Office Professional Plus 2010 (HKLM\...\Office14.PROPLUS) (Version: 14.0.6029.1000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual Studio Tools for Applications 2012 (HKLM\...\{89ca2a32-2b52-4595-8dfd-6fe4757958d0}) (Version: 11.0.51108 - Microsoft Corporation)
Mozilla Firefox 44.0.2 (x86 pt-BR) (HKLM\...\Mozilla Firefox 44.0.2 (x86 pt-BR)) (Version: 44.0.2 - Mozilla)
Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 44.0.2 - Mozilla)
P.R. Vade-mécum 2006-2007 (HKLM\...\P.R. Vade-mécum 2006-2007) (Version: - )
Pacote de Idiomas do Microsoft .NET Framework 4.5 - Português (Brasil) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1046) (Version: 4.5.50709 - Microsoft Corporation)
Pacote de Idiomas do Microsoft Visual Studio Tools for Applications 2012 x86 Hosting Support - PTB (Version: 11.0.51108 - Microsoft Corporation) Hidden
Spotify (HKU\S-1-5-21-3761744562-1818560080-4106710990-1000\...\Spotify) (Version: 1.0.23.90.g42187855 - Spotify AB)
Spybot - Search & Destroy (HKLM\...\{B4092C6D-E886-4CB2-BA68-FE5A99D31DE7}_is1) (Version: 2.4.40 - Safer-Networking Ltd.)
TeamViewer 11 (HKLM\...\TeamViewer) (Version: 11.0.55321 - TeamViewer)
Trojan Remover 6.9.4.2943 (HKLM\...\Trojan Remover_is1) (Version: 6.9.4.2943 - Simply Super Software)
Validador Sintegra 5.3.0 (HKLM\...\{169CEB91-BD47-46C1-A0EA-7943B0E667DA}_is1) (Version: - Secretaria da Fazenda do Estado do Rio Grande do Sul)
Warsaw 1.11.1.24 32 bits (HKLM\...\{20E60725-16C8-4FB9-8BC2-AF92C5F8D06D}_is1) (Version: 1.11.1.24 - GAS Tecnologia)
Языковой пакет для поддержки размещения набора средств Microsoft Visual Studio Tools для работы с приложениями 2012 (x86) - RUS (Version: 11.0.51108 - Microsoft Corporation) Hidden

==================== Custom CLSID (Whitelisted): ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

CustomCLSID: HKU\S-1-5-21-3761744562-1818560080-4106710990-1000_Classes\CLSID\{022105BD-948A-40C9-AB42-A3300DDF097F}\localserver32 -> C:\Users\user\AppData\Local\Google\Update\GoogleUpdate.exe (Google Inc.)
CustomCLSID: HKU\S-1-5-21-3761744562-1818560080-4106710990-1000_Classes\CLSID\{034DF736-A378-4292-ACAE-A561088999F5}\InprocServer32 -> C:\Users\user\AppData\Local\PPTAssist\pptassist.dll (珠海金山办公软件有限公司)
CustomCLSID: HKU\S-1-5-21-3761744562-1818560080-4106710990-1000_Classes\CLSID\{1077138E-896C-445E-BD31-CFCFFA4636C4}\InprocServer32 -> C:\Users\user\AppData\Local\PPTAssist\pptassist.dll (珠海金山办公软件有限公司)
CustomCLSID: HKU\S-1-5-21-3761744562-1818560080-4106710990-1000_Classes\CLSID\{22181302-A8A6-4F84-A541-E5CBFC70CC43}\localserver32 -> C:\Users\user\AppData\Local\Google\Update\1.3.29.5\GoogleUpdateOnDemand.exe (Google Inc.)
CustomCLSID: HKU\S-1-5-21-3761744562-1818560080-4106710990-1000_Classes\CLSID\{2F0E2680-9FF5-43C0-B76E-114A56E93598}\localserver32 -> C:\Users\user\AppData\Local\Google\Update\1.3.29.5\GoogleUpdateOnDemand.exe (Google Inc.)
CustomCLSID: HKU\S-1-5-21-3761744562-1818560080-4106710990-1000_Classes\CLSID\{51F9E8EF-59D7-475B-A106-C7EA6F30C119}\localserver32 -> C:\Users\user\AppData\Local\Google\Update\1.3.29.5\GoogleUpdateOnDemand.exe (Google Inc.)
CustomCLSID: HKU\S-1-5-21-3761744562-1818560080-4106710990-1000_Classes\CLSID\{5C65F4B0-3651-4514-B207-D10CB699B14B}\localserver32 -> C:\Users\user\AppData\Local\Google\Chrome\Application\48.0.2564.116\delegate_execute.exe (Google Inc.)
CustomCLSID: HKU\S-1-5-21-3761744562-1818560080-4106710990-1000_Classes\CLSID\{793EE463-1304-471C-ADF1-68C2FFB01247}\InprocServer32 -> C:\Users\user\AppData\Local\Google\Update\1.3.29.5\psuser.dll (Google Inc.)
CustomCLSID: HKU\S-1-5-21-3761744562-1818560080-4106710990-1000_Classes\CLSID\{C3101A8B-0EE1-4612-BFE9-41FFC1A3C19D}\InprocServer32 -> C:\Users\user\AppData\Local\Google\Update\1.3.29.5\npGoogleUpdate3.dll (Google Inc.)
CustomCLSID: HKU\S-1-5-21-3761744562-1818560080-4106710990-1000_Classes\CLSID\{C442AC41-9200-4770-8CC0-7CDB4F245C55}\InprocServer32 -> C:\Users\user\AppData\Local\Google\Update\1.3.29.5\npGoogleUpdate3.dll (Google Inc.)
CustomCLSID: HKU\S-1-5-21-3761744562-1818560080-4106710990-1000_Classes\CLSID\{E67BE843-BBBE-4484-95FB-05271AE86750}\localserver32 -> C:\Users\user\AppData\Local\Google\Update\1.3.29.5\GoogleUpdateOnDemand.exe (Google Inc.)
CustomCLSID: HKU\S-1-5-21-3761744562-1818560080-4106710990-1000_Classes\CLSID\{E8CF3E55-F919-49D9-ABC0-948E6CB34B9F}\InprocServer32 -> C:\Users\user\AppData\Local\Google\Update\1.3.29.5\psuser.dll (Google Inc.)

==================== Scheduled Tasks (Whitelisted) =============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {0191BCC2-D40A-4031-B1F0-DDC6EF028B54} - System32\Tasks\ASC8_SkipUac_user => C:\Program Files\IObit\Advanced SystemCare 8\ASC.exe [2014-11-07] (IObit)
Task: {01C328A6-94EE-4617-BD36-B0F0481F0F89} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files\Google\Update\GoogleUpdate.exe [2016-02-26] (Google Inc.)
Task: {07E69870-A168-4FA6-8424-603C2D1A118C} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Scan the system => C:\Program Files\Spybot - Search & Destroy 2\SDScan.exe [2014-06-24] (Safer-Networking Ltd.)
Task: {1110B531-C804-4F01-85E9-7777F3F51465} - System32\Tasks\Uninstaller_SkipUac_user => C:\Program Files\IObit\IObit Uninstaller\IObitUninstaler.exe [2014-11-04] (IObit)
Task: {15D87E7E-EAE6-4D89-ADF9-D6629D2104E5} - System32\Tasks\osTip => C:\ProgramData\WindowsMsg\osmsg.exe [2016-02-09] ()
Task: {1DD4F71F-F81E-460A-A3AF-F675322186C2} - System32\Tasks\{F216508C-7493-4907-9316-21F8F959F3ED} => Chrome.exe hxxp://www.skype.com/go/downloading?source=lightinstaller&ver=7.1.0.105&LastError=404
Task: {2C243CC3-4D5E-4B02-AEB4-65DB0BF8B2A7} - System32\Tasks\PPTAssistantNotifyTask_user => C:\Users\user\AppData\Local\PPTAssist\notify.exe [2016-03-01] (珠海金山办公软件有限公司)
Task: {469E7F14-6045-432F-96BE-A0D2BEFCF9EA} - System32\Tasks\ttwifi => C:\Program Files\ttwifi\tiantianwifi.exe
Task: {54B37A6A-A83A-4FAF-90E4-1A86A86A0324} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Refresh immunization => C:\Program Files\Spybot - Search & Destroy 2\SDImmunize.exe [2014-06-24] (Safer-Networking Ltd.)
Task: {596506EF-1F25-4848-A082-B644BCA3158C} - System32\Tasks\{8325760F-7372-4D93-84B9-33EF452C382C} => pcalua.exe -a C:\Users\user\Downloads\iGBPCEFwr(1).exe -d C:\Users\user\Downloads
Task: {5F4E82F7-B7ED-4AAD-8341-B5D57224D972} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files\Google\Update\GoogleUpdate.exe [2016-02-26] (Google Inc.)
Task: {68F77B5F-C4A6-4187-8D50-74B913614B11} - System32\Tasks\Hugwibto => C:\PROGRA~1\SHOPPE~1\Mowarufd.bat
Task: {8B64551F-EEC0-4D4D-BDE2-ED99CC74C1B2} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-3761744562-1818560080-4106710990-1000UA => C:\Users\user\AppData\Local\Google\Update\GoogleUpdate.exe [2016-02-29] (Google Inc.)
Task: {8DF66657-95E0-4249-B2F7-6BD90E9A08D0} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Check for updates => C:\Program Files\Spybot - Search & Destroy 2\SDUpdate.exe [2014-06-27] (Safer-Networking Ltd.)
Task: {92B6B2E3-BEB4-4499-A16B-1B6F3607F519} - System32\Tasks\svchost => C:\Users\user\AppData\Local\Temp\LKAMVR47Y\LKAMVR47Y.exe <==== ATTENTION
Task: {D9753F61-9475-4135-8958-F3103983B404} - System32\Tasks\PPTAssistantUpdateTask_user => C:\Users\user\AppData\Local\PPTAssist\assistupdate.exe [2016-03-01] (Zhuhai Kingsoft Office Software Co.,Ltd)
Task: {E637397A-5D27-4147-9C1D-2A048A399F14} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-3761744562-1818560080-4106710990-1000Core => C:\Users\user\AppData\Local\Google\Update\GoogleUpdate.exe [2016-02-29] (Google Inc.)

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)

Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3761744562-1818560080-4106710990-1000Core.job => C:\Users\user\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3761744562-1818560080-4106710990-1000UA.job => C:\Users\user\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\PPTAssistantNotifyTask_user.job => C:\Users\user\AppData\Local\PPTAssist\notify.exe
Task: C:\Windows\Tasks\PPTAssistantUpdateTask_user.job => C:\Users\user\AppData\Local\PPTAssist\assistupdate.exe

==================== Shortcuts =============================

(The entries could be listed to be restored or removed.)

ShortcutWithArgument: C:\Users\user\Desktop\Google Chrome.lnk -> C:\Users\user\AppData\Local\Google\Chrome\Application\chrome.exe (Google Inc.) -> hxxp://nav.brotstation.com?uid={d8ef5030f6e74c47adb4abd69e85c0fe}&r=eg
ShortcutWithArgument: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk -> C:\Users\user\AppData\Local\Google\Chrome\Application\chrome.exe (Google Inc.) -> hxxp://nav.brotstation.com?uid={d8ef5030f6e74c47adb4abd69e85c0fe}&r=eg
ShortcutWithArgument: C:\Users\user\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk -> C:\Users\user\AppData\Local\Google\Chrome\Application\chrome.exe (Google Inc.) -> hxxp://nav.brotstation.com?uid={d8ef5030f6e74c47adb4abd69e85c0fe}&r=eg
ShortcutWithArgument: C:\Users\user\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk -> C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation) -> hxxp://www.yeabests.cc/
ShortcutWithArgument: C:\Users\user\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Google Chrome.lnk -> C:\Users\user\AppData\Local\Google\Chrome\Application\chrome.exe (Google Inc.) -> hxxp://nav.brotstation.com?uid={d8ef5030f6e74c47adb4abd69e85c0fe}&r=eg
ShortcutWithArgument: C:\Users\user\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Yeabeats Browser.lnk -> C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation) -> hxxp://www.yeabests.cc/
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk -> C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation) -> hxxp://www.yeabests.cc/
ShortcutWithArgument: C:\Users\Public\Desktop\Mozilla Firefox.lnk -> C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation) -> hxxp://www.yeabests.cc/

==================== Loaded Modules (Whitelisted) ==============

2016-03-01 10:01 - 2013-10-25 12:08 - 00517408 _____ () C:\Program Files\IObit\Advanced SystemCare 8\sqlite3.dll
2016-02-29 16:02 - 2016-02-29 16:02 - 01536952 _____ () C:\ProgramData\System32\SafeGuard32.dll
2016-02-29 16:20 - 2010-02-14 03:24 - 00642560 _____ () C:\Program Files\Alwil Software\Avast5\defs\10021400\algo.dll
2016-02-29 16:20 - 2010-02-11 12:00 - 00176688 _____ () C:\Program Files\Alwil Software\Avast5\Setup\SetIFace.dll
2011-03-17 00:11 - 2011-03-17 00:11 - 04297568 _____ () C:\Program Files\Common Files\microsoft shared\OFFICE14\Cultures\OFFICE.ODF
2016-03-01 04:04 - 2016-03-01 04:04 - 00190464 _____ () C:\Program Files\0DC51620-1456855780-11E1-BCC7-C89CDC428171\knsq6A02.tmpfs
2016-02-29 16:04 - 2015-12-10 10:56 - 00193456 _____ () C:\Program Files\SkypeUpdateEx\SkypeUpdateEx.exe
2016-02-29 16:04 - 2015-12-08 11:12 - 00126896 _____ () C:\Program Files\SkypeUpdateEx\SkypeUpdate.dll
2016-03-01 10:10 - 2016-03-01 10:10 - 00416256 _____ () C:\Program Files\0DC51620-1456855780-11E1-BCC7-C89CDC428171\hnsbA5B3.tmp
2016-03-01 10:09 - 2016-03-01 10:09 - 00307712 _____ () C:\Program Files\0DC51620-1456855780-11E1-BCC7-C89CDC428171\jnsl868D.tmp
2016-03-01 10:02 - 2013-01-15 18:48 - 00348992 _____ () C:\Program Files\IObit\IObit Uninstaller\madExcept_.bpl
2016-03-01 10:02 - 2013-01-15 18:48 - 00183616 _____ () C:\Program Files\IObit\IObit Uninstaller\madBasic_.bpl
2016-03-01 10:02 - 2013-01-15 18:48 - 00051008 _____ () C:\Program Files\IObit\IObit Uninstaller\madDisAsm_.bpl
2016-02-29 15:53 - 2016-01-26 05:54 - 02415616 _____ () C:\Users\user\AppData\Roaming\msiql.exe
2016-03-01 10:01 - 2013-01-15 18:47 - 00893248 _____ () C:\Program Files\IObit\Advanced SystemCare 8\webres.dll
2016-03-01 10:46 - 2016-02-09 12:30 - 02036224 _____ () C:\ProgramData\WindowsMsg\osmsg.exe
2016-03-01 12:42 - 2016-03-01 12:42 - 00098816 _____ () C:\Users\user\AppData\Local\Temp\_MEI50402\win32api.pyd
2016-03-01 12:42 - 2016-03-01 12:42 - 00110080 _____ () C:\Users\user\AppData\Local\Temp\_MEI50402\pywintypes27.dll
2016-03-01 12:42 - 2016-03-01 12:42 - 00364544 _____ () C:\Users\user\AppData\Local\Temp\_MEI50402\pythoncom27.dll
2016-03-01 12:42 - 2016-03-01 12:42 - 00320512 _____ () C:\Users\user\AppData\Local\Temp\_MEI50402\win32com.shell.shell.pyd
2016-03-01 12:42 - 2016-03-01 12:42 - 00776704 _____ () C:\Users\user\AppData\Local\Temp\_MEI50402\_hashlib.pyd
2016-03-01 12:42 - 2016-03-01 12:42 - 01176576 _____ () C:\Users\user\AppData\Local\Temp\_MEI50402\wx._core_.pyd
2016-03-01 12:42 - 2016-03-01 12:42 - 00806400 _____ () C:\Users\user\AppData\Local\Temp\_MEI50402\wx._gdi_.pyd
2016-03-01 12:42 - 2016-03-01 12:42 - 00816128 _____ () C:\Users\user\AppData\Local\Temp\_MEI50402\wx._windows_.pyd
2016-03-01 12:42 - 2016-03-01 12:42 - 01067008 _____ () C:\Users\user\AppData\Local\Temp\_MEI50402\wx._controls_.pyd
2016-03-01 12:42 - 2016-03-01 12:42 - 00733184 _____ () C:\Users\user\AppData\Local\Temp\_MEI50402\wx._misc_.pyd
2016-03-01 12:42 - 2016-03-01 12:42 - 00682496 _____ () C:\Users\user\AppData\Local\Temp\_MEI50402\pysqlite2._sqlite.pyd
2016-03-01 12:42 - 2016-03-01 12:42 - 00088064 _____ () C:\Users\user\AppData\Local\Temp\_MEI50402\_ctypes.pyd
2016-03-01 12:42 - 2016-03-01 12:42 - 00119808 _____ () C:\Users\user\AppData\Local\Temp\_MEI50402\win32file.pyd
2016-03-01 12:42 - 2016-03-01 12:42 - 00108544 _____ () C:\Users\user\AppData\Local\Temp\_MEI50402\win32security.pyd
2016-03-01 12:42 - 2016-03-01 12:42 - 00007168 _____ () C:\Users\user\AppData\Local\Temp\_MEI50402\hashobjs_ext.pyd
2016-03-01 12:42 - 2016-03-01 12:42 - 00017920 _____ () C:\Users\user\AppData\Local\Temp\_MEI50402\thumbnails_ext.pyd
2016-03-01 12:42 - 2016-03-01 12:42 - 00088064 _____ () C:\Users\user\AppData\Local\Temp\_MEI50402\usb_ext.pyd
2016-03-01 12:42 - 2016-03-01 12:42 - 00167936 _____ () C:\Users\user\AppData\Local\Temp\_MEI50402\win32gui.pyd
2016-03-01 12:42 - 2016-03-01 12:42 - 00018432 _____ () C:\Users\user\AppData\Local\Temp\_MEI50402\win32event.pyd
2016-03-01 12:42 - 2016-03-01 12:42 - 00046080 _____ () C:\Users\user\AppData\Local\Temp\_MEI50402\_socket.pyd
2016-03-01 12:42 - 2016-03-01 12:42 - 01208320 _____ () C:\Users\user\AppData\Local\Temp\_MEI50402\_ssl.pyd
2016-03-01 12:42 - 2016-03-01 12:42 - 00128512 _____ () C:\Users\user\AppData\Local\Temp\_MEI50402\_elementtree.pyd
2016-03-01 12:42 - 2016-03-01 12:42 - 00127488 _____ () C:\Users\user\AppData\Local\Temp\_MEI50402\pyexpat.pyd
2016-03-01 12:42 - 2016-03-01 12:42 - 00013824 _____ () C:\Users\user\AppData\Local\Temp\_MEI50402\common.time34.pyd
2016-03-01 12:42 - 2016-03-01 12:42 - 00036864 _____ () C:\Users\user\AppData\Local\Temp\_MEI50402\_psutil_windows.pyd
2016-03-01 12:42 - 2016-03-01 12:42 - 00038912 _____ () C:\Users\user\AppData\Local\Temp\_MEI50402\win32inet.pyd
2016-03-01 12:42 - 2016-03-01 12:42 - 00525240 _____ () C:\Users\user\AppData\Local\Temp\_MEI50402\windows._lib_cacheinvalidation.pyd
2016-03-01 12:42 - 2016-03-01 12:42 - 00011264 _____ () C:\Users\user\AppData\Local\Temp\_MEI50402\win32crypt.pyd
2016-03-01 12:42 - 2016-03-01 12:42 - 00077312 _____ () C:\Users\user\AppData\Local\Temp\_MEI50402\wx._html2.pyd
2016-03-01 12:42 - 2016-03-01 12:42 - 00027136 _____ () C:\Users\user\AppData\Local\Temp\_MEI50402\_multiprocessing.pyd
2016-03-01 12:42 - 2016-03-01 12:42 - 00020480 _____ () C:\Users\user\AppData\Local\Temp\_MEI50402\_yappi.pyd
2016-03-01 12:42 - 2016-03-01 12:42 - 00035840 _____ () C:\Users\user\AppData\Local\Temp\_MEI50402\win32process.pyd
2016-03-01 12:42 - 2016-03-01 12:42 - 00686080 _____ () C:\Users\user\AppData\Local\Temp\_MEI50402\unicodedata.pyd
2016-03-01 12:42 - 2016-03-01 12:42 - 00078848 _____ () C:\Users\user\AppData\Local\Temp\_MEI50402\wx._animate.pyd
2016-03-01 12:42 - 2016-03-01 12:42 - 00123392 _____ () C:\Users\user\AppData\Local\Temp\_MEI50402\wx._wizard.pyd
2016-03-01 12:42 - 2016-03-01 12:42 - 00024064 _____ () C:\Users\user\AppData\Local\Temp\_MEI50402\win32pipe.pyd
2016-03-01 12:42 - 2016-03-01 12:42 - 00010240 _____ () C:\Users\user\AppData\Local\Temp\_MEI50402\select.pyd
2016-03-01 12:42 - 2016-03-01 12:42 - 00025600 _____ () C:\Users\user\AppData\Local\Temp\_MEI50402\win32pdh.pyd
2016-03-01 12:42 - 2016-03-01 12:42 - 00017408 _____ () C:\Users\user\AppData\Local\Temp\_MEI50402\win32profile.pyd
2016-03-01 12:42 - 2016-03-01 12:42 - 00022528 _____ () C:\Users\user\AppData\Local\Temp\_MEI50402\win32ts.pyd
2016-02-29 16:40 - 2016-02-17 20:14 - 01630360 _____ () C:\Users\user\AppData\Local\Google\Chrome\Application\48.0.2564.116\libglesv2.dll
2016-02-29 16:40 - 2016-02-17 20:14 - 00085656 _____ () C:\Users\user\AppData\Local\Google\Chrome\Application\48.0.2564.116\libegl.dll
2016-02-29 16:40 - 2016-02-17 20:15 - 16808600 _____ () C:\Users\user\AppData\Local\Google\Chrome\Application\48.0.2564.116\PepperFlash\pepflashplayer.dll
2016-03-01 12:57 - 2014-05-13 12:04 - 00109400 _____ () C:\Program Files\Spybot - Search & Destroy 2\snlThirdParty150.bpl
2016-03-01 12:57 - 2014-05-13 12:04 - 00416600 _____ () C:\Program Files\Spybot - Search & Destroy 2\DEC150.bpl
2016-03-01 12:57 - 2014-05-13 12:04 - 00167768 _____ () C:\Program Files\Spybot - Search & Destroy 2\snlFileFormats150.bpl
2016-03-01 12:57 - 2012-08-23 10:38 - 00574840 _____ () C:\Program Files\Spybot - Search & Destroy 2\sqlite3.dll
2016-03-01 12:57 - 2012-04-03 17:06 - 00565640 _____ () C:\Program Files\Spybot - Search & Destroy 2\av\BDSmartDB.dll
2016-03-01 10:02 - 2013-10-25 12:08 - 00517408 _____ () C:\Program Files\IObit\IObit Uninstaller\sqlite3.dll
2016-03-01 10:02 - 2014-10-16 10:26 - 00622880 _____ () C:\Program Files\IObit\IObit Uninstaller\ProductStatistics.dll
2016-03-01 10:02 - 2013-01-15 18:47 - 00893248 _____ () C:\Program Files\IObit\IObit Uninstaller\webres.dll
2016-03-01 13:02 - 2016-03-01 13:02 - 00231998 _____ () C:\Users\user\AppData\Local\Temp\nsy20CC.tmp
2016-03-01 13:03 - 2016-03-01 13:03 - 00011264 _____ () C:\Users\user\AppData\Local\Temp\nsy69CB.tmp\System.dll
2016-03-01 13:03 - 2016-03-01 13:03 - 00009728 _____ () C:\Users\user\AppData\Local\Temp\nsy69CB.tmp\nsDialogs.dll
2016-03-01 13:03 - 2016-03-01 13:03 - 00025088 _____ () C:\Users\user\AppData\Local\Temp\nsy69CB.tmp\registry.dll
2016-03-01 13:03 - 2016-03-01 13:03 - 00067584 _____ () C:\Users\user\AppData\Local\Temp\nsy69CB.tmp\Math.dll
2016-03-01 13:03 - 2016-03-01 13:03 - 00058368 _____ () C:\Users\user\AppData\Local\Temp\nsy69CB.tmp\nsCBHTML5.dll

==================== Alternate Data Streams (Whitelisted) =========

(If an entry is included in the fixlist, only the ADS will be removed.)

AlternateDataStreams: C:\Program Files\GbPlugin:IncompleteStartProcessProtection.cnt
AlternateDataStreams: C:\Program Files\GbPlugin:u6eBQrM0Z2K3FKLVBMG8dY3IkKT2rqFO+Sf68h8fDg==
AlternateDataStreams: C:\Windows\System32:E9311F16_Cef.gbp
AlternateDataStreams: C:\Windows\system32\drivers:GbpKmAp.lst
AlternateDataStreams: C:\Windows\system32\Drivers\wsddfac.sys:X5ZN8aGXs4
AlternateDataStreams: C:\ProgramData\Temp:CB0AACC9

==================== Safe Mode (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" value will be restored.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\PEVSystemStart => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\procexp90.Sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\PEVSystemStart => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\procexp90.Sys => ""="Driver"

==================== EXE Association (Whitelisted) ===============

(If an entry is included in the fixlist, the registry item will be restored to default or removed.)


==================== Internet Explorer trusted/restricted ===============

(If an entry is included in the fixlist, it will be removed from the registry.)

IE trusted site: HKU\S-1-5-21-3761744562-1818560080-4106710990-1000\...\caixa.gov.br -> hxxps://imagem.caixa.gov.br
IE trusted site: HKU\S-1-5-21-3761744562-1818560080-4106710990-1000\...\caixa.gov.br -> imagem.caixa.gov.br
IE restricted site: HKU\S-1-5-21-3761744562-1818560080-4106710990-1000\...\008i.com -> 008i.com
IE restricted site: HKU\S-1-5-21-3761744562-1818560080-4106710990-1000\...\008k.com -> 008k.com
IE restricted site: HKU\S-1-5-21-3761744562-1818560080-4106710990-1000\...\00hq.com -> 00hq.com
IE restricted site: HKU\S-1-5-21-3761744562-1818560080-4106710990-1000\...\0190-dialers.com -> 0190-dialers.com
IE restricted site: HKU\S-1-5-21-3761744562-1818560080-4106710990-1000\...\01i.info -> 01i.info
IE restricted site: HKU\S-1-5-21-3761744562-1818560080-4106710990-1000\...\02pmnzy5eo29bfk4.com -> 02pmnzy5eo29bfk4.com
IE restricted site: HKU\S-1-5-21-3761744562-1818560080-4106710990-1000\...\05p.com -> 05p.com
IE restricted site: HKU\S-1-5-21-3761744562-1818560080-4106710990-1000\...\07ic5do2myz3vzpk.com -> 07ic5do2myz3vzpk.com
IE restricted site: HKU\S-1-5-21-3761744562-1818560080-4106710990-1000\...\08nigbmwk43i01y6.com -> 08nigbmwk43i01y6.com
IE restricted site: HKU\S-1-5-21-3761744562-1818560080-4106710990-1000\...\093qpeuqpmz6ebfa.com -> 093qpeuqpmz6ebfa.com
IE restricted site: HKU\S-1-5-21-3761744562-1818560080-4106710990-1000\...\0calories.net -> 0calories.net
IE restricted site: HKU\S-1-5-21-3761744562-1818560080-4106710990-1000\...\0cj.net -> 0cj.net
IE restricted site: HKU\S-1-5-21-3761744562-1818560080-4106710990-1000\...\0scan.com -> 0scan.com
IE restricted site: HKU\S-1-5-21-3761744562-1818560080-4106710990-1000\...\1-britney-spears-nude.com -> 1-britney-spears-nude.com
IE restricted site: HKU\S-1-5-21-3761744562-1818560080-4106710990-1000\...\1-domains-registrations.com -> 1-domains-registrations.com
IE restricted site: HKU\S-1-5-21-3761744562-1818560080-4106710990-1000\...\1-se.com -> 1-se.com
IE restricted site: HKU\S-1-5-21-3761744562-1818560080-4106710990-1000\...\1001movie.com -> 1001movie.com
IE restricted site: HKU\S-1-5-21-3761744562-1818560080-4106710990-1000\...\1001night.biz -> 1001night.biz
IE restricted site: HKU\S-1-5-21-3761744562-1818560080-4106710990-1000\...\100gal.net -> 100gal.net
IE restricted site: HKU\S-1-5-21-3761744562-1818560080-4106710990-1000\...\100sexlinks.com -> 100sexlinks.com

There are 4788 more sites.


==================== Hosts content: ==========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2009-07-13 18:04 - 2016-03-01 10:08 - 00001741 ____N C:\Windows\system32\Drivers\etc\hosts

107.178.243.68 images-na.ssl-images-amazon.com
130.211.9.88 promo.ebay.com
107.178.255.88 www.google-analytics.com
107.178.255.88 www.statcounter.com
107.178.255.88 statcounter.com
107.178.255.88 ssl.google-analytics.com
107.178.255.88 partner.googleadservices.com
107.178.255.88 google-analytics.com
107.178.248.130 static.doubleclick.net
107.178.247.130 connect.facebook.net
107.178.243.68 images-na.ssl-images-amazon.com
130.211.9.88 promo.ebay.com
107.178.255.88 www.google-analytics.com
107.178.255.88 www.statcounter.com
107.178.255.88 statcounter.com
107.178.255.88 ssl.google-analytics.com
107.178.255.88 partner.googleadservices.com
107.178.255.88 google-analytics.com
107.178.248.130 static.doubleclick.net
107.178.247.130 connect.facebook.net127.0.0.1 down.baidu2016.com
127.0.0.1 123.sogou.com
127.0.0.1 www.czzsyzgm.com
127.0.0.1 www.czzsyzxl.com

==================== Other Areas ============================

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-3761744562-1818560080-4106710990-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\user\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
DNS Servers: 104.197.191.4
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall is disabled.

==================== MSCONFIG/TASK MANAGER disabled items ==

(Currently there is no automatic fix for this section.)


==================== FirewallRules (Whitelisted) ===============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

FirewallRules: [{B894E95B-147F-478B-9196-28C9284D263F}] => (Allow) C:\Program Files\TeamViewer\TeamViewer.exe
FirewallRules: [{70274CF4-0CAC-4EE5-8AD7-9681750759AE}] => (Allow) C:\Program Files\TeamViewer\TeamViewer.exe
FirewallRules: [{D4D04C82-C6F5-41A6-8626-33249BC2A379}] => (Allow) C:\Program Files\TeamViewer\TeamViewer_Service.exe
FirewallRules: [{772165BB-3E80-403C-BEF3-7150E4640D30}] => (Allow) C:\Program Files\TeamViewer\TeamViewer_Service.exe
FirewallRules: [{029B899E-B81E-4A32-B892-71587D53079C}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe
FirewallRules: [{A404AFDB-74D1-4432-9AD1-0D5CE7DC8054}] => (Allow) C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe
FirewallRules: [{27E4E80E-8EB3-4D9C-BCFD-BD6684840D43}] => (Allow) C:\Program Files\Diebold\Warsaw\core.exe
FirewallRules: [{ECAE79FA-D87C-45EC-927A-341448CDCD06}] => (Block) c:\Program Files\Corel\CorelDRAW Graphics Suite X7\Programs\CorelDrw.exe
FirewallRules: [{264DED8D-7ACD-4932-A679-EA32A7BA35C3}] => (Block) c:\Program Files\Corel\CorelDRAW Graphics Suite X7\Programs\CorelPP.exe
StandardProfile\AuthorizedApplications: [C:\Program Files\Spybot - Search & Destroy 2\SDTray.exe] => Enabled:Spybot - Search & Destroy tray access
StandardProfile\AuthorizedApplications: [C:\Program Files\Spybot - Search & Destroy 2\SDFSSvc.exe] => Enabled:Spybot-S&D 2 Scanner Service
StandardProfile\AuthorizedApplications: [C:\Program Files\Spybot - Search & Destroy 2\SDUpdate.exe] => Enabled:Spybot-S&D 2 Updater
StandardProfile\AuthorizedApplications: [C:\Program Files\Spybot - Search & Destroy 2\SDUpdSvc.exe] => Enabled:Spybot-S&D 2 Background update service

==================== Restore Points =========================

01-03-2016 10:50:56 Instalador de Módulos do Windows
01-03-2016 12:07:11 IObit Uninstaller restore point
01-03-2016 12:24:20 Instalador de Módulos do Windows

==================== Faulty Device Manager Devices =============

Name: Teredo Tunneling Pseudo-Interface
Description: Adaptador de Túnel Teredo da Microsoft
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: tunnel
Problem: : This device cannot start. (Code10)
Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device.
On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard.


==================== Event log errors: =========================

Application errors:
==================
Error: (03/01/2016 12:40:24 PM) (Source: AdvancedSystemCareService8) (EventID: 0) (User: )
Description: The handle is invalid

Error: (03/01/2016 12:40:24 PM) (Source: AdvancedSystemCareService8) (EventID: 0) (User: )
Description: The handle is invalid

Error: (03/01/2016 12:36:00 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Nome de aplicativo com falha: googledrivesync.exe, versão: 1.27.1227.2094, carimbo de hora: 0x509418e4
Nome do módulo de falhas: ntdll.dll, versão: 6.1.7600.16385, carimbo de hora: 0x4a5bdadb
Código de exceção: 0xc0000005
Deslocamento com falha: 0x00056176
Identificação do processo com falha: 0x15d0
Hora de início do aplicativo com falha: 0xgoogledrivesync.exe0
Caminho do aplicativo com falha: googledrivesync.exe1
FCaminho do módulo de falhas: googledrivesync.exe2
Identificação do Relatório: googledrivesync.exe3

Error: (03/01/2016 12:27:24 PM) (Source: AdvancedSystemCareService8) (EventID: 0) (User: )
Description: The handle is invalid

Error: (03/01/2016 12:24:22 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: Falha dos Serviços de Criptografia ao processar a chamada de OnIdentity() no Objeto de Gravador do Sistema..

Details:
AddWin32ServiceFiles: Unable to back up image of service Warsaw Technology since QueryServiceConfig API failed

System Error:
The system cannot find the file specified.
.

Error: (03/01/2016 12:07:13 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: Falha dos Serviços de Criptografia ao processar a chamada de OnIdentity() no Objeto de Gravador do Sistema..

Details:
AddWin32ServiceFiles: Unable to back up image of service Warsaw Technology since QueryServiceConfig API failed

System Error:
The system cannot find the file specified.
.

Error: (03/01/2016 12:07:10 PM) (Source: VSS) (EventID: 8194) (User: )
Description: Erro do Serviço de Cópias de Sombra de Volume: erro inesperado ao consultar a interface IVssWriterCallback. hr = 0x80070005, Access is denied.
.
Muitas vezes, isso é causado por configurações de segurança incorretas no processo gravador ou solicitante.


Operation:
Gathering Writer Data

Context:
Writer Class Id: {e8132975-6f93-4464-a53e-1050253ae220}
Writer Name: System Writer
Writer Instance ID: {2a735594-032b-484c-9db5-6be3aadc4b2f}

Error: (03/01/2016 11:39:46 AM) (Source: AdvancedSystemCareService8) (EventID: 0) (User: )
Description: The handle is invalid

Error: (03/01/2016 11:39:46 AM) (Source: AdvancedSystemCareService8) (EventID: 0) (User: )
Description: The handle is invalid

Error: (03/01/2016 11:35:57 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Nome de aplicativo com falha: Rmvtrjan.exe, versão: 6.8.2.2600, carimbo de hora: 0x4e4d1cbe
Nome do módulo de falhas: USER32.dll, versão: 6.1.7600.16385, carimbo de hora: 0x4a5bdb2f
Código de exceção: 0xc0000005
Deslocamento com falha: 0x0000f151
Identificação do processo com falha: 0x1f6c
Hora de início do aplicativo com falha: 0xRmvtrjan.exe0
Caminho do aplicativo com falha: Rmvtrjan.exe1
FCaminho do módulo de falhas: Rmvtrjan.exe2
Identificação do Relatório: Rmvtrjan.exe3


System errors:
=============
Error: (03/01/2016 12:42:59 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Não foi possível iniciar o serviço Gbpddreg svc devido ao seguinte erro:
%%2

Error: (03/01/2016 12:42:57 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Não foi possível iniciar o serviço Gbpddreg svc devido ao seguinte erro:
%%2

Error: (03/01/2016 12:42:22 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: O serviço TCP/IP NetBIOS Helper foi finalizado inesperadamente. Isto aconteceu 1 vez(es). A seguinte ação corretiva será tomada em 100 milissegundos: Restart the service.

Error: (03/01/2016 12:42:22 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: O serviço Windows Event Log foi finalizado inesperadamente. Isto aconteceu 1 vez(es). A seguinte ação corretiva será tomada em 60000 milissegundos: Restart the service.

Error: (03/01/2016 12:42:22 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: O serviço DHCP Client foi finalizado inesperadamente. Isto aconteceu 1 vez(es). A seguinte ação corretiva será tomada em 120000 milissegundos: Restart the service.

Error: (03/01/2016 12:42:22 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: O serviço Windows Audio foi finalizado inesperadamente. Isto aconteceu 1 vez(es). A seguinte ação corretiva será tomada em 60000 milissegundos: Restart the service.

Error: (03/01/2016 12:41:33 PM) (Source: Service Control Manager) (EventID: 7026) (User: )
Description: Falha ao carregar o(s) seguinte(s) driver(s) de início do sistema ou de inicialização:
gbpddreg

Error: (03/01/2016 12:41:28 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Não foi possível iniciar o serviço The Desktop Weather Service devido ao seguinte erro:
%%3

Error: (03/01/2016 12:41:15 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Não foi possível iniciar o serviço KMService devido ao seguinte erro:
%%3

Error: (03/01/2016 12:29:19 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Não foi possível iniciar o serviço Gbpddreg svc devido ao seguinte erro:
%%2


CodeIntegrity:
===================================
Date: 2016-03-01 10:54:46.721
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Program Files\SpaceSoundPro\SpaceSoundPro.dll because the set of per-page image hashes could not be found on the system.

Date: 2016-03-01 10:54:46.706
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Program Files\SpaceSoundPro\SpaceSoundPro.dll because the set of per-page image hashes could not be found on the system.

Date: 2016-03-01 10:54:46.690
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Program Files\SpaceSoundPro\SpaceSoundPro.dll because the set of per-page image hashes could not be found on the system.

Date: 2016-03-01 10:54:41.668
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Program Files\SpaceSoundPro\SpaceSoundPro.dll because the set of per-page image hashes could not be found on the system.

Date: 2016-03-01 10:54:41.532
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Program Files\SpaceSoundPro\SpaceSoundPro.dll because the set of per-page image hashes could not be found on the system.

Date: 2016-03-01 10:54:41.485
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Program Files\SpaceSoundPro\SpaceSoundPro.dll because the set of per-page image hashes could not be found on the system.

Date: 2016-03-01 10:54:10.818
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Program Files\SpaceSoundPro\SpaceSoundPro.dll because the set of per-page image hashes could not be found on the system.

Date: 2016-03-01 10:54:10.799
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Program Files\SpaceSoundPro\SpaceSoundPro.dll because the set of per-page image hashes could not be found on the system.

Date: 2016-03-01 10:53:39.927
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Program Files\SpaceSoundPro\SpaceSoundPro.dll because the set of per-page image hashes could not be found on the system.

Date: 2016-03-01 10:53:39.912
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Program Files\SpaceSoundPro\SpaceSoundPro.dll because the set of per-page image hashes could not be found on the system.


==================== Memory info ===========================

Processor: Pentium(R) Dual-Core CPU E6500 @ 2.93GHz
Percentage of memory in use: 49%
Total physical RAM: 3261.24 MB
Available physical RAM: 1636.21 MB
Total Virtual: 6518.7 MB
Available Virtual: 4717.23 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:97.66 GB) (Free:12.76 GB) NTFS ==>[drive with boot components (obtained from BCD)]
Drive d: (RESTORE) (Fixed) (Total:19.52 GB) (Free:13.47 GB) FAT32
Drive e: (Dados) (Fixed) (Total:814.31 GB) (Free:792.28 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (Size: 931.5 GB) (Disk ID: 1E671E66)
Partition 1: (Active) - (Size=97.7 GB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=19.5 GB) - (Type=0C)
Partition 3: (Not Active) - (Size=814.3 GB) - (Type=07 NTFS)

==================== End of Addition.txt ============================

Publicité


Signaler le contenu de ce document

Publicité