Publicité
Publicité
Format du document : text/plain
Prévisualisation
Resultado do exame Adicional Farbar Recovery Scan Tool (x64) Versão: 20-11-2016 01
Executado por Josef (20-11-2016 20:52:50)
Executando a partir de C:\Users\Josef\Desktop
Windows 7 Ultimate Service Pack 1 (X64) (2016-08-16 01:00:48)
Modo da Inicialização: Normal
==========================================================
==================== Contas: =============================
Administrador (S-1-5-21-538130136-3038094476-3203312819-500 - Administrator - Disabled)
Convidado (S-1-5-21-538130136-3038094476-3203312819-501 - Limited - Disabled)
Josef (S-1-5-21-538130136-3038094476-3203312819-1000 - Administrator - Enabled) => C:\Users\Josef
==================== Central de Segurança ========================
(Se uma entrada for incluída na fixlist, será removida.)
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
==================== Programas Instalados ======================
(Somente os programas adwares com a indicação "Oculto" podem ser adicionados à fixlist para desocultá-los. Os programas adwares devem ser desinstalados manualmente.)
µTorrent (HKU\S-1-5-21-538130136-3038094476-3203312819-1000\...\uTorrent) (Version: 3.4.9.42606 - BitTorrent Inc.)
Adobe Acrobat Reader DC - Português (HKLM-x32\...\{AC76BA86-7AD7-1046-7B44-AC0F074E4100}) (Version: 15.020.20042 - Adobe Systems Incorporated)
Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 22.0.0.153 - Adobe Systems Incorporated)
Adobe Flash Player 23 PPAPI (HKLM-x32\...\Adobe Flash Player PPAPI) (Version: 23.0.0.207 - Adobe Systems Incorporated)
CCleaner (HKLM\...\CCleaner) (Version: 5.24 - Piriform)
Chrome Remote Desktop Host (HKLM-x32\...\{D669DC52-B1A4-4933-878D-CB80F660D95D}) (Version: 55.0.2883.17 - Google Inc.)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 54.0.2840.99 - Google Inc.)
Google Update Helper (x32 Version: 1.3.31.5 - Google Inc.) Hidden
Gramblr (HKLM\...\Gramblr) (Version: 2.8.0 - Gramblr Team)
HiPatch (HKLM-x32\...\{3C87E0FF-BC0A-4F5E-951B-68DC3F8DF000}) (Version: 5.0.6.4 - Hi-Rez Studios)
Hi-Rez Studios Authenticate and Update Service (HKLM-x32\...\{3C87E0FF-BC0A-4F5E-951B-68DC3F8DF1FC}) (Version: 3.0.0.0 - Hi-Rez Studios)
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 9.5.23.1766 - Intel Corporation)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 10.18.10.4358 - Intel Corporation)
Intel(R) Rapid Storage Technology (HKLM\...\{409CB30E-E457-4008-9B1A-ED1B9EA21140}) (Version: 12.9.0.1001 - Intel Corporation)
K-Lite Codec Pack 12.3.5 Basic (HKLM-x32\...\KLiteCodecPack_is1) (Version: 12.3.5 - KLCP)
Lightshot-5.4.0.1 (HKLM-x32\...\{30A5B3C9-2084-4063-A32A-628A98DE512B}_is1) (Version: 5.4.0.1 - Skillbrains)
Microsoft .NET Framework 4.6.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.6.01055 - Microsoft Corporation)
Microsoft .NET Framework 4.6.1 (Português do Brasil) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1046) (Version: 4.6.01055 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x64) - 14.0.23918 (HKLM-x32\...\{dab68466-3a7d-41a8-a5cf-415e3ff8ef71}) (Version: 14.0.23918.0 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.24212 (HKLM-x32\...\{462f63a8-6347-4894-a1b3-dbfe3a4c981d}) (Version: 14.0.24212.0 - Microsoft Corporation)
MPC-HC 1.7.10 (64-bit) (HKLM\...\{2ACBF1FA-F5C3-4B19-A774-B22A31F231B9}_is1) (Version: 1.7.10 - MPC-HC Team)
Paladins (HKLM\...\Steam App 444090) (Version: - Hi-Rez Studios)
PCSX2 - Playstation 2 Emulator (HKLM-x32\...\pcsx2-r5875) (Version: - )
PlaysTV (HKLM-x32\...\PlaysTV) (Version: 1.16.8-r118433-release - Plays.tv, LLC)
Realtek Ethernet Controller All-In-One Windows Driver (HKLM-x32\...\{F7E7F0CB-AA41-4D5A-B6F2-8E6738EB063F}) (Version: 1.12.0016 - Realtek)
SlimDrivers (HKLM-x32\...\{746AB259-6474-4111-8966-1C62F9A6E063}) (Version: 2.3.1 - SlimWare Utilities, Inc.)
Software de dispositivo do Chipset Intel® (x32 Version: 10.0.27 - Intel(R) Corporation) Hidden
Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)
TeamSpeak 3 Client (HKU\S-1-5-21-538130136-3038094476-3203312819-1000\...\TeamSpeak 3 Client) (Version: 3.0.19 - TeamSpeak Systems GmbH)
The Saboteur (HKLM-x32\...\{XXXXXXXX-XXXX-XXXX-XXXX-BLACKBOX0150}) (Version: 6.0 - Black Box)
WinRAR 5.30 beta 4 (64-bit) (HKLM\...\WinRAR archiver) (Version: 5.30.4 - win.rar GmbH)
WorldRAG Lite versão 9302 (HKLM-x32\...\{322AAB0F-0473-4A31-825A-8B98E95507ED}_is1) (Version: 9302 - WorldRAG)
==================== Exame Personalizado CLSID (Whitelisted): ==========================
(Se uma entrada for incluída na fixlist, será removida do Registro. O arquivo não será movido, a menos que seja colocado separadamente.)
CustomCLSID: HKU\S-1-5-21-538130136-3038094476-3203312819-1000_Classes\CLSID\{820D63D5-8CFF-46DE-86AF-4997DEDD6DB5}\localserver32 -> C:\Windows\system32\igfxEM.exe (Intel Corporation)
==================== Tarefas Agendadas (Whitelisted) =============
(Se uma entrada for incluída na fixlist, será removida do Registro. O arquivo não será movido, a menos que seja colocado separadamente.)
Task: {1B489B7E-9EE3-4C87-8970-3368D6E15EBA} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2016-08-15] (Google Inc.)
Task: {57A8539E-F19D-4E0F-8F22-2E90A2026DA6} - System32\Tasks\klcp_update => C:\Program Files (x86)\K-Lite Codec Pack\Tools\CodecTweakTool.exe [2016-08-15] ()
Task: {9434A0B1-6B26-4E32-8D7A-82A742DB27CA} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2016-11-09] (Adobe Systems Incorporated)
Task: {9CB3E459-5DE7-4BCE-981C-14E7FC1F7A31} - System32\Tasks\Adobe Flash Player PPAPI Notifier => C:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_23_0_0_207_pepper.exe [2016-11-09] (Adobe Systems Incorporated)
Task: {CF31BDD0-D32F-47DA-BFB5-3CCCBD81B22A} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2016-10-21] (Adobe Systems Incorporated)
Task: {DB7CF59E-87B7-4472-871C-7CF6C5D0D30A} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2016-11-15] (Piriform Ltd)
Task: {DBD5FB13-FA75-420B-B503-0D18A976890F} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2016-08-15] (Google Inc.)
(Se uma entrada for incluída na fixlist, o arquivo da tarefa (.job) será movido. O arquivo que está sendo executado pela tarefa não será movido.)
Task: C:\Windows\Tasks\Adobe Flash Player PPAPI Notifier.job => C:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_23_0_0_207_pepper.exe
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
==================== Atalhos =============================
(As entradas podem ser listadas para serem restauradas ou removidas.)
ShortcutWithArgument: C:\Users\Josef\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Aplicativos do Google Chrome\Área de trabalho remota do Google Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> --profile-directory=Default --app-id=gbchcmhmhahfdphkhkmpfmihenigjmpp
==================== Módulos Carregados (Whitelisted) ==============
2016-08-24 08:03 - 2016-11-16 23:31 - 10186832 _____ () C:\Program Files\Gramblr\gramblr.exe
2016-08-15 22:54 - 1999-12-31 21:00 - 01242584 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\ACE.dll
==================== Alternate Data Streams (Whitelisted) =========
(Se uma entrada for incluída na fixlist, somente o ADS será removido.)
==================== Modo de Segurança (Whitelisted) ===================
(Se uma entrada for incluída na fixlist, será removida do Registro. O valor "AlternateShell" será restaurado.)
==================== Associação (Whitelisted) ===============
(Se uma entrada for incluída na fixlist, o ítem no Registro será restaurado para o padrão ou removido.)
==================== Internet Explorer confiável/restrito ===============
(Se uma entrada for incluída na fixlist, será removida do Registro.)
==================== Hosts Conteúdo: ===============================
(Se necessário, a diretiva Hosts: pode ser incluída na fixlist para redefinir o Hosts.)
2009-07-13 23:34 - 2016-11-19 15:56 - 00000869 ____A C:\Windows\system32\Drivers\etc\hosts
127.0.0.1 skipittok.com
==================== Outras Áreas ============================
(Atualmente não há nenhuma correção automática para esta seção.)
HKU\S-1-5-21-538130136-3038094476-3203312819-1000\Control Panel\Desktop\\Wallpaper ->
DNS Servers: 168.194.12.30 - 168.194.12.34
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 0) (ConsentPromptBehaviorUser: 3) (EnableLUA: 0)
Firewall do Windows está habilitado.
==================== MSCONFIG/TASK MANAGER ítens desabilitados ==
MSCONFIG\startupreg: IAStorIcon => "C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIconLaunch.exe" "C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe" 60
==================== Regras do Firewall (Whitelisted) ===============
(Se uma entrada for incluída na fixlist, será removida do Registro. O arquivo não será movido, a menos que seja colocado separadamente.)
FirewallRules: [{FC062E43-791D-4C42-93A7-A4143AA67842}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{1048560E-57EA-43BB-A06C-9B62DF744A27}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{176AF5A5-1E83-4B03-AB46-F81CF25CB4E0}] => (Allow) C:\Users\Josef\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{BB4213AA-36CB-4B0F-B26C-CAFEBB3AC89C}] => (Allow) C:\Users\Josef\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{A3A62CB8-159C-4A2B-AD3B-FAB7FF83D151}] => (Allow) C:\Users\Josef\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{BA16C7FB-47F4-48BC-800D-F8D08D498D69}] => (Allow) C:\Users\Josef\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{2C75FC9E-4F13-4FAE-90C1-EAC331DE6AB2}] => (Allow) C:\Users\Josef\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{D4281C93-4527-45F3-AA7D-9488127367CB}] => (Allow) C:\Users\Josef\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{92903FD6-955F-4CC0-9A78-ADDFC5C80BC7}] => (Allow) C:\RIOT\lol.launcher.exe
FirewallRules: [{BF2E5525-9B5C-4645-94A9-880568D51D6F}] => (Allow) C:\RIOT\lol.launcher.exe
FirewallRules: [{B0FFB1C0-7AB9-4594-9CA5-12A052825C9A}] => (Allow) C:\RIOT\lol.launcher.exe
FirewallRules: [{774E8BD9-4070-4A2F-80BC-52E68948BCF3}] => (Allow) C:\RIOT\lol.launcher.exe
FirewallRules: [{90E22A8A-5F56-4F02-8BAD-BDD218C9AF42}] => (Allow) C:\RIOT\lol.launcher.admin.exe
FirewallRules: [{69E07A62-F471-4E19-93F4-BE7D1A2956B1}] => (Allow) C:\RIOT\lol.launcher.admin.exe
FirewallRules: [{67355B39-9F8A-4E7F-AA63-AEBEC9A47D92}] => (Allow) C:\RIOT\lol.launcher.admin.exe
FirewallRules: [{883565D1-B7D6-4B7C-865B-C1876D7F9A9E}] => (Allow) C:\RIOT\lol.launcher.admin.exe
FirewallRules: [{2DFDC8BB-8350-4118-9E8C-ADD26BFBD0BA}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Paladins\Binaries\Win32\HirezBridge.exe
FirewallRules: [{2A073414-0562-4EBF-877A-B20366B2BB20}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Paladins\Binaries\Win32\HirezBridge.exe
FirewallRules: [TCP Query User{AE3C6BB6-FB37-4931-A291-E27951A0D844}C:\program files (x86)\steam\steamapps\common\paladins\binaries\win32\paladins.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\paladins\binaries\win32\paladins.exe
FirewallRules: [UDP Query User{CE18C433-2AAB-4B59-8126-E71C19D7B7CB}C:\program files (x86)\steam\steamapps\common\paladins\binaries\win32\paladins.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\paladins\binaries\win32\paladins.exe
FirewallRules: [{169221C2-4902-42E9-99B8-80271A0063D9}] => (Allow) C:\Program Files (x86)\Google\Chrome Remote Desktop\55.0.2883.17\remoting_host.exe
FirewallRules: [{4BE9B4C9-4145-46BF-95E0-CA457DB6734B}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
FirewallRules: [{45F5E0E0-B534-4C22-A740-56823C0332EF}] => (Allow) C:\Users\Josef\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{F370BCA4-9411-4034-8CE2-B5C377729F89}] => (Allow) C:\Users\Josef\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{0B52CE4A-A364-4B31-9ADE-6FD967A90377}] => (Allow) C:\Program Files (x86)\Raptr Inc\PlaysTV\playstv.exe
FirewallRules: [{2FA79D14-AB37-42AE-A564-B919BD8BE2EA}] => (Allow) C:\Program Files (x86)\Raptr Inc\PlaysTV\playstv.exe
==================== Pontos de Restauração =========================
20-11-2016 17:02:59 Windows Update
20-11-2016 18:49:02 Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.24212
20-11-2016 18:50:09 Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.23506
20-11-2016 19:32:22 Microsoft Visual C++ 2015 Redistributable (x64) - 14.0.23918
20-11-2016 19:37:49 Windows Update
20-11-2016 20:46:13 Microsoft Visual C++ 2015 Redistributable (x64) - 14.0.23918
==================== Dispositivos Apresentando Falhas No Gerenciador =============
Name: TCP/IP Registry Compatibility
Description: TCP/IP Registry Compatibility
Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1}
Manufacturer:
Service: tcpipreg
Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)
Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.
Devices stay in this state if they have been prepared for removal.
After you remove the device, this error disappears.Remove the device, and this error should be resolved.
==================== Erros no Log de eventos: =========================
Erros em Aplicativos:
==================
Error: (11/20/2016 08:46:23 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: Falha dos Serviços de Criptografia ao processar a chamada de OnIdentity() no Objeto de Gravador do Sistema..
Details:
AddCoreCsiFiles : GetNextFileMapContent() failed.
System Error:
Parâmetro incorreto.
.
Error: (11/20/2016 08:46:15 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected.
Error: (11/20/2016 08:46:09 PM) (Source: Software Protection Platform Service) (EventID: 8211) (User: )
Description: Falha ao atualizar tokens de licença e chave do produto (Product Key) do Windows com 0x80049F02.
C:\Windows\system32\spp\tokens\skus\security-spp-component-sku-ultimate\security-spp-component-sku-ultimate-oem-slp-ul.xrm-ms
Error: (11/20/2016 08:38:46 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected.
Error: (11/20/2016 08:37:46 PM) (Source: Software Protection Platform Service) (EventID: 8211) (User: )
Description: Falha ao atualizar tokens de licença e chave do produto (Product Key) do Windows com 0x80049F02.
C:\Windows\system32\spp\tokens\skus\security-spp-component-sku-ultimate\security-spp-component-sku-ultimate-oem-slp-ul.xrm-ms
Error: (11/20/2016 07:43:29 PM) (Source: Software Protection Platform Service) (EventID: 1017) (User: )
Description: Falha na instalação do Comprovante da Compra. 0xC004F015
Pkey Parcial=3MBMV
ACID=ac96e1a8-6cc4-4310-a4ff-332ce77fb5b8
Erro Detalhado[?]
Error: (11/20/2016 07:42:40 PM) (Source: Software Protection Platform Service) (EventID: 1017) (User: )
Description: Falha na instalação do Comprovante da Compra. 0xC004F015
Pkey Parcial=3MBMV
ACID=ac96e1a8-6cc4-4310-a4ff-332ce77fb5b8
Erro Detalhado[?]
Error: (11/20/2016 07:37:49 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: Falha dos Serviços de Criptografia ao processar a chamada de OnIdentity() no Objeto de Gravador do Sistema..
Details:
AddCoreCsiFiles : GetNextFileMapContent() failed.
System Error:
Parâmetro incorreto.
.
Error: (11/20/2016 07:37:49 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: Falha dos Serviços de Criptografia ao processar a chamada de OnIdentity() no Objeto de Gravador do Sistema..
Details:
AddCoreCsiFiles : GetNextFileMapContent() failed.
System Error:
Parâmetro incorreto.
.
Error: (11/20/2016 07:32:31 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: Falha dos Serviços de Criptografia ao processar a chamada de OnIdentity() no Objeto de Gravador do Sistema..
Details:
AddCoreCsiFiles : GetNextFileMapContent() failed.
System Error:
Parâmetro incorreto.
.
Erros de Sistema:
=============
Error: (11/20/2016 08:50:45 PM) (Source: Disk) (EventID: 7) (User: )
Description: O dispositivo, \Device\Harddisk0\DR0, possui um bloco defeituoso.
Error: (11/20/2016 08:49:37 PM) (Source: Disk) (EventID: 7) (User: )
Description: O dispositivo, \Device\Harddisk0\DR0, possui um bloco defeituoso.
Error: (11/20/2016 08:47:12 PM) (Source: Disk) (EventID: 7) (User: )
Description: O dispositivo, \Device\Harddisk0\DR0, possui um bloco defeituoso.
Error: (11/20/2016 08:46:49 PM) (Source: Disk) (EventID: 7) (User: )
Description: O dispositivo, \Device\Harddisk0\DR0, possui um bloco defeituoso.
Error: (11/20/2016 08:44:55 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Não foi possível iniciar o serviço TCP/IP Registry Compatibility devido ao seguinte erro:
O Windows não pode verificar a assinatura digital deste arquivo. Talvez uma alteração recente de hardware ou software tenha instalado um arquivo com uma assinatura incorreta ou danificado, ou talvez o arquivo seja um software mal-intencionado de origem desconhecida.
Error: (11/20/2016 08:44:46 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Não foi possível iniciar o serviço Baidu Spark Service devido ao seguinte erro:
O sistema não pode encontrar o arquivo especificado.
Error: (11/20/2016 08:37:33 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Não foi possível iniciar o serviço TCP/IP Registry Compatibility devido ao seguinte erro:
O Windows não pode verificar a assinatura digital deste arquivo. Talvez uma alteração recente de hardware ou software tenha instalado um arquivo com uma assinatura incorreta ou danificado, ou talvez o arquivo seja um software mal-intencionado de origem desconhecida.
Error: (11/20/2016 08:37:28 PM) (Source: Ntfs) (EventID: 55) (User: )
Description: A estrutura do sistema de arquivos está corrompida e inutilizável.
Execute o utilitário chkdsk no volume Games.
Error: (11/20/2016 08:37:28 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Não foi possível iniciar o serviço Baidu Spark Service devido ao seguinte erro:
O sistema não pode encontrar o arquivo especificado.
Error: (11/20/2016 08:37:13 PM) (Source: EventLog) (EventID: 6008) (User: )
Description: O desligamento anterior do sistema em 20:11:04 às 20/11/2016 não era esperado.
CodeIntegrity:
===================================
Date: 2016-11-20 20:44:55.091
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\System32\drivers\tcpipreg.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2016-11-20 20:44:55.060
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\System32\drivers\tcpipreg.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2016-11-20 20:37:33.957
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\System32\drivers\tcpipreg.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2016-11-20 20:37:33.926
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\System32\drivers\tcpipreg.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2016-11-20 17:06:34.024
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\System32\drivers\tcpipreg.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2016-11-20 17:06:33.993
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\System32\drivers\tcpipreg.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2016-11-20 16:50:08.147
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\System32\drivers\tcpipreg.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2016-11-20 16:50:08.116
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\System32\drivers\tcpipreg.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2016-11-20 04:50:43.377
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\System32\drivers\tcpipreg.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2016-11-20 04:50:43.346
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\System32\drivers\tcpipreg.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
==================== Informações da Memória ===========================
Processador: Intel(R) Pentium(R) CPU G2030 @ 3.00GHz
Percentagem de memória em uso: 67%
RAM física total: 3543.84 MB
RAM física disponível: 1163 MB
Virtual Total: 7085.87 MB
Virtual disponível: 4813.28 MB
==================== Drives ================================
Drive c: (Games) (Fixed) (Total:149.05 GB) (Free:48.98 GB) NTFS ==>[drive com componentes de inicialização (obtido através de BCD)]
Drive d: (JOSEF-MUSIC) (Removable) (Total:3.73 GB) (Free:0.04 GB) FAT32
Drive e: (XPRESS) (Removable) (Total:14.98 GB) (Free:8.23 GB) FAT32
Drive f: (JOSEPH KPFS) (Removable) (Total:3.74 GB) (Free:3.34 GB) FAT32
==================== MBR & Tabela de Partições ==================
========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 149.1 GB) (Disk ID: 00041EF7)
Partition 1: (Not Active) - (Size=993 KB) - (Type=42)
Partition 2: (Active) - (Size=149 GB) - (Type=42)
Partition 3: (Not Active) - (Size=856 KB) - (Type=42)
========================================================
Disk: 1 (Size: 3.7 GB) (Disk ID: 04030201)
Partition 1: (Not Active) - (Size=3.7 GB) - (Type=0B)
========================================================
Disk: 2 (Size: 3.7 GB) (Disk ID: 00000000)
Partition: GPT.
========================================================
Disk: 3 (Size: 15 GB) (Disk ID: 5586AEDC)
Partition 1: (Not Active) - (Size=15 GB) - (Type=0C)
==================== Fim de Addition.txt ============================
Executado por Josef (20-11-2016 20:52:50)
Executando a partir de C:\Users\Josef\Desktop
Windows 7 Ultimate Service Pack 1 (X64) (2016-08-16 01:00:48)
Modo da Inicialização: Normal
==========================================================
==================== Contas: =============================
Administrador (S-1-5-21-538130136-3038094476-3203312819-500 - Administrator - Disabled)
Convidado (S-1-5-21-538130136-3038094476-3203312819-501 - Limited - Disabled)
Josef (S-1-5-21-538130136-3038094476-3203312819-1000 - Administrator - Enabled) => C:\Users\Josef
==================== Central de Segurança ========================
(Se uma entrada for incluída na fixlist, será removida.)
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
==================== Programas Instalados ======================
(Somente os programas adwares com a indicação "Oculto" podem ser adicionados à fixlist para desocultá-los. Os programas adwares devem ser desinstalados manualmente.)
µTorrent (HKU\S-1-5-21-538130136-3038094476-3203312819-1000\...\uTorrent) (Version: 3.4.9.42606 - BitTorrent Inc.)
Adobe Acrobat Reader DC - Português (HKLM-x32\...\{AC76BA86-7AD7-1046-7B44-AC0F074E4100}) (Version: 15.020.20042 - Adobe Systems Incorporated)
Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 22.0.0.153 - Adobe Systems Incorporated)
Adobe Flash Player 23 PPAPI (HKLM-x32\...\Adobe Flash Player PPAPI) (Version: 23.0.0.207 - Adobe Systems Incorporated)
CCleaner (HKLM\...\CCleaner) (Version: 5.24 - Piriform)
Chrome Remote Desktop Host (HKLM-x32\...\{D669DC52-B1A4-4933-878D-CB80F660D95D}) (Version: 55.0.2883.17 - Google Inc.)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 54.0.2840.99 - Google Inc.)
Google Update Helper (x32 Version: 1.3.31.5 - Google Inc.) Hidden
Gramblr (HKLM\...\Gramblr) (Version: 2.8.0 - Gramblr Team)
HiPatch (HKLM-x32\...\{3C87E0FF-BC0A-4F5E-951B-68DC3F8DF000}) (Version: 5.0.6.4 - Hi-Rez Studios)
Hi-Rez Studios Authenticate and Update Service (HKLM-x32\...\{3C87E0FF-BC0A-4F5E-951B-68DC3F8DF1FC}) (Version: 3.0.0.0 - Hi-Rez Studios)
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 9.5.23.1766 - Intel Corporation)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 10.18.10.4358 - Intel Corporation)
Intel(R) Rapid Storage Technology (HKLM\...\{409CB30E-E457-4008-9B1A-ED1B9EA21140}) (Version: 12.9.0.1001 - Intel Corporation)
K-Lite Codec Pack 12.3.5 Basic (HKLM-x32\...\KLiteCodecPack_is1) (Version: 12.3.5 - KLCP)
Lightshot-5.4.0.1 (HKLM-x32\...\{30A5B3C9-2084-4063-A32A-628A98DE512B}_is1) (Version: 5.4.0.1 - Skillbrains)
Microsoft .NET Framework 4.6.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.6.01055 - Microsoft Corporation)
Microsoft .NET Framework 4.6.1 (Português do Brasil) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1046) (Version: 4.6.01055 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x64) - 14.0.23918 (HKLM-x32\...\{dab68466-3a7d-41a8-a5cf-415e3ff8ef71}) (Version: 14.0.23918.0 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.24212 (HKLM-x32\...\{462f63a8-6347-4894-a1b3-dbfe3a4c981d}) (Version: 14.0.24212.0 - Microsoft Corporation)
MPC-HC 1.7.10 (64-bit) (HKLM\...\{2ACBF1FA-F5C3-4B19-A774-B22A31F231B9}_is1) (Version: 1.7.10 - MPC-HC Team)
Paladins (HKLM\...\Steam App 444090) (Version: - Hi-Rez Studios)
PCSX2 - Playstation 2 Emulator (HKLM-x32\...\pcsx2-r5875) (Version: - )
PlaysTV (HKLM-x32\...\PlaysTV) (Version: 1.16.8-r118433-release - Plays.tv, LLC)
Realtek Ethernet Controller All-In-One Windows Driver (HKLM-x32\...\{F7E7F0CB-AA41-4D5A-B6F2-8E6738EB063F}) (Version: 1.12.0016 - Realtek)
SlimDrivers (HKLM-x32\...\{746AB259-6474-4111-8966-1C62F9A6E063}) (Version: 2.3.1 - SlimWare Utilities, Inc.)
Software de dispositivo do Chipset Intel® (x32 Version: 10.0.27 - Intel(R) Corporation) Hidden
Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)
TeamSpeak 3 Client (HKU\S-1-5-21-538130136-3038094476-3203312819-1000\...\TeamSpeak 3 Client) (Version: 3.0.19 - TeamSpeak Systems GmbH)
The Saboteur (HKLM-x32\...\{XXXXXXXX-XXXX-XXXX-XXXX-BLACKBOX0150}) (Version: 6.0 - Black Box)
WinRAR 5.30 beta 4 (64-bit) (HKLM\...\WinRAR archiver) (Version: 5.30.4 - win.rar GmbH)
WorldRAG Lite versão 9302 (HKLM-x32\...\{322AAB0F-0473-4A31-825A-8B98E95507ED}_is1) (Version: 9302 - WorldRAG)
==================== Exame Personalizado CLSID (Whitelisted): ==========================
(Se uma entrada for incluída na fixlist, será removida do Registro. O arquivo não será movido, a menos que seja colocado separadamente.)
CustomCLSID: HKU\S-1-5-21-538130136-3038094476-3203312819-1000_Classes\CLSID\{820D63D5-8CFF-46DE-86AF-4997DEDD6DB5}\localserver32 -> C:\Windows\system32\igfxEM.exe (Intel Corporation)
==================== Tarefas Agendadas (Whitelisted) =============
(Se uma entrada for incluída na fixlist, será removida do Registro. O arquivo não será movido, a menos que seja colocado separadamente.)
Task: {1B489B7E-9EE3-4C87-8970-3368D6E15EBA} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2016-08-15] (Google Inc.)
Task: {57A8539E-F19D-4E0F-8F22-2E90A2026DA6} - System32\Tasks\klcp_update => C:\Program Files (x86)\K-Lite Codec Pack\Tools\CodecTweakTool.exe [2016-08-15] ()
Task: {9434A0B1-6B26-4E32-8D7A-82A742DB27CA} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2016-11-09] (Adobe Systems Incorporated)
Task: {9CB3E459-5DE7-4BCE-981C-14E7FC1F7A31} - System32\Tasks\Adobe Flash Player PPAPI Notifier => C:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_23_0_0_207_pepper.exe [2016-11-09] (Adobe Systems Incorporated)
Task: {CF31BDD0-D32F-47DA-BFB5-3CCCBD81B22A} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2016-10-21] (Adobe Systems Incorporated)
Task: {DB7CF59E-87B7-4472-871C-7CF6C5D0D30A} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2016-11-15] (Piriform Ltd)
Task: {DBD5FB13-FA75-420B-B503-0D18A976890F} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2016-08-15] (Google Inc.)
(Se uma entrada for incluída na fixlist, o arquivo da tarefa (.job) será movido. O arquivo que está sendo executado pela tarefa não será movido.)
Task: C:\Windows\Tasks\Adobe Flash Player PPAPI Notifier.job => C:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_23_0_0_207_pepper.exe
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
==================== Atalhos =============================
(As entradas podem ser listadas para serem restauradas ou removidas.)
ShortcutWithArgument: C:\Users\Josef\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Aplicativos do Google Chrome\Área de trabalho remota do Google Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> --profile-directory=Default --app-id=gbchcmhmhahfdphkhkmpfmihenigjmpp
==================== Módulos Carregados (Whitelisted) ==============
2016-08-24 08:03 - 2016-11-16 23:31 - 10186832 _____ () C:\Program Files\Gramblr\gramblr.exe
2016-08-15 22:54 - 1999-12-31 21:00 - 01242584 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\ACE.dll
==================== Alternate Data Streams (Whitelisted) =========
(Se uma entrada for incluída na fixlist, somente o ADS será removido.)
==================== Modo de Segurança (Whitelisted) ===================
(Se uma entrada for incluída na fixlist, será removida do Registro. O valor "AlternateShell" será restaurado.)
==================== Associação (Whitelisted) ===============
(Se uma entrada for incluída na fixlist, o ítem no Registro será restaurado para o padrão ou removido.)
==================== Internet Explorer confiável/restrito ===============
(Se uma entrada for incluída na fixlist, será removida do Registro.)
==================== Hosts Conteúdo: ===============================
(Se necessário, a diretiva Hosts: pode ser incluída na fixlist para redefinir o Hosts.)
2009-07-13 23:34 - 2016-11-19 15:56 - 00000869 ____A C:\Windows\system32\Drivers\etc\hosts
127.0.0.1 skipittok.com
==================== Outras Áreas ============================
(Atualmente não há nenhuma correção automática para esta seção.)
HKU\S-1-5-21-538130136-3038094476-3203312819-1000\Control Panel\Desktop\\Wallpaper ->
DNS Servers: 168.194.12.30 - 168.194.12.34
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 0) (ConsentPromptBehaviorUser: 3) (EnableLUA: 0)
Firewall do Windows está habilitado.
==================== MSCONFIG/TASK MANAGER ítens desabilitados ==
MSCONFIG\startupreg: IAStorIcon => "C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIconLaunch.exe" "C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe" 60
==================== Regras do Firewall (Whitelisted) ===============
(Se uma entrada for incluída na fixlist, será removida do Registro. O arquivo não será movido, a menos que seja colocado separadamente.)
FirewallRules: [{FC062E43-791D-4C42-93A7-A4143AA67842}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{1048560E-57EA-43BB-A06C-9B62DF744A27}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{176AF5A5-1E83-4B03-AB46-F81CF25CB4E0}] => (Allow) C:\Users\Josef\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{BB4213AA-36CB-4B0F-B26C-CAFEBB3AC89C}] => (Allow) C:\Users\Josef\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{A3A62CB8-159C-4A2B-AD3B-FAB7FF83D151}] => (Allow) C:\Users\Josef\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{BA16C7FB-47F4-48BC-800D-F8D08D498D69}] => (Allow) C:\Users\Josef\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{2C75FC9E-4F13-4FAE-90C1-EAC331DE6AB2}] => (Allow) C:\Users\Josef\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{D4281C93-4527-45F3-AA7D-9488127367CB}] => (Allow) C:\Users\Josef\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{92903FD6-955F-4CC0-9A78-ADDFC5C80BC7}] => (Allow) C:\RIOT\lol.launcher.exe
FirewallRules: [{BF2E5525-9B5C-4645-94A9-880568D51D6F}] => (Allow) C:\RIOT\lol.launcher.exe
FirewallRules: [{B0FFB1C0-7AB9-4594-9CA5-12A052825C9A}] => (Allow) C:\RIOT\lol.launcher.exe
FirewallRules: [{774E8BD9-4070-4A2F-80BC-52E68948BCF3}] => (Allow) C:\RIOT\lol.launcher.exe
FirewallRules: [{90E22A8A-5F56-4F02-8BAD-BDD218C9AF42}] => (Allow) C:\RIOT\lol.launcher.admin.exe
FirewallRules: [{69E07A62-F471-4E19-93F4-BE7D1A2956B1}] => (Allow) C:\RIOT\lol.launcher.admin.exe
FirewallRules: [{67355B39-9F8A-4E7F-AA63-AEBEC9A47D92}] => (Allow) C:\RIOT\lol.launcher.admin.exe
FirewallRules: [{883565D1-B7D6-4B7C-865B-C1876D7F9A9E}] => (Allow) C:\RIOT\lol.launcher.admin.exe
FirewallRules: [{2DFDC8BB-8350-4118-9E8C-ADD26BFBD0BA}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Paladins\Binaries\Win32\HirezBridge.exe
FirewallRules: [{2A073414-0562-4EBF-877A-B20366B2BB20}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Paladins\Binaries\Win32\HirezBridge.exe
FirewallRules: [TCP Query User{AE3C6BB6-FB37-4931-A291-E27951A0D844}C:\program files (x86)\steam\steamapps\common\paladins\binaries\win32\paladins.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\paladins\binaries\win32\paladins.exe
FirewallRules: [UDP Query User{CE18C433-2AAB-4B59-8126-E71C19D7B7CB}C:\program files (x86)\steam\steamapps\common\paladins\binaries\win32\paladins.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\paladins\binaries\win32\paladins.exe
FirewallRules: [{169221C2-4902-42E9-99B8-80271A0063D9}] => (Allow) C:\Program Files (x86)\Google\Chrome Remote Desktop\55.0.2883.17\remoting_host.exe
FirewallRules: [{4BE9B4C9-4145-46BF-95E0-CA457DB6734B}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
FirewallRules: [{45F5E0E0-B534-4C22-A740-56823C0332EF}] => (Allow) C:\Users\Josef\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{F370BCA4-9411-4034-8CE2-B5C377729F89}] => (Allow) C:\Users\Josef\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{0B52CE4A-A364-4B31-9ADE-6FD967A90377}] => (Allow) C:\Program Files (x86)\Raptr Inc\PlaysTV\playstv.exe
FirewallRules: [{2FA79D14-AB37-42AE-A564-B919BD8BE2EA}] => (Allow) C:\Program Files (x86)\Raptr Inc\PlaysTV\playstv.exe
==================== Pontos de Restauração =========================
20-11-2016 17:02:59 Windows Update
20-11-2016 18:49:02 Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.24212
20-11-2016 18:50:09 Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.23506
20-11-2016 19:32:22 Microsoft Visual C++ 2015 Redistributable (x64) - 14.0.23918
20-11-2016 19:37:49 Windows Update
20-11-2016 20:46:13 Microsoft Visual C++ 2015 Redistributable (x64) - 14.0.23918
==================== Dispositivos Apresentando Falhas No Gerenciador =============
Name: TCP/IP Registry Compatibility
Description: TCP/IP Registry Compatibility
Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1}
Manufacturer:
Service: tcpipreg
Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)
Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.
Devices stay in this state if they have been prepared for removal.
After you remove the device, this error disappears.Remove the device, and this error should be resolved.
==================== Erros no Log de eventos: =========================
Erros em Aplicativos:
==================
Error: (11/20/2016 08:46:23 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: Falha dos Serviços de Criptografia ao processar a chamada de OnIdentity() no Objeto de Gravador do Sistema..
Details:
AddCoreCsiFiles : GetNextFileMapContent() failed.
System Error:
Parâmetro incorreto.
.
Error: (11/20/2016 08:46:15 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected.
Error: (11/20/2016 08:46:09 PM) (Source: Software Protection Platform Service) (EventID: 8211) (User: )
Description: Falha ao atualizar tokens de licença e chave do produto (Product Key) do Windows com 0x80049F02.
C:\Windows\system32\spp\tokens\skus\security-spp-component-sku-ultimate\security-spp-component-sku-ultimate-oem-slp-ul.xrm-ms
Error: (11/20/2016 08:38:46 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected.
Error: (11/20/2016 08:37:46 PM) (Source: Software Protection Platform Service) (EventID: 8211) (User: )
Description: Falha ao atualizar tokens de licença e chave do produto (Product Key) do Windows com 0x80049F02.
C:\Windows\system32\spp\tokens\skus\security-spp-component-sku-ultimate\security-spp-component-sku-ultimate-oem-slp-ul.xrm-ms
Error: (11/20/2016 07:43:29 PM) (Source: Software Protection Platform Service) (EventID: 1017) (User: )
Description: Falha na instalação do Comprovante da Compra. 0xC004F015
Pkey Parcial=3MBMV
ACID=ac96e1a8-6cc4-4310-a4ff-332ce77fb5b8
Erro Detalhado[?]
Error: (11/20/2016 07:42:40 PM) (Source: Software Protection Platform Service) (EventID: 1017) (User: )
Description: Falha na instalação do Comprovante da Compra. 0xC004F015
Pkey Parcial=3MBMV
ACID=ac96e1a8-6cc4-4310-a4ff-332ce77fb5b8
Erro Detalhado[?]
Error: (11/20/2016 07:37:49 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: Falha dos Serviços de Criptografia ao processar a chamada de OnIdentity() no Objeto de Gravador do Sistema..
Details:
AddCoreCsiFiles : GetNextFileMapContent() failed.
System Error:
Parâmetro incorreto.
.
Error: (11/20/2016 07:37:49 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: Falha dos Serviços de Criptografia ao processar a chamada de OnIdentity() no Objeto de Gravador do Sistema..
Details:
AddCoreCsiFiles : GetNextFileMapContent() failed.
System Error:
Parâmetro incorreto.
.
Error: (11/20/2016 07:32:31 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: Falha dos Serviços de Criptografia ao processar a chamada de OnIdentity() no Objeto de Gravador do Sistema..
Details:
AddCoreCsiFiles : GetNextFileMapContent() failed.
System Error:
Parâmetro incorreto.
.
Erros de Sistema:
=============
Error: (11/20/2016 08:50:45 PM) (Source: Disk) (EventID: 7) (User: )
Description: O dispositivo, \Device\Harddisk0\DR0, possui um bloco defeituoso.
Error: (11/20/2016 08:49:37 PM) (Source: Disk) (EventID: 7) (User: )
Description: O dispositivo, \Device\Harddisk0\DR0, possui um bloco defeituoso.
Error: (11/20/2016 08:47:12 PM) (Source: Disk) (EventID: 7) (User: )
Description: O dispositivo, \Device\Harddisk0\DR0, possui um bloco defeituoso.
Error: (11/20/2016 08:46:49 PM) (Source: Disk) (EventID: 7) (User: )
Description: O dispositivo, \Device\Harddisk0\DR0, possui um bloco defeituoso.
Error: (11/20/2016 08:44:55 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Não foi possível iniciar o serviço TCP/IP Registry Compatibility devido ao seguinte erro:
O Windows não pode verificar a assinatura digital deste arquivo. Talvez uma alteração recente de hardware ou software tenha instalado um arquivo com uma assinatura incorreta ou danificado, ou talvez o arquivo seja um software mal-intencionado de origem desconhecida.
Error: (11/20/2016 08:44:46 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Não foi possível iniciar o serviço Baidu Spark Service devido ao seguinte erro:
O sistema não pode encontrar o arquivo especificado.
Error: (11/20/2016 08:37:33 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Não foi possível iniciar o serviço TCP/IP Registry Compatibility devido ao seguinte erro:
O Windows não pode verificar a assinatura digital deste arquivo. Talvez uma alteração recente de hardware ou software tenha instalado um arquivo com uma assinatura incorreta ou danificado, ou talvez o arquivo seja um software mal-intencionado de origem desconhecida.
Error: (11/20/2016 08:37:28 PM) (Source: Ntfs) (EventID: 55) (User: )
Description: A estrutura do sistema de arquivos está corrompida e inutilizável.
Execute o utilitário chkdsk no volume Games.
Error: (11/20/2016 08:37:28 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Não foi possível iniciar o serviço Baidu Spark Service devido ao seguinte erro:
O sistema não pode encontrar o arquivo especificado.
Error: (11/20/2016 08:37:13 PM) (Source: EventLog) (EventID: 6008) (User: )
Description: O desligamento anterior do sistema em 20:11:04 às 20/11/2016 não era esperado.
CodeIntegrity:
===================================
Date: 2016-11-20 20:44:55.091
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\System32\drivers\tcpipreg.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2016-11-20 20:44:55.060
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\System32\drivers\tcpipreg.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2016-11-20 20:37:33.957
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\System32\drivers\tcpipreg.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2016-11-20 20:37:33.926
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\System32\drivers\tcpipreg.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2016-11-20 17:06:34.024
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\System32\drivers\tcpipreg.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2016-11-20 17:06:33.993
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\System32\drivers\tcpipreg.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2016-11-20 16:50:08.147
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\System32\drivers\tcpipreg.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2016-11-20 16:50:08.116
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\System32\drivers\tcpipreg.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2016-11-20 04:50:43.377
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\System32\drivers\tcpipreg.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2016-11-20 04:50:43.346
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\System32\drivers\tcpipreg.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
==================== Informações da Memória ===========================
Processador: Intel(R) Pentium(R) CPU G2030 @ 3.00GHz
Percentagem de memória em uso: 67%
RAM física total: 3543.84 MB
RAM física disponível: 1163 MB
Virtual Total: 7085.87 MB
Virtual disponível: 4813.28 MB
==================== Drives ================================
Drive c: (Games) (Fixed) (Total:149.05 GB) (Free:48.98 GB) NTFS ==>[drive com componentes de inicialização (obtido através de BCD)]
Drive d: (JOSEF-MUSIC) (Removable) (Total:3.73 GB) (Free:0.04 GB) FAT32
Drive e: (XPRESS) (Removable) (Total:14.98 GB) (Free:8.23 GB) FAT32
Drive f: (JOSEPH KPFS) (Removable) (Total:3.74 GB) (Free:3.34 GB) FAT32
==================== MBR & Tabela de Partições ==================
========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 149.1 GB) (Disk ID: 00041EF7)
Partition 1: (Not Active) - (Size=993 KB) - (Type=42)
Partition 2: (Active) - (Size=149 GB) - (Type=42)
Partition 3: (Not Active) - (Size=856 KB) - (Type=42)
========================================================
Disk: 1 (Size: 3.7 GB) (Disk ID: 04030201)
Partition 1: (Not Active) - (Size=3.7 GB) - (Type=0B)
========================================================
Disk: 2 (Size: 3.7 GB) (Disk ID: 00000000)
Partition: GPT.
========================================================
Disk: 3 (Size: 15 GB) (Disk ID: 5586AEDC)
Partition 1: (Not Active) - (Size=15 GB) - (Type=0C)
==================== Fim de Addition.txt ============================