Publicité
Publicité
Format du document : text/plain
Prévisualisation
Resultado do exame Adicional Farbar Recovery Scan Tool (x64) Versão:27-04-2016
Executado por JODDAIAS PRODUCTIONS (2016-04-27 16:32:17)
Executando a partir de C:\Users\JODDAIAS PRODUCTIONS\Desktop
Windows 7 Ultimate Service Pack 1 (X64) (2015-12-23 19:00:52)
Modo da Inicialização: Normal
==========================================================
==================== Contas: =============================
Administrador (S-1-5-21-2048864849-1516951144-680719590-500 - Administrator - Disabled)
Convidado (S-1-5-21-2048864849-1516951144-680719590-501 - Limited - Disabled)
JODDAIAS PRODUCTIONS (S-1-5-21-2048864849-1516951144-680719590-1000 - Administrator - Enabled) => C:\Users\JODDAIAS PRODUCTIONS
==================== Central de Segurança ========================
(Se uma entrada for incluída na fixlist, será removida.)
AV: AVG AntiVirus Free Edition (Disabled - Up to date) {4D41356F-32AD-7C42-C820-63775EE4F413}
AS: Windows Defender (Disabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: AVG AntiVirus Free Edition (Disabled - Up to date) {F620D48B-1497-73CC-F290-58052563BEAE}
==================== Programas Instalados ======================
(Somente os programas adwares com a indicação "Oculto" podem ser adicionados à fixlist para desocultá-los. Os programas adwares devem ser desinstalados manualmente.)
Adobe Photoshop 7.0 (HKLM-x32\...\Adobe Photoshop 7.0) (Version: 7.0 - Adobe Systems, Inc.)
AIMP3 (HKLM-x32\...\AIMP3) (Version: v3.55.1355, 14.07.2014 - AIMP DevTeam)
Asmedia ASM104x USB 3.0 Host Controller Driver (HKLM-x32\...\{E4FB0B39-C991-4EE7-95DD-1A1A7857D33D}) (Version: 1.14.8.0 - Asmedia Technology)
AVG (Version: 16.61.7539 - AVG Technologies) Hidden
AVG 2016 (Version: 16.0.4563 - AVG Technologies) Hidden
AVG Protection (HKLM\...\AVG) (Version: 2016.61.7539 - AVG Technologies)
AVG Zen (Version: 1.31.9 - AVG Technologies) Hidden
Corel Graphics - Windows Shell Extension (HKLM\...\_{3CAAE169-6001-48ED-B2C6-5B6F511552FD}) (Version: 18.0.0.448 - Corel Corporation)
Corel Graphics - Windows Shell Extension (Version: 18.0.448 - Corel Corporation) Hidden
Corel Graphics - Windows Shell Extension 32 Bit Keys (Version: 18.0.448 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X8 - BR (x64) (Version: 18.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X8 - Capture (x64) (Version: 18.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X8 - Common (x64) (Version: 18.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X8 - Connect (x64) (Version: 18.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X8 - Custom Data (x64) (Version: 18.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X8 - Draw (x64) (Version: 18.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X8 - Filters (x64) (Version: 18.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X8 - Font Manager (x64) (Version: 18.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X8 - IPM Content (x64) (Version: 18.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X8 - IPM T (x64) (Version: 18.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X8 - PHOTO-PAINT (x64) (Version: 18.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X8 - Redist (x64) (Version: 18.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X8 - Setup Files (x64) (Version: 18.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X8 - VBA (x64) (Version: 18.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X8 - VideoBrowser (x64) (Version: 18.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X8 - Workspaces (x64) (Version: 18.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X8 - Writing Tools (x64) (Version: 18.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X8 (64-Bit) (HKLM\...\_{4B3FC55D-E999-4BEC-AF29-1091E574961F}) (Version: 18.0.0.448 - Corel Corporation)
CorelDRAW Graphics Suite X8 (Version: 18.0 - Corel Corporation) Hidden
Finger Sensing Pad Driver (HKLM\...\{E86906FF-C63D-4EAF-ACE7-5F8D55FBEA9A}) (Version: 9.1.7.7 - Sentelic)
FMW 1 (Version: 1.73.2 - AVG Technologies) Hidden
Ghostscript GPL 8.64 (Msi Setup) (HKLM-x32\...\_{06CD45E6-FF5E-4D8E-BC01-B276A90DADF2}) (Version: 8.64 - Corel Corporation)
Ghostscript GPL 8.64 (Msi Setup) (x32 Version: 8.64 - Corel Corporation) Hidden
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 49.0.2623.112 - Google Inc.)
Google Update Helper (x32 Version: 1.3.29.5 - Google Inc.) Hidden
Intel(R) C++ Redistributables for Windows* on Intel(R) 64 (HKLM-x32\...\{D2437C5C-2D8C-40D2-8059-689AD7239FA3}) (Version: 11.1.048 - Intel Corporation)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 9.17.10.3062 - Intel Corporation)
IPM_Installer (Version: 2.1 - Your Company Name) Hidden
ITCH (HKLM-x32\...\{A86FE646-BE8F-46A7-AD10-68B69BB0029E}) (Version: 2.2.2.20 - Serato Audio Research)
Microsoft .NET Framework 4.6 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.6.00081 - Microsoft Corporation)
Microsoft .NET Framework 4.6 (Português do Brasil) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1046) (Version: 4.6.00081 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x64) - 14.0.23506 (HKLM-x32\...\{3ee5e5bb-b7cc-4556-8861-a00a82977d6c}) (Version: 14.0.23506.0 - Microsoft Corporation)
Microsoft Visual Studio Tools for Applications 2012 (HKLM-x32\...\{89ca2a32-2b52-4595-8dfd-6fe4757958d0}) (Version: 11.0.51108 - Microsoft Corporation)
Microsoft Visual Studio Tools for Applications 2015 (HKLM-x32\...\{dd8b09df-3ef8-49f1-bd1a-65278435860b}) (Version: 14.0.23217 - Microsoft Corporation)
Novation USB Audio Driver 2.6 (HKLM\...\Novation USB Audio Driver_is1) (Version: 2.6 - Novation DMS Ltd.)
Pacote de Idiomas do Microsoft Visual Studio Tools for Applications 2012 x64 Hosting Support - PTB (Version: 11.0.51108 - Microsoft Corporation) Hidden
Pacote de Idiomas do Microsoft Visual Studio Tools for Applications 2012 x86 Hosting Support - PTB (x32 Version: 11.0.51108 - Microsoft Corporation) Hidden
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6890 - Realtek Semiconductor Corp.)
Samsung Kies (HKLM-x32\...\InstallShield_{758C8301-2696-4855-AF45-534B1200980A}) (Version: 2.6.3.14044_17 - Samsung Electronics Co., Ltd.)
Samsung Kies (x32 Version: 2.6.3.14044_17 - Samsung Electronics Co., Ltd.) Hidden
Samsung USB Driver for Mobile Phones (HKLM\...\{D0795B21-0CDA-4a92-AB9E-6E92D8111E44}) (Version: 1.5.59.0 - Samsung Electronics Co., Ltd.)
Setup (HKLM-x32\...\{7ADF667E-E14D-4D2C-827C-B0108F0D93BC}) (Version: - ) <==== ATENÇÃO
Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 16.3.9.0 - Synaptics Incorporated)
Visual Studio 2012 x64 Redistributables (HKLM\...\{8C775E70-A791-4DA8-BCC3-6AB7136F4484}) (Version: 14.0.0.1 - AVG Technologies)
Visual Studio 2012 x86 Redistributables (HKLM-x32\...\{98EFF19A-30AB-4E4B-B943-F06B1C63EBF8}) (Version: 14.0.0.1 - AVG Technologies CZ, s.r.o.)
Winamp (HKLM-x32\...\Winamp) (Version: 5.64 - Nullsoft, Inc)
WinRAR 5.31 (64-bit) (HKLM\...\WinRAR archiver) (Version: 5.31.0 - win.rar GmbH)
Языковой пакет для поддержки размещения набора средств Microsoft Visual Studio Tools для работы с приложениями 2012 (x64) - RUS (Version: 11.0.51108 - Microsoft Corporation) Hidden
Языковой пакет для поддержки размещения набора средств Microsoft Visual Studio Tools для работы с приложениями 2012 (x86) - RUS (x32 Version: 11.0.51108 - Microsoft Corporation) Hidden
==================== Exame Personalizado CLSID (Whitelisted): ==========================
(Se uma entrada for incluída na fixlist, será removida do Registro. O arquivo não será movido, a menos que seja colocado separadamente.)
==================== Tarefas Agendadas (Whitelisted) =============
(Se uma entrada for incluída na fixlist, será removida do Registro. O arquivo não será movido, a menos que seja colocado separadamente.)
Task: {23C32995-D6D9-466B-B472-E76B707E4E86} - System32\Tasks\{93E9D031-DF1F-417C-804F-60F1A3736818} => pcalua.exe -a "C:\Users\JODDAIAS PRODUCTIONS\AppData\Roaming\uTorrent\uTorrent.exe" -c /UNINSTALL
Task: {2EDF0889-10D0-4D65-9D77-22FB0E34A9AA} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-12-23] (Google Inc.)
Task: {2F9BDFA4-23B3-4FC7-B2D3-D3CD58462E7D} - System32\Tasks\Dravsynlether Core => C:\Program Files (x86)\Dravsynlether\Drvcoretsk.exe [2016-04-22] ()
Task: {34049432-655F-4CEC-AAB8-5C2627C52429} - System32\Tasks\AVG_SYS_TASK_0216pit_DELETE => C:\ProgramData\Avg_Update_0216pit\AVG-Secure-Search-Update_0216pit.exe [2016-02-16] ()
Task: {3B6CC59B-2526-4253-9DDD-EF9BD4835B4A} - System32\Tasks\Browser Updater Task(Core) => C:\Program Files (x86)\QQBrowser\Update\E8109590513C781C0895B7CE4BFBFC1D\Update\BrowserUpdate.exe [2016-04-25] (Tencent) <==== ATENÇÃO
Task: {4306640C-A11C-4880-882E-BED55CB2F1AB} - System32\Tasks\Osoiiwp => C:\Program Files\Gipwerbasdyrjob\Usujge.bat [2016-04-23] () <==== ATENÇÃO
Task: {57466441-D2A4-415E-BB6F-880B3728826D} - System32\Tasks\CorelUpdateHelperTaskCore => C:\Program Files (x86)\Corel\CUH\v2\CUH.exe [2016-02-26] (Corel Corporation)
Task: {8B4131A3-8225-43A4-9C80-017D88352AB3} - System32\Tasks\svchost => C:\Users\JODDAIAS PRODUCTIONS\AppData\Local\Temp\XIAPRM6LA\XIAPRM6LA.exe <==== ATENÇÃO
Task: {C4B9856E-D62A-4AC3-9D9C-077830281672} - System32\Tasks\Redywo => C:\Program Files\Ekeh\Uosietta.bat [2016-04-23] () <==== ATENÇÃO
Task: {D3C3A39A-5226-44D4-8347-3EC507283E51} - System32\Tasks\{8EF66C74-619A-4619-AB31-7FC6795E89F5} => pcalua.exe -a "C:\Program Files\Sound+\uninstaller.exe"
Task: {E9797CA4-2FE0-4C78-AC32-6DAF886917F8} - System32\Tasks\Atagary Verfier => Rundll32.exe "C:\Program Files (x86)\Atagary\Atgverfier.dll",w <==== ATENÇÃO
Task: {F3F8E7D1-49D3-4118-89EA-E138A46272E8} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-12-23] (Google Inc.)
(Se uma entrada for incluída na fixlist, o arquivo da tarefa (.job) será movido. O arquivo que está sendo executado pela tarefa não será movido.)
Task: C:\Windows\Tasks\AVG_SYS_TASK_0216pit_DELETE.job => C:\ProgramData\Avg_Update_0216pit\AVG-Secure-Search-Update_0216pit.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
==================== Atalhos =============================
(As entradas podem ser listadas para serem restauradas ou removidas.)
==================== Módulos Carregados (Whitelisted) ==============
2016-04-21 16:04 - 2016-04-21 16:04 - 03076608 _____ () C:\Program Files\78c423bf60240828bce4a9a6cf0cc5e6\c7676b333e160b1d69320fb724e05e4f.exe
2016-04-07 05:02 - 2016-04-07 05:02 - 00124928 _____ () C:\Users\JODDAIAS PRODUCTIONS\AppData\Local\Apps\2.0\abril.exe
2015-12-23 16:15 - 2013-03-08 23:06 - 00094208 _____ () C:\Windows\System32\IccLibDll_x64.dll
2016-04-22 15:04 - 2016-04-22 15:03 - 40500224 _____ () C:\Program Files (x86)\AVG\UiDll\2171\libcef.dll
2016-04-14 15:51 - 2016-04-06 07:04 - 01675928 _____ () C:\Program Files (x86)\Google\Chrome\Application\49.0.2623.112\libglesv2.dll
2016-04-14 15:51 - 2016-04-06 07:04 - 00086168 _____ () C:\Program Files (x86)\Google\Chrome\Application\49.0.2623.112\libegl.dll
==================== Alternate Data Streams (Whitelisted) =========
(Se uma entrada for incluída na fixlist, somente o ADS será removido.)
==================== Modo de Segurança (Whitelisted) ===================
(Se uma entrada for incluída na fixlist, será removida do Registro. O valor "AlternateShell" será restaurado.)
==================== EXE Associação (Whitelisted) ===============
(Se uma entrada for incluída na fixlist, o ítem no Registro será restaurado para o padrão ou removido.)
==================== Internet Explorer confiável/restrito ===============
(Se uma entrada for incluída na fixlist, será removida do Registro.)
==================== Hosts Conteúdo: ==========================
(Se necessário, a diretiva Hosts: pode ser incluída na fixlist para redefinir o Hosts.)
2009-07-13 23:34 - 2016-04-23 14:37 - 00001552 ____A C:\Windows\system32\Drivers\etc\hosts
127.0.0.1 down.baidu2016.com
127.0.0.1 123.sogou.com
127.0.0.1 www.czzsyzgm.com
127.0.0.1 www.czzsyzxl.com
127.0.0.1 union.baidu2019.com
127.0.0.1 down.baidu2016.com
127.0.0.1 123.sogou.com
127.0.0.1 www.czzsyzgm.com
127.0.0.1 www.czzsyzxl.com
127.0.0.1 union.baidu2019.com
127.0.0.1 down.baidu2016.com
127.0.0.1 123.sogou.com
127.0.0.1 www.czzsyzgm.com
127.0.0.1 www.czzsyzxl.com
127.0.0.1 union.baidu2019.com
127.0.0.1 down.baidu2016.com
127.0.0.1 123.sogou.com
127.0.0.1 www.czzsyzgm.com
127.0.0.1 www.czzsyzxl.com
127.0.0.1 union.baidu2019.com
==================== Outras Áreas ============================
(Atualmente não há nenhuma correção automática para esta seção.)
HKU\S-1-5-21-2048864849-1516951144-680719590-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\JODDAIAS PRODUCTIONS\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
DNS Servers: 104.197.191.4
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Firewall do Windows está habilitado.
==================== MSCONFIG/TASK MANAGER ítens desabilitados ==
(Atualmente não há nenhuma correção automática para esta seção.)
==================== Regras do Firewall (Whitelisted) ===============
(Se uma entrada for incluída na fixlist, será removida do Registro. O arquivo não será movido, a menos que seja colocado separadamente.)
FirewallRules: [{F2DE00EB-A4DC-46C9-8633-7A7ECF72A8A8}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
FirewallRules: [{B6C926D5-9106-4FE5-8C01-CEF09E19A5F1}] => (Allow) C:\Program Files (x86)\AVG\Av\avgnsa.exe
FirewallRules: [{A632BF72-9DB6-4802-BCDC-9E8104DE8FCE}] => (Allow) C:\Program Files (x86)\AVG\Av\avgnsa.exe
FirewallRules: [{6D67625A-8905-407E-8486-8E9783EF75D3}] => (Allow) C:\Program Files (x86)\AVG\Av\avgdiagex.exe
FirewallRules: [{547DF4D5-5DED-42FD-81A7-FF46DC3B9A95}] => (Allow) C:\Program Files (x86)\AVG\Av\avgdiagex.exe
FirewallRules: [{4DF8E3EC-2B2E-4FA1-A3DB-99A495EF73E7}] => (Allow) C:\Program Files (x86)\AVG\Av\avgmfapx.exe
FirewallRules: [{7C2AE843-9655-4BA3-B7FB-9A55A787AE90}] => (Allow) C:\Program Files (x86)\AVG\Av\avgmfapx.exe
FirewallRules: [{82565147-3747-4C06-9759-B77AC158FC50}] => (Allow) C:\Program Files (x86)\AVG\Av\avgemca.exe
FirewallRules: [{8BC0E73D-2C16-4D10-8712-15644F2D467D}] => (Allow) C:\Program Files (x86)\AVG\Av\avgemca.exe
FirewallRules: [TCP Query User{BA30D74C-9B80-43F2-8223-0B0182A6912E}C:\program files (x86)\prompt downloader\promptdownloader.exe] => (Block) C:\program files (x86)\prompt downloader\promptdownloader.exe
FirewallRules: [UDP Query User{7B5A8BA3-1925-434B-BF9C-A5063111A77C}C:\program files (x86)\prompt downloader\promptdownloader.exe] => (Block) C:\program files (x86)\prompt downloader\promptdownloader.exe
FirewallRules: [{A7987822-3F17-4C92-B227-79E45BEBC336}] => (Allow) C:\Users\JODDAIAS PRODUCTIONS\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{532C5761-3B32-40C6-AB7F-F7B45ADBADD9}] => (Allow) C:\Users\JODDAIAS PRODUCTIONS\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{42F13C9E-2B71-499E-AC62-215BC8FE8595}] => (Allow) C:\Users\JODDAIAS PRODUCTIONS\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{BDB162CA-6D7E-4A03-98DA-1C76492866A5}] => (Allow) C:\Users\JODDAIAS PRODUCTIONS\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{F83AADDF-616D-475E-B0AF-84556EEBD8BC}] => (Allow) C:\Users\JODDAIAS PRODUCTIONS\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{D16B20B1-7A84-40B0-BED5-0A28E0FEF76C}] => (Allow) C:\Users\JODDAIAS PRODUCTIONS\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{8BECD6F8-271B-4389-8308-469338750889}] => (Block) c:\Program Files\Corel\CorelDRAW Graphics Suite X8\Programs64\CorelDrw.exe
FirewallRules: [{76C2FE55-5C42-4E99-8517-7B2A810714E5}] => (Block) c:\Program Files\Corel\CorelDRAW Graphics Suite X8\Programs64\CorelPP.exe
==================== Pontos de Restauração =========================
26-04-2016 17:24:24 Removed Ghostscript GPL 8.64 (Msi Setup).
26-04-2016 17:29:21 Removed Corel Graphics - Windows Shell Extension.
26-04-2016 17:29:34 Removed Corel Graphics - Windows Shell Extension 32 Bit Keys.
27-04-2016 14:49:13 Microsoft Visual C++ 2015 Redistributable (x64) - 14.0.23506
27-04-2016 15:51:26 WinThruster qua, abr 27, 16 15:51
27-04-2016 16:05:09 Removed Ghostscript GPL 8.64 (Msi Setup).
27-04-2016 16:10:31 Removed Corel Graphics - Windows Shell Extension.
27-04-2016 16:10:46 Removed Corel Graphics - Windows Shell Extension 32 Bit Keys.
27-04-2016 16:16:14 Microsoft Visual C++ 2015 Redistributable (x64) - 14.0.23506
==================== Dispositivos Apresentando Falhas No Gerenciador =============
==================== Erros no Log de eventos: =========================
Erros em Aplicativos:
==================
Error: (04/27/2016 04:04:56 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Nome de aplicativo com falha: Connect.exe, versão: 5.0.0.448, carimbo de hora: 0x56da654b
Nome do módulo de falhas: KERNELBASE.dll, versão: 6.1.7601.17514, carimbo de hora: 0x4ce7c78c
Código de exceção: 0xe0434352
Deslocamento com falha: 0x000000000000a49d
Identificação do processo com falha: 0x55c
Hora de início do aplicativo com falha: 0xConnect.exe0
Caminho do aplicativo com falha: Connect.exe1
FCaminho do módulo de falhas: Connect.exe2
Identificação do Relatório: Connect.exe3
Error: (04/27/2016 04:04:55 PM) (Source: .NET Runtime) (EventID: 1026) (User: )
Description: Aplicativo: Connect.exe
Versão do Framework: v4.0.30319
Descrição: O processo foi terminado devido a uma exceção sem tratamento.
Informações da Exceção: System.DllNotFoundException
Pilha:
em Connect.App.Main()
Error: (04/26/2016 04:49:11 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: Falha dos Serviços de Criptografia ao processar a chamada de OnIdentity() no Objeto de Gravador do Sistema..
Details:
AddWin32ServiceFiles: Unable to back up image of service WFini WdMan Service since QueryServiceConfig API failed
System Error:
O sistema não pode encontrar o arquivo especificado.
.
Error: (04/22/2016 02:56:47 PM) (Source: MsiInstaller) (EventID: 10005) (User: JODDAIASPRODUCT)
Description: SA_Error1709: StandardAction(0xC00706AD): Product: AVG -- Error 27046. CA_Error27046: DriverInstallation(0xE0010054): Driver installation failed
Error: (04/22/2016 02:56:47 PM) (Source: MsiInstaller) (EventID: 10005) (User: JODDAIASPRODUCT)
Description: SA_Error1709: StandardAction(0xC00706AD): Product: AVG -- Error 27046. CA_Error27046: DriverInstallationFun(0xE0010054): Driver installation failed
Error: (04/19/2016 03:20:55 PM) (Source: MsiInstaller) (EventID: 10005) (User: JODDAIASPRODUCT)
Description: SA_Error1709: StandardAction(0xC00706AD): Product: AVG -- Error 27046. CA_Error27046: DriverInstallation(0xE0010054): Driver installation failed
Error: (04/19/2016 03:20:55 PM) (Source: MsiInstaller) (EventID: 10005) (User: JODDAIASPRODUCT)
Description: SA_Error1709: StandardAction(0xC00706AD): Product: AVG -- Error 27046. CA_Error27046: DriverInstallationFun(0xE0010054): Driver installation failed
Error: (04/19/2016 03:00:31 PM) (Source: MsiInstaller) (EventID: 1013) (User: JODDAIASPRODUCT)
Description: SA_Error1709: StandardAction(0xC00706AD): Product: FMW 1 -- SA_Error25001: StandardAction(0xC00761A9): Installation cannot be done using this package, because a higher version of the product is already installed. Please either download and run the latest installation package or go to Start menu/Control Panel/Programs and Features (Add or Remove Programs) and run Change action on AVG product.
Error: (04/19/2016 12:13:09 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Nome de aplicativo com falha: avgsetupx.exe, versão: 1.11.1.17775, carimbo de hora: 0x55f145ac
Nome do módulo de falhas: unknown, versão: 0.0.0.0, carimbo de hora: 0x00000000
Código de exceção: 0xc0000005
Deslocamento com falha: 0x00000000
Identificação do processo com falha: 0xb90
Hora de início do aplicativo com falha: 0xavgsetupx.exe0
Caminho do aplicativo com falha: avgsetupx.exe1
FCaminho do módulo de falhas: avgsetupx.exe2
Identificação do Relatório: avgsetupx.exe3
Error: (04/15/2016 05:23:18 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: O programa Photoshop.exe versão 7.1.0.0 parou de interagir com o Windows e foi fechado. Para ver se há mais informações disponíveis sobre o problema, verifique o histórico de problemas no painel de controle da Central de Ações.
ID de Processo: 89c
Hora de Início: 01d19752ad1f5e30
Hora de Término: 53
Caminho do Aplicativo: C:\Program Files (x86)\Adobe\Photoshop 7.0\Photoshop.exe
Id do Relatório: e09ad0a3-0347-11e6-8199-3085a9b419ce
Erros de Sistema:
=============
Error: (04/27/2016 04:00:40 PM) (Source: Service Control Manager) (EventID: 7026) (User: )
Description: Falha ao carregar o(s) seguinte(s) driver(s) de início do sistema ou de inicialização:
MPCKpt
Error: (04/27/2016 03:28:11 PM) (Source: DCOM) (EventID: 10010) (User: )
Description: {9B1F122C-2982-4E91-AA8B-E071D54F2A4D}
Error: (04/27/2016 02:41:52 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: O serviço IhPul foi encerrado inesperadamente. Isso aconteceu 1 vez(es).
Error: (04/27/2016 02:41:22 PM) (Source: Service Control Manager) (EventID: 7026) (User: )
Description: Falha ao carregar o(s) seguinte(s) driver(s) de início do sistema ou de inicialização:
MPCKpt
Error: (04/26/2016 04:53:44 PM) (Source: Service Control Manager) (EventID: 7026) (User: )
Description: Falha ao carregar o(s) seguinte(s) driver(s) de início do sistema ou de inicialização:
MPCKpt
Error: (04/26/2016 09:08:04 AM) (Source: DCOM) (EventID: 10010) (User: )
Description: {9B1F122C-2982-4E91-AA8B-E071D54F2A4D}
Error: (04/26/2016 08:12:22 AM) (Source: Service Control Manager) (EventID: 7026) (User: )
Description: Falha ao carregar o(s) seguinte(s) driver(s) de início do sistema ou de inicialização:
MPCKpt
Error: (04/26/2016 08:10:11 AM) (Source: DCOM) (EventID: 10010) (User: )
Description: {078AEF33-C48A-49F7-AFF3-A0EE810BFE7C}
Error: (04/25/2016 04:28:04 PM) (Source: Service Control Manager) (EventID: 7024) (User: )
Description: O serviço AVG Firewall terminou com o erro específico de serviço %%-536805289.
Error: (04/25/2016 02:34:07 PM) (Source: Service Control Manager) (EventID: 7026) (User: )
Description: Falha ao carregar o(s) seguinte(s) driver(s) de início do sistema ou de inicialização:
MPCKpt
CodeIntegrity:
===================================
Date: 2016-04-23 14:27:54.656
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files\Sound+\SoundP.dll because the set of per-page image hashes could not be found on the system.
Date: 2016-04-23 14:27:54.609
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files\Sound+\SoundP.dll because the set of per-page image hashes could not be found on the system.
Date: 2016-04-23 14:27:36.574
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files\Sound+\SoundP.dll because the set of per-page image hashes could not be found on the system.
Date: 2016-04-23 14:27:36.527
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files\Sound+\SoundP.dll because the set of per-page image hashes could not be found on the system.
Date: 2016-04-23 14:26:46.581
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files\Sound+\SoundP.dll because the set of per-page image hashes could not be found on the system.
Date: 2016-04-23 14:26:46.519
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files\Sound+\SoundP.dll because the set of per-page image hashes could not be found on the system.
Date: 2016-04-23 14:26:46.421
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files\Sound+\SoundP.dll because the set of per-page image hashes could not be found on the system.
Date: 2016-04-23 14:26:46.374
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files\Sound+\SoundP.dll because the set of per-page image hashes could not be found on the system.
Date: 2016-04-23 14:26:45.388
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files\Sound+\SoundP.dll because the set of per-page image hashes could not be found on the system.
Date: 2016-04-23 14:26:45.341
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files\Sound+\SoundP.dll because the set of per-page image hashes could not be found on the system.
==================== Informações da Memória ===========================
Processador: Intel(R) Core(TM) i3-2330M CPU @ 2.20GHz
Percentagem de memória em uso: 61%
RAM física total: 4000.13 MB
RAM física disponível: 1554.12 MB
Virtual Total: 7998.45 MB
Virtual disponível: 5356.86 MB
==================== Drives ================================
Drive c: () (Fixed) (Total:78.03 GB) (Free:36.23 GB) NTFS
Drive d: (PRODUCTIONS #01) (Fixed) (Total:143.17 GB) (Free:49.6 GB) NTFS
Drive e: (PRODUCTIONS #02) (Fixed) (Total:244.47 GB) (Free:50.13 GB) NTFS
==================== MBR & Tabela de Partições ==================
========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 465.8 GB) (Disk ID: 5BE4A3F9)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=78 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=143.2 GB) - (Type=07 NTFS)
Partition 4: (Not Active) - (Size=244.5 GB) - (Type=07 NTFS)
==================== Fim de Addition.txt ============================
Executado por JODDAIAS PRODUCTIONS (2016-04-27 16:32:17)
Executando a partir de C:\Users\JODDAIAS PRODUCTIONS\Desktop
Windows 7 Ultimate Service Pack 1 (X64) (2015-12-23 19:00:52)
Modo da Inicialização: Normal
==========================================================
==================== Contas: =============================
Administrador (S-1-5-21-2048864849-1516951144-680719590-500 - Administrator - Disabled)
Convidado (S-1-5-21-2048864849-1516951144-680719590-501 - Limited - Disabled)
JODDAIAS PRODUCTIONS (S-1-5-21-2048864849-1516951144-680719590-1000 - Administrator - Enabled) => C:\Users\JODDAIAS PRODUCTIONS
==================== Central de Segurança ========================
(Se uma entrada for incluída na fixlist, será removida.)
AV: AVG AntiVirus Free Edition (Disabled - Up to date) {4D41356F-32AD-7C42-C820-63775EE4F413}
AS: Windows Defender (Disabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: AVG AntiVirus Free Edition (Disabled - Up to date) {F620D48B-1497-73CC-F290-58052563BEAE}
==================== Programas Instalados ======================
(Somente os programas adwares com a indicação "Oculto" podem ser adicionados à fixlist para desocultá-los. Os programas adwares devem ser desinstalados manualmente.)
Adobe Photoshop 7.0 (HKLM-x32\...\Adobe Photoshop 7.0) (Version: 7.0 - Adobe Systems, Inc.)
AIMP3 (HKLM-x32\...\AIMP3) (Version: v3.55.1355, 14.07.2014 - AIMP DevTeam)
Asmedia ASM104x USB 3.0 Host Controller Driver (HKLM-x32\...\{E4FB0B39-C991-4EE7-95DD-1A1A7857D33D}) (Version: 1.14.8.0 - Asmedia Technology)
AVG (Version: 16.61.7539 - AVG Technologies) Hidden
AVG 2016 (Version: 16.0.4563 - AVG Technologies) Hidden
AVG Protection (HKLM\...\AVG) (Version: 2016.61.7539 - AVG Technologies)
AVG Zen (Version: 1.31.9 - AVG Technologies) Hidden
Corel Graphics - Windows Shell Extension (HKLM\...\_{3CAAE169-6001-48ED-B2C6-5B6F511552FD}) (Version: 18.0.0.448 - Corel Corporation)
Corel Graphics - Windows Shell Extension (Version: 18.0.448 - Corel Corporation) Hidden
Corel Graphics - Windows Shell Extension 32 Bit Keys (Version: 18.0.448 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X8 - BR (x64) (Version: 18.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X8 - Capture (x64) (Version: 18.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X8 - Common (x64) (Version: 18.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X8 - Connect (x64) (Version: 18.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X8 - Custom Data (x64) (Version: 18.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X8 - Draw (x64) (Version: 18.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X8 - Filters (x64) (Version: 18.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X8 - Font Manager (x64) (Version: 18.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X8 - IPM Content (x64) (Version: 18.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X8 - IPM T (x64) (Version: 18.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X8 - PHOTO-PAINT (x64) (Version: 18.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X8 - Redist (x64) (Version: 18.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X8 - Setup Files (x64) (Version: 18.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X8 - VBA (x64) (Version: 18.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X8 - VideoBrowser (x64) (Version: 18.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X8 - Workspaces (x64) (Version: 18.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X8 - Writing Tools (x64) (Version: 18.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X8 (64-Bit) (HKLM\...\_{4B3FC55D-E999-4BEC-AF29-1091E574961F}) (Version: 18.0.0.448 - Corel Corporation)
CorelDRAW Graphics Suite X8 (Version: 18.0 - Corel Corporation) Hidden
Finger Sensing Pad Driver (HKLM\...\{E86906FF-C63D-4EAF-ACE7-5F8D55FBEA9A}) (Version: 9.1.7.7 - Sentelic)
FMW 1 (Version: 1.73.2 - AVG Technologies) Hidden
Ghostscript GPL 8.64 (Msi Setup) (HKLM-x32\...\_{06CD45E6-FF5E-4D8E-BC01-B276A90DADF2}) (Version: 8.64 - Corel Corporation)
Ghostscript GPL 8.64 (Msi Setup) (x32 Version: 8.64 - Corel Corporation) Hidden
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 49.0.2623.112 - Google Inc.)
Google Update Helper (x32 Version: 1.3.29.5 - Google Inc.) Hidden
Intel(R) C++ Redistributables for Windows* on Intel(R) 64 (HKLM-x32\...\{D2437C5C-2D8C-40D2-8059-689AD7239FA3}) (Version: 11.1.048 - Intel Corporation)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 9.17.10.3062 - Intel Corporation)
IPM_Installer (Version: 2.1 - Your Company Name) Hidden
ITCH (HKLM-x32\...\{A86FE646-BE8F-46A7-AD10-68B69BB0029E}) (Version: 2.2.2.20 - Serato Audio Research)
Microsoft .NET Framework 4.6 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.6.00081 - Microsoft Corporation)
Microsoft .NET Framework 4.6 (Português do Brasil) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1046) (Version: 4.6.00081 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x64) - 14.0.23506 (HKLM-x32\...\{3ee5e5bb-b7cc-4556-8861-a00a82977d6c}) (Version: 14.0.23506.0 - Microsoft Corporation)
Microsoft Visual Studio Tools for Applications 2012 (HKLM-x32\...\{89ca2a32-2b52-4595-8dfd-6fe4757958d0}) (Version: 11.0.51108 - Microsoft Corporation)
Microsoft Visual Studio Tools for Applications 2015 (HKLM-x32\...\{dd8b09df-3ef8-49f1-bd1a-65278435860b}) (Version: 14.0.23217 - Microsoft Corporation)
Novation USB Audio Driver 2.6 (HKLM\...\Novation USB Audio Driver_is1) (Version: 2.6 - Novation DMS Ltd.)
Pacote de Idiomas do Microsoft Visual Studio Tools for Applications 2012 x64 Hosting Support - PTB (Version: 11.0.51108 - Microsoft Corporation) Hidden
Pacote de Idiomas do Microsoft Visual Studio Tools for Applications 2012 x86 Hosting Support - PTB (x32 Version: 11.0.51108 - Microsoft Corporation) Hidden
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6890 - Realtek Semiconductor Corp.)
Samsung Kies (HKLM-x32\...\InstallShield_{758C8301-2696-4855-AF45-534B1200980A}) (Version: 2.6.3.14044_17 - Samsung Electronics Co., Ltd.)
Samsung Kies (x32 Version: 2.6.3.14044_17 - Samsung Electronics Co., Ltd.) Hidden
Samsung USB Driver for Mobile Phones (HKLM\...\{D0795B21-0CDA-4a92-AB9E-6E92D8111E44}) (Version: 1.5.59.0 - Samsung Electronics Co., Ltd.)
Setup (HKLM-x32\...\{7ADF667E-E14D-4D2C-827C-B0108F0D93BC}) (Version: - ) <==== ATENÇÃO
Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 16.3.9.0 - Synaptics Incorporated)
Visual Studio 2012 x64 Redistributables (HKLM\...\{8C775E70-A791-4DA8-BCC3-6AB7136F4484}) (Version: 14.0.0.1 - AVG Technologies)
Visual Studio 2012 x86 Redistributables (HKLM-x32\...\{98EFF19A-30AB-4E4B-B943-F06B1C63EBF8}) (Version: 14.0.0.1 - AVG Technologies CZ, s.r.o.)
Winamp (HKLM-x32\...\Winamp) (Version: 5.64 - Nullsoft, Inc)
WinRAR 5.31 (64-bit) (HKLM\...\WinRAR archiver) (Version: 5.31.0 - win.rar GmbH)
Языковой пакет для поддержки размещения набора средств Microsoft Visual Studio Tools для работы с приложениями 2012 (x64) - RUS (Version: 11.0.51108 - Microsoft Corporation) Hidden
Языковой пакет для поддержки размещения набора средств Microsoft Visual Studio Tools для работы с приложениями 2012 (x86) - RUS (x32 Version: 11.0.51108 - Microsoft Corporation) Hidden
==================== Exame Personalizado CLSID (Whitelisted): ==========================
(Se uma entrada for incluída na fixlist, será removida do Registro. O arquivo não será movido, a menos que seja colocado separadamente.)
==================== Tarefas Agendadas (Whitelisted) =============
(Se uma entrada for incluída na fixlist, será removida do Registro. O arquivo não será movido, a menos que seja colocado separadamente.)
Task: {23C32995-D6D9-466B-B472-E76B707E4E86} - System32\Tasks\{93E9D031-DF1F-417C-804F-60F1A3736818} => pcalua.exe -a "C:\Users\JODDAIAS PRODUCTIONS\AppData\Roaming\uTorrent\uTorrent.exe" -c /UNINSTALL
Task: {2EDF0889-10D0-4D65-9D77-22FB0E34A9AA} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-12-23] (Google Inc.)
Task: {2F9BDFA4-23B3-4FC7-B2D3-D3CD58462E7D} - System32\Tasks\Dravsynlether Core => C:\Program Files (x86)\Dravsynlether\Drvcoretsk.exe [2016-04-22] ()
Task: {34049432-655F-4CEC-AAB8-5C2627C52429} - System32\Tasks\AVG_SYS_TASK_0216pit_DELETE => C:\ProgramData\Avg_Update_0216pit\AVG-Secure-Search-Update_0216pit.exe [2016-02-16] ()
Task: {3B6CC59B-2526-4253-9DDD-EF9BD4835B4A} - System32\Tasks\Browser Updater Task(Core) => C:\Program Files (x86)\QQBrowser\Update\E8109590513C781C0895B7CE4BFBFC1D\Update\BrowserUpdate.exe [2016-04-25] (Tencent) <==== ATENÇÃO
Task: {4306640C-A11C-4880-882E-BED55CB2F1AB} - System32\Tasks\Osoiiwp => C:\Program Files\Gipwerbasdyrjob\Usujge.bat [2016-04-23] () <==== ATENÇÃO
Task: {57466441-D2A4-415E-BB6F-880B3728826D} - System32\Tasks\CorelUpdateHelperTaskCore => C:\Program Files (x86)\Corel\CUH\v2\CUH.exe [2016-02-26] (Corel Corporation)
Task: {8B4131A3-8225-43A4-9C80-017D88352AB3} - System32\Tasks\svchost => C:\Users\JODDAIAS PRODUCTIONS\AppData\Local\Temp\XIAPRM6LA\XIAPRM6LA.exe <==== ATENÇÃO
Task: {C4B9856E-D62A-4AC3-9D9C-077830281672} - System32\Tasks\Redywo => C:\Program Files\Ekeh\Uosietta.bat [2016-04-23] () <==== ATENÇÃO
Task: {D3C3A39A-5226-44D4-8347-3EC507283E51} - System32\Tasks\{8EF66C74-619A-4619-AB31-7FC6795E89F5} => pcalua.exe -a "C:\Program Files\Sound+\uninstaller.exe"
Task: {E9797CA4-2FE0-4C78-AC32-6DAF886917F8} - System32\Tasks\Atagary Verfier => Rundll32.exe "C:\Program Files (x86)\Atagary\Atgverfier.dll",w <==== ATENÇÃO
Task: {F3F8E7D1-49D3-4118-89EA-E138A46272E8} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-12-23] (Google Inc.)
(Se uma entrada for incluída na fixlist, o arquivo da tarefa (.job) será movido. O arquivo que está sendo executado pela tarefa não será movido.)
Task: C:\Windows\Tasks\AVG_SYS_TASK_0216pit_DELETE.job => C:\ProgramData\Avg_Update_0216pit\AVG-Secure-Search-Update_0216pit.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
==================== Atalhos =============================
(As entradas podem ser listadas para serem restauradas ou removidas.)
==================== Módulos Carregados (Whitelisted) ==============
2016-04-21 16:04 - 2016-04-21 16:04 - 03076608 _____ () C:\Program Files\78c423bf60240828bce4a9a6cf0cc5e6\c7676b333e160b1d69320fb724e05e4f.exe
2016-04-07 05:02 - 2016-04-07 05:02 - 00124928 _____ () C:\Users\JODDAIAS PRODUCTIONS\AppData\Local\Apps\2.0\abril.exe
2015-12-23 16:15 - 2013-03-08 23:06 - 00094208 _____ () C:\Windows\System32\IccLibDll_x64.dll
2016-04-22 15:04 - 2016-04-22 15:03 - 40500224 _____ () C:\Program Files (x86)\AVG\UiDll\2171\libcef.dll
2016-04-14 15:51 - 2016-04-06 07:04 - 01675928 _____ () C:\Program Files (x86)\Google\Chrome\Application\49.0.2623.112\libglesv2.dll
2016-04-14 15:51 - 2016-04-06 07:04 - 00086168 _____ () C:\Program Files (x86)\Google\Chrome\Application\49.0.2623.112\libegl.dll
==================== Alternate Data Streams (Whitelisted) =========
(Se uma entrada for incluída na fixlist, somente o ADS será removido.)
==================== Modo de Segurança (Whitelisted) ===================
(Se uma entrada for incluída na fixlist, será removida do Registro. O valor "AlternateShell" será restaurado.)
==================== EXE Associação (Whitelisted) ===============
(Se uma entrada for incluída na fixlist, o ítem no Registro será restaurado para o padrão ou removido.)
==================== Internet Explorer confiável/restrito ===============
(Se uma entrada for incluída na fixlist, será removida do Registro.)
==================== Hosts Conteúdo: ==========================
(Se necessário, a diretiva Hosts: pode ser incluída na fixlist para redefinir o Hosts.)
2009-07-13 23:34 - 2016-04-23 14:37 - 00001552 ____A C:\Windows\system32\Drivers\etc\hosts
127.0.0.1 down.baidu2016.com
127.0.0.1 123.sogou.com
127.0.0.1 www.czzsyzgm.com
127.0.0.1 www.czzsyzxl.com
127.0.0.1 union.baidu2019.com
127.0.0.1 down.baidu2016.com
127.0.0.1 123.sogou.com
127.0.0.1 www.czzsyzgm.com
127.0.0.1 www.czzsyzxl.com
127.0.0.1 union.baidu2019.com
127.0.0.1 down.baidu2016.com
127.0.0.1 123.sogou.com
127.0.0.1 www.czzsyzgm.com
127.0.0.1 www.czzsyzxl.com
127.0.0.1 union.baidu2019.com
127.0.0.1 down.baidu2016.com
127.0.0.1 123.sogou.com
127.0.0.1 www.czzsyzgm.com
127.0.0.1 www.czzsyzxl.com
127.0.0.1 union.baidu2019.com
==================== Outras Áreas ============================
(Atualmente não há nenhuma correção automática para esta seção.)
HKU\S-1-5-21-2048864849-1516951144-680719590-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\JODDAIAS PRODUCTIONS\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
DNS Servers: 104.197.191.4
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Firewall do Windows está habilitado.
==================== MSCONFIG/TASK MANAGER ítens desabilitados ==
(Atualmente não há nenhuma correção automática para esta seção.)
==================== Regras do Firewall (Whitelisted) ===============
(Se uma entrada for incluída na fixlist, será removida do Registro. O arquivo não será movido, a menos que seja colocado separadamente.)
FirewallRules: [{F2DE00EB-A4DC-46C9-8633-7A7ECF72A8A8}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
FirewallRules: [{B6C926D5-9106-4FE5-8C01-CEF09E19A5F1}] => (Allow) C:\Program Files (x86)\AVG\Av\avgnsa.exe
FirewallRules: [{A632BF72-9DB6-4802-BCDC-9E8104DE8FCE}] => (Allow) C:\Program Files (x86)\AVG\Av\avgnsa.exe
FirewallRules: [{6D67625A-8905-407E-8486-8E9783EF75D3}] => (Allow) C:\Program Files (x86)\AVG\Av\avgdiagex.exe
FirewallRules: [{547DF4D5-5DED-42FD-81A7-FF46DC3B9A95}] => (Allow) C:\Program Files (x86)\AVG\Av\avgdiagex.exe
FirewallRules: [{4DF8E3EC-2B2E-4FA1-A3DB-99A495EF73E7}] => (Allow) C:\Program Files (x86)\AVG\Av\avgmfapx.exe
FirewallRules: [{7C2AE843-9655-4BA3-B7FB-9A55A787AE90}] => (Allow) C:\Program Files (x86)\AVG\Av\avgmfapx.exe
FirewallRules: [{82565147-3747-4C06-9759-B77AC158FC50}] => (Allow) C:\Program Files (x86)\AVG\Av\avgemca.exe
FirewallRules: [{8BC0E73D-2C16-4D10-8712-15644F2D467D}] => (Allow) C:\Program Files (x86)\AVG\Av\avgemca.exe
FirewallRules: [TCP Query User{BA30D74C-9B80-43F2-8223-0B0182A6912E}C:\program files (x86)\prompt downloader\promptdownloader.exe] => (Block) C:\program files (x86)\prompt downloader\promptdownloader.exe
FirewallRules: [UDP Query User{7B5A8BA3-1925-434B-BF9C-A5063111A77C}C:\program files (x86)\prompt downloader\promptdownloader.exe] => (Block) C:\program files (x86)\prompt downloader\promptdownloader.exe
FirewallRules: [{A7987822-3F17-4C92-B227-79E45BEBC336}] => (Allow) C:\Users\JODDAIAS PRODUCTIONS\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{532C5761-3B32-40C6-AB7F-F7B45ADBADD9}] => (Allow) C:\Users\JODDAIAS PRODUCTIONS\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{42F13C9E-2B71-499E-AC62-215BC8FE8595}] => (Allow) C:\Users\JODDAIAS PRODUCTIONS\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{BDB162CA-6D7E-4A03-98DA-1C76492866A5}] => (Allow) C:\Users\JODDAIAS PRODUCTIONS\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{F83AADDF-616D-475E-B0AF-84556EEBD8BC}] => (Allow) C:\Users\JODDAIAS PRODUCTIONS\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{D16B20B1-7A84-40B0-BED5-0A28E0FEF76C}] => (Allow) C:\Users\JODDAIAS PRODUCTIONS\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{8BECD6F8-271B-4389-8308-469338750889}] => (Block) c:\Program Files\Corel\CorelDRAW Graphics Suite X8\Programs64\CorelDrw.exe
FirewallRules: [{76C2FE55-5C42-4E99-8517-7B2A810714E5}] => (Block) c:\Program Files\Corel\CorelDRAW Graphics Suite X8\Programs64\CorelPP.exe
==================== Pontos de Restauração =========================
26-04-2016 17:24:24 Removed Ghostscript GPL 8.64 (Msi Setup).
26-04-2016 17:29:21 Removed Corel Graphics - Windows Shell Extension.
26-04-2016 17:29:34 Removed Corel Graphics - Windows Shell Extension 32 Bit Keys.
27-04-2016 14:49:13 Microsoft Visual C++ 2015 Redistributable (x64) - 14.0.23506
27-04-2016 15:51:26 WinThruster qua, abr 27, 16 15:51
27-04-2016 16:05:09 Removed Ghostscript GPL 8.64 (Msi Setup).
27-04-2016 16:10:31 Removed Corel Graphics - Windows Shell Extension.
27-04-2016 16:10:46 Removed Corel Graphics - Windows Shell Extension 32 Bit Keys.
27-04-2016 16:16:14 Microsoft Visual C++ 2015 Redistributable (x64) - 14.0.23506
==================== Dispositivos Apresentando Falhas No Gerenciador =============
==================== Erros no Log de eventos: =========================
Erros em Aplicativos:
==================
Error: (04/27/2016 04:04:56 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Nome de aplicativo com falha: Connect.exe, versão: 5.0.0.448, carimbo de hora: 0x56da654b
Nome do módulo de falhas: KERNELBASE.dll, versão: 6.1.7601.17514, carimbo de hora: 0x4ce7c78c
Código de exceção: 0xe0434352
Deslocamento com falha: 0x000000000000a49d
Identificação do processo com falha: 0x55c
Hora de início do aplicativo com falha: 0xConnect.exe0
Caminho do aplicativo com falha: Connect.exe1
FCaminho do módulo de falhas: Connect.exe2
Identificação do Relatório: Connect.exe3
Error: (04/27/2016 04:04:55 PM) (Source: .NET Runtime) (EventID: 1026) (User: )
Description: Aplicativo: Connect.exe
Versão do Framework: v4.0.30319
Descrição: O processo foi terminado devido a uma exceção sem tratamento.
Informações da Exceção: System.DllNotFoundException
Pilha:
em Connect.App.Main()
Error: (04/26/2016 04:49:11 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: Falha dos Serviços de Criptografia ao processar a chamada de OnIdentity() no Objeto de Gravador do Sistema..
Details:
AddWin32ServiceFiles: Unable to back up image of service WFini WdMan Service since QueryServiceConfig API failed
System Error:
O sistema não pode encontrar o arquivo especificado.
.
Error: (04/22/2016 02:56:47 PM) (Source: MsiInstaller) (EventID: 10005) (User: JODDAIASPRODUCT)
Description: SA_Error1709: StandardAction(0xC00706AD): Product: AVG -- Error 27046. CA_Error27046: DriverInstallation(0xE0010054): Driver installation failed
Error: (04/22/2016 02:56:47 PM) (Source: MsiInstaller) (EventID: 10005) (User: JODDAIASPRODUCT)
Description: SA_Error1709: StandardAction(0xC00706AD): Product: AVG -- Error 27046. CA_Error27046: DriverInstallationFun(0xE0010054): Driver installation failed
Error: (04/19/2016 03:20:55 PM) (Source: MsiInstaller) (EventID: 10005) (User: JODDAIASPRODUCT)
Description: SA_Error1709: StandardAction(0xC00706AD): Product: AVG -- Error 27046. CA_Error27046: DriverInstallation(0xE0010054): Driver installation failed
Error: (04/19/2016 03:20:55 PM) (Source: MsiInstaller) (EventID: 10005) (User: JODDAIASPRODUCT)
Description: SA_Error1709: StandardAction(0xC00706AD): Product: AVG -- Error 27046. CA_Error27046: DriverInstallationFun(0xE0010054): Driver installation failed
Error: (04/19/2016 03:00:31 PM) (Source: MsiInstaller) (EventID: 1013) (User: JODDAIASPRODUCT)
Description: SA_Error1709: StandardAction(0xC00706AD): Product: FMW 1 -- SA_Error25001: StandardAction(0xC00761A9): Installation cannot be done using this package, because a higher version of the product is already installed. Please either download and run the latest installation package or go to Start menu/Control Panel/Programs and Features (Add or Remove Programs) and run Change action on AVG product.
Error: (04/19/2016 12:13:09 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Nome de aplicativo com falha: avgsetupx.exe, versão: 1.11.1.17775, carimbo de hora: 0x55f145ac
Nome do módulo de falhas: unknown, versão: 0.0.0.0, carimbo de hora: 0x00000000
Código de exceção: 0xc0000005
Deslocamento com falha: 0x00000000
Identificação do processo com falha: 0xb90
Hora de início do aplicativo com falha: 0xavgsetupx.exe0
Caminho do aplicativo com falha: avgsetupx.exe1
FCaminho do módulo de falhas: avgsetupx.exe2
Identificação do Relatório: avgsetupx.exe3
Error: (04/15/2016 05:23:18 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: O programa Photoshop.exe versão 7.1.0.0 parou de interagir com o Windows e foi fechado. Para ver se há mais informações disponíveis sobre o problema, verifique o histórico de problemas no painel de controle da Central de Ações.
ID de Processo: 89c
Hora de Início: 01d19752ad1f5e30
Hora de Término: 53
Caminho do Aplicativo: C:\Program Files (x86)\Adobe\Photoshop 7.0\Photoshop.exe
Id do Relatório: e09ad0a3-0347-11e6-8199-3085a9b419ce
Erros de Sistema:
=============
Error: (04/27/2016 04:00:40 PM) (Source: Service Control Manager) (EventID: 7026) (User: )
Description: Falha ao carregar o(s) seguinte(s) driver(s) de início do sistema ou de inicialização:
MPCKpt
Error: (04/27/2016 03:28:11 PM) (Source: DCOM) (EventID: 10010) (User: )
Description: {9B1F122C-2982-4E91-AA8B-E071D54F2A4D}
Error: (04/27/2016 02:41:52 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: O serviço IhPul foi encerrado inesperadamente. Isso aconteceu 1 vez(es).
Error: (04/27/2016 02:41:22 PM) (Source: Service Control Manager) (EventID: 7026) (User: )
Description: Falha ao carregar o(s) seguinte(s) driver(s) de início do sistema ou de inicialização:
MPCKpt
Error: (04/26/2016 04:53:44 PM) (Source: Service Control Manager) (EventID: 7026) (User: )
Description: Falha ao carregar o(s) seguinte(s) driver(s) de início do sistema ou de inicialização:
MPCKpt
Error: (04/26/2016 09:08:04 AM) (Source: DCOM) (EventID: 10010) (User: )
Description: {9B1F122C-2982-4E91-AA8B-E071D54F2A4D}
Error: (04/26/2016 08:12:22 AM) (Source: Service Control Manager) (EventID: 7026) (User: )
Description: Falha ao carregar o(s) seguinte(s) driver(s) de início do sistema ou de inicialização:
MPCKpt
Error: (04/26/2016 08:10:11 AM) (Source: DCOM) (EventID: 10010) (User: )
Description: {078AEF33-C48A-49F7-AFF3-A0EE810BFE7C}
Error: (04/25/2016 04:28:04 PM) (Source: Service Control Manager) (EventID: 7024) (User: )
Description: O serviço AVG Firewall terminou com o erro específico de serviço %%-536805289.
Error: (04/25/2016 02:34:07 PM) (Source: Service Control Manager) (EventID: 7026) (User: )
Description: Falha ao carregar o(s) seguinte(s) driver(s) de início do sistema ou de inicialização:
MPCKpt
CodeIntegrity:
===================================
Date: 2016-04-23 14:27:54.656
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files\Sound+\SoundP.dll because the set of per-page image hashes could not be found on the system.
Date: 2016-04-23 14:27:54.609
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files\Sound+\SoundP.dll because the set of per-page image hashes could not be found on the system.
Date: 2016-04-23 14:27:36.574
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files\Sound+\SoundP.dll because the set of per-page image hashes could not be found on the system.
Date: 2016-04-23 14:27:36.527
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files\Sound+\SoundP.dll because the set of per-page image hashes could not be found on the system.
Date: 2016-04-23 14:26:46.581
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files\Sound+\SoundP.dll because the set of per-page image hashes could not be found on the system.
Date: 2016-04-23 14:26:46.519
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files\Sound+\SoundP.dll because the set of per-page image hashes could not be found on the system.
Date: 2016-04-23 14:26:46.421
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files\Sound+\SoundP.dll because the set of per-page image hashes could not be found on the system.
Date: 2016-04-23 14:26:46.374
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files\Sound+\SoundP.dll because the set of per-page image hashes could not be found on the system.
Date: 2016-04-23 14:26:45.388
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files\Sound+\SoundP.dll because the set of per-page image hashes could not be found on the system.
Date: 2016-04-23 14:26:45.341
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files\Sound+\SoundP.dll because the set of per-page image hashes could not be found on the system.
==================== Informações da Memória ===========================
Processador: Intel(R) Core(TM) i3-2330M CPU @ 2.20GHz
Percentagem de memória em uso: 61%
RAM física total: 4000.13 MB
RAM física disponível: 1554.12 MB
Virtual Total: 7998.45 MB
Virtual disponível: 5356.86 MB
==================== Drives ================================
Drive c: () (Fixed) (Total:78.03 GB) (Free:36.23 GB) NTFS
Drive d: (PRODUCTIONS #01) (Fixed) (Total:143.17 GB) (Free:49.6 GB) NTFS
Drive e: (PRODUCTIONS #02) (Fixed) (Total:244.47 GB) (Free:50.13 GB) NTFS
==================== MBR & Tabela de Partições ==================
========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 465.8 GB) (Disk ID: 5BE4A3F9)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=78 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=143.2 GB) - (Type=07 NTFS)
Partition 4: (Not Active) - (Size=244.5 GB) - (Type=07 NTFS)
==================== Fim de Addition.txt ============================