Additional scan result of Farbar Recovery Scan Tool (x64) Version:23-09-2015
Ran by Murilo Costa (2015-09-23 14:15:45)
Running from C:\Users\Murilo Costa\Desktop
Windows 10 Pro (X64) (2015-09-23 00:26:16)
Boot Mode: Normal
==========================================================


==================== Accounts: =============================

Administrador (S-1-5-21-2687556472-4158628515-2680252711-500 - Administrator - Disabled)
Convidado (S-1-5-21-2687556472-4158628515-2680252711-501 - Limited - Disabled) => C:\Users\Convidado
DefaultAccount (S-1-5-21-2687556472-4158628515-2680252711-503 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-2687556472-4158628515-2680252711-1004 - Limited - Enabled)
Murilo Costa (S-1-5-21-2687556472-4158628515-2680252711-1000 - Administrator - Enabled) => C:\Users\Murilo Costa

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AV: avast! Antivirus (Enabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: avast! Antivirus (Enabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}

==================== Installed Programs ======================

(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

µTorrent (HKU\S-1-5-21-2687556472-4158628515-2680252711-1000\...\uTorrent) (Version: 3.4.4.40911 - BitTorrent Inc.)
7-Zip 15.05 beta x64 (HKLM\...\7-Zip) (Version: - )
Adobe Flash Player 19 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 19.0.0.185 - Adobe Systems Incorporated)
Adobe Flash Player 19 PPAPI (HKLM-x32\...\Adobe Flash Player PPAPI) (Version: 19.0.0.185 - Adobe Systems Incorporated)
Adobe Reader XI (11.0.10) - Português (HKLM-x32\...\{AC76BA86-7AD7-1046-7B44-AB0000000001}) (Version: 11.0.10 - Adobe Systems Incorporated)
Age of Empires III (HKLM-x32\...\InstallShield_{7B9CC60A-9B81-46A3-A953-76B6BF9EEC97}) (Version: 1.00.0000 - Microsoft Game Studios)
Age of Empires III (x32 Version: 1.00.0000 - Microsoft Game Studios) Hidden
AMD Catalyst Control Center (HKLM-x32\...\WUCCCApp) (Version: 1.00.0000 - AMD)
AMD Catalyst Install Manager (HKLM\...\{14D58A97-B60E-A858-34D8-95469C02F7EC}) (Version: 8.0.916.0 - Advanced Micro Devices, Inc.)
Auslogics BoostSpeed 8 (HKLM-x32\...\{7216871F-869E-437C-B9BF-2A13F2DCE63F}_is1) (Version: 8.0.0.0 - Auslogics Labs Pty Ltd)
Auslogics Registry Cleaner (HKLM-x32\...\{8D8024F1-2945-49A5-9B78-5AB7B11D7942}_is1) (Version: 5.0.0.0 - Auslogics Labs Pty Ltd)
Avast Free Antivirus (HKLM-x32\...\Avast) (Version: 10.3.2225 - AVAST Software)
Bastion (HKLM-x32\...\Steam App 107100) (Version: - Supergiant Games)
Bastion Tradução BR v1.00 (HKLM-x32\...\Bastion BR) (Version: 1.00 - Tribo Gamer Brasil®)
Battlefield 3™ (HKLM-x32\...\{76285C16-411A-488A-BCE3-C83CB933D8CF}) (Version: 1.6.0.0 - Electronic Arts)
Battlefield 4™ (HKLM-x32\...\{ABADE36E-EC37-413B-8179-B432AD3FACE7}) (Version: 1.5.2.34169 - Electronic Arts)
Battlelog Web Plugins (HKLM-x32\...\Battlelog Web Plugins) (Version: 2.3.0 - EA Digital Illusions CE AB)
Bejeweled® 3 (HKLM-x32\...\{E99C27B2-EB2E-4244-9F5C-A96F55100F0C}) (Version: 1.1.13.4753 - Electronic Arts, Inc.)
BioShock 2 (HKLM-x32\...\Steam App 8850) (Version: - 2K Marin)
Blackguards (HKLM-x32\...\Blackguards_is1) (Version: 1.1 - Daedalic Entertainment GmbH)
Braveland Wizard (HKLM-x32\...\1207667193_is1) (Version: 2.0.0.1 - GOG.com)
Breach and Clear Deadline (HKLM-x32\...\Breach and Clear Deadline_is1) (Version: - )
BRINK (HKLM-x32\...\Steam App 22350) (Version: - Splash Damage)
CCleaner (HKLM\...\CCleaner) (Version: 5.09 - Piriform)
CGS17_Setup_x64 (Version: 17.1 - Corel Corporation) Hidden
Cheat Engine 6.4 (HKLM-x32\...\Cheat Engine 6.4_is1) (Version: - Cheat Engine)
Cities Skylines (HKLM-x32\...\Cities Skylines_is1) (Version: - )
Clockwork Tales: Of Glass and Ink (HKLM-x32\...\Steam App 284830) (Version: - Artifex Mundi sp. z o.o.)
Command & Conquer 3 Tiberium Wars™ (HKLM-x32\...\{CAC9DCAF-0EA8-442C-97EA-CA6F5755390A}) (Version: 1.0.0.0 - Electronic Arts)
Command & Conquer™ 3 Kane's Wrath (HKLM-x32\...\{8D37C28B-D1A5-41C0-9E5E-80D01355FEBC}) (Version: 1.0.0.0 - Electronic Arts)
Commandos 2: Men of Courage (HKLM-x32\...\Steam App 6830) (Version: - Pyro Studios)
Commandos 3: Destination Berlin (HKLM-x32\...\Steam App 6840) (Version: - Pyro Studios)
Commandos: Behind Enemy Lines (HKLM-x32\...\Steam App 6800) (Version: - Pyro Studios)
Commandos: Beyond the Call of Duty (HKLM-x32\...\Steam App 6810) (Version: - Pyro Studios)
Corel Graphics - Windows Shell Extension (HKLM\...\_{4DC318F5-1640-4417-A218-912ED9905FAA}) (Version: 17.1.0.572 - Corel Corporation)
Corel Graphics - Windows Shell Extension (Version: 17.1.572 - Corel Corporation) Hidden
Corel Graphics - Windows Shell Extension 32 Bit (Version: 17.1.572 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X7 - BR (x64) (Version: 17.1 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X7 - Capture (x64) (Version: 17.1 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X7 - Common (x64) (Version: 17.1 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X7 - Connect (x64) (Version: 17.1 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X7 - Custom Data (x64) (Version: 17.1 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X7 - Draw (x64) (Version: 17.1 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X7 - Filters (x64) (Version: 17.1 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X7 - FontNav (x64) (Version: 17.1 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X7 - IPM Content (x64) (Version: 17.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X7 - IPM T (x64) (Version: 17.1 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X7 - PHOTO-PAINT (x64) (Version: 17.1 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X7 - Photozoom Plugin (x64) (Version: 17.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X7 - Redist (x64) (Version: 17.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X7 - Setup Files (x64) (Version: 17.1 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X7 - VBA (x64) (Version: 17.1 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X7 - VideoBrowser (x64) (Version: 17.1 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X7 - Writing Tools (x64) (Version: 17.1 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X7 (64-Bit) (HKLM\...\_{5CB73140-806C-42C6-A05A-1AFD0E92DEB5}) (Version: 17.1.0.572 - Corel Corporation)
Crysis 2 - Maximum Edition (HKLM-x32\...\Crysis 2 - Maximum Edition_is1) (Version: - )
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
DAEMON Tools Pro (HKLM-x32\...\DAEMON Tools Pro) (Version: 6.0.0.0444 - Disc Soft Ltd)
Dark Souls Prepare to Die Edition (HKLM-x32\...\GFWL_{4E4D0FA1-F880-4CCB-999A-501000008200}) (Version: 1.0.0000.130 - NAMCO BANDAI Games Europe S.A.S.)
Dark Souls Prepare to Die Edition (x32 Version: 1.0.0000.130 - NAMCO BANDAI Games Europe S.A.S.) Hidden
Defend Your Life (HKLM-x32\...\Steam App 357780) (Version: - Alda Games)
DLC Quest (HKLM-x32\...\Steam App 230050) (Version: - Going Loud Studios)
Dota 2 (HKLM-x32\...\Steam App 570) (Version: - Valve)
Dragon Age: Origins (HKLM-x32\...\{AEC81925-9C76-4707-84A9-40696C613ED3}) (Version: 1.05.0.0 - Electronic Arts)
Dropbox (HKLM-x32\...\Dropbox) (Version: 3.8.8 - Dropbox, Inc.)
Dropbox Update Helper (x32 Version: 1.3.27.35 - Dropbox, Inc.) Hidden
EA SPORTS Game Face Browser Plugin 1.8.0.0 (HKU\S-1-5-21-2687556472-4158628515-2680252711-1000\...\EA SPORTS Game Face Browser Plugin) (Version: 1.8.0.0 - Electronic Arts)
EA SPORTS™ FIFA 15 (HKLM-x32\...\{3D4ADA2B-F028-4307-ADF4-6F9AA44725DA}) (Version: 1.8.0.0 - Electronic Arts)
Empire Earth II (HKLM-x32\...\{DF315348-721C-40B8-BAE2-58C6C7D935A2}) (Version: 1.02 - Sierra)
ESN Sonar (HKLM-x32\...\ESN Sonar-0.70.4) (Version: 0.70.4 - ESN Social Software AB)
Fable Anniversary (HKLM-x32\...\Fable Anniversary_is1) (Version: - )
FEAR (HKLM-x32\...\{2B653229-9854-4989-B780-D978F5F13EAB}) (Version: 1.00.0000 - Vivendi Universal Games, Inc.)
Flame Over (HKLM-x32\...\RmxhbWVPdmVy_is1) (Version: 1 - )
Foxit Cloud (HKLM-x32\...\{41914D8B-9D6E-4764-A1F9-BC43FB6782C1}_is1) (Version: 3.4.96.511 - Foxit Software Inc.)
Foxit Reader 7.1.5.425 (HKLM\...\Foxit Reader) (Version: v 7.1.5.425 - oszone.net)
Foxit Reader (HKLM-x32\...\Foxit Reader_is1) (Version: 7.1.3.320 - Foxit Software Inc.)
Galeria de Fotos (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 45.0.2454.85 - Google Inc.)
Google Drive (HKLM-x32\...\{12ADFB82-D5A3-43E4-B2F4-FCD9B690315B}) (Version: 1.24.9931.5480 - Google, Inc.)
Grey Goo (HKLM-x32\...\Grey Goo_is1) (Version: 1.0 - Релиз от R.G. Steamgames)
Gumboy Tournament (HKLM-x32\...\Steam App 11230) (Version: - CINEMAX, s.r.o.)
Heroes of the Storm (HKLM-x32\...\Heroes of the Storm) (Version: - Blizzard Entertainment)
HP Deskjet 1510 series Software básico do dispositivo (HKLM\...\{06FD25AF-70F0-4CA9-88EA-490799567F11}) (Version: 32.2.188.47710 - Hewlett-Packard Co.)
Hydrophobia: Prophecy (HKLM-x32\...\Steam App 92000) (Version: - Dark Energy Digital Ltd.)
Intel(R) C++ Redistributables for Windows* on Intel(R) 64 (HKLM-x32\...\{D2437C5C-2D8C-40D2-8059-689AD7239FA3}) (Version: 11.1.048 - Intel Corporation)
Internet Download Manager (HKLM-x32\...\Internet Download Manager) (Version: - Tonec Inc.)
Java 8 Update 45 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218045F0}) (Version: 8.0.450 - Oracle Corporation)
Junk Mail filter update (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Kane & Lynch 2: Dog Days (HKLM-x32\...\Steam App 28000) (Version: - IO Interactive)
K-Lite Codec Pack 10.9.0 Full (HKLM-x32\...\KLiteCodecPack_is1) (Version: 10.9.0 - )
LogoMaker 2.0 (HKLM-x32\...\LogoMaker_is1) (Version: - Studio V5)
Lost Planet Extreme Condition Tradução BR v1.00 (HKLM-x32\...\Lost Planet Extreme Condition BR) (Version: 1.00 - Tribo dos Renegados Brasil®)
Lost Planet: Extreme Condition (HKLM-x32\...\Steam App 6510) (Version: - CAPCOM Co., Ltd.)
Malwarebytes Anti-Malware versão 2.1.8.1057 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.1.8.1057 - Malwarebytes Corporation)
Medal of Honor(TM) Multiplayer (HKLM-x32\...\Steam App 47830) (Version: - Electronic Arts)
Medal of Honor(TM) Single Player (HKLM-x32\...\Steam App 47790) (Version: - Electronic Arts)
Medal of Honor: Airborne (HKLM-x32\...\Steam App 24840) (Version: - EA Los Angeles)
Microsoft Games for Windows - LIVE Redistributable (HKLM-x32\...\{F2508213-9989-4E85-A078-72BE483917EF}) (Version: 3.5.88.0 - Microsoft Corporation)
Microsoft Games for Windows Marketplace (HKLM-x32\...\{4CB0307C-565E-4441-86BE-0DF2E4FB828C}) (Version: 3.5.50.0 - Microsoft Corporation)
Microsoft Office Professional Plus 2013 (HKLM\...\Office15.PROPLUS) (Version: 15.0.4569.1506 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.40728.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.50727 (HKLM-x32\...\{15134cb0-b767-4960-a911-f2d16ae54797}) (Version: 11.0.50727.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.21005 (HKLM-x32\...\{7f51bdb9-ee21-49ee-94d6-90afc321780e}) (Version: 12.0.21005.1 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005 (HKLM-x32\...\{ce085a78-074e-4823-8dc1-8a721b94b76d}) (Version: 12.0.21005.1 - Microsoft Corporation)
Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.50903 - Microsoft Corporation)
Microsoft Visual Studio Tools for Applications 2012 (HKLM-x32\...\{89ca2a32-2b52-4595-8dfd-6fe4757958d0}) (Version: 11.0.51108 - Microsoft Corporation)
Microsoft XNA Framework Redistributable 2.0 (HKLM-x32\...\{245F6C7A-0C22-4DE0-8202-2AAA620A1D3A}) (Version: 2.0.11128.1 - Microsoft Corporation)
Microsoft XNA Framework Redistributable 3.0 (HKLM-x32\...\{3898934B-05AE-41CD-96BE-70DA9BFBCE1F}) (Version: 3.0.11010.0 - Microsoft Corporation)
Microsoft XNA Framework Redistributable 3.1 (HKLM-x32\...\{19BFDA5D-1FE2-4F25-97F9-1A79DD04EE20}) (Version: 3.1.10527.0 - Microsoft Corporation)
Microsoft XNA Framework Redistributable 4.0 (HKLM-x32\...\{2BFC7AA0-544C-4E3A-8796-67F3BE655BE9}) (Version: 4.0.20823.0 - Microsoft Corporation)
Microsoft XNA Framework Redistributable 4.0 Refresh (HKLM-x32\...\{D69C8EDE-BBC5-436B-8E0E-C5A6D311CF4F}) (Version: 4.0.30901.0 - Microsoft Corporation)
Might & Magic: Duel of Champions (HKLM-x32\...\Steam App 256410) (Version: - BlueByte)
Might & Magic: Heroes VI (HKLM-x32\...\Steam App 48220) (Version: - Blackhole)
Módulo de Proteção - Banco Santander (Brasil) S.A. (HKLM-x32\...\{83033d93-48d0-48fc-9c5b-82e57e7e0dd6}_is1) (Version: 3.11.0.1 - )
Movie Maker (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Mozilla Firefox 39.0 (x86 pt-BR) (HKLM-x32\...\Mozilla Firefox 39.0 (x86 pt-BR)) (Version: 39.0 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 39.0 - Mozilla)
MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
Neverwinter Nights 2 - Platinum Edition (HKLM-x32\...\Neverwinter Nights 2 - Platinum Edition_is1) (Version: - )
Nexus Mod Manager (HKLM\...\6af12c54-643b-4752-87d0-8335503010de_is1) (Version: 0.60.5 - Black Tree Gaming)
Nightmares from the Deep: The Cursed Heart (HKLM-x32\...\Steam App 259740) (Version: - Artifex Mundi sp. z o.o.)
Notepad++ (HKLM-x32\...\Notepad++) (Version: 6.7.9.2 - Notepad++ Team)
NVIDIA PhysX (HKLM-x32\...\{64467D47-FFE4-4FBC-ABBA-A0DB829A17EB}) (Version: 9.12.0613 - NVIDIA Corporation)
Opera Stable 20.0.1387.91 (HKLM-x32\...\Opera 20.0.1387.91) (Version: 20.0.1387.91 - Opera Software ASA)
Opera Stable 27.0.1689.66 (HKLM-x32\...\Opera 27.0.1689.66) (Version: 27.0.1689.66 - Opera Software ASA)
Opera Stable 29.0.1795.60 (HKLM-x32\...\Opera 29.0.1795.60) (Version: 29.0.1795.60 - Opera Software ASA)
Opera_helper (HKU\S-1-5-21-2687556472-4158628515-2680252711-1000\...\Opera_helper) (Version: - Opera_helper)
Ori and the Blind Forest (HKLM-x32\...\Ori and the Blind Forest_is1) (Version: - )
Origin (HKLM-x32\...\Origin) (Version: 9.5.3.636 - Electronic Arts, Inc.)
Pacote de Idiomas do Microsoft Visual Studio Tools for Applications 2012 x64 Hosting Support - PTB (Version: 11.0.51108 - Microsoft Corporation) Hidden
Pacote de Idiomas do Microsoft Visual Studio Tools for Applications 2012 x86 Hosting Support - PTB (x32 Version: 11.0.51108 - Microsoft Corporation) Hidden
Peggle (HKLM-x32\...\{715AD72D-887A-459E-988B-D4F3E87FA24B}) (Version: 1.04.0.0 - PopCap Games)
PhotoScape (HKLM-x32\...\PhotoScape) (Version: - )
Pier Solar and the Great Architects HD (HKLM-x32\...\Pier Solar and the Great Architects HD_is1) (Version: - )
Plants vs. Zombies™ (HKLM-x32\...\{5E6536C2-E79A-49CF-83EA-817AD81F9FC8}) (Version: 1.2.0.1093 - Electronic Arts, Inc.)
PokerStars (HKLM-x32\...\PokerStars) (Version: - PokerStars)
PrivaZer (HKLM-x32\...\PrivaZer) (Version: 2.34.1.0 - Goversoft LLC)
Project CARS (HKLM-x32\...\Project CARS_is1) (Version: 1.0.1.1 - Релиз от R.G. Steamgames)
PunkBuster Services (HKLM-x32\...\PunkBusterSvc) (Version: 0.994 - Even Balance, Inc.)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7509 - Realtek Semiconductor Corp.)
Resident Evil 6 version 1 (HKLM-x32\...\UmVzaWRlbnQgRXZpbCA2_is1) (Version: 1 - )
Revisores de Texto do Microsoft Office 2013 – Português do Brasil (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Revo Uninstaller 1.95 (HKLM-x32\...\Revo Uninstaller) (Version: 1.95 - VS Revo Group)
RocketDock 1.3.5 (HKLM-x32\...\RocketDock_is1) (Version: - Punk Software)
Service Pack 1 for Microsoft Office 2013 (KB2850036) 64-Bit Edition (HKLM\...\{90150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUS_{D82063A8-7C8C-4C3B-A9BB-95138CA55D26}) (Version: - Microsoft)
Service Pack 1 for Microsoft Office 2013 (KB2850036) 64-Bit Edition (Version: - Microsoft) Hidden
Shadowgrounds (HKLM-x32\...\Steam App 2500) (Version: - Frozenbyte)
Shadowgrounds: Survivor (HKLM-x32\...\Steam App 11200) (Version: - Frozenbyte)
Silent Hill Homecoming (HKLM-x32\...\{AE7D5AF6-E561-4711-BC5A-E2CE7AFD8CA7}_is1) (Version: - Konami)
Skype Click to Call (HKLM-x32\...\{6D1221A9-17BF-4EC0-81F2-27D30EC30701}) (Version: 7.4.0.9058 - Microsoft Corporation)
Skype™ 7.0 (HKLM-x32\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 7.0.102 - Skype Technologies S.A.)
Songr (HKU\S-1-5-21-2687556472-4158628515-2680252711-1000\...\Songr) (Version: 2.0.2378 - Xamasoft)
Sony Mobile Update Engine (HKLM-x32\...\Update Engine) (Version: 2.15.11.201508031114 - Sony Mobile Communications Inc.)
Sony PC Companion 2.10.275 (HKLM-x32\...\{F09EF8F2-0976-42C1-8D9D-8DF78337C6E3}) (Version: 2.10.275 - Sony)
SpeedFan (remove only) (HKLM-x32\...\SpeedFan) (Version: - )
Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)
TagScanner 5.1.668 (HKLM-x32\...\TagScanner_is1) (Version: - Sergey Serkov)
The Banner Saga (HKLM-x32\...\The Banner Saga_R.G. Gamblers_is1) (Version: - R.G. Gamblers, Fanfar)
The Witcher 2: Assassins of Kings Enhanced Edition (HKLM-x32\...\Steam App 20920) (Version: - CD Projekt RED)
The Witcher: Enhanced Edition (HKLM-x32\...\Steam App 20900) (Version: - CD PROJEKT RED)
Theme Hospital (HKLM-x32\...\{5118A4C2-C8A4-4CE5-AC37-F3E51C25402F}) (Version: 3.0.0.5 - Electronic Arts)
TimeShift (HKLM-x32\...\{1367FA2F-2B3D-430F-872F-588B93420BFC}) (Version: 1.00.000 - Sierra Entertainment)
TimeShift Tradução BR v1.00 (HKLM-x32\...\TimeShift 2 BR) (Version: 1.00 - Tribo dos Renegados Brasil®)
Tiny Troopers (HKLM-x32\...\Steam App 216110) (Version: - Kukouri)
Toki Tori 2+ (HKLM-x32\...\Steam App 201420) (Version: - Two Tribes)
Toren (HKLM-x32\...\1429865580_is1) (Version: 2.0.0.1 - GOG.com)
Total War: SHOGUN 2 (HKLM-x32\...\Steam App 34330) (Version: - The Creative Assembly)
Trine (HKLM-x32\...\Steam App 35700) (Version: - Frozenbyte)
TSEV Skyrim LE (HKLM-x32\...\TSEV Skyrim LE_is1) (Version: 2.0.0.0 - )
Ultima 8 (HKLM-x32\...\{428C6B01-D292-46F9-9321-75668ED17DA2}) (Version: 1.0.0.1 - Electronic Arts)
Unity Web Player (HKU\S-1-5-21-2687556472-4158628515-2680252711-1000\...\UnityWebPlayer) (Version: 5.0.1f1 - Unity Technologies ApS)
Unlocker 1.9.2 (HKLM\...\Unlocker) (Version: 1.9.2 - Cedrick Collomb)
Update for Skype for Business 2015 (KB2889853) 64-Bit Edition (HKLM\...\{90150000-012B-0416-1000-0000000FF1CE}_Office15.PROPLUS_{45AD9785-5503-4B26-981A-AF62A355ADF2}) (Version: - Microsoft)
USB Vibration Joystick (HKLM-x32\...\{4999B2F1-3E74-409A-B8B5-E94448AA9EA6}) (Version: 2007.08.17 - )
VirtualDJ 8 (HKLM-x32\...\{10C4696A-2915-47F2-A14A-78F70DA82E57}) (Version: 8.0.2345.0 - Atomix Productions)
War Thunder (HKLM-x32\...\Steam App 236390) (Version: - Gaijin Entertainment)
Warlords Battlecry 3 (HKLM-x32\...\Warlords Battlecry 3_is1) (Version: - GOG.com)
WARMACHINE: Tactics (HKLM-x32\...\V0FSTUFDSElORVRhY3RpY3M=_is1) (Version: 1 - )
Waves (HKLM-x32\...\Steam App 107600) (Version: - Squid In A Box Ltd)
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3528.0331 - Microsoft Corporation)
WinRAR 5.20 (64-bit) (HKLM\...\WinRAR archiver) (Version: 5.20.0 - win.rar GmbH)
Wise Care 365 version 1.83 (HKLM-x32\...\{E864A1C8-EEE1-47D0-A7F8-00CC86D26D5E}_is1) (Version: 3.8.3 - WiseCleaner.com)
XBMC (HKU\S-1-5-21-2687556472-4158628515-2680252711-1000\...\XBMC) (Version: - Team XBMC)
Xion v1.5 (build 155) (HKLM-x32\...\Xion) (Version: 1.5 (build 155) - r2 Studios)
ZHPFix 2015 (HKLM-x32\...\ZHPFix_is1) (Version: 2015 - Nicolas Coolman)
Zumas Revenge (HKLM-x32\...\{0B153CAB-792B-4CA2-B2A5-AB0BBAF2FFA9}) (Version: 1.0.5.600 - PopCap Games)
Языковой пакет для поддержки размещения набора средств Microsoft Visual Studio Tools для работы с приложениями 2012 (x64) - RUS (Version: 11.0.51108 - Microsoft Corporation) Hidden

==================== Custom CLSID (Whitelisted): ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

CustomCLSID: HKU\S-1-5-21-2687556472-4158628515-2680252711-1000_Classes\CLSID\{0783EB25-59F8-4F02-B6B0-F1D4349F0001}\InprocServer32 -> C:\Users\Murilo Costa\AppData\Local\GAS Tecnologia\GBBD\npsf_abn_64.dll (GAS Tecnologia)
CustomCLSID: HKU\S-1-5-21-2687556472-4158628515-2680252711-1000_Classes\CLSID\{0783EB25-59F8-4F02-B6B1-F1D4349F0001}\InprocServer32 -> C:\Users\Murilo Costa\AppData\Local\GAS Tecnologia\GBBD\npsf_abn_64.dll (GAS Tecnologia)

==================== Restore Points =========================

23-09-2015 03:04:02 Windows Update

==================== Hosts content: ==========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2009-07-13 23:34 - 2015-04-18 08:48 - 00000878 ____A C:\WINDOWS\system32\Drivers\etc\hosts
127.0.0.1 www.iobit.com
127.0.0.1 www.asc55.iobit.com


==================== Scheduled Tasks (Whitelisted) =============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {04A57333-54B9-4F1D-9966-F821F67F1ACB} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn => C:\Program Files\Microsoft Office\Office15\msoia.exe [2014-01-23] (Microsoft Corporation)
Task: {051A1E1B-B61B-4F0D-AC30-7E750E9ABDA9} - System32\Tasks\Microsoft\Windows\Media Center\PvrRecoveryTask => C:\Windows\ehome\mcupdate.exe
Task: {16C3D3E3-D60D-4839-B313-EC41FB653B01} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack => C:\Program Files\Microsoft Office\Office15\msoia.exe [2014-01-23] (Microsoft Corporation)
Task: {1A5622D3-CAAA-49E6-B57F-917DAB140C81} - System32\Tasks\Microsoft\Windows\Media Center\ReindexSearchRoot => C:\Windows\ehome\ehPrivJob.exe
Task: {2378C1F7-05A1-4727-B384-F3F10EB4F427} - System32\Tasks\Microsoft\Windows\Media Center\SqlLiteRecoveryTask => C:\Windows\ehome\mcupdate.exe
Task: {2F79AD32-C9D5-42D4-A042-E5DF4D80019F} - \Microsoft\Windows\Windows Activation Technologies\OatTask -> No File <==== ATTENTION
Task: {326A0D4A-C8FC-41E4-8D7C-827398F82348} - System32\Tasks\Microsoft\Windows\Media Center\RecordingRestart => C:\Windows\ehome\ehrec.exe
Task: {38064AAF-E033-40CA-8881-FAC0CACBF365} - \Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B -> No File <==== ATTENTION
Task: {3AAF9089-ECF3-4668-9153-3245712570F2} - System32\Tasks\Auslogics\BoostSpeed\Scan and Repair => Rundll32.exe TaskSchedulerHelper.dll,RunTask "BoostSpeed.exe" "-UseTray -Schedule"
Task: {3BF9E5F4-7E1C-48D1-B62D-AC4FB0B26FCD} - \Microsoft\Windows\Setup\gwx\refreshgwxcontent -> No File <==== ATTENTION
Task: {3DBAEFEB-71B6-4817-BDC3-AFB08320C743} - \Microsoft\Windows\Setup\GWXTriggers\OutOfIdle-5d -> No File <==== ATTENTION
Task: {41FE8D8B-3705-4221-8D1B-D8EBAAB0D98F} - System32\Tasks\Microsoft\Windows\SetupSQMTask => C:\WINDOWS\SYSTEM32\OOBE\SETUPSQM.EXE [2015-07-10] (Microsoft Corporation)
Task: {4BD2F6A9-31AC-4F29-B4D4-7FE23E83E0F0} - System32\Tasks\avast! Emergency Update => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [2015-07-28] (AVAST Software)
Task: {4FA0A289-78B9-410E-B04B-75DC5AE2E0B2} - System32\Tasks\Microsoft\Windows\Media Center\UpdateRecordPath => C:\Windows\ehome\ehPrivJob.exe
Task: {58578E70-6AEB-4A62-9275-A97C2F6BECA9} - \Microsoft\Windows\Setup\GWXTriggers\Telemetry-4xd -> No File <==== ATTENTION
Task: {630132DD-CE30-4B38-A999-00128A6EE68D} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscoveryW2 => C:\Windows\ehome\ehPrivJob.exe
Task: {67E4D34F-EA79-4D7E-A853-DFCD4B07D549} - System32\Tasks\Microsoft\Windows\Media Center\mcupdate => C:\Windows\ehome\mcupdate.exe
Task: {6A1FC92E-9CF9-4F2A-951A-121779A3C391} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2015-08-19] (Piriform Ltd)
Task: {6BF10BC4-291E-4BD2-BA35-D6F8A29EC2C6} - \Microsoft\Windows\Setup\gwx\refreshgwxconfigandcontent -> No File <==== ATTENTION
Task: {72E434C1-E37B-47AA-BF54-8E60B0643654} - \Microsoft\Windows\Setup\gwx\refreshgwxconfig -> No File <==== ATTENTION
Task: {7916AF90-C74D-45C0-8971-DCADAE957484} - System32\Tasks\Microsoft\Windows\Media Center\InstallPlayReady => C:\Windows\ehome\ehPrivJob.exe
Task: {83419009-2808-4187-B845-E167088848B2} - System32\Tasks\Microsoft\Windows\Media Center\ActivateWindowsSearch => C:\Windows\ehome\ehPrivJob.exe
Task: {8381C537-6B4A-4B43-B253-3CD60599B38B} - System32\Tasks\Auslogics\BoostSpeed\Start BoostSpeed оn Murilo Costa logon => C:\Program Files (x86)\Auslogics\BoostSpeed\BoostSpeed.exe [2015-06-15] (Auslogics)
Task: {8678E568-667F-476E-8A1F-FA217EEFA94B} - System32\Tasks\Microsoft\Windows\Media Center\ehDRMInit => C:\Windows\ehome\ehPrivJob.exe
Task: {8FE73E9A-8041-4094-B018-49FE4ED25129} - System32\Tasks\Microsoft\Windows\Media Center\OCURDiscovery => C:\Windows\ehome\ehPrivJob.exe
Task: {95F3BFE2-94C7-4764-B4FC-876C9F796F00} - System32\Tasks\Microsoft\Windows\Media Center\ObjectStoreRecoveryTask => C:\Windows\ehome\mcupdate.exe
Task: {9887272E-7CB3-4DE2-82BB-869531D9BB51} - \Microsoft\Windows\Setup\GWXTriggers\Time-5d -> No File <==== ATTENTION
Task: {98BE0A1E-67AD-4710-977E-11D168358518} - \Microsoft\Windows\Setup\gwx\launchtrayprocess -> No File <==== ATTENTION
Task: {9DADE23E-4BA6-48E8-B9FF-C88F135AAFDB} - System32\Tasks\Microsoft\Windows\Media Center\OCURActivate => C:\Windows\ehome\ehPrivJob.exe
Task: {A94E6DE8-7718-4D48-A292-55124FFB818E} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscovery => C:\Windows\ehome\ehPrivJob.exe
Task: {A9CF773A-71CA-4044-9D4C-35FE6DDF2641} - \Microsoft\Windows\Setup\GWXTriggers\OutOfSleep-5d -> No File <==== ATTENTION
Task: {AC373A02-56C4-4008-B4FE-A7A51BD6F27B} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-09-22] (Adobe Systems Incorporated)
Task: {AFB15404-31C4-4041-8235-F36712B4D3DC} - System32\Tasks\Microsoft\Windows\Media Center\DispatchRecoveryTasks => C:\Windows\ehome\ehPrivJob.exe
Task: {B89B9C8E-9DBD-47CF-9766-2DBE18EA65D7} - \Microsoft\Windows\Setup\gwx\runappraiser -> No File <==== ATTENTION
Task: {B9EF4C60-519D-4E1B-AD9A-7B3CDF299072} - System32\Tasks\Microsoft\Windows\Media Center\StartRecording => C:\Windows\ehome\ehrec.exe
Task: {BEB77C56-3BA8-44A2-8BF2-CDFEED7F5B37} - \Microsoft\Windows\Setup\GWXTriggers\Logon-5d -> No File <==== ATTENTION
Task: {CAD72DFC-93C5-4971-B41B-275C8823AE6D} - System32\Tasks\Microsoft\Windows\Media Center\mcupdate_scheduled => C:\Windows\ehome\mcupdate.exe
Task: {CB91D519-B37A-47C6-AA49-EA738E3A0236} - System32\Tasks\Microsoft\Windows\Media Center\MediaCenterRecoveryTask => C:\Windows\ehome\mcupdate.exe
Task: {D478B3E0-F86F-42B8-9604-E1DD02ED3C9A} - \Microsoft\Windows\Setup\GWXTriggers\MachineUnlock-5d -> No File <==== ATTENTION
Task: {D7804E22-99A2-432F-B8C2-3804976654BD} - System32\Tasks\Wise Care 365 => C:\Program Files (x86)\Wise\Wise Care 365\WiseTray.exe [2015-09-10] (WiseCleaner.com)
Task: {DAA0D30A-B3CC-4EA2-909B-7329D2782607} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscoveryW1 => C:\Windows\ehome\ehPrivJob.exe
Task: {DEA568DF-9B27-4CE5-A6F9-F5A49ACC6EF0} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\WINDOWS\system32\MRT.exe [2015-08-26] (Microsoft Corporation)
Task: {E569C3AB-6D7D-4A5C-BE66-CFE30C3D250E} - System32\Tasks\Microsoft\Windows\Media Center\RegisterSearch => C:\Windows\ehome\ehPrivJob.exe
Task: {E6BFAAE9-A0D8-4693-AE98-DFF09E5B3DCE} - System32\Tasks\Microsoft Office 15 Sync Maintenance for MuriloCosta-PC-Murilo Costa MuriloCosta-PC => C:\Program Files\Microsoft Office\Office15\MsoSync.exe [2015-08-12] (Microsoft Corporation)
Task: {E7DD85E1-B53A-4BA6-9274-F0FA6B438D30} - System32\Tasks\Wise Turbo Checker => C:\Program Files (x86)\Wise\Wise Care 365\WiseTurbo.exe [2015-09-10] (WiseCleaner.COM)
Task: {EB732BB8-A028-4783-BA97-2684F7619AA4} - System32\Tasks\Microsoft\Windows\Media Center\PvrScheduleTask => C:\Windows\ehome\mcupdate.exe
Task: {F28B66D2-3DC4-4DB4-A891-C78F3C01355A} - System32\Tasks\Microsoft\Windows\Media Center\PeriodicScanRetry => C:\Windows\ehome\MCUpdate.exe
Task: {F4899BA0-6840-459B-9165-43E3CC13A542} - System32\Tasks\Microsoft\Windows\Media Center\ConfigureInternetTimeService => C:\Windows\ehome\ehPrivJob.exe
Task: {F647A495-13F0-4E11-BCF1-20CCACC39390} - System32\Tasks\Desligar pc => C:\Windows\System32\shutdown.exe [2015-07-10] (Microsoft Corporation)

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)

Task: C:\WINDOWS\Tasks\Adobe Flash Player PPAPI Notifier.job => C:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_18_0_0_232_pepper.exe
Task: C:\WINDOWS\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\WINDOWS\Tasks\DropboxUpdateTaskMachineCore.job => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore1d0bd9ca048c056.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore1d0bf5147b688de.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore1d0e58f33f1e2c5.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\Opera scheduled Autoupdate 1418950834.job => C:\Program Files (x86)\Opera\launcher.exe
Task: C:\WINDOWS\Tasks\Wise Care 365.job => C:\Program Files (x86)\Wise\Wise Care 365\WiseTray.exe
Task: C:\WINDOWS\Tasks\Wise Turbo Checker.job => C:\Program Files (x86)\Wise\Wise Care 365\WiseTurbo.exe
Task: C:\WINDOWS\Tasks\{0BA761C1-FB5D-43C7-9514-F11228839CF9}.job => c:\program files (x86)\google\chrome\application\chrome.exeXhttp:/www.skype.com/go/
Task: C:\WINDOWS\Tasks\{1A7200DC-EDE7-4A65-BDCF-FD924515E311}.job => c:\program files (x86)\google\chrome\application\chrome.exeXhttp:/www.skype.com/go/
Task: C:\WINDOWS\Tasks\{87583EC4-3528-4A54-AEEE-FA5F8703220E}.job => c:\program files (x86)\google\chrome\application\chrome.exeXhttp:/www.skype.com/go/

==================== Loaded Modules (Whitelisted) ==============

2015-09-10 02:09 - 2015-09-10 02:09 - 00032768 _____ () C:\WINDOWS\SYSTEM32\licensemanagerapi.dll
2015-09-10 02:09 - 2015-09-10 02:09 - 00404480 _____ () C:\WINDOWS\System32\diagtrack_wininternal.dll
2015-08-03 16:00 - 2015-08-03 16:00 - 00214528 _____ () C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Container.PerformanceTuning.dll
2014-02-11 07:08 - 2014-02-11 07:08 - 00817152 _____ () C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Device.dll
2014-02-11 07:08 - 2014-02-11 07:08 - 03650560 _____ () C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Platform.dll
2014-12-17 21:57 - 2015-09-23 02:53 - 00076152 _____ () C:\WINDOWS\SysWOW64\PnkBstrA.exe
2015-09-10 02:09 - 2015-09-10 02:09 - 02498808 _____ () C:\WINDOWS\system32\CoreUIComponents.dll
2015-09-10 02:09 - 2015-09-10 02:09 - 02498808 _____ () C:\WINDOWS\System32\CoreUIComponents.dll
2015-07-10 00:19 - 2015-07-10 00:19 - 00429056 _____ () C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\QuickActions.dll
2015-09-10 02:09 - 2015-09-10 02:09 - 06569472 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CortanaApi.dll
2015-07-10 00:13 - 2015-09-10 02:08 - 00471040 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll
2015-09-10 02:09 - 2015-09-10 02:09 - 01808384 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.BackgroundTask.dll
2015-09-10 02:09 - 2015-09-10 02:09 - 02274816 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\RemindersUI.dll
2015-07-10 00:13 - 2015-09-10 02:08 - 00210432 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CortanaApi.ProxyStub.dll
2015-08-08 01:05 - 2007-09-02 13:58 - 00495616 _____ () C:\Program Files (x86)\RocketDock\RocketDock.exe
2015-08-03 15:59 - 2015-08-03 15:59 - 00102400 _____ () C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Proxy.Native.dll
2015-07-24 18:54 - 2015-07-24 18:54 - 03525431 _____ () C:\Program Files (x86)\PrivaZer\PrivaMenu5.dll
2015-07-30 15:19 - 2015-07-30 15:19 - 00102864 _____ () C:\Program Files\AVAST Software\Avast\log.dll
2015-07-30 15:19 - 2015-07-30 15:19 - 00123976 _____ () C:\Program Files\AVAST Software\Avast\JsonRpcServer.dll
2015-09-22 11:40 - 2015-09-22 11:40 - 02965504 _____ () C:\Program Files\AVAST Software\Avast\defs\15092200\algo.dll
2015-09-23 10:57 - 2015-09-23 10:57 - 02965504 _____ () C:\Program Files\AVAST Software\Avast\defs\15092300\algo.dll
2015-02-02 00:53 - 2014-11-19 16:09 - 00002048 _____ () C:\Program Files (x86)\DAEMON Tools Pro\MSIMG32.dll
2015-08-08 01:05 - 2007-09-02 13:57 - 00069632 _____ () C:\Program Files (x86)\RocketDock\RocketDock.dll
2015-04-18 08:05 - 2015-04-18 08:05 - 40540672 _____ () C:\Program Files\AVAST Software\Avast\libcef.dll
2014-03-31 20:35 - 2014-03-31 20:35 - 00278208 _____ () C:\Program Files (x86)\Windows Live\Writer\pt-BR\WindowsLive.Writer.Localization.resources.dll
2015-09-22 18:28 - 2015-09-22 18:28 - 26065408 _____ () C:\Program Files (x86)\Battle.net\Battle.net.6160\libcef.dll
2015-09-22 18:28 - 2015-09-22 18:28 - 00739840 _____ () C:\Program Files (x86)\Battle.net\Battle.net.6160\libGLESv2.dll
2015-09-22 18:28 - 2015-09-22 18:28 - 00909312 _____ () C:\Program Files (x86)\Battle.net\Battle.net.6160\platforms\qwindows.dll
2015-09-22 18:28 - 2015-09-22 18:28 - 00130048 _____ () C:\Program Files (x86)\Battle.net\Battle.net.6160\libEGL.dll
2015-09-22 18:28 - 2015-09-22 18:28 - 00020992 _____ () C:\Program Files (x86)\Battle.net\Battle.net.6160\imageformats\qgif.dll
2015-09-22 18:28 - 2015-09-22 18:28 - 00021504 _____ () C:\Program Files (x86)\Battle.net\Battle.net.6160\imageformats\qico.dll
2015-09-22 18:28 - 2015-09-22 18:28 - 00205312 _____ () C:\Program Files (x86)\Battle.net\Battle.net.6160\imageformats\qjpeg.dll
2015-09-22 18:28 - 2015-09-22 18:28 - 00225792 _____ () C:\Program Files (x86)\Battle.net\Battle.net.6160\imageformats\qmng.dll
2015-09-22 18:28 - 2015-09-22 18:28 - 00015872 _____ () C:\Program Files (x86)\Battle.net\Battle.net.6160\imageformats\qsvg.dll
2015-09-22 18:28 - 2015-09-22 18:28 - 00312832 _____ () C:\Program Files (x86)\Battle.net\Battle.net.6160\imageformats\qtiff.dll
2015-09-22 18:28 - 2015-09-22 18:28 - 00010240 _____ () C:\Program Files (x86)\Battle.net\Battle.net.6160\qml\QtQuick.2\qtquick2plugin.dll
2015-09-22 18:28 - 2015-09-22 18:28 - 00054272 _____ () C:\Program Files (x86)\Battle.net\Battle.net.6160\qml\QtQuick\Layouts\qquicklayoutsplugin.dll
2015-09-22 18:28 - 2015-09-22 18:28 - 00010240 _____ () C:\Program Files (x86)\Battle.net\Battle.net.6160\qml\QtQml\Models.2\modelsplugin.dll

==================== Alternate Data Streams (Whitelisted) =========

(If an entry is included in the fixlist, only the ADS will be removed.)

AlternateDataStreams: C:\ProgramData\TEMP:56E2E879

==================== Safe Mode (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)


==================== EXE Association (Whitelisted) ===============

(If an entry is included in the fixlist, the registry item will be restored to default or removed.)


==================== Internet Explorer trusted/restricted ===============

(If an entry is included in the fixlist, it will be removed from the registry.)

IE restricted site: HKU\S-1-5-21-2687556472-4158628515-2680252711-1000\...\008i.com -> 008i.com
IE restricted site: HKU\S-1-5-21-2687556472-4158628515-2680252711-1000\...\008k.com -> 008k.com
IE restricted site: HKU\S-1-5-21-2687556472-4158628515-2680252711-1000\...\00hq.com -> 00hq.com
IE restricted site: HKU\S-1-5-21-2687556472-4158628515-2680252711-1000\...\0190-dialers.com -> 0190-dialers.com
IE restricted site: HKU\S-1-5-21-2687556472-4158628515-2680252711-1000\...\01i.info -> 01i.info
IE restricted site: HKU\S-1-5-21-2687556472-4158628515-2680252711-1000\...\02pmnzy5eo29bfk4.com -> 02pmnzy5eo29bfk4.com
IE restricted site: HKU\S-1-5-21-2687556472-4158628515-2680252711-1000\...\05p.com -> 05p.com
IE restricted site: HKU\S-1-5-21-2687556472-4158628515-2680252711-1000\...\07ic5do2myz3vzpk.com -> 07ic5do2myz3vzpk.com
IE restricted site: HKU\S-1-5-21-2687556472-4158628515-2680252711-1000\...\08nigbmwk43i01y6.com -> 08nigbmwk43i01y6.com
IE restricted site: HKU\S-1-5-21-2687556472-4158628515-2680252711-1000\...\093qpeuqpmz6ebfa.com -> 093qpeuqpmz6ebfa.com
IE restricted site: HKU\S-1-5-21-2687556472-4158628515-2680252711-1000\...\0calories.net -> 0calories.net
IE restricted site: HKU\S-1-5-21-2687556472-4158628515-2680252711-1000\...\0cj.net -> 0cj.net
IE restricted site: HKU\S-1-5-21-2687556472-4158628515-2680252711-1000\...\0scan.com -> 0scan.com
IE restricted site: HKU\S-1-5-21-2687556472-4158628515-2680252711-1000\...\1-britney-spears-nude.com -> 1-britney-spears-nude.com
IE restricted site: HKU\S-1-5-21-2687556472-4158628515-2680252711-1000\...\1-domains-registrations.com -> 1-domains-registrations.com
IE restricted site: HKU\S-1-5-21-2687556472-4158628515-2680252711-1000\...\1-se.com -> 1-se.com
IE restricted site: HKU\S-1-5-21-2687556472-4158628515-2680252711-1000\...\1001movie.com -> 1001movie.com
IE restricted site: HKU\S-1-5-21-2687556472-4158628515-2680252711-1000\...\1001night.biz -> 1001night.biz
IE restricted site: HKU\S-1-5-21-2687556472-4158628515-2680252711-1000\...\100gal.net -> 100gal.net
IE restricted site: HKU\S-1-5-21-2687556472-4158628515-2680252711-1000\...\100sexlinks.com -> 100sexlinks.com

There are 4788 more restricted sites.

==================== Other Areas ============================

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-2687556472-4158628515-2680252711-1000\Control Panel\Desktop\\Wallpaper -> c:\users\murilo costa\appdata\local\microsoft\windows\themes\alienware wallpaper 17 [vikitech].jpg
DNS Servers: 208.67.222.222 - 208.67.220.220
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall is enabled.

==================== MSCONFIG/TASK MANAGER disabled items ==

(Currently there is no automatic fix for this section.)

MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Nexus.lnk => C:\Windows\pss\Nexus.lnk.CommonStartup
MSCONFIG\startupfolder: C:^Users^Murilo Costa^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Enviar para o OneNote.lnk => C:\Windows\pss\Enviar para o OneNote.lnk.Startup
MSCONFIG\startupfolder: C:^Users^Murilo Costa^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Monitorar alertas de tinta - HP Deskjet 1510 series.lnk => C:\Windows\pss\Monitorar alertas de tinta - HP Deskjet 1510 series.lnk.Startup
MSCONFIG\startupreg: Auslogics BoostSpeed BoostSpeed => "C:\Program Files (x86)\Auslogics\BoostSpeed\BoostSpeed.exe" -UseTray
MSCONFIG\startupreg: BingSvc => C:\Users\Murilo Costa\AppData\Local\Microsoft\BingSvc\BingSvc.exe
MSCONFIG\startupreg: CCleaner Monitoring => "C:\Program Files\CCleaner\CCleaner64.exe" /MONITOR
MSCONFIG\startupreg: cFosSpeed =>
MSCONFIG\startupreg: Codec Settings UAC Manager =>
MSCONFIG\startupreg: DAEMON Tools Pro Agent => "C:\Program Files (x86)\DAEMON Tools Pro\DTAgent.exe" -autorun
MSCONFIG\startupreg: DarkDumpReport => C:\ProgramData
MSCONFIG\startupreg: Dropbox => "C:\Program Files (x86)\Dropbox\Client\Dropbox.exe" /systemstartup
MSCONFIG\startupreg: FlashPlayerUpdate => C:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_17_0_0_190_Plugin.exe -update plugin
MSCONFIG\startupreg: GoogleChromeAutoLaunch_22D77B59BEE56275FFB286635C27855A => "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --no-startup-window
MSCONFIG\startupreg: GoogleDriveSync => "C:\Program Files (x86)\Google\Drive\googledrivesync.exe" /autostart
MSCONFIG\startupreg: IDMan => C:\Program Files (x86)\Internet Download Manager\IDMan.exe /onboot
MSCONFIG\startupreg: MouseDriver => TiltWheelMouse.exe
MSCONFIG\startupreg: MyWebFace EPM Support => "C:\PROGRA~2\MYWEBF~1\bar\1.bin\5amedint.exe" t8EPMSup.dll,S
MSCONFIG\startupreg: Raptr => "C:\Program Files (x86)\Raptr\raptrstub.exe" --startup
MSCONFIG\startupreg: RTHDVCPL => "C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe" -s
MSCONFIG\startupreg: SkyDrive => "C:\Users\Murilo Costa\AppData\Local\Microsoft\SkyDrive\SkyDrive.exe" /background
MSCONFIG\startupreg: Skype => "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun
MSCONFIG\startupreg: Sony PC Companion => "C:\Program Files (x86)\Sony\Sony PC Companion\PCCompanion.exe" /Background
MSCONFIG\startupreg: Spotify => "C:\Users\Murilo Costa\AppData\Roaming\Spotify\Spotify.exe" -autostart -minimized
MSCONFIG\startupreg: Spotify Web Helper => "C:\Users\Murilo Costa\AppData\Roaming\Spotify\SpotifyWebHelper.exe"
MSCONFIG\startupreg: StartCCC => "C:\Program Files (x86)\AMD\ATI.ACE\Core-Static\amd64\CLIStart.exe" MSRun
MSCONFIG\startupreg: Uninstall C: =>
MSCONFIG\startupreg: uTorrent => "C:\Users\Murilo Costa\AppData\Roaming\uTorrent\uTorrent.exe" /MINIMIZED
MSCONFIG\startupreg: UXTheme Launcher => C:\Program Files (x86)\UXTheme Multi-Patcher\themeengine.exe
MSCONFIG\startupreg: WLAN Optimizer => C:\Users\Murilo Costa\Documents\programas\wlann\WLAN Optimizer_Acelerar_Wifi\WLAN Optimizer\WLAN Optimizer.exe

==================== FirewallRules (Whitelisted) ===============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

FirewallRules: [vm-monitoring-nb-session] => (Allow) LPort=139
FirewallRules: [MSMQ-In-TCP] => (Allow) %systemroot%\system32\mqsvc.exe
FirewallRules: [MSMQ-Out-TCP] => (Allow) %systemroot%\system32\mqsvc.exe
FirewallRules: [MSMQ-In-UDP] => (Allow) %systemroot%\system32\mqsvc.exe
FirewallRules: [MSMQ-Out-UDP] => (Allow) %systemroot%\system32\mqsvc.exe
FirewallRules: [WCF-NetTcpActivator-In-TCP-64bit] => (Allow) LPort=808
FirewallRules: [UDP Query User{13EC914E-9700-4433-95A7-F9EEFFBB2BBF}C:\program files (x86)\steam\steamapps\common\war thunder\aces.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\war thunder\aces.exe
FirewallRules: [TCP Query User{2BB1C04E-BEDF-4806-9C70-D2D36E21148C}C:\program files (x86)\steam\steamapps\common\war thunder\aces.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\war thunder\aces.exe
FirewallRules: [{E5E7E01C-7A14-4CD6-B53F-3B1446C8C92F}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\War Thunder\launcher.exe
FirewallRules: [{135090A1-8713-437B-8E54-FF3295A47C53}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\War Thunder\launcher.exe
FirewallRules: [UDP Query User{E75FB090-F55C-4542-80A1-DC6587DDF96A}C:\users\murilo costa\downloads\programs\winbox.exe] => (Allow) C:\users\murilo costa\downloads\programs\winbox.exe
FirewallRules: [TCP Query User{CAFD7873-440B-4CB1-9E06-3E5F2230FFF2}C:\users\murilo costa\downloads\programs\winbox.exe] => (Allow) C:\users\murilo costa\downloads\programs\winbox.exe
FirewallRules: [UDP Query User{F208E28C-7F7E-41C5-AA27-7AC02233E5D0}C:\users\murilo costa\desktop\winbox.exe] => (Block) C:\users\murilo costa\desktop\winbox.exe
FirewallRules: [TCP Query User{55860E13-3113-4893-BD7E-DDB31AF6735E}C:\users\murilo costa\desktop\winbox.exe] => (Block) C:\users\murilo costa\desktop\winbox.exe
FirewallRules: [{8F7FA632-8229-4C6A-ACD1-05F987555DF7}] => (Allow) C:\Program Files (x86)\Dropbox\Client\Dropbox.exe
FirewallRules: [{DAA1A016-F703-4C44-ABAC-D8433532193F}] => (Allow) C:\Program Files (x86)\Origin Games\Battlefield 4\BF4WebHelper.exe
FirewallRules: [{E25DDF30-4D19-42DE-9F81-F38D1206A057}] => (Allow) C:\Program Files (x86)\Origin Games\Battlefield 4\BF4WebHelper.exe
FirewallRules: [{DCE9DC15-1D04-4646-9DDA-00E6D584A7B2}] => (Allow) C:\Program Files (x86)\Origin Games\Battlefield 4\BF4X86WebHelper.exe
FirewallRules: [{5F8B4643-D126-44A4-ABA3-7191852B7890}] => (Allow) C:\Program Files (x86)\Origin Games\Battlefield 4\BF4X86WebHelper.exe
FirewallRules: [{17AA7FB1-233F-4D8B-BBAB-76EC6C2EF747}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{1F51370C-8EF0-4CB1-B7AC-E00DD6D651DD}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{CE67344F-065B-4516-8592-8B64D7029FAB}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
FirewallRules: [{DEBFF7F9-D0EE-4862-B3A5-EEDCDAF727FB}] => (Allow) C:\Program Files (x86)\Sony Mobile\Update Engine\Sony Mobile Update Engine.exe
FirewallRules: [{B1201156-B52D-41D7-9563-5C2158E301C1}] => (Allow) C:\Program Files (x86)\Sony Mobile\Update Engine\Sony Mobile Update Engine.exe
FirewallRules: [{9D828664-2C83-4989-A476-494E2CD52B4C}] => (Allow) C:\Users\Murilo Costa\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{13644366-DCCA-4A69-A86D-5BB7DE752D0D}] => (Allow) C:\Users\Murilo Costa\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{36AB0E93-FB90-4D13-A82E-3BDD93381D8A}] => (Allow) C:\Users\Murilo Costa\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{58DE1543-D6F0-4846-B39D-673D79C654C2}] => (Allow) C:\Users\Murilo Costa\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{16DD569C-3B2A-44E1-8AC4-21A19BA2EFF1}] => (Allow) C:\Users\Murilo Costa\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{593E7074-BB12-423C-BE3D-EDBA8D0C5B62}] => (Allow) C:\Users\Murilo Costa\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [UDP Query User{C9BB1047-E987-41C1-9058-F64725179EFC}C:\program files (x86)\utorrent\utorrent.exe] => (Allow) C:\program files (x86)\utorrent\utorrent.exe
FirewallRules: [TCP Query User{A7B12567-6A56-4F59-BA96-D1F18570C181}C:\program files (x86)\utorrent\utorrent.exe] => (Allow) C:\program files (x86)\utorrent\utorrent.exe
FirewallRules: [UDP Query User{52B06024-75F5-4DD7-8A8F-D3CA738AA653}C:\program files (x86)\breach and clear deadline\deadline.exe] => (Allow) C:\program files (x86)\breach and clear deadline\deadline.exe
FirewallRules: [TCP Query User{C7649572-85B7-44BC-84CC-F62957430B0A}C:\program files (x86)\breach and clear deadline\deadline.exe] => (Allow) C:\program files (x86)\breach and clear deadline\deadline.exe
FirewallRules: [{6DACB67C-6F58-477E-8964-05F293B1698E}] => (Allow) %ProgramFiles% (x86)\Origin Games\Battlefield 4\bf4_x86.exe
FirewallRules: [{C0864F2E-3AAA-4605-A7D6-EAF4FCADFA33}] => (Allow) %ProgramFiles% (x86)\Origin Games\Battlefield 4\bf4_x86.exe
FirewallRules: [{99D13594-265C-4F07-9F5B-ED6DCA6DE3BA}] => (Allow) %ProgramFiles% (x86)\Origin Games\Battlefield 4\bf4.exe
FirewallRules: [{55740186-BFAA-4EEB-902A-967787B360BF}] => (Allow) %ProgramFiles% (x86)\Origin Games\Battlefield 4\bf4.exe
FirewallRules: [UDP Query User{1983C82A-D667-4F79-A5FF-CD180C53F81D}C:\users\murilo costa\desktop\programas\winbox.exe] => (Allow) C:\users\murilo costa\desktop\programas\winbox.exe
FirewallRules: [TCP Query User{F1712A56-CC20-47B9-BA8B-E94379567E36}C:\users\murilo costa\desktop\programas\winbox.exe] => (Allow) C:\users\murilo costa\desktop\programas\winbox.exe
FirewallRules: [UDP Query User{125314BC-FA70-4183-A8E9-267BDD1D0DD3}C:\program files (x86)\crytek\crysis 2 - maximum edition\bin32\crysis2.exe] => (Allow) C:\program files (x86)\crytek\crysis 2 - maximum edition\bin32\crysis2.exe
FirewallRules: [TCP Query User{14241996-A2EA-46C2-BB8A-AF8DF299196A}C:\program files (x86)\crytek\crysis 2 - maximum edition\bin32\crysis2.exe] => (Allow) C:\program files (x86)\crytek\crysis 2 - maximum edition\bin32\crysis2.exe
FirewallRules: [{BEED81B1-E956-42F7-B2D1-1B1C287824A3}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{6AB898CE-5C8B-489E-B32F-C97B2918EBC1}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{415EBA71-4E6B-471E-809C-188290EEBDB2}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\lost planet extreme condition\LostPlanetDX10.exe
FirewallRules: [{CF74BDCF-2042-4838-83F9-60B2AA97EC10}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\lost planet extreme condition\LostPlanetDX10.exe
FirewallRules: [{CB22F71A-97E6-4360-A56E-E823C254DE55}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\lost planet extreme condition\LostPlanetDX10.exe
FirewallRules: [{EFA406AF-4573-4014-BAA5-36EE6EF0E2BA}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\lost planet extreme condition\LostPlanetDX10.exe
FirewallRules: [{9326D378-3C6C-43A0-8C34-B7885C21F15F}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\lost planet extreme condition\LostPlanetDX9.exe
FirewallRules: [{933970E6-B522-4A50-8180-84E9E58140DB}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\lost planet extreme condition\LostPlanetDX9.exe
FirewallRules: [{249121D0-8FBE-449D-9B83-241779686DF0}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\lost planet extreme condition\LostPlanetDX9.exe
FirewallRules: [{D018171E-3BEA-4C0A-AA46-75474A778C5C}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\lost planet extreme condition\LostPlanetDX9.exe
FirewallRules: [{21951B30-6A6D-4CBE-9B10-3CD71F9C6875}] => (Allow) C:\Program Files (x86)\NAMCO BANDAI Games\DarkSouls\DARKSOULS.exe
FirewallRules: [{55A5806F-E4A8-4955-BFA2-06D45A1F41A1}] => (Allow) C:\Program Files\HP\HP Deskjet 1510 series\Bin\USBSetup.exe
FirewallRules: [{04A9ED8E-0C37-4CB4-8BB6-7BA0E997CCDC}] => (Allow) C:\Program Files\HP\HP Deskjet 1510 series\Bin\HPNetworkCommunicatorCom.exe
FirewallRules: [{6513E33D-EDFC-4356-8E2A-708B7798C5FF}] => (Allow) C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.4\SonarHost.exe
FirewallRules: [{F22812A8-3537-40E4-986C-BA444D5FB9C3}] => (Allow) C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.4\SonarHost.exe
FirewallRules: [{9E5B2CF3-96BC-46EF-8504-83CF960FA0B3}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Might & Magic - Duel of Champions\Game.exe
FirewallRules: [{910AB1B0-2307-4E01-AE70-661855FCB4C9}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Might & Magic - Duel of Champions\Game.exe
FirewallRules: [UDP Query User{AC7C4B8B-7F17-4A57-9C4C-621F7EFB2FE2}C:\program files (x86)\xbmc\xbmc.exe] => (Allow) C:\program files (x86)\xbmc\xbmc.exe
FirewallRules: [TCP Query User{0B8BDEB5-9916-454E-A506-ED0740603D6F}C:\program files (x86)\xbmc\xbmc.exe] => (Allow) C:\program files (x86)\xbmc\xbmc.exe
FirewallRules: [{EF5147C1-74E4-4090-AE10-11230E3858F8}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win32\dota2.exe
FirewallRules: [{14D6F10C-974D-4410-BFD4-ADC6B742C107}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win32\dota2.exe
FirewallRules: [UDP Query User{7D4A824D-978F-4024-AA48-5908936D5930}C:\program files (x86)\xbmc\xbmc.exe] => (Allow) C:\program files (x86)\xbmc\xbmc.exe
FirewallRules: [TCP Query User{64E51DCF-E43A-4B95-B905-2D30BBBD55DF}C:\program files (x86)\xbmc\xbmc.exe] => (Allow) C:\program files (x86)\xbmc\xbmc.exe
FirewallRules: [{E60234ED-7DF4-4458-98D0-A9F491BE7996}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{EE812773-7DE2-4271-AFD7-56D3EB85CE61}] => (Allow) %ProgramFiles% (x86)\Skype\Phone\Skype.exe
FirewallRules: [{131595A8-2E4B-4BE8-8A37-F945261145F0}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{F3B191C5-B455-4F13-937A-A2791BC9F580}] => (Block) %ProgramFiles%\Common Files\Protexis\License Service\PsiService_2.exe
FirewallRules: [{92AC7939-0471-4C44-9D13-95968867B44C}] => (Block) %ProgramFiles%\Common Files\Protexis\License Service\PsiService_2.exe
FirewallRules: [{316F5AF1-DB95-4118-B5BB-968F09B05154}] => (Block) c:\Program Files\Corel\CorelDRAW Graphics Suite X7\Programs64\CorelPP.exe
FirewallRules: [{510886F3-1C5E-48BD-BEA6-31E6FA991E9E}] => (Block) c:\Program Files\Corel\CorelDRAW Graphics Suite X7\Programs64\CorelDrw.exe
FirewallRules: [{0AF66307-A0E4-4667-BDB8-2904C93D9F3F}] => (Allow) C:\Program Files (x86)\Origin Games\FIFA 15\fifasetup\fifaconfig.exe
FirewallRules: [{95A133BC-7DBF-4247-8001-F4AC43857002}] => (Allow) C:\Program Files (x86)\Origin Games\FIFA 15\fifasetup\fifaconfig.exe
FirewallRules: [{E1DB8C9F-2FF8-477C-A3C1-0226A302990B}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\The Witcher Enhanced Edition\Digital Comic\DigitalComic.exe
FirewallRules: [{509B2B3A-4252-49E8-A3E2-6C798922B82A}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\The Witcher Enhanced Edition\Digital Comic\DigitalComic.exe
FirewallRules: [{3D698E28-C1E5-4B12-A3FA-3543A6332D9A}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\The Witcher Enhanced Edition\System\djinni!.exe
FirewallRules: [{A165F293-AC5E-4E66-B359-719AE8E2FA70}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\The Witcher Enhanced Edition\System\djinni!.exe
FirewallRules: [{151E78E8-9B79-48C6-8BCF-4001E9001AE2}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\The Witcher Enhanced Edition\System\witcher.exe
FirewallRules: [{6AD1A08B-F53C-45BA-BBFD-04816236CD19}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\The Witcher Enhanced Edition\System\witcher.exe
FirewallRules: [{49ED14DA-E94A-4652-B85E-F7C83499B6CE}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Medal of Honor Airborne\UnrealEngine3\Binaries\MOHA.exe
FirewallRules: [{C1867A95-5C5B-4646-8094-79278B532A45}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Medal of Honor Airborne\UnrealEngine3\Binaries\MOHA.exe
FirewallRules: [{5F95674D-D686-4992-8E6F-07A54247033B}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Medal of Honor\Binaries\moh.exe
FirewallRules: [{463DF9EA-300E-4416-97E4-522CAB9EB033}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Medal of Honor\Binaries\moh.exe
FirewallRules: [{3748D042-3885-4878-9D17-DAEB349B4453}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Medal of Honor\MP\mohmpgame.exe
FirewallRules: [{2E1432C8-1B34-4DA3-96D5-0E93E179B906}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Medal of Honor\MP\mohmpgame.exe
FirewallRules: [{812A8B82-D434-4FEB-84A5-EEB1F42A3AA9}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\BioShock 2\MP\Builds\Binaries\Bioshock2Launcher.exe
FirewallRules: [{DFF70DAF-9A36-4367-83A5-DE8C1EF7DC4B}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\BioShock 2\MP\Builds\Binaries\Bioshock2Launcher.exe
FirewallRules: [{BEBF87A7-3E88-4604-AB60-1D0A4859FADA}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\BioShock 2\SP\Builds\Binaries\Bioshock2Launcher.exe
FirewallRules: [{6E05D524-6665-473B-BCBE-CB03D44FFBCA}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\BioShock 2\SP\Builds\Binaries\Bioshock2Launcher.exe
FirewallRules: [{BF20250D-4537-49DF-AE7B-73C6F6A2BC1B}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Kane & Lynch 2 - Dog Days\kl2.exe
FirewallRules: [{D05A5B20-1837-466F-B189-2202ADAF4903}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Kane & Lynch 2 - Dog Days\kl2.exe
FirewallRules: [{D4FAD477-EAA0-4187-B6F5-CA9762550D0B}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Hydrophobia\HydroPC.exe
FirewallRules: [{87094DF3-1DD2-4701-8ACE-FE795859A709}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Hydrophobia\HydroPC.exe
FirewallRules: [{EEB8E71B-8783-4F41-95D1-9B549079A722}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Shadowgrounds Survivor\Shadowgrounds Survivor Launcher.exe
FirewallRules: [{9638377E-95FE-4B5C-993D-A28B8C93C473}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Shadowgrounds Survivor\Shadowgrounds Survivor Launcher.exe
FirewallRules: [{E2D44A96-CF4F-4387-BBEF-86B824C681FD}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Shadowgrounds Survivor\survivor.exe
FirewallRules: [{E7833DB6-4C09-445A-B9C9-40EE4948AA67}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Shadowgrounds Survivor\survivor.exe
FirewallRules: [{C1175BD9-E1F0-40B5-8155-83A2290E49E8}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\lost planet extreme condition\LostPlanetDX10.exe
FirewallRules: [{58B0B8C9-571D-4E34-9114-689F06469B95}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\lost planet extreme condition\LostPlanetDX10.exe
FirewallRules: [{D7036379-5D42-4472-8BB5-F4FF50A12D7B}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\lost planet extreme condition\LostPlanetDX9.exe
FirewallRules: [{041D50A3-3ED5-4358-975B-F27E672F57F6}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\lost planet extreme condition\LostPlanetDX9.exe
FirewallRules: [{15296D9A-179E-48E6-87EC-66BDB747216E}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Shadowgrounds\ShadowgroundsLauncher.exe
FirewallRules: [{E3098F12-CE66-4EA2-AD9B-EF695902540A}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Shadowgrounds\ShadowgroundsLauncher.exe
FirewallRules: [{45E6BFB2-0FCD-4F1E-811F-B2EFAA7B218C}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Shadowgrounds\Shadowgrounds.exe
FirewallRules: [{F7C6FD83-59D7-47DB-873A-6D58DD9B0E13}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Shadowgrounds\Shadowgrounds.exe
FirewallRules: [{95358582-24E3-45AC-A745-A7274B4C3017}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Toki Tori 2\tokitori2.exe
FirewallRules: [{A914711A-CD5E-48A2-A157-177F184D8F9B}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Toki Tori 2\tokitori2.exe
FirewallRules: [{C29F8CB7-3167-4BE5-AE75-DD60232C36CF}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\tinytroopers\TinyTroopers.exe
FirewallRules: [{A9F43EE3-DD4A-4105-8ACF-91C63FD12263}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\tinytroopers\TinyTroopers.exe
FirewallRules: [{09A6ADDC-1D1A-4856-A45D-036FFB1D62B8}] => (Allow) C:\Program Files (x86)\NAMCO BANDAI Games\DarkSouls\DARKSOULS.exe
FirewallRules: [UDP Query User{6C8ACD3D-9365-49D8-B19A-C0F8915CD2A3}C:\program files (x86)\namco bandai games\darksouls\data\data.exe] => (Allow) C:\program files (x86)\namco bandai games\darksouls\data\data.exe
FirewallRules: [TCP Query User{D73537E5-A293-4DCC-8661-2B59B65D209A}C:\program files (x86)\namco bandai games\darksouls\data\data.exe] => (Allow) C:\program files (x86)\namco bandai games\darksouls\data\data.exe
FirewallRules: [UDP Query User{27CF8E11-0E99-4E81-8502-8BE88836CA65}C:\users\murilo costa\appdata\roaming\utorrent\updates\3.4.3_40298.exe] => (Allow) C:\users\murilo costa\appdata\roaming\utorrent\updates\3.4.3_40298.exe
FirewallRules: [TCP Query User{B11DFC1C-1CA3-471D-A513-62FFDF5D2AAE}C:\users\murilo costa\appdata\roaming\utorrent\updates\3.4.3_40298.exe] => (Allow) C:\users\murilo costa\appdata\roaming\utorrent\updates\3.4.3_40298.exe
FirewallRules: [{1ACFD372-ECE8-4F8A-B825-2898B0514D3C}] => (Allow) C:\Program Files (x86)\Origin Games\FIFA 15\fifasetup\fifaconfig.exe
FirewallRules: [{78E2D903-5524-4C32-8588-6D38DB67AF43}] => (Allow) C:\Program Files (x86)\Origin Games\FIFA 15\fifasetup\fifaconfig.exe
FirewallRules: [UDP Query User{BB566A49-813B-4F1E-B841-DAD09CD2DBFA}C:\users\murilo costa\appdata\roaming\utorrent\updates\3.4.3_40298.exe] => (Allow) C:\users\murilo costa\appdata\roaming\utorrent\updates\3.4.3_40298.exe
FirewallRules: [TCP Query User{C17E6568-C00F-4131-8B5A-59883E8B94E2}C:\users\murilo costa\appdata\roaming\utorrent\updates\3.4.3_40298.exe] => (Allow) C:\users\murilo costa\appdata\roaming\utorrent\updates\3.4.3_40298.exe
FirewallRules: [{E9F88E8B-85AD-4426-8BDD-0B0D80211872}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Trine\_enchanted_edition_\trine1_launcher.exe
FirewallRules: [{FCE838ED-A736-477D-96B0-2813C0C45A74}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Trine\_enchanted_edition_\trine1_launcher.exe
FirewallRules: [UDP Query User{11983BB6-C544-4681-9362-175407A4F50B}C:\program files (x86)\Java\jre1.8.0_45\bin\jp2launcher.exe] => (Allow) C:\program files (x86)\Java\jre1.8.0_45\bin\jp2launcher.exe
FirewallRules: [TCP Query User{85F0AA73-02AC-47B6-9F9D-1FEF04A2EE50}C:\program files (x86)\Java\jre1.8.0_45\bin\jp2launcher.exe] => (Allow) C:\program files (x86)\Java\jre1.8.0_45\bin\jp2launcher.exe
FirewallRules: [{0B1ABA92-7758-4DD6-906C-30436A9163CB}] => (Allow) C:\Program Files (x86)\Origin Games\Ultima 8\Game\Game\DOSBox\DOSBox.exe
FirewallRules: [{86C296E8-85EB-4CAA-AB24-3F75A65C6AA9}] => (Allow) C:\Program Files (x86)\Origin Games\Ultima 8\Game\Game\DOSBox\DOSBox.exe
FirewallRules: [UDP Query User{055EB870-6B0B-4586-B4A1-52A001E17724}C:\program files (x86)\Java\jre1.8.0_45\bin\jp2launcher.exe] => (Allow) C:\program files (x86)\Java\jre1.8.0_45\bin\jp2launcher.exe
FirewallRules: [TCP Query User{098525F3-4AAB-4703-80B3-4E1F4B898ADD}C:\program files (x86)\Java\jre1.8.0_45\bin\jp2launcher.exe] => (Allow) C:\program files (x86)\Java\jre1.8.0_45\bin\jp2launcher.exe
FirewallRules: [{1045DA4D-776D-44C0-B1E1-C8C6A75C2A36}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\DYL\dyl.exe
FirewallRules: [{5F646CEC-8E39-4D59-97C8-97D7855CBA3A}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\DYL\dyl.exe
FirewallRules: [{1D2A4479-C1B0-4CCC-B2D6-D782E34F2212}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Gumboy Tournament\gumboytournament.exe
FirewallRules: [{6FAED25F-D3C8-4CCE-83C0-818832A22A44}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Gumboy Tournament\gumboytournament.exe
FirewallRules: [{F14CEE21-3E7B-4BEB-8BEB-89DB14318CE2}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\DLC Quest\DLC.exe
FirewallRules: [{F115417C-E104-4613-BE1F-55FA8257B316}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\DLC Quest\DLC.exe
FirewallRules: [{09D97C74-4CFF-41B2-81A0-21379C7814A6}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Bastion\Bastion.exe
FirewallRules: [{C9281B11-A86E-474E-9BBB-EBDBEBA0B552}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Bastion\Bastion.exe
FirewallRules: [{758B1B40-1B38-457B-8664-5053F1788062}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Commandos 3 Destination Berlin\commandos3.exe
FirewallRules: [{F1F365F4-9A4C-4109-AAF5-E6D7B1A0BD36}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Commandos 3 Destination Berlin\commandos3.exe
FirewallRules: [{7BD509B1-8894-46B3-8C0A-E6A365F948C7}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Commandos 2 Men of Courage\comm2.exe
FirewallRules: [{BA60A013-9155-4940-B683-9D7669437654}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Commandos 2 Men of Courage\comm2.exe
FirewallRules: [{56D34BB4-EAA9-44DC-8174-D62AEF0A2EA4}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Commandos Beyond the Call of Duty\Tutorial.exe
FirewallRules: [{A25CE3B0-8FA7-495E-9180-E0E7DA31F7C3}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Commandos Beyond the Call of Duty\Tutorial.exe
FirewallRules: [{7560832C-6536-4F91-8A76-A90581199B99}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Commandos Beyond the Call of Duty\coman_mp.exe
FirewallRules: [{2D50111E-CB6A-4945-B7C6-F1903DBF36A0}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Commandos Beyond the Call of Duty\coman_mp.exe
FirewallRules: [{7C122638-CC22-4349-9646-4FC3DA60D3E7}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Commandos Behind Enemy Lines\Comandos.exe
FirewallRules: [{93B84FB2-38AD-4E9C-905A-4B15C220E6C4}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Commandos Behind Enemy Lines\Comandos.exe
FirewallRules: [{E871A2BD-1009-4ED4-8E5D-B717BD018DF6}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Waves\Binaries\Win32\Waves.exe
FirewallRules: [{0195457E-855D-40D7-AC1F-7A3D3C56DA8C}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Waves\Binaries\Win32\Waves.exe
FirewallRules: [{EB82E9D0-6722-43CB-9638-940D5E160F28}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\BRINK\brink.exe
FirewallRules: [{9EAC0B7B-BD8D-4BAF-8E81-255212EF10F0}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\BRINK\brink.exe
FirewallRules: [UDP Query User{D2D82475-7E59-44B5-954D-9BA7120FDC36}C:\program files (x86)\resident evil 6\bh6.exe] => (Block) C:\program files (x86)\resident evil 6\bh6.exe
FirewallRules: [TCP Query User{CE5BE3DA-1AB2-45DF-929B-6F64674C64C7}C:\program files (x86)\resident evil 6\bh6.exe] => (Block) C:\program files (x86)\resident evil 6\bh6.exe
FirewallRules: [UDP Query User{4FF17AB6-7DC6-477A-98D3-73DCBA211115}C:\program files (x86)\thq\company of heroes\reliccoh.exe] => (Allow) C:\program files (x86)\thq\company of heroes\reliccoh.exe
FirewallRules: [TCP Query User{401B5A49-88F8-4087-8B3F-BF52BC1931BF}C:\program files (x86)\thq\company of heroes\reliccoh.exe] => (Allow) C:\program files (x86)\thq\company of heroes\reliccoh.exe
FirewallRules: [{1F178D51-3AC6-45F6-A54B-B54789CFC19B}] => (Allow) C:\program files (x86)\sierra entertainment\timeshift\bin\timeshift.exe
FirewallRules: [{0DDC3A31-4607-468B-8273-3CCB8DA9CD80}] => (Allow) C:\program files (x86)\sierra entertainment\timeshift\bin\timeshift.exe
FirewallRules: [{578A16E4-378B-4D9B-915B-0EA581E045F9}] => (Allow) C:\Program Files (x86)\Sierra\FEAR\FEAR.exe
FirewallRules: [{8A16A00B-9325-4315-9615-9713B98E73BF}] => (Allow) C:\Program Files (x86)\Sierra\FEAR\FEAR.exe
FirewallRules: [{F21E6BAA-FB2F-4A28-B01D-033085864945}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Might and Magic Heroes VI\Might & Magic Heroes VI.exe
FirewallRules: [{0AF18836-2D7C-4509-A0B3-0E33F88BEAAE}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Might and Magic Heroes VI\Might & Magic Heroes VI.exe
FirewallRules: [{C825CB28-5045-4861-BA31-BE7A24F56170}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Total War SHOGUN 2\Shogun2.exe
FirewallRules: [{B265EF26-CC96-40EB-A3B5-05E7CB2F3075}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Total War SHOGUN 2\Shogun2.exe
FirewallRules: [UDP Query User{AC2415BD-DACC-4229-8390-C98E6C522172}C:\program files (x86)\thq\company of heroes\reliccoh.exe] => (Allow) C:\program files (x86)\thq\company of heroes\reliccoh.exe
FirewallRules: [TCP Query User{D7330C81-6DB7-4A97-8D8D-F94830C99C13}C:\program files (x86)\thq\company of heroes\reliccoh.exe] => (Allow) C:\program files (x86)\thq\company of heroes\reliccoh.exe
FirewallRules: [UDP Query User{67940EC7-98A7-420D-BAF6-8910D6930807}C:\program files (x86)\sierra entertainment\timeshift\bin\timeshift.exe] => (Allow) C:\program files (x86)\sierra entertainment\timeshift\bin\timeshift.exe
FirewallRules: [TCP Query User{AF50AFCA-7101-4723-928A-2CB29B208D18}C:\program files (x86)\sierra entertainment\timeshift\bin\timeshift.exe] => (Allow) C:\program files (x86)\sierra entertainment\timeshift\bin\timeshift.exe
FirewallRules: [{B08A7D1C-A07B-48C4-994E-8259837871C3}] => (Allow) C:\Program Files (x86)\Sierra\FEAR\FEAR.exe
FirewallRules: [{12207785-ACA0-4C4E-8331-FD516B124A75}] => (Allow) C:\Program Files (x86)\Sierra\FEAR\FEAR.exe
FirewallRules: [UDP Query User{9378B844-D9D3-4DED-9B1D-77148312AA06}C:\program files (x86)\origin games\dragon age\bin_ship\daorigins.exe] => (Allow) C:\program files (x86)\origin games\dragon age\bin_ship\daorigins.exe
FirewallRules: [TCP Query User{8DEF53D2-6DBD-4B4D-8AEF-CE2514958996}C:\program files (x86)\origin games\dragon age\bin_ship\daorigins.exe] => (Allow) C:\program files (x86)\origin games\dragon age\bin_ship\daorigins.exe
FirewallRules: [UDP Query User{A3025A1E-0413-4CB8-B20E-1BA1E3115CDC}C:\program files (x86)\hearthstone\hearthstone.exe] => (Allow) C:\program files (x86)\hearthstone\hearthstone.exe
FirewallRules: [TCP Query User{9FA9E3D2-F118-4ECB-A90D-5CD8A7DEB989}C:\program files (x86)\hearthstone\hearthstone.exe] => (Allow) C:\program files (x86)\hearthstone\hearthstone.exe
FirewallRules: [{AF0B5E41-B3D6-4BEF-95B9-2D0BA308BA54}] => (Allow) C:\Program Files (x86)\Origin Games\Dragon Age\bin_ship\daorigins.exe
FirewallRules: [{786B984D-D947-4526-AF69-CEE9417D502F}] => (Allow) C:\Program Files (x86)\Origin Games\Dragon Age\bin_ship\daorigins.exe
FirewallRules: [UDP Query User{8761F71E-2E5B-4E59-B740-93F31EFEBCAC}C:\program files (x86)\diablo iii\diablo iii.exe] => (Allow) C:\program files (x86)\diablo iii\diablo iii.exe
FirewallRules: [TCP Query User{5CA0486F-B34D-4438-9728-15C6284EF37C}C:\program files (x86)\diablo iii\diablo iii.exe] => (Allow) C:\program files (x86)\diablo iii\diablo iii.exe
FirewallRules: [UDP Query User{9D7E2D68-E21B-4D8C-B31B-81475E45A0EF}C:\program files (x86)\steam\steamapps\common\the witcher 2\bin\witcher2.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\the witcher 2\bin\witcher2.exe
FirewallRules: [TCP Query User{27D70B9E-C898-4D73-8AEB-B458E9BC1939}C:\program files (x86)\steam\steamapps\common\the witcher 2\bin\witcher2.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\the witcher 2\bin\witcher2.exe
FirewallRules: [{CC602F70-BE13-47D1-8042-18826EE187E1}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\the witcher 2\Launcher.exe
FirewallRules: [{86EB0BFB-010F-4689-B11C-535207CD3A0C}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\the witcher 2\Launcher.exe
FirewallRules: [UDP Query User{65CF8246-35ED-49D7-8C1D-464ECA32298D}C:\program files (x86)\origin games\fifa 15\fifa15.exe] => (Allow) C:\program files (x86)\origin games\fifa 15\fifa15.exe
FirewallRules: [TCP Query User{A6472A59-8A42-48E8-8677-56A71F0BB5CA}C:\program files (x86)\origin games\fifa 15\fifa15.exe] => (Allow) C:\program files (x86)\origin games\fifa 15\fifa15.exe
FirewallRules: [{A290FC3E-6EBE-4D72-938D-B69A949D8281}] => (Allow) C:\Program Files\Microsoft Office\Office15\UcMapi.exe
FirewallRules: [{484EDF88-1EF5-4C4D-A3B1-D78FBDAAA07A}] => (Allow) C:\Program Files\Microsoft Office\Office15\UcMapi.exe
FirewallRules: [{6AAC0AF6-407D-406F-91CF-67C5085AA1E1}] => (Allow) C:\Program Files\Microsoft Office\Office15\lync.exe
FirewallRules: [{A4213EE3-CE2E-4B48-9F67-41BB2D483BD3}] => (Allow) C:\Program Files\Microsoft Office\Office15\lync.exe
FirewallRules: [{88978617-B09F-46D0-A646-7257EDC16EBE}] => (Allow) LPort=1900
FirewallRules: [{597FFEAF-C1D1-433F-83BD-C1FB3B4D407E}] => (Allow) LPort=2869
FirewallRules: [{1E89C046-BD06-4EB4-BF4D-F28D9B083DD8}] => (Allow) C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe
FirewallRules: [{406D26D6-3BD3-45C6-9D12-8FFAB3C30D5E}] => (Allow) C:\Program Files\HP\HP Deskjet 1510 series\Bin\HPNetworkCommunicatorCom.exe
FirewallRules: [{B2602468-1F10-47E6-905D-527F9DDD011F}] => (Allow) C:\Program Files\HP\HP Deskjet 1510 series\Bin\USBSetup.exe
FirewallRules: [UDP Query User{07EF7707-66F7-42BF-9FFB-923D60DFE875}C:\program files (x86)\diablo iii\diablo iii.exe] => (Allow) C:\program files (x86)\diablo iii\diablo iii.exe
FirewallRules: [TCP Query User{863C32B2-3E87-4A31-9C10-5E8EC2CC9EE6}C:\program files (x86)\diablo iii\diablo iii.exe] => (Allow) C:\program files (x86)\diablo iii\diablo iii.exe
FirewallRules: [{B517BF36-CC3B-4ADE-A6FF-A326406A1B75}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{FDE843BD-45AF-46CD-A3E4-D964406B050C}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [UDP Query User{EC9C641E-726D-4FA5-BD51-CB4C41773688}C:\program files (x86)\origin games\fifa 15\fifa15.exe] => (Allow) C:\program files (x86)\origin games\fifa 15\fifa15.exe
FirewallRules: [TCP Query User{CC4A8609-3D4E-4275-8FE7-9318E9B130C0}C:\program files (x86)\origin games\fifa 15\fifa15.exe] => (Allow) C:\program files (x86)\origin games\fifa 15\fifa15.exe
FirewallRules: [{FFF1688E-3DB2-422C-B88B-E7B301A1D928}] => (Allow) C:\Program Files (x86)\Origin Games\Bejeweled 3\Bejeweled3.exe
FirewallRules: [{591B572A-2FAD-4E90-BCF1-9AB9C512D6CB}] => (Allow) C:\Program Files (x86)\Origin Games\Bejeweled 3\Bejeweled3.exe
FirewallRules: [{6492EEE4-A4A2-4F4F-8843-229541087469}] => (Allow) C:\Program Files (x86)\Origin Games\Peggle Deluxe\Peggle.exe
FirewallRules: [{DF99EEC7-3235-4F3D-BED0-95897B9A7B13}] => (Allow) C:\Program Files (x86)\Origin Games\Peggle Deluxe\Peggle.exe
FirewallRules: [{75CCD362-81A4-4E58-B608-F4E95DC83207}] => (Allow) C:\Program Files (x86)\Origin Games\Plants vs. Zombies\PlantsVsZombies.exe
FirewallRules: [{28D654C8-8AA9-4451-AE8A-6F2AD62BC297}] => (Allow) C:\Program Files (x86)\Origin Games\Plants vs. Zombies\PlantsVsZombies.exe
FirewallRules: [{6573C5CF-2807-4568-8857-2ACD3C5CE1F0}] => (Allow) C:\Program Files\Microsoft Office\Office15\UcMapi.exe
FirewallRules: [{D4D016E9-AC5F-4565-97B7-16F173607676}] => (Allow) C:\Program Files\Microsoft Office\Office15\UcMapi.exe
FirewallRules: [{9F73BA8E-9E78-475A-8B4E-9D2688C0060F}] => (Allow) C:\Program Files\Microsoft Office\Office15\lync.exe
FirewallRules: [{23E5BEC8-BBC6-4621-B85D-F5851073F107}] => (Allow) C:\Program Files\Microsoft Office\Office15\lync.exe
FirewallRules: [{B7BEB4B6-E4D5-49AF-BCF1-13D95DEB9FE6}] => (Allow) C:\Program Files (x86)\Origin Games\Theme Hospital\data\Game\DOSBox\EALaunchHelper.exe
FirewallRules: [{088DCD51-F620-4B1D-A54C-25C8F54B93E7}] => (Allow) C:\Program Files (x86)\Origin Games\Theme Hospital\data\Game\DOSBox\EALaunchHelper.exe
FirewallRules: [{0D810ABF-3701-4C0B-9C55-6594F0EA07F2}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe
FirewallRules: [{9AF522F7-4246-4BD2-9F12-3C8422DBDA97}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe
FirewallRules: [{B2908574-A5FD-46EC-8169-72D9598E6D1D}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe
FirewallRules: [{F9223364-01CE-4EC0-AA97-6C3F45750D28}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe

==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================
Error: (09/23/2015 01:06:18 PM) (Source: Office Software Protection Platform Service) (EventID: 16385) (User: )
Description: Failed to schedule Software Protection service for re-start at 2015-09-23T18:00:18Z. Error Code: 0x80041313.

Error: (09/23/2015 11:06:17 AM) (Source: Office Software Protection Platform Service) (EventID: 16385) (User: )
Description: Failed to schedule Software Protection service for re-start at 2015-09-23T16:00:17Z. Error Code: 0x80041313.

Error: (09/23/2015 05:12:20 AM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: MuriloCosta-PC)
Description: Falha na ativação do aplicativo Microsoft.Windows.Cortana_cw5n1h2txyewy!CortanaUI com o erro: -2144927141. Veja o log Microsoft-Windows-TWinUI/Operational para obter informações adicionais.

Error: (09/23/2015 05:08:18 AM) (Source: Office Software Protection Platform Service) (EventID: 16385) (User: )
Description: Failed to schedule Software Protection service for re-start at 2015-09-23T10:02:18Z. Error Code: 0x80041313.

Error: (09/23/2015 03:36:36 AM) (Source: Perflib) (EventID: 1017) (User: )
Description: ASP.NET_2.0.50727

Error: (09/23/2015 03:36:36 AM) (Source: Perflib) (EventID: 1021) (User: )
Description: ASP.NET_2.0.507278

Error: (09/23/2015 03:08:20 AM) (Source: Office Software Protection Platform Service) (EventID: 16385) (User: )
Description: Failed to schedule Software Protection service for re-start at 2015-09-23T08:02:18Z. Error Code: 0x80041313.

Error: (09/23/2015 03:04:21 AM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: Falha dos Serviços de Criptografia ao processar a chamada de OnIdentity() no Objeto de Gravador do Sistema..

Details:
AddLegacyDriverFiles: Unable to back up image of binary LLDP (Link-Layer Discovery Protocol) da Microsoft.

System Error:
Acesso negado.
.

Error: (09/23/2015 01:08:18 AM) (Source: Office Software Protection Platform Service) (EventID: 16385) (User: )
Description: Failed to schedule Software Protection service for re-start at 2015-09-23T06:02:18Z. Error Code: 0x80041313.

Error: (09/22/2015 11:08:18 PM) (Source: Office Software Protection Platform Service) (EventID: 16385) (User: )
Description: Failed to schedule Software Protection service for re-start at 2015-09-23T04:02:18Z. Error Code: 0x80041313.


System errors:
=============
Error: (09/23/2015 10:59:35 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Não foi possível iniciar o serviço Google Update Service (gupdatem1d0bd9c9f933b7f) devido ao seguinte erro:
%%1053

Error: (09/23/2015 10:59:35 AM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Tempo limite esgotado (30000 milissegundos) ao aguardar a conexão do serviço Google Update Service (gupdatem1d0bd9c9f933b7f).

Error: (09/23/2015 10:59:35 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Não foi possível iniciar o serviço Google Update Service (gupdate1d0bd9c9f0dee6f) devido ao seguinte erro:
%%1053

Error: (09/23/2015 10:59:35 AM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Tempo limite esgotado (30000 milissegundos) ao aguardar a conexão do serviço Google Update Service (gupdate1d0bd9c9f0dee6f).

Error: (09/23/2015 10:56:57 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Não foi possível iniciar o serviço Adaptador de Serviço de Escuta Net.Pipe devido ao seguinte erro:
%%1053

Error: (09/23/2015 10:56:57 AM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Tempo limite esgotado (30000 milissegundos) ao aguardar a conexão do serviço Adaptador de Serviço de Escuta Net.Pipe.

Error: (09/23/2015 10:56:40 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Não foi possível iniciar o serviço MBAMService devido ao seguinte erro:
%%1053

Error: (09/23/2015 10:56:40 AM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Tempo limite esgotado (30000 milissegundos) ao aguardar a conexão do serviço MBAMService.

Error: (09/23/2015 10:56:40 AM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Tempo limite esgotado (30000 milissegundos) ao aguardar a conexão do serviço InstallDriver Table Manager.

Error: (09/23/2015 10:56:11 AM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: O serviço Adaptador de Serviço de Escuta Net.Tcp depende do serviço Serviço de Partilha de Porta Net.Tcp, mas não foi possível iniciá-lo devido ao seguinte erro:
%%1058


==================== Memory info ===========================

Processor: AMD FX(tm)-6100 Six-Core Processor
Percentage of memory in use: 56%
Total physical RAM: 8174.11 MB
Available physical RAM: 3561.13 MB
Total Virtual: 16366.11 MB
Available Virtual: 9965.07 MB

==================== Drives ================================

Drive c: (Disco Local) (Fixed) (Total:931.51 GB) (Free:271.31 GB) NTFS ==>[drive with boot components (obtained from BCD)]
Drive d: () (Fixed) (Total:465.66 GB) (Free:118.09 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 931.5 GB) (Disk ID: D23F6630)
Partition 1: (Active) - (Size=931.5 GB) - (Type=07 NTFS)

========================================================
Disk: 1 (MBR Code: Windows 7 or 8) (Size: 465.8 GB) (Disk ID: F5AC8429)
Partition 1: (Active) - (Size=465.7 GB) - (Type=07 NTFS)

==================== End of Addition.txt ============================