Publicité
Publicité
Format du document : text/plain
Prévisualisation
Resultado do exame Adicional Farbar Recovery Scan Tool (x64) Versão:25-04-2016
Executado por Survivor & (2016-04-25 22:20:41)
Executando a partir de C:\Users\Survivor &\Downloads
Windows 10 Pro Versão 1511 (X64) (2016-03-16 14:03:12)
Modo da Inicialização: Normal
==========================================================
==================== Contas: =============================
Administrador (S-1-5-21-3336018506-14070607-1352406699-500 - Administrator - Disabled)
Convidado (S-1-5-21-3336018506-14070607-1352406699-501 - Limited - Disabled)
DefaultAccount (S-1-5-21-3336018506-14070607-1352406699-503 - Limited - Disabled)
Survivor & (S-1-5-21-3336018506-14070607-1352406699-1001 - Administrator - Enabled) => C:\Users\Survivor &
==================== Central de Segurança ========================
(Se uma entrada for incluída na fixlist, será removida.)
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
==================== Programas Instalados ======================
(Somente os programas adwares com a indicação "Oculto" podem ser adicionados à fixlist para desocultá-los. Os programas adwares devem ser desinstalados manualmente.)
µTorrent (HKU\S-1-5-21-3336018506-14070607-1352406699-1001\...\uTorrent) (Version: 3.4.5.41865 - BitTorrent Inc.)
Body Text Feathering (HKLM-x32\...\PopupProduct) (Version: 1.0.0.0 - Body Text Feathering) <==== ATENÇÃO
Breakthrough Plus Intro Digibook (HKLM-x32\...\Breakthrough Plus Intro Digibook) (Version: 1.0.0.0 - Macmillan Education UK)
CDisplayEx 1.10.30 (HKLM\...\CDisplayEx_is1) (Version: - Progdigy Software S.A.R.L.)
Dead or Alive 5 Last Round v.1.0.5 (HKLM-x32\...\Dead or Alive 5 Last Round_is1) (Version: - )
Fraps (remove only) (HKLM-x32\...\Fraps) (Version: - )
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 50.0.2661.87 - Google Inc.)
Google Update Helper (x32 Version: 1.3.29.5 - Google Inc.) Hidden
Herramientas de corrección de Microsoft Office 2016: español (Version: 16.0.4266.1001 - Microsoft Corporation) Hidden
Intel Android Device USB driver (HKLM\...\Intel Android Device USB driver) (Version: 1.8.1 - Intel)
Intel DnX USB Driver version 1.0.0 (HKLM\...\{B00B3C46-414C-4232-8021-29D40A90901F}_is1) (Version: 1.0.0 - Intel Corporation)
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 9.5.15.1730 - Intel Corporation)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 10.18.15.4248 - Intel Corporation)
MEE version 1.1.70 (HKU\S-1-5-21-3336018506-14070607-1352406699-1001\...\{646C7F16-BCD0-4776-8AE4-60263C871F13}_is1) (Version: 1.1.70 - Macmillan Education)
Microsoft Office Professional Plus 2016 (HKLM\...\Office16.PROPLUS) (Version: 16.0.4266.1001 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Pacote de Driver do Windows - Android (WUDFRd) WPD (04/07/2013 5.2.5326.4762) (HKLM\...\11A0B871BAD4BD9A57E59C3635218E2427AA2C62) (Version: 04/07/2013 5.2.5326.4762 - Android)
Pacote de Driver do Windows - Fuzhou Rockchip (Rockusb) Rockusb Device (08/05/2013 3.70.0000) (HKLM\...\20BAB42A3EFA96A512A3479105D342498A3184E2) (Version: 08/05/2013 3.70.0000 - Fuzhou Rockchip)
Pacote de Driver do Windows - Google, Inc. (WinUSB) AndroidUsbDeviceClass (08/27/2012 7.0.0000.00001) (HKLM\...\DD5996E7B3B8B7F86BD863BE2D13D10BAEEDF5EE) (Version: 08/27/2012 7.0.0000.00001 - Google, Inc.)
Pacote de Driver do Windows - Google, Inc. (WinUSB) AndroidUsbDeviceClass (08/27/2013 7.0.0000.00001) (HKLM\...\DD35777ACC26D30A3585F9724356AF8111A6F38C) (Version: 08/27/2013 7.0.0000.00001 - Google, Inc.)
Pacote de Driver do Windows - Google, Inc. (WinUSB) AndroidUsbDeviceClass (08/28/2014 11.0.0000.00000) (HKLM\...\092555911492C6959D2596D612F52DCA71881CA2) (Version: 08/28/2014 11.0.0000.00000 - Google, Inc.)
Pacote de Driver do Windows - MediaTek Inc. (usbser) Ports (01/05/2012 2.0000.0.1) (HKLM\...\49D9ABA9270C5BDFD7AE1BEB607D36B26BB90235) (Version: 01/05/2012 2.0000.0.1 - MediaTek Inc.)
Pacote de Driver do Windows - MediaTek Inc. (usbser) Ports (12/24/2011 2.0000.0.0) (HKLM\...\D0E6296D177F42BB31C0200E49412003DB6C4633) (Version: 12/24/2011 2.0000.0.0 - MediaTek Inc.)
Pacote de Driver do Windows - USB Devices (usbUDisc) USB (01/24/2014 1.0.0.1) (HKLM\...\B2A7D664285C0D269794E0F21D756D5138D1FB29) (Version: 01/24/2014 1.0.0.1 - USB Devices)
Potplayer-64 Bits (HKLM\...\PotPlayer64) (Version: - Kakao Corp.)
Qualcomm Atheros Bluetooth Suite (64) (HKLM\...\{A84A4FB1-D703-48DB-89E0-68B6499D2801}) (Version: 10.0.1.2 - Qualcomm Atheros)
Qualcomm Atheros WLAN and Bluetooth Client Installation Program (HKLM-x32\...\{28006915-2739-4EBE-B5E8-49B25D32EB33}) (Version: 12.69 - Qualcomm Atheros)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7719 - Realtek Semiconductor Corp.)
Revisores de Texto do Microsoft Office 2016 – Português (Brasil) (Version: 16.0.4266.1001 - Microsoft Corporation) Hidden
SAMSUNG USB Driver for Mobile Phones (HKLM\...\{D0795B21-0CDA-4a92-AB9E-6E92D8111E44}) (Version: 1.5.51.0 - SAMSUNG Electronics Co., Ltd.)
Sexy Beach Premium Resort (HKLM-x32\...\Sexy Beach Premium Resort_is1) (Version: - )
Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 19.0.9.4 - Synaptics Incorporated)
The Desktop Weather 2.0.1.11297 (HKLM\...\WeatherTool) (Version: 2.0.1.11297 - Baidu Japan Inc.) <==== ATENÇÃO
TTWiFi 1.0.0.1 (HKLM-x32\...\ttwifi) (Version: 1.0.0.1 - )
WinRAR 5.31 (64-bit) (HKLM\...\WinRAR archiver) (Version: 5.31.0 - win.rar GmbH)
==================== Exame Personalizado CLSID (Whitelisted): ==========================
(Se uma entrada for incluída na fixlist, será removida do Registro. O arquivo não será movido, a menos que seja colocado separadamente.)
CustomCLSID: HKU\S-1-5-21-3336018506-14070607-1352406699-1001_Classes\CLSID\{71DCE5D6-4B57-496B-AC21-CD5B54EB93FD}\localserver32 -> C:\Users\Survivor &\AppData\Local\Microsoft\OneDrive\17.3.6386.0412\FileCoAuth.exe (Microsoft Corporation)
==================== Tarefas Agendadas (Whitelisted) =============
(Se uma entrada for incluída na fixlist, será removida do Registro. O arquivo não será movido, a menos que seja colocado separadamente.)
Task: {196AECE8-A050-4211-AA79-B4CDB021BE32} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn2016 => C:\Program Files\Microsoft Office\Office16\msoia.exe [2015-07-31] (Microsoft Corporation)
Task: {233DE787-0D27-4C31-BB53-90F174CFD0A7} - System32\Tasks\Microsoft\Office\Office 15 Subscription Heartbeat => C:\Program Files\Common Files\Microsoft Shared\Office16\OLicenseHeartbeat.exe [2015-07-31] (Microsoft Corporation)
Task: {3C2E5D4A-A193-4405-8C21-D9C3D600885C} - System32\Tasks\MPC AdCleaner => C:\Program Files (x86)\MPC AdCleaner\AdCleaner.exe [2016-03-10] (DotC United Inc) <==== ATENÇÃO
Task: {61F9EF72-ACFE-4B3A-AA72-A5BAC2E612C6} - System32\Tasks\osTip => C:\ProgramData\WindowsMsg\osmsg.exe [2016-03-31] ()
Task: {B7218A44-AE9C-42CD-A23D-610AA6F37962} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2016-03-16] (Google Inc.)
Task: {BE9115C7-1C4E-47F8-839B-E0212BCC7320} - System32\Tasks\BaiduJP_Update_{8099779F-A13B-403e-B39A-65133857586B} => C:\Program Files (x86)\baidu\update\baidujp_update.exe [2016-03-31] (Baidu)
Task: {C00322F9-3149-47CC-8385-190E775120B0} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack2016 => C:\Program Files\Microsoft Office\Office16\msoia.exe [2015-07-31] (Microsoft Corporation)
Task: {CF171725-BF5A-41C9-824A-568A543667E0} - System32\Tasks\ttwifi => C:\Program Files (x86)\ttwifi\tiantianwifi.exe [2016-03-23] (TTWIFI)
Task: {E11FA7A7-E2B8-4AF4-9EF6-78A7F05A5922} - System32\Tasks\SlimCleaner Plus (Scheduled Scan - Survivor &) => C:\Program Files\SlimCleaner Plus\SlimCleanerPlus.exe
Task: {F9B79028-F4A6-4CD3-A1D3-D6B1F89DF34E} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2016-03-16] (Google Inc.)
(Se uma entrada for incluída na fixlist, o arquivo da tarefa (.job) será movido. O arquivo que está sendo executado pela tarefa não será movido.)
Task: C:\Windows\Tasks\BaiduJP_Update_{8099779F-A13B-403e-B39A-65133857586B}.job => C:\Program Files (x86)\baidu\update\baidujp_update.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\SlimCleaner Plus (Scheduled Scan - Survivor &).job => C:\Program Files\SlimCleaner Plus\SlimCleanerPlus.exe
==================== Atalhos =============================
(As entradas podem ser listadas para serem restauradas ou removidas.)
Shortcut: C:\Users\Survivor &\Desktop\Dead or Alive 5 Last Round.lnk -> C:\Games\Dead or Alive 5 Last Round\game.bat ()
Shortcut: C:\Users\Survivor &\Desktop\Настройки-Dead or Alive 5 Last Round.lnk -> C:\Games\Dead or Alive 5 Last Round\startup_setting.bat ()
==================== Módulos Carregados (Whitelisted) ==============
2015-10-30 04:18 - 2015-10-30 04:18 - 00185856 _____ () C:\Windows\SYSTEM32\ism32k.dll
2016-04-05 08:17 - 2016-04-05 08:17 - 00174432 _____ () C:\Users\Survivor &\AppData\Roaming\Sodriroc\Sodriroc.exe
2016-04-05 23:32 - 2016-04-05 23:32 - 00142296 _____ () C:\Program Files (x86)\WeatherTool\2.0.1.11297\WeatherService.exe
2016-04-12 21:35 - 2016-03-29 07:20 - 02656952 _____ () C:\Windows\system32\CoreUIComponents.dll
2016-04-05 08:17 - 2016-04-05 08:17 - 00670560 _____ () C:\Users\Survivor &\AppData\Roaming\Sodriroc\Abecgo.dll
2016-04-05 23:33 - 2016-04-05 23:33 - 01050072 _____ () C:\Program Files (x86)\WeatherTool\2.0.1.11297\WeatherEntryDll.dll
2016-04-12 21:35 - 2016-03-29 07:20 - 02656952 _____ () C:\Windows\System32\CoreUIComponents.dll
2016-04-25 18:39 - 2016-04-25 18:39 - 00959176 _____ () C:\Users\Survivor &\AppData\Local\Microsoft\OneDrive\17.3.6386.0412\amd64\ClientTelemetry.dll
2016-04-05 08:17 - 2016-04-05 08:17 - 00146272 _____ () C:\Users\Survivor &\AppData\Roaming\Sodriroc\Abecgo.exe
2016-04-18 18:26 - 2016-04-18 18:27 - 00144384 _____ () C:\Program Files\WindowsApps\Microsoft.Messaging_2.15.20002.0_x86__8wekyb3d8bbwe\SkypeHost.exe
2016-04-05 08:17 - 2016-04-05 08:17 - 00115552 _____ () C:\Users\Survivor &\AppData\Roaming\Sodriroc\Aokehp.exe
2016-03-11 22:37 - 2016-03-11 22:37 - 00093696 _____ () C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\Windows.UI.Shell.SharedUtilities.dll
2016-04-12 21:32 - 2016-04-02 00:25 - 00472064 _____ () C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\QuickActions.dll
2016-04-12 21:33 - 2016-04-02 00:03 - 07992832 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CortanaApi.dll
2016-04-12 21:33 - 2016-04-01 23:58 - 00591360 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll
2016-04-12 21:34 - 2016-04-01 23:59 - 02483200 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.BackgroundTask.dll
2016-04-12 21:34 - 2016-04-02 00:02 - 04089856 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\RemindersUI.dll
2015-09-30 20:39 - 2015-09-30 20:39 - 00415128 _____ () C:\Windows\system32\igfxTray.exe
2016-03-31 14:24 - 2016-03-31 14:24 - 01417216 _____ () C:\Users\Survivor &\AppData\Roaming\cpuminer\cpm.exe
2016-04-25 19:08 - 2016-03-31 16:28 - 02041856 _____ () C:\ProgramData\WindowsMsg\osmsg.exe
2016-04-21 16:27 - 2016-04-21 02:10 - 02224280 _____ () C:\Program Files (x86)\Google\Chrome\Application\50.0.2661.87\libglesv2.dll
2016-04-21 16:27 - 2016-04-21 02:10 - 00097944 _____ () C:\Program Files (x86)\Google\Chrome\Application\50.0.2661.87\libegl.dll
2016-04-18 18:26 - 2016-04-18 18:27 - 00141312 _____ () C:\Program Files\WindowsApps\Microsoft.Messaging_2.15.20002.0_x86__8wekyb3d8bbwe\SkypeBackgroundTasks.dll
2016-04-18 18:26 - 2016-04-18 18:27 - 22284800 _____ () C:\Program Files\WindowsApps\Microsoft.Messaging_2.15.20002.0_x86__8wekyb3d8bbwe\SkyWrap.dll
2016-04-05 08:17 - 2016-04-05 08:17 - 00261984 _____ () C:\Users\Survivor &\AppData\Roaming\Sodriroc\Aokehp.dll
2016-04-25 18:39 - 2016-04-25 18:39 - 00679624 _____ () C:\Users\Survivor &\AppData\Local\Microsoft\OneDrive\17.3.6386.0412\ClientTelemetry.dll
2016-03-16 12:21 - 1999-12-31 21:00 - 01242584 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\ACE.dll
2016-04-25 21:10 - 2016-03-10 09:10 - 00115168 _____ () C:\Program Files (x86)\MPC AdCleaner\zlib1.dll
==================== Alternate Data Streams (Whitelisted) =========
(Se uma entrada for incluída na fixlist, somente o ADS será removido.)
==================== Modo de Segurança (Whitelisted) ===================
(Se uma entrada for incluída na fixlist, será removida do Registro. O valor "AlternateShell" será restaurado.)
==================== EXE Associação (Whitelisted) ===============
(Se uma entrada for incluída na fixlist, o ítem no Registro será restaurado para o padrão ou removido.)
==================== Internet Explorer confiável/restrito ===============
(Se uma entrada for incluída na fixlist, será removida do Registro.)
==================== Hosts Conteúdo: ==========================
(Se necessário, a diretiva Hosts: pode ser incluída na fixlist para redefinir o Hosts.)
2015-10-30 04:24 - 2016-04-25 19:13 - 00001134 ____A C:\Windows\system32\Drivers\etc\hosts
107.178.255.88 www.google-analytics.com
107.178.255.88 www.statcounter.com
107.178.255.88 statcounter.com
107.178.255.88 ssl.google-analytics.com
107.178.255.88 partner.googleadservices.com
107.178.255.88 google-analytics.com
107.178.248.130 static.doubleclick.net
107.178.247.130 connect.facebook.net
==================== Outras Áreas ============================
(Atualmente não há nenhuma correção automática para esta seção.)
HKU\S-1-5-21-3336018506-14070607-1352406699-1001\Control Panel\Desktop\\Wallpaper -> c:\windows\web\wallpaper\windows\img0.jpg
DNS Servers: 104.197.191.4
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Firewall do Windows está habilitado.
==================== MSCONFIG/TASK MANAGER ítens desabilitados ==
(Atualmente não há nenhuma correção automática para esta seção.)
==================== Regras do Firewall (Whitelisted) ===============
(Se uma entrada for incluída na fixlist, será removida do Registro. O arquivo não será movido, a menos que seja colocado separadamente.)
FirewallRules: [vm-monitoring-nb-session] => (Allow) LPort=139
FirewallRules: [{E2697BEA-431C-4F0A-B769-2C828BF60751}] => (Allow) C:\Program Files\Microsoft Office\Office16\lync.exe
FirewallRules: [{8D07B04C-2E06-43ED-B2FC-19F85D2E200E}] => (Allow) C:\Program Files\Microsoft Office\Office16\lync.exe
FirewallRules: [{757DE609-A7EC-43D9-8334-1404A78C2F68}] => (Allow) C:\Program Files\Microsoft Office\Office16\UcMapi.exe
FirewallRules: [{825B4C26-D629-4B6D-9E3B-08FC710420BB}] => (Allow) C:\Program Files\Microsoft Office\Office16\UcMapi.exe
FirewallRules: [{B0E7A553-BBB7-4476-83B5-F543B2EDABB6}] => (Allow) C:\Users\Survivor &\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{7EBE98EC-DE45-4F76-9163-94671C74E89A}] => (Allow) C:\Users\Survivor &\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{26DA07C0-67B9-49FC-A5EF-509D3FBB9676}] => (Allow) %systemroot%\system32\alg.exe
FirewallRules: [{2A628459-EC3B-41FE-908C-E97FECABB0A9}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
==================== Pontos de Restauração =========================
13-04-2016 19:19:35 Windows Update
13-04-2016 19:21:38 Windows Update
15-04-2016 09:07:10 Removed Java 8 Update 77
17-04-2016 02:04:22 Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030
17-04-2016 13:36:05 Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030
17-04-2016 13:40:30 Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030
19-04-2016 06:17:31 Removed Java 8 Update 77
20-04-2016 23:19:11 Installed Adobe Flash Player 14 ActiveX.
21-04-2016 15:17:17 Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501
==================== Dispositivos Apresentando Falhas No Gerenciador =============
Name: Dispositivo de High Definition Audio
Description: Dispositivo de High Definition Audio
Class Guid: {4d36e96c-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: HdAudAddService
Problem: : This device cannot start. (Code10)
Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device.
On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard.
==================== Erros no Log de eventos: =========================
Erros em Aplicativos:
==================
Error: (04/25/2016 10:08:16 PM) (Source: Software Protection Platform Service) (EventID: 8198) (User: )
Description: Falha na Ativação de Licença (slui.exe). Código de erro:
hr=0xC004F074
Argumento de linha de comando:
RuleId=502ff3ba-669a-4674-bbb1-601f34a3b968;Action=AutoActivateSilent;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=2de67392-b7a7-462a-b1ca-108dd189f588;NotificationInterval=1440;Trigger=UserLogon;SessionId=1
Error: (04/25/2016 10:08:16 PM) (Source: Software Protection Platform Service) (EventID: 8198) (User: )
Description: Falha na Ativação de Licença (slui.exe). Código de erro:
hr=0xC004F074
Argumento de linha de comando:
RuleId=502ff3ba-669a-4674-bbb1-601f34a3b968;Action=AutoActivateSilent;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=2de67392-b7a7-462a-b1ca-108dd189f588;NotificationInterval=1440;Trigger=NetworkAvailable
Error: (04/25/2016 09:36:28 PM) (Source: Software Protection Platform Service) (EventID: 8198) (User: )
Description: Falha na Ativação de Licença (slui.exe). Código de erro:
hr=0xC004F074
Argumento de linha de comando:
RuleId=502ff3ba-669a-4674-bbb1-601f34a3b968;Action=AutoActivateSilent;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=2de67392-b7a7-462a-b1ca-108dd189f588;NotificationInterval=1440;Trigger=UserLogon;SessionId=1
Error: (04/25/2016 09:36:26 PM) (Source: Software Protection Platform Service) (EventID: 8198) (User: )
Description: Falha na Ativação de Licença (slui.exe). Código de erro:
hr=0xC004F074
Argumento de linha de comando:
RuleId=502ff3ba-669a-4674-bbb1-601f34a3b968;Action=AutoActivateSilent;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=2de67392-b7a7-462a-b1ca-108dd189f588;NotificationInterval=1440;Trigger=NetworkAvailable
Error: (04/25/2016 07:20:15 PM) (Source: MultiSyncLogDBUpdater) (EventID: 0) (User: )
Description: Service failed on execute: I/O error 103
Error: (04/25/2016 07:19:22 PM) (Source: Software Protection Platform Service) (EventID: 8198) (User: )
Description: Falha na Ativação de Licença (slui.exe). Código de erro:
hr=0xC004F074
Argumento de linha de comando:
RuleId=502ff3ba-669a-4674-bbb1-601f34a3b968;Action=AutoActivateSilent;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=2de67392-b7a7-462a-b1ca-108dd189f588;NotificationInterval=1440;Trigger=UserLogon;SessionId=1
Error: (04/25/2016 07:19:21 PM) (Source: Software Protection Platform Service) (EventID: 8198) (User: )
Description: Falha na Ativação de Licença (slui.exe). Código de erro:
hr=0xC004F074
Argumento de linha de comando:
RuleId=502ff3ba-669a-4674-bbb1-601f34a3b968;Action=AutoActivateSilent;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=2de67392-b7a7-462a-b1ca-108dd189f588;NotificationInterval=1440;Trigger=NetworkAvailable
Error: (04/25/2016 06:39:15 PM) (Source: MultiSyncLogDBUpdater) (EventID: 0) (User: )
Description: Service failed on execute: I/O error 103
Error: (04/25/2016 06:35:36 PM) (Source: Software Protection Platform Service) (EventID: 8198) (User: )
Description: Falha na Ativação de Licença (slui.exe). Código de erro:
hr=0xC004F074
Argumento de linha de comando:
RuleId=502ff3ba-669a-4674-bbb1-601f34a3b968;Action=AutoActivateSilent;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=2de67392-b7a7-462a-b1ca-108dd189f588;NotificationInterval=1440;Trigger=UserLogon;SessionId=1
Error: (04/25/2016 06:35:32 PM) (Source: Software Protection Platform Service) (EventID: 8198) (User: )
Description: Falha na Ativação de Licença (slui.exe). Código de erro:
hr=0xC004F074
Argumento de linha de comando:
RuleId=502ff3ba-669a-4674-bbb1-601f34a3b968;Action=AutoActivateSilent;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=2de67392-b7a7-462a-b1ca-108dd189f588;NotificationInterval=1440;Trigger=NetworkAvailable
Erros de Sistema:
=============
Error: (04/25/2016 10:07:25 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Não foi possível iniciar o serviço Windows Presentation Foundation Font Cache 3.0.0.0 devido ao seguinte erro:
%%1053
Error: (04/25/2016 10:07:25 PM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Tempo limite esgotado (30000 milissegundos) ao aguardar a conexão do serviço FontCache3.0.0.0.
Error: (04/25/2016 10:05:50 PM) (Source: BugCheck) (EventID: 1001) (User: )
Description: 0x000000d1 (0xfffff80132503c08, 0x00000000000000ff, 0x00000000000000a4, 0xfffff80132503c08)C:\Windows\Minidump\042516-24921-01.dmpded029c4-7537-4dd7-b01a-ac89c648b545
Error: (04/25/2016 10:05:49 PM) (Source: EventLog) (EventID: 6008) (User: )
Description: O desligamento do sistema que ocorreu às 21:59:28 do dia 25/04/2016 não era esperado.
Error: (04/25/2016 10:05:24 PM) (Source: Microsoft-Windows-Kernel-Boot) (EventID: 29) (User: AUTORIDADE NT)
Description: 32212254731148288
Error: (04/25/2016 09:33:50 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: O serviço Host de Sincronização_84074 foi finalizado inesperadamente. Isto aconteceu 1 vez(es). A seguinte ação corretiva será tomada em 10000 milissegundos: Reiniciar o serviço.
Error: (04/25/2016 09:33:50 PM) (Source: DCOM) (EventID: 10016) (User: AUTORIDADE NT)
Description: específico do aplicativoLocalAtivação{D63B10C5-BB46-4990-A94F-E40B9D520160}{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}AUTORIDADE NTSISTEMAS-1-5-18LocalHost (Usando LRPC)Não DisponívelNão Disponível
Error: (04/25/2016 09:26:02 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: O serviço IjupeSaqs foi encerrado inesperadamente. Isso aconteceu 1 vez(es).
Error: (04/25/2016 09:25:59 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: O serviço 704B741A-A4FE-4774-89AC-94D79C6B6A31 foi encerrado inesperadamente. Isso aconteceu 1 vez(es).
Error: (04/25/2016 07:16:14 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Não foi possível iniciar o serviço Windows Presentation Foundation Font Cache 3.0.0.0 devido ao seguinte erro:
%%1053
CodeIntegrity:
===================================
Date: 2016-04-25 18:48:16.750
Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume3\Program Files\Common Files\microsoft shared\OFFICE16\MSOXMLMF.DLL that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2016-04-24 14:07:06.097
Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume3\Program Files\Common Files\microsoft shared\OFFICE16\MSOXMLMF.DLL that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2016-04-23 11:08:54.157
Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume3\Program Files\Common Files\microsoft shared\OFFICE16\MSOXMLMF.DLL that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2016-04-22 12:49:54.574
Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume3\Program Files\Common Files\microsoft shared\OFFICE16\MSOXMLMF.DLL that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2016-04-21 20:47:40.968
Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume3\Program Files\Common Files\microsoft shared\OFFICE16\MSOXMLMF.DLL that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2016-04-21 18:14:26.206
Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume3\Program Files\Common Files\microsoft shared\OFFICE16\MSOXMLMF.DLL that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2016-04-20 20:32:27.567
Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume3\Program Files\Common Files\microsoft shared\OFFICE16\MSOXMLMF.DLL that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2016-04-19 19:55:07.411
Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume3\Program Files\Common Files\microsoft shared\OFFICE16\MSOXMLMF.DLL that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2016-04-18 19:18:42.617
Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume3\Program Files\Common Files\microsoft shared\OFFICE16\MSOXMLMF.DLL that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2016-04-17 11:44:08.333
Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume3\Program Files\Common Files\microsoft shared\OFFICE16\MSOXMLMF.DLL that did not meet the Custom 3 / Antimalware signing level requirements.
==================== Informações da Memória ===========================
Processador: Intel(R) Core(TM) i3-4010U CPU @ 1.70GHz
Percentagem de memória em uso: 37%
RAM física total: 3976.27 MB
RAM física disponível: 2501.76 MB
Virtual Total: 4680.27 MB
Virtual disponível: 3237.86 MB
==================== Drives ================================
Drive c: (Rebellion) (Fixed) (Total:465.54 GB) (Free:148.4 GB) NTFS
==================== MBR & Tabela de Partições ==================
========================================================
Disk: 0 (Size: 465.8 GB) (Disk ID: EC3807F0)
Partition: GPT.
==================== Fim de Addition.txt ============================
Executado por Survivor & (2016-04-25 22:20:41)
Executando a partir de C:\Users\Survivor &\Downloads
Windows 10 Pro Versão 1511 (X64) (2016-03-16 14:03:12)
Modo da Inicialização: Normal
==========================================================
==================== Contas: =============================
Administrador (S-1-5-21-3336018506-14070607-1352406699-500 - Administrator - Disabled)
Convidado (S-1-5-21-3336018506-14070607-1352406699-501 - Limited - Disabled)
DefaultAccount (S-1-5-21-3336018506-14070607-1352406699-503 - Limited - Disabled)
Survivor & (S-1-5-21-3336018506-14070607-1352406699-1001 - Administrator - Enabled) => C:\Users\Survivor &
==================== Central de Segurança ========================
(Se uma entrada for incluída na fixlist, será removida.)
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
==================== Programas Instalados ======================
(Somente os programas adwares com a indicação "Oculto" podem ser adicionados à fixlist para desocultá-los. Os programas adwares devem ser desinstalados manualmente.)
µTorrent (HKU\S-1-5-21-3336018506-14070607-1352406699-1001\...\uTorrent) (Version: 3.4.5.41865 - BitTorrent Inc.)
Body Text Feathering (HKLM-x32\...\PopupProduct) (Version: 1.0.0.0 - Body Text Feathering) <==== ATENÇÃO
Breakthrough Plus Intro Digibook (HKLM-x32\...\Breakthrough Plus Intro Digibook) (Version: 1.0.0.0 - Macmillan Education UK)
CDisplayEx 1.10.30 (HKLM\...\CDisplayEx_is1) (Version: - Progdigy Software S.A.R.L.)
Dead or Alive 5 Last Round v.1.0.5 (HKLM-x32\...\Dead or Alive 5 Last Round_is1) (Version: - )
Fraps (remove only) (HKLM-x32\...\Fraps) (Version: - )
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 50.0.2661.87 - Google Inc.)
Google Update Helper (x32 Version: 1.3.29.5 - Google Inc.) Hidden
Herramientas de corrección de Microsoft Office 2016: español (Version: 16.0.4266.1001 - Microsoft Corporation) Hidden
Intel Android Device USB driver (HKLM\...\Intel Android Device USB driver) (Version: 1.8.1 - Intel)
Intel DnX USB Driver version 1.0.0 (HKLM\...\{B00B3C46-414C-4232-8021-29D40A90901F}_is1) (Version: 1.0.0 - Intel Corporation)
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 9.5.15.1730 - Intel Corporation)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 10.18.15.4248 - Intel Corporation)
MEE version 1.1.70 (HKU\S-1-5-21-3336018506-14070607-1352406699-1001\...\{646C7F16-BCD0-4776-8AE4-60263C871F13}_is1) (Version: 1.1.70 - Macmillan Education)
Microsoft Office Professional Plus 2016 (HKLM\...\Office16.PROPLUS) (Version: 16.0.4266.1001 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Pacote de Driver do Windows - Android (WUDFRd) WPD (04/07/2013 5.2.5326.4762) (HKLM\...\11A0B871BAD4BD9A57E59C3635218E2427AA2C62) (Version: 04/07/2013 5.2.5326.4762 - Android)
Pacote de Driver do Windows - Fuzhou Rockchip (Rockusb) Rockusb Device (08/05/2013 3.70.0000) (HKLM\...\20BAB42A3EFA96A512A3479105D342498A3184E2) (Version: 08/05/2013 3.70.0000 - Fuzhou Rockchip)
Pacote de Driver do Windows - Google, Inc. (WinUSB) AndroidUsbDeviceClass (08/27/2012 7.0.0000.00001) (HKLM\...\DD5996E7B3B8B7F86BD863BE2D13D10BAEEDF5EE) (Version: 08/27/2012 7.0.0000.00001 - Google, Inc.)
Pacote de Driver do Windows - Google, Inc. (WinUSB) AndroidUsbDeviceClass (08/27/2013 7.0.0000.00001) (HKLM\...\DD35777ACC26D30A3585F9724356AF8111A6F38C) (Version: 08/27/2013 7.0.0000.00001 - Google, Inc.)
Pacote de Driver do Windows - Google, Inc. (WinUSB) AndroidUsbDeviceClass (08/28/2014 11.0.0000.00000) (HKLM\...\092555911492C6959D2596D612F52DCA71881CA2) (Version: 08/28/2014 11.0.0000.00000 - Google, Inc.)
Pacote de Driver do Windows - MediaTek Inc. (usbser) Ports (01/05/2012 2.0000.0.1) (HKLM\...\49D9ABA9270C5BDFD7AE1BEB607D36B26BB90235) (Version: 01/05/2012 2.0000.0.1 - MediaTek Inc.)
Pacote de Driver do Windows - MediaTek Inc. (usbser) Ports (12/24/2011 2.0000.0.0) (HKLM\...\D0E6296D177F42BB31C0200E49412003DB6C4633) (Version: 12/24/2011 2.0000.0.0 - MediaTek Inc.)
Pacote de Driver do Windows - USB Devices (usbUDisc) USB (01/24/2014 1.0.0.1) (HKLM\...\B2A7D664285C0D269794E0F21D756D5138D1FB29) (Version: 01/24/2014 1.0.0.1 - USB Devices)
Potplayer-64 Bits (HKLM\...\PotPlayer64) (Version: - Kakao Corp.)
Qualcomm Atheros Bluetooth Suite (64) (HKLM\...\{A84A4FB1-D703-48DB-89E0-68B6499D2801}) (Version: 10.0.1.2 - Qualcomm Atheros)
Qualcomm Atheros WLAN and Bluetooth Client Installation Program (HKLM-x32\...\{28006915-2739-4EBE-B5E8-49B25D32EB33}) (Version: 12.69 - Qualcomm Atheros)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7719 - Realtek Semiconductor Corp.)
Revisores de Texto do Microsoft Office 2016 – Português (Brasil) (Version: 16.0.4266.1001 - Microsoft Corporation) Hidden
SAMSUNG USB Driver for Mobile Phones (HKLM\...\{D0795B21-0CDA-4a92-AB9E-6E92D8111E44}) (Version: 1.5.51.0 - SAMSUNG Electronics Co., Ltd.)
Sexy Beach Premium Resort (HKLM-x32\...\Sexy Beach Premium Resort_is1) (Version: - )
Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 19.0.9.4 - Synaptics Incorporated)
The Desktop Weather 2.0.1.11297 (HKLM\...\WeatherTool) (Version: 2.0.1.11297 - Baidu Japan Inc.) <==== ATENÇÃO
TTWiFi 1.0.0.1 (HKLM-x32\...\ttwifi) (Version: 1.0.0.1 - )
WinRAR 5.31 (64-bit) (HKLM\...\WinRAR archiver) (Version: 5.31.0 - win.rar GmbH)
==================== Exame Personalizado CLSID (Whitelisted): ==========================
(Se uma entrada for incluída na fixlist, será removida do Registro. O arquivo não será movido, a menos que seja colocado separadamente.)
CustomCLSID: HKU\S-1-5-21-3336018506-14070607-1352406699-1001_Classes\CLSID\{71DCE5D6-4B57-496B-AC21-CD5B54EB93FD}\localserver32 -> C:\Users\Survivor &\AppData\Local\Microsoft\OneDrive\17.3.6386.0412\FileCoAuth.exe (Microsoft Corporation)
==================== Tarefas Agendadas (Whitelisted) =============
(Se uma entrada for incluída na fixlist, será removida do Registro. O arquivo não será movido, a menos que seja colocado separadamente.)
Task: {196AECE8-A050-4211-AA79-B4CDB021BE32} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn2016 => C:\Program Files\Microsoft Office\Office16\msoia.exe [2015-07-31] (Microsoft Corporation)
Task: {233DE787-0D27-4C31-BB53-90F174CFD0A7} - System32\Tasks\Microsoft\Office\Office 15 Subscription Heartbeat => C:\Program Files\Common Files\Microsoft Shared\Office16\OLicenseHeartbeat.exe [2015-07-31] (Microsoft Corporation)
Task: {3C2E5D4A-A193-4405-8C21-D9C3D600885C} - System32\Tasks\MPC AdCleaner => C:\Program Files (x86)\MPC AdCleaner\AdCleaner.exe [2016-03-10] (DotC United Inc) <==== ATENÇÃO
Task: {61F9EF72-ACFE-4B3A-AA72-A5BAC2E612C6} - System32\Tasks\osTip => C:\ProgramData\WindowsMsg\osmsg.exe [2016-03-31] ()
Task: {B7218A44-AE9C-42CD-A23D-610AA6F37962} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2016-03-16] (Google Inc.)
Task: {BE9115C7-1C4E-47F8-839B-E0212BCC7320} - System32\Tasks\BaiduJP_Update_{8099779F-A13B-403e-B39A-65133857586B} => C:\Program Files (x86)\baidu\update\baidujp_update.exe [2016-03-31] (Baidu)
Task: {C00322F9-3149-47CC-8385-190E775120B0} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack2016 => C:\Program Files\Microsoft Office\Office16\msoia.exe [2015-07-31] (Microsoft Corporation)
Task: {CF171725-BF5A-41C9-824A-568A543667E0} - System32\Tasks\ttwifi => C:\Program Files (x86)\ttwifi\tiantianwifi.exe [2016-03-23] (TTWIFI)
Task: {E11FA7A7-E2B8-4AF4-9EF6-78A7F05A5922} - System32\Tasks\SlimCleaner Plus (Scheduled Scan - Survivor &) => C:\Program Files\SlimCleaner Plus\SlimCleanerPlus.exe
Task: {F9B79028-F4A6-4CD3-A1D3-D6B1F89DF34E} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2016-03-16] (Google Inc.)
(Se uma entrada for incluída na fixlist, o arquivo da tarefa (.job) será movido. O arquivo que está sendo executado pela tarefa não será movido.)
Task: C:\Windows\Tasks\BaiduJP_Update_{8099779F-A13B-403e-B39A-65133857586B}.job => C:\Program Files (x86)\baidu\update\baidujp_update.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\SlimCleaner Plus (Scheduled Scan - Survivor &).job => C:\Program Files\SlimCleaner Plus\SlimCleanerPlus.exe
==================== Atalhos =============================
(As entradas podem ser listadas para serem restauradas ou removidas.)
Shortcut: C:\Users\Survivor &\Desktop\Dead or Alive 5 Last Round.lnk -> C:\Games\Dead or Alive 5 Last Round\game.bat ()
Shortcut: C:\Users\Survivor &\Desktop\Настройки-Dead or Alive 5 Last Round.lnk -> C:\Games\Dead or Alive 5 Last Round\startup_setting.bat ()
==================== Módulos Carregados (Whitelisted) ==============
2015-10-30 04:18 - 2015-10-30 04:18 - 00185856 _____ () C:\Windows\SYSTEM32\ism32k.dll
2016-04-05 08:17 - 2016-04-05 08:17 - 00174432 _____ () C:\Users\Survivor &\AppData\Roaming\Sodriroc\Sodriroc.exe
2016-04-05 23:32 - 2016-04-05 23:32 - 00142296 _____ () C:\Program Files (x86)\WeatherTool\2.0.1.11297\WeatherService.exe
2016-04-12 21:35 - 2016-03-29 07:20 - 02656952 _____ () C:\Windows\system32\CoreUIComponents.dll
2016-04-05 08:17 - 2016-04-05 08:17 - 00670560 _____ () C:\Users\Survivor &\AppData\Roaming\Sodriroc\Abecgo.dll
2016-04-05 23:33 - 2016-04-05 23:33 - 01050072 _____ () C:\Program Files (x86)\WeatherTool\2.0.1.11297\WeatherEntryDll.dll
2016-04-12 21:35 - 2016-03-29 07:20 - 02656952 _____ () C:\Windows\System32\CoreUIComponents.dll
2016-04-25 18:39 - 2016-04-25 18:39 - 00959176 _____ () C:\Users\Survivor &\AppData\Local\Microsoft\OneDrive\17.3.6386.0412\amd64\ClientTelemetry.dll
2016-04-05 08:17 - 2016-04-05 08:17 - 00146272 _____ () C:\Users\Survivor &\AppData\Roaming\Sodriroc\Abecgo.exe
2016-04-18 18:26 - 2016-04-18 18:27 - 00144384 _____ () C:\Program Files\WindowsApps\Microsoft.Messaging_2.15.20002.0_x86__8wekyb3d8bbwe\SkypeHost.exe
2016-04-05 08:17 - 2016-04-05 08:17 - 00115552 _____ () C:\Users\Survivor &\AppData\Roaming\Sodriroc\Aokehp.exe
2016-03-11 22:37 - 2016-03-11 22:37 - 00093696 _____ () C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\Windows.UI.Shell.SharedUtilities.dll
2016-04-12 21:32 - 2016-04-02 00:25 - 00472064 _____ () C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\QuickActions.dll
2016-04-12 21:33 - 2016-04-02 00:03 - 07992832 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CortanaApi.dll
2016-04-12 21:33 - 2016-04-01 23:58 - 00591360 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll
2016-04-12 21:34 - 2016-04-01 23:59 - 02483200 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.BackgroundTask.dll
2016-04-12 21:34 - 2016-04-02 00:02 - 04089856 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\RemindersUI.dll
2015-09-30 20:39 - 2015-09-30 20:39 - 00415128 _____ () C:\Windows\system32\igfxTray.exe
2016-03-31 14:24 - 2016-03-31 14:24 - 01417216 _____ () C:\Users\Survivor &\AppData\Roaming\cpuminer\cpm.exe
2016-04-25 19:08 - 2016-03-31 16:28 - 02041856 _____ () C:\ProgramData\WindowsMsg\osmsg.exe
2016-04-21 16:27 - 2016-04-21 02:10 - 02224280 _____ () C:\Program Files (x86)\Google\Chrome\Application\50.0.2661.87\libglesv2.dll
2016-04-21 16:27 - 2016-04-21 02:10 - 00097944 _____ () C:\Program Files (x86)\Google\Chrome\Application\50.0.2661.87\libegl.dll
2016-04-18 18:26 - 2016-04-18 18:27 - 00141312 _____ () C:\Program Files\WindowsApps\Microsoft.Messaging_2.15.20002.0_x86__8wekyb3d8bbwe\SkypeBackgroundTasks.dll
2016-04-18 18:26 - 2016-04-18 18:27 - 22284800 _____ () C:\Program Files\WindowsApps\Microsoft.Messaging_2.15.20002.0_x86__8wekyb3d8bbwe\SkyWrap.dll
2016-04-05 08:17 - 2016-04-05 08:17 - 00261984 _____ () C:\Users\Survivor &\AppData\Roaming\Sodriroc\Aokehp.dll
2016-04-25 18:39 - 2016-04-25 18:39 - 00679624 _____ () C:\Users\Survivor &\AppData\Local\Microsoft\OneDrive\17.3.6386.0412\ClientTelemetry.dll
2016-03-16 12:21 - 1999-12-31 21:00 - 01242584 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\ACE.dll
2016-04-25 21:10 - 2016-03-10 09:10 - 00115168 _____ () C:\Program Files (x86)\MPC AdCleaner\zlib1.dll
==================== Alternate Data Streams (Whitelisted) =========
(Se uma entrada for incluída na fixlist, somente o ADS será removido.)
==================== Modo de Segurança (Whitelisted) ===================
(Se uma entrada for incluída na fixlist, será removida do Registro. O valor "AlternateShell" será restaurado.)
==================== EXE Associação (Whitelisted) ===============
(Se uma entrada for incluída na fixlist, o ítem no Registro será restaurado para o padrão ou removido.)
==================== Internet Explorer confiável/restrito ===============
(Se uma entrada for incluída na fixlist, será removida do Registro.)
==================== Hosts Conteúdo: ==========================
(Se necessário, a diretiva Hosts: pode ser incluída na fixlist para redefinir o Hosts.)
2015-10-30 04:24 - 2016-04-25 19:13 - 00001134 ____A C:\Windows\system32\Drivers\etc\hosts
107.178.255.88 www.google-analytics.com
107.178.255.88 www.statcounter.com
107.178.255.88 statcounter.com
107.178.255.88 ssl.google-analytics.com
107.178.255.88 partner.googleadservices.com
107.178.255.88 google-analytics.com
107.178.248.130 static.doubleclick.net
107.178.247.130 connect.facebook.net
==================== Outras Áreas ============================
(Atualmente não há nenhuma correção automática para esta seção.)
HKU\S-1-5-21-3336018506-14070607-1352406699-1001\Control Panel\Desktop\\Wallpaper -> c:\windows\web\wallpaper\windows\img0.jpg
DNS Servers: 104.197.191.4
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Firewall do Windows está habilitado.
==================== MSCONFIG/TASK MANAGER ítens desabilitados ==
(Atualmente não há nenhuma correção automática para esta seção.)
==================== Regras do Firewall (Whitelisted) ===============
(Se uma entrada for incluída na fixlist, será removida do Registro. O arquivo não será movido, a menos que seja colocado separadamente.)
FirewallRules: [vm-monitoring-nb-session] => (Allow) LPort=139
FirewallRules: [{E2697BEA-431C-4F0A-B769-2C828BF60751}] => (Allow) C:\Program Files\Microsoft Office\Office16\lync.exe
FirewallRules: [{8D07B04C-2E06-43ED-B2FC-19F85D2E200E}] => (Allow) C:\Program Files\Microsoft Office\Office16\lync.exe
FirewallRules: [{757DE609-A7EC-43D9-8334-1404A78C2F68}] => (Allow) C:\Program Files\Microsoft Office\Office16\UcMapi.exe
FirewallRules: [{825B4C26-D629-4B6D-9E3B-08FC710420BB}] => (Allow) C:\Program Files\Microsoft Office\Office16\UcMapi.exe
FirewallRules: [{B0E7A553-BBB7-4476-83B5-F543B2EDABB6}] => (Allow) C:\Users\Survivor &\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{7EBE98EC-DE45-4F76-9163-94671C74E89A}] => (Allow) C:\Users\Survivor &\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{26DA07C0-67B9-49FC-A5EF-509D3FBB9676}] => (Allow) %systemroot%\system32\alg.exe
FirewallRules: [{2A628459-EC3B-41FE-908C-E97FECABB0A9}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
==================== Pontos de Restauração =========================
13-04-2016 19:19:35 Windows Update
13-04-2016 19:21:38 Windows Update
15-04-2016 09:07:10 Removed Java 8 Update 77
17-04-2016 02:04:22 Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030
17-04-2016 13:36:05 Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030
17-04-2016 13:40:30 Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030
19-04-2016 06:17:31 Removed Java 8 Update 77
20-04-2016 23:19:11 Installed Adobe Flash Player 14 ActiveX.
21-04-2016 15:17:17 Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501
==================== Dispositivos Apresentando Falhas No Gerenciador =============
Name: Dispositivo de High Definition Audio
Description: Dispositivo de High Definition Audio
Class Guid: {4d36e96c-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: HdAudAddService
Problem: : This device cannot start. (Code10)
Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device.
On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard.
==================== Erros no Log de eventos: =========================
Erros em Aplicativos:
==================
Error: (04/25/2016 10:08:16 PM) (Source: Software Protection Platform Service) (EventID: 8198) (User: )
Description: Falha na Ativação de Licença (slui.exe). Código de erro:
hr=0xC004F074
Argumento de linha de comando:
RuleId=502ff3ba-669a-4674-bbb1-601f34a3b968;Action=AutoActivateSilent;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=2de67392-b7a7-462a-b1ca-108dd189f588;NotificationInterval=1440;Trigger=UserLogon;SessionId=1
Error: (04/25/2016 10:08:16 PM) (Source: Software Protection Platform Service) (EventID: 8198) (User: )
Description: Falha na Ativação de Licença (slui.exe). Código de erro:
hr=0xC004F074
Argumento de linha de comando:
RuleId=502ff3ba-669a-4674-bbb1-601f34a3b968;Action=AutoActivateSilent;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=2de67392-b7a7-462a-b1ca-108dd189f588;NotificationInterval=1440;Trigger=NetworkAvailable
Error: (04/25/2016 09:36:28 PM) (Source: Software Protection Platform Service) (EventID: 8198) (User: )
Description: Falha na Ativação de Licença (slui.exe). Código de erro:
hr=0xC004F074
Argumento de linha de comando:
RuleId=502ff3ba-669a-4674-bbb1-601f34a3b968;Action=AutoActivateSilent;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=2de67392-b7a7-462a-b1ca-108dd189f588;NotificationInterval=1440;Trigger=UserLogon;SessionId=1
Error: (04/25/2016 09:36:26 PM) (Source: Software Protection Platform Service) (EventID: 8198) (User: )
Description: Falha na Ativação de Licença (slui.exe). Código de erro:
hr=0xC004F074
Argumento de linha de comando:
RuleId=502ff3ba-669a-4674-bbb1-601f34a3b968;Action=AutoActivateSilent;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=2de67392-b7a7-462a-b1ca-108dd189f588;NotificationInterval=1440;Trigger=NetworkAvailable
Error: (04/25/2016 07:20:15 PM) (Source: MultiSyncLogDBUpdater) (EventID: 0) (User: )
Description: Service failed on execute: I/O error 103
Error: (04/25/2016 07:19:22 PM) (Source: Software Protection Platform Service) (EventID: 8198) (User: )
Description: Falha na Ativação de Licença (slui.exe). Código de erro:
hr=0xC004F074
Argumento de linha de comando:
RuleId=502ff3ba-669a-4674-bbb1-601f34a3b968;Action=AutoActivateSilent;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=2de67392-b7a7-462a-b1ca-108dd189f588;NotificationInterval=1440;Trigger=UserLogon;SessionId=1
Error: (04/25/2016 07:19:21 PM) (Source: Software Protection Platform Service) (EventID: 8198) (User: )
Description: Falha na Ativação de Licença (slui.exe). Código de erro:
hr=0xC004F074
Argumento de linha de comando:
RuleId=502ff3ba-669a-4674-bbb1-601f34a3b968;Action=AutoActivateSilent;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=2de67392-b7a7-462a-b1ca-108dd189f588;NotificationInterval=1440;Trigger=NetworkAvailable
Error: (04/25/2016 06:39:15 PM) (Source: MultiSyncLogDBUpdater) (EventID: 0) (User: )
Description: Service failed on execute: I/O error 103
Error: (04/25/2016 06:35:36 PM) (Source: Software Protection Platform Service) (EventID: 8198) (User: )
Description: Falha na Ativação de Licença (slui.exe). Código de erro:
hr=0xC004F074
Argumento de linha de comando:
RuleId=502ff3ba-669a-4674-bbb1-601f34a3b968;Action=AutoActivateSilent;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=2de67392-b7a7-462a-b1ca-108dd189f588;NotificationInterval=1440;Trigger=UserLogon;SessionId=1
Error: (04/25/2016 06:35:32 PM) (Source: Software Protection Platform Service) (EventID: 8198) (User: )
Description: Falha na Ativação de Licença (slui.exe). Código de erro:
hr=0xC004F074
Argumento de linha de comando:
RuleId=502ff3ba-669a-4674-bbb1-601f34a3b968;Action=AutoActivateSilent;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=2de67392-b7a7-462a-b1ca-108dd189f588;NotificationInterval=1440;Trigger=NetworkAvailable
Erros de Sistema:
=============
Error: (04/25/2016 10:07:25 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Não foi possível iniciar o serviço Windows Presentation Foundation Font Cache 3.0.0.0 devido ao seguinte erro:
%%1053
Error: (04/25/2016 10:07:25 PM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Tempo limite esgotado (30000 milissegundos) ao aguardar a conexão do serviço FontCache3.0.0.0.
Error: (04/25/2016 10:05:50 PM) (Source: BugCheck) (EventID: 1001) (User: )
Description: 0x000000d1 (0xfffff80132503c08, 0x00000000000000ff, 0x00000000000000a4, 0xfffff80132503c08)C:\Windows\Minidump\042516-24921-01.dmpded029c4-7537-4dd7-b01a-ac89c648b545
Error: (04/25/2016 10:05:49 PM) (Source: EventLog) (EventID: 6008) (User: )
Description: O desligamento do sistema que ocorreu às 21:59:28 do dia 25/04/2016 não era esperado.
Error: (04/25/2016 10:05:24 PM) (Source: Microsoft-Windows-Kernel-Boot) (EventID: 29) (User: AUTORIDADE NT)
Description: 32212254731148288
Error: (04/25/2016 09:33:50 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: O serviço Host de Sincronização_84074 foi finalizado inesperadamente. Isto aconteceu 1 vez(es). A seguinte ação corretiva será tomada em 10000 milissegundos: Reiniciar o serviço.
Error: (04/25/2016 09:33:50 PM) (Source: DCOM) (EventID: 10016) (User: AUTORIDADE NT)
Description: específico do aplicativoLocalAtivação{D63B10C5-BB46-4990-A94F-E40B9D520160}{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}AUTORIDADE NTSISTEMAS-1-5-18LocalHost (Usando LRPC)Não DisponívelNão Disponível
Error: (04/25/2016 09:26:02 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: O serviço IjupeSaqs foi encerrado inesperadamente. Isso aconteceu 1 vez(es).
Error: (04/25/2016 09:25:59 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: O serviço 704B741A-A4FE-4774-89AC-94D79C6B6A31 foi encerrado inesperadamente. Isso aconteceu 1 vez(es).
Error: (04/25/2016 07:16:14 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Não foi possível iniciar o serviço Windows Presentation Foundation Font Cache 3.0.0.0 devido ao seguinte erro:
%%1053
CodeIntegrity:
===================================
Date: 2016-04-25 18:48:16.750
Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume3\Program Files\Common Files\microsoft shared\OFFICE16\MSOXMLMF.DLL that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2016-04-24 14:07:06.097
Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume3\Program Files\Common Files\microsoft shared\OFFICE16\MSOXMLMF.DLL that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2016-04-23 11:08:54.157
Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume3\Program Files\Common Files\microsoft shared\OFFICE16\MSOXMLMF.DLL that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2016-04-22 12:49:54.574
Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume3\Program Files\Common Files\microsoft shared\OFFICE16\MSOXMLMF.DLL that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2016-04-21 20:47:40.968
Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume3\Program Files\Common Files\microsoft shared\OFFICE16\MSOXMLMF.DLL that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2016-04-21 18:14:26.206
Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume3\Program Files\Common Files\microsoft shared\OFFICE16\MSOXMLMF.DLL that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2016-04-20 20:32:27.567
Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume3\Program Files\Common Files\microsoft shared\OFFICE16\MSOXMLMF.DLL that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2016-04-19 19:55:07.411
Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume3\Program Files\Common Files\microsoft shared\OFFICE16\MSOXMLMF.DLL that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2016-04-18 19:18:42.617
Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume3\Program Files\Common Files\microsoft shared\OFFICE16\MSOXMLMF.DLL that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2016-04-17 11:44:08.333
Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume3\Program Files\Common Files\microsoft shared\OFFICE16\MSOXMLMF.DLL that did not meet the Custom 3 / Antimalware signing level requirements.
==================== Informações da Memória ===========================
Processador: Intel(R) Core(TM) i3-4010U CPU @ 1.70GHz
Percentagem de memória em uso: 37%
RAM física total: 3976.27 MB
RAM física disponível: 2501.76 MB
Virtual Total: 4680.27 MB
Virtual disponível: 3237.86 MB
==================== Drives ================================
Drive c: (Rebellion) (Fixed) (Total:465.54 GB) (Free:148.4 GB) NTFS
==================== MBR & Tabela de Partições ==================
========================================================
Disk: 0 (Size: 465.8 GB) (Disk ID: EC3807F0)
Partition: GPT.
==================== Fim de Addition.txt ============================