Format du document : text/plain
Prévisualisation
Resultado do exame Adicional Farbar Recovery Scan Tool (x64) Versão: 15-03-2017
Executado por Eduardo Araujo (18-03-2017 19:38:59)
Executando a partir de C:\Users\Eduardo Araujo\Desktop
Windows 10 Home Single Language Versão 1607 (X64) (2016-08-11 15:45:33)
Modo da Inicialização: Normal
==========================================================
==================== Contas: =============================
Administrador (S-1-5-21-1148400818-420560846-2234732976-500 - Administrator - Disabled)
Convidado (S-1-5-21-1148400818-420560846-2234732976-501 - Limited - Disabled)
DefaultAccount (S-1-5-21-1148400818-420560846-2234732976-503 - Limited - Disabled)
Eduardo Araujo (S-1-5-21-1148400818-420560846-2234732976-1001 - Administrator - Enabled) => C:\Users\Eduardo Araujo
==================== Central de Segurança ========================
(Se uma entrada for incluÃda na fixlist, será removida.)
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AV: AVG Antivirus (Enabled - Up to date) {4D41356F-32AD-7C42-C820-63775EE4F413}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: AVG Antivirus (Enabled - Up to date) {F620D48B-1497-73CC-F290-58052563BEAE}
==================== Programas Instalados ======================
(Somente os programas adwares com a indicação "Oculto" podem ser adicionados à fixlist para desocultá-los. Os programas adwares devem ser desinstalados manualmente.)
µTorrent (HKU\S-1-5-21-1148400818-420560846-2234732976-1001\...\uTorrent) (Version: 3.4.9.43388 - BitTorrent Inc.)
Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 3.3.0.3650 - Adobe Systems Incorporated)
Adobe Flash Player 25 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 25.0.0.127 - Adobe Systems Incorporated)
Adobe Photoshop CS6 (HKLM-x32\...\Adobe Photoshop CS6) (Version: 13.0.0.0 - © The Computer Guy Tony)
AVG (HKLM\...\AvgZen) (Version: 1.162.2.62416 - AVG Technologies)
AVG (Version: 1.162.1 - AVG Technologies) Hidden
AVG PC TuneUp (HKLM-x32\...\AVG PC TuneUp) (Version: 16.74.2.60831 - AVG Technologies)
AVG PC TuneUp (x32 Version: 16.74.1 - AVG Technologies) Hidden
AVG Protection (HKLM-x32\...\AVG Antivirus) (Version: 17.2.3008 - AVG Technologies)
AviSynth 2.5 (HKLM-x32\...\AviSynth) (Version: - )
Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.)
Cisco EAP-FAST Module (HKLM-x32\...\{64BF0187-F3D2-498B-99EA-163AF9AE6EC9}) (Version: 2.2.14 - Cisco Systems, Inc.)
Cisco LEAP Module (HKLM-x32\...\{AF312B06-5C5C-468E-89B3-BE6DE2645722}) (Version: 1.0.19 - Cisco Systems, Inc.)
Cisco PEAP Module (HKLM-x32\...\{0A4EF0E6-A912-4CDE-A7F3-6E56E7C13A2F}) (Version: 1.1.6 - Cisco Systems, Inc.)
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
DAEMON Tools Lite (HKLM\...\DAEMON Tools Lite) (Version: 10.1.0.0074 - Disc Soft Ltd)
DriverSetupUtility (HKLM\...\{2B51C83A-465D-4EA9-9CDC-1ED95ED09AC6}) (Version: 1.00.3011 - Acer Incorporated)
Facebook Video Calling 3.1.0.521 (HKLM-x32\...\{2091F234-EB58-4B80-8C96-8EB78C808CF7}) (Version: 3.1.521 - Skype Limited)
FMW 1 (Version: 1.172.2 - AVG Technologies) Hidden
Galeria de Fotos (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 56.0.2924.87 - Google Inc.)
Google Update Helper (x32 Version: 1.3.32.7 - Google Inc.) Hidden
IMVU Avatar Chat Software (HKU\S-1-5-21-1148400818-420560846-2234732976-1001\...\IMVU Avatar chat client software BETA) (Version: - )
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 8.1.0.1252 - Intel Corporation)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 10.18.10.4276 - Intel Corporation)
Intel(R) Rapid Storage Technology (HKLM-x32\...\{3E29EE6C-963A-4aae-86C1-DC237C4A49FC}) (Version: 11.6.0.1030 - Intel Corporation)
Intel(R) SDK for OpenCL - CPU Only Runtime Package (HKLM-x32\...\{FCB3772C-B7D0-4933-B1A9-3707EBACC573}) (Version: 2.0.0.37149 - Intel Corporation)
Intel(R) Update Manager (HKLM-x32\...\{B991A1BC-DE0F-41B3-9037-B2F948F706EC}) (Version: 3.1.1228 - Intel Corporation)
iVIDI Plugin 1.3 (HKLM-x32\...\iVIDI Plugin) (Version: 1.3 - iVIDI Plugin, Inc.) <==== ATENÃÃO
Java 8 Update 121 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F32180121F0}) (Version: 8.0.1210.13 - Oracle Corporation)
Microsoft Office (HKLM-x32\...\{90150000-0138-0409-0000-0000000FF1CE}) (Version: 15.0.4420.1017 - Microsoft Corporation)
Microsoft OneDrive (HKU\S-1-5-21-1148400818-420560846-2234732976-1001\...\OneDriveSetup.exe) (Version: 17.3.6798.0207 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Movie Maker (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Movie Mode (HKLM-x32\...\MovieMode) (Version: 2.7.33 - GenTechnologies Apps, LLC) <==== ATENÃÃO
Mozilla Firefox 52.0 (x86 pt-BR) (HKLM-x32\...\Mozilla Firefox 52.0 (x86 pt-BR)) (Version: 52.0 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 52.0.0.6270 - Mozilla)
MSXML 4.0 SP3 Parser (KB2758694) (HKLM-x32\...\{1D95BA90-F4F8-47EC-A882-441C99D30C1E}) (Version: 4.30.2117.0 - Microsoft Corporation)
NARUTO SHIPPUDEN: Ultimate Ninja STORM 3 Full Burst (HKLM-x32\...\TkFSVVRPU0hJUFBVREVOVWx0aW1hdGVOaW5qYVNUT1JNM0Z1~D4302771_is1) (Version: 1 - )
PhotoScape (HKLM-x32\...\PhotoScape) (Version: - )
Priston Tale 2 version 1.2.1 (HKLM-x32\...\{AE0FE7EB-B148-421C-9E94-D78FEC90D3D4}_is1) (Version: 1.2.1 - priston 2)
PunkBuster Services (HKLM-x32\...\PunkBusterSvc) (Version: 0.991 - Even Balance, Inc.)
RealDownloader (x32 Version: 18.1.0.1233 - RealNetworks, Inc.) Hidden
RealDownloader (x32 Version: 18.1.4.144 - RealNetworks) Hidden
RealNetworks - Microsoft Visual C++ 2008 Runtime (x32 Version: 9.0 - RealNetworks, Inc) Hidden
RealNetworks - Microsoft Visual C++ 2010 Runtime (Version: 10.0 - RealNetworks, Inc) Hidden
RealNetworks - Microsoft Visual C++ 2010 Runtime (x32 Version: 10.0 - RealNetworks, Inc) Hidden
RealPlayer Cloud (HKLM-x32\...\RealPlayer 17.0) (Version: 17.0.12 - RealNetworks)
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 10.1.505.2015 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7535 - Realtek Semiconductor Corp.)
Realtek USB 2.0 Card Reader (HKLM-x32\...\{96AE7E41-E34E-47D0-AC07-1091A8127911}) (Version: 6.2.8400.30137 - Realtek Semiconductor Corp.)
REALTEK Wireless LAN Driver (HKLM-x32\...\{9DAABC60-A5EF-41FF-B2B9-17329590CD5}) (Version: 1.00.0208 - REALTEK Semiconductor Corp.)
RealTimes (RealPlayer) (HKLM-x32\...\RealPlayer 18.1) (Version: 18.1.0 - RealNetworks)
RealUpgrade 1.1 (x32 Version: 1.1.0 - RealNetworks, Inc.) Hidden
TeamSpeak 3 Client (HKLM-x32\...\TeamSpeak 3 Client) (Version: 3.0.19 - TeamSpeak Systems GmbH)
TouchPadCtrlSetup2.4 (HKLM-x32\...\InstallShield_{5CBC3702-8747-4575-9785-659248BB7BB3}) (Version: 2.4 - TPCtrl)
TouchPadCtrlSetup2.4 (x32 Version: 2.4 - TPCtrl) Hidden
Unity Web Player (HKU\S-1-5-21-1148400818-420560846-2234732976-1001\...\UnityWebPlayer) (Version: 4.5.1f3 - Unity Technologies ApS)
UpdateService (x32 Version: 1.0.0 - RealNetworks, Inc.) Hidden
Video Downloader (x32 Version: 1.2.0 - RealNetworks) Hidden
Visual Studio 2012 x64 Redistributables (HKLM\...\{8C775E70-A791-4DA8-BCC3-6AB7136F4484}) (Version: 14.0.0.1 - AVG Technologies)
Visual Studio 2012 x86 Redistributables (HKLM-x32\...\{98EFF19A-30AB-4E4B-B943-F06B1C63EBF8}) (Version: 14.0.0.1 - AVG Technologies CZ, s.r.o.)
VLC media player (HKLM-x32\...\VLC media player) (Version: 2.2.4 - VideoLAN)
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3505.0912 - Microsoft Corporation)
WinPcap 4.1.2 (HKLM-x32\...\WinPcapInst) (Version: 4.1.0.2001 - CACE Technologies)
WinRAR 5.11 (32-bit) (HKLM-x32\...\WinRAR archiver) (Version: 5.11.0 - win.rar GmbH)
==================== Exame Personalizado CLSID (Whitelisted): ==========================
(Se uma entrada for incluÃda na fixlist, será removida do Registro. O arquivo não será movido, a menos que seja colocado separadamente.)
CustomCLSID: HKU\S-1-5-21-1148400818-420560846-2234732976-1001_Classes\CLSID\{00020420-0000-0000-C000-000000000046}\InprocServer32 -> C:\WINDOWS\system32\oleaut32.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1148400818-420560846-2234732976-1001_Classes\CLSID\{00020421-0000-0000-C000-000000000046}\InprocServer32 -> C:\WINDOWS\system32\oleaut32.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1148400818-420560846-2234732976-1001_Classes\CLSID\{00020422-0000-0000-C000-000000000046}\InprocServer32 -> C:\WINDOWS\system32\oleaut32.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1148400818-420560846-2234732976-1001_Classes\CLSID\{00020423-0000-0000-C000-000000000046}\InprocServer32 -> C:\WINDOWS\system32\oleaut32.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1148400818-420560846-2234732976-1001_Classes\CLSID\{00020424-0000-0000-C000-000000000046}\InprocServer32 -> C:\WINDOWS\system32\oleaut32.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1148400818-420560846-2234732976-1001_Classes\CLSID\{00020425-0000-0000-C000-000000000046}\InprocServer32 -> C:\WINDOWS\system32\oleaut32.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1148400818-420560846-2234732976-1001_Classes\CLSID\{0783EB25-59F8-4F02-B6B0-F1D4349F0000}\InprocServer32 -> C:\Users\Eduardo Araujo\AppData\Local\GAS Tecnologia\GBBD\npsf_bb_64.dll => Nenhum Arquivo
CustomCLSID: HKU\S-1-5-21-1148400818-420560846-2234732976-1001_Classes\CLSID\{0783EB25-59F8-4F02-B6B1-F1D4349F0000}\InprocServer32 -> C:\Users\Eduardo Araujo\AppData\Local\GAS Tecnologia\GBBD\npsf_bb_64.dll => Nenhum Arquivo
CustomCLSID: HKU\S-1-5-21-1148400818-420560846-2234732976-1001_Classes\CLSID\{820D63D5-8CFF-46DE-86AF-4997DEDD6DB5}\localserver32 -> C:\WINDOWS\system32\igfxEM.exe (Intel Corporation)
==================== Tarefas Agendadas (Whitelisted) =============
(Se uma entrada for incluÃda na fixlist, será removida do Registro. O arquivo não será movido, a menos que seja colocado separadamente.)
Task: {012F9327-9868-4A5A-A36F-BA19BDFBD01D} - System32\Tasks\{0CEA5097-9C4B-4E28-865E-3CB0995DE7F9} => Firefox.exe hxxp://ui.skype.com/ui/0/7.12.0.101/pt/abandoninstall?page=tsProgressBar
Task: {048834FD-7A01-47E1-9DAE-9BE60BE59E06} - System32\Tasks\Norton Anti-Theft\Norton Error Processor => C:\Program Files (x86)\Norton Anti-Theft\Engine\1.10.0.9\SymErr.exe
Task: {0530637F-933E-4EDC-8019-9A2DA17D25AF} - System32\Tasks\{22DB2A33-4CB1-47F7-8577-D0AC524E0D66} => Iexplore.exe hxxp://ui.skype.com/ui/0/6.16.0.105/pt/abandoninstall?page=tsProgressBar
Task: {060E9ADC-45C3-4EEA-A0CF-173C2BBD43EC} - System32\Tasks\{54B2870D-89E7-4BA6-8AB6-16A3DEC77478} => pcalua.exe -a "C:\Users\Eduardo Araujo\Downloads\_ISDel.exe" -d "C:\Users\Eduardo Araujo\Downloads"
Task: {0BFAA468-1928-4A3C-860F-FCA06F93C62A} - System32\Tasks\Antivirus Emergency Update => C:\Program Files (x86)\AVG\Antivirus\AvEmUpdate.exe [2017-03-08] (AVG Technologies CZ, s.r.o.)
Task: {0F652A5A-0CEA-455C-8EED-F7AEBA4A8FD5} - System32\Tasks\IUM-F1E24CA0-B63E-4F13-A9E3-4ADE3BFF3473-Logon => C:\Program Files (x86)\Intel\Intel(R) Update Manager\bin\iumsvc.exe [2015-09-25] (Intel Corporation)
Task: {134D5A3E-66CE-400F-9913-FCFBA7EBACC5} - System32\Tasks\RNUpgradeHelperLogonPrompt_Eduardo Araujo => C:\Users\Eduardo Araujo\AppData\Roaming\Real\Update\UpgradeHelper\RealPlayer\14.06\agent\rnupgagent.exe [2017-03-15] (RealNetworks, Inc.)
Task: {1EDF2D29-BEC1-4559-8379-8E722F3B31A1} - System32\Tasks\ACC => C:\Program Files\DriverSetupUtility\FUB\FUB_Send.bat [2015-06-22] () <==== ATENÃÃO
Task: {250A963C-BE1D-4F57-978D-CD65DBC41043} - \Microsoft\Windows\Setup\GWXTriggers\Time-5d -> Nenhum Arquivo <==== ATENÃÃO
Task: {2782A954-1A79-4108-9603-467CA853D335} - \WPD\SqmUpload_S-1-5-21-1148400818-420560846-2234732976-1001 -> Nenhum Arquivo <==== ATENÃÃO
Task: {2945243D-197A-47CA-B793-E1E9092C1360} - System32\Tasks\Norton Anti-Theft\Norton Error Analyzer => C:\Program Files (x86)\Norton Anti-Theft\Engine\1.10.0.9\SymErr.exe
Task: {2E1B126F-D82F-4C2B-89CC-44AC4948F793} - System32\Tasks\FacebookUpdateTaskUserS-1-5-21-1148400818-420560846-2234732976-1001Core => C:\Users\Eduardo Araujo\AppData\Local\Facebook\Update\FacebookUpdate.exe [2013-11-04] (Facebook Inc.)
Task: {31028E6E-4C37-4457-BE34-AB5E11E02EC3} - System32\Tasks\RealDownloader Update Check => C:\Program Files (x86)\RealNetworks\RealDownloader\downloader2.exe [2016-07-05] ()
Task: {352E6CA0-7314-4DF4-89C4-682368D80D57} - System32\Tasks\Microsoft\Windows\Workplace Join\Automatic-Workplace-Join => %SystemRoot%\System32\AutoWorkplace.exe
Task: {36AF4902-029D-490C-B0FF-A4465A2EEFFA} - System32\Tasks\MySearchDial => C:\Users\EDUARD~1\AppData\Roaming\MYSEAR~1\UPDATE~1\UPDATE~1.EXE <==== ATENÃÃO
Task: {374FCEDE-92FF-4918-B0D1-D924EC731302} - System32\Tasks\FacebookUpdateTaskUserS-1-5-21-1148400818-420560846-2234732976-1001UA => C:\Users\Eduardo Araujo\AppData\Local\Facebook\Update\FacebookUpdate.exe [2013-11-04] (Facebook Inc.)
Task: {3F16D037-BECD-41BE-B28A-46D9D7CF5C7C} - \Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B -> Nenhum Arquivo <==== ATENÃÃO
Task: {40452216-5269-4417-AADF-6DDAB3504AB2} - System32\Tasks\SaveSenseLiveUpdateTaskMachineCore => C:\Program Files (x86)\SaveSenseLive\Update\SaveSenseLive.exe <==== ATENÃÃO
Task: {49B4D0DE-70B8-4907-AA51-AF0A68D616E3} - System32\Tasks\RealDownloaderRealUpgradeLogonTaskS-1-5-21-1148400818-420560846-2234732976-1001 => C:\Program Files (x86)\RealNetworks\RealDownloader\RealUpgrade.exe [2015-09-16] (RealNetworks, Inc.)
Task: {51EE1A46-BE1C-4537-812C-A63E6F67338F} - System32\Tasks\SlimCleaner Plus (Scheduled Scan - Eduardo Araujo) => C:\Program Files\SlimCleaner Plus\SlimCleanerPlus.exe
Task: {5F073AD1-0DAF-41C4-8105-106CAC45AF17} - System32\Tasks\RNUpgradeHelperResumePrompt_Eduardo Araujo => C:\Users\Eduardo Araujo\AppData\Roaming\Real\Update\UpgradeHelper\RealPlayer\14.06\agent\rnupgagent.exe [2017-03-15] (RealNetworks, Inc.)
Task: {61FA3451-7D3E-4B29-9A56-3D7C6A529764} - System32\Tasks\SaveSenseLiveUpdateTaskMachineUA => C:\Program Files (x86)\SaveSenseLive\Update\SaveSenseLive.exe <==== ATENÃÃO
Task: {6261D12A-929B-4624-A1D3-2528A29403AE} - System32\Tasks\{BD334BCC-F4CF-42E0-9DAB-0BBA303FACD5} => pcalua.exe -a H:\autorun.exe -d H:\
Task: {68CEF930-95A8-4107-B779-8145285F23F6} - System32\Tasks\Baidu Antivirus Update => C:\Program Files (x86)\Baidu Security\Baidu Antivirus\BavUpdater.exe
Task: {6EA2FBFF-4C62-482E-B2CE-055085C9714B} - System32\Tasks\IUM-F1E24CA0-B63E-4F13-A9E3-4ADE3BFF3473 => C:\Program Files (x86)\Intel\Intel(R) Update Manager\bin\iumsvc.exe [2015-09-25] (Intel Corporation)
Task: {73E52A88-EF11-409F-8096-04916EC208C2} - \Microsoft\Windows\Setup\gwx\launchtrayprocess -> Nenhum Arquivo <==== ATENÃÃO
Task: {75D86C57-CA4F-4A80-B046-8CBF235444D8} - System32\Tasks\CreateExplorerShellUnelevatedTask => C:\Windows\explorer.exe /NOUACCHECK
Task: {81D1ABE6-3155-4389-98F8-23637F634459} - System32\Tasks\{AB460C7C-D3D5-40AA-8B03-F8E92C323A2A} => pcalua.exe -a "C:\Users\Eduardo Araujo\Downloads\The.Matrix.Path.Of.Neo.PC.Game(djDEVASTATEâ¢)\Matrix3.exe" -d "C:\Users\Eduardo Araujo\Downloads\The.Matrix.Path.Of.Neo.PC.Game(djDEVASTATEâ¢)"
Task: {8BB87224-853D-4B59-9002-E2ECCC3560A2} - System32\Tasks\{2F2F3173-80CF-4339-947F-BC3FE2595D23} => pcalua.exe -a "C:\Program Files (x86)\CAPCOM\biohazard 4\launcher.exe" -d "C:\Program Files (x86)\CAPCOM\biohazard 4"
Task: {8C1500A1-103D-4CFE-81FD-780063D8669F} - System32\Tasks\{209008E6-4EEB-48CC-AD1D-08C3E09DCD1C} => pcalua.exe -a "C:\Users\Eduardo Araujo\AppData\Roaming\Baidu\hao123-br\hao123.1.0.0.1106.exe"
Task: {932A0F35-0D24-4C65-864F-3EA307E4EAEA} - \Microsoft\Windows\Setup\GWXTriggers\Telemetry-4xd -> Nenhum Arquivo <==== ATENÃÃO
Task: {93D19A68-68F5-48B1-B8A5-93C87399C7CE} - System32\Tasks\{B217DE2F-7809-4A5B-B8FA-A726DDF9A52F} => Iexplore.exe hxxp://ui.skype.com/ui/0/6.16.0.105/pt/abandoninstall?page=tsProgressBar
Task: {986E448C-0112-444A-B7A5-A6C42FB83522} - System32\Tasks\ReclaimerUpdateFiles_Eduardo Araujo => C:\Users\Eduardo Araujo\AppData\Roaming\Real\Update\UpgradeHelper\RealPlayer\14.06\agent\rnupgagent.exe [2017-03-15] (RealNetworks, Inc.)
Task: {9D51531D-3436-4925-8E93-C49207EF1CFF} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-31] (Google Inc.)
Task: {A4BBD93A-DAC4-40E0-9B61-FE74B9853B80} - \Microsoft\Windows\Setup\GWXTriggers\OutOfIdle-5d -> Nenhum Arquivo <==== ATENÃÃO
Task: {A92710E1-3359-43E4-9C9F-FC84BFDC9F63} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\WINDOWS\system32\MRT.exe [2017-03-16] (Microsoft Corporation)
Task: {AC6B91D7-BC3E-42BE-A126-4F85CBA0C232} - \Microsoft\Windows\Setup\gwx\refreshgwxconfigandcontent -> Nenhum Arquivo <==== ATENÃÃO
Task: {AC76820C-C7AA-4DF1-971D-443E822E8F3B} - \Microsoft\Windows\Setup\GWXTriggers\Logon-5d -> Nenhum Arquivo <==== ATENÃÃO
Task: {AF85CDDA-B05B-4F3F-A354-C843A5430E71} - \Microsoft\Windows\Setup\gwx\refreshgwxcontent -> Nenhum Arquivo <==== ATENÃÃO
Task: {B0A14256-C4B2-4151-BFAD-6B82D9EE0977} - System32\Tasks\AVGPCTuneUp_Task_BkGndMaintenance => C:\Program Files (x86)\AVG\AVG PC TuneUp\tuscanx.exe [2017-02-21] (AVG Technologies CZ, s.r.o.)
Task: {B89A8091-7735-42E5-A2DC-97A2AB22B1B1} - System32\Tasks\Touchpad => C:\Program Files\TPCtrl\TPCtrl.exe [2013-02-21] (TP Microelectronic)
Task: {BE10BA3C-2DA5-4BCA-BC4E-8801FBF36E74} - System32\Tasks\ASP => C:\Program Files (x86)\RCP\systweakasp.exe
Task: {C0E2A583-874B-4F02-8585-7FD2E3747546} - System32\Tasks\Game_Booster_AutoUpdate => C:\Program Files (x86)\IObit\Game Booster 3\AutoUpdate.exe
Task: {C71DB4F7-99A0-4D4F-9FF4-742ECF154B2F} - System32\Tasks\AVG EUpdate Task => avgsetupx.exe
Task: {C95BB0EF-750F-4A54-B735-550FD56A5B63} - System32\Tasks\Plus-HD-4.4-chromeinstaller => C:\Program Files (x86)\Plus-HD-4.4\Plus-HD-4.4-chromeinstaller.exe
Task: {CD119EE4-60F7-425C-8E7A-A98705A98183} - \Microsoft\Windows\Setup\gwx\refreshgwxconfig -> Nenhum Arquivo <==== ATENÃÃO
Task: {D4B293AE-C663-46A0-8785-EA3B461FA412} - \DealPly -> Nenhum Arquivo <==== ATENÃÃO
Task: {D710D02D-102E-44DB-B65A-04827FB8E712} - System32\Tasks\ReclaimerUpdateXML_Eduardo Araujo => C:\Users\Eduardo Araujo\AppData\Roaming\Real\Update\UpgradeHelper\RealPlayer\14.06\agent\rnupgagent.exe [2017-03-15] (RealNetworks, Inc.)
Task: {D7CE8928-0C8C-47D0-9F2D-FD511BEDA0E2} - System32\Tasks\RealDownloaderDownloaderScheduledTaskS-1-5-21-1148400818-420560846-2234732976-1001 => C:\Program Files (x86)\RealNetworks\RealDownloader\recordingmanager.exe [2015-09-16] (RealNetworks, Inc.)
Task: {DC7A3F7A-0AD4-4B59-AC27-498EBEF38EEA} - System32\Tasks\{F00672C3-7A91-4EBF-AE5B-A87875BCB1DE} => pcalua.exe -a "C:\Users\Eduardo Araujo\Downloads\GTA_Rio_De_Janeiro_BETA v2.0 httprockstaredition.blogspot.com.br.exe" -d "C:\Users\Eduardo Araujo\Downloads"
Task: {DE37FCE4-5724-4B68-A940-24ECA2B33CB8} - System32\Tasks\SaveSense => C:\Users\EDUARD~1\AppData\Roaming\SAVESE~1\UPDATE~1\UPDATE~1.EXE <==== ATENÃÃO
Task: {E44D2B4F-AB3D-4F91-B189-944DE5037EE2} - System32\Tasks\Adobe Flash Player Updater => C:\WINDOWS\SysWoW64\Macromed\Flash\FlashPlayerUpdateService.exe [2017-03-14] (Adobe Systems Incorporated)
Task: {E653C953-94B5-4B81-A836-8F4C5F5018C4} - System32\Tasks\RealDownloaderRealUpgradeScheduledTaskS-1-5-21-1148400818-420560846-2234732976-1001 => C:\Program Files (x86)\RealNetworks\RealDownloader\RealUpgrade.exe [2015-09-16] (RealNetworks, Inc.)
Task: {E8EB8329-7F96-4A8B-9B9A-04A6D0F0DE3B} - \Microsoft\Windows\Setup\GWXTriggers\OutOfSleep-5d -> Nenhum Arquivo <==== ATENÃÃO
Task: {EB0F4D27-4981-4CEF-9631-37BC7E556A62} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-31] (Google Inc.)
Task: {ED2C445C-E7E4-45A1-BAA5-7E5E9A8B4D75} - System32\Tasks\Funmoods => C:\Users\EDUARD~1\AppData\Roaming\Funmoods\UPDATE~1\UPDATE~1.EXE <==== ATENÃÃO
Task: {F2B05AD0-1BDD-477E-B5A3-D811EA86F666} - System32\Tasks\{908D2EEC-3ABB-4B41-B2F4-73DFA39D3C5D} => pcalua.exe -a "C:\Program Files (x86)\Activision\Call of Duty 2\cod2sp_s.exe" -d "C:\Program Files (x86)\Activision\Call of Duty 2\"
Task: {F623E9E5-9B8B-4FF5-A1CC-792867E8F345} - System32\Tasks\{AA622A4B-6BDC-4AE2-B91D-D78B7FFA0C53} => pcalua.exe -a "C:\Users\Eduardo Araujo\Downloads\Assassins.Creed.2008.PC.DVD[ISO]\Assassins Creed Jerusalem English Patch\7z465.exe" -d "C:\Users\Eduardo Araujo\Downloads\Assassins.Creed.2008.PC.DVD[ISO]\Assassins Creed Jerusalem English Patch"
Task: {FAC4BCF4-FBC0-4FEF-83A9-D9B13C34F55E} - \Microsoft\Windows\Setup\GWXTriggers\MachineUnlock-5d -> Nenhum Arquivo <==== ATENÃÃO
(Se uma entrada for incluÃda na fixlist, o arquivo da tarefa (.job) será movido. O arquivo que está sendo executado pela tarefa não será movido.)
Task: C:\WINDOWS\Tasks\FacebookUpdateTaskUserS-1-5-21-1148400818-420560846-2234732976-1001Core.job => C:\Users\Eduardo Araujo\AppData\Local\Facebook\Update\FacebookUpdate.exe
Task: C:\WINDOWS\Tasks\FacebookUpdateTaskUserS-1-5-21-1148400818-420560846-2234732976-1001UA.job => C:\Users\Eduardo Araujo\AppData\Local\Facebook\Update\FacebookUpdate.exe
Task: C:\WINDOWS\Tasks\Funmoods.job => C:\Users\EDUARD~1\AppData\Roaming\Funmoods\UPDATE~1\UPDATE~1.EXE <==== ATENÃÃO
Task: C:\WINDOWS\Tasks\MySearchDial.job => C:\Users\EDUARD~1\AppData\Roaming\MYSEAR~1\UPDATE~1\UPDATE~1.EXE <==== ATENÃÃO
Task: C:\WINDOWS\Tasks\Plus-HD-4.4-chromeinstaller.job => C:\Program Files (x86)\Plus-HD-4.4\Plus-HD-4.4-chromeinstaller.exe Ì£/installcrx /crxinstalltype=0 /agentregpath='Plus-HD-4.4' /extensionfilepath C:\Program Files (x86)\Plus-HD-4.4\39676.crx' /appid=39676 /srcid='000760' /subid='0' /zdata='0' /bic=2D2681A175604C1A8F96B208CA8C9942IE /verifier=7503ac6f6e49398466071ca206e92869 /installerversion=1_31_153 /installerfullversion=1.31.153.1 /installationtime=1388787385 /statsdomain=hxxp:/stats.srvstatsdata.com /errorsdomain=hxxp:/errors.srvstatsdata.com <==== ATENÃÃO
Task: C:\WINDOWS\Tasks\SaveSense.job => C:\Users\EDUARD~1\AppData\Roaming\SAVESE~1\UPDATE~1\UPDATE~1.EXE <==== ATENÃÃO
Task: C:\WINDOWS\Tasks\SaveSenseLiveUpdateTaskMachineCore.job => C:\Program Files (x86)\SaveSenseLive\Update\SaveSenseLive.exe <==== ATENÃÃO
Task: C:\WINDOWS\Tasks\SaveSenseLiveUpdateTaskMachineUA.job => C:\Program Files (x86)\SaveSenseLive\Update\SaveSenseLive.exe <==== ATENÃÃO
Task: C:\WINDOWS\Tasks\SlimCleaner Plus (Scheduled Scan - Eduardo Araujo).job => C:\Program Files\SlimCleaner Plus\SlimCleanerPlus.exe
==================== Atalhos =============================
(As entradas podem ser listadas para serem restauradas ou removidas.)
==================== Módulos Carregados (Whitelisted) ==============
2016-07-16 08:42 - 2016-07-16 08:42 - 00231424 _____ () C:\WINDOWS\SYSTEM32\ism32k.dll
2016-12-14 20:34 - 2016-12-09 07:29 - 02681200 _____ () C:\WINDOWS\system32\CoreUIComponents.dll
2015-09-16 18:26 - 2015-09-16 18:26 - 00033088 _____ () C:\Program Files (x86)\Real\UpdateService\RealPlayerUpdateSvc.exe
2016-12-01 10:47 - 2017-02-24 09:47 - 00075136 _____ () C:\WINDOWS\SysWoW64\PnkBstrA.exe
2016-12-14 20:34 - 2016-12-09 07:29 - 02681200 _____ () C:\WINDOWS\SYSTEM32\CoreUIComponents.dll
2016-09-16 16:37 - 2016-09-07 01:56 - 00134656 _____ () C:\Windows\ShellExperiences\Windows.UI.Shell.SharedUtilities.dll
2017-01-11 08:53 - 2016-12-21 04:09 - 00474112 _____ () C:\Windows\ShellExperiences\QuickActions.dll
2017-01-11 08:52 - 2016-12-21 03:54 - 09760768 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CortanaApi.dll
2017-01-11 08:52 - 2016-12-21 03:48 - 01401856 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll
2017-01-11 08:52 - 2016-12-21 03:48 - 00757248 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CSGSuggestLib.dll
2017-01-11 08:52 - 2016-12-21 03:48 - 01033216 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Actions.dll
2017-01-11 08:52 - 2016-12-21 03:48 - 02424320 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.BackgroundTask.dll
2017-01-11 08:52 - 2016-12-21 03:53 - 04853760 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\RemindersUI.dll
2016-07-05 18:18 - 2016-07-05 18:18 - 00714992 _____ () C:\Program Files (x86)\RealNetworks\RealDownloader\downloader2.exe
2017-03-13 09:41 - 2017-03-13 09:50 - 00077312 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.12.112.0_x64__kzf8qxf38zg5c\SkypeHost.exe
2017-03-13 09:41 - 2017-03-13 09:50 - 00182784 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.12.112.0_x64__kzf8qxf38zg5c\SkypeBackgroundTasks.dll
2017-03-13 09:41 - 2017-03-13 09:50 - 41048064 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.12.112.0_x64__kzf8qxf38zg5c\SkyWrap.dll
2017-03-13 09:41 - 2017-03-13 09:50 - 02236896 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.12.112.0_x64__kzf8qxf38zg5c\roottools.dll
2017-03-17 23:11 - 2017-03-17 23:15 - 00016896 _____ () C:\Program Files\WindowsApps\Microsoft.XboxApp_24.27.17008.0_x64__8wekyb3d8bbwe\XboxApp.exe
2017-03-17 23:11 - 2017-03-17 23:15 - 37021184 _____ () C:\Program Files\WindowsApps\Microsoft.XboxApp_24.27.17008.0_x64__8wekyb3d8bbwe\XboxApp.dll
2016-11-11 06:26 - 2016-11-11 06:42 - 00879104 _____ () C:\Program Files\WindowsApps\Microsoft.XboxApp_24.27.17008.0_x64__8wekyb3d8bbwe\sqlite3.dll
2016-07-30 12:19 - 2016-07-30 12:45 - 01651112 _____ () C:\Program Files\WindowsApps\Microsoft.XboxApp_24.27.17008.0_x64__8wekyb3d8bbwe\winsdkfb.dll
2015-07-10 00:08 - 2015-07-10 00:08 - 00098656 _____ () C:\Program Files\DriverSetupUtility\FUB\LiveUpdateChecker.exe
2015-09-16 18:26 - 2015-09-16 18:26 - 00037720 _____ () C:\Program Files (x86)\Real\UpdateService\DL2UpdatePlugin.dll
2015-09-16 18:26 - 2015-09-16 18:26 - 00039768 _____ () C:\Program Files (x86)\Real\UpdateService\RealDownloaderUpdatePlugin.dll
2015-09-16 18:26 - 2015-09-16 18:26 - 00037728 _____ () C:\Program Files (x86)\Real\UpdateService\VideoDLUpdatePlugin.dll
2017-02-24 10:42 - 2017-02-24 10:40 - 48920064 _____ () C:\Program Files (x86)\AVG\UiDll\2623\libcef.dll
2016-07-05 18:13 - 2016-07-05 18:13 - 01382048 _____ () C:\Program Files (x86)\RealNetworks\RealDownloader\cpprest100_1_2.dll
2014-08-20 02:52 - 2015-09-21 05:23 - 00653096 _____ () c:\program files (x86)\real\realplayer\RPDS\Lib\r1api.dll
2016-07-05 18:18 - 2016-07-05 18:18 - 00077552 _____ () C:\Program Files (x86)\RealNetworks\RealDownloader\dtvhooks.dll
2017-02-24 11:06 - 2017-02-24 11:06 - 00171208 _____ () C:\Program Files (x86)\AVG\Antivirus\JsonRpcServer.dll
2017-02-24 11:06 - 2017-02-24 11:06 - 48936448 _____ () C:\Program Files (x86)\AVG\Antivirus\libcef.dll
2017-03-08 20:14 - 2017-03-08 20:14 - 00656040 _____ () C:\Program Files (x86)\AVG\Antivirus\ffl2.dll
2013-05-13 13:54 - 2012-06-25 10:41 - 01198912 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\ACE.dll
2016-12-14 20:34 - 2016-12-09 07:29 - 02681200 _____ () C:\WINDOWS\System32\CoreUIComponents.dll
==================== Alternate Data Streams (Whitelisted) =========
(Se uma entrada for incluÃda na fixlist, somente o ADS será removido.)
AlternateDataStreams: C:\ProgramData\MTA San Andreas All:NT [40]
AlternateDataStreams: C:\ProgramData\MTA San Andreas All:NT2 [346]
AlternateDataStreams: C:\Users\Todos os Usuários\MTA San Andreas All:NT [40]
AlternateDataStreams: C:\Users\Todos os Usuários\MTA San Andreas All:NT2 [346]
==================== Modo de Segurança (Whitelisted) ===================
(Se uma entrada for incluÃda na fixlist, será removida do Registro. O valor "AlternateShell" será restaurado.)
==================== Associação (Whitelisted) ===============
(Se uma entrada for incluÃda na fixlist, o Ãtem no Registro será restaurado para o padrão ou removido.)
==================== Internet Explorer confiável/restrito ===============
(Se uma entrada for incluÃda na fixlist, será removida do Registro.)
IE trusted site: HKU\S-1-5-21-1148400818-420560846-2234732976-1001\...\bancobrasil.com.br -> www.bancobrasil.com.br
IE trusted site: HKU\S-1-5-21-1148400818-420560846-2234732976-1001\...\bb.com.br -> www.bb.com.br
==================== Hosts Conteúdo: ==========================
(Se necessário, a diretiva Hosts: pode ser incluÃda na fixlist para redefinir o Hosts.)
2013-08-22 10:25 - 2017-02-12 13:12 - 00001236 ____A C:\WINDOWS\system32\Drivers\etc\hosts
127.0.0.1 thislineskipsanyemptylines
127.0.0.1 mirillis.com
127.0.0.1 www.mirillis.com
127.0.0.1 serwer2.paka-service.com
127.0.0.1 ns386119.ovh.net
127.0.0.1 mirillis.pl
127.0.0.1 www.ovh.com
127.0.0.1 176.31.241.10
127.0.0.1 91.121.143.139
==================== Outras Ãreas ============================
(Atualmente não há nenhuma correção automática para esta seção.)
HKU\S-1-5-21-1148400818-420560846-2234732976-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\Eduardo Araujo\Downloads\konan-akatsuki-1366x768.jpg
DNS Servers: 192.168.0.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 0) (EnableLUA: 1)
Firewall do Windows está habilitado.
==================== MSCONFIG/TASK MANAGER Ãtens desabilitados ==
MSCONFIG\Services: ACTION_SVC => 3
MSCONFIG\Services: Bonjour Service => 2
MSCONFIG\Services: COMLiveService => 2
MSCONFIG\Services: cphs => 3
MSCONFIG\Services: Disc Soft Lite Bus Service => 3
MSCONFIG\Services: gupdate => 2
MSCONFIG\Services: gupdatem => 3
MSCONFIG\Services: IAStorDataMgrSvc => 2
MSCONFIG\Services: IconMan_R => 2
MSCONFIG\Services: igfxCUIService1.0.0.0 => 2
MSCONFIG\Services: Intel(R) Capability Licensing Service Interface => 2
MSCONFIG\Services: Intel(R) ME Service => 2
MSCONFIG\Services: iumsvc => 3
MSCONFIG\Services: jhi_service => 2
MSCONFIG\Services: LMS => 2
MSCONFIG\Services: MozillaMaintenance => 3
MSCONFIG\Services: NBService => 3
MSCONFIG\Services: NMIndexingService => 3
MSCONFIG\Services: PLFlash DeviceIoControl Service => 2
MSCONFIG\Services: RealPlayer Cloud Service => 2
MSCONFIG\Services: RealPlayerUpdateSvc => 2
MSCONFIG\Services: RealTimes Desktop Service => 2
MSCONFIG\Services: UNS => 2
HKLM\...\StartupApproved\StartupFolder: => "RealPlayer Cloud Service UI.lnk"
HKLM\...\StartupApproved\StartupFolder: => "RealTimes.lnk"
HKLM\...\StartupApproved\Run: => "iTunesHelper"
HKLM\...\StartupApproved\Run32: => "ApnTBMon"
HKU\S-1-5-21-1148400818-420560846-2234732976-1001\...\StartupApproved\Run: => "uTorrent"
HKU\S-1-5-21-1148400818-420560846-2234732976-1001\...\StartupApproved\Run: => "DAEMON Tools Lite Automount"
==================== Regras do Firewall (Whitelisted) ===============
(Se uma entrada for incluÃda na fixlist, será removida do Registro. O arquivo não será movido, a menos que seja colocado separadamente.)
FirewallRules: [vm-monitoring-nb-session] => (Allow) LPort=139
FirewallRules: [UDP Query User{6C6C7F46-2E5E-4144-92C8-816789AE995B}C:\program files (x86)\rocksteady studios\batman arkham asylum - game of the year edition\binaries\shippingpc-bmgame.exe] => (Block) C:\program files (x86)\rocksteady studios\batman arkham asylum - game of the year edition\binaries\shippingpc-bmgame.exe
FirewallRules: [TCP Query User{0A16D799-C863-42E4-8101-6F16106BCE2E}C:\program files (x86)\rocksteady studios\batman arkham asylum - game of the year edition\binaries\shippingpc-bmgame.exe] => (Block) C:\program files (x86)\rocksteady studios\batman arkham asylum - game of the year edition\binaries\shippingpc-bmgame.exe
FirewallRules: [{1E2152BB-67F4-48D6-B55A-A921EFCBF1D4}] => (Block) C:\games\payday 2\game\payday2_win32_release.exe
FirewallRules: [{81D2600C-A4D6-413C-A96A-E4FD9C2730E3}] => (Block) C:\games\payday 2\game\payday2_win32_release.exe
FirewallRules: [UDP Query User{217AB46F-86C4-4063-9FE4-66D7EA337B40}C:\games\payday 2\game\payday2_win32_release.exe] => (Allow) C:\games\payday 2\game\payday2_win32_release.exe
FirewallRules: [TCP Query User{F454A4A1-B1EA-4B73-80C8-7910B2578578}C:\games\payday 2\game\payday2_win32_release.exe] => (Allow) C:\games\payday 2\game\payday2_win32_release.exe
FirewallRules: [{658C2603-6CBC-47DC-B800-43FBCAAE1458}] => (Block) C:\program files (x86)\ultimate control\ucontrol.exe
FirewallRules: [{78130390-012A-43AE-ADC4-79A0ED937B72}] => (Block) C:\program files (x86)\ultimate control\ucontrol.exe
FirewallRules: [UDP Query User{E594F246-669D-4A19-8865-79AEADA6940F}C:\program files (x86)\ultimate control\ucontrol.exe] => (Allow) C:\program files (x86)\ultimate control\ucontrol.exe
FirewallRules: [TCP Query User{E294F88B-A9CE-4C09-8035-1C492A8FEDDC}C:\program files (x86)\ultimate control\ucontrol.exe] => (Allow) C:\program files (x86)\ultimate control\ucontrol.exe
FirewallRules: [{98E5CC9C-00B1-4B1F-B9D0-BE457B4C3283}] => (Block) C:\program files (x86)\mobile gamepad server\mobile gamepad.exe
FirewallRules: [{9E8493A5-0641-4F19-A7A0-36979D67C381}] => (Block) C:\program files (x86)\mobile gamepad server\mobile gamepad.exe
FirewallRules: [UDP Query User{EFCF5ADC-F3A3-4815-AEA6-58FC3A1E3F59}C:\program files (x86)\mobile gamepad server\mobile gamepad.exe] => (Allow) C:\program files (x86)\mobile gamepad server\mobile gamepad.exe
FirewallRules: [TCP Query User{1D14B971-40B7-47A5-B97F-2954A0BA01C0}C:\program files (x86)\mobile gamepad server\mobile gamepad.exe] => (Allow) C:\program files (x86)\mobile gamepad server\mobile gamepad.exe
FirewallRules: [UDP Query User{CD44CAA9-DDC1-470E-94A7-94B7CA622093}C:\program files (x86)\r.g. mechanics\gears of war\binaries\wargame-g4wlive.exe] => (Block) C:\program files (x86)\r.g. mechanics\gears of war\binaries\wargame-g4wlive.exe
FirewallRules: [TCP Query User{51AFF897-DBDF-430A-B5ED-85B2F74DFB58}C:\program files (x86)\r.g. mechanics\gears of war\binaries\wargame-g4wlive.exe] => (Block) C:\program files (x86)\r.g. mechanics\gears of war\binaries\wargame-g4wlive.exe
FirewallRules: [UDP Query User{BE72868D-54B4-454C-9A4C-B5BBCFC66C4F}C:\users\eduardo araujo\appdata\roaming\utorrent\utorrent.exe] => (Block) C:\users\eduardo araujo\appdata\roaming\utorrent\utorrent.exe
FirewallRules: [TCP Query User{30C2253A-768F-4647-9BEA-48DCDCB770CA}C:\users\eduardo araujo\appdata\roaming\utorrent\utorrent.exe] => (Block) C:\users\eduardo araujo\appdata\roaming\utorrent\utorrent.exe
FirewallRules: [{6DF25C3C-9A64-437F-87B0-552E3C09AC0D}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{34D8FF01-4775-4BD8-8838-289D8AAC5B64}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [UDP Query User{98C8758D-C23B-4171-A926-04174701C6F9}C:\games\counter-strike\hl.exe] => (Allow) C:\games\counter-strike\hl.exe
FirewallRules: [TCP Query User{63CED2A8-BCE2-48DB-89DB-D7266CEAD4E6}C:\games\counter-strike\hl.exe] => (Allow) C:\games\counter-strike\hl.exe
FirewallRules: [{7FF823C0-53DE-4D82-A362-1E83EE098308}] => (Allow) C:\Users\Eduardo Araujo\AppData\Roaming\Nox\bin\Nox.exe
FirewallRules: [{F8D028B2-BBE8-42E9-BE7C-BA77B8F06794}] => (Allow) C:\Program Files\Bignox\BigNoxVM\RTNoxVMHandle.exe
FirewallRules: [TCP Query User{B608703F-0584-43CB-AEA3-C83273F65118}C:\program files (x86)\r.g. mechanics\dmc devil may cry\binaries\win32\dmc-devilmaycry.exe] => (Block) C:\program files (x86)\r.g. mechanics\dmc devil may cry\binaries\win32\dmc-devilmaycry.exe
FirewallRules: [UDP Query User{22A80E4C-BAF6-437B-935C-5FCF39722F42}C:\program files (x86)\r.g. mechanics\dmc devil may cry\binaries\win32\dmc-devilmaycry.exe] => (Block) C:\program files (x86)\r.g. mechanics\dmc devil may cry\binaries\win32\dmc-devilmaycry.exe
FirewallRules: [TCP Query User{C8478C09-1C2D-4886-93A9-5BA22C94D8FB}C:\games\counter-strike\hltv.exe] => (Allow) C:\games\counter-strike\hltv.exe
FirewallRules: [UDP Query User{BC65B8A8-5D0D-4CB4-A81E-4A68FF666413}C:\games\counter-strike\hltv.exe] => (Allow) C:\games\counter-strike\hltv.exe
FirewallRules: [TCP Query User{6712A9B0-EFB0-4D74-9892-AD8352F1D219}C:\users\eduardo araujo\appdata\roaming\utorrent\utorrent.exe] => (Allow) C:\users\eduardo araujo\appdata\roaming\utorrent\utorrent.exe
FirewallRules: [UDP Query User{BA573273-C50F-47BB-9C9E-554A7329D80A}C:\users\eduardo araujo\appdata\roaming\utorrent\utorrent.exe] => (Allow) C:\users\eduardo araujo\appdata\roaming\utorrent\utorrent.exe
FirewallRules: [{1842B009-4899-42DA-9730-C4E99283336A}] => (Allow) C:\Program Files (x86)\Priston Tale 2\PT2Start.exe
FirewallRules: [{C2926771-C369-4859-A7D6-96D947FED133}] => (Allow) C:\Program Files (x86)\Priston Tale 2\PT2Start.exe
FirewallRules: [{995F733E-3CED-48F0-8CA2-B91F185DC1B7}] => (Allow) C:\Program Files (x86)\Priston Tale 2\PT2Start.exe
FirewallRules: [{ECD25EC0-0CAD-4FC0-A05C-B9D382387E3A}] => (Allow) C:\Program Files (x86)\Priston Tale 2\PT2Start.exe
FirewallRules: [TCP Query User{62CEE251-8DA6-45B3-97C2-8440C168DF36}C:\program files (x86)\secondlifeviewer\slvoice.exe] => (Allow) C:\program files (x86)\secondlifeviewer\slvoice.exe
FirewallRules: [UDP Query User{1C3DFBFF-346A-45B5-9D7F-03EB9972D32B}C:\program files (x86)\secondlifeviewer\slvoice.exe] => (Allow) C:\program files (x86)\secondlifeviewer\slvoice.exe
FirewallRules: [TCP Query User{88BAF03C-F3A4-4D78-8529-EDA55431BE90}C:\users\eduardo araujo\cs-2016\hl.exe] => (Allow) C:\users\eduardo araujo\cs-2016\hl.exe
FirewallRules: [UDP Query User{29C45174-180D-41F7-9629-A5420BAF0CB4}C:\users\eduardo araujo\cs-2016\hl.exe] => (Allow) C:\users\eduardo araujo\cs-2016\hl.exe
FirewallRules: [TCP Query User{5ECE9B2C-BCC2-4A87-8CBD-1694811CE495}C:\users\eduardo araujo\cs-2016\hlds.exe] => (Allow) C:\users\eduardo araujo\cs-2016\hlds.exe
FirewallRules: [UDP Query User{CD571FD1-03D1-4114-AC96-1724E1A7E680}C:\users\eduardo araujo\cs-2016\hlds.exe] => (Allow) C:\users\eduardo araujo\cs-2016\hlds.exe
FirewallRules: [TCP Query User{6B8AAF3A-A920-42C2-8576-FA296291EF09}C:\games\resident evil 5 - gold edition\launcher.exe] => (Block) C:\games\resident evil 5 - gold edition\launcher.exe
FirewallRules: [UDP Query User{D787323E-0535-4BCB-AEE1-EA0F17E5FE96}C:\games\resident evil 5 - gold edition\launcher.exe] => (Block) C:\games\resident evil 5 - gold edition\launcher.exe
FirewallRules: [{A73F6F69-5C4E-4B11-8670-92ED224FDF8D}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
FirewallRules: [{875807B7-68A4-46DB-9CDE-26ECD7B5DB36}] => (Allow) C:\Program Files (x86)\Ubisoft\Assassin's Creed Brotherhood\ACBSP.exe
FirewallRules: [{EB6AA459-0B7B-4FD6-B568-DB47D764E723}] => (Allow) C:\Program Files (x86)\Ubisoft\Assassin's Creed Brotherhood\ACBSP.exe
FirewallRules: [{3358F16C-9BEB-4886-98C1-A6BC3BB63B8D}] => (Allow) C:\Program Files (x86)\Ubisoft\Assassin's Creed Brotherhood\ACBMP.exe
FirewallRules: [{099DBED5-41A7-491B-8CE8-8B4C24C22BDF}] => (Allow) C:\Program Files (x86)\Ubisoft\Assassin's Creed Brotherhood\ACBMP.exe
FirewallRules: [{BDAAF4D3-897D-42E3-8DD4-44AC57CB704E}] => (Allow) C:\Program Files (x86)\Ubisoft\Assassin's Creed Brotherhood\AssassinsCreedBrotherhood.exe
FirewallRules: [{50C23495-255E-459B-9967-B868A5B421C1}] => (Allow) C:\Program Files (x86)\Ubisoft\Assassin's Creed Brotherhood\AssassinsCreedBrotherhood.exe
FirewallRules: [{6F1C3318-7FEC-46EA-81E7-8AA9FE733750}] => (Allow) C:\Program Files (x86)\Ubisoft\Assassin's Creed Brotherhood\UPlayBrowser.exe
FirewallRules: [{A7E59009-0657-4AF8-80ED-B13F1302FB03}] => (Allow) C:\Program Files (x86)\Ubisoft\Assassin's Creed Brotherhood\UPlayBrowser.exe
FirewallRules: [TCP Query User{182A4933-8701-408D-B5E5-78A17162516F}C:\users\eduardo araujo\desktop\the stomping land by chacal\the stomping land by chacal\binaries\win32\udk.exe] => (Allow) C:\users\eduardo araujo\desktop\the stomping land by chacal\the stomping land by chacal\binaries\win32\udk.exe
FirewallRules: [UDP Query User{C0503C98-BE1D-4F5E-818D-D44183C88BEA}C:\users\eduardo araujo\desktop\the stomping land by chacal\the stomping land by chacal\binaries\win32\udk.exe] => (Allow) C:\users\eduardo araujo\desktop\the stomping land by chacal\the stomping land by chacal\binaries\win32\udk.exe
FirewallRules: [TCP Query User{95057489-ECA2-4EB8-845C-C65008490983}C:\users\eduardo araujo\desktop\the_stomping_land_alpha_v0.5.6\the stomping land\binaries\win32\udk.exe] => (Allow) C:\users\eduardo araujo\desktop\the_stomping_land_alpha_v0.5.6\the stomping land\binaries\win32\udk.exe
FirewallRules: [UDP Query User{1F45B714-98EF-4AA5-8A7F-A973188399F6}C:\users\eduardo araujo\desktop\the_stomping_land_alpha_v0.5.6\the stomping land\binaries\win32\udk.exe] => (Allow) C:\users\eduardo araujo\desktop\the_stomping_land_alpha_v0.5.6\the stomping land\binaries\win32\udk.exe
FirewallRules: [{9F1F7C57-B349-4DC1-BB88-C42CC1DDB19B}] => (Block) C:\Program Files\Mirillis\Action!\Action.exe
FirewallRules: [{D7CE42C9-E2C2-45B9-B801-CE9C03F8D0B8}] => (Block) C:\Program Files (x86)\Mirillis\Action!\Action.exe
FirewallRules: [{6E26A077-88EA-4B4F-8CBD-1ABF8692E98E}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe
FirewallRules: [{9414EB3A-2DE7-442D-842D-DC56A2C3743F}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe
FirewallRules: [{CAD9CC25-82EB-4AEB-A756-A60A59CBD06E}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe
FirewallRules: [{4BDC3BA4-5E30-4836-97E0-AC14BA59B569}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe
==================== Pontos de Restauração =========================
16-03-2017 17:45:49 Windows Update
18-03-2017 11:06:23 Installed Advanced Archive Password Recovery
==================== Dispositivos Apresentando Falhas No Gerenciador =============
==================== Erros no Log de eventos: =========================
Erros em Aplicativos:
==================
Error: (03/18/2017 07:34:34 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: O programa FRST64.exe versão 15.3.2017.0 parou de interagir com o Windows e foi fechado. Para ver se há mais informações disponÃveis sobre o problema, verifique o histórico de problemas no painel de controle Segurança e Manutenção.
ID do Processo: f88
Hora de InÃcio: 01d2a037ba563268
Hora de Término: 4294967295
Caminho do Aplicativo: C:\Users\Eduardo Araujo\Downloads\FRST64.exe
ID do Relatório: 0aee744e-0c2b-11e7-80b2-00e04cce1347
Nome completo do pacote com falha:
ID do aplicativo relativo ao pacote com falha:
Error: (03/18/2017 12:01:23 PM) (Source: SecurityCenter) (EventID: 16) (User: )
Description: Erro ao atualizar o status (unknown) para SECURITY_PRODUCT_STATE_ON (erro %3).
Error: (03/18/2017 12:01:23 PM) (Source: SecurityCenter) (EventID: 16) (User: )
Description: Erro ao atualizar o status (unknown) para SECURITY_PRODUCT_STATE_ON (erro %3).
Error: (03/18/2017 11:06:54 AM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: Falha dos Serviços de Criptografia ao processar a chamada de OnIdentity() no Objeto de Gravador do Sistema..
Details:
AddLegacyDriverFiles: Unable to back up image of binary Protocolo Microsoft LLDP.
System Error:
Acesso negado.
.
Error: (03/16/2017 08:44:35 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 2484) (User: Eduardo)
Description: O pacote Microsoft.Windows.Cortana_1.7.0.14393_neutral_neutral_cw5n1h2txyewy+CortanaUI foi terminado porque levou muito tempo para ser suspenso.
Error: (03/16/2017 07:32:17 PM) (Source: RealPlayerUpdateSvc) (EventID: 0) (User: )
Description: Event-ID 0
Error: (03/16/2017 07:32:17 PM) (Source: RealPlayerUpdateSvc) (EventID: 0) (User: )
Description: Event-ID 0
Error: (03/16/2017 07:31:49 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 15656
Error: (03/16/2017 07:31:49 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 15656
Error: (03/16/2017 07:31:45 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second
Erros de Sistema:
=============
Error: (03/18/2017 11:20:55 AM) (Source: DCOM) (EventID: 10000) (User: Eduardo)
Description: Não é possÃvel iniciar o servidor DCOM: {7B37E4E2-C62F-4914-9620-8FB5062718CC}. O erro:
"193"
Aconteceu ao iniciar este comando:
C:\Users\Eduardo Araujo\AppData\Local\Microsoft\OneDrive\OneDrive.exe /cci /client=Personal -Embedding
Error: (03/18/2017 11:20:55 AM) (Source: DCOM) (EventID: 10000) (User: Eduardo)
Description: Não é possÃvel iniciar o servidor DCOM: {7B37E4E2-C62F-4914-9620-8FB5062718CC}. O erro:
"193"
Aconteceu ao iniciar este comando:
C:\Users\Eduardo Araujo\AppData\Local\Microsoft\OneDrive\OneDrive.exe /cci /client=Personal -Embedding
Error: (03/18/2017 11:20:55 AM) (Source: DCOM) (EventID: 10000) (User: Eduardo)
Description: Não é possÃvel iniciar o servidor DCOM: {7B37E4E2-C62F-4914-9620-8FB5062718CC}. O erro:
"193"
Aconteceu ao iniciar este comando:
C:\Users\Eduardo Araujo\AppData\Local\Microsoft\OneDrive\OneDrive.exe /cci /client=Personal -Embedding
Error: (03/18/2017 11:20:55 AM) (Source: DCOM) (EventID: 10000) (User: Eduardo)
Description: Não é possÃvel iniciar o servidor DCOM: {7B37E4E2-C62F-4914-9620-8FB5062718CC}. O erro:
"193"
Aconteceu ao iniciar este comando:
C:\Users\Eduardo Araujo\AppData\Local\Microsoft\OneDrive\OneDrive.exe /cci /client=Personal -Embedding
Error: (03/18/2017 11:20:55 AM) (Source: DCOM) (EventID: 10000) (User: Eduardo)
Description: Não é possÃvel iniciar o servidor DCOM: {7B37E4E2-C62F-4914-9620-8FB5062718CC}. O erro:
"193"
Aconteceu ao iniciar este comando:
C:\Users\Eduardo Araujo\AppData\Local\Microsoft\OneDrive\OneDrive.exe /cci /client=Personal -Embedding
Error: (03/18/2017 11:12:36 AM) (Source: DCOM) (EventID: 10000) (User: Eduardo)
Description: Não é possÃvel iniciar o servidor DCOM: {7B37E4E2-C62F-4914-9620-8FB5062718CC}. O erro:
"193"
Aconteceu ao iniciar este comando:
C:\Users\Eduardo Araujo\AppData\Local\Microsoft\OneDrive\OneDrive.exe /cci /client=Personal -Embedding
Error: (03/18/2017 11:12:36 AM) (Source: DCOM) (EventID: 10000) (User: Eduardo)
Description: Não é possÃvel iniciar o servidor DCOM: {7B37E4E2-C62F-4914-9620-8FB5062718CC}. O erro:
"193"
Aconteceu ao iniciar este comando:
C:\Users\Eduardo Araujo\AppData\Local\Microsoft\OneDrive\OneDrive.exe /cci /client=Personal -Embedding
Error: (03/18/2017 11:12:36 AM) (Source: DCOM) (EventID: 10000) (User: Eduardo)
Description: Não é possÃvel iniciar o servidor DCOM: {7B37E4E2-C62F-4914-9620-8FB5062718CC}. O erro:
"193"
Aconteceu ao iniciar este comando:
C:\Users\Eduardo Araujo\AppData\Local\Microsoft\OneDrive\OneDrive.exe /cci /client=Personal -Embedding
Error: (03/18/2017 11:12:36 AM) (Source: DCOM) (EventID: 10000) (User: Eduardo)
Description: Não é possÃvel iniciar o servidor DCOM: {7B37E4E2-C62F-4914-9620-8FB5062718CC}. O erro:
"193"
Aconteceu ao iniciar este comando:
C:\Users\Eduardo Araujo\AppData\Local\Microsoft\OneDrive\OneDrive.exe /cci /client=Personal -Embedding
Error: (03/18/2017 11:12:36 AM) (Source: DCOM) (EventID: 10000) (User: Eduardo)
Description: Não é possÃvel iniciar o servidor DCOM: {7B37E4E2-C62F-4914-9620-8FB5062718CC}. O erro:
"193"
Aconteceu ao iniciar este comando:
C:\Users\Eduardo Araujo\AppData\Local\Microsoft\OneDrive\OneDrive.exe /cci /client=Personal -Embedding
==================== Informações da Memória ===========================
Processador: Intel(R) Core(TM) i3-3217U CPU @ 1.80GHz
Percentagem de memória em uso: 81%
RAM física total: 1886.6 MB
RAM física disponível: 343.5 MB
Virtual Total: 3742.6 MB
Virtual disponível: 1087.8 MB
==================== Drives ================================
Drive c: () (Fixed) (Total:449.82 GB) (Free:63.25 GB) NTFS
==================== MBR & Tabela de Partições ==================
========================================================
Disk: 0 (Size: 465.8 GB) (Disk ID: 5D3E22A0)
Partition: GPT.
==================== Fim de Addition.txt ============================