Resultado do exame Adicional Farbar Recovery Scan Tool (x64) Versão:05-03-2016 01 Executado por cleit (2016-04-05 13:57:17) Executando a partir de C:\Users\cleit\Downloads Windows 10 Home Single Language Versão 1511 (X64) (2016-03-30 12:03:33) Modo da Inicialização: Normal ========================================================== ==================== Contas: ============================= Administrador (S-1-5-21-83712061-1564803760-3242557166-500 - Administrator - Disabled) cleit (S-1-5-21-83712061-1564803760-3242557166-1001 - Administrator - Enabled) => C:\Users\cleit Convidado (S-1-5-21-83712061-1564803760-3242557166-501 - Limited - Disabled) DefaultAccount (S-1-5-21-83712061-1564803760-3242557166-503 - Limited - Disabled) ==================== Central de Segurança ======================== (Se uma entrada for incluída na fixlist, será removida.) AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} AV: Antivírus e antispyware da McAfee (Enabled - Up to date) {DA9F8ED0-D0DE-39CC-F55A-51AB4CC1B556} AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} AS: Antivírus e antispyware da McAfee (Enabled - Up to date) {61FE6F34-F6E4-3642-CFEA-6AD93746FFEB} FW: McAfee Firewall (Enabled) {E2A40FF5-9AB1-3894-DE05-F89EB212F22D} ==================== Programas Instalados ====================== (Somente os programas adwares com a indicação "Oculto" podem ser adicionados à fixlist para desocultá-los. Os programas adwares devem ser desinstalados manualmente.) Advanced Calendar 2.0.0.11189 (HKLM\...\{D9BAB2C9-5236-48c3-AF02-67E799F09BBD}) (Version: 2.0.0.11189 - MEIXIAN XIE) <==== ATENÇÃO Conexant HD Audio (HKLM\...\CNXT_AUDIO_HDA) (Version: 8.66.4.0 - Conexant) CyberLink Power2Go 8 (HKLM-x32\...\InstallShield_{2A87D48D-3FDF-41fd-97CD-A1E370EFFFE2}) (Version: 8.0.0.4505 - CyberLink Corp.) Dolby Digital Plus Advanced Audio (HKLM\...\{B0BFC63F-EA07-419E-960B-3FB2ED5DD0B2}) (Version: 7.6.5.1 - Dolby Laboratories Inc) Google Chrome (HKLM-x32\...\Google Chrome) (Version: 49.0.2623.110 - Google Inc.) Google Update Helper (x32 Version: 1.3.29.5 - Google Inc.) Hidden Intel(R) Management Engine Components (HKLM\...\{1CEAC85D-2590-4760-800F-8DE5E91F3700}) (Version: 11.0.0.1153 - Intel Corporation) Intel(R) Rapid Storage Technology (HKLM\...\{409CB30E-E457-4008-9B1A-ED1B9EA21140}) (Version: 14.5.2.1088 - Intel Corporation) Lenovo App Explorer (HKU\S-1-5-21-83712061-1564803760-3242557166-1001\...\Host App Service) (Version: 0.271.1.395 - SweetLabs for Lenovo) Lenovo BatteryGauge (HKLM\...\{B8D3ED8D-A295-44C2-8AE1-56823D44AD1F}) (Version: 1.0.017.00 - Lenovo) Lenovo EasyCamera (HKLM-x32\...\{399C37FB-08AF-493B-BFED-20FBD85EDF7F}) (Version: 6.0.1325.4_WHQL - Sonix) Lenovo OneKey Recovery (HKLM-x32\...\InstallShield_{46F4D124-20E5-4D12-BE52-EC177A7A4B42}) (Version: 8.1.0.4501 - CyberLink Corp.) Lenovo OneKey Recovery (Version: 8.1.0.4501 - CyberLink Corp.) Hidden Lenovo Photo Master (HKLM-x32\...\{BC94C56A-3649-420C-8756-2ADEBE399D33}) (Version: 2.1.3330.01 - CyberLink Corp.) Lenovo pointing device (HKLM\...\Elantech) (Version: 11.4.65.2 - ELAN Microelectronic Corp.) Lenovo PowerDVD12 (HKLM-x32\...\InstallShield_{B46BEA36-0B71-4A4E-AE41-87241643FA0A}) (Version: 12.0.5709.60 - CyberLink Corp.) Lenovo PowerDVD12 (x32 Version: 12.0.5709.60 - CyberLink Corp.) Hidden Lenovo QuickOptimizer (HKLM\...\{8D2C871B-1B9F-45AC-9C43-2BB18089CDFA}) (Version: 1.0.019.00 - Lenovo) Lenovo Solution Center (HKLM\...\{F925868A-2F2C-414B-A5A7-C613039CE9E4}) (Version: 3.1.001.00 - Lenovo) Lenovo System Interface Foundation (HKLM\...\{C2E5CA37-C862-4A69-AC6D-24F450A20C16}) (Version: 1.0.054.00 - Lenovo) LenovoUtility (HKLM-x32\...\InstallShield_{6ADA7E88-8D16-4D0D-BC90-2B93AC5E56DA}) (Version: 3.0.0.4 - Lenovo) LenovoUtility (x32 Version: 3.0.0.4 - Lenovo) Hidden Manuais do usuário (x32 Version: 4.0.0.1 - Lenovo) Hidden McAfee LiveSafe (HKLM-x32\...\MSC) (Version: 14.0.7086 - McAfee, Inc.) Metric Collection SDK (x32 Version: 1.1.0012.00 - Lenovo Group Limited) Hidden Metric Collection SDK 35 (x32 Version: 1.2.0010.00 - Lenovo Group Limited) Hidden Microsoft Office Language Pack 2010 - Portuguese/Português (Brasil) (HKLM\...\Office14.OMUI.pt-br) (Version: 14.0.7015.1000 - Microsoft Corporation) Microsoft Office Professional Plus 2010 (HKLM\...\Office14.PROPLUS) (Version: 14.0.7015.1000 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation) Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation) Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation) Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.50903 - Microsoft Corporation) Pacote de Idiomas do Microsoft Visual Studio 2010 Tools for Office Runtime (x64) - Português (Brasil) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64) Language Pack - PTB) (Version: 10.0.50903 - Microsoft Corporation) Qualcomm Atheros Bluetooth Suite (64) (HKLM\...\{A84A4FB1-D703-48DB-89E0-68B6499D2801}) (Version: 10.0.1.1 - Qualcomm Atheros) Qualcomm Atheros Client Installation Program (HKLM-x32\...\{28006915-2739-4EBE-B5E8-49B25D32EB33}) (Version: 10.0 - Qualcomm Atheros) REACHit (HKLM-x32\...\{4532E4C5-C84D-4040-A044-ECFCC5C6995B}) (Version: 2.5.003.11 - Lenovo) Realtek Card Reader (HKLM-x32\...\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}) (Version: 10.0.10125.31214 - Realtek Semiconductor Corp.) Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 10.1.505.2015 - Realtek) Service Pack 2 for Microsoft Office 2010 (KB2687455) 64-Bit Edition (HKLM\...\{90140000-0011-0000-1000-0000000FF1CE}_Office14.PROPLUS_{A3364707-2F53-4C83-8F68-C9877A9080C7}) (Version: - Microsoft) Service Pack 2 for Microsoft Office 2010 (KB2687455) 64-Bit Edition (Version: - Microsoft) Hidden Service Pack 2 for Microsoft Office 2010 Language Pack (KB2687449) 64-Bit Edition (HKLM\...\{90140000-0100-0416-1000-0000000FF1CE}_Office14.OMUI.pt-br_{513370D1-093D-4596-84AA-92B001489E6C}) (Version: - Microsoft) Service Pack 2 for Microsoft Office 2010 Language Pack (KB2687449) 64-Bit Edition (Version: - Microsoft) Hidden SHAREit (HKLM-x32\...\SHAREit_is1) (Version: 2.5.5.1 - Lenovo) Software de dispositivo do Chipset Intel® (x32 Version: 10.1.1.7 - Intel(R) Corporation) Hidden User Manuals (HKLM-x32\...\InstallShield_{F07C2CF8-4C53-4EC3-8162-A6221E36EB88}) (Version: 4.0.0.1 - Lenovo) ==================== Exame Personalizado CLSID (Whitelisted): ========================== (Se uma entrada for incluída na fixlist, será removida do Registro. O arquivo não será movido, a menos que seja colocado separadamente.) CustomCLSID: HKU\S-1-5-21-83712061-1564803760-3242557166-1001_Classes\CLSID\{71DCE5D6-4B57-496B-AC21-CD5B54EB93FD}\localserver32 -> C:\Users\cleit\AppData\Local\Microsoft\OneDrive\17.3.6302.0225\FileCoAuth.exe (Microsoft Corporation) ==================== Tarefas Agendadas (Whitelisted) ============= (Se uma entrada for incluída na fixlist, será removida do Registro. O arquivo não será movido, a menos que seja colocado separadamente.) Task: {0346D339-C0DB-4C8D-BC5E-5E10E9994E57} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe Task: {06E9547A-1F7D-451E-99FB-362E3796A38F} - System32\Tasks\Lenovo\REACHit Agent Startup => C:\Program Files (x86)\Lenovo\REACHit\REACHitAgent.exe [2016-02-22] (Lenovo) Task: {0FB85DF7-80E4-48F4-979F-BAC7ADAB7A22} - System32\Tasks\DriverScanner => C:\Program Files (x86)\Uniblue\DriverScanner\driverscanner.exe Task: {10694F08-B050-40B9-9DC8-B3D247BAC1BD} - System32\Tasks\Lenovo\LSC\Lenovo Solution Center Notifications => C:\Program Files\Lenovo\Lenovo Solution Center\LSCNotify.exe [2015-08-07] (Lenovo) Task: {1ACD2F78-8248-462B-A3FF-8AE58DB08ED8} - System32\Tasks\AutoKMS => C:\Windows\AutoKMS\AutoKMS.exe [2016-03-30] () Task: {2E65903B-4515-4FF7-8011-0AD96F4D2B58} - System32\Tasks\TBPFPPTOFLSIJHGY => C:\ProgramData\Service7609\Service7609.exe [2016-04-05] () <==== ATENÇÃO Task: {38E499F6-C862-46E5-8818-72217B10E551} - System32\Tasks\CreateExplorerShellUnelevatedTask => /NOUACCHECK Task: {3AD2BF80-1DB5-4307-B619-DF3968369D3C} - System32\Tasks\Price Fountain => C:\Users\cleit\AppData\Roaming\PRICEF~2\UPDATE~1\UPDATE~1.EXE <==== ATENÇÃO Task: {47219D31-B231-42F8-AB7C-B32CD0AB9825} - System32\Tasks\PDVDServ12 Task => C:\Program Files (x86)\Lenovo\PowerDVD12\PDVD12Serv.exe [2015-09-11] (CyberLink Corp.) Task: {47608318-37A9-45C1-BF6C-3A0ADDBA5CDC} - System32\Tasks\McAfee\McAfee Idle Detection Task Task: {52C0C3B4-4DAA-4EB2-A613-D5BA81CC817F} - System32\Tasks\Intel Security DAT Reputation (AMCore) periodic endpoint safety pulse => C:\Program Files\Common Files\McAfee\AMContent\scanners\x86_64\datrep\54.0\mcdatrep.exe [2016-03-31] (McAfee, Inc.) Task: {5CCACFD9-3A7E-4F53-9B62-5885C7404E63} - System32\Tasks\Security Cleaner => C:\Users\cleit\AppData\Roaming\Security Cleaner\Security Cleaner.exe [2016-04-04] () <==== ATENÇÃO Task: {5D7863D5-D261-40AB-ACE2-7BF1F3D06263} - System32\Tasks\Lenovo\ImController\Lenovo iM Controller Scheduled Maintenance => Sc.exe control iMControllerService 128 Task: {620D97B1-7494-4AC4-9D0F-33449BE24296} - System32\Tasks\WinTaske => C:\Program Files (x86)\WinTaske\WinTaske\WinTaske.exe [2016-03-29] () Task: {635DA75C-E83A-44DF-9038-567ABB78BA5E} - System32\Tasks\McAfee\McAfee Auto Maintenance Task Agent Task: {6F298668-554F-428F-BF97-0A4AD36B1D2C} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe Task: {6FCB4D7A-B90A-4008-A2F1-B4EBBA92E8FD} - System32\Tasks\Lenovo\Lenovo Customer Feedback Program 64 => C:\Program Files (x86)\Lenovo\Customer Feedback Program\Lenovo.TVT.CustomerFeedback.Agent.exe [2015-07-08] (Lenovo) Task: {81AE50D1-9023-4BEC-B3E2-30FB58E88ABC} - System32\Tasks\CyberLink\Photo Master Gadget startup => C:\Program Files (x86)\Lenovo\Lenovo Photo Master\PhotoMasterWorker.exe [2015-09-30] (CyberLink Corp.) Task: {84E9BFFB-0137-4A6A-ACA3-7A05295CB616} - System32\Tasks\SmartComp Safe Network Uninstaller => C:\Program Files (x86)\SmartComp Safe Network\msnworker.exe [2016-04-04] (East CH Soft) <==== ATENÇÃO Task: {93F6C8C1-EC6D-4512-A6EC-17A91FDC0654} - System32\Tasks\cleitGobbingRoutesV2 => Rundll32.exe RodsDainty.dll,main 7 1 <==== ATENÇÃO Task: {9525588A-D97B-4945-A052-0E51D8ACA833} - System32\Tasks\App Explorer => C:\Users\cleit\AppData\Local\Host App Service\Engine\HostAppServiceUpdater.exe [2016-03-08] (SweetLabs, Inc) Task: {A687CA03-5AC2-434F-A1F7-D130789489CC} - System32\Tasks\Lenovo\Lenovo Solution Center Launcher => C:\Program Files\lenovo\lenovo solution center\App\LSCService.exe [2015-08-07] (Lenovo) Task: {BFF1EC2F-D083-4B14-A9AF-20675FFB9CAE} - System32\Tasks\Lenovo\REACHit Agent Update => C:\Program Files (x86)\Lenovo\REACHit\REACHitAgent.exe [2016-02-22] (Lenovo) Task: {C0DC1DA0-8F56-4961-8E9B-ED1C6A06F921} - System32\Tasks\UCBrowserUpdater => C:\Program Files (x86)\UCBrowser\Application\update_task.exe Task: {C83F3527-0743-4C8A-801E-649F1B7ABA83} - System32\Tasks\{13CCEF3F-10BB-B952-AF0C-62E6478DAFA8} => C:\Users\cleit\AppData\Roaming\PriceFountainUpdateVer\Sync.exe [2013-04-26] () <==== ATENÇÃO Task: {CC78EA90-B59F-40FB-A2B0-7404FB7345CF} - System32\Tasks\Pritc => C:\Users\cleit\AppData\Local\Temp\is-Q621Q.tmp\print.exe <==== ATENÇÃO Task: {D40B8B20-7760-4474-A32F-A89665E2F2A4} - System32\Tasks\{E54AF11F-5ABE-4FBF-AE4E-E2A9CEC134BD} => pcalua.exe -a "C:\Program Files (x86)\Wondershare\TunesGo\unins000.exe" -c /WAF Task: {D84C25FF-F4EC-41D9-84AD-BEF521B87A3C} - System32\Tasks\Lenovo\ImController\Plugins\LenovoSystemUpdatePlugin_TVSUUpdateTask => reg.exe add hklm\SOFTWARE\Lenovo\SystemUpdatePlugin\scheduler /v start /t reg_dword /d 1 /f /reg:32 Task: {D894E495-216C-41B1-8CE6-72FB44644465} - System32\Tasks\Odanji => C:\PROGRA~1\PYKTIH~1\Teemsinu.bat Task: {F3F3993A-20ED-4672-83C2-B43AD206F363} - System32\Tasks\Lenovo\LSC\LSCHardwareScan => C:\Program Files\Lenovo\Lenovo Solution Center\LSC.exe [2015-08-07] () (Se uma entrada for incluída na fixlist, o arquivo da tarefa (.job) será movido. O arquivo que está sendo executado pela tarefa não será movido.) Task: C:\Windows\Tasks\CreateExplorerShellUnelevatedTask.job => C:\Windows\explorer.exe Task: C:\Windows\Tasks\DriverScanner.job => C:\Program Files (x86)\Uniblue\DriverScanner\driverscanner.exe Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe Task: C:\Windows\Tasks\Price Fountain.job => Task: C:\Windows\Tasks\TBPFPPTOFLSIJHGY.job => C:\ProgramData\Service7609\Service7609.exe <==== ATENÇÃO Task: C:\Windows\Tasks\UCBrowserUpdater.job => C:\Program Files (x86)\UCBrowser\Application\update_task.exe Task: C:\Windows\Tasks\{13CCEF3F-10BB-B952-AF0C-62E6478DAFA8}.job => ==================== Atalhos ============================= (As entradas podem ser listadas para serem restauradas ou removidas.) ==================== Módulos Carregados (Whitelisted) ============== 2015-10-30 04:18 - 2015-10-30 04:18 - 00185856 _____ () C:\Windows\SYSTEM32\ism32k.dll 2016-04-04 16:56 - 2016-04-04 16:56 - 03587000 _____ () C:\ProgramData\System32\SafeGuard64.dll 2016-04-04 15:53 - 2016-04-04 15:53 - 00254464 _____ () C:\Program Files (x86)\B3238994-1459799481-11E5-9BD7-641C677DEAC4\knsy400E.tmpfs 2015-12-25 05:42 - 2015-12-25 05:42 - 00141960 _____ () C:\Program Files (x86)\CalendarTool\2.0.0.11189\CalendarServ.exe 2015-12-25 05:42 - 2015-12-25 05:42 - 03934344 _____ () C:\Program Files (x86)\CalendarTool\2.0.0.11189\Calendar.exe 2015-12-25 05:42 - 2015-12-25 05:42 - 00148104 _____ () C:\Program Files (x86)\CalendarTool\2.0.0.11189\CalendarEntry.dll 2016-03-30 15:33 - 2016-02-23 08:27 - 02654872 _____ () C:\Windows\system32\CoreUIComponents.dll 2016-03-30 16:07 - 2016-03-30 16:08 - 00144384 _____ () C:\Program Files\WindowsApps\Microsoft.Messaging_2.13.20000.0_x86__8wekyb3d8bbwe\SkypeHost.exe 2016-03-30 15:33 - 2016-02-23 08:27 - 02654872 _____ () C:\Windows\System32\CoreUIComponents.dll 2013-09-05 00:17 - 2013-09-05 00:17 - 04300456 _____ () C:\Program Files\Common Files\microsoft shared\OFFICE14\Cultures\OFFICE.ODF 2015-08-18 03:41 - 2015-08-16 14:13 - 00395880 _____ () C:\Windows\system32\igfxTray.exe 2016-03-30 15:30 - 2015-12-07 01:14 - 00093696 _____ () C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\Windows.UI.Shell.SharedUtilities.dll 2016-03-30 15:32 - 2016-02-23 05:36 - 00472064 _____ () C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\QuickActions.dll 2016-03-30 15:33 - 2016-01-04 22:29 - 07992832 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CortanaApi.dll 2016-03-30 15:31 - 2016-01-04 22:23 - 00591360 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll 2016-03-30 15:33 - 2016-01-16 02:10 - 02483200 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.BackgroundTask.dll 2016-03-30 15:33 - 2016-01-16 02:13 - 04089856 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\RemindersUI.dll 2016-02-25 11:26 - 2016-02-25 11:26 - 00791848 _____ () C:\Program Files\Lenovo\LenovoUtility\utility.exe 2016-02-25 11:26 - 2016-02-25 11:26 - 00097048 _____ () C:\Program Files\Lenovo\LenovoUtility\kbdhook.dll 2016-02-25 12:30 - 2010-10-26 12:40 - 00049056 _____ () C:\Program Files\CONEXANT\ForteConfig\fmapp.exe 2016-04-04 16:56 - 2016-04-04 16:56 - 02771896 _____ () C:\ProgramData\System32\SafeGuard32.dll 2016-04-04 15:04 - 2016-04-04 16:00 - 00086528 _____ () C:\Program Files (x86)\SmartComp Safe Network\mgwz.dll 2015-12-25 05:42 - 2015-12-25 05:42 - 00543368 _____ () C:\Program Files (x86)\CalendarTool\2.0.0.11189\EVPTask.dll 2015-12-25 05:42 - 2015-12-25 05:42 - 00406664 _____ () C:\Program Files (x86)\CalendarTool\2.0.0.11189\EVPNet.dll 2015-12-25 05:41 - 2015-12-25 05:41 - 00428680 _____ () C:\Program Files (x86)\CalendarTool\2.0.0.11189\EVPDR.dll 2016-03-30 16:07 - 2016-03-30 16:08 - 00141312 _____ () C:\Program Files\WindowsApps\Microsoft.Messaging_2.13.20000.0_x86__8wekyb3d8bbwe\SkypeBackgroundTasks.dll 2016-03-30 16:07 - 2016-03-30 16:08 - 22330368 _____ () C:\Program Files\WindowsApps\Microsoft.Messaging_2.13.20000.0_x86__8wekyb3d8bbwe\SkyWrap.dll 2016-04-04 17:01 - 2016-04-04 17:01 - 00367104 _____ () C:\Users\cleit\AppData\Local\GobbingRoutes\RodsDainty.dll 2016-03-30 14:36 - 2016-02-10 14:54 - 00161736 _____ () C:\ProgramData\Lenovo\iMController\Plugins\LenovoAudioPlugin\x86\QualityStatsRevInterop.dll 2016-02-25 11:28 - 2015-09-30 05:19 - 00875960 _____ () C:\Program Files (x86)\Lenovo\Lenovo Photo Master\subsys\Kernel\Boomerang\UNO.dll 2016-02-25 11:28 - 2015-09-30 05:05 - 00081920 _____ () C:\Program Files (x86)\Lenovo\Lenovo Photo Master\koan\_ctypes.pyd 2016-04-04 18:46 - 2016-03-31 18:11 - 02014720 _____ () C:\ProgramData\WindowsMsg\675D131108D4FD145B0BFBC68A3E018A.dll 2016-02-25 11:32 - 2014-07-04 01:35 - 00627672 _____ () C:\Program Files (x86)\Lenovo\Power2Go\CLMediaLibrary.dll 2014-07-04 12:35 - 2014-07-04 12:35 - 00016856 _____ () C:\Program Files (x86)\Lenovo\Power2Go\CLMLSvcPS.dll 2016-02-25 11:26 - 2015-02-12 16:02 - 00224696 _____ () C:\Program Files (x86)\Lenovo\CCSDK\SDKClient.dll 2016-03-30 18:41 - 2016-03-04 15:51 - 00096768 _____ () C:\Program Files (x86)\Google\Chrome\Application\49.0.2623.110\chrome_elf.dll 2016-03-30 18:41 - 2016-03-27 04:58 - 01675928 _____ () C:\Program Files (x86)\Google\Chrome\Application\49.0.2623.110\libglesv2.dll 2016-03-30 18:41 - 2016-03-27 04:58 - 00086168 _____ () C:\Program Files (x86)\Google\Chrome\Application\49.0.2623.110\libegl.dll ==================== Alternate Data Streams (Whitelisted) ========= (Se uma entrada for incluída na fixlist, somente o ADS será removido.) ==================== Modo de Segurança (Whitelisted) =================== (Se uma entrada for incluída na fixlist, será removida do Registro. O valor "AlternateShell" será restaurado.) HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS => ""="" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\mcpltsvc => ""="" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mcapexe => ""="" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\McMPFSvc => ""="Service" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\McNaiAnn => ""="" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MCODS => ""="" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mcpltsvc => ""="" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfeaack => ""="Service" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfeaack.sys => ""="Driver" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfeavfk => ""="Service" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfeavfk.sys => ""="Driver" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfefire => ""="Service" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfefirek => ""="Service" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfefirek.sys => ""="Driver" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfehidk => ""="Service" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfehidk.sys => ""="Driver" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfemms => ""="Service" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfetdi2k => ""="Service" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfetdi2k.sys => ""="Driver" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfevtp => ""="Service" ==================== EXE Associação (Whitelisted) =============== (Se uma entrada for incluída na fixlist, o ítem no Registro será restaurado para o padrão ou removido.) ==================== Internet Explorer confiável/restrito =============== (Se uma entrada for incluída na fixlist, será removida do Registro.) ==================== Hosts Conteúdo: ========================== (Se necessário, a diretiva Hosts: pode ser incluída na fixlist para redefinir o Hosts.) 2015-10-30 04:24 - 2016-04-04 19:28 - 00002826 ____N C:\Windows\system32\Drivers\etc\hosts 107.178.255.88 www.google-analytics.com 107.178.255.88 www.statcounter.com 107.178.255.88 statcounter.com 107.178.255.88 ssl.google-analytics.com 107.178.255.88 partner.googleadservices.com 107.178.255.88 google-analytics.com 107.178.248.130 static.doubleclick.net 107.178.247.130 connect.facebook.net 107.178.255.88 www.google-analytics.com 107.178.255.88 www.statcounter.com 107.178.255.88 statcounter.com 107.178.255.88 ssl.google-analytics.com 107.178.255.88 partner.googleadservices.com 107.178.255.88 google-analytics.com 107.178.248.130 static.doubleclick.net 107.178.247.130 connect.facebook.net127.0.0.1 down.baidu2016.com 127.0.0.1 123.sogou.com 127.0.0.1 www.czzsyzgm.com 127.0.0.1 www.czzsyzxl.com 127.0.0.1 union.baidu2019.com0.0.0.0 0.0.0.0 # fix for traceroute and netstat display anomaly 0.0.0.0 tracking.opencandy.com.s3.amazonaws.com 0.0.0.0 media.opencandy.com 0.0.0.0 cdn.opencandy.com 0.0.0.0 tracking.opencandy.com 0.0.0.0 api.opencandy.com 0.0.0.0 api.recommendedsw.com 0.0.0.0 installer.betterinstaller.com 0.0.0.0 installer.filebulldog.com 0.0.0.0 d3oxtn1x3b8d7i.cloudfront.net 0.0.0.0 inno.bisrv.com Existem ainda 23 mais linhas. ==================== Outras Áreas ============================ (Atualmente não há nenhuma correção automática para esta seção.) HKU\S-1-5-21-83712061-1564803760-3242557166-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\cleit\AppData\Local\Packages\Microsoft.Windows.Photos_8wekyb3d8bbwe\LocalState\PhotosAppBackground\{87165317-3bd7-4766-8b09-a62ad9a8310d}.jpg DNS Servers: 189.4.64.95 - 189.4.64.110 HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1) Firewall do Windows está habilitado. ==================== MSCONFIG/TASK MANAGER ítens desabilitados == (Atualmente não há nenhuma correção automática para esta seção.) ==================== Regras do Firewall (Whitelisted) =============== (Se uma entrada for incluída na fixlist, será removida do Registro. O arquivo não será movido, a menos que seja colocado separadamente.) FirewallRules: [vm-monitoring-nb-session] => (Allow) LPort=139 FirewallRules: [{2F08FEDB-8581-4A1E-AD6B-02ABC3B167D2}] => (Allow) C:\Program Files (x86)\Lenovo\Lenovo Photo Master\PhotoPlus.exe FirewallRules: [{9AC307F5-D238-4CC4-AE81-89CDD1B0F238}] => (Allow) C:\Program Files (x86)\Lenovo\Lenovo Photo Master\subsys\AdvPhotoEditor\PhotoDirector5.exe FirewallRules: [{31CF7272-7AC9-4C38-BBC1-D5FDA1C62614}] => (Allow) C:\Program Files (x86)\Lenovo\SHAREit\SHAREit.exe FirewallRules: [{C794C845-6C87-4BE1-8D6B-3FFDC8A1D12D}] => (Allow) C:\Program Files (x86)\Lenovo\SHAREit\SHAREit.exe FirewallRules: [{48F2899B-8BDF-4E2F-B0C7-437EEA387EEB}] => (Allow) C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe FirewallRules: [{55416683-03FD-41FE-8D30-79A479FE3F98}] => (Allow) C:\Program Files\Microsoft Office 15\root\Office15\Lync.exe FirewallRules: [{19F33319-8D7A-4E28-A207-D286C5D74FE2}] => (Allow) C:\Program Files\Microsoft Office 15\root\Office15\UcMapi.exe FirewallRules: [{70617AFA-D84C-4EF8-A064-A75FED3FBF7C}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe ==================== Pontos de Restauração ========================= 30-03-2016 09:03:01 Instalador de Módulos do Windows 04-04-2016 15:22:56 Windows Update 04-04-2016 15:23:44 Windows Update 04-04-2016 18:36:41 Operação de restauração ==================== Dispositivos Apresentando Falhas No Gerenciador ============= ==================== Erros no Log de eventos: ========================= Erros em Aplicativos: ================== Error: (04/05/2016 01:58:04 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Nome do aplicativo com falha: McCSPServiceHost.exe, versão: 1.8.267.0, carimbo de data/hora: 0x56cc37ae Nome do módulo com falha: SafeGuard64.dll_unloaded, versão: 2.2.0.40, carimbo de data/hora: 0x5683828f Código de exceção: 0xc0000005 Deslocamento da falha: 0x000000000005827b ID do processo com falha: 0x1b94 Hora de início do aplicativo com falha: 0xMcCSPServiceHost.exe0 Caminho do aplicativo com falha: McCSPServiceHost.exe1 Caminho do módulo com falha: McCSPServiceHost.exe2 ID do Relatório: McCSPServiceHost.exe3 Nome completo do pacote com falha: McCSPServiceHost.exe4 ID do aplicativo relativo ao pacote com falha: McCSPServiceHost.exe5 Error: (04/05/2016 01:52:56 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Nome do aplicativo com falha: svchost.exe_DiagTrack, versão: 10.0.10586.0, carimbo de data/hora: 0x5632d7ba Nome do módulo com falha: SafeGuard64.dll_unloaded, versão: 2.2.0.40, carimbo de data/hora: 0x5683828f Código de exceção: 0xc0000005 Deslocamento da falha: 0x000000000005827b ID do processo com falha: 0x2198 Hora de início do aplicativo com falha: 0xsvchost.exe_DiagTrack0 Caminho do aplicativo com falha: svchost.exe_DiagTrack1 Caminho do módulo com falha: svchost.exe_DiagTrack2 ID do Relatório: svchost.exe_DiagTrack3 Nome completo do pacote com falha: svchost.exe_DiagTrack4 ID do aplicativo relativo ao pacote com falha: svchost.exe_DiagTrack5 Error: (04/05/2016 01:50:15 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Nome do aplicativo com falha: svchost.exe_DiagTrack, versão: 10.0.10586.0, carimbo de data/hora: 0x5632d7ba Nome do módulo com falha: SafeGuard64.dll_unloaded, versão: 2.2.0.40, carimbo de data/hora: 0x5683828f Código de exceção: 0xc0000005 Deslocamento da falha: 0x000000000005827b ID do processo com falha: 0xba8 Hora de início do aplicativo com falha: 0xsvchost.exe_DiagTrack0 Caminho do aplicativo com falha: svchost.exe_DiagTrack1 Caminho do módulo com falha: svchost.exe_DiagTrack2 ID do Relatório: svchost.exe_DiagTrack3 Nome completo do pacote com falha: svchost.exe_DiagTrack4 ID do aplicativo relativo ao pacote com falha: svchost.exe_DiagTrack5 Error: (04/05/2016 01:47:15 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Nome do aplicativo com falha: McCSPServiceHost.exe, versão: 1.8.267.0, carimbo de data/hora: 0x56cc37ae Nome do módulo com falha: SafeGuard64.dll_unloaded, versão: 2.2.0.40, carimbo de data/hora: 0x5683828f Código de exceção: 0xc0000005 Deslocamento da falha: 0x000000000005827b ID do processo com falha: 0xae8 Hora de início do aplicativo com falha: 0xMcCSPServiceHost.exe0 Caminho do aplicativo com falha: McCSPServiceHost.exe1 Caminho do módulo com falha: McCSPServiceHost.exe2 ID do Relatório: McCSPServiceHost.exe3 Nome completo do pacote com falha: McCSPServiceHost.exe4 ID do aplicativo relativo ao pacote com falha: McCSPServiceHost.exe5 Error: (04/05/2016 01:46:19 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Nome do aplicativo com falha: svchost.exe_DiagTrack, versão: 10.0.10586.0, carimbo de data/hora: 0x5632d7ba Nome do módulo com falha: SafeGuard64.dll_unloaded, versão: 2.2.0.40, carimbo de data/hora: 0x5683828f Código de exceção: 0xc0000005 Deslocamento da falha: 0x000000000005827b ID do processo com falha: 0x7ec Hora de início do aplicativo com falha: 0xsvchost.exe_DiagTrack0 Caminho do aplicativo com falha: svchost.exe_DiagTrack1 Caminho do módulo com falha: svchost.exe_DiagTrack2 ID do Relatório: svchost.exe_DiagTrack3 Nome completo do pacote com falha: svchost.exe_DiagTrack4 ID do aplicativo relativo ao pacote com falha: svchost.exe_DiagTrack5 Error: (04/05/2016 01:35:51 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Nome do aplicativo com falha: taskhostw.exe, versão: 10.0.10586.0, carimbo de data/hora: 0x5632d756 Nome do módulo com falha: SafeGuard64.dll_unloaded, versão: 2.2.0.40, carimbo de data/hora: 0x5683828f Código de exceção: 0xc0000005 Deslocamento da falha: 0x000000000005827b ID do processo com falha: 0x21d0 Hora de início do aplicativo com falha: 0xtaskhostw.exe0 Caminho do aplicativo com falha: taskhostw.exe1 Caminho do módulo com falha: taskhostw.exe2 ID do Relatório: taskhostw.exe3 Nome completo do pacote com falha: taskhostw.exe4 ID do aplicativo relativo ao pacote com falha: taskhostw.exe5 Error: (04/05/2016 01:27:44 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Nome do aplicativo com falha: svchost.exe_DiagTrack, versão: 10.0.10586.0, carimbo de data/hora: 0x5632d7ba Nome do módulo com falha: SafeGuard64.dll_unloaded, versão: 2.2.0.40, carimbo de data/hora: 0x5683828f Código de exceção: 0xc0000005 Deslocamento da falha: 0x000000000005827b ID do processo com falha: 0x21f8 Hora de início do aplicativo com falha: 0xsvchost.exe_DiagTrack0 Caminho do aplicativo com falha: svchost.exe_DiagTrack1 Caminho do módulo com falha: svchost.exe_DiagTrack2 ID do Relatório: svchost.exe_DiagTrack3 Nome completo do pacote com falha: svchost.exe_DiagTrack4 ID do aplicativo relativo ao pacote com falha: svchost.exe_DiagTrack5 Error: (04/05/2016 01:24:12 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Nome do aplicativo com falha: svchost.exe_DiagTrack, versão: 10.0.10586.0, carimbo de data/hora: 0x5632d7ba Nome do módulo com falha: SafeGuard64.dll_unloaded, versão: 2.2.0.40, carimbo de data/hora: 0x5683828f Código de exceção: 0xc0000005 Deslocamento da falha: 0x000000000005827b ID do processo com falha: 0x1fd0 Hora de início do aplicativo com falha: 0xsvchost.exe_DiagTrack0 Caminho do aplicativo com falha: svchost.exe_DiagTrack1 Caminho do módulo com falha: svchost.exe_DiagTrack2 ID do Relatório: svchost.exe_DiagTrack3 Nome completo do pacote com falha: svchost.exe_DiagTrack4 ID do aplicativo relativo ao pacote com falha: svchost.exe_DiagTrack5 Error: (04/05/2016 01:23:04 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Nome do aplicativo com falha: McCSPServiceHost.exe, versão: 1.8.267.0, carimbo de data/hora: 0x56cc37ae Nome do módulo com falha: SafeGuard64.dll_unloaded, versão: 2.2.0.40, carimbo de data/hora: 0x5683828f Código de exceção: 0xc0000005 Deslocamento da falha: 0x000000000005827b ID do processo com falha: 0x2364 Hora de início do aplicativo com falha: 0xMcCSPServiceHost.exe0 Caminho do aplicativo com falha: McCSPServiceHost.exe1 Caminho do módulo com falha: McCSPServiceHost.exe2 ID do Relatório: McCSPServiceHost.exe3 Nome completo do pacote com falha: McCSPServiceHost.exe4 ID do aplicativo relativo ao pacote com falha: McCSPServiceHost.exe5 Error: (04/05/2016 01:21:47 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Nome do aplicativo com falha: svchost.exe_DiagTrack, versão: 10.0.10586.0, carimbo de data/hora: 0x5632d7ba Nome do módulo com falha: SafeGuard64.dll_unloaded, versão: 2.2.0.40, carimbo de data/hora: 0x5683828f Código de exceção: 0xc0000005 Deslocamento da falha: 0x000000000005827b ID do processo com falha: 0x848 Hora de início do aplicativo com falha: 0xsvchost.exe_DiagTrack0 Caminho do aplicativo com falha: svchost.exe_DiagTrack1 Caminho do módulo com falha: svchost.exe_DiagTrack2 ID do Relatório: svchost.exe_DiagTrack3 Nome completo do pacote com falha: svchost.exe_DiagTrack4 ID do aplicativo relativo ao pacote com falha: svchost.exe_DiagTrack5 Erros de Sistema: ============= Error: (04/05/2016 01:58:04 PM) (Source: Service Control Manager) (EventID: 7034) (User: ) Description: O serviço McAfee CSP Service foi encerrado inesperadamente. Isso aconteceu 2 vez(es). Error: (04/05/2016 01:52:56 PM) (Source: Service Control Manager) (EventID: 7034) (User: ) Description: O serviço Experiências e Telemetria de Usuário Conectado foi encerrado inesperadamente. Isso aconteceu 3 vez(es). Error: (04/05/2016 01:50:15 PM) (Source: Service Control Manager) (EventID: 7031) (User: ) Description: O serviço Experiências e Telemetria de Usuário Conectado foi finalizado inesperadamente. Isto aconteceu 2 vez(es). A seguinte ação corretiva será tomada em 30000 milissegundos: Reiniciar o serviço. Error: (04/05/2016 01:47:15 PM) (Source: Service Control Manager) (EventID: 7034) (User: ) Description: O serviço McAfee CSP Service foi encerrado inesperadamente. Isso aconteceu 1 vez(es). Error: (04/05/2016 01:47:00 PM) (Source: Service Control Manager) (EventID: 7000) (User: ) Description: Não foi possível iniciar o serviço Serviço do Google Update (gupdate) devido ao seguinte erro: %%2 Error: (04/05/2016 01:46:20 PM) (Source: Service Control Manager) (EventID: 7031) (User: ) Description: O serviço Experiências e Telemetria de Usuário Conectado foi finalizado inesperadamente. Isto aconteceu 1 vez(es). A seguinte ação corretiva será tomada em 30000 milissegundos: Reiniciar o serviço. Error: (04/05/2016 01:44:38 PM) (Source: Service Control Manager) (EventID: 7000) (User: ) Description: Não foi possível iniciar o serviço WsAppService devido ao seguinte erro: %%1053 Error: (04/05/2016 01:44:38 PM) (Source: Service Control Manager) (EventID: 7009) (User: ) Description: Tempo limite esgotado (30000 milissegundos) ao aguardar a conexão do serviço WsAppService. Error: (04/05/2016 01:44:07 PM) (Source: Service Control Manager) (EventID: 7000) (User: ) Description: Não foi possível iniciar o serviço UCBrowserSvc devido ao seguinte erro: %%2 Error: (04/05/2016 01:44:07 PM) (Source: Service Control Manager) (EventID: 7000) (User: ) Description: Não foi possível iniciar o serviço rowugoqo devido ao seguinte erro: %%2 CodeIntegrity: =================================== Date: 2016-04-04 20:10:07.940 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume3\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system. Date: 2016-04-04 17:38:54.508 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume3\Program Files\SpaceSoundPro\SpaceSoundPro.dll because the set of per-page image hashes could not be found on the system. Date: 2016-04-04 17:38:54.493 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume3\Program Files\SpaceSoundPro\SpaceSoundPro.dll because the set of per-page image hashes could not be found on the system. Date: 2016-04-04 17:38:40.677 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume3\Program Files\SpaceSoundPro\SpaceSoundPro.dll because the set of per-page image hashes could not be found on the system. Date: 2016-04-04 17:38:40.661 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume3\Program Files\SpaceSoundPro\SpaceSoundPro.dll because the set of per-page image hashes could not be found on the system. Date: 2016-04-04 17:33:14.631 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume3\Program Files\SpaceSoundPro\SpaceSoundPro.dll because the set of per-page image hashes could not be found on the system. Date: 2016-04-04 17:33:13.086 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume3\Program Files\SpaceSoundPro\SpaceSoundPro.dll because the set of per-page image hashes could not be found on the system. Date: 2016-04-04 17:33:13.069 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume3\Program Files\SpaceSoundPro\SpaceSoundPro.dll because the set of per-page image hashes could not be found on the system. Date: 2016-04-04 17:33:13.053 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume3\Program Files\SpaceSoundPro\SpaceSoundPro.dll because the set of per-page image hashes could not be found on the system. Date: 2016-04-04 17:28:10.979 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume3\Program Files\SpaceSoundPro\SpaceSoundPro.dll because the set of per-page image hashes could not be found on the system. ==================== Informações da Memória =========================== Processador: Intel(R) Core(TM) i3-5005U CPU @ 2.00GHz Percentagem de memória em uso: 49% RAM física total: 4011.08 MB RAM física disponível: 2008.25 MB Virtual Total: 5419.08 MB Virtual disponível: 3155.44 MB ==================== Drives ================================ Drive c: (Windows) (Fixed) (Total:886.66 GB) (Free:844.37 GB) NTFS Drive d: (LENOVO) (Fixed) (Total:25 GB) (Free:23.18 GB) NTFS ==================== MBR & Tabela de Partições ================== ======================================================== Disk: 0 (Size: 931.5 GB) (Disk ID: 81BB1B98) Partition: GPT. ==================== Fim de Addition.txt ============================