Publicité
Publicité
Commentaire : http://www.cjoint.com/c/GHnsEGSOIts
Format du document : text/plain
Prévisualisation
Resultado do exame Adicional Farbar Recovery Scan Tool (x64) Versão: 12-08-2017
Executado por msfre (13-08-2017 15:24:59)
Executando a partir de G:\Programas e Instaladores\scoped_dir_8564_21328
Windows 10 Pro Versão 1703 (X64) (2017-07-11 15:18:08)
Modo da Inicialização: Normal
==========================================================
==================== Contas: =============================
Administrador (S-1-5-21-674093975-4215423661-3431736297-500 - Administrator - Disabled)
Convidado (S-1-5-21-674093975-4215423661-3431736297-501 - Limited - Disabled)
DefaultAccount (S-1-5-21-674093975-4215423661-3431736297-503 - Limited - Disabled)
msfre (S-1-5-21-674093975-4215423661-3431736297-1001 - Administrator - Enabled) => C:\Users\msfre
==================== Central de Segurança ========================
(Se uma entrada for incluída na fixlist, será removida.)
AV: Kaspersky Anti-Virus (Enabled - Up to date) {86367591-4BE4-AE08-2FD9-7FCB8259CD98}
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Kaspersky Anti-Virus (Enabled - Up to date) {3D579475-6DDE-A186-1569-44B9F9DE8725}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
==================== Programas Instalados ======================
(Somente os programas adwares com a indicação "Oculto" podem ser adicionados à fixlist para desocultá-los. Os programas adwares devem ser desinstalados manualmente.)
µTorrent (HKU\S-1-5-21-674093975-4215423661-3431736297-1001\...\uTorrent) (Version: 3.5.0.43916 - BitTorrent Inc.)
Adobe Acrobat Reader DC - Português (HKLM-x32\...\{AC76BA86-7AD7-1046-7B44-AC0F074E4100}) (Version: 17.012.20095 - Adobe Systems Incorporated)
Adobe Flash Player 26 PPAPI (HKLM-x32\...\Adobe Flash Player PPAPI) (Version: 26.0.0.137 - Adobe Systems Incorporated)
AMD Software (HKLM\...\AMD Catalyst Install Manager) (Version: 9.0.000.8 - Advanced Micro Devices, Inc.)
Catalyst Control Center Next Localization BR (HKLM\...\{15979E65-792E-474B-BC5D-42257709D4D9}) (Version: 2017.0612.1651.28496 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization BR (HKLM\...\{55A4D3AB-C8DF-26B2-89A8-7E16E1E40700}) (Version: 2015.1129.2307.41591 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization CHS (HKLM\...\{365AEAB2-4CF3-7CBB-0DAC-E9E14B688E65}) (Version: 2015.1129.2307.41591 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization CHS (HKLM\...\{D6ACA0E4-2488-AE52-E73D-24DB98F9AD65}) (Version: 2017.0612.1651.28496 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization CHT (HKLM\...\{7ABC6D83-816E-6D48-E65D-B0CEDD294E4E}) (Version: 2015.1129.2307.41591 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization CHT (HKLM\...\{B8C421E8-BDF9-F598-832C-659A513F79EB}) (Version: 2017.0612.1651.28496 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization CS (HKLM\...\{83D75873-9603-EA5A-948F-A5AEE78082C1}) (Version: 2017.0612.1651.28496 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization CS (HKLM\...\{C3EE628C-7394-FE2C-0C90-C05284EB528D}) (Version: 2015.1129.2307.41591 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization DA (HKLM\...\{2F544F46-5F6E-97BB-3550-A0242A3C5754}) (Version: 2015.1129.2307.41591 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization DA (HKLM\...\{DD3A9C85-51E9-854D-EB9B-F0AE8E5B2F7C}) (Version: 2017.0612.1651.28496 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization DE (HKLM\...\{A00A5425-8899-055A-404C-8F96C2EC647F}) (Version: 2017.0612.1651.28496 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization DE (HKLM\...\{FC4086D6-E345-5F43-08BB-280FB57DAF49}) (Version: 2015.1129.2307.41591 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization EL (HKLM\...\{CB71E054-00CF-182D-6C78-F9D85D10B7BA}) (Version: 2017.0612.1651.28496 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization EL (HKLM\...\{F8EBE530-A4D5-BF51-F623-3787E6B8A878}) (Version: 2015.1129.2307.41591 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization ES (HKLM\...\{30B97DD0-3646-AD22-2E77-3792B11BB5E6}) (Version: 2017.0612.1651.28496 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization ES (HKLM\...\{42FBD43F-DE53-6D4D-5134-E3C93B45CBEF}) (Version: 2015.1129.2307.41591 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization FI (HKLM\...\{8342F234-A97E-D691-3C01-F060CB7DA175}) (Version: 2017.0612.1651.28496 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization FI (HKLM\...\{AC85CF50-9A55-0103-ADBF-365C37603AA4}) (Version: 2015.1129.2307.41591 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization FR (HKLM\...\{B349892D-B015-033C-4CA8-3635E6B655D7}) (Version: 2015.1129.2307.41591 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization FR (HKLM\...\{CD47D86C-737D-4818-F059-CF8A53F37B76}) (Version: 2017.0612.1651.28496 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization HU (HKLM\...\{BE8D6AB1-3049-2F0C-67FA-00C0A5D321A3}) (Version: 2015.1129.2307.41591 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization HU (HKLM\...\{DB0E2806-DE62-D60E-9BD9-E3A89FB2A5A8}) (Version: 2017.0612.1651.28496 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization IT (HKLM\...\{26567561-DFB2-2B63-9BA8-6A490ED37016}) (Version: 2015.1129.2307.41591 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization IT (HKLM\...\{D4EF1657-8835-A5AE-DBA0-658EF2869048}) (Version: 2017.0612.1651.28496 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization JA (HKLM\...\{0809FEC1-EF86-51E9-8210-DC1B1BDB6745}) (Version: 2015.1129.2307.41591 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization JA (HKLM\...\{ED71C4B4-4C00-F7C9-9151-60411373DC35}) (Version: 2017.0612.1651.28496 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization KO (HKLM\...\{28FFCD28-01FF-9792-B1A9-B944D44FB37D}) (Version: 2017.0612.1651.28496 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization KO (HKLM\...\{5FD706FF-6AD8-E372-A35A-879409982655}) (Version: 2015.1129.2307.41591 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization NL (HKLM\...\{A4E7CA0C-84EB-5E29-2F04-06C4E4790C2F}) (Version: 2015.1129.2307.41591 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization NL (HKLM\...\{DAEF66AB-6EA7-B0A8-96FB-243A2F33B8B2}) (Version: 2017.0612.1651.28496 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization NO (HKLM\...\{3DBC48E0-7DE6-295B-448E-5F53D1491AC3}) (Version: 2017.0612.1651.28496 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization NO (HKLM\...\{59D2664C-949B-7FA7-9880-ECB993B6616A}) (Version: 2015.1129.2307.41591 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization PL (HKLM\...\{970A40CA-46AB-986C-1798-976ED0EA00FA}) (Version: 2015.1129.2307.41591 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization PL (HKLM\...\{CAF3DAD2-A7E8-5472-F8E3-D71E92B7FA65}) (Version: 2017.0612.1651.28496 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization RU (HKLM\...\{4707CBFC-8ED4-463E-0FF9-DE86F4A743E9}) (Version: 2015.1129.2307.41591 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization RU (HKLM\...\{E7666716-625F-9E54-ECB3-39CC3C7FFB14}) (Version: 2017.0612.1651.28496 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization SV (HKLM\...\{30A5B188-80AB-2CF5-22D8-8E20D66907D4}) (Version: 2017.0612.1651.28496 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization SV (HKLM\...\{C14A3A5B-8A86-C239-37D7-158211778C54}) (Version: 2015.1129.2307.41591 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization TH (HKLM\...\{A38C8B57-D3E6-5748-F2D3-FDC383D1203A}) (Version: 2017.0612.1651.28496 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization TH (HKLM\...\{A50C89BC-8D8E-8828-824A-7171F6D583D5}) (Version: 2015.1129.2307.41591 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization TR (HKLM\...\{0B5633F0-C415-2F08-671E-4C9E2FAACD45}) (Version: 2015.1129.2307.41591 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization TR (HKLM\...\{1CD84FD4-26F3-08FC-32F5-17DA9E8A4ED7}) (Version: 2017.0612.1651.28496 - Advanced Micro Devices, Inc.) Hidden
Creative Software AutoUpdate (HKLM-x32\...\Creative Software AutoUpdate) (Version: 1.41 - Creative Technology Limited)
Creative Sound Blaster Properties x64 Edition (HKLM-x32\...\Creative Sound Blaster Properties x64 Edition) (Version: 1.03 - Creative Technology Limited)
Dishonored 2 (HKLM\...\Steam App 403640) (Version: - Arkane Studios)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 60.0.3112.90 - Google Inc.)
Google Update Helper (HKLM-x32\...\{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.33.5 - Google Inc.) Hidden
HD Tune Pro 5.60 (HKLM-x32\...\HD Tune Pro_is1) (Version: - EFD Software)
Java 8 Update 144 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F32180144F0}) (Version: 8.0.1440.1 - Oracle Corporation)
Kaspersky Anti-Virus (HKLM-x32\...\{E27B1D7B-3B34-43A2-9FC0-9828D5DF46E2}) (Version: 17.0.0.611 - Kaspersky Lab) Hidden
Kaspersky Anti-Virus (HKLM-x32\...\InstallWIX_{E27B1D7B-3B34-43A2-9FC0-9828D5DF46E2}) (Version: 17.0.0.611 - Kaspersky Lab)
Kaspersky Secure Connection (HKLM-x32\...\{1CF84962-50F8-48CA-9082-B70F3A02C686}) (Version: 17.0.0.611 - Kaspersky Lab) Hidden
Kaspersky Secure Connection (HKLM-x32\...\InstallWIX_{1CF84962-50F8-48CA-9082-B70F3A02C686}) (Version: 17.0.0.611 - Kaspersky Lab)
Logitech SetPoint 6.67 (HKLM\...\sp6) (Version: 6.67.83 - Logitech)
Metro 2033 (HKLM\...\Steam App 43110) (Version: - 4A Games)
Microsoft Office 365 ProPlus - pt-br (HKLM\...\O365ProPlusRetail - pt-br) (Version: 16.0.8229.2103 - Microsoft Corporation)
Microsoft OneDrive (HKU\S-1-5-21-674093975-4215423661-3431736297-1001\...\OneDriveSetup.exe) (Version: 17.3.6943.0625 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{A49F249F-0C91-497F-86DF-B2585E8E76B7}) (Version: 8.0.50727.42 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x64) - 14.0.24215 (HKLM-x32\...\{d992c12e-cab2-426f-bde3-fb8c53950b0d}) (Version: 14.0.24215.1 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.24212 (HKLM-x32\...\{462f63a8-6347-4894-a1b3-dbfe3a4c981d}) (Version: 14.0.24212.0 - Microsoft Corporation)
MSI Afterburner 4.3.0 (HKLM-x32\...\Afterburner) (Version: 4.3.0 - MSI Co., LTD)
NVIDIA PhysX (HKLM-x32\...\{80407BA7-7763-4395-AB98-5233F1B34E65}) (Version: 9.13.1220 - NVIDIA Corporation)
Office 16 Click-to-Run Extensibility Component (HKLM-x32\...\{90160000-008C-0000-0000-0000000FF1CE}) (Version: 16.0.8229.2103 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Extensibility Component 64-bit Registration (HKLM\...\{90160000-00DD-0000-1000-0000000FF1CE}) (Version: 16.0.8229.2103 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Licensing Component (HKLM\...\{90160000-008F-0000-1000-0000000FF1CE}) (Version: 16.0.8229.2103 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Localization Component (HKLM-x32\...\{90160000-008C-0416-0000-0000000FF1CE}) (Version: 16.0.8229.2045 - Microsoft Corporation) Hidden
OpenAL (HKLM-x32\...\OpenAL) (Version: - )
Opera Stable 46.0.2597.57 (HKLM-x32\...\Opera 46.0.2597.57) (Version: 46.0.2597.57 - Opera Software)
Origin (HKLM-x32\...\Origin) (Version: 10.5.1.43152 - Electronic Arts, Inc.)
Painel de controle de áudio da Creative (HKLM-x32\...\AudioCS) (Version: 3.00 - Creative Technology Limited)
PotPlayer-64 bit (HKLM\...\PotPlayer64) (Version: - Kakao Corp.)
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 10.18.526.2017 - Realtek)
RivaTuner Statistics Server 7.0.0 Beta 19 (HKLM-x32\...\RTSS) (Version: 7.0.0 Beta 19 - Unwinder)
TeamSpeak 3 Client (HKLM\...\TeamSpeak 3 Client) (Version: 3.1.5 - TeamSpeak Systems GmbH)
TechPowerUp GPU-Z (HKLM-x32\...\TechPowerUp GPU-Z) (Version: - TechPowerUp)
Twitch (HKLM-x32\...\{A20BFF62-AE3C-42BD-9C52-841CAB96BC49}) (Version: 6.0.0.0 - Twitch Interactive, Inc.)
Vulkan Run Time Libraries 1.0.39.1 (HKLM\...\VulkanRT1.0.39.1) (Version: 1.0.39.1 - LunarG, Inc.)
WhatsApp (HKU\S-1-5-21-674093975-4215423661-3431736297-1001\...\WhatsApp) (Version: 0.2.5371 - WhatsApp)
WinRAR 5.40 (64-bit) (HKLM\...\WinRAR archiver) (Version: 5.40.0 - win.rar GmbH)
Yahoo Search Set (HKLM-x32\...\Yahoo! SearchSet) (Version: - Yahoo Inc.)
==================== Exame Personalizado CLSID (Whitelisted): ==========================
(Se uma entrada for incluída na fixlist, será removida do Registro. O arquivo não será movido, a menos que seja colocado separadamente.)
ContextMenuHandlers1: [Kaspersky Anti-Virus 17.0.0] -> {39C9FA89-7012-4573-A92D-BFD1F8CA542D} => C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 17.0.0\x64\shellex.dll [2017-04-28] (AO Kaspersky Lab)
ContextMenuHandlers1: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2016-08-15] (Alexander Roshal)
ContextMenuHandlers1-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2016-08-15] (Alexander Roshal)
ContextMenuHandlers2: [Kaspersky Anti-Virus 17.0.0] -> {39C9FA89-7012-4573-A92D-BFD1F8CA542D} => C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 17.0.0\x64\shellex.dll [2017-04-28] (AO Kaspersky Lab)
ContextMenuHandlers4: [Kaspersky Anti-Virus 17.0.0] -> {39C9FA89-7012-4573-A92D-BFD1F8CA542D} => C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 17.0.0\x64\shellex.dll [2017-04-28] (AO Kaspersky Lab)
ContextMenuHandlers5: [ACE] -> {5E2121EE-0300-11D4-8D3B-444553540000} => C:\Program Files\AMD\CNext\CNext\atiacm64.dll [2017-06-12] (Advanced Micro Devices, Inc.)
ContextMenuHandlers6: [Kaspersky Anti-Virus 17.0.0] -> {39C9FA89-7012-4573-A92D-BFD1F8CA542D} => C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 17.0.0\x64\shellex.dll [2017-04-28] (AO Kaspersky Lab)
ContextMenuHandlers6: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2016-08-15] (Alexander Roshal)
ContextMenuHandlers6-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2016-08-15] (Alexander Roshal)
==================== Tarefas Agendadas (Whitelisted) =============
(Se uma entrada for incluída na fixlist, será removida do Registro. O arquivo não será movido, a menos que seja colocado separadamente.)
Task: {007A689E-1ED9-45EB-8B5E-D8C4BE0CE32B} - System32\Tasks\StartCN => C:\Program Files\AMD\CNext\CNext\cncmd.exe [2017-06-12] (Advanced Micro Devices, Inc.)
Task: {0BD04513-B002-45CF-B896-109920FE2063} - System32\Tasks\Microsoft\Office\OfficeBackgroundTaskHandlerRegistration => C:\Program Files (x86)\Microsoft Office\root\Office16\officebackgroundtaskhandler.exe [2017-07-11] ()
Task: {1F5645C1-19CC-4F32-AC12-AE0B37EC2B3D} - System32\Tasks\Microsoft\Office\Office Automatic Updates => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [2017-07-18] (Microsoft Corporation)
Task: {277B0A71-2152-4BBE-A1DE-B16A9624D62B} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack2016 => C:\Program Files (x86)\Microsoft Office\root\Office16\msoia.exe [2017-07-26] (Microsoft Corporation)
Task: {2C62F394-A771-4ED4-9C76-FEA5D8A19D0D} - System32\Tasks\Microsoft\Office\OfficeBackgroundTaskHandlerLogon => C:\Program Files (x86)\Microsoft Office\root\Office16\officebackgroundtaskhandler.exe [2017-07-11] ()
Task: {2D4622C2-B7F3-4295-95B1-D648588444F4} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2017-07-19] (Adobe Systems Incorporated)
Task: {577FD81A-F4F5-4D8A-B0F1-9AC9C56555C2} - System32\Tasks\Win Update => c:\Intell\POOL\russian.vbs
Task: {640E0DE3-1540-4189-AF0D-B0C69F438DDE} - System32\Tasks\Adobe Flash Player PPAPI Notifier => C:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_26_0_0_137_pepper.exe [2017-07-22] (Adobe Systems Incorporated)
Task: {68DA7731-CFB4-471B-8738-80D24244B34D} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [2017-07-18] (Microsoft Corporation)
Task: {7A592542-45DE-4879-AB2B-C4788DD387EE} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2017-07-11] (Google Inc.)
Task: {7CB7A85F-CC36-4F90-AC8C-786438B6B57B} - System32\Tasks\Opera scheduled Autoupdate 1499787590 => C:\Program Files (x86)\Opera\launcher.exe [2017-07-18] (Opera Software)
Task: {D5CD1B82-D9F9-41CE-800B-D9166FA3F7A3} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2017-07-11] (Google Inc.)
Task: {E046541D-EF89-4765-9076-34A93E31871A} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn2016 => C:\Program Files (x86)\Microsoft Office\root\Office16\msoia.exe [2017-07-26] (Microsoft Corporation)
Task: {FDE7CCBF-1413-48E0-8C50-4F346C04C630} - System32\Tasks\Microsoft\Office\Office Subscription Maintenance => C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonx86\Microsoft Shared\Office16\OLicenseHeartbeat.exe [2017-07-26] (Microsoft Corporation)
(Se uma entrada for incluída na fixlist, o arquivo da tarefa (.job) será movido. O arquivo que está sendo executado pela tarefa não será movido.)
==================== Atalhos & WMI ========================
(As entradas podem ser listadas para serem restauradas ou removidas.)
==================== Módulos Carregados (Whitelisted) ==============
2016-10-20 19:55 - 2017-04-08 11:40 - 000428232 _____ () C:\Program Files (x86)\RivaTuner Statistics Server\RTSSHooks64.dll
2016-09-13 14:37 - 2016-09-13 14:37 - 000014336 _____ () C:\Program Files\AMD\CNext\CNext\QtQuick.2\qtquick2plugin.dll
2016-09-13 14:37 - 2016-09-13 14:37 - 000739840 _____ () C:\Program Files\AMD\CNext\CNext\QtQuick\Controls\qtquickcontrolsplugin.dll
2016-09-13 14:37 - 2016-09-13 14:37 - 000014336 _____ () C:\Program Files\AMD\CNext\CNext\QtQuick\Window.2\windowplugin.dll
2016-09-13 14:37 - 2016-09-13 14:37 - 000071168 _____ () C:\Program Files\AMD\CNext\CNext\QtQuick\Layouts\qquicklayoutsplugin.dll
2016-09-13 14:36 - 2016-09-13 14:36 - 000011776 _____ () C:\Program Files\AMD\CNext\CNext\libEGL.dll
2016-09-13 14:36 - 2016-09-13 14:36 - 002013696 _____ () C:\Program Files\AMD\CNext\CNext\libGLESv2.dll
2016-09-13 14:37 - 2016-09-13 14:37 - 000191488 _____ () C:\Program Files\AMD\CNext\CNext\QtQuick\Dialogs\dialogplugin.dll
2017-03-18 17:58 - 2017-03-18 17:58 - 000138000 _____ () C:\Windows\SYSTEM32\inputhost.dll
2017-03-18 17:59 - 2017-03-20 00:59 - 001731072 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll
2017-07-18 14:13 - 2017-07-18 14:13 - 000074752 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.19.820.0_x64__kzf8qxf38zg5c\SkypeHost.exe
2017-07-18 14:13 - 2017-07-18 14:13 - 000203264 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.19.820.0_x64__kzf8qxf38zg5c\SkypeBackgroundTasks.dll
2016-10-24 07:03 - 2016-10-24 07:03 - 000589512 _____ () C:\Program Files (x86)\MSI Afterburner\MSIAfterburner.exe
2017-04-08 11:35 - 2017-04-08 11:35 - 000241152 _____ () C:\Program Files (x86)\RivaTuner Statistics Server\RTSS.exe
2017-04-08 11:35 - 2017-04-08 11:35 - 000027136 _____ () C:\Program Files (x86)\RivaTuner Statistics Server\EncoderServer.exe
2017-04-08 11:35 - 2017-04-08 11:35 - 000088576 _____ () C:\Program Files (x86)\RivaTuner Statistics Server\RTSSHooksLoader64.exe
2016-06-28 00:19 - 2016-06-28 00:19 - 000865232 _____ () C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 17.0.0\kpcengine.2.3.dll
2017-08-09 19:11 - 2017-08-09 11:28 - 002493440 _____ () F:\Origin\libGLESv2.dll
2016-10-20 19:55 - 2017-04-08 11:40 - 000400072 _____ () C:\Program Files (x86)\RivaTuner Statistics Server\RTSSHooks.dll
2017-07-11 13:18 - 2017-07-11 13:18 - 000164552 _____ () C:\Program Files (x86)\Microsoft Office\root\Office16\JitV.dll
2017-07-11 12:31 - 2006-06-09 15:19 - 000003072 _____ () C:\Windows\system32\CTXFIBRZ.DLL
2017-07-20 13:27 - 2017-07-20 13:27 - 065368152 _____ () C:\Program Files (x86)\Opera\46.0.2597.57\opera_browser.dll
2017-07-20 13:27 - 2017-07-20 13:26 - 002946648 _____ () C:\Program Files (x86)\Opera\46.0.2597.57\libglesv2.dll
2017-07-20 13:27 - 2017-07-20 13:26 - 000087128 _____ () C:\Program Files (x86)\Opera\46.0.2597.57\libegl.dll
2016-10-10 13:46 - 2016-10-10 13:46 - 000071680 _____ () C:\Program Files (x86)\MSI Afterburner\RTMUI.dll
2016-10-10 13:46 - 2016-10-10 13:46 - 000228864 _____ () C:\Program Files (x86)\MSI Afterburner\RTCore.dll
2016-10-10 13:46 - 2016-10-10 13:46 - 000526848 _____ () C:\Program Files (x86)\MSI Afterburner\RTHAL.dll
2016-10-10 13:46 - 2016-10-10 13:46 - 000056832 _____ () C:\Program Files (x86)\MSI Afterburner\RTFC.dll
2016-10-10 13:46 - 2016-10-10 13:46 - 000357888 _____ () C:\Program Files (x86)\MSI Afterburner\RTUI.dll
2017-04-08 11:35 - 2017-04-08 11:35 - 000353792 _____ () C:\Program Files (x86)\RivaTuner Statistics Server\RTUI.dll
2017-04-08 11:35 - 2017-04-08 11:35 - 000071680 _____ () C:\Program Files (x86)\RivaTuner Statistics Server\RTMUI.dll
2017-04-08 11:34 - 2017-04-08 11:34 - 000055808 _____ () C:\Program Files (x86)\RivaTuner Statistics Server\RTFC.dll
==================== Alternate Data Streams (Whitelisted) =========
(Se uma entrada for incluída na fixlist, somente o ADS será removido.)
==================== Modo de Segurança (Whitelisted) ===================
(Se uma entrada for incluída na fixlist, será removida do Registro. O valor "AlternateShell" será restaurado.)
==================== Associação (Whitelisted) ===============
(Se uma entrada for incluída na fixlist, o ítem no Registro será restaurado para o padrão ou removido.)
==================== Internet Explorer confiável/restrito ===============
(Se uma entrada for incluída na fixlist, será removida do Registro.)
IE trusted site: HKU\S-1-5-21-674093975-4215423661-3431736297-1001\...\sharepoint.com -> hxxps://eduunifacs-files.sharepoint.com
==================== Hosts Conteúdo: ===============================
(Se necessário, a diretiva Hosts: pode ser incluída na fixlist para redefinir o Hosts.)
2017-03-18 18:03 - 2017-03-18 18:01 - 000000824 _____ C:\Windows\system32\Drivers\etc\hosts
==================== Outras Áreas ============================
(Atualmente não há nenhuma correção automática para esta seção.)
HKU\S-1-5-21-674093975-4215423661-3431736297-1001\Control Panel\Desktop\\Wallpaper -> G:\Papéis de Parede\Planetas\Galaxy-planets-light-stars-Earth_1600x900.jpg
DNS Servers: 186.207.160.72 - 186.207.160.76
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: )
Firewall do Windows está habilitado.
==================== MSCONFIG/TASK MANAGER ítens desabilitados ==
==================== Regras do Firewall (Whitelisted) ===============
(Se uma entrada for incluída na fixlist, será removida do Registro. O arquivo não será movido, a menos que seja colocado separadamente.)
FirewallRules: [{2DA23449-2151-4C2F-B295-3DC7FA51D21F}] => (Allow) C:\Users\msfre\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{EEB979C3-2B6F-4054-839D-224D63587387}] => (Allow) C:\Users\msfre\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{58C6A378-8A0A-4F0D-9FF3-D4B60F0CDDF1}] => (Allow) C:\Users\msfre\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{75692A47-7932-494B-941D-DD87D218739A}] => (Allow) C:\Users\msfre\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{4C28235D-5EB1-42E5-B9FF-5EC402D2BEB0}] => (Allow) C:\Users\msfre\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{CB4D7A25-1D39-4096-A289-AF37266AE4F1}] => (Allow) C:\Users\msfre\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{3B52F27A-4485-4E56-B639-29DEA1D25D6A}] => (Allow) G:\Steam\Steam.exe
FirewallRules: [{266DF20E-7AA3-474C-9151-DBA272CBAAFA}] => (Allow) G:\Steam\Steam.exe
FirewallRules: [{53D49DA9-2676-4B58-8177-B76BD4B26C46}] => (Allow) G:\Steam\bin\cef\cef.win7\steamwebhelper.exe
FirewallRules: [{6056B560-0073-4C60-9782-FB9982A9D7FB}] => (Allow) G:\Steam\bin\cef\cef.win7\steamwebhelper.exe
FirewallRules: [{507BA427-C3D7-4DFE-8CA5-0F5F487F48F1}] => (Allow) G:\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{4E57B286-069C-4D28-955A-6874438DBEB5}] => (Allow) G:\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{DD60F3CE-392E-4E18-954C-4D56F2CFCD4B}] => (Allow) G:\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2cfg.exe
FirewallRules: [{C180C338-88D0-49E6-9424-1AE8F51B365B}] => (Allow) G:\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2cfg.exe
FirewallRules: [{D23E6324-B2BA-40EE-B587-32DD768660DA}] => (Allow) G:\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{92F157AA-B3DF-4A01-9185-84431D258977}] => (Allow) G:\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{598BF0D9-6545-454A-90DB-F5B2E1AFB715}] => (Allow) G:\Steam\steamapps\common\Counter-Strike Global Offensive\csgo.exe
FirewallRules: [{902F26B0-1402-407B-B077-C908E3870D8B}] => (Allow) G:\Steam\steamapps\common\Counter-Strike Global Offensive\csgo.exe
FirewallRules: [{700D3C30-664A-4702-8034-BC19A1243C88}] => (Allow) C:\Program Files (x86)\Microsoft Office\root\Office16\outlook.exe
FirewallRules: [{F8C0C258-149C-4DA4-AC5D-16D4F9CC7967}] => (Allow) C:\Program Files (x86)\Microsoft Office\root\Office16\Lync.exe
FirewallRules: [{436711FB-F7E3-4B45-B0D8-3042C5E5B616}] => (Allow) C:\Program Files (x86)\Microsoft Office\root\Office16\Lync.exe
FirewallRules: [{3DC90EE2-DD40-455A-8C34-EDDBEE9881BA}] => (Allow) C:\Program Files (x86)\Microsoft Office\root\Office16\UcMapi.exe
FirewallRules: [{EE153D38-A3F5-41C5-96A6-FDBC3DF8568E}] => (Allow) C:\Program Files (x86)\Microsoft Office\root\Office16\UcMapi.exe
FirewallRules: [TCP Query User{9175ADE6-7825-4396-8CC8-825535832901}G:\steam\steamapps\common\rise of the tomb raider\rottr.exe] => (Allow) G:\steam\steamapps\common\rise of the tomb raider\rottr.exe
FirewallRules: [UDP Query User{F7D5802F-4699-45A6-8B97-6817C73CDCEF}G:\steam\steamapps\common\rise of the tomb raider\rottr.exe] => (Allow) G:\steam\steamapps\common\rise of the tomb raider\rottr.exe
FirewallRules: [{C061A886-67EA-45E0-90B5-EFBC269C6F78}] => (Allow) G:\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{E6C86DA7-6E89-4CBD-AC23-CCAC665D58DE}] => (Allow) G:\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{BA5F7585-6AE8-4460-9136-9BDEC0354ACB}] => (Allow) G:\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{B27588D0-8B9F-4764-A712-7A1BF45637E1}] => (Allow) G:\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{F234BAAA-B5E6-4819-8D4D-E66956ABE55E}] => (Allow) C:\Program Files (x86)\Opera\46.0.2597.46\opera.exe
FirewallRules: [{9E4249C6-4E88-4CE0-915F-52059FD8E542}] => (Allow) G:\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{8C140752-2AE8-478C-9F33-93AAB4879EF0}] => (Allow) G:\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{86462EA8-6FF8-451B-8298-5461C6295292}] => (Allow) G:\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{5F9F1FA8-9C91-49F6-877A-3B353F8EB9A5}] => (Allow) G:\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{9C73E83F-60BC-460C-80F5-E3F99A02A1C1}] => (Allow) G:\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{CD59DD02-80F4-40B5-B78E-D25FE55E5206}] => (Allow) G:\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{94997A85-B81B-4A19-85C9-44364DB8407C}] => (Allow) G:\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{352B078A-5A9A-45F0-AE57-353ED272A27B}] => (Allow) G:\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{0771E729-659D-4DBF-9A31-371064A11322}] => (Allow) G:\Steam\steamapps\common\Metro 2033\metro2033.exe
FirewallRules: [{83D516CF-CDDF-4A0B-8072-E98A34AC95A1}] => (Allow) G:\Steam\steamapps\common\Metro 2033\metro2033.exe
FirewallRules: [{3505DDC0-7B9F-42D5-BB11-C88E79953C3C}] => (Allow) G:\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{59866A6E-D4EC-418B-97C1-116C50D53731}] => (Allow) G:\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{26A0D0E4-8593-4873-B2FF-8697616744A1}] => (Allow) G:\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{E199ABE9-1E04-418E-862D-972CA5917BBE}] => (Allow) G:\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{49B3C53F-83E7-4598-86D2-10B92DDD8FCD}] => (Allow) G:\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{13DD74A0-3472-48CF-A059-CF4554B57E2E}] => (Allow) G:\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [TCP Query User{25A02BF2-4656-4CB2-B028-ED5480212ECD}G:\steam\steamapps\common\unreal tournament 3\binaries\ut3.exe] => (Allow) G:\steam\steamapps\common\unreal tournament 3\binaries\ut3.exe
FirewallRules: [UDP Query User{8748B0B9-0EB6-4BD6-8A54-D2FC61E22744}G:\steam\steamapps\common\unreal tournament 3\binaries\ut3.exe] => (Allow) G:\steam\steamapps\common\unreal tournament 3\binaries\ut3.exe
FirewallRules: [{24F39AEC-4669-4424-9BEA-1AB31636F64F}] => (Allow) C:\Program Files (x86)\Opera\46.0.2597.57\opera.exe
FirewallRules: [{EA60D579-EF6B-4417-A5A6-181668D910A4}] => (Allow) G:\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{375ED75C-0714-4B31-A4BD-D58E604EEEA8}] => (Allow) G:\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{686EA5F2-E2EF-484F-8C79-286B8FED2182}] => (Allow) G:\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{0D0C92B3-42A6-4C4E-A34D-87BBA63ABE0C}] => (Allow) G:\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{301AB62B-D875-44A2-BE5D-7E2CF0B45781}] => (Allow) G:\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{395BB8C1-73C0-45C1-A55E-EFF2645BCF88}] => (Allow) G:\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{78E130D8-F56A-4AE8-BEF1-36E79A1A98E8}] => (Allow) G:\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{CB5FE3E3-D2E0-4630-956B-CD1C47363DD3}] => (Allow) G:\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{F1D415F8-348E-4CE0-8233-6D7332B332EF}] => (Allow) G:\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{AA721428-CC66-4576-9185-AAAED74C2A41}] => (Allow) G:\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{6F17EAF0-D4DB-40A4-A3F2-EF0D6FE1A9CC}] => (Allow) G:\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{05E3AE12-BA37-4DE6-90AE-F5662BEA3313}] => (Allow) G:\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{7DE3AC5B-4FCD-4611-A793-7D4823F1F3A2}] => (Allow) G:\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{409C7A23-AF05-46CB-A256-8E85D39E539C}] => (Allow) G:\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{47897C19-647A-4618-AC83-AF060BD9B1EB}] => (Allow) G:\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{A69D77EA-FA12-49B1-AB42-B4AC894F3EDA}] => (Allow) G:\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{1CD871AB-72A2-4AE6-A289-2E0ED4F81C18}] => (Allow) G:\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{0D24FC89-8344-4473-B776-1B7C3D45F934}] => (Allow) G:\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{F2FB4988-D97A-4E52-8A87-52B8754C367B}] => (Allow) G:\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{F826903C-90E4-4888-A8EF-717A91DA6F0F}] => (Allow) G:\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{559D22D9-E263-45E7-BEF4-6EA31B101A37}] => (Allow) G:\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{B7A4BE4F-0200-4E80-A36A-21DB566196D5}] => (Allow) G:\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{2377DECC-C7C6-41F7-99E1-240037E7B15F}] => (Allow) G:\Steam\steamapps\common\Dishonored2\Dishonored2.exe
FirewallRules: [{C2880A9C-CC18-4CEF-B47F-76DD374DCA50}] => (Allow) G:\Steam\steamapps\common\Dishonored2\Dishonored2.exe
FirewallRules: [{7A30580D-5CF1-40D8-8089-273F28B2E98E}] => (Allow) G:\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{C94851C5-B950-4744-B473-20957E899B38}] => (Allow) G:\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{62982292-C704-4B9E-89DF-77F6CFE0BDAB}] => (Allow) G:\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{815B0008-AF81-4E5B-A92C-9C8DD274D580}] => (Allow) G:\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{E34D18EB-D189-4485-9FB3-9AB7CA688F79}] => (Allow) G:\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{44BB64A3-13AC-4E1B-9FF6-F2C542810DE2}] => (Allow) G:\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{D5B4CB64-8678-421A-B117-62A0FAD616C8}] => (Allow) G:\Steam\steamapps\common\Don't Starve Together\bin\dontstarve_steam.exe
FirewallRules: [{4218325C-585C-408C-B5E2-A6AA37CA62A9}] => (Allow) G:\Steam\steamapps\common\Don't Starve Together\bin\dontstarve_steam.exe
FirewallRules: [{B8B6912D-9C1C-4C7B-B2F3-40BF6748C391}] => (Allow) G:\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{00EC60B9-B8D3-4E53-9141-D6C5C398F61E}] => (Allow) G:\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [TCP Query User{E078E4F0-62FA-4643-8DA1-F1B29F6E1136}G:\steam\steamapps\common\don't starve together\bin\dontstarve_dedicated_server_nullrenderer.exe] => (Allow) G:\steam\steamapps\common\don't starve together\bin\dontstarve_dedicated_server_nullrenderer.exe
FirewallRules: [UDP Query User{8F2B04CC-550A-4F8E-B347-BE97443C2A93}G:\steam\steamapps\common\don't starve together\bin\dontstarve_dedicated_server_nullrenderer.exe] => (Allow) G:\steam\steamapps\common\don't starve together\bin\dontstarve_dedicated_server_nullrenderer.exe
FirewallRules: [{CFA87CA1-46F4-45A5-91E0-3304190B6978}] => (Allow) G:\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{750FAB83-F20E-4700-AFD9-7E09142397AF}] => (Allow) G:\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{19D556FE-2C90-4556-AE0C-92DF81D69597}] => (Allow) G:\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{C420F48E-54AF-4C8D-8DD5-DC8C9A2EB9E4}] => (Allow) G:\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{7A6AD9D7-ACAE-4930-A1FD-23A73B2209AF}] => (Allow) G:\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{9A6DE949-0CDE-4CC7-8135-BB8BDF84971C}] => (Allow) G:\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{6EC9607F-1804-4ED2-9100-7BF1A98C01FE}] => (Allow) G:\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{6811BA1B-0C1D-4C88-A6EF-A5FB1287E798}] => (Allow) G:\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{C44C4F82-623B-4532-93DE-C3BDCE891B28}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
FirewallRules: [{180DB48C-F446-4ECD-8ACE-D6B0AFACF5C9}] => (Allow) G:\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{AF6E3A93-D096-459D-8EC3-A07CCEA164CE}] => (Allow) G:\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{180B3333-1302-4E67-A91F-E68F44800A68}] => (Allow) G:\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{6563CF33-D190-4761-A169-C3C68CE2BC53}] => (Allow) G:\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [TCP Query User{AF2363B2-1775-42DA-A6B9-9FDDA795D05C}G:\jogos\oxygen not included\oxygen.not.included.v221697\oxygennotincluded.exe] => (Allow) G:\jogos\oxygen not included\oxygen.not.included.v221697\oxygennotincluded.exe
FirewallRules: [UDP Query User{6EEFD132-923C-426F-A41F-1394788FAE3A}G:\jogos\oxygen not included\oxygen.not.included.v221697\oxygennotincluded.exe] => (Allow) G:\jogos\oxygen not included\oxygen.not.included.v221697\oxygennotincluded.exe
FirewallRules: [{72A7AD5C-FC15-49CD-952F-1489A1D67CB1}] => (Allow) G:\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{C5F43B29-3C9B-4B2F-8550-16258116219C}] => (Allow) G:\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{029BDD56-EAEB-4FCA-BFD9-79283612472D}] => (Allow) G:\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{069A409E-D37E-412A-A748-0627B5E5A52C}] => (Allow) G:\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{28DD98EC-E221-4269-894C-1EFC4FD5BC0F}] => (Allow) G:\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{474CB2B3-C26D-4489-B1C3-8D016E17170A}] => (Allow) G:\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe
==================== Pontos de Restauração =========================
02-08-2017 00:42:19 Ponto 1 - 02/08/2017
08-08-2017 19:14:43 Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.24212
12-08-2017 00:12:17 Microsoft Visual C++ 2015 Redistributable (x64) - 14.0.24215
==================== Dispositivos Apresentando Falhas No Gerenciador =============
==================== Erros no Log de eventos: =========================
Erros em Aplicativos:
==================
Error: (08/13/2017 03:08:31 PM) (Source: SecurityCenter) (EventID: 16) (User: )
Description: Erro ao atualizar o status para SECURITY_PRODUCT_STATE_OFF.
Error: (08/13/2017 03:05:07 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Nome do aplicativo com falha: RTSS.exe, versão: 7.0.0.13333, carimbo de data/hora: 0x58e8f525
Nome do módulo com falha: MSVCR90.dll, versão: 9.0.30729.9279, carimbo de data/hora: 0x57fb316a
Código de exceção: 0x40000015
Deslocamento da falha: 0x0005beae
ID do processo com falha: 0xe1c
Hora de início do aplicativo com falha: 0x01d3145eae268382
Caminho do aplicativo com falha: C:\Program Files (x86)\RivaTuner Statistics Server\RTSS.exe
Caminho do módulo com falha: C:\Windows\WinSxS\x86_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.9279_none_50939ec6bcb7c97c\MSVCR90.dll
ID do Relatório: 432ed90f-8575-4f8d-9729-1930d95f21c4
Nome completo do pacote com falha:
ID do aplicativo relativo ao pacote com falha:
Error: (08/13/2017 03:04:02 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Nome do aplicativo com falha: RTSS.exe, versão: 7.0.0.13333, carimbo de data/hora: 0x58e8f525
Nome do módulo com falha: MSVCR90.dll, versão: 9.0.30729.9279, carimbo de data/hora: 0x57fb316a
Código de exceção: 0x40000015
Deslocamento da falha: 0x0005beae
ID do processo com falha: 0x3b74
Hora de início do aplicativo com falha: 0x01d3145e8a2480e5
Caminho do aplicativo com falha: C:\Program Files (x86)\RivaTuner Statistics Server\RTSS.exe
Caminho do módulo com falha: C:\Windows\WinSxS\x86_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.9279_none_50939ec6bcb7c97c\MSVCR90.dll
ID do Relatório: 1cc7cf60-7d2c-43f2-98ea-528a598fcf3e
Nome completo do pacote com falha:
ID do aplicativo relativo ao pacote com falha:
Error: (08/13/2017 03:03:56 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Nome do aplicativo com falha: RTSS.exe, versão: 7.0.0.13333, carimbo de data/hora: 0x58e8f525
Nome do módulo com falha: MSVCR90.dll, versão: 9.0.30729.9279, carimbo de data/hora: 0x57fb316a
Código de exceção: 0x40000015
Deslocamento da falha: 0x0005beae
ID do processo com falha: 0x139c
Hora de início do aplicativo com falha: 0x01d3145e85662918
Caminho do aplicativo com falha: C:\Program Files (x86)\RivaTuner Statistics Server\RTSS.exe
Caminho do módulo com falha: C:\Windows\WinSxS\x86_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.9279_none_50939ec6bcb7c97c\MSVCR90.dll
ID do Relatório: 03110d29-80e7-4b26-aaa8-641861d8087b
Nome completo do pacote com falha:
ID do aplicativo relativo ao pacote com falha:
Error: (08/13/2017 03:03:45 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Nome do aplicativo com falha: RTSS.exe, versão: 7.0.0.13333, carimbo de data/hora: 0x58e8f525
Nome do módulo com falha: MSVCR90.dll, versão: 9.0.30729.9279, carimbo de data/hora: 0x57fb316a
Código de exceção: 0x40000015
Deslocamento da falha: 0x0005beae
ID do processo com falha: 0x33e8
Hora de início do aplicativo com falha: 0x01d3145e7fb1dc44
Caminho do aplicativo com falha: C:\Program Files (x86)\RivaTuner Statistics Server\RTSS.exe
Caminho do módulo com falha: C:\Windows\WinSxS\x86_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.9279_none_50939ec6bcb7c97c\MSVCR90.dll
ID do Relatório: 3ee5800e-bf13-4316-bf1f-207313654fbc
Nome completo do pacote com falha:
ID do aplicativo relativo ao pacote com falha:
Error: (08/13/2017 03:03:39 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Nome do aplicativo com falha: RTSS.exe, versão: 7.0.0.13333, carimbo de data/hora: 0x58e8f525
Nome do módulo com falha: MSVCR90.dll, versão: 9.0.30729.9279, carimbo de data/hora: 0x57fb316a
Código de exceção: 0x40000015
Deslocamento da falha: 0x0005beae
ID do processo com falha: 0x17f8
Hora de início do aplicativo com falha: 0x01d3145e7b86fddb
Caminho do aplicativo com falha: C:\Program Files (x86)\RivaTuner Statistics Server\RTSS.exe
Caminho do módulo com falha: C:\Windows\WinSxS\x86_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.9279_none_50939ec6bcb7c97c\MSVCR90.dll
ID do Relatório: 55d9463b-9e86-443c-80ec-3f1bc9770b2b
Nome completo do pacote com falha:
ID do aplicativo relativo ao pacote com falha:
Error: (08/13/2017 03:03:31 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Nome do aplicativo com falha: RTSS.exe, versão: 7.0.0.13333, carimbo de data/hora: 0x58e8f525
Nome do módulo com falha: MSVCR90.dll, versão: 9.0.30729.9279, carimbo de data/hora: 0x57fb316a
Código de exceção: 0x40000015
Deslocamento da falha: 0x0005beae
ID do processo com falha: 0x2300
Hora de início do aplicativo com falha: 0x01d3145e775815ee
Caminho do aplicativo com falha: C:\Program Files (x86)\RivaTuner Statistics Server\RTSS.exe
Caminho do módulo com falha: C:\Windows\WinSxS\x86_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.9279_none_50939ec6bcb7c97c\MSVCR90.dll
ID do Relatório: 6436747f-b165-464e-8d13-ef855db73333
Nome completo do pacote com falha:
ID do aplicativo relativo ao pacote com falha:
Error: (08/13/2017 03:03:23 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Nome do aplicativo com falha: RTSS.exe, versão: 7.0.0.13333, carimbo de data/hora: 0x58e8f525
Nome do módulo com falha: MSVCR90.dll, versão: 9.0.30729.9279, carimbo de data/hora: 0x57fb316a
Código de exceção: 0x40000015
Deslocamento da falha: 0x0005beae
ID do processo com falha: 0x1b44
Hora de início do aplicativo com falha: 0x01d3145e70365833
Caminho do aplicativo com falha: C:\Program Files (x86)\RivaTuner Statistics Server\RTSS.exe
Caminho do módulo com falha: C:\Windows\WinSxS\x86_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.9279_none_50939ec6bcb7c97c\MSVCR90.dll
ID do Relatório: 398a7867-418a-4a09-bf9b-613c74cb31d5
Nome completo do pacote com falha:
ID do aplicativo relativo ao pacote com falha:
Error: (08/13/2017 02:52:30 PM) (Source: SideBySide) (EventID: 33) (User: )
Description: Falha na geração de contexto de ativação para "c:\program files\amd\cim\bin64\SetACL64.exe".
Assembly dependente Microsoft.VC80.MFC,processorArchitecture="amd64",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0" não pôde ser localizado.
Use o arquivo sxstrace.exe para obter um diagnóstico detalhado.
Error: (08/13/2017 02:52:20 PM) (Source: SideBySide) (EventID: 35) (User: )
Description: Falha na geração de contexto de ativação para "C:\Program Files (x86)\Microsoft Office\root\Office16\lync.exe.Manifest". Erro no arquivo de manifesto ou de política C:\Program Files (x86)\Microsoft Office\root\Office16\UccApi.DLL", na linha 1.
Identidade do componente localizado no manifesto não corresponde à identidade do componente solicitado.
A referência é UccApi,processorArchitecture="AMD64",type="win32",version="16.0.0.0".
A definição é UccApi,processorArchitecture="x86",type="win32",version="16.0.0.0".
Use o arquivo sxstrace.exe para obter um dignóstico detalhado.
Erros de Sistema:
=============
Error: (08/13/2017 03:06:07 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Não foi possível iniciar o serviço CldFlt devido ao seguinte erro:
Não há suporte para o pedido.
Error: (08/12/2017 10:16:06 PM) (Source: DCOM) (EventID: 10016) (User: DESKTOP-5AKS5QE)
Description: As configurações de permissão padrão-computador não concedem permissão Local Ativação para o aplicativo de Servidor COM com CLSID
{C2F03A33-21F5-47FA-B4BB-156362A2F239}
e APPID
{316CDED5-E4AE-4B15-9113-7055D84DCC97}
ao usuário DESKTOP-5AKS5QE\msfre SID (S-1-5-21-674093975-4215423661-3431736297-1001) do endereço LocalHost (Usando LRPC) que está sendo executado no contêiner de aplicativos Microsoft.Windows.Cortana_1.8.12.15063_neutral_neutral_cw5n1h2txyewy SID (S-1-15-2-1861897761-1695161497-2927542615-642690995-327840285-2659745135-2630312742). Essa permissão de segurança pode ser modificada com a ferramenta administrativa Serviços de Componentes.
Error: (08/12/2017 10:16:04 PM) (Source: DCOM) (EventID: 10016) (User: DESKTOP-5AKS5QE)
Description: As configurações de permissão padrão-computador não concedem permissão Local Ativação para o aplicativo de Servidor COM com CLSID
{C2F03A33-21F5-47FA-B4BB-156362A2F239}
e APPID
{316CDED5-E4AE-4B15-9113-7055D84DCC97}
ao usuário DESKTOP-5AKS5QE\msfre SID (S-1-5-21-674093975-4215423661-3431736297-1001) do endereço LocalHost (Usando LRPC) que está sendo executado no contêiner de aplicativos Microsoft.Windows.Cortana_1.8.12.15063_neutral_neutral_cw5n1h2txyewy SID (S-1-15-2-1861897761-1695161497-2927542615-642690995-327840285-2659745135-2630312742). Essa permissão de segurança pode ser modificada com a ferramenta administrativa Serviços de Componentes.
Error: (08/12/2017 10:16:04 PM) (Source: DCOM) (EventID: 10016) (User: DESKTOP-5AKS5QE)
Description: As configurações de permissão padrão-computador não concedem permissão Local Ativação para o aplicativo de Servidor COM com CLSID
{C2F03A33-21F5-47FA-B4BB-156362A2F239}
e APPID
{316CDED5-E4AE-4B15-9113-7055D84DCC97}
ao usuário DESKTOP-5AKS5QE\msfre SID (S-1-5-21-674093975-4215423661-3431736297-1001) do endereço LocalHost (Usando LRPC) que está sendo executado no contêiner de aplicativos Microsoft.Windows.Cortana_1.8.12.15063_neutral_neutral_cw5n1h2txyewy SID (S-1-15-2-1861897761-1695161497-2927542615-642690995-327840285-2659745135-2630312742). Essa permissão de segurança pode ser modificada com a ferramenta administrativa Serviços de Componentes.
Error: (08/11/2017 08:03:31 PM) (Source: Microsoft-Windows-Kernel-Power) (EventID: 137) (User: )
Description: 4
Error: (08/10/2017 12:30:05 AM) (Source: DCOM) (EventID: 10010) (User: DESKTOP-5AKS5QE)
Description: O servidor Microsoft.Windows.Cortana_1.8.12.15063_neutral_neutral_cw5n1h2txyewy!CortanaUI.AppXd4tad4d57t4wtdbnnmb8v2xtzym8c1n8.mca não se registrou no DCOM dentro do tempo limite necessário.
Error: (08/09/2017 12:33:27 AM) (Source: DCOM) (EventID: 10001) (User: DESKTOP-5AKS5QE)
Description: Não é possível iniciar o servidor DCOM: Microsoft.Windows.Cortana_1.8.12.15063_neutral_neutral_cw5n1h2txyewy!CortanaUI.AppXd4tad4d57t4wtdbnnmb8v2xtzym8c1n8.mca como Não Disponível/Não Disponível. O erro:
"31"
Aconteceu ao iniciar este comando:
"C:\Windows\system32\backgroundTaskHost.exe" -ServerName:CortanaUI.AppXy7vb4pc2dr3kc93kfc509b1d0arkfb2x.mca
Error: (08/09/2017 12:33:14 AM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: O serviço Preparação de Aplicativos foi encerrado inesperadamente. Isso aconteceu 1 vez(es).
Error: (08/09/2017 12:13:47 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Não foi possível iniciar o serviço CldFlt devido ao seguinte erro:
Não há suporte para o pedido.
Error: (08/08/2017 03:57:13 PM) (Source: DCOM) (EventID: 10016) (User: AUTORIDADE NT)
Description: As configurações de permissão específico do aplicativo não concedem permissão Local Ativação para o aplicativo de Servidor COM com CLSID
{D63B10C5-BB46-4990-A94F-E40B9D520160}
e APPID
{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}
ao usuário AUTORIDADE NT\SISTEMA SID (S-1-5-18) do endereço LocalHost (Usando LRPC) que está sendo executado no contêiner de aplicativos Não Disponível SID (Não Disponível). Essa permissão de segurança pode ser modificada com a ferramenta administrativa Serviços de Componentes.
CodeIntegrity:
===================================
Date: 2017-08-08 15:57:18.811
Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume3\Windows\System32\amdihk64.dll that did not meet the Store signing level requirements.
Date: 2017-08-07 19:02:44.049
Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume3\Windows\System32\amdihk64.dll that did not meet the Store signing level requirements.
Date: 2017-07-15 17:46:54.019
Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume3\Windows\System32\amdihk64.dll that did not meet the Store signing level requirements.
Date: 2017-07-13 22:23:13.595
Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume3\Windows\System32\amdihk64.dll that did not meet the Store signing level requirements.
Date: 2017-07-12 15:29:04.611
Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume3\Windows\System32\amdihk64.dll that did not meet the Store signing level requirements.
==================== Informações da Memória ===========================
Processador: AMD FX(tm)-6300 Six-Core Processor
Percentagem de memória em uso: 22%
RAM física total: 16332.05 MB
RAM física disponível: 12701.24 MB
Virtual Total: 18764.05 MB
Virtual disponível: 14456.82 MB
==================== Drives ================================
Drive c: () (Fixed) (Total:80.49 GB) (Free:37.95 GB) NTFS ==>[drive com componentes de inicialização (obtido através de BCD)]
Drive d: (Disco Local) (Fixed) (Total:698.63 GB) (Free:191.68 GB) NTFS
Drive e: () (Fixed) (Total:931.51 GB) (Free:890.35 GB) NTFS
Drive f: () (Fixed) (Total:80 GB) (Free:43.83 GB) NTFS
Drive g: () (Fixed) (Total:771.02 GB) (Free:177.2 GB) NTFS
==================== MBR & Tabela de Partições ==================
========================================================
Disk: 0 (Size: 698.6 GB) (Disk ID: FC1F6FE0)
Partition 1: (Not Active) - (Size=698.6 GB) - (Type=07 NTFS)
========================================================
Disk: 1 (MBR Code: Windows 7 or 8) (Size: 931.5 GB) (Disk ID: DFE9AD20)
Partition 1: (Active) - (Size=80.5 GB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=80 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=771 GB) - (Type=07 NTFS)
========================================================
Disk: 2 (MBR Code: Windows 7 or 8) (Size: 931.5 GB) (Disk ID: 7193BB7D)
Partition 1: (Not Active) - (Size=931.5 GB) - (Type=07 NTFS)
==================== Fim de Addition.txt ============================
Executado por msfre (13-08-2017 15:24:59)
Executando a partir de G:\Programas e Instaladores\scoped_dir_8564_21328
Windows 10 Pro Versão 1703 (X64) (2017-07-11 15:18:08)
Modo da Inicialização: Normal
==========================================================
==================== Contas: =============================
Administrador (S-1-5-21-674093975-4215423661-3431736297-500 - Administrator - Disabled)
Convidado (S-1-5-21-674093975-4215423661-3431736297-501 - Limited - Disabled)
DefaultAccount (S-1-5-21-674093975-4215423661-3431736297-503 - Limited - Disabled)
msfre (S-1-5-21-674093975-4215423661-3431736297-1001 - Administrator - Enabled) => C:\Users\msfre
==================== Central de Segurança ========================
(Se uma entrada for incluída na fixlist, será removida.)
AV: Kaspersky Anti-Virus (Enabled - Up to date) {86367591-4BE4-AE08-2FD9-7FCB8259CD98}
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Kaspersky Anti-Virus (Enabled - Up to date) {3D579475-6DDE-A186-1569-44B9F9DE8725}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
==================== Programas Instalados ======================
(Somente os programas adwares com a indicação "Oculto" podem ser adicionados à fixlist para desocultá-los. Os programas adwares devem ser desinstalados manualmente.)
µTorrent (HKU\S-1-5-21-674093975-4215423661-3431736297-1001\...\uTorrent) (Version: 3.5.0.43916 - BitTorrent Inc.)
Adobe Acrobat Reader DC - Português (HKLM-x32\...\{AC76BA86-7AD7-1046-7B44-AC0F074E4100}) (Version: 17.012.20095 - Adobe Systems Incorporated)
Adobe Flash Player 26 PPAPI (HKLM-x32\...\Adobe Flash Player PPAPI) (Version: 26.0.0.137 - Adobe Systems Incorporated)
AMD Software (HKLM\...\AMD Catalyst Install Manager) (Version: 9.0.000.8 - Advanced Micro Devices, Inc.)
Catalyst Control Center Next Localization BR (HKLM\...\{15979E65-792E-474B-BC5D-42257709D4D9}) (Version: 2017.0612.1651.28496 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization BR (HKLM\...\{55A4D3AB-C8DF-26B2-89A8-7E16E1E40700}) (Version: 2015.1129.2307.41591 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization CHS (HKLM\...\{365AEAB2-4CF3-7CBB-0DAC-E9E14B688E65}) (Version: 2015.1129.2307.41591 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization CHS (HKLM\...\{D6ACA0E4-2488-AE52-E73D-24DB98F9AD65}) (Version: 2017.0612.1651.28496 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization CHT (HKLM\...\{7ABC6D83-816E-6D48-E65D-B0CEDD294E4E}) (Version: 2015.1129.2307.41591 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization CHT (HKLM\...\{B8C421E8-BDF9-F598-832C-659A513F79EB}) (Version: 2017.0612.1651.28496 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization CS (HKLM\...\{83D75873-9603-EA5A-948F-A5AEE78082C1}) (Version: 2017.0612.1651.28496 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization CS (HKLM\...\{C3EE628C-7394-FE2C-0C90-C05284EB528D}) (Version: 2015.1129.2307.41591 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization DA (HKLM\...\{2F544F46-5F6E-97BB-3550-A0242A3C5754}) (Version: 2015.1129.2307.41591 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization DA (HKLM\...\{DD3A9C85-51E9-854D-EB9B-F0AE8E5B2F7C}) (Version: 2017.0612.1651.28496 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization DE (HKLM\...\{A00A5425-8899-055A-404C-8F96C2EC647F}) (Version: 2017.0612.1651.28496 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization DE (HKLM\...\{FC4086D6-E345-5F43-08BB-280FB57DAF49}) (Version: 2015.1129.2307.41591 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization EL (HKLM\...\{CB71E054-00CF-182D-6C78-F9D85D10B7BA}) (Version: 2017.0612.1651.28496 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization EL (HKLM\...\{F8EBE530-A4D5-BF51-F623-3787E6B8A878}) (Version: 2015.1129.2307.41591 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization ES (HKLM\...\{30B97DD0-3646-AD22-2E77-3792B11BB5E6}) (Version: 2017.0612.1651.28496 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization ES (HKLM\...\{42FBD43F-DE53-6D4D-5134-E3C93B45CBEF}) (Version: 2015.1129.2307.41591 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization FI (HKLM\...\{8342F234-A97E-D691-3C01-F060CB7DA175}) (Version: 2017.0612.1651.28496 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization FI (HKLM\...\{AC85CF50-9A55-0103-ADBF-365C37603AA4}) (Version: 2015.1129.2307.41591 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization FR (HKLM\...\{B349892D-B015-033C-4CA8-3635E6B655D7}) (Version: 2015.1129.2307.41591 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization FR (HKLM\...\{CD47D86C-737D-4818-F059-CF8A53F37B76}) (Version: 2017.0612.1651.28496 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization HU (HKLM\...\{BE8D6AB1-3049-2F0C-67FA-00C0A5D321A3}) (Version: 2015.1129.2307.41591 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization HU (HKLM\...\{DB0E2806-DE62-D60E-9BD9-E3A89FB2A5A8}) (Version: 2017.0612.1651.28496 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization IT (HKLM\...\{26567561-DFB2-2B63-9BA8-6A490ED37016}) (Version: 2015.1129.2307.41591 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization IT (HKLM\...\{D4EF1657-8835-A5AE-DBA0-658EF2869048}) (Version: 2017.0612.1651.28496 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization JA (HKLM\...\{0809FEC1-EF86-51E9-8210-DC1B1BDB6745}) (Version: 2015.1129.2307.41591 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization JA (HKLM\...\{ED71C4B4-4C00-F7C9-9151-60411373DC35}) (Version: 2017.0612.1651.28496 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization KO (HKLM\...\{28FFCD28-01FF-9792-B1A9-B944D44FB37D}) (Version: 2017.0612.1651.28496 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization KO (HKLM\...\{5FD706FF-6AD8-E372-A35A-879409982655}) (Version: 2015.1129.2307.41591 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization NL (HKLM\...\{A4E7CA0C-84EB-5E29-2F04-06C4E4790C2F}) (Version: 2015.1129.2307.41591 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization NL (HKLM\...\{DAEF66AB-6EA7-B0A8-96FB-243A2F33B8B2}) (Version: 2017.0612.1651.28496 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization NO (HKLM\...\{3DBC48E0-7DE6-295B-448E-5F53D1491AC3}) (Version: 2017.0612.1651.28496 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization NO (HKLM\...\{59D2664C-949B-7FA7-9880-ECB993B6616A}) (Version: 2015.1129.2307.41591 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization PL (HKLM\...\{970A40CA-46AB-986C-1798-976ED0EA00FA}) (Version: 2015.1129.2307.41591 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization PL (HKLM\...\{CAF3DAD2-A7E8-5472-F8E3-D71E92B7FA65}) (Version: 2017.0612.1651.28496 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization RU (HKLM\...\{4707CBFC-8ED4-463E-0FF9-DE86F4A743E9}) (Version: 2015.1129.2307.41591 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization RU (HKLM\...\{E7666716-625F-9E54-ECB3-39CC3C7FFB14}) (Version: 2017.0612.1651.28496 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization SV (HKLM\...\{30A5B188-80AB-2CF5-22D8-8E20D66907D4}) (Version: 2017.0612.1651.28496 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization SV (HKLM\...\{C14A3A5B-8A86-C239-37D7-158211778C54}) (Version: 2015.1129.2307.41591 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization TH (HKLM\...\{A38C8B57-D3E6-5748-F2D3-FDC383D1203A}) (Version: 2017.0612.1651.28496 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization TH (HKLM\...\{A50C89BC-8D8E-8828-824A-7171F6D583D5}) (Version: 2015.1129.2307.41591 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization TR (HKLM\...\{0B5633F0-C415-2F08-671E-4C9E2FAACD45}) (Version: 2015.1129.2307.41591 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization TR (HKLM\...\{1CD84FD4-26F3-08FC-32F5-17DA9E8A4ED7}) (Version: 2017.0612.1651.28496 - Advanced Micro Devices, Inc.) Hidden
Creative Software AutoUpdate (HKLM-x32\...\Creative Software AutoUpdate) (Version: 1.41 - Creative Technology Limited)
Creative Sound Blaster Properties x64 Edition (HKLM-x32\...\Creative Sound Blaster Properties x64 Edition) (Version: 1.03 - Creative Technology Limited)
Dishonored 2 (HKLM\...\Steam App 403640) (Version: - Arkane Studios)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 60.0.3112.90 - Google Inc.)
Google Update Helper (HKLM-x32\...\{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.33.5 - Google Inc.) Hidden
HD Tune Pro 5.60 (HKLM-x32\...\HD Tune Pro_is1) (Version: - EFD Software)
Java 8 Update 144 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F32180144F0}) (Version: 8.0.1440.1 - Oracle Corporation)
Kaspersky Anti-Virus (HKLM-x32\...\{E27B1D7B-3B34-43A2-9FC0-9828D5DF46E2}) (Version: 17.0.0.611 - Kaspersky Lab) Hidden
Kaspersky Anti-Virus (HKLM-x32\...\InstallWIX_{E27B1D7B-3B34-43A2-9FC0-9828D5DF46E2}) (Version: 17.0.0.611 - Kaspersky Lab)
Kaspersky Secure Connection (HKLM-x32\...\{1CF84962-50F8-48CA-9082-B70F3A02C686}) (Version: 17.0.0.611 - Kaspersky Lab) Hidden
Kaspersky Secure Connection (HKLM-x32\...\InstallWIX_{1CF84962-50F8-48CA-9082-B70F3A02C686}) (Version: 17.0.0.611 - Kaspersky Lab)
Logitech SetPoint 6.67 (HKLM\...\sp6) (Version: 6.67.83 - Logitech)
Metro 2033 (HKLM\...\Steam App 43110) (Version: - 4A Games)
Microsoft Office 365 ProPlus - pt-br (HKLM\...\O365ProPlusRetail - pt-br) (Version: 16.0.8229.2103 - Microsoft Corporation)
Microsoft OneDrive (HKU\S-1-5-21-674093975-4215423661-3431736297-1001\...\OneDriveSetup.exe) (Version: 17.3.6943.0625 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{A49F249F-0C91-497F-86DF-B2585E8E76B7}) (Version: 8.0.50727.42 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x64) - 14.0.24215 (HKLM-x32\...\{d992c12e-cab2-426f-bde3-fb8c53950b0d}) (Version: 14.0.24215.1 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.24212 (HKLM-x32\...\{462f63a8-6347-4894-a1b3-dbfe3a4c981d}) (Version: 14.0.24212.0 - Microsoft Corporation)
MSI Afterburner 4.3.0 (HKLM-x32\...\Afterburner) (Version: 4.3.0 - MSI Co., LTD)
NVIDIA PhysX (HKLM-x32\...\{80407BA7-7763-4395-AB98-5233F1B34E65}) (Version: 9.13.1220 - NVIDIA Corporation)
Office 16 Click-to-Run Extensibility Component (HKLM-x32\...\{90160000-008C-0000-0000-0000000FF1CE}) (Version: 16.0.8229.2103 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Extensibility Component 64-bit Registration (HKLM\...\{90160000-00DD-0000-1000-0000000FF1CE}) (Version: 16.0.8229.2103 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Licensing Component (HKLM\...\{90160000-008F-0000-1000-0000000FF1CE}) (Version: 16.0.8229.2103 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Localization Component (HKLM-x32\...\{90160000-008C-0416-0000-0000000FF1CE}) (Version: 16.0.8229.2045 - Microsoft Corporation) Hidden
OpenAL (HKLM-x32\...\OpenAL) (Version: - )
Opera Stable 46.0.2597.57 (HKLM-x32\...\Opera 46.0.2597.57) (Version: 46.0.2597.57 - Opera Software)
Origin (HKLM-x32\...\Origin) (Version: 10.5.1.43152 - Electronic Arts, Inc.)
Painel de controle de áudio da Creative (HKLM-x32\...\AudioCS) (Version: 3.00 - Creative Technology Limited)
PotPlayer-64 bit (HKLM\...\PotPlayer64) (Version: - Kakao Corp.)
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 10.18.526.2017 - Realtek)
RivaTuner Statistics Server 7.0.0 Beta 19 (HKLM-x32\...\RTSS) (Version: 7.0.0 Beta 19 - Unwinder)
TeamSpeak 3 Client (HKLM\...\TeamSpeak 3 Client) (Version: 3.1.5 - TeamSpeak Systems GmbH)
TechPowerUp GPU-Z (HKLM-x32\...\TechPowerUp GPU-Z) (Version: - TechPowerUp)
Twitch (HKLM-x32\...\{A20BFF62-AE3C-42BD-9C52-841CAB96BC49}) (Version: 6.0.0.0 - Twitch Interactive, Inc.)
Vulkan Run Time Libraries 1.0.39.1 (HKLM\...\VulkanRT1.0.39.1) (Version: 1.0.39.1 - LunarG, Inc.)
WhatsApp (HKU\S-1-5-21-674093975-4215423661-3431736297-1001\...\WhatsApp) (Version: 0.2.5371 - WhatsApp)
WinRAR 5.40 (64-bit) (HKLM\...\WinRAR archiver) (Version: 5.40.0 - win.rar GmbH)
Yahoo Search Set (HKLM-x32\...\Yahoo! SearchSet) (Version: - Yahoo Inc.)
==================== Exame Personalizado CLSID (Whitelisted): ==========================
(Se uma entrada for incluída na fixlist, será removida do Registro. O arquivo não será movido, a menos que seja colocado separadamente.)
ContextMenuHandlers1: [Kaspersky Anti-Virus 17.0.0] -> {39C9FA89-7012-4573-A92D-BFD1F8CA542D} => C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 17.0.0\x64\shellex.dll [2017-04-28] (AO Kaspersky Lab)
ContextMenuHandlers1: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2016-08-15] (Alexander Roshal)
ContextMenuHandlers1-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2016-08-15] (Alexander Roshal)
ContextMenuHandlers2: [Kaspersky Anti-Virus 17.0.0] -> {39C9FA89-7012-4573-A92D-BFD1F8CA542D} => C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 17.0.0\x64\shellex.dll [2017-04-28] (AO Kaspersky Lab)
ContextMenuHandlers4: [Kaspersky Anti-Virus 17.0.0] -> {39C9FA89-7012-4573-A92D-BFD1F8CA542D} => C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 17.0.0\x64\shellex.dll [2017-04-28] (AO Kaspersky Lab)
ContextMenuHandlers5: [ACE] -> {5E2121EE-0300-11D4-8D3B-444553540000} => C:\Program Files\AMD\CNext\CNext\atiacm64.dll [2017-06-12] (Advanced Micro Devices, Inc.)
ContextMenuHandlers6: [Kaspersky Anti-Virus 17.0.0] -> {39C9FA89-7012-4573-A92D-BFD1F8CA542D} => C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 17.0.0\x64\shellex.dll [2017-04-28] (AO Kaspersky Lab)
ContextMenuHandlers6: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2016-08-15] (Alexander Roshal)
ContextMenuHandlers6-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2016-08-15] (Alexander Roshal)
==================== Tarefas Agendadas (Whitelisted) =============
(Se uma entrada for incluída na fixlist, será removida do Registro. O arquivo não será movido, a menos que seja colocado separadamente.)
Task: {007A689E-1ED9-45EB-8B5E-D8C4BE0CE32B} - System32\Tasks\StartCN => C:\Program Files\AMD\CNext\CNext\cncmd.exe [2017-06-12] (Advanced Micro Devices, Inc.)
Task: {0BD04513-B002-45CF-B896-109920FE2063} - System32\Tasks\Microsoft\Office\OfficeBackgroundTaskHandlerRegistration => C:\Program Files (x86)\Microsoft Office\root\Office16\officebackgroundtaskhandler.exe [2017-07-11] ()
Task: {1F5645C1-19CC-4F32-AC12-AE0B37EC2B3D} - System32\Tasks\Microsoft\Office\Office Automatic Updates => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [2017-07-18] (Microsoft Corporation)
Task: {277B0A71-2152-4BBE-A1DE-B16A9624D62B} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack2016 => C:\Program Files (x86)\Microsoft Office\root\Office16\msoia.exe [2017-07-26] (Microsoft Corporation)
Task: {2C62F394-A771-4ED4-9C76-FEA5D8A19D0D} - System32\Tasks\Microsoft\Office\OfficeBackgroundTaskHandlerLogon => C:\Program Files (x86)\Microsoft Office\root\Office16\officebackgroundtaskhandler.exe [2017-07-11] ()
Task: {2D4622C2-B7F3-4295-95B1-D648588444F4} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2017-07-19] (Adobe Systems Incorporated)
Task: {577FD81A-F4F5-4D8A-B0F1-9AC9C56555C2} - System32\Tasks\Win Update => c:\Intell\POOL\russian.vbs
Task: {640E0DE3-1540-4189-AF0D-B0C69F438DDE} - System32\Tasks\Adobe Flash Player PPAPI Notifier => C:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_26_0_0_137_pepper.exe [2017-07-22] (Adobe Systems Incorporated)
Task: {68DA7731-CFB4-471B-8738-80D24244B34D} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [2017-07-18] (Microsoft Corporation)
Task: {7A592542-45DE-4879-AB2B-C4788DD387EE} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2017-07-11] (Google Inc.)
Task: {7CB7A85F-CC36-4F90-AC8C-786438B6B57B} - System32\Tasks\Opera scheduled Autoupdate 1499787590 => C:\Program Files (x86)\Opera\launcher.exe [2017-07-18] (Opera Software)
Task: {D5CD1B82-D9F9-41CE-800B-D9166FA3F7A3} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2017-07-11] (Google Inc.)
Task: {E046541D-EF89-4765-9076-34A93E31871A} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn2016 => C:\Program Files (x86)\Microsoft Office\root\Office16\msoia.exe [2017-07-26] (Microsoft Corporation)
Task: {FDE7CCBF-1413-48E0-8C50-4F346C04C630} - System32\Tasks\Microsoft\Office\Office Subscription Maintenance => C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonx86\Microsoft Shared\Office16\OLicenseHeartbeat.exe [2017-07-26] (Microsoft Corporation)
(Se uma entrada for incluída na fixlist, o arquivo da tarefa (.job) será movido. O arquivo que está sendo executado pela tarefa não será movido.)
==================== Atalhos & WMI ========================
(As entradas podem ser listadas para serem restauradas ou removidas.)
==================== Módulos Carregados (Whitelisted) ==============
2016-10-20 19:55 - 2017-04-08 11:40 - 000428232 _____ () C:\Program Files (x86)\RivaTuner Statistics Server\RTSSHooks64.dll
2016-09-13 14:37 - 2016-09-13 14:37 - 000014336 _____ () C:\Program Files\AMD\CNext\CNext\QtQuick.2\qtquick2plugin.dll
2016-09-13 14:37 - 2016-09-13 14:37 - 000739840 _____ () C:\Program Files\AMD\CNext\CNext\QtQuick\Controls\qtquickcontrolsplugin.dll
2016-09-13 14:37 - 2016-09-13 14:37 - 000014336 _____ () C:\Program Files\AMD\CNext\CNext\QtQuick\Window.2\windowplugin.dll
2016-09-13 14:37 - 2016-09-13 14:37 - 000071168 _____ () C:\Program Files\AMD\CNext\CNext\QtQuick\Layouts\qquicklayoutsplugin.dll
2016-09-13 14:36 - 2016-09-13 14:36 - 000011776 _____ () C:\Program Files\AMD\CNext\CNext\libEGL.dll
2016-09-13 14:36 - 2016-09-13 14:36 - 002013696 _____ () C:\Program Files\AMD\CNext\CNext\libGLESv2.dll
2016-09-13 14:37 - 2016-09-13 14:37 - 000191488 _____ () C:\Program Files\AMD\CNext\CNext\QtQuick\Dialogs\dialogplugin.dll
2017-03-18 17:58 - 2017-03-18 17:58 - 000138000 _____ () C:\Windows\SYSTEM32\inputhost.dll
2017-03-18 17:59 - 2017-03-20 00:59 - 001731072 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll
2017-07-18 14:13 - 2017-07-18 14:13 - 000074752 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.19.820.0_x64__kzf8qxf38zg5c\SkypeHost.exe
2017-07-18 14:13 - 2017-07-18 14:13 - 000203264 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.19.820.0_x64__kzf8qxf38zg5c\SkypeBackgroundTasks.dll
2016-10-24 07:03 - 2016-10-24 07:03 - 000589512 _____ () C:\Program Files (x86)\MSI Afterburner\MSIAfterburner.exe
2017-04-08 11:35 - 2017-04-08 11:35 - 000241152 _____ () C:\Program Files (x86)\RivaTuner Statistics Server\RTSS.exe
2017-04-08 11:35 - 2017-04-08 11:35 - 000027136 _____ () C:\Program Files (x86)\RivaTuner Statistics Server\EncoderServer.exe
2017-04-08 11:35 - 2017-04-08 11:35 - 000088576 _____ () C:\Program Files (x86)\RivaTuner Statistics Server\RTSSHooksLoader64.exe
2016-06-28 00:19 - 2016-06-28 00:19 - 000865232 _____ () C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 17.0.0\kpcengine.2.3.dll
2017-08-09 19:11 - 2017-08-09 11:28 - 002493440 _____ () F:\Origin\libGLESv2.dll
2016-10-20 19:55 - 2017-04-08 11:40 - 000400072 _____ () C:\Program Files (x86)\RivaTuner Statistics Server\RTSSHooks.dll
2017-07-11 13:18 - 2017-07-11 13:18 - 000164552 _____ () C:\Program Files (x86)\Microsoft Office\root\Office16\JitV.dll
2017-07-11 12:31 - 2006-06-09 15:19 - 000003072 _____ () C:\Windows\system32\CTXFIBRZ.DLL
2017-07-20 13:27 - 2017-07-20 13:27 - 065368152 _____ () C:\Program Files (x86)\Opera\46.0.2597.57\opera_browser.dll
2017-07-20 13:27 - 2017-07-20 13:26 - 002946648 _____ () C:\Program Files (x86)\Opera\46.0.2597.57\libglesv2.dll
2017-07-20 13:27 - 2017-07-20 13:26 - 000087128 _____ () C:\Program Files (x86)\Opera\46.0.2597.57\libegl.dll
2016-10-10 13:46 - 2016-10-10 13:46 - 000071680 _____ () C:\Program Files (x86)\MSI Afterburner\RTMUI.dll
2016-10-10 13:46 - 2016-10-10 13:46 - 000228864 _____ () C:\Program Files (x86)\MSI Afterburner\RTCore.dll
2016-10-10 13:46 - 2016-10-10 13:46 - 000526848 _____ () C:\Program Files (x86)\MSI Afterburner\RTHAL.dll
2016-10-10 13:46 - 2016-10-10 13:46 - 000056832 _____ () C:\Program Files (x86)\MSI Afterburner\RTFC.dll
2016-10-10 13:46 - 2016-10-10 13:46 - 000357888 _____ () C:\Program Files (x86)\MSI Afterburner\RTUI.dll
2017-04-08 11:35 - 2017-04-08 11:35 - 000353792 _____ () C:\Program Files (x86)\RivaTuner Statistics Server\RTUI.dll
2017-04-08 11:35 - 2017-04-08 11:35 - 000071680 _____ () C:\Program Files (x86)\RivaTuner Statistics Server\RTMUI.dll
2017-04-08 11:34 - 2017-04-08 11:34 - 000055808 _____ () C:\Program Files (x86)\RivaTuner Statistics Server\RTFC.dll
==================== Alternate Data Streams (Whitelisted) =========
(Se uma entrada for incluída na fixlist, somente o ADS será removido.)
==================== Modo de Segurança (Whitelisted) ===================
(Se uma entrada for incluída na fixlist, será removida do Registro. O valor "AlternateShell" será restaurado.)
==================== Associação (Whitelisted) ===============
(Se uma entrada for incluída na fixlist, o ítem no Registro será restaurado para o padrão ou removido.)
==================== Internet Explorer confiável/restrito ===============
(Se uma entrada for incluída na fixlist, será removida do Registro.)
IE trusted site: HKU\S-1-5-21-674093975-4215423661-3431736297-1001\...\sharepoint.com -> hxxps://eduunifacs-files.sharepoint.com
==================== Hosts Conteúdo: ===============================
(Se necessário, a diretiva Hosts: pode ser incluída na fixlist para redefinir o Hosts.)
2017-03-18 18:03 - 2017-03-18 18:01 - 000000824 _____ C:\Windows\system32\Drivers\etc\hosts
==================== Outras Áreas ============================
(Atualmente não há nenhuma correção automática para esta seção.)
HKU\S-1-5-21-674093975-4215423661-3431736297-1001\Control Panel\Desktop\\Wallpaper -> G:\Papéis de Parede\Planetas\Galaxy-planets-light-stars-Earth_1600x900.jpg
DNS Servers: 186.207.160.72 - 186.207.160.76
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: )
Firewall do Windows está habilitado.
==================== MSCONFIG/TASK MANAGER ítens desabilitados ==
==================== Regras do Firewall (Whitelisted) ===============
(Se uma entrada for incluída na fixlist, será removida do Registro. O arquivo não será movido, a menos que seja colocado separadamente.)
FirewallRules: [{2DA23449-2151-4C2F-B295-3DC7FA51D21F}] => (Allow) C:\Users\msfre\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{EEB979C3-2B6F-4054-839D-224D63587387}] => (Allow) C:\Users\msfre\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{58C6A378-8A0A-4F0D-9FF3-D4B60F0CDDF1}] => (Allow) C:\Users\msfre\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{75692A47-7932-494B-941D-DD87D218739A}] => (Allow) C:\Users\msfre\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{4C28235D-5EB1-42E5-B9FF-5EC402D2BEB0}] => (Allow) C:\Users\msfre\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{CB4D7A25-1D39-4096-A289-AF37266AE4F1}] => (Allow) C:\Users\msfre\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{3B52F27A-4485-4E56-B639-29DEA1D25D6A}] => (Allow) G:\Steam\Steam.exe
FirewallRules: [{266DF20E-7AA3-474C-9151-DBA272CBAAFA}] => (Allow) G:\Steam\Steam.exe
FirewallRules: [{53D49DA9-2676-4B58-8177-B76BD4B26C46}] => (Allow) G:\Steam\bin\cef\cef.win7\steamwebhelper.exe
FirewallRules: [{6056B560-0073-4C60-9782-FB9982A9D7FB}] => (Allow) G:\Steam\bin\cef\cef.win7\steamwebhelper.exe
FirewallRules: [{507BA427-C3D7-4DFE-8CA5-0F5F487F48F1}] => (Allow) G:\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{4E57B286-069C-4D28-955A-6874438DBEB5}] => (Allow) G:\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{DD60F3CE-392E-4E18-954C-4D56F2CFCD4B}] => (Allow) G:\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2cfg.exe
FirewallRules: [{C180C338-88D0-49E6-9424-1AE8F51B365B}] => (Allow) G:\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2cfg.exe
FirewallRules: [{D23E6324-B2BA-40EE-B587-32DD768660DA}] => (Allow) G:\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{92F157AA-B3DF-4A01-9185-84431D258977}] => (Allow) G:\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{598BF0D9-6545-454A-90DB-F5B2E1AFB715}] => (Allow) G:\Steam\steamapps\common\Counter-Strike Global Offensive\csgo.exe
FirewallRules: [{902F26B0-1402-407B-B077-C908E3870D8B}] => (Allow) G:\Steam\steamapps\common\Counter-Strike Global Offensive\csgo.exe
FirewallRules: [{700D3C30-664A-4702-8034-BC19A1243C88}] => (Allow) C:\Program Files (x86)\Microsoft Office\root\Office16\outlook.exe
FirewallRules: [{F8C0C258-149C-4DA4-AC5D-16D4F9CC7967}] => (Allow) C:\Program Files (x86)\Microsoft Office\root\Office16\Lync.exe
FirewallRules: [{436711FB-F7E3-4B45-B0D8-3042C5E5B616}] => (Allow) C:\Program Files (x86)\Microsoft Office\root\Office16\Lync.exe
FirewallRules: [{3DC90EE2-DD40-455A-8C34-EDDBEE9881BA}] => (Allow) C:\Program Files (x86)\Microsoft Office\root\Office16\UcMapi.exe
FirewallRules: [{EE153D38-A3F5-41C5-96A6-FDBC3DF8568E}] => (Allow) C:\Program Files (x86)\Microsoft Office\root\Office16\UcMapi.exe
FirewallRules: [TCP Query User{9175ADE6-7825-4396-8CC8-825535832901}G:\steam\steamapps\common\rise of the tomb raider\rottr.exe] => (Allow) G:\steam\steamapps\common\rise of the tomb raider\rottr.exe
FirewallRules: [UDP Query User{F7D5802F-4699-45A6-8B97-6817C73CDCEF}G:\steam\steamapps\common\rise of the tomb raider\rottr.exe] => (Allow) G:\steam\steamapps\common\rise of the tomb raider\rottr.exe
FirewallRules: [{C061A886-67EA-45E0-90B5-EFBC269C6F78}] => (Allow) G:\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{E6C86DA7-6E89-4CBD-AC23-CCAC665D58DE}] => (Allow) G:\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{BA5F7585-6AE8-4460-9136-9BDEC0354ACB}] => (Allow) G:\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{B27588D0-8B9F-4764-A712-7A1BF45637E1}] => (Allow) G:\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{F234BAAA-B5E6-4819-8D4D-E66956ABE55E}] => (Allow) C:\Program Files (x86)\Opera\46.0.2597.46\opera.exe
FirewallRules: [{9E4249C6-4E88-4CE0-915F-52059FD8E542}] => (Allow) G:\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{8C140752-2AE8-478C-9F33-93AAB4879EF0}] => (Allow) G:\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{86462EA8-6FF8-451B-8298-5461C6295292}] => (Allow) G:\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{5F9F1FA8-9C91-49F6-877A-3B353F8EB9A5}] => (Allow) G:\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{9C73E83F-60BC-460C-80F5-E3F99A02A1C1}] => (Allow) G:\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{CD59DD02-80F4-40B5-B78E-D25FE55E5206}] => (Allow) G:\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{94997A85-B81B-4A19-85C9-44364DB8407C}] => (Allow) G:\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{352B078A-5A9A-45F0-AE57-353ED272A27B}] => (Allow) G:\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{0771E729-659D-4DBF-9A31-371064A11322}] => (Allow) G:\Steam\steamapps\common\Metro 2033\metro2033.exe
FirewallRules: [{83D516CF-CDDF-4A0B-8072-E98A34AC95A1}] => (Allow) G:\Steam\steamapps\common\Metro 2033\metro2033.exe
FirewallRules: [{3505DDC0-7B9F-42D5-BB11-C88E79953C3C}] => (Allow) G:\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{59866A6E-D4EC-418B-97C1-116C50D53731}] => (Allow) G:\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{26A0D0E4-8593-4873-B2FF-8697616744A1}] => (Allow) G:\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{E199ABE9-1E04-418E-862D-972CA5917BBE}] => (Allow) G:\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{49B3C53F-83E7-4598-86D2-10B92DDD8FCD}] => (Allow) G:\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{13DD74A0-3472-48CF-A059-CF4554B57E2E}] => (Allow) G:\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [TCP Query User{25A02BF2-4656-4CB2-B028-ED5480212ECD}G:\steam\steamapps\common\unreal tournament 3\binaries\ut3.exe] => (Allow) G:\steam\steamapps\common\unreal tournament 3\binaries\ut3.exe
FirewallRules: [UDP Query User{8748B0B9-0EB6-4BD6-8A54-D2FC61E22744}G:\steam\steamapps\common\unreal tournament 3\binaries\ut3.exe] => (Allow) G:\steam\steamapps\common\unreal tournament 3\binaries\ut3.exe
FirewallRules: [{24F39AEC-4669-4424-9BEA-1AB31636F64F}] => (Allow) C:\Program Files (x86)\Opera\46.0.2597.57\opera.exe
FirewallRules: [{EA60D579-EF6B-4417-A5A6-181668D910A4}] => (Allow) G:\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{375ED75C-0714-4B31-A4BD-D58E604EEEA8}] => (Allow) G:\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{686EA5F2-E2EF-484F-8C79-286B8FED2182}] => (Allow) G:\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{0D0C92B3-42A6-4C4E-A34D-87BBA63ABE0C}] => (Allow) G:\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{301AB62B-D875-44A2-BE5D-7E2CF0B45781}] => (Allow) G:\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{395BB8C1-73C0-45C1-A55E-EFF2645BCF88}] => (Allow) G:\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{78E130D8-F56A-4AE8-BEF1-36E79A1A98E8}] => (Allow) G:\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{CB5FE3E3-D2E0-4630-956B-CD1C47363DD3}] => (Allow) G:\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{F1D415F8-348E-4CE0-8233-6D7332B332EF}] => (Allow) G:\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{AA721428-CC66-4576-9185-AAAED74C2A41}] => (Allow) G:\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{6F17EAF0-D4DB-40A4-A3F2-EF0D6FE1A9CC}] => (Allow) G:\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{05E3AE12-BA37-4DE6-90AE-F5662BEA3313}] => (Allow) G:\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{7DE3AC5B-4FCD-4611-A793-7D4823F1F3A2}] => (Allow) G:\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{409C7A23-AF05-46CB-A256-8E85D39E539C}] => (Allow) G:\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{47897C19-647A-4618-AC83-AF060BD9B1EB}] => (Allow) G:\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{A69D77EA-FA12-49B1-AB42-B4AC894F3EDA}] => (Allow) G:\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{1CD871AB-72A2-4AE6-A289-2E0ED4F81C18}] => (Allow) G:\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{0D24FC89-8344-4473-B776-1B7C3D45F934}] => (Allow) G:\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{F2FB4988-D97A-4E52-8A87-52B8754C367B}] => (Allow) G:\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{F826903C-90E4-4888-A8EF-717A91DA6F0F}] => (Allow) G:\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{559D22D9-E263-45E7-BEF4-6EA31B101A37}] => (Allow) G:\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{B7A4BE4F-0200-4E80-A36A-21DB566196D5}] => (Allow) G:\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{2377DECC-C7C6-41F7-99E1-240037E7B15F}] => (Allow) G:\Steam\steamapps\common\Dishonored2\Dishonored2.exe
FirewallRules: [{C2880A9C-CC18-4CEF-B47F-76DD374DCA50}] => (Allow) G:\Steam\steamapps\common\Dishonored2\Dishonored2.exe
FirewallRules: [{7A30580D-5CF1-40D8-8089-273F28B2E98E}] => (Allow) G:\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{C94851C5-B950-4744-B473-20957E899B38}] => (Allow) G:\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{62982292-C704-4B9E-89DF-77F6CFE0BDAB}] => (Allow) G:\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{815B0008-AF81-4E5B-A92C-9C8DD274D580}] => (Allow) G:\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{E34D18EB-D189-4485-9FB3-9AB7CA688F79}] => (Allow) G:\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{44BB64A3-13AC-4E1B-9FF6-F2C542810DE2}] => (Allow) G:\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{D5B4CB64-8678-421A-B117-62A0FAD616C8}] => (Allow) G:\Steam\steamapps\common\Don't Starve Together\bin\dontstarve_steam.exe
FirewallRules: [{4218325C-585C-408C-B5E2-A6AA37CA62A9}] => (Allow) G:\Steam\steamapps\common\Don't Starve Together\bin\dontstarve_steam.exe
FirewallRules: [{B8B6912D-9C1C-4C7B-B2F3-40BF6748C391}] => (Allow) G:\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{00EC60B9-B8D3-4E53-9141-D6C5C398F61E}] => (Allow) G:\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [TCP Query User{E078E4F0-62FA-4643-8DA1-F1B29F6E1136}G:\steam\steamapps\common\don't starve together\bin\dontstarve_dedicated_server_nullrenderer.exe] => (Allow) G:\steam\steamapps\common\don't starve together\bin\dontstarve_dedicated_server_nullrenderer.exe
FirewallRules: [UDP Query User{8F2B04CC-550A-4F8E-B347-BE97443C2A93}G:\steam\steamapps\common\don't starve together\bin\dontstarve_dedicated_server_nullrenderer.exe] => (Allow) G:\steam\steamapps\common\don't starve together\bin\dontstarve_dedicated_server_nullrenderer.exe
FirewallRules: [{CFA87CA1-46F4-45A5-91E0-3304190B6978}] => (Allow) G:\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{750FAB83-F20E-4700-AFD9-7E09142397AF}] => (Allow) G:\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{19D556FE-2C90-4556-AE0C-92DF81D69597}] => (Allow) G:\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{C420F48E-54AF-4C8D-8DD5-DC8C9A2EB9E4}] => (Allow) G:\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{7A6AD9D7-ACAE-4930-A1FD-23A73B2209AF}] => (Allow) G:\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{9A6DE949-0CDE-4CC7-8135-BB8BDF84971C}] => (Allow) G:\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{6EC9607F-1804-4ED2-9100-7BF1A98C01FE}] => (Allow) G:\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{6811BA1B-0C1D-4C88-A6EF-A5FB1287E798}] => (Allow) G:\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{C44C4F82-623B-4532-93DE-C3BDCE891B28}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
FirewallRules: [{180DB48C-F446-4ECD-8ACE-D6B0AFACF5C9}] => (Allow) G:\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{AF6E3A93-D096-459D-8EC3-A07CCEA164CE}] => (Allow) G:\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{180B3333-1302-4E67-A91F-E68F44800A68}] => (Allow) G:\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{6563CF33-D190-4761-A169-C3C68CE2BC53}] => (Allow) G:\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [TCP Query User{AF2363B2-1775-42DA-A6B9-9FDDA795D05C}G:\jogos\oxygen not included\oxygen.not.included.v221697\oxygennotincluded.exe] => (Allow) G:\jogos\oxygen not included\oxygen.not.included.v221697\oxygennotincluded.exe
FirewallRules: [UDP Query User{6EEFD132-923C-426F-A41F-1394788FAE3A}G:\jogos\oxygen not included\oxygen.not.included.v221697\oxygennotincluded.exe] => (Allow) G:\jogos\oxygen not included\oxygen.not.included.v221697\oxygennotincluded.exe
FirewallRules: [{72A7AD5C-FC15-49CD-952F-1489A1D67CB1}] => (Allow) G:\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{C5F43B29-3C9B-4B2F-8550-16258116219C}] => (Allow) G:\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{029BDD56-EAEB-4FCA-BFD9-79283612472D}] => (Allow) G:\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{069A409E-D37E-412A-A748-0627B5E5A52C}] => (Allow) G:\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{28DD98EC-E221-4269-894C-1EFC4FD5BC0F}] => (Allow) G:\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{474CB2B3-C26D-4489-B1C3-8D016E17170A}] => (Allow) G:\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe
==================== Pontos de Restauração =========================
02-08-2017 00:42:19 Ponto 1 - 02/08/2017
08-08-2017 19:14:43 Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.24212
12-08-2017 00:12:17 Microsoft Visual C++ 2015 Redistributable (x64) - 14.0.24215
==================== Dispositivos Apresentando Falhas No Gerenciador =============
==================== Erros no Log de eventos: =========================
Erros em Aplicativos:
==================
Error: (08/13/2017 03:08:31 PM) (Source: SecurityCenter) (EventID: 16) (User: )
Description: Erro ao atualizar o status para SECURITY_PRODUCT_STATE_OFF.
Error: (08/13/2017 03:05:07 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Nome do aplicativo com falha: RTSS.exe, versão: 7.0.0.13333, carimbo de data/hora: 0x58e8f525
Nome do módulo com falha: MSVCR90.dll, versão: 9.0.30729.9279, carimbo de data/hora: 0x57fb316a
Código de exceção: 0x40000015
Deslocamento da falha: 0x0005beae
ID do processo com falha: 0xe1c
Hora de início do aplicativo com falha: 0x01d3145eae268382
Caminho do aplicativo com falha: C:\Program Files (x86)\RivaTuner Statistics Server\RTSS.exe
Caminho do módulo com falha: C:\Windows\WinSxS\x86_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.9279_none_50939ec6bcb7c97c\MSVCR90.dll
ID do Relatório: 432ed90f-8575-4f8d-9729-1930d95f21c4
Nome completo do pacote com falha:
ID do aplicativo relativo ao pacote com falha:
Error: (08/13/2017 03:04:02 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Nome do aplicativo com falha: RTSS.exe, versão: 7.0.0.13333, carimbo de data/hora: 0x58e8f525
Nome do módulo com falha: MSVCR90.dll, versão: 9.0.30729.9279, carimbo de data/hora: 0x57fb316a
Código de exceção: 0x40000015
Deslocamento da falha: 0x0005beae
ID do processo com falha: 0x3b74
Hora de início do aplicativo com falha: 0x01d3145e8a2480e5
Caminho do aplicativo com falha: C:\Program Files (x86)\RivaTuner Statistics Server\RTSS.exe
Caminho do módulo com falha: C:\Windows\WinSxS\x86_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.9279_none_50939ec6bcb7c97c\MSVCR90.dll
ID do Relatório: 1cc7cf60-7d2c-43f2-98ea-528a598fcf3e
Nome completo do pacote com falha:
ID do aplicativo relativo ao pacote com falha:
Error: (08/13/2017 03:03:56 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Nome do aplicativo com falha: RTSS.exe, versão: 7.0.0.13333, carimbo de data/hora: 0x58e8f525
Nome do módulo com falha: MSVCR90.dll, versão: 9.0.30729.9279, carimbo de data/hora: 0x57fb316a
Código de exceção: 0x40000015
Deslocamento da falha: 0x0005beae
ID do processo com falha: 0x139c
Hora de início do aplicativo com falha: 0x01d3145e85662918
Caminho do aplicativo com falha: C:\Program Files (x86)\RivaTuner Statistics Server\RTSS.exe
Caminho do módulo com falha: C:\Windows\WinSxS\x86_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.9279_none_50939ec6bcb7c97c\MSVCR90.dll
ID do Relatório: 03110d29-80e7-4b26-aaa8-641861d8087b
Nome completo do pacote com falha:
ID do aplicativo relativo ao pacote com falha:
Error: (08/13/2017 03:03:45 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Nome do aplicativo com falha: RTSS.exe, versão: 7.0.0.13333, carimbo de data/hora: 0x58e8f525
Nome do módulo com falha: MSVCR90.dll, versão: 9.0.30729.9279, carimbo de data/hora: 0x57fb316a
Código de exceção: 0x40000015
Deslocamento da falha: 0x0005beae
ID do processo com falha: 0x33e8
Hora de início do aplicativo com falha: 0x01d3145e7fb1dc44
Caminho do aplicativo com falha: C:\Program Files (x86)\RivaTuner Statistics Server\RTSS.exe
Caminho do módulo com falha: C:\Windows\WinSxS\x86_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.9279_none_50939ec6bcb7c97c\MSVCR90.dll
ID do Relatório: 3ee5800e-bf13-4316-bf1f-207313654fbc
Nome completo do pacote com falha:
ID do aplicativo relativo ao pacote com falha:
Error: (08/13/2017 03:03:39 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Nome do aplicativo com falha: RTSS.exe, versão: 7.0.0.13333, carimbo de data/hora: 0x58e8f525
Nome do módulo com falha: MSVCR90.dll, versão: 9.0.30729.9279, carimbo de data/hora: 0x57fb316a
Código de exceção: 0x40000015
Deslocamento da falha: 0x0005beae
ID do processo com falha: 0x17f8
Hora de início do aplicativo com falha: 0x01d3145e7b86fddb
Caminho do aplicativo com falha: C:\Program Files (x86)\RivaTuner Statistics Server\RTSS.exe
Caminho do módulo com falha: C:\Windows\WinSxS\x86_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.9279_none_50939ec6bcb7c97c\MSVCR90.dll
ID do Relatório: 55d9463b-9e86-443c-80ec-3f1bc9770b2b
Nome completo do pacote com falha:
ID do aplicativo relativo ao pacote com falha:
Error: (08/13/2017 03:03:31 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Nome do aplicativo com falha: RTSS.exe, versão: 7.0.0.13333, carimbo de data/hora: 0x58e8f525
Nome do módulo com falha: MSVCR90.dll, versão: 9.0.30729.9279, carimbo de data/hora: 0x57fb316a
Código de exceção: 0x40000015
Deslocamento da falha: 0x0005beae
ID do processo com falha: 0x2300
Hora de início do aplicativo com falha: 0x01d3145e775815ee
Caminho do aplicativo com falha: C:\Program Files (x86)\RivaTuner Statistics Server\RTSS.exe
Caminho do módulo com falha: C:\Windows\WinSxS\x86_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.9279_none_50939ec6bcb7c97c\MSVCR90.dll
ID do Relatório: 6436747f-b165-464e-8d13-ef855db73333
Nome completo do pacote com falha:
ID do aplicativo relativo ao pacote com falha:
Error: (08/13/2017 03:03:23 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Nome do aplicativo com falha: RTSS.exe, versão: 7.0.0.13333, carimbo de data/hora: 0x58e8f525
Nome do módulo com falha: MSVCR90.dll, versão: 9.0.30729.9279, carimbo de data/hora: 0x57fb316a
Código de exceção: 0x40000015
Deslocamento da falha: 0x0005beae
ID do processo com falha: 0x1b44
Hora de início do aplicativo com falha: 0x01d3145e70365833
Caminho do aplicativo com falha: C:\Program Files (x86)\RivaTuner Statistics Server\RTSS.exe
Caminho do módulo com falha: C:\Windows\WinSxS\x86_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.9279_none_50939ec6bcb7c97c\MSVCR90.dll
ID do Relatório: 398a7867-418a-4a09-bf9b-613c74cb31d5
Nome completo do pacote com falha:
ID do aplicativo relativo ao pacote com falha:
Error: (08/13/2017 02:52:30 PM) (Source: SideBySide) (EventID: 33) (User: )
Description: Falha na geração de contexto de ativação para "c:\program files\amd\cim\bin64\SetACL64.exe".
Assembly dependente Microsoft.VC80.MFC,processorArchitecture="amd64",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0" não pôde ser localizado.
Use o arquivo sxstrace.exe para obter um diagnóstico detalhado.
Error: (08/13/2017 02:52:20 PM) (Source: SideBySide) (EventID: 35) (User: )
Description: Falha na geração de contexto de ativação para "C:\Program Files (x86)\Microsoft Office\root\Office16\lync.exe.Manifest". Erro no arquivo de manifesto ou de política C:\Program Files (x86)\Microsoft Office\root\Office16\UccApi.DLL", na linha 1.
Identidade do componente localizado no manifesto não corresponde à identidade do componente solicitado.
A referência é UccApi,processorArchitecture="AMD64",type="win32",version="16.0.0.0".
A definição é UccApi,processorArchitecture="x86",type="win32",version="16.0.0.0".
Use o arquivo sxstrace.exe para obter um dignóstico detalhado.
Erros de Sistema:
=============
Error: (08/13/2017 03:06:07 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Não foi possível iniciar o serviço CldFlt devido ao seguinte erro:
Não há suporte para o pedido.
Error: (08/12/2017 10:16:06 PM) (Source: DCOM) (EventID: 10016) (User: DESKTOP-5AKS5QE)
Description: As configurações de permissão padrão-computador não concedem permissão Local Ativação para o aplicativo de Servidor COM com CLSID
{C2F03A33-21F5-47FA-B4BB-156362A2F239}
e APPID
{316CDED5-E4AE-4B15-9113-7055D84DCC97}
ao usuário DESKTOP-5AKS5QE\msfre SID (S-1-5-21-674093975-4215423661-3431736297-1001) do endereço LocalHost (Usando LRPC) que está sendo executado no contêiner de aplicativos Microsoft.Windows.Cortana_1.8.12.15063_neutral_neutral_cw5n1h2txyewy SID (S-1-15-2-1861897761-1695161497-2927542615-642690995-327840285-2659745135-2630312742). Essa permissão de segurança pode ser modificada com a ferramenta administrativa Serviços de Componentes.
Error: (08/12/2017 10:16:04 PM) (Source: DCOM) (EventID: 10016) (User: DESKTOP-5AKS5QE)
Description: As configurações de permissão padrão-computador não concedem permissão Local Ativação para o aplicativo de Servidor COM com CLSID
{C2F03A33-21F5-47FA-B4BB-156362A2F239}
e APPID
{316CDED5-E4AE-4B15-9113-7055D84DCC97}
ao usuário DESKTOP-5AKS5QE\msfre SID (S-1-5-21-674093975-4215423661-3431736297-1001) do endereço LocalHost (Usando LRPC) que está sendo executado no contêiner de aplicativos Microsoft.Windows.Cortana_1.8.12.15063_neutral_neutral_cw5n1h2txyewy SID (S-1-15-2-1861897761-1695161497-2927542615-642690995-327840285-2659745135-2630312742). Essa permissão de segurança pode ser modificada com a ferramenta administrativa Serviços de Componentes.
Error: (08/12/2017 10:16:04 PM) (Source: DCOM) (EventID: 10016) (User: DESKTOP-5AKS5QE)
Description: As configurações de permissão padrão-computador não concedem permissão Local Ativação para o aplicativo de Servidor COM com CLSID
{C2F03A33-21F5-47FA-B4BB-156362A2F239}
e APPID
{316CDED5-E4AE-4B15-9113-7055D84DCC97}
ao usuário DESKTOP-5AKS5QE\msfre SID (S-1-5-21-674093975-4215423661-3431736297-1001) do endereço LocalHost (Usando LRPC) que está sendo executado no contêiner de aplicativos Microsoft.Windows.Cortana_1.8.12.15063_neutral_neutral_cw5n1h2txyewy SID (S-1-15-2-1861897761-1695161497-2927542615-642690995-327840285-2659745135-2630312742). Essa permissão de segurança pode ser modificada com a ferramenta administrativa Serviços de Componentes.
Error: (08/11/2017 08:03:31 PM) (Source: Microsoft-Windows-Kernel-Power) (EventID: 137) (User: )
Description: 4
Error: (08/10/2017 12:30:05 AM) (Source: DCOM) (EventID: 10010) (User: DESKTOP-5AKS5QE)
Description: O servidor Microsoft.Windows.Cortana_1.8.12.15063_neutral_neutral_cw5n1h2txyewy!CortanaUI.AppXd4tad4d57t4wtdbnnmb8v2xtzym8c1n8.mca não se registrou no DCOM dentro do tempo limite necessário.
Error: (08/09/2017 12:33:27 AM) (Source: DCOM) (EventID: 10001) (User: DESKTOP-5AKS5QE)
Description: Não é possível iniciar o servidor DCOM: Microsoft.Windows.Cortana_1.8.12.15063_neutral_neutral_cw5n1h2txyewy!CortanaUI.AppXd4tad4d57t4wtdbnnmb8v2xtzym8c1n8.mca como Não Disponível/Não Disponível. O erro:
"31"
Aconteceu ao iniciar este comando:
"C:\Windows\system32\backgroundTaskHost.exe" -ServerName:CortanaUI.AppXy7vb4pc2dr3kc93kfc509b1d0arkfb2x.mca
Error: (08/09/2017 12:33:14 AM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: O serviço Preparação de Aplicativos foi encerrado inesperadamente. Isso aconteceu 1 vez(es).
Error: (08/09/2017 12:13:47 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Não foi possível iniciar o serviço CldFlt devido ao seguinte erro:
Não há suporte para o pedido.
Error: (08/08/2017 03:57:13 PM) (Source: DCOM) (EventID: 10016) (User: AUTORIDADE NT)
Description: As configurações de permissão específico do aplicativo não concedem permissão Local Ativação para o aplicativo de Servidor COM com CLSID
{D63B10C5-BB46-4990-A94F-E40B9D520160}
e APPID
{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}
ao usuário AUTORIDADE NT\SISTEMA SID (S-1-5-18) do endereço LocalHost (Usando LRPC) que está sendo executado no contêiner de aplicativos Não Disponível SID (Não Disponível). Essa permissão de segurança pode ser modificada com a ferramenta administrativa Serviços de Componentes.
CodeIntegrity:
===================================
Date: 2017-08-08 15:57:18.811
Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume3\Windows\System32\amdihk64.dll that did not meet the Store signing level requirements.
Date: 2017-08-07 19:02:44.049
Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume3\Windows\System32\amdihk64.dll that did not meet the Store signing level requirements.
Date: 2017-07-15 17:46:54.019
Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume3\Windows\System32\amdihk64.dll that did not meet the Store signing level requirements.
Date: 2017-07-13 22:23:13.595
Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume3\Windows\System32\amdihk64.dll that did not meet the Store signing level requirements.
Date: 2017-07-12 15:29:04.611
Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume3\Windows\System32\amdihk64.dll that did not meet the Store signing level requirements.
==================== Informações da Memória ===========================
Processador: AMD FX(tm)-6300 Six-Core Processor
Percentagem de memória em uso: 22%
RAM física total: 16332.05 MB
RAM física disponível: 12701.24 MB
Virtual Total: 18764.05 MB
Virtual disponível: 14456.82 MB
==================== Drives ================================
Drive c: () (Fixed) (Total:80.49 GB) (Free:37.95 GB) NTFS ==>[drive com componentes de inicialização (obtido através de BCD)]
Drive d: (Disco Local) (Fixed) (Total:698.63 GB) (Free:191.68 GB) NTFS
Drive e: () (Fixed) (Total:931.51 GB) (Free:890.35 GB) NTFS
Drive f: () (Fixed) (Total:80 GB) (Free:43.83 GB) NTFS
Drive g: () (Fixed) (Total:771.02 GB) (Free:177.2 GB) NTFS
==================== MBR & Tabela de Partições ==================
========================================================
Disk: 0 (Size: 698.6 GB) (Disk ID: FC1F6FE0)
Partition 1: (Not Active) - (Size=698.6 GB) - (Type=07 NTFS)
========================================================
Disk: 1 (MBR Code: Windows 7 or 8) (Size: 931.5 GB) (Disk ID: DFE9AD20)
Partition 1: (Active) - (Size=80.5 GB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=80 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=771 GB) - (Type=07 NTFS)
========================================================
Disk: 2 (MBR Code: Windows 7 or 8) (Size: 931.5 GB) (Disk ID: 7193BB7D)
Partition 1: (Not Active) - (Size=931.5 GB) - (Type=07 NTFS)
==================== Fim de Addition.txt ============================