Publicité
Publicité
Format du document : text/plain
Prévisualisation
Resultado do exame Adicional Farbar Recovery Scan Tool (x64) Versão: 05-03-2017
Executado por Poison (08-03-2017 03:12:27)
Executando a partir de C:\Users\Poison\Desktop
Windows 7 Ultimate (X64) (2017-02-08 06:19:58)
Modo da Inicialização: Normal
==========================================================
==================== Contas: =============================
Administrador (S-1-5-21-2765353742-2246920163-2559587968-500 - Administrator - Disabled)
Convidado (S-1-5-21-2765353742-2246920163-2559587968-501 - Limited - Disabled)
Poison (S-1-5-21-2765353742-2246920163-2559587968-1000 - Administrator - Enabled) => C:\Users\Poison
==================== Central de Segurança ========================
(Se uma entrada for incluída na fixlist, será removida.)
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
==================== Programas Instalados ======================
(Somente os programas adwares com a indicação "Oculto" podem ser adicionados à fixlist para desocultá-los. Os programas adwares devem ser desinstalados manualmente.)
.NET Reactor (HKLM-x32\...\.NET Reactor) (Version: 5.0.0.0 - Eziriz)
.NET Reactor (x32 Version: 5.0.0.0 - Eziriz) Hidden
Adobe Flash Player 24 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 24.0.0.221 - Adobe Systems Incorporated)
Adobe Flash Player 24 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 24.0.0.221 - Adobe Systems Incorporated)
Adobe Flash Player 24 PPAPI (HKLM-x32\...\Adobe Flash Player PPAPI) (Version: 24.0.0.221 - Adobe Systems Incorporated)
Adobe Shockwave Player 12.0 (HKLM-x32\...\{AA3B06B1-E89A-43C6-A26B-7109DB4BEE7B}) (Version: 12.0.7.148 - Adobe Systems, Inc)
Advanced RAR Repair v1.2 (HKLM-x32\...\Advanced RAR Repair v1.2) (Version: - )
Advanced ScreenSnapshotTool 1.1.0.11414 (HKLM\...\{61FFE1F9-137D-4c31-A181-3415FCAA5946}) (Version: 1.1.0.11414 - ShenZhen Enode Techology co,.Ltd) <==== ATENÇÃO
Allgemeine Runtime Files (x86) (HKLM\...\{1F6D1DB5-82B5-41A4-85A2-0A382C142A35}_is1) (Version: 1.0.3.7 - Sereby Corporation)
Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)
ASPack 2.29 (HKLM-x32\...\ASPack_is1) (Version: - )
Atualizações da NVIDIA 2.11.4.0 (Version: 2.11.4.0 - NVIDIA Corporation) Hidden
Avast Free Antivirus (HKLM-x32\...\Avast Antivirus) (Version: 17.1.2286 - AVAST Software)
BlackShot (HKLM-x32\...\BlackShot) (Version: - )
BlackShot: Mercenary Warfare FPS (HKLM\...\Steam App 433350) (Version: - Vertigo Games America)
BlackShot_SEA (HKLM-x32\...\BlackShot_SEA) (Version: - )
Borland Delphi 7 (HKLM-x32\...\{72263053-50D1-4598-9502-51ED64E54C51}) (Version: 7.0 - Borland Software Corporation)
Camtasia Studio 8 (HKLM-x32\...\{A2A41B60-D51F-4C04-BC94-B4C94F7B6DC0}) (Version: 8.6.0.2054 - TechSmith Corporation)
Cheat Engine 6.6 (HKLM-x32\...\Cheat Engine 6.6_is1) (Version: - Cheat Engine)
Coringa-RAT versão 0.3 (HKLM-x32\...\{89E5D8EA-0DE8-4EB9-B475-9086E9925643}_is1) (Version: 0.3 - Hacking.SooftT, Inc.)
CryptoPrevent (HKLM-x32\...\{5C5B24E7-4694-4049-A222-CCE7D3FAC63F}_is1) (Version: 8.0.3.1 - Foolish IT LLC)
Dell Unified Wireless Suite (HKLM-x32\...\{6CFE6F33-3D69-4B9C-AA20-FF1F8CB064D5}) (Version: 1.00.0000 - Dell)
DJ Intro version 1.2.8 (HKLM-x32\...\{36625871-9D4B-4046-A837-677974F51CAC}_is1) (Version: 1.2.8 - Serato Audio Research)
DuckDns version 1.0.5 (HKLM-x32\...\{72C90F4B-DDFB-410B-8761-9769CCF481AA}}_is1) (Version: 1.0.5 - ETX Software Inc.)
Entity Framework Designer for Visual Studio 2012 - enu (HKLM-x32\...\{32136776-FE3F-453D-80DA-CDD993BDB2A3}) (Version: 11.1.20810.00 - Microsoft Corporation)
FormatFactory 3.6.0.0 (HKLM-x32\...\FormatFactory) (Version: 3.6.0.0 - Format Factory)
GOM Player (HKLM-x32\...\GOM Player) (Version: 2.3.12.5268 - Gretech Corporation)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 56.0.2924.87 - Google Inc.)
Google Update Helper (x32 Version: 1.3.21.123 - Google Inc.) Hidden
Google Update Helper (x32 Version: 1.3.32.7 - Google Inc.) Hidden
Hex Workshop v6.8 (HKLM\...\{A36AC685-4435-4C16-861F-221231DE165D}) (Version: 6.8.0.5419 - BreakPoint Software)
IDA Pro Free v5.0 (HKLM-x32\...\IDA Pro Free_is1) (Version: - Hex-Rays SA)
IDCGames Launcher (HKLM-x32\...\{189BD0E3-FA9A-4280-8204-7F54913CFCFA}_is1) (Version: 0.0.0 - IDC Games)
Intel(R) Management Engine Components (HKLM\...\{1CEAC85D-2590-4760-800F-8DE5E91F3700}) (Version: 11.0.0.1173 - Intel Corporation)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 10.18.10.4358 - Intel Corporation)
Intel(R) Rapid Storage Technology (HKLM\...\{409CB30E-E457-4008-9B1A-ED1B9EA21140}) (Version: 12.9.0.1001 - Intel Corporation)
Java 7 Update 51 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86417051FF}) (Version: 7.0.510 - Oracle)
Java 7 Update 51 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83217051FF}) (Version: 7.0.510 - Oracle)
Java 8 Update 121 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F32180121F0}) (Version: 8.0.1210.13 - Oracle Corporation)
Mep Kebra Byte 1.1 (UI for UPX Win32/PE) (HKLM-x32\...\Mep Kebra Byte ID_mp1) (Version: 1.1 (Built on 2007-01-01; UPX 2.03) - Mep Produções)
Microsoft .NET Framework 1.1 (HKLM-x32\...\Microsoft .NET Framework 1.1 (1033)) (Version: - )
Microsoft .NET Framework 1.1 Security Update (KB2698023) (HKLM-x32\...\M2698023) (Version: - )
Microsoft .NET Framework 1.1 Security Update (KB2833941) (HKLM-x32\...\M2833941) (Version: - )
Microsoft .NET Framework 1.1 Security Update (KB979906) (HKLM-x32\...\M979906) (Version: - )
Microsoft .NET Framework 1.1 SP1 (HKLM\...\{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}) (Version: - )
Microsoft .NET Framework 1.1 SP1 (HKLM\...\Microsoft .NET Framework 1.1 (1033)) (Version: - )
Microsoft .NET Framework 4 Multi-Targeting Pack (HKLM-x32\...\{CFEF48A8-BFB8-3EAC-8BA5-DE4F8AA267CE}) (Version: 4.0.30319 - Microsoft Corporation)
Microsoft .NET Framework 4.5 Multi-Targeting Pack (HKLM-x32\...\{5CBFF3F3-2D40-34EE-BCA5-A95BC19E400D}) (Version: 4.5.50709 - Microsoft Corporation)
Microsoft .NET Framework 4.5 SDK (HKLM-x32\...\{1948E039-EC79-4591-951D-9867A8C14C90}) (Version: 4.5.50709 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft ASP.NET MVC 2 (HKLM-x32\...\{1803A630-3C38-4D2B-9B9A-0CB37243539C}) (Version: 2.0.50217.0 - Microsoft Corporation)
Microsoft Help Viewer 1.0 (HKLM\...\Microsoft Help Viewer 1.0) (Version: 1.0.30319 - Microsoft Corporation)
Microsoft Help Viewer 2.0 (HKLM-x32\...\Microsoft Help Viewer 2.0) (Version: 2.0.50727 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.20913.0 - Microsoft Corporation)
Microsoft Silverlight 3 SDK (HKLM-x32\...\{2012098D-EEE9-4769-8DD3-B038050854D4}) (Version: 3.0.40818.0 - Microsoft Corporation)
Microsoft SQL Server 2008 (64-bit) (HKLM\...\Microsoft SQL Server 10 Release) (Version: - Microsoft Corporation)
Microsoft SQL Server 2008 Browser (HKLM-x32\...\{C688457E-03FD-4941-923B-A27F4D42A7DD}) (Version: 10.1.2531.0 - Microsoft Corporation)
Microsoft SQL Server 2008 Native Client (HKLM\...\{BBDE8A3D-64A2-43A6-95F3-C27B87DF7AC1}) (Version: 10.1.2531.0 - Microsoft Corporation)
Microsoft SQL Server 2008 R2 Management Objects (HKLM-x32\...\{4E968D9C-21A7-4915-B698-F7AEB913541D}) (Version: 10.50.1447.4 - Microsoft Corporation)
Microsoft SQL Server 2008 Setup Support Files (HKLM\...\{B40EE88B-400A-4266-A17B-E3DE64E94431}) (Version: 10.1.2731.0 - Microsoft Corporation)
Microsoft SQL Server 2012 Command Line Utilities (HKLM\...\{9D573E71-1077-4C7E-B4DB-4E22A5D2B48B}) (Version: 11.0.2100.60 - Microsoft Corporation)
Microsoft SQL Server 2012 Data-Tier App Framework (HKLM\...\{36E619BC-A234-4EC3-849B-779A7C865A45}) (Version: 11.0.2316.0 - Microsoft Corporation)
Microsoft SQL Server 2012 Data-Tier App Framework (HKLM-x32\...\{FBA6F90E-36EC-4FC9-9B25-3834E3BD46A8}) (Version: 11.0.2316.0 - Microsoft Corporation)
Microsoft SQL Server 2012 Express LocalDB (HKLM\...\{13D558FE-A863-402C-B115-160007277033}) (Version: 11.0.2100.60 - Microsoft Corporation)
Microsoft SQL Server 2012 Management Objects (HKLM-x32\...\{DA1C1761-5F4F-4332-AB9D-29EDF3F8EA0A}) (Version: 11.0.2100.60 - Microsoft Corporation)
Microsoft SQL Server 2012 Management Objects (x64) (HKLM\...\{FA0A244E-F3C2-4589-B42A-3D522DE79A42}) (Version: 11.0.2100.60 - Microsoft Corporation)
Microsoft SQL Server 2012 Native Client (HKLM\...\{49D665A2-4C2A-476E-9AB8-FCC425F526FC}) (Version: 11.0.2100.60 - Microsoft Corporation)
Microsoft SQL Server 2012 Transact-SQL Compiler Service (HKLM\...\{BEB0F91E-F2EA-48A1-B938-7857ABF2A93D}) (Version: 11.0.2100.60 - Microsoft Corporation)
Microsoft SQL Server 2012 Transact-SQL ScriptDom (HKLM\...\{0E8670B8-3965-4930-ADA6-570348B67153}) (Version: 11.0.2100.60 - Microsoft Corporation)
Microsoft SQL Server 2012 T-SQL Language Service (HKLM-x32\...\{6D6D43E5-218C-4B05-92D3-2240810F4760}) (Version: 11.0.2100.60 - Microsoft Corporation)
Microsoft SQL Server Compact 4.0 SP1 x64 ENU (HKLM\...\{78909610-D229-459C-A936-25D92283D3FD}) (Version: 4.0.8876.1 - Microsoft Corporation)
Microsoft SQL Server Data Tools - enu (11.1.20828.01) (HKLM-x32\...\{4F2B8233-35EE-4197-8C3B-EACCBF712029}) (Version: 11.1.20828.01 - Microsoft Corporation)
Microsoft SQL Server Data Tools Build Utilities - enu (11.1.20828.01) (HKLM-x32\...\{FAE0523E-08A4-4717-8E8E-6EC6F32CBE88}) (Version: 11.1.20828.01 - Microsoft Corporation)
Microsoft SQL Server Database Publishing Wizard 1.4 (HKLM-x32\...\{ACE28263-76A4-4BF5-B6F4-8BD719595969}) (Version: 10.1.2512.8 - Microsoft Corporation)
Microsoft SQL Server System CLR Types (HKLM-x32\...\{2A2F3AE8-246A-4252-BB26-1BEB45627074}) (Version: 10.50.1447.4 - Microsoft Corporation)
Microsoft SQL Server VSS Writer (HKLM\...\{0826F9E4-787E-481D-83E0-BC6A57B056D5}) (Version: 10.1.2531.0 - Microsoft Corporation)
Microsoft System CLR Types for SQL Server 2012 (HKLM-x32\...\{E2082604-4BA5-44BB-BBFB-AF0F3CB8C6AB}) (Version: 11.0.2100.60 - Microsoft Corporation)
Microsoft System CLR Types for SQL Server 2012 (x64) (HKLM\...\{F1949145-EB64-4DE7-9D81-E6D27937146C}) (Version: 11.0.2100.60 - Microsoft Corporation)
Microsoft Team Foundation Server 2010 Object Model - ENU (HKLM\...\Microsoft Team Foundation Server 2010 Object Model - ENU) (Version: 10.0.30319 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61187 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61186 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.7523 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.7523 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.7523 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.7523 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Runtime - 10.0.30319 (HKLM\...\{94D70749-4281-39AC-AD90-B56A0E0A402E}) (Version: 10.0.30319 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Runtime - 10.0.30319 (HKLM-x32\...\{6A86554B-8928-30E4-A53C-D7337689134D}) (Version: 10.0.30319 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.24215 (HKLM-x32\...\{e2803110-78b3-4664-a479-3611a381656a}) (Version: 14.0.24215.1 - Microsoft Corporation)
Microsoft Visual C++ vNext Redistributable (x64) - 14.10.24629 (HKLM-x32\...\{c60f2e5a-912d-426c-a6b1-8a80bebab424}) (Version: 14.10.24629.0 - Microsoft Corporation)
Microsoft Visual F# 2.0 Runtime (HKLM-x32\...\{729A3000-BC8A-3B74-BA5D-5068FE12D70C}) (Version: 10.0.30319 - Microsoft Corporation)
Microsoft Visual J# 2.0 Redistributable Package - SE (x64) (HKLM\...\Microsoft Visual J# 2.0 Redistributable Package - SE (x64)) (Version: - Microsoft Corporation)
Microsoft Visual Studio 2010 ADO.NET Entity Framework Tools (HKLM-x32\...\{14DD7530-CCD2-3798-B37D-3839ED6A441C}) (Version: 10.0.30319 - Microsoft Corporation)
Microsoft Visual Studio 2010 Express Prerequisites x64 - ENU (HKLM\...\{BCA26999-EC22-3007-BB79-638913079C9A}) (Version: 10.0.30319 - Microsoft Corporation)
Microsoft Visual Studio 2010 Ultimate - ENU (HKLM-x32\...\Microsoft Visual Studio 2010 Ultimate - ENU) (Version: 10.0.30319 - Microsoft Corporation)
Microsoft Visual Studio Express 2012 for Windows Desktop - ENU (HKLM-x32\...\{e0efdce9-a486-4676-8aa5-65bb08cbf34c}) (Version: 11.0.50727.42 - Microsoft Corporation)
Microsoft Visual Studio Macro Tools (HKLM-x32\...\Microsoft Visual Studio Macro Tools) (Version: 9.0.30729 - Microsoft Corporation)
Mixed In Key 2.5 (HKLM-x32\...\Mixed In Key) (Version: 2.5 - )
Mozilla Firefox 51.0.1 (x86 pt-BR) (HKLM-x32\...\Mozilla Firefox 51.0.1 (x86 pt-BR)) (Version: 51.0.1 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 51.0.1 - Mozilla)
NVIDIA Driver de gráficos 368.69 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 368.69 - NVIDIA Corporation)
NVIDIA Software do sistema PhysX 9.16.0318 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.16.0318 - NVIDIA Corporation)
Overwolf (HKLM-x32\...\Overwolf) (Version: 0.102.217.0 - Overwolf Ltd.)
Pacote de Idiomas do Microsoft .NET Framework 4 Client Profile - Português (Brasil) (HKLM\...\Microsoft .NET Framework 4 Client Profile PTB Language Pack) (Version: 4.0.30319 - Microsoft Corporation)
Pacote de Idiomas do Microsoft .NET Framework 4 Extended - Português (Brasil) (HKLM\...\Microsoft .NET Framework 4 Extended PTB Language Pack) (Version: 4.0.30319 - Microsoft Corporation)
Painel de controle da NVIDIA 368.69 (Version: 368.69 - NVIDIA Corporation) Hidden
PE Explorer 1.99 R6 (HKLM-x32\...\PE Explorer_is1) (Version: 1.99.6 - Heaventools Software)
Pioneer DDJ_WeGO Driver (HKLM-x32\...\Pioneer DDJ_WeGO ASIO) (Version: 1.100.000.001 - Pioneer DJ Corporation.)
Pioneer MIX 64bit Driver (HKLM\...\Pioneer MIX) (Version: 4.2.5.0011 - Pioneer DJ Corporation.)
Prerequisites for SSDT (HKLM-x32\...\{9169C939-ED01-446A-BD0C-29873BAF4E48}) (Version: 11.0.2100.60 - Microsoft Corporation)
Qualcomm Atheros Bluetooth Suite (64) (HKLM\...\{A84A4FB1-D703-48DB-89E0-68B6499D2801}) (Version: 8.0.1.332 - Qualcomm Atheros Communications)
RAR to ZIP Converter (HKLM-x32\...\{F1A6CF54-43BB-4397-B4BD-50C7947FEDAD}_is1) (Version: - rartozipconverter.com)
Realtek Card Reader (HKLM-x32\...\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}) (Version: 10.0.14393.31228 - Realtek Semiconductor Corp.)
REAPER (x64) (HKLM\...\REAPER) (Version: - )
rekordbox 4.2.5 64bit (HKLM\...\Pioneer rekordbox 4.2.5) (Version: 4.2.5.0011 - Pioneer DJ)
Resource Hacker Version 4.5.30 (HKLM-x32\...\ResourceHacker_is1) (Version: - )
Samsung Kies3 (HKLM-x32\...\InstallShield_{88547073-C566-4895-9005-EBE98EA3F7C7}) (Version: 3.2.16084.2 - Samsung Electronics Co., Ltd.)
Samsung Kies3 (x32 Version: 3.2.16084.2 - Samsung Electronics Co., Ltd.) Hidden
Samsung USB Driver for Mobile Phones (HKLM\...\{D0795B21-0CDA-4a92-AB9E-6E92D8111E44}) (Version: 1.5.55.0 - Samsung Electronics Co., Ltd.)
Service Pack 1 for SQL Server 2008 (KB968369) (64-bit) (HKLM\...\KB968369) (Version: 10.1.2531.0 - Microsoft Corporation)
SHIELD Streaming (Version: 7.1.0280 - NVIDIA Corporation) Hidden
SHIELD Wireless Controller Driver (Version: 2.11.4.0 - NVIDIA Corporation) Hidden
SlimDrivers (HKLM-x32\...\{746AB259-6474-4111-8966-1C62F9A6E063}) (Version: 2.3.1 - SlimWare Utilities, Inc.)
Software de dispositivo do Chipset Intel® (x32 Version: 10.1.1.35 - Intel(R) Corporation) Hidden
Sql Server Customer Experience Improvement Program (Version: 10.1.2531.0 - Microsoft Corporation) Hidden
Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)
Suporte para Aplicativos Apple (HKLM-x32\...\{46F044A5-CE8B-4196-984E-5BD6525E361D}) (Version: 2.3.6 - Apple Inc.)
TeamSpeak 3 Client (HKU\S-1-5-21-2765353742-2246920163-2559587968-1000\...\TeamSpeak 3 Client) (Version: 3.1.1 - TeamSpeak Systems GmbH)
TeamViewer 12 (HKLM-x32\...\TeamViewer) (Version: 12.0.72365 - TeamViewer)
Unlocker 1.9.2 (HKLM\...\Unlocker) (Version: 1.9.2 - Cedrick Collomb)
VirtualDJ 8 (HKLM-x32\...\{B7D6C720-CB38-41AA-9804-0AA2090BE1B5}) (Version: 8.2.3573.0 - Atomix Productions)
VirtualDJ LE (DDJ-WeGO) (HKLM-x32\...\{A453FA8D-6BC7-44ED-A391-37E67DEF89E1}) (Version: 7.0.5 - Atomix Productions)
Visual Studio 2010 Prerequisites - English (HKLM\...\{662014D2-0450-37ED-ABAE-157C88127BEB}) (Version: 10.0.30319 - Microsoft Corporation)
Vulkan Run Time Libraries 1.0.11.1 (HKLM\...\VulkanRT1.0.11.1) (Version: 1.0.11.1 - LunarG, Inc.)
WARMODE (HKLM\...\Steam App 391460) (Version: - WARTEAM)
Web Deployment Tool (HKLM\...\{0F37D969-1260-419E-B308-EF7D29ABDE20}) (Version: 1.1.0618 - Microsoft Corporation)
WinRAR 5.40 (64-bit) (HKLM\...\WinRAR archiver) (Version: 5.40.0 - win.rar GmbH)
Zula (HKLM-x32\...\22DF2438-3A2E-4E99-BA0E-3272968F0290_is1) (Version: 1.09-161219.13851 - IDC/Games)
==================== Exame Personalizado CLSID (Whitelisted): ==========================
(Se uma entrada for incluída na fixlist, será removida do Registro. O arquivo não será movido, a menos que seja colocado separadamente.)
CustomCLSID: HKU\S-1-5-21-2765353742-2246920163-2559587968-1000_Classes\CLSID\{820D63D5-8CFF-46DE-86AF-4997DEDD6DB5}\localserver32 -> C:\Windows\system32\igfxEM.exe (Intel Corporation)
==================== Tarefas Agendadas (Whitelisted) =============
(Se uma entrada for incluída na fixlist, será removida do Registro. O arquivo não será movido, a menos que seja colocado separadamente.)
Task: {23DB1965-2802-4F09-AC21-0542020A8007} - System32\Tasks\Overwolf Updater Task => C:\Program Files (x86)\Overwolf\OverwolfUpdater.exe [2017-02-20] (Overwolf LTD)
Task: {25C717A9-D0A9-42C2-83F8-85713A2A1891} - System32\Tasks\{A7856FC7-CFC8-4C15-ABEE-88286CA30338} => Chrome.exe hxxps://ui.skype.com/ui/0/7.33.0.104/pt/abandoninstall?page=tsInstall
Task: {2A8723E6-F30C-47CF-84CE-510B76F9F321} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2017-02-09] (Google Inc.)
Task: {3AA86193-09B5-4DB7-8887-E24C53AFF1C5} - System32\Tasks\{41C11286-C028-48DC-BE6E-4554794CC204} => C:\Users\Poison\Desktop\CD Arrocha 02\DJ DANCE - Pedreira Beach\TeamSpeak3-Client-win64-3.1.1.1.exe [2017-03-01] (TeamSpeak Systems GmbH)
Task: {53C95F81-5B46-420B-90B3-C43984BB421E} - System32\Tasks\{9C6FDBA1-8F3C-450F-A0A7-5429C3039C70} => Chrome.exe hxxps://ui.skype.com/ui/0/7.33.0.104/pt/abandoninstall?page=tsMain
Task: {5D582B49-23B9-4B24-9870-2F19A106E81D} - System32\Tasks\{360D99C2-500E-413E-86B7-3E0181018F64} => D:\Pen Drive Minhas Coisas\Private exe Protector 3.1.4\Private exe Protector.exe [2009-11-07] (SetiSoft (c) Tech)
Task: {5D9A0343-1778-47E7-9209-81C7FC0A9542} - System32\Tasks\{103D2E07-AEC9-4CE4-AE53-AFE69B2F9D2F} => D:\Pen Drive Minhas Coisas\Private exe Protector 3.1.4\Private exe Protector.exe [2009-11-07] (SetiSoft (c) Tech)
Task: {63995717-9040-4ABA-982A-8DD3A477B860} - System32\Tasks\{71A41010-CDFE-4F35-81B0-AF071E4386FF} => D:\Pen Drive Minhas Coisas\Private exe Protector 3.1.4\Private exe Protector.exe [2009-11-07] (SetiSoft (c) Tech)
Task: {85D9E55C-F3CF-4F86-8C13-0195A678FD9B} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe
Task: {887122AE-3706-4AE2-AFCE-2849D49ACDAD} - System32\Tasks\{8581B9CB-8189-4892-AF78-897AB6A7D99E} => Chrome.exe hxxps://www.skype.com/go/downloading?source=lightinstaller&ver=7.33.0.104&LastError=12040
Task: {8EB43A02-E984-4556-B03D-3B3DD461E825} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2017-02-16] (Adobe Systems Incorporated)
Task: {93E6CAEC-9B23-4CF5-9B4B-60C7F6B7FE3A} - System32\Tasks\Adobe Flash Player PPAPI Notifier => C:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_24_0_0_221_pepper.exe [2017-02-16] (Adobe Systems Incorporated)
Task: {9C213622-E230-4092-9474-771162CEE349} - System32\Tasks\CCleanerSkipUAC => D:\AREA 2\Desktop\CCleaner\CCleaner.exe [2016-03-11] (Piriform Ltd)
Task: {A3FCF0C7-943C-4EF6-88F8-EF204911D78D} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2017-02-09] (Google Inc.)
Task: {A564E3FF-87BD-4AA8-BD88-1BA5BA784094} - System32\Tasks\{73D6050E-97CF-42FB-8256-36E690B4FC80} => D:\Pen Drive Minhas Coisas\Private exe Protector 3.1.4\Private exe Protector.exe [2009-11-07] (SetiSoft (c) Tech)
Task: {C751BE32-0DB3-450C-92D4-E68A71AA314D} - System32\Tasks\{1336AE0A-4393-430F-B780-19429C886509} => C:\Users\Poison\AppData\Local\TeamSpeak 3 Client\ts3client_win64.exe [2017-02-21] (TeamSpeak Systems GmbH)
Task: {D18B1D60-2AFF-4A90-8836-05C6E350E50D} - System32\Tasks\{55F291B5-FA16-48CB-B7E8-5A91DE15030F} => D:\Pen Drive Minhas Coisas\Private exe Protector 3.1.4\Private exe Protector.exe [2009-11-07] (SetiSoft (c) Tech)
Task: {E4E0A949-1EEE-469C-B0ED-CEBA50DE1D02} - System32\Tasks\AVAST Software\Avast settings backup => C:\Program Files\Common Files\AV\avast! Antivirus\backup.exe [2017-02-09] (AVAST Software)
Task: {EA4A780A-8AB3-45C8-B209-AE906B3A9638} - System32\Tasks\{73F118F5-95EA-47A8-BE99-F29C72349FD9} => pcalua.exe -a "E:\Programas e jogos\Directx 9.0.exe" -d "E:\Programas e jogos"
Task: {F9E9E6B5-D650-410B-9DC0-C414A9801191} - System32\Tasks\{737451F1-37EE-4A86-87DE-0BB442C371A6} => C:\Users\Poison\AppData\Local\TeamSpeak 3 Client\ts3client_win64.exe [2017-02-21] (TeamSpeak Systems GmbH)
Task: {FF09A3EB-A44C-4C78-955E-6F5FE4DEE6D1} - System32\Tasks\Avast Emergency Update => C:\Program Files\AVAST Software\Avast\AvEmUpdate.exe
(Se uma entrada for incluída na fixlist, o arquivo da tarefa (.job) será movido. O arquivo que está sendo executado pela tarefa não será movido.)
Task: C:\Windows\Tasks\Adobe Flash Player PPAPI Notifier.job => C:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_24_0_0_221_pepper.exe
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
==================== Atalhos =============================
(As entradas podem ser listadas para serem restauradas ou removidas.)
Shortcut: C:\Users\Poison\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\VirtualDJ\Online Help.lnk -> hxxp://www.virtualdj.com/wiki
Shortcut: C:\Users\Poison\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\VirtualDJ\www.virtualdj.com.lnk -> hxxp://www.virtualdj.com
==================== Módulos Carregados (Whitelisted) ==============
2017-02-08 04:17 - 2016-06-29 15:37 - 00134712 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll
2014-08-26 19:34 - 2014-08-26 19:34 - 00103040 _____ () C:\Program Files (x86)\Dell\Dell Unified Wireless Suite\ihvs\AthIHVManager.dll
2014-08-26 19:35 - 2014-08-26 19:35 - 00113792 _____ () C:\Program Files (x86)\Dell\Dell Unified Wireless Suite\ihvs\AthIhvWlanNoise.dll
2014-08-26 19:35 - 2014-08-26 19:35 - 00188032 _____ () C:\Program Files (x86)\Dell\Dell Unified Wireless Suite\ihvs\Hotspot20Ext.dll
2017-03-06 08:47 - 2016-12-15 07:37 - 00020208 _____ () C:\Windows\system32\spool\PRTPROCS\x64\TeamViewer_PrintProcessor.dll
2017-02-08 04:18 - 2016-06-29 19:44 - 00367552 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\MessageBus.dll
2017-02-08 04:18 - 2016-06-29 19:44 - 01147328 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\libprotobuf.dll
2017-02-08 04:18 - 2016-06-29 19:44 - 03611584 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\Poco.dll
2017-02-08 04:18 - 2016-06-29 19:44 - 00288192 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamBase.dll
2014-08-26 19:33 - 2014-08-26 19:33 - 00016512 _____ () C:\Program Files (x86)\Dell\Dell Unified Wireless Suite\awic\AWiCCust.dll
2017-02-08 04:18 - 2016-06-29 19:44 - 02665920 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\Plugins\NSS\NvMdnsPlugin.dll
2017-02-08 04:18 - 2016-06-29 19:44 - 01988544 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\Plugins\NSS\NvPortForwardPlugin.dll
2017-02-08 04:18 - 2016-06-29 19:44 - 01840576 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\Plugins\NSS\RtspPlugin.dll
2017-02-08 04:18 - 2016-06-29 19:44 - 00207296 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\RtspServer.dll
2014-08-26 19:35 - 2014-08-26 19:35 - 00643712 _____ () C:\Program Files (x86)\Dell\Dell Unified Wireless Suite\spectral\SocketServer.exe
2017-02-08 04:18 - 2016-06-29 19:44 - 00034240 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\boost_system-vc120-mt-1_58.dll
2017-02-08 04:18 - 2016-06-29 19:44 - 00920000 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\boost_regex-vc120-mt-1_58.dll
2017-02-08 04:18 - 2016-06-29 19:44 - 00018880 _____ () C:\Program Files (x86)\NVIDIA Corporation\Update Core\detoured.dll
2017-02-09 01:39 - 2017-02-01 06:01 - 01870168 _____ () C:\Program Files (x86)\Google\Chrome\Application\56.0.2924.87\libglesv2.dll
2017-02-09 01:39 - 2017-02-01 06:01 - 00085848 _____ () C:\Program Files (x86)\Google\Chrome\Application\56.0.2924.87\libegl.dll
2015-10-16 05:14 - 2015-10-16 05:14 - 01243936 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\ACE.dll
==================== Alternate Data Streams (Whitelisted) =========
(Se uma entrada for incluída na fixlist, somente o ADS será removido.)
==================== Modo de Segurança (Whitelisted) ===================
(Se uma entrada for incluída na fixlist, será removida do Registro. O valor "AlternateShell" será restaurado.)
==================== Associação (Whitelisted) ===============
(Se uma entrada for incluída na fixlist, o ítem no Registro será restaurado para o padrão ou removido.)
==================== Internet Explorer confiável/restrito ===============
(Se uma entrada for incluída na fixlist, será removida do Registro.)
IE trusted site: HKU\S-1-5-21-2765353742-2246920163-2559587968-1000\...\localhost -> localhost
==================== Hosts Conteúdo: ===============================
(Se necessário, a diretiva Hosts: pode ser incluída na fixlist para redefinir o Hosts.)
2009-07-13 23:34 - 2017-03-05 02:32 - 00000027 ____A C:\Windows\system32\Drivers\etc\hosts
127.0.0.1 localhost
==================== Outras Áreas ============================
(Atualmente não há nenhuma correção automática para esta seção.)
HKU\S-1-5-21-2765353742-2246920163-2559587968-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\Poison\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
DNS Servers: 192.168.1.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Firewall do Windows está habilitado.
==================== MSCONFIG/TASK MANAGER ítens desabilitados ==
MSCONFIG\Services: ss_conn_service => 2
MSCONFIG\Services: TheScreenSnapshotService => 2
MSCONFIG\Services: WCAssistantService => 2
==================== Regras do Firewall (Whitelisted) ===============
(Se uma entrada for incluída na fixlist, será removida do Registro. O arquivo não será movido, a menos que seja colocado separadamente.)
FirewallRules: [TCP Query User{76E388B0-6D42-458F-BFA7-E3F65BDD1E33}C:\program files (x86)\google\chrome\application\chrome.exe] => (Allow) C:\program files (x86)\google\chrome\application\chrome.exe
FirewallRules: [UDP Query User{3A5E4369-4405-4F35-9ABC-F653D4F0D08D}C:\program files (x86)\google\chrome\application\chrome.exe] => (Allow) C:\program files (x86)\google\chrome\application\chrome.exe
FirewallRules: [TCP Query User{9AF666CA-44A1-4ABE-8453-65FE66B5F060}C:\users\poison\desktop\cd arrocha 02\dj dance - pedreira beach\skypeportable\app\skype\phone\skype.exe] => (Allow) C:\users\poison\desktop\cd arrocha 02\dj dance - pedreira beach\skypeportable\app\skype\phone\skype.exe
FirewallRules: [UDP Query User{13FE6811-31D9-46B4-A725-D16F4F21884F}C:\users\poison\desktop\cd arrocha 02\dj dance - pedreira beach\skypeportable\app\skype\phone\skype.exe] => (Allow) C:\users\poison\desktop\cd arrocha 02\dj dance - pedreira beach\skypeportable\app\skype\phone\skype.exe
FirewallRules: [{5862C4BF-3214-4BB5-B8A8-C3BAC049DF1C}] => (Allow) C:\Program Files\BlackShot\BlackShot\System\blackshot_BE.exe
FirewallRules: [{1B24E797-E707-4CE2-B91C-796D9798F443}] => (Allow) C:\Program Files\BlackShot\BlackShot\System\blackshot_BE.exe
FirewallRules: [{0E6B5848-97A8-4B2D-9123-1251B47A450B}] => (Allow) C:\Program Files\BlackShot\BlackShot\System\blackshot.exe
FirewallRules: [{610A26B0-5530-473F-A491-120AB215064A}] => (Allow) C:\Program Files\BlackShot\BlackShot\System\blackshot.exe
FirewallRules: [TCP Query User{4E8C28F6-77F7-43E3-A749-1E624DDFE97C}C:\program files (x86)\cheat engine 6.6\cheatengine-x86_64.exe] => (Allow) C:\program files (x86)\cheat engine 6.6\cheatengine-x86_64.exe
FirewallRules: [UDP Query User{DFEBA339-93EC-442D-A295-BFFA65D43A22}C:\program files (x86)\cheat engine 6.6\cheatengine-x86_64.exe] => (Allow) C:\program files (x86)\cheat engine 6.6\cheatengine-x86_64.exe
FirewallRules: [{656CE9E5-09D6-4111-B6BE-6CB2904CBE80}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe
FirewallRules: [{3AD38F98-FA3C-45BC-87A8-A8D831630766}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe
FirewallRules: [{FBE1603B-5D71-440B-8AB9-B064F0B3A0DD}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
FirewallRules: [{8667F643-031E-4A40-BB3B-548D19E19B72}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
FirewallRules: [{68B2F7B7-B368-4569-B230-893F86408486}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{9E4EC62F-0079-4DBB-9553-5E71BD327D2E}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{0177B21C-746C-486A-8E67-C612FACD4A2B}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe
FirewallRules: [{5AB53B43-6E65-44B0-803B-0170BB4A7A0B}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe
FirewallRules: [{43925213-3F87-478D-9E6B-F468A0FFD782}] => (Allow) C:\Program Files\PlayOne\BlackShot_SEA\BlackShot\system\BlackShot.exe
FirewallRules: [{D5058A2D-17B2-4101-AC8C-DED3FE851240}] => (Allow) C:\Program Files\PlayOne\BlackShot_SEA\BlackShot\system\BlackShot.exe
FirewallRules: [{B562FE0A-D9FD-4C14-B24C-B0EEA5E3257F}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\BlackShot\system\BlackShot.exe
FirewallRules: [{C5D11A3E-BA32-4B43-9239-54E887313815}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\BlackShot\system\BlackShot.exe
FirewallRules: [{96F86C2D-E0D1-4E06-8127-7F3E5E191562}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\WARMODE\warmode.exe
FirewallRules: [{06BC76E4-00E7-4D3C-80B9-BA29A0B081CD}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\WARMODE\warmode.exe
==================== Pontos de Restauração =========================
02-03-2017 15:02:05 Revo Uninstaller's restore point - Skype™ 7.33
02-03-2017 15:02:48 Removed Skype™ 7.33
05-03-2017 02:22:18 ComboFix created restore point
==================== Dispositivos Apresentando Falhas No Gerenciador =============
Name: Realtek PCIe FE Family Controller
Description: Realtek PCIe FE Family Controller
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Realtek
Service: RTL8167
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.
Name: Adaptador de Miniporta WiFi Virtual da Microsoft
Description: Adaptador de Miniporta WiFi Virtual da Microsoft
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: vwifimp
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.
Name: Microsoft Virtual WiFi Miniport Adapter #2
Description: Adaptador de Miniporta WiFi Virtual da Microsoft
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: vwifimp
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.
==================== Erros no Log de eventos: =========================
Erros em Aplicativos:
==================
Error: (03/08/2017 02:55:19 AM) (Source: ESENT) (EventID: 412) (User: )
Description: wuaueng.dll (560) SUS20ClientDataStore: Não é possível ler o cabeçalho do arquivo de log C:\Windows\SoftwareDistribution\DataStore\Logs\edb.log. Erro -546.
Error: (03/08/2017 02:55:19 AM) (Source: ESENT) (EventID: 412) (User: )
Description: wuaueng.dll (560) SUS20ClientDataStore: Não é possível ler o cabeçalho do arquivo de log C:\Windows\SoftwareDistribution\DataStore\Logs\edb.log. Erro -546.
Error: (03/08/2017 02:50:23 AM) (Source: ESENT) (EventID: 412) (User: )
Description: wuaueng.dll (560) SUS20ClientDataStore: Não é possível ler o cabeçalho do arquivo de log C:\Windows\SoftwareDistribution\DataStore\Logs\edb.log. Erro -546.
Error: (03/08/2017 02:50:23 AM) (Source: ESENT) (EventID: 412) (User: )
Description: wuaueng.dll (560) SUS20ClientDataStore: Não é possível ler o cabeçalho do arquivo de log C:\Windows\SoftwareDistribution\DataStore\Logs\edb.log. Erro -546.
Error: (03/08/2017 02:50:23 AM) (Source: ESENT) (EventID: 412) (User: )
Description: wuaueng.dll (560) SUS20ClientDataStore: Não é possível ler o cabeçalho do arquivo de log C:\Windows\SoftwareDistribution\DataStore\Logs\edb.log. Erro -546.
Error: (03/08/2017 02:50:23 AM) (Source: ESENT) (EventID: 412) (User: )
Description: wuaueng.dll (560) SUS20ClientDataStore: Não é possível ler o cabeçalho do arquivo de log C:\Windows\SoftwareDistribution\DataStore\Logs\edb.log. Erro -546.
Error: (03/08/2017 02:50:23 AM) (Source: ESENT) (EventID: 412) (User: )
Description: wuaueng.dll (560) SUS20ClientDataStore: Não é possível ler o cabeçalho do arquivo de log C:\Windows\SoftwareDistribution\DataStore\Logs\edb.log. Erro -546.
Error: (03/08/2017 02:50:23 AM) (Source: ESENT) (EventID: 412) (User: )
Description: wuaueng.dll (560) SUS20ClientDataStore: Não é possível ler o cabeçalho do arquivo de log C:\Windows\SoftwareDistribution\DataStore\Logs\edb.log. Erro -546.
Error: (03/08/2017 02:50:23 AM) (Source: ESENT) (EventID: 412) (User: )
Description: wuaueng.dll (560) SUS20ClientDataStore: Não é possível ler o cabeçalho do arquivo de log C:\Windows\SoftwareDistribution\DataStore\Logs\edb.log. Erro -546.
Error: (03/08/2017 02:50:23 AM) (Source: ESENT) (EventID: 412) (User: )
Description: wuaueng.dll (560) SUS20ClientDataStore: Não é possível ler o cabeçalho do arquivo de log C:\Windows\SoftwareDistribution\DataStore\Logs\edb.log. Erro -546.
Erros de Sistema:
=============
Error: (03/08/2017 02:43:39 AM) (Source: Service Control Manager) (EventID: 7026) (User: )
Description: Falha ao carregar o(s) seguinte(s) driver(s) de início do sistema ou de inicialização:
aswblog
cdrom
Error: (03/08/2017 02:36:15 AM) (Source: DCOM) (EventID: 10010) (User: )
Description: O servidor {9B1F122C-2982-4E91-AA8B-E071D54F2A4D} não se registrou com o DCOM dentro do tempo limite requerido.
Error: (03/06/2017 01:23:54 PM) (Source: Service Control Manager) (EventID: 7026) (User: )
Description: Falha ao carregar o(s) seguinte(s) driver(s) de início do sistema ou de inicialização:
aswblog
cdrom
Error: (03/06/2017 11:33:19 AM) (Source: Service Control Manager) (EventID: 7026) (User: )
Description: Falha ao carregar o(s) seguinte(s) driver(s) de início do sistema ou de inicialização:
aswblog
cdrom
Error: (03/06/2017 11:32:25 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Não foi possível iniciar o serviço SQL Server (SQLEXPRESS) devido ao seguinte erro:
O serviço não respondeu à requisição de início ou controle em tempo hábil.
Error: (03/06/2017 11:32:25 AM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Tempo limite esgotado (30000 milissegundos) ao aguardar a conexão do serviço SQL Server (SQLEXPRESS).
Error: (03/06/2017 03:25:03 AM) (Source: Service Control Manager) (EventID: 7026) (User: )
Description: Falha ao carregar o(s) seguinte(s) driver(s) de início do sistema ou de inicialização:
aswblog
cdrom
Error: (03/06/2017 03:07:57 AM) (Source: Service Control Manager) (EventID: 7026) (User: )
Description: Falha ao carregar o(s) seguinte(s) driver(s) de início do sistema ou de inicialização:
aswblog
cdrom
Error: (03/05/2017 12:14:34 PM) (Source: Disk) (EventID: 11) (User: )
Description: O driver detectou um erro de controlador em \Device\Harddisk1\DR1.
Error: (03/05/2017 02:44:33 AM) (Source: Service Control Manager) (EventID: 7026) (User: )
Description: Falha ao carregar o(s) seguinte(s) driver(s) de início do sistema ou de inicialização:
aswblog
cdrom
CodeIntegrity:
===================================
Date: 2017-03-05 02:32:25.826
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume3\ComboFix\catchme.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2017-03-05 02:32:25.823
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume3\ComboFix\catchme.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2017-03-05 02:32:25.816
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume3\ComboFix\catchme.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2017-03-05 02:32:25.808
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume3\ComboFix\catchme.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2017-03-02 20:30:50.667
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume3\ComboFix\catchme.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2017-03-02 20:30:50.667
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume3\ComboFix\catchme.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2017-03-02 20:30:50.667
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume3\ComboFix\catchme.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2017-03-02 20:30:50.667
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume3\ComboFix\catchme.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2017-03-02 08:06:45.077
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume3\ComboFix\catchme.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2017-03-02 08:06:45.069
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume3\ComboFix\catchme.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
==================== Informações da Memória ===========================
Processador: Intel(R) Core(TM) i5-3337U CPU @ 1.80GHz
Percentagem de memória em uso: 63%
RAM física total: 6009.08 MB
RAM física disponível: 2210.52 MB
Virtual Total: 12016.31 MB
Virtual disponível: 7627.75 MB
==================== Drives ================================
Drive c: () (Fixed) (Total:273.36 GB) (Free:110.56 GB) NTFS
Drive d: (Meus Programas) (Fixed) (Total:191.89 GB) (Free:53.92 GB) NTFS
==================== MBR & Tabela de Partições ==================
========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 465.8 GB) (Disk ID: B34B6422)
Partition 1: (Active) - (Size=500 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=273.4 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=191.9 GB) - (Type=OF Extended)
==================== Fim de Addition.txt ============================
Executado por Poison (08-03-2017 03:12:27)
Executando a partir de C:\Users\Poison\Desktop
Windows 7 Ultimate (X64) (2017-02-08 06:19:58)
Modo da Inicialização: Normal
==========================================================
==================== Contas: =============================
Administrador (S-1-5-21-2765353742-2246920163-2559587968-500 - Administrator - Disabled)
Convidado (S-1-5-21-2765353742-2246920163-2559587968-501 - Limited - Disabled)
Poison (S-1-5-21-2765353742-2246920163-2559587968-1000 - Administrator - Enabled) => C:\Users\Poison
==================== Central de Segurança ========================
(Se uma entrada for incluída na fixlist, será removida.)
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
==================== Programas Instalados ======================
(Somente os programas adwares com a indicação "Oculto" podem ser adicionados à fixlist para desocultá-los. Os programas adwares devem ser desinstalados manualmente.)
.NET Reactor (HKLM-x32\...\.NET Reactor) (Version: 5.0.0.0 - Eziriz)
.NET Reactor (x32 Version: 5.0.0.0 - Eziriz) Hidden
Adobe Flash Player 24 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 24.0.0.221 - Adobe Systems Incorporated)
Adobe Flash Player 24 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 24.0.0.221 - Adobe Systems Incorporated)
Adobe Flash Player 24 PPAPI (HKLM-x32\...\Adobe Flash Player PPAPI) (Version: 24.0.0.221 - Adobe Systems Incorporated)
Adobe Shockwave Player 12.0 (HKLM-x32\...\{AA3B06B1-E89A-43C6-A26B-7109DB4BEE7B}) (Version: 12.0.7.148 - Adobe Systems, Inc)
Advanced RAR Repair v1.2 (HKLM-x32\...\Advanced RAR Repair v1.2) (Version: - )
Advanced ScreenSnapshotTool 1.1.0.11414 (HKLM\...\{61FFE1F9-137D-4c31-A181-3415FCAA5946}) (Version: 1.1.0.11414 - ShenZhen Enode Techology co,.Ltd) <==== ATENÇÃO
Allgemeine Runtime Files (x86) (HKLM\...\{1F6D1DB5-82B5-41A4-85A2-0A382C142A35}_is1) (Version: 1.0.3.7 - Sereby Corporation)
Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)
ASPack 2.29 (HKLM-x32\...\ASPack_is1) (Version: - )
Atualizações da NVIDIA 2.11.4.0 (Version: 2.11.4.0 - NVIDIA Corporation) Hidden
Avast Free Antivirus (HKLM-x32\...\Avast Antivirus) (Version: 17.1.2286 - AVAST Software)
BlackShot (HKLM-x32\...\BlackShot) (Version: - )
BlackShot: Mercenary Warfare FPS (HKLM\...\Steam App 433350) (Version: - Vertigo Games America)
BlackShot_SEA (HKLM-x32\...\BlackShot_SEA) (Version: - )
Borland Delphi 7 (HKLM-x32\...\{72263053-50D1-4598-9502-51ED64E54C51}) (Version: 7.0 - Borland Software Corporation)
Camtasia Studio 8 (HKLM-x32\...\{A2A41B60-D51F-4C04-BC94-B4C94F7B6DC0}) (Version: 8.6.0.2054 - TechSmith Corporation)
Cheat Engine 6.6 (HKLM-x32\...\Cheat Engine 6.6_is1) (Version: - Cheat Engine)
Coringa-RAT versão 0.3 (HKLM-x32\...\{89E5D8EA-0DE8-4EB9-B475-9086E9925643}_is1) (Version: 0.3 - Hacking.SooftT, Inc.)
CryptoPrevent (HKLM-x32\...\{5C5B24E7-4694-4049-A222-CCE7D3FAC63F}_is1) (Version: 8.0.3.1 - Foolish IT LLC)
Dell Unified Wireless Suite (HKLM-x32\...\{6CFE6F33-3D69-4B9C-AA20-FF1F8CB064D5}) (Version: 1.00.0000 - Dell)
DJ Intro version 1.2.8 (HKLM-x32\...\{36625871-9D4B-4046-A837-677974F51CAC}_is1) (Version: 1.2.8 - Serato Audio Research)
DuckDns version 1.0.5 (HKLM-x32\...\{72C90F4B-DDFB-410B-8761-9769CCF481AA}}_is1) (Version: 1.0.5 - ETX Software Inc.)
Entity Framework Designer for Visual Studio 2012 - enu (HKLM-x32\...\{32136776-FE3F-453D-80DA-CDD993BDB2A3}) (Version: 11.1.20810.00 - Microsoft Corporation)
FormatFactory 3.6.0.0 (HKLM-x32\...\FormatFactory) (Version: 3.6.0.0 - Format Factory)
GOM Player (HKLM-x32\...\GOM Player) (Version: 2.3.12.5268 - Gretech Corporation)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 56.0.2924.87 - Google Inc.)
Google Update Helper (x32 Version: 1.3.21.123 - Google Inc.) Hidden
Google Update Helper (x32 Version: 1.3.32.7 - Google Inc.) Hidden
Hex Workshop v6.8 (HKLM\...\{A36AC685-4435-4C16-861F-221231DE165D}) (Version: 6.8.0.5419 - BreakPoint Software)
IDA Pro Free v5.0 (HKLM-x32\...\IDA Pro Free_is1) (Version: - Hex-Rays SA)
IDCGames Launcher (HKLM-x32\...\{189BD0E3-FA9A-4280-8204-7F54913CFCFA}_is1) (Version: 0.0.0 - IDC Games)
Intel(R) Management Engine Components (HKLM\...\{1CEAC85D-2590-4760-800F-8DE5E91F3700}) (Version: 11.0.0.1173 - Intel Corporation)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 10.18.10.4358 - Intel Corporation)
Intel(R) Rapid Storage Technology (HKLM\...\{409CB30E-E457-4008-9B1A-ED1B9EA21140}) (Version: 12.9.0.1001 - Intel Corporation)
Java 7 Update 51 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86417051FF}) (Version: 7.0.510 - Oracle)
Java 7 Update 51 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83217051FF}) (Version: 7.0.510 - Oracle)
Java 8 Update 121 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F32180121F0}) (Version: 8.0.1210.13 - Oracle Corporation)
Mep Kebra Byte 1.1 (UI for UPX Win32/PE) (HKLM-x32\...\Mep Kebra Byte ID_mp1) (Version: 1.1 (Built on 2007-01-01; UPX 2.03) - Mep Produções)
Microsoft .NET Framework 1.1 (HKLM-x32\...\Microsoft .NET Framework 1.1 (1033)) (Version: - )
Microsoft .NET Framework 1.1 Security Update (KB2698023) (HKLM-x32\...\M2698023) (Version: - )
Microsoft .NET Framework 1.1 Security Update (KB2833941) (HKLM-x32\...\M2833941) (Version: - )
Microsoft .NET Framework 1.1 Security Update (KB979906) (HKLM-x32\...\M979906) (Version: - )
Microsoft .NET Framework 1.1 SP1 (HKLM\...\{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}) (Version: - )
Microsoft .NET Framework 1.1 SP1 (HKLM\...\Microsoft .NET Framework 1.1 (1033)) (Version: - )
Microsoft .NET Framework 4 Multi-Targeting Pack (HKLM-x32\...\{CFEF48A8-BFB8-3EAC-8BA5-DE4F8AA267CE}) (Version: 4.0.30319 - Microsoft Corporation)
Microsoft .NET Framework 4.5 Multi-Targeting Pack (HKLM-x32\...\{5CBFF3F3-2D40-34EE-BCA5-A95BC19E400D}) (Version: 4.5.50709 - Microsoft Corporation)
Microsoft .NET Framework 4.5 SDK (HKLM-x32\...\{1948E039-EC79-4591-951D-9867A8C14C90}) (Version: 4.5.50709 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft ASP.NET MVC 2 (HKLM-x32\...\{1803A630-3C38-4D2B-9B9A-0CB37243539C}) (Version: 2.0.50217.0 - Microsoft Corporation)
Microsoft Help Viewer 1.0 (HKLM\...\Microsoft Help Viewer 1.0) (Version: 1.0.30319 - Microsoft Corporation)
Microsoft Help Viewer 2.0 (HKLM-x32\...\Microsoft Help Viewer 2.0) (Version: 2.0.50727 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.20913.0 - Microsoft Corporation)
Microsoft Silverlight 3 SDK (HKLM-x32\...\{2012098D-EEE9-4769-8DD3-B038050854D4}) (Version: 3.0.40818.0 - Microsoft Corporation)
Microsoft SQL Server 2008 (64-bit) (HKLM\...\Microsoft SQL Server 10 Release) (Version: - Microsoft Corporation)
Microsoft SQL Server 2008 Browser (HKLM-x32\...\{C688457E-03FD-4941-923B-A27F4D42A7DD}) (Version: 10.1.2531.0 - Microsoft Corporation)
Microsoft SQL Server 2008 Native Client (HKLM\...\{BBDE8A3D-64A2-43A6-95F3-C27B87DF7AC1}) (Version: 10.1.2531.0 - Microsoft Corporation)
Microsoft SQL Server 2008 R2 Management Objects (HKLM-x32\...\{4E968D9C-21A7-4915-B698-F7AEB913541D}) (Version: 10.50.1447.4 - Microsoft Corporation)
Microsoft SQL Server 2008 Setup Support Files (HKLM\...\{B40EE88B-400A-4266-A17B-E3DE64E94431}) (Version: 10.1.2731.0 - Microsoft Corporation)
Microsoft SQL Server 2012 Command Line Utilities (HKLM\...\{9D573E71-1077-4C7E-B4DB-4E22A5D2B48B}) (Version: 11.0.2100.60 - Microsoft Corporation)
Microsoft SQL Server 2012 Data-Tier App Framework (HKLM\...\{36E619BC-A234-4EC3-849B-779A7C865A45}) (Version: 11.0.2316.0 - Microsoft Corporation)
Microsoft SQL Server 2012 Data-Tier App Framework (HKLM-x32\...\{FBA6F90E-36EC-4FC9-9B25-3834E3BD46A8}) (Version: 11.0.2316.0 - Microsoft Corporation)
Microsoft SQL Server 2012 Express LocalDB (HKLM\...\{13D558FE-A863-402C-B115-160007277033}) (Version: 11.0.2100.60 - Microsoft Corporation)
Microsoft SQL Server 2012 Management Objects (HKLM-x32\...\{DA1C1761-5F4F-4332-AB9D-29EDF3F8EA0A}) (Version: 11.0.2100.60 - Microsoft Corporation)
Microsoft SQL Server 2012 Management Objects (x64) (HKLM\...\{FA0A244E-F3C2-4589-B42A-3D522DE79A42}) (Version: 11.0.2100.60 - Microsoft Corporation)
Microsoft SQL Server 2012 Native Client (HKLM\...\{49D665A2-4C2A-476E-9AB8-FCC425F526FC}) (Version: 11.0.2100.60 - Microsoft Corporation)
Microsoft SQL Server 2012 Transact-SQL Compiler Service (HKLM\...\{BEB0F91E-F2EA-48A1-B938-7857ABF2A93D}) (Version: 11.0.2100.60 - Microsoft Corporation)
Microsoft SQL Server 2012 Transact-SQL ScriptDom (HKLM\...\{0E8670B8-3965-4930-ADA6-570348B67153}) (Version: 11.0.2100.60 - Microsoft Corporation)
Microsoft SQL Server 2012 T-SQL Language Service (HKLM-x32\...\{6D6D43E5-218C-4B05-92D3-2240810F4760}) (Version: 11.0.2100.60 - Microsoft Corporation)
Microsoft SQL Server Compact 4.0 SP1 x64 ENU (HKLM\...\{78909610-D229-459C-A936-25D92283D3FD}) (Version: 4.0.8876.1 - Microsoft Corporation)
Microsoft SQL Server Data Tools - enu (11.1.20828.01) (HKLM-x32\...\{4F2B8233-35EE-4197-8C3B-EACCBF712029}) (Version: 11.1.20828.01 - Microsoft Corporation)
Microsoft SQL Server Data Tools Build Utilities - enu (11.1.20828.01) (HKLM-x32\...\{FAE0523E-08A4-4717-8E8E-6EC6F32CBE88}) (Version: 11.1.20828.01 - Microsoft Corporation)
Microsoft SQL Server Database Publishing Wizard 1.4 (HKLM-x32\...\{ACE28263-76A4-4BF5-B6F4-8BD719595969}) (Version: 10.1.2512.8 - Microsoft Corporation)
Microsoft SQL Server System CLR Types (HKLM-x32\...\{2A2F3AE8-246A-4252-BB26-1BEB45627074}) (Version: 10.50.1447.4 - Microsoft Corporation)
Microsoft SQL Server VSS Writer (HKLM\...\{0826F9E4-787E-481D-83E0-BC6A57B056D5}) (Version: 10.1.2531.0 - Microsoft Corporation)
Microsoft System CLR Types for SQL Server 2012 (HKLM-x32\...\{E2082604-4BA5-44BB-BBFB-AF0F3CB8C6AB}) (Version: 11.0.2100.60 - Microsoft Corporation)
Microsoft System CLR Types for SQL Server 2012 (x64) (HKLM\...\{F1949145-EB64-4DE7-9D81-E6D27937146C}) (Version: 11.0.2100.60 - Microsoft Corporation)
Microsoft Team Foundation Server 2010 Object Model - ENU (HKLM\...\Microsoft Team Foundation Server 2010 Object Model - ENU) (Version: 10.0.30319 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61187 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61186 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.7523 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.7523 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.7523 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.7523 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Runtime - 10.0.30319 (HKLM\...\{94D70749-4281-39AC-AD90-B56A0E0A402E}) (Version: 10.0.30319 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Runtime - 10.0.30319 (HKLM-x32\...\{6A86554B-8928-30E4-A53C-D7337689134D}) (Version: 10.0.30319 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.24215 (HKLM-x32\...\{e2803110-78b3-4664-a479-3611a381656a}) (Version: 14.0.24215.1 - Microsoft Corporation)
Microsoft Visual C++ vNext Redistributable (x64) - 14.10.24629 (HKLM-x32\...\{c60f2e5a-912d-426c-a6b1-8a80bebab424}) (Version: 14.10.24629.0 - Microsoft Corporation)
Microsoft Visual F# 2.0 Runtime (HKLM-x32\...\{729A3000-BC8A-3B74-BA5D-5068FE12D70C}) (Version: 10.0.30319 - Microsoft Corporation)
Microsoft Visual J# 2.0 Redistributable Package - SE (x64) (HKLM\...\Microsoft Visual J# 2.0 Redistributable Package - SE (x64)) (Version: - Microsoft Corporation)
Microsoft Visual Studio 2010 ADO.NET Entity Framework Tools (HKLM-x32\...\{14DD7530-CCD2-3798-B37D-3839ED6A441C}) (Version: 10.0.30319 - Microsoft Corporation)
Microsoft Visual Studio 2010 Express Prerequisites x64 - ENU (HKLM\...\{BCA26999-EC22-3007-BB79-638913079C9A}) (Version: 10.0.30319 - Microsoft Corporation)
Microsoft Visual Studio 2010 Ultimate - ENU (HKLM-x32\...\Microsoft Visual Studio 2010 Ultimate - ENU) (Version: 10.0.30319 - Microsoft Corporation)
Microsoft Visual Studio Express 2012 for Windows Desktop - ENU (HKLM-x32\...\{e0efdce9-a486-4676-8aa5-65bb08cbf34c}) (Version: 11.0.50727.42 - Microsoft Corporation)
Microsoft Visual Studio Macro Tools (HKLM-x32\...\Microsoft Visual Studio Macro Tools) (Version: 9.0.30729 - Microsoft Corporation)
Mixed In Key 2.5 (HKLM-x32\...\Mixed In Key) (Version: 2.5 - )
Mozilla Firefox 51.0.1 (x86 pt-BR) (HKLM-x32\...\Mozilla Firefox 51.0.1 (x86 pt-BR)) (Version: 51.0.1 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 51.0.1 - Mozilla)
NVIDIA Driver de gráficos 368.69 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 368.69 - NVIDIA Corporation)
NVIDIA Software do sistema PhysX 9.16.0318 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.16.0318 - NVIDIA Corporation)
Overwolf (HKLM-x32\...\Overwolf) (Version: 0.102.217.0 - Overwolf Ltd.)
Pacote de Idiomas do Microsoft .NET Framework 4 Client Profile - Português (Brasil) (HKLM\...\Microsoft .NET Framework 4 Client Profile PTB Language Pack) (Version: 4.0.30319 - Microsoft Corporation)
Pacote de Idiomas do Microsoft .NET Framework 4 Extended - Português (Brasil) (HKLM\...\Microsoft .NET Framework 4 Extended PTB Language Pack) (Version: 4.0.30319 - Microsoft Corporation)
Painel de controle da NVIDIA 368.69 (Version: 368.69 - NVIDIA Corporation) Hidden
PE Explorer 1.99 R6 (HKLM-x32\...\PE Explorer_is1) (Version: 1.99.6 - Heaventools Software)
Pioneer DDJ_WeGO Driver (HKLM-x32\...\Pioneer DDJ_WeGO ASIO) (Version: 1.100.000.001 - Pioneer DJ Corporation.)
Pioneer MIX 64bit Driver (HKLM\...\Pioneer MIX) (Version: 4.2.5.0011 - Pioneer DJ Corporation.)
Prerequisites for SSDT (HKLM-x32\...\{9169C939-ED01-446A-BD0C-29873BAF4E48}) (Version: 11.0.2100.60 - Microsoft Corporation)
Qualcomm Atheros Bluetooth Suite (64) (HKLM\...\{A84A4FB1-D703-48DB-89E0-68B6499D2801}) (Version: 8.0.1.332 - Qualcomm Atheros Communications)
RAR to ZIP Converter (HKLM-x32\...\{F1A6CF54-43BB-4397-B4BD-50C7947FEDAD}_is1) (Version: - rartozipconverter.com)
Realtek Card Reader (HKLM-x32\...\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}) (Version: 10.0.14393.31228 - Realtek Semiconductor Corp.)
REAPER (x64) (HKLM\...\REAPER) (Version: - )
rekordbox 4.2.5 64bit (HKLM\...\Pioneer rekordbox 4.2.5) (Version: 4.2.5.0011 - Pioneer DJ)
Resource Hacker Version 4.5.30 (HKLM-x32\...\ResourceHacker_is1) (Version: - )
Samsung Kies3 (HKLM-x32\...\InstallShield_{88547073-C566-4895-9005-EBE98EA3F7C7}) (Version: 3.2.16084.2 - Samsung Electronics Co., Ltd.)
Samsung Kies3 (x32 Version: 3.2.16084.2 - Samsung Electronics Co., Ltd.) Hidden
Samsung USB Driver for Mobile Phones (HKLM\...\{D0795B21-0CDA-4a92-AB9E-6E92D8111E44}) (Version: 1.5.55.0 - Samsung Electronics Co., Ltd.)
Service Pack 1 for SQL Server 2008 (KB968369) (64-bit) (HKLM\...\KB968369) (Version: 10.1.2531.0 - Microsoft Corporation)
SHIELD Streaming (Version: 7.1.0280 - NVIDIA Corporation) Hidden
SHIELD Wireless Controller Driver (Version: 2.11.4.0 - NVIDIA Corporation) Hidden
SlimDrivers (HKLM-x32\...\{746AB259-6474-4111-8966-1C62F9A6E063}) (Version: 2.3.1 - SlimWare Utilities, Inc.)
Software de dispositivo do Chipset Intel® (x32 Version: 10.1.1.35 - Intel(R) Corporation) Hidden
Sql Server Customer Experience Improvement Program (Version: 10.1.2531.0 - Microsoft Corporation) Hidden
Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)
Suporte para Aplicativos Apple (HKLM-x32\...\{46F044A5-CE8B-4196-984E-5BD6525E361D}) (Version: 2.3.6 - Apple Inc.)
TeamSpeak 3 Client (HKU\S-1-5-21-2765353742-2246920163-2559587968-1000\...\TeamSpeak 3 Client) (Version: 3.1.1 - TeamSpeak Systems GmbH)
TeamViewer 12 (HKLM-x32\...\TeamViewer) (Version: 12.0.72365 - TeamViewer)
Unlocker 1.9.2 (HKLM\...\Unlocker) (Version: 1.9.2 - Cedrick Collomb)
VirtualDJ 8 (HKLM-x32\...\{B7D6C720-CB38-41AA-9804-0AA2090BE1B5}) (Version: 8.2.3573.0 - Atomix Productions)
VirtualDJ LE (DDJ-WeGO) (HKLM-x32\...\{A453FA8D-6BC7-44ED-A391-37E67DEF89E1}) (Version: 7.0.5 - Atomix Productions)
Visual Studio 2010 Prerequisites - English (HKLM\...\{662014D2-0450-37ED-ABAE-157C88127BEB}) (Version: 10.0.30319 - Microsoft Corporation)
Vulkan Run Time Libraries 1.0.11.1 (HKLM\...\VulkanRT1.0.11.1) (Version: 1.0.11.1 - LunarG, Inc.)
WARMODE (HKLM\...\Steam App 391460) (Version: - WARTEAM)
Web Deployment Tool (HKLM\...\{0F37D969-1260-419E-B308-EF7D29ABDE20}) (Version: 1.1.0618 - Microsoft Corporation)
WinRAR 5.40 (64-bit) (HKLM\...\WinRAR archiver) (Version: 5.40.0 - win.rar GmbH)
Zula (HKLM-x32\...\22DF2438-3A2E-4E99-BA0E-3272968F0290_is1) (Version: 1.09-161219.13851 - IDC/Games)
==================== Exame Personalizado CLSID (Whitelisted): ==========================
(Se uma entrada for incluída na fixlist, será removida do Registro. O arquivo não será movido, a menos que seja colocado separadamente.)
CustomCLSID: HKU\S-1-5-21-2765353742-2246920163-2559587968-1000_Classes\CLSID\{820D63D5-8CFF-46DE-86AF-4997DEDD6DB5}\localserver32 -> C:\Windows\system32\igfxEM.exe (Intel Corporation)
==================== Tarefas Agendadas (Whitelisted) =============
(Se uma entrada for incluída na fixlist, será removida do Registro. O arquivo não será movido, a menos que seja colocado separadamente.)
Task: {23DB1965-2802-4F09-AC21-0542020A8007} - System32\Tasks\Overwolf Updater Task => C:\Program Files (x86)\Overwolf\OverwolfUpdater.exe [2017-02-20] (Overwolf LTD)
Task: {25C717A9-D0A9-42C2-83F8-85713A2A1891} - System32\Tasks\{A7856FC7-CFC8-4C15-ABEE-88286CA30338} => Chrome.exe hxxps://ui.skype.com/ui/0/7.33.0.104/pt/abandoninstall?page=tsInstall
Task: {2A8723E6-F30C-47CF-84CE-510B76F9F321} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2017-02-09] (Google Inc.)
Task: {3AA86193-09B5-4DB7-8887-E24C53AFF1C5} - System32\Tasks\{41C11286-C028-48DC-BE6E-4554794CC204} => C:\Users\Poison\Desktop\CD Arrocha 02\DJ DANCE - Pedreira Beach\TeamSpeak3-Client-win64-3.1.1.1.exe [2017-03-01] (TeamSpeak Systems GmbH)
Task: {53C95F81-5B46-420B-90B3-C43984BB421E} - System32\Tasks\{9C6FDBA1-8F3C-450F-A0A7-5429C3039C70} => Chrome.exe hxxps://ui.skype.com/ui/0/7.33.0.104/pt/abandoninstall?page=tsMain
Task: {5D582B49-23B9-4B24-9870-2F19A106E81D} - System32\Tasks\{360D99C2-500E-413E-86B7-3E0181018F64} => D:\Pen Drive Minhas Coisas\Private exe Protector 3.1.4\Private exe Protector.exe [2009-11-07] (SetiSoft (c) Tech)
Task: {5D9A0343-1778-47E7-9209-81C7FC0A9542} - System32\Tasks\{103D2E07-AEC9-4CE4-AE53-AFE69B2F9D2F} => D:\Pen Drive Minhas Coisas\Private exe Protector 3.1.4\Private exe Protector.exe [2009-11-07] (SetiSoft (c) Tech)
Task: {63995717-9040-4ABA-982A-8DD3A477B860} - System32\Tasks\{71A41010-CDFE-4F35-81B0-AF071E4386FF} => D:\Pen Drive Minhas Coisas\Private exe Protector 3.1.4\Private exe Protector.exe [2009-11-07] (SetiSoft (c) Tech)
Task: {85D9E55C-F3CF-4F86-8C13-0195A678FD9B} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe
Task: {887122AE-3706-4AE2-AFCE-2849D49ACDAD} - System32\Tasks\{8581B9CB-8189-4892-AF78-897AB6A7D99E} => Chrome.exe hxxps://www.skype.com/go/downloading?source=lightinstaller&ver=7.33.0.104&LastError=12040
Task: {8EB43A02-E984-4556-B03D-3B3DD461E825} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2017-02-16] (Adobe Systems Incorporated)
Task: {93E6CAEC-9B23-4CF5-9B4B-60C7F6B7FE3A} - System32\Tasks\Adobe Flash Player PPAPI Notifier => C:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_24_0_0_221_pepper.exe [2017-02-16] (Adobe Systems Incorporated)
Task: {9C213622-E230-4092-9474-771162CEE349} - System32\Tasks\CCleanerSkipUAC => D:\AREA 2\Desktop\CCleaner\CCleaner.exe [2016-03-11] (Piriform Ltd)
Task: {A3FCF0C7-943C-4EF6-88F8-EF204911D78D} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2017-02-09] (Google Inc.)
Task: {A564E3FF-87BD-4AA8-BD88-1BA5BA784094} - System32\Tasks\{73D6050E-97CF-42FB-8256-36E690B4FC80} => D:\Pen Drive Minhas Coisas\Private exe Protector 3.1.4\Private exe Protector.exe [2009-11-07] (SetiSoft (c) Tech)
Task: {C751BE32-0DB3-450C-92D4-E68A71AA314D} - System32\Tasks\{1336AE0A-4393-430F-B780-19429C886509} => C:\Users\Poison\AppData\Local\TeamSpeak 3 Client\ts3client_win64.exe [2017-02-21] (TeamSpeak Systems GmbH)
Task: {D18B1D60-2AFF-4A90-8836-05C6E350E50D} - System32\Tasks\{55F291B5-FA16-48CB-B7E8-5A91DE15030F} => D:\Pen Drive Minhas Coisas\Private exe Protector 3.1.4\Private exe Protector.exe [2009-11-07] (SetiSoft (c) Tech)
Task: {E4E0A949-1EEE-469C-B0ED-CEBA50DE1D02} - System32\Tasks\AVAST Software\Avast settings backup => C:\Program Files\Common Files\AV\avast! Antivirus\backup.exe [2017-02-09] (AVAST Software)
Task: {EA4A780A-8AB3-45C8-B209-AE906B3A9638} - System32\Tasks\{73F118F5-95EA-47A8-BE99-F29C72349FD9} => pcalua.exe -a "E:\Programas e jogos\Directx 9.0.exe" -d "E:\Programas e jogos"
Task: {F9E9E6B5-D650-410B-9DC0-C414A9801191} - System32\Tasks\{737451F1-37EE-4A86-87DE-0BB442C371A6} => C:\Users\Poison\AppData\Local\TeamSpeak 3 Client\ts3client_win64.exe [2017-02-21] (TeamSpeak Systems GmbH)
Task: {FF09A3EB-A44C-4C78-955E-6F5FE4DEE6D1} - System32\Tasks\Avast Emergency Update => C:\Program Files\AVAST Software\Avast\AvEmUpdate.exe
(Se uma entrada for incluída na fixlist, o arquivo da tarefa (.job) será movido. O arquivo que está sendo executado pela tarefa não será movido.)
Task: C:\Windows\Tasks\Adobe Flash Player PPAPI Notifier.job => C:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_24_0_0_221_pepper.exe
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
==================== Atalhos =============================
(As entradas podem ser listadas para serem restauradas ou removidas.)
Shortcut: C:\Users\Poison\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\VirtualDJ\Online Help.lnk -> hxxp://www.virtualdj.com/wiki
Shortcut: C:\Users\Poison\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\VirtualDJ\www.virtualdj.com.lnk -> hxxp://www.virtualdj.com
==================== Módulos Carregados (Whitelisted) ==============
2017-02-08 04:17 - 2016-06-29 15:37 - 00134712 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll
2014-08-26 19:34 - 2014-08-26 19:34 - 00103040 _____ () C:\Program Files (x86)\Dell\Dell Unified Wireless Suite\ihvs\AthIHVManager.dll
2014-08-26 19:35 - 2014-08-26 19:35 - 00113792 _____ () C:\Program Files (x86)\Dell\Dell Unified Wireless Suite\ihvs\AthIhvWlanNoise.dll
2014-08-26 19:35 - 2014-08-26 19:35 - 00188032 _____ () C:\Program Files (x86)\Dell\Dell Unified Wireless Suite\ihvs\Hotspot20Ext.dll
2017-03-06 08:47 - 2016-12-15 07:37 - 00020208 _____ () C:\Windows\system32\spool\PRTPROCS\x64\TeamViewer_PrintProcessor.dll
2017-02-08 04:18 - 2016-06-29 19:44 - 00367552 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\MessageBus.dll
2017-02-08 04:18 - 2016-06-29 19:44 - 01147328 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\libprotobuf.dll
2017-02-08 04:18 - 2016-06-29 19:44 - 03611584 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\Poco.dll
2017-02-08 04:18 - 2016-06-29 19:44 - 00288192 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamBase.dll
2014-08-26 19:33 - 2014-08-26 19:33 - 00016512 _____ () C:\Program Files (x86)\Dell\Dell Unified Wireless Suite\awic\AWiCCust.dll
2017-02-08 04:18 - 2016-06-29 19:44 - 02665920 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\Plugins\NSS\NvMdnsPlugin.dll
2017-02-08 04:18 - 2016-06-29 19:44 - 01988544 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\Plugins\NSS\NvPortForwardPlugin.dll
2017-02-08 04:18 - 2016-06-29 19:44 - 01840576 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\Plugins\NSS\RtspPlugin.dll
2017-02-08 04:18 - 2016-06-29 19:44 - 00207296 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\RtspServer.dll
2014-08-26 19:35 - 2014-08-26 19:35 - 00643712 _____ () C:\Program Files (x86)\Dell\Dell Unified Wireless Suite\spectral\SocketServer.exe
2017-02-08 04:18 - 2016-06-29 19:44 - 00034240 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\boost_system-vc120-mt-1_58.dll
2017-02-08 04:18 - 2016-06-29 19:44 - 00920000 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\boost_regex-vc120-mt-1_58.dll
2017-02-08 04:18 - 2016-06-29 19:44 - 00018880 _____ () C:\Program Files (x86)\NVIDIA Corporation\Update Core\detoured.dll
2017-02-09 01:39 - 2017-02-01 06:01 - 01870168 _____ () C:\Program Files (x86)\Google\Chrome\Application\56.0.2924.87\libglesv2.dll
2017-02-09 01:39 - 2017-02-01 06:01 - 00085848 _____ () C:\Program Files (x86)\Google\Chrome\Application\56.0.2924.87\libegl.dll
2015-10-16 05:14 - 2015-10-16 05:14 - 01243936 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\ACE.dll
==================== Alternate Data Streams (Whitelisted) =========
(Se uma entrada for incluída na fixlist, somente o ADS será removido.)
==================== Modo de Segurança (Whitelisted) ===================
(Se uma entrada for incluída na fixlist, será removida do Registro. O valor "AlternateShell" será restaurado.)
==================== Associação (Whitelisted) ===============
(Se uma entrada for incluída na fixlist, o ítem no Registro será restaurado para o padrão ou removido.)
==================== Internet Explorer confiável/restrito ===============
(Se uma entrada for incluída na fixlist, será removida do Registro.)
IE trusted site: HKU\S-1-5-21-2765353742-2246920163-2559587968-1000\...\localhost -> localhost
==================== Hosts Conteúdo: ===============================
(Se necessário, a diretiva Hosts: pode ser incluída na fixlist para redefinir o Hosts.)
2009-07-13 23:34 - 2017-03-05 02:32 - 00000027 ____A C:\Windows\system32\Drivers\etc\hosts
127.0.0.1 localhost
==================== Outras Áreas ============================
(Atualmente não há nenhuma correção automática para esta seção.)
HKU\S-1-5-21-2765353742-2246920163-2559587968-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\Poison\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
DNS Servers: 192.168.1.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Firewall do Windows está habilitado.
==================== MSCONFIG/TASK MANAGER ítens desabilitados ==
MSCONFIG\Services: ss_conn_service => 2
MSCONFIG\Services: TheScreenSnapshotService => 2
MSCONFIG\Services: WCAssistantService => 2
==================== Regras do Firewall (Whitelisted) ===============
(Se uma entrada for incluída na fixlist, será removida do Registro. O arquivo não será movido, a menos que seja colocado separadamente.)
FirewallRules: [TCP Query User{76E388B0-6D42-458F-BFA7-E3F65BDD1E33}C:\program files (x86)\google\chrome\application\chrome.exe] => (Allow) C:\program files (x86)\google\chrome\application\chrome.exe
FirewallRules: [UDP Query User{3A5E4369-4405-4F35-9ABC-F653D4F0D08D}C:\program files (x86)\google\chrome\application\chrome.exe] => (Allow) C:\program files (x86)\google\chrome\application\chrome.exe
FirewallRules: [TCP Query User{9AF666CA-44A1-4ABE-8453-65FE66B5F060}C:\users\poison\desktop\cd arrocha 02\dj dance - pedreira beach\skypeportable\app\skype\phone\skype.exe] => (Allow) C:\users\poison\desktop\cd arrocha 02\dj dance - pedreira beach\skypeportable\app\skype\phone\skype.exe
FirewallRules: [UDP Query User{13FE6811-31D9-46B4-A725-D16F4F21884F}C:\users\poison\desktop\cd arrocha 02\dj dance - pedreira beach\skypeportable\app\skype\phone\skype.exe] => (Allow) C:\users\poison\desktop\cd arrocha 02\dj dance - pedreira beach\skypeportable\app\skype\phone\skype.exe
FirewallRules: [{5862C4BF-3214-4BB5-B8A8-C3BAC049DF1C}] => (Allow) C:\Program Files\BlackShot\BlackShot\System\blackshot_BE.exe
FirewallRules: [{1B24E797-E707-4CE2-B91C-796D9798F443}] => (Allow) C:\Program Files\BlackShot\BlackShot\System\blackshot_BE.exe
FirewallRules: [{0E6B5848-97A8-4B2D-9123-1251B47A450B}] => (Allow) C:\Program Files\BlackShot\BlackShot\System\blackshot.exe
FirewallRules: [{610A26B0-5530-473F-A491-120AB215064A}] => (Allow) C:\Program Files\BlackShot\BlackShot\System\blackshot.exe
FirewallRules: [TCP Query User{4E8C28F6-77F7-43E3-A749-1E624DDFE97C}C:\program files (x86)\cheat engine 6.6\cheatengine-x86_64.exe] => (Allow) C:\program files (x86)\cheat engine 6.6\cheatengine-x86_64.exe
FirewallRules: [UDP Query User{DFEBA339-93EC-442D-A295-BFFA65D43A22}C:\program files (x86)\cheat engine 6.6\cheatengine-x86_64.exe] => (Allow) C:\program files (x86)\cheat engine 6.6\cheatengine-x86_64.exe
FirewallRules: [{656CE9E5-09D6-4111-B6BE-6CB2904CBE80}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe
FirewallRules: [{3AD38F98-FA3C-45BC-87A8-A8D831630766}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe
FirewallRules: [{FBE1603B-5D71-440B-8AB9-B064F0B3A0DD}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
FirewallRules: [{8667F643-031E-4A40-BB3B-548D19E19B72}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
FirewallRules: [{68B2F7B7-B368-4569-B230-893F86408486}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{9E4EC62F-0079-4DBB-9553-5E71BD327D2E}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{0177B21C-746C-486A-8E67-C612FACD4A2B}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe
FirewallRules: [{5AB53B43-6E65-44B0-803B-0170BB4A7A0B}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe
FirewallRules: [{43925213-3F87-478D-9E6B-F468A0FFD782}] => (Allow) C:\Program Files\PlayOne\BlackShot_SEA\BlackShot\system\BlackShot.exe
FirewallRules: [{D5058A2D-17B2-4101-AC8C-DED3FE851240}] => (Allow) C:\Program Files\PlayOne\BlackShot_SEA\BlackShot\system\BlackShot.exe
FirewallRules: [{B562FE0A-D9FD-4C14-B24C-B0EEA5E3257F}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\BlackShot\system\BlackShot.exe
FirewallRules: [{C5D11A3E-BA32-4B43-9239-54E887313815}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\BlackShot\system\BlackShot.exe
FirewallRules: [{96F86C2D-E0D1-4E06-8127-7F3E5E191562}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\WARMODE\warmode.exe
FirewallRules: [{06BC76E4-00E7-4D3C-80B9-BA29A0B081CD}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\WARMODE\warmode.exe
==================== Pontos de Restauração =========================
02-03-2017 15:02:05 Revo Uninstaller's restore point - Skype™ 7.33
02-03-2017 15:02:48 Removed Skype™ 7.33
05-03-2017 02:22:18 ComboFix created restore point
==================== Dispositivos Apresentando Falhas No Gerenciador =============
Name: Realtek PCIe FE Family Controller
Description: Realtek PCIe FE Family Controller
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Realtek
Service: RTL8167
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.
Name: Adaptador de Miniporta WiFi Virtual da Microsoft
Description: Adaptador de Miniporta WiFi Virtual da Microsoft
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: vwifimp
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.
Name: Microsoft Virtual WiFi Miniport Adapter #2
Description: Adaptador de Miniporta WiFi Virtual da Microsoft
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: vwifimp
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.
==================== Erros no Log de eventos: =========================
Erros em Aplicativos:
==================
Error: (03/08/2017 02:55:19 AM) (Source: ESENT) (EventID: 412) (User: )
Description: wuaueng.dll (560) SUS20ClientDataStore: Não é possível ler o cabeçalho do arquivo de log C:\Windows\SoftwareDistribution\DataStore\Logs\edb.log. Erro -546.
Error: (03/08/2017 02:55:19 AM) (Source: ESENT) (EventID: 412) (User: )
Description: wuaueng.dll (560) SUS20ClientDataStore: Não é possível ler o cabeçalho do arquivo de log C:\Windows\SoftwareDistribution\DataStore\Logs\edb.log. Erro -546.
Error: (03/08/2017 02:50:23 AM) (Source: ESENT) (EventID: 412) (User: )
Description: wuaueng.dll (560) SUS20ClientDataStore: Não é possível ler o cabeçalho do arquivo de log C:\Windows\SoftwareDistribution\DataStore\Logs\edb.log. Erro -546.
Error: (03/08/2017 02:50:23 AM) (Source: ESENT) (EventID: 412) (User: )
Description: wuaueng.dll (560) SUS20ClientDataStore: Não é possível ler o cabeçalho do arquivo de log C:\Windows\SoftwareDistribution\DataStore\Logs\edb.log. Erro -546.
Error: (03/08/2017 02:50:23 AM) (Source: ESENT) (EventID: 412) (User: )
Description: wuaueng.dll (560) SUS20ClientDataStore: Não é possível ler o cabeçalho do arquivo de log C:\Windows\SoftwareDistribution\DataStore\Logs\edb.log. Erro -546.
Error: (03/08/2017 02:50:23 AM) (Source: ESENT) (EventID: 412) (User: )
Description: wuaueng.dll (560) SUS20ClientDataStore: Não é possível ler o cabeçalho do arquivo de log C:\Windows\SoftwareDistribution\DataStore\Logs\edb.log. Erro -546.
Error: (03/08/2017 02:50:23 AM) (Source: ESENT) (EventID: 412) (User: )
Description: wuaueng.dll (560) SUS20ClientDataStore: Não é possível ler o cabeçalho do arquivo de log C:\Windows\SoftwareDistribution\DataStore\Logs\edb.log. Erro -546.
Error: (03/08/2017 02:50:23 AM) (Source: ESENT) (EventID: 412) (User: )
Description: wuaueng.dll (560) SUS20ClientDataStore: Não é possível ler o cabeçalho do arquivo de log C:\Windows\SoftwareDistribution\DataStore\Logs\edb.log. Erro -546.
Error: (03/08/2017 02:50:23 AM) (Source: ESENT) (EventID: 412) (User: )
Description: wuaueng.dll (560) SUS20ClientDataStore: Não é possível ler o cabeçalho do arquivo de log C:\Windows\SoftwareDistribution\DataStore\Logs\edb.log. Erro -546.
Error: (03/08/2017 02:50:23 AM) (Source: ESENT) (EventID: 412) (User: )
Description: wuaueng.dll (560) SUS20ClientDataStore: Não é possível ler o cabeçalho do arquivo de log C:\Windows\SoftwareDistribution\DataStore\Logs\edb.log. Erro -546.
Erros de Sistema:
=============
Error: (03/08/2017 02:43:39 AM) (Source: Service Control Manager) (EventID: 7026) (User: )
Description: Falha ao carregar o(s) seguinte(s) driver(s) de início do sistema ou de inicialização:
aswblog
cdrom
Error: (03/08/2017 02:36:15 AM) (Source: DCOM) (EventID: 10010) (User: )
Description: O servidor {9B1F122C-2982-4E91-AA8B-E071D54F2A4D} não se registrou com o DCOM dentro do tempo limite requerido.
Error: (03/06/2017 01:23:54 PM) (Source: Service Control Manager) (EventID: 7026) (User: )
Description: Falha ao carregar o(s) seguinte(s) driver(s) de início do sistema ou de inicialização:
aswblog
cdrom
Error: (03/06/2017 11:33:19 AM) (Source: Service Control Manager) (EventID: 7026) (User: )
Description: Falha ao carregar o(s) seguinte(s) driver(s) de início do sistema ou de inicialização:
aswblog
cdrom
Error: (03/06/2017 11:32:25 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Não foi possível iniciar o serviço SQL Server (SQLEXPRESS) devido ao seguinte erro:
O serviço não respondeu à requisição de início ou controle em tempo hábil.
Error: (03/06/2017 11:32:25 AM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Tempo limite esgotado (30000 milissegundos) ao aguardar a conexão do serviço SQL Server (SQLEXPRESS).
Error: (03/06/2017 03:25:03 AM) (Source: Service Control Manager) (EventID: 7026) (User: )
Description: Falha ao carregar o(s) seguinte(s) driver(s) de início do sistema ou de inicialização:
aswblog
cdrom
Error: (03/06/2017 03:07:57 AM) (Source: Service Control Manager) (EventID: 7026) (User: )
Description: Falha ao carregar o(s) seguinte(s) driver(s) de início do sistema ou de inicialização:
aswblog
cdrom
Error: (03/05/2017 12:14:34 PM) (Source: Disk) (EventID: 11) (User: )
Description: O driver detectou um erro de controlador em \Device\Harddisk1\DR1.
Error: (03/05/2017 02:44:33 AM) (Source: Service Control Manager) (EventID: 7026) (User: )
Description: Falha ao carregar o(s) seguinte(s) driver(s) de início do sistema ou de inicialização:
aswblog
cdrom
CodeIntegrity:
===================================
Date: 2017-03-05 02:32:25.826
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume3\ComboFix\catchme.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2017-03-05 02:32:25.823
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume3\ComboFix\catchme.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2017-03-05 02:32:25.816
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume3\ComboFix\catchme.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2017-03-05 02:32:25.808
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume3\ComboFix\catchme.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2017-03-02 20:30:50.667
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume3\ComboFix\catchme.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2017-03-02 20:30:50.667
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume3\ComboFix\catchme.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2017-03-02 20:30:50.667
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume3\ComboFix\catchme.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2017-03-02 20:30:50.667
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume3\ComboFix\catchme.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2017-03-02 08:06:45.077
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume3\ComboFix\catchme.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2017-03-02 08:06:45.069
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume3\ComboFix\catchme.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
==================== Informações da Memória ===========================
Processador: Intel(R) Core(TM) i5-3337U CPU @ 1.80GHz
Percentagem de memória em uso: 63%
RAM física total: 6009.08 MB
RAM física disponível: 2210.52 MB
Virtual Total: 12016.31 MB
Virtual disponível: 7627.75 MB
==================== Drives ================================
Drive c: () (Fixed) (Total:273.36 GB) (Free:110.56 GB) NTFS
Drive d: (Meus Programas) (Fixed) (Total:191.89 GB) (Free:53.92 GB) NTFS
==================== MBR & Tabela de Partições ==================
========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 465.8 GB) (Disk ID: B34B6422)
Partition 1: (Active) - (Size=500 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=273.4 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=191.9 GB) - (Type=OF Extended)
==================== Fim de Addition.txt ============================