Resultado da Correção pela Farbar Recovery Scan Tool (x64) Versão: 02.01.2018
Executado por Juan (11-01-2018 10:14:02) Run:1
Executando a partir de C:\Users\Juan\Desktop
Perfis Carregados: Juan (Perfis Disponíveis: Juan)
Modo da Inicialização: Normal
==============================================

fixlist Conteúdo:
*****************
start
Closeprocesses:
ShortcutTarget: u.lnk -> C:\Users\Juan\AppData\Roaming\obwY7IoQz4.exe (Nenhum Arquivo)
ShortcutTarget: Y.lnk -> C:\Users\Juan\AppData\Roaming\objFuzepcn.exe (Nenhum Arquivo)
CHR HKLM\SOFTWARE\Policies\Google: Restrição <==== ATENÇÃO
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://istart.webssearches.com/web/?type=ds&ts=1419942921&from=pcm&uid=HitachiXHDS721010KLA330_GTF002PAHELKEFHELKEFX&q={searchTerms}
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://istart.0.com/?type=hppp&ts=1419942934&from=pcm&uid=HitachiXHDS721010KLA330_GTF002PAHELKEFHELKEFX
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://istart.webssearches.com/web/?type=ds&ts=1419942921&from=pcm&uid=HitachiXHDS721010KLA330_GTF002PAHELKEFHELKEFX&q={searchTerms}
HKU\S-1-5-21-3817476712-227097123-3840079092-1007\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://istart.0.com/?type=hp&ts=1419942934&from=pcm&uid=HitachiXHDS721010KLA330_GTF002PAHELKEFHELKEFX
HKU\S-1-5-21-3817476712-227097123-3840079092-1007\Software\Microsoft\Internet Explorer\Main,Start Page = hxxps://go.microsoft.com/fwlink/p/?LinkId=619797&pc=UE01&ocid=UE01DHP
HKU\S-1-5-21-3817476712-227097123-3840079092-1007\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://istart.0.com/?type=hppp&ts=1419942934&from=pcm&uid=HitachiXHDS721010KLA330_GTF002PAHELKEFHELKEFX
HKU\S-1-5-21-3817476712-227097123-3840079092-1007\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = www.qbex.com.br
HKU\S-1-5-21-3817476712-227097123-3840079092-1007\Software\Classes\regfile: regedit.exe "%1" <==== ATENÇÃO
SearchScopes: HKLM -> DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSE1
SearchScopes: HKLM -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSE1
SearchScopes: HKLM-x32 -> DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSE1
SearchScopes: HKLM-x32 -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSE1
SearchScopes: HKU\S-1-5-21-3817476712-227097123-3840079092-1007 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxps://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IESR02&pc=UE15
SearchScopes: HKU\S-1-5-21-3817476712-227097123-3840079092-1007 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxps://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IESR02&pc=UE15
SearchScopes: HKU\S-1-5-21-3817476712-227097123-3840079092-1007 -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL =
BHO: Easy Photo Print -> {9421DD08-935F-4701-A9CA-22DF90AC4EA6} -> C:\Program Files (x86)\Epson Software\Easy Photo Print\EPTBL.dll => Nenhum Arquivo
Toolbar: HKLM - Sem Nome - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - Nenhum Arquivo
Toolbar: HKLM - Sem Nome - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - Nenhum Arquivo
Toolbar: HKLM - Easy Photo Print - {9421DD08-935F-4701-A9CA-22DF90AC4EA6} - C:\Program Files (x86)\Epson Software\Easy Photo Print\EPTBL.dll Nenhum Arquivo
Handler: ms-help - {314111c7-a502-11d2-bbca-00c04f8ec294} - C:\Program Files (x86)\Common Files\Microsoft Shared\Help\hxds.dll Nenhum Arquivo
S3 BdSandbox; C:\WINDOWS\System32\drivers\BdSandbox.sys [201536 2014-12-30] (Baidu, Inc.)
R1 Bfilter; C:\WINDOWS\System32\drivers\Bfilter.sys [59712 2014-12-30] (Baidu, Inc.)
R1 Bfmon; C:\WINDOWS\System32\drivers\Bfmon.sys [38208 2014-12-30] (Baidu, Inc.)
R1 Bnbase; C:\WINDOWS\System32\drivers\bnbasex64.sys [66720 2014-12-30] (Baidu, Inc.)
R1 Bndef; C:\WINDOWS\System32\drivers\bndef64.sys [481696 2014-12-30] (Baidu, Inc.)
R1 Bprotect; C:\WINDOWS\System32\drivers\Bprotect.sys [164096 2014-12-30] (Baidu, Inc.)
S3 X6va062; \??\C:\WINDOWS\SysWOW64\Drivers\X6va062 [X]
2018-01-07 21:39 - 2013-11-20 17:01 - 000000000 ____D C:\Users\Todos os Usuários\ProductData
2018-01-07 21:39 - 2013-11-20 17:01 - 000000000 ____D C:\ProgramData\ProductData
ContextMenuHandlers1-x32: [UnLockerMenu] -> {A6FF0E3A-8437-482C-8E04-4F9E15C57538} => C:\Program Files (x86)\IObit\IObit Uninstaller\UninstallMenuRight64.dll -> Nenhum Arquivo
ContextMenuHandlers2: [Baidu_Scan] -> {0A93904A-BB1E-4a0c-9753-B57B9AE272CB} => -> Nenhum Arquivo
ContextMenuHandlers3: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => -> Nenhum Arquivo
ContextMenuHandlers4: [UnLockerMenu] -> {A6FF0E3A-8437-482C-8E04-4F9E15C57538} => C:\Program Files (x86)\IObit\IObit Uninstaller\UninstallMenuRight64.dll -> Nenhum Arquivo
ContextMenuHandlers5: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} => -> Nenhum Arquivo
ContextMenuHandlers6: [AVG Shell Extension] -> {9F97547E-4609-42C5-AE0C-81C61FFAEBC3} => C:\Program Files (x86)\AVG\Av\avgsea.dll -> Nenhum Arquivo
ContextMenuHandlers6: [Baidu_Scan] -> {0A93904A-BB1E-4a0c-9753-B57B9AE272CB} => -> Nenhum Arquivo
Task: {3137ED88-2764-4AC4-91A2-A182000D1EC9} - System32\Tasks\UpdaterEX => C:\Users\Qbex\AppData\Roaming\UPDATE~1\UPDATE~1\UPDATE~1.EXE <==== ATENÇÃO
Task: {420EC9A1-B10D-4DD2-8059-94C087F960EA} - \OfficeSoftwareProtectionPlatform\SvcRestartTask -> Nenhum Arquivo <==== ATENÇÃO
Task: {4410F3DE-BA59-46A8-B19A-2DFA8AC8792A} - \Optimize Start Menu Cache Files-S-1-5-21-3817476712-227097123-3840079092-1001 -> Nenhum Arquivo <==== ATENÇÃO
Task: {564CA078-E4D7-4A49-83E5-4FB1EDE2577D} - System32\Tasks\060184C3-9766-46a0-B258-F4518A0B2633 => C:\WINDOWS\system32\CScript.exe "C:\ProgramData\Baidu Security\Duplicaterecord.js"
Task: {66B5E633-BEF1-4EA3-8E55-ACA36095EE88} - \Microsoft\Windows\Setup\gwx\launchtrayprocess -> Nenhum Arquivo <==== ATENÇÃO
Task: {671C9D67-82F2-4F34-9307-AEEC978196E5} - \WPD\SqmUpload_S-1-5-21-3817476712-227097123-3840079092-1001 -> Nenhum Arquivo <==== ATENÇÃO
Task: {6C774868-3DA5-488F-9F87-D9374AFE57E1} - \Microsoft\Windows\Setup\GWXTriggers\OutOfSleep-5d -> Nenhum Arquivo <==== ATENÇÃO
Task: {6D6080B2-0724-4ED4-BCE4-373CF3B7BC65} - \Microsoft\Windows\Setup\GWXTriggers\Time-5d -> Nenhum Arquivo <==== ATENÇÃO
Task: {75A87B73-3D83-4E37-8BD8-B313FD80ABF8} - \CCleanerSkipUAC -> Nenhum Arquivo <==== ATENÇÃO
Task: {7802F553-1753-4307-9A54-0BEAA690B603} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2017-09-27] (Adobe Systems Incorporated)
Task: {843A6CF0-FF51-40C1-89DF-43959D8B469C} - System32\Tasks\AutoKMS => C:\WINDOWS\AutoKMS\AutoKMS.exe [2015-08-06] ()
Task: {905E4E06-4C15-4142-9C08-15A461CA1FFA} - \Microsoft\Windows\Setup\gwx\refreshgwxconfigandcontent -> Nenhum Arquivo <==== ATENÇÃO
Task: {9A6DD33A-7278-4D74-AA5F-8ACCC6C3807E} - \WPD\SqmUpload_S-1-5-21-3817476712-227097123-3840079092-1002 -> Nenhum Arquivo <==== ATENÇÃO
Task: {AB8E9FC6-9913-438B-B0DD-2AF85A1CD123} - \Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B -> Nenhum Arquivo <==== ATENÇÃO
Task: {B6BD420D-8FCD-4EBE-8134-F19DBE0F94A0} - \WPD\SqmUpload_S-1-5-21-3817476712-227097123-3840079092-1007 -> Nenhum Arquivo <==== ATENÇÃO
Task: {B6D1B872-9CB0-4CE3-9C9E-6D3D34BFD42C} - \Microsoft\Windows\Setup\GWXTriggers\MachineUnlock-5d -> Nenhum Arquivo <==== ATENÇÃO
Task: {C374E66D-A430-448B-B273-FA168EC48BF1} - \Microsoft\Windows\Setup\GWXTriggers\Logon-5d -> Nenhum Arquivo <==== ATENÇÃO
Task: {C82AECD1-7F93-4A88-AE1E-FF67125226E6} - \Microsoft\Windows\UNP\RunCampaignManager -> Nenhum Arquivo <==== ATENÇÃO
Task: {CD4E8BCB-3ABF-4DAE-B9D0-C671454B615B} - \Microsoft\Windows\Setup\gwx\refreshgwxconfig -> Nenhum Arquivo <==== ATENÇÃO
Task: {D21337F5-CB5F-4DB6-BC0E-9EDEE3D1EAA8} - \Microsoft\Windows\Setup\GWXTriggers\Telemetry-4xd -> Nenhum Arquivo <==== ATENÇÃO
Task: {F7DC506C-A113-4D8D-A27A-8278439A8E41} - \Microsoft\Windows\Setup\GWXTriggers\OutOfIdle-5d -> Nenhum Arquivo <==== ATENÇÃO
Task: {F83C48AE-59F1-478E-B44B-D6118C512215} - \Microsoft\Windows\Setup\gwx\refreshgwxcontent -> Nenhum Arquivo <==== ATENÇÃO
Task: C:\WINDOWS\Tasks\Plus-HD-4.4-chromeinstaller.job => C:\Program Files (x86)\Plus-HD-4.4\Plus-HD-4.4-chromeinstaller.exe/installcrx /crxinstalltype=0 /agentregpath='Plus-HD-4.4' /extensionfilepath C:\Program Files (x86)\Plus-HD-4.4\39676.crx' /appid=39676 /srcid='000760' /subid='0' /zdata='0' /bic=07CE4F1CD3C043D58F3E5ED30F98FD1BIE /verifier=13f97af0cd281b3d175b83580e201f60 /installerversion=1_31_153 /installerfullversion=1.31.153.1 /installationtime=1387409550 /statsdomain=hxxp:/stats.srvstatsdata.com /errorsdomain=hxxp:/errors.srvstatsdata.com <==== ATENÇÃO
Task: C:\WINDOWS\Tasks\Plus-HD-4.4-codedownloader.job => C:\Program Files (x86)\Plus-HD-4.4\Plus-HD-4.4-codedownloader.exeư/reinstallapp /agentregpath='Plus-HD-4.4' /appid=39676 /srcid='000760' /subid='0' /zdata='0' /bic=07CE4F1CD3C043D58F3E5ED30F98FD1BIE /verifier=13f97af0cd281b3d175b83580e201f60 /installerversion=1_31_153 /installerfullversion=1.31.153.1 /installationtime=1387409550 /statsdomain=hxxp:/stats.srvstatsdata.com /errorsdomain=hxxp:/errors.srvstatsdata.com /codedownloaddomain=hxxp:/app-static.crossrider.com <==== ATENÇÃO
Task: C:\WINDOWS\Tasks\Plus-HD-4.4-enabler.job => C:\Program Files (x86)\Plus-HD-4.4\Plus-HD-4.4-enabler.exeƅ/enablebho /agentregpath='Plus-HD-4.4' /appid=39676 /srcid='000760' /subid='0' /zdata='0' /bic=07CE4F1CD3C043D58F3E5ED30F98FD1BIE /verifier=13f97af0cd281b3d175b83580e201f60 /installerversion=1_31_153 /installationtime=1387409550 /statsdomain=hxxp:/stats.srvstatsdata.com /errorsdomain=hxxp:/errors.srvstatsdata.com <==== ATENÇÃO
Task: C:\WINDOWS\Tasks\Plus-HD-4.4-firefoxinstaller.job => C:\Program Files (x86)\Plus-HD-4.4\Plus-HD-4.4-firefoxinstaller.exe/installxpi /agentregpath='Plus-HD-4.4' /extensionfilepath C:\Program Files (x86)\Plus-HD-4.4\39676.xpi' /appid=39676 /srcid='000760' /subid='0' /zdata='0' /bic=07CE4F1CD3C043D58F3E5ED30F98FD1BIE /verifier=13f97af0cd281b3d175b83580e201f60 /installerversion=1_31_153 /installerfullversion=1.31.153.1 /installationtime=1387409550 /statsdomain=hxxp:/stats.srvstatsdata.com /errorsdomain=hxxp:/errors.srvstatsdata.com /waitforbrowser=300 /extensionid=7d04e0dd-e717-4311-bcbc-b7636adb99a5@300322bc-0824-4364-854a-6105e7ba1d2f.com /extensionversion=0.93 /prefsbranch=a7d04e0dde7174311bcbcb7636adb99a5300322bc08244364854a6105e7ba1d2fcom39676 /updateurl=hxxps:/w9u6a2p6.ssl.hwcdn.net/plugin/ff/update/39676.rdf <==== ATENÇÃO
Task: C:\WINDOWS\Tasks\Plus-HD-4.4-updater.job => C:\Program Files (x86)\Plus-HD-4.4\Plus-HD-4.4-updater.exeǨ/runupdater /agentregpath='Plus-HD-4.4' /appid=39676 /srcid='000760' /subid='0' /zdata='0' /bic=07CE4F1CD3C043D58F3E5ED30F98FD1BIE /verifier=13f97af0cd281b3d175b83580e201f60 /installerversion=1_31_153 /installationtime=1387409550 /statsdomain=hxxp:/stats.srvstatsdata.com /errorsdomain=hxxp:/errors.srvstatsdata.com /geoserviceurl=hxxp:/ipgeoapi.com/ /updatejsondomain=hxxp:/update.srvstatsdata.com /updaterversion=2 /monetizationdomain=hxxp:/stats.syncstatsdata.com <==== ATENÇÃO
Task: C:\WINDOWS\Tasks\UpdaterEX.job => C:\Users\Qbex\AppData\Roaming\UPDATE~1\UPDATE~1\UPDATE~1.EXE <==== ATENÇÃO
ShortcutWithArgument: C:\Users\Juan\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\ImplicitAppShortcuts\9501e18d7c2ab92e\Google Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> --profile-directory="Profile 2"
2018-01-10 14:38 - 2018-01-10 14:38 - 000489984 _____ () \\?\C:\Users\Juan\AppData\Local\Temp\9C06.tmp.node
2018-01-10 14:39 - 2018-01-10 14:39 - 000489984 _____ () \\?\C:\Users\Juan\AppData\Local\Temp\BCAD.tmp.node
AlternateDataStreams: C:\WINDOWS\system32\Drivers\avwfhoac.sys:changelist [290]
AlternateDataStreams: C:\WINDOWS\system32\Drivers\gnwhcvws.sys:changelist [290]
AlternateDataStreams: C:\WINDOWS\system32\Drivers\littfdjb.sys:changelist [290]
AlternateDataStreams: C:\ProgramData\MTA San Andreas All:NT [40]
AlternateDataStreams: C:\ProgramData\MTA San Andreas All:NT2 [432]
AlternateDataStreams: C:\ProgramData\TEMP:A1EDB939 [138]
AlternateDataStreams: C:\Users\Juan\AppData\Local\H5W4xtRg8FJc:Z6lsP8Twn9wsXLHYnLsZ [2146]
AlternateDataStreams: C:\Users\Todos os Usuários\MTA San Andreas All:NT [40]
AlternateDataStreams: C:\Users\Todos os Usuários\MTA San Andreas All:NT2 [432]
AlternateDataStreams: C:\Users\Todos os Usuários\TEMP:A1EDB939 [138]
C:\Windows\Temp\SppExtComObjHook.dll
C:\WINDOWS\AutoKMS\AutoKMS.exe
C:\WINDOWS\AutoKMS
CreateRestorePoint:
EmptyTemp:
Reboot:
end
*****************

Processos fechados com sucesso.
"C:\Users\Juan\AppData\Roaming\obwY7IoQz4.exe" => não encontrado (a)
"C:\Users\Juan\AppData\Roaming\objFuzepcn.exe" => não encontrado (a)
"HKLM\SOFTWARE\Policies\Google" => removido (a) com sucesso.
HKLM\Software\\Microsoft\Internet Explorer\Main\\Search Page => valor restaurado com sucesso
HKLM\Software\\Microsoft\Internet Explorer\Main\\Default_Page_URL => valor restaurado com sucesso
HKLM\Software\\Microsoft\Internet Explorer\Main\\Default_Search_URL => valor restaurado com sucesso
HKU\S-1-5-21-3817476712-227097123-3840079092-1007\Software\Microsoft\Internet Explorer\Main\\Search Page => valor restaurado com sucesso
HKU\S-1-5-21-3817476712-227097123-3840079092-1007\Software\Microsoft\Internet Explorer\Main\\Start Page => valor restaurado com sucesso
HKU\S-1-5-21-3817476712-227097123-3840079092-1007\Software\Microsoft\Internet Explorer\Main\\Default_Page_URL => valor restaurado com sucesso
"HKU\S-1-5-21-3817476712-227097123-3840079092-1007\Software\Microsoft\Internet Explorer\Main\\Secondary Start Pages" => removido (a) com sucesso.
"HKU\S-1-5-21-3817476712-227097123-3840079092-1007\Software\Classes\regfile" => removido (a) com sucesso.
HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => valor restaurado com sucesso
"HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}" => removido (a) com sucesso.
HKLM\Software\Classes\CLSID\{33BB0A4E-99AF-4226-BDF6-49120163DE86} => chave não encontrado (a)
HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => valor restaurado com sucesso
"HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}" => removido (a) com sucesso.
HKLM\Software\Wow6432Node\Classes\CLSID\{33BB0A4E-99AF-4226-BDF6-49120163DE86} => chave não encontrado (a)
"HKU\S-1-5-21-3817476712-227097123-3840079092-1007\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope" => removido (a) com sucesso.
"HKU\S-1-5-21-3817476712-227097123-3840079092-1007\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}" => removido (a) com sucesso.
HKLM\Software\Classes\CLSID\{0633EE93-D776-472f-A0FF-E1416B8B2E3A} => chave não encontrado (a)
"HKU\S-1-5-21-3817476712-227097123-3840079092-1007\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}" => removido (a) com sucesso.
HKLM\Software\Classes\CLSID\{33BB0A4E-99AF-4226-BDF6-49120163DE86} => chave não encontrado (a)
"HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9421DD08-935F-4701-A9CA-22DF90AC4EA6}" => removido (a) com sucesso.
"HKLM\Software\Classes\CLSID\{9421DD08-935F-4701-A9CA-22DF90AC4EA6}" => removido (a) com sucesso.
"HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar\\{318A227B-5E9F-45bd-8999-7F8F10CA4CF5}" => removido (a) com sucesso.
HKLM\Software\Classes\CLSID\{318A227B-5E9F-45bd-8999-7F8F10CA4CF5} => chave não encontrado (a)
"HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar\\{CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F}" => removido (a) com sucesso.
HKLM\Software\Classes\CLSID\{CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} => chave não encontrado (a)
"HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar\\{9421DD08-935F-4701-A9CA-22DF90AC4EA6}" => removido (a) com sucesso.
HKLM\Software\Classes\CLSID\{9421DD08-935F-4701-A9CA-22DF90AC4EA6} => chave não encontrado (a)
"HKLM\Software\Classes\PROTOCOLS\Handler\ms-help" => removido (a) com sucesso.
HKLM\Software\Classes\CLSID\{314111c7-a502-11d2-bbca-00c04f8ec294} => chave não encontrado (a)
"HKLM\System\CurrentControlSet\Services\BdSandbox" => removido (a) com sucesso.
BdSandbox => serviço removido (a) com sucesso.
Bfilter => Não foi possível finalizar o serviço.
"HKLM\System\CurrentControlSet\Services\Bfilter" => removido (a) com sucesso.
Bfilter => serviço removido (a) com sucesso.
Bfmon => Não foi possível finalizar o serviço.
"HKLM\System\CurrentControlSet\Services\Bfmon" => removido (a) com sucesso.
Bfmon => serviço removido (a) com sucesso.
Bnbase => Não foi possível finalizar o serviço.
"HKLM\System\CurrentControlSet\Services\Bnbase" => removido (a) com sucesso.
Bnbase => serviço removido (a) com sucesso.
Bndef => Não foi possível finalizar o serviço.
"HKLM\System\CurrentControlSet\Services\Bndef" => removido (a) com sucesso.
Bndef => serviço removido (a) com sucesso.
Bprotect => Não foi possível finalizar o serviço.
"HKLM\System\CurrentControlSet\Services\Bprotect" => removido (a) com sucesso.
Bprotect => serviço removido (a) com sucesso.
"HKLM\System\CurrentControlSet\Services\X6va062" => removido (a) com sucesso.
X6va062 => serviço removido (a) com sucesso.
C:\Users\Todos os Usuários\ProductData => movido com sucesso
"C:\ProgramData\ProductData" => não encontrado (a)
"HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\UnLockerMenu" => removido (a) com sucesso.
HKLM\Software\Wow6432Node\Classes\CLSID\{A6FF0E3A-8437-482C-8E04-4F9E15C57538} => chave não encontrado (a)
"HKLM\Software\Classes\Drive\ShellEx\ContextMenuHandlers\Baidu_Scan" => removido (a) com sucesso.
HKLM\Software\Classes\CLSID\{0A93904A-BB1E-4a0c-9753-B57B9AE272CB} => chave não encontrado (a)
"HKLM\Software\Classes\AllFileSystemObjects\ShellEx\ContextMenuHandlers\00avast" => removido (a) com sucesso.
HKLM\Software\Classes\CLSID\{472083B0-C522-11CF-8763-00608CC02F24} => chave não encontrado (a)
"HKLM\Software\Classes\Directory\ShellEx\ContextMenuHandlers\UnLockerMenu" => removido (a) com sucesso.
"HKLM\Software\Classes\CLSID\{A6FF0E3A-8437-482C-8E04-4F9E15C57538}" => removido (a) com sucesso.
"HKLM\Software\Classes\Directory\Background\ShellEx\ContextMenuHandlers\igfxcui" => removido (a) com sucesso.
HKLM\Software\Classes\CLSID\{3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} => chave não encontrado (a)
"HKLM\Software\Classes\Folder\ShellEx\ContextMenuHandlers\AVG Shell Extension" => removido (a) com sucesso.
"HKLM\Software\Classes\CLSID\{9F97547E-4609-42C5-AE0C-81C61FFAEBC3}" => removido (a) com sucesso.
"HKLM\Software\Classes\Folder\ShellEx\ContextMenuHandlers\Baidu_Scan" => removido (a) com sucesso.
HKLM\Software\Classes\CLSID\{0A93904A-BB1E-4a0c-9753-B57B9AE272CB} => chave não encontrado (a)
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{3137ED88-2764-4AC4-91A2-A182000D1EC9} => Não pode ser removido chave. ErrorCode1: 0x00000002
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{3137ED88-2764-4AC4-91A2-A182000D1EC9}" => removido (a) com sucesso.
C:\WINDOWS\System32\Tasks\UpdaterEX => movido com sucesso
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\UpdaterEX" => removido (a) com sucesso.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{420EC9A1-B10D-4DD2-8059-94C087F960EA}" => removido (a) com sucesso.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{420EC9A1-B10D-4DD2-8059-94C087F960EA}" => removido (a) com sucesso.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\OfficeSoftwareProtectionPlatform\SvcRestartTask" => removido (a) com sucesso.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{4410F3DE-BA59-46A8-B19A-2DFA8AC8792A}" => removido (a) com sucesso.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{4410F3DE-BA59-46A8-B19A-2DFA8AC8792A}" => removido (a) com sucesso.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Optimize Start Menu Cache Files-S-1-5-21-3817476712-227097123-3840079092-1001" => removido (a) com sucesso.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{564CA078-E4D7-4A49-83E5-4FB1EDE2577D}" => removido (a) com sucesso.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{564CA078-E4D7-4A49-83E5-4FB1EDE2577D}" => removido (a) com sucesso.
C:\WINDOWS\System32\Tasks\060184C3-9766-46a0-B258-F4518A0B2633 => movido com sucesso
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\060184C3-9766-46a0-B258-F4518A0B2633" => removido (a) com sucesso.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{66B5E633-BEF1-4EA3-8E55-ACA36095EE88}" => removido (a) com sucesso.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{66B5E633-BEF1-4EA3-8E55-ACA36095EE88}" => removido (a) com sucesso.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\gwx\launchtrayprocess" => removido (a) com sucesso.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{671C9D67-82F2-4F34-9307-AEEC978196E5}" => removido (a) com sucesso.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{671C9D67-82F2-4F34-9307-AEEC978196E5}" => removido (a) com sucesso.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\WPD\SqmUpload_S-1-5-21-3817476712-227097123-3840079092-1001" => removido (a) com sucesso.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{6C774868-3DA5-488F-9F87-D9374AFE57E1}" => removido (a) com sucesso.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{6C774868-3DA5-488F-9F87-D9374AFE57E1}" => removido (a) com sucesso.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\OutOfSleep-5d" => removido (a) com sucesso.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{6D6080B2-0724-4ED4-BCE4-373CF3B7BC65}" => removido (a) com sucesso.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{6D6080B2-0724-4ED4-BCE4-373CF3B7BC65}" => removido (a) com sucesso.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\Time-5d" => removido (a) com sucesso.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{75A87B73-3D83-4E37-8BD8-B313FD80ABF8}" => removido (a) com sucesso.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{75A87B73-3D83-4E37-8BD8-B313FD80ABF8}" => removido (a) com sucesso.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\CCleanerSkipUAC => chave não encontrado (a)
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{7802F553-1753-4307-9A54-0BEAA690B603}" => removido (a) com sucesso.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{7802F553-1753-4307-9A54-0BEAA690B603}" => removido (a) com sucesso.
C:\WINDOWS\System32\Tasks\Adobe Acrobat Update Task => movido com sucesso
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Adobe Acrobat Update Task" => removido (a) com sucesso.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Boot\{843A6CF0-FF51-40C1-89DF-43959D8B469C}" => removido (a) com sucesso.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{843A6CF0-FF51-40C1-89DF-43959D8B469C}" => removido (a) com sucesso.
C:\WINDOWS\System32\Tasks\AutoKMS => movido com sucesso
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\AutoKMS" => removido (a) com sucesso.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{905E4E06-4C15-4142-9C08-15A461CA1FFA}" => removido (a) com sucesso.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{905E4E06-4C15-4142-9C08-15A461CA1FFA}" => removido (a) com sucesso.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\gwx\refreshgwxconfigandcontent" => removido (a) com sucesso.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{9A6DD33A-7278-4D74-AA5F-8ACCC6C3807E}" => removido (a) com sucesso.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{9A6DD33A-7278-4D74-AA5F-8ACCC6C3807E}" => removido (a) com sucesso.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\WPD\SqmUpload_S-1-5-21-3817476712-227097123-3840079092-1002" => removido (a) com sucesso.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{AB8E9FC6-9913-438B-B0DD-2AF85A1CD123}" => removido (a) com sucesso.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{AB8E9FC6-9913-438B-B0DD-2AF85A1CD123}" => removido (a) com sucesso.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B" => removido (a) com sucesso.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{B6BD420D-8FCD-4EBE-8134-F19DBE0F94A0}" => removido (a) com sucesso.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{B6BD420D-8FCD-4EBE-8134-F19DBE0F94A0}" => removido (a) com sucesso.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\WPD\SqmUpload_S-1-5-21-3817476712-227097123-3840079092-1007" => removido (a) com sucesso.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{B6D1B872-9CB0-4CE3-9C9E-6D3D34BFD42C}" => removido (a) com sucesso.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{B6D1B872-9CB0-4CE3-9C9E-6D3D34BFD42C}" => removido (a) com sucesso.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\MachineUnlock-5d" => removido (a) com sucesso.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{C374E66D-A430-448B-B273-FA168EC48BF1}" => removido (a) com sucesso.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{C374E66D-A430-448B-B273-FA168EC48BF1}" => removido (a) com sucesso.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\Logon-5d" => removido (a) com sucesso.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{C82AECD1-7F93-4A88-AE1E-FF67125226E6}" => removido (a) com sucesso.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{C82AECD1-7F93-4A88-AE1E-FF67125226E6}" => removido (a) com sucesso.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\UNP\RunCampaignManager => chave não encontrado (a)
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{CD4E8BCB-3ABF-4DAE-B9D0-C671454B615B}" => removido (a) com sucesso.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{CD4E8BCB-3ABF-4DAE-B9D0-C671454B615B}" => removido (a) com sucesso.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\gwx\refreshgwxconfig" => removido (a) com sucesso.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{D21337F5-CB5F-4DB6-BC0E-9EDEE3D1EAA8}" => removido (a) com sucesso.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{D21337F5-CB5F-4DB6-BC0E-9EDEE3D1EAA8}" => removido (a) com sucesso.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\Telemetry-4xd" => removido (a) com sucesso.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{F7DC506C-A113-4D8D-A27A-8278439A8E41}" => removido (a) com sucesso.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{F7DC506C-A113-4D8D-A27A-8278439A8E41}" => removido (a) com sucesso.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\OutOfIdle-5d" => removido (a) com sucesso.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{F83C48AE-59F1-478E-B44B-D6118C512215}" => removido (a) com sucesso.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{F83C48AE-59F1-478E-B44B-D6118C512215}" => removido (a) com sucesso.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\gwx\refreshgwxcontent" => removido (a) com sucesso.
C:\WINDOWS\Tasks\Plus-HD-4.4-chromeinstaller.job => movido com sucesso
C:\WINDOWS\Tasks\Plus-HD-4.4-codedownloader.job => movido com sucesso
C:\WINDOWS\Tasks\Plus-HD-4.4-enabler.job => movido com sucesso
C:\WINDOWS\Tasks\Plus-HD-4.4-firefoxinstaller.job => movido com sucesso
C:\WINDOWS\Tasks\Plus-HD-4.4-updater.job => movido com sucesso
C:\WINDOWS\Tasks\UpdaterEX.job => movido com sucesso
C:\Users\Juan\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\ImplicitAppShortcuts\9501e18d7c2ab92e\Google Chrome.lnk => Atalho argumento removido (a) com sucesso.
C:\Users\Juan\AppData\Local\Temp\9C06.tmp.node => movido com sucesso
C:\Users\Juan\AppData\Local\Temp\BCAD.tmp.node => movido com sucesso
C:\WINDOWS\system32\Drivers\avwfhoac.sys => ":changelist" ADS removido (a) com sucesso.
C:\WINDOWS\system32\Drivers\gnwhcvws.sys => ":changelist" ADS removido (a) com sucesso.
C:\WINDOWS\system32\Drivers\littfdjb.sys => ":changelist" ADS removido (a) com sucesso.
C:\ProgramData\MTA San Andreas All => ":NT" ADS removido (a) com sucesso.
C:\ProgramData\MTA San Andreas All => ":NT2" ADS removido (a) com sucesso.
C:\ProgramData\TEMP => ":A1EDB939" ADS removido (a) com sucesso.
C:\Users\Juan\AppData\Local\H5W4xtRg8FJc => ":Z6lsP8Twn9wsXLHYnLsZ" ADS removido (a) com sucesso.
"C:\Users\Todos os Usuários\MTA San Andreas All" => ":NT" ADS não encontrado (a).
"C:\Users\Todos os Usuários\MTA San Andreas All" => ":NT2" ADS não encontrado (a).
"C:\Users\Todos os Usuários\TEMP" => ":A1EDB939" ADS não encontrado (a).
"C:\Windows\Temp\SppExtComObjHook.dll" => não encontrado (a)
C:\WINDOWS\AutoKMS\AutoKMS.exe => movido com sucesso
C:\WINDOWS\AutoKMS => movido com sucesso
Ponto de Restauração criado com sucesso.

=========== EmptyTemp: ==========

BITS transfer queue => 7888896 B
DOMStore, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 31037601 B
Java, Flash, Steam htmlcache => 101259012 B
Windows/system/drivers => 21743767 B
Edge => 1007106 B
Chrome => 859763015 B
Firefox => 0 B
Opera => 0 B

Temp, IE cache, history, cookies, recent:
Default => 0 B
Users => 0 B
ProgramData => 0 B
Public => 0 B
systemprofile => 0 B
systemprofile32 => 0 B
LocalService => 0 B
NetworkService => 161258 B
Juan => 54116619 B

RecycleBin => 0 B
EmptyTemp: => 1 GB de dados temporários Removidos.

================================


O sistema precisou ser reiniciado.

==== Fim de Fixlog 10:19:08 ====