Publicité
Publicité
Format du document : text/plain
Prévisualisation
Additional scan result of Farbar Recovery Scan Tool (x64) Version: 08.11.2018
Ran by ELIANE (09-11-2018 16:06:06)
Running from C:\Users\eliane\Downloads
Windows 8.1 Pro (Update) (X64) (2018-01-22 00:29:50)
Boot Mode: Normal
==========================================================
==================== Accounts: =============================
Administrator (S-1-5-21-273205616-5991483-2140142682-500 - Administrator - Disabled) => C:\Users\Administrator
ELIANE (S-1-5-21-273205616-5991483-2140142682-1004 - Administrator - Enabled) => C:\Users\eliane
Guest (S-1-5-21-273205616-5991483-2140142682-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-273205616-5991483-2140142682-1008 - Limited - Enabled)
kassi_000 (S-1-5-21-273205616-5991483-2140142682-1009 - Administrator - Enabled) => C:\Users\kassi_000
==================== Security Center ========================
(If an entry is included in the fixlist, it will be removed.)
AV: Avast Antivirus (Enabled - Up to date) {8EA8924E-BC81-DC44-8BB0-8BAE75D86EBF}
AS: Avast Antivirus (Enabled - Up to date) {35C973AA-9ABB-D3CA-B100-B0DC0E5F2402}
FW: Avast Antivirus (Enabled) {B693136B-F6EE-DD1C-A0EF-229B8B0B29C4}
==================== Installed Programs ======================
(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
µTorrent (HKU\S-1-5-21-273205616-5991483-2140142682-1004\...\uTorrent) (Version: 3.5.4.44632 - BitTorrent Inc.)
Adobe Acrobat Reader DC - Português (HKLM-x32\...\{AC76BA86-7AD7-1046-7B44-AC0F074E4100}) (Version: 19.008.20080 - Adobe Systems Incorporated)
Adobe Flash Player 31 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 31.0.0.122 - Adobe Systems Incorporated)
Adobe Photoshop CC 2015 (HKLM-x32\...\{793C2BF7-A4FE-4608-91C9-9282C5801C21}) (Version: 16.0 - Adobe Systems Incorporated)
Aiseesoft Video Converter Ultimate 9.2.38 (HKLM-x32\...\{4E453AA0-3B4A-4b78-BA4B-E2EAB6DF11D6}_is1) (Version: 9.2.38 - Aiseesoft Studio)
Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)
aTube Catcher versão 3.8 (HKLM-x32\...\{D43B360E-722D-421B-BC77-20B9E0F8B6CD}_is1) (Version: 3.8 - DsNET Corp)
Avast Cleanup Premium (HKLM-x32\...\{075CC190-59EE-499F-828B-0B5C098C8C15}_is1) (Version: 17.3.4228 - AVAST Software)
Avast Premier (HKLM-x32\...\Avast Antivirus) (Version: 18.7.2354 - AVAST Software)
Bing Bar (HKLM-x32\...\{3611CA6C-5FCA-4900-A329-6A118123CCFC}) (Version: 7.1.355.0 - Microsoft Corporation)
CCleaner (HKLM\...\CCleaner) (Version: 5.46 - Piriform)
Corel Graphics - Windows Shell Extension (HKLM\...\_{CD4FAF77-25BC-4838-9B4B-5C59AC8662D1}) (Version: 20.0.0.633 - Corel Corporation)
Corel Graphics - Windows Shell Extension (HKLM\...\{CD4FAF77-25BC-4838-9B4B-5C59AC8662D1}) (Version: 20.0.633 - Corel Corporation) Hidden
Corel Graphics - Windows Shell Extension 32 Bit Keys (HKLM\...\{C0408619-0431-4B54-B63C-C3AB18B1E4B4}) (Version: 20.0.633 - Corel Corporation) Hidden
Corel Update Manager (HKLM\...\{7A731C52-8DC6-47AB-B2BC-3FE70F6C6968}) (Version: 2.9.389 - Corel corporation) Hidden
CorelDRAW Graphics Suite 2018 - BR (x64) (HKLM\...\{575AFBB6-FDF0-4191-97D0-E109C1A53E9B}) (Version: 20.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite 2018 - Capture (x64) (HKLM\...\{57B35A9E-2E5C-4CE4-AE54-61B02500ED6C}) (Version: 20.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite 2018 - Common (x64) (HKLM\...\{C9E9E21E-E375-4BAF-B647-22ABA6ABBACF}) (Version: 20.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite 2018 - Connect (x64) (HKLM\...\{BCAF055A-51F2-4266-BC27-E67AFE02B1CE}) (Version: 20.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite 2018 - Custom Data (x64) (HKLM\...\{098FFEC8-98D9-4DE0-BC3F-B5A94547FF73}) (Version: 20.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite 2018 - Draw (x64) (HKLM\...\{121B4D48-BDC1-4037-B150-28037FA47510}) (Version: 20.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite 2018 - Filters (x64) (HKLM\...\{9433E8C4-DD2E-40BE-A1AF-0832DFE89C92}) (Version: 20.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite 2018 - Font Manager (x64) (HKLM\...\{EFD5BDD5-CEF1-4209-ABF1-2387D0756D14}) (Version: 20.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite 2018 - IPM Content BR (HKLM-x32\...\{F0FAEE69-7104-4C61-9E1D-B292E780C41E}) (Version: 20.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite 2018 - IPM T (x64) (HKLM\...\{A4DEA23F-2371-483E-93C1-1764CA80DDEF}) (Version: 20.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite 2018 - PHOTO-PAINT (x64) (HKLM\...\{CA42C3C9-6A8C-423E-885E-064B06DAD20E}) (Version: 20.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite 2018 - Redist (x64) (HKLM\...\{E442BB6A-268E-4864-9780-C0A4789DA64F}) (Version: 20.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite 2018 - Setup Files (x64) (HKLM\...\{CBBC5C20-F3ED-4425-9393-F77D50036592}) (Version: 20.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite 2018 - VBA (x64) (HKLM\...\{8FE99871-8AF0-449F-A1C4-F18EE971DC84}) (Version: 20.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite 2018 - Workspaces (x64) (HKLM\...\{94B3EE65-9BD2-4C39-9E43-E1403F6A82F4}) (Version: 20.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite 2018 - Writing Tools (x64) (HKLM\...\{F5CC82A3-6FF2-4D76-AC4F-3A7C63E3487C}) (Version: 20.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite 2018 (64-Bit) (HKLM\...\_{CBBC5C20-F3ED-4425-9393-F77D50036592}) (Version: 20.0.0.633 - Corel Corporation)
CorelDRAW Graphics Suite 2018 (HKLM\...\{23465DF5-08D9-4150-9621-7A127B208936}) (Version: 20.0 - Corel Corporation) Hidden
Driving Speed 2.0 (HKLM-x32\...\Driving Speed 2_is1) (Version: - WheelSpin Studios)
EaseUS MobiSaver for Android version 5.0 (HKLM-x32\...\{82D2239C-0F46-4446-B3CA-810A07BF7A6E}_is1) (Version: 5.0 - CHENGDU YIWO Tech Development Co., Ltd.)
Euro Truck Simulator 2 (HKLM-x32\...\Euro Truck Simulator 2_is1) (Version: 1.20.0.2s - Релиз от R.G. Steamgames)
Ghostscript GPL 8.64 (Msi Setup) (HKLM-x32\...\_{06CD45E6-FF5E-4D8E-BC01-B276A90DADF2}) (Version: 8.64 - Corel Corporation)
Ghostscript GPL 8.64 (Msi Setup) (HKLM-x32\...\{06CD45E6-FF5E-4D8E-BC01-B276A90DADF2}) (Version: 8.64 - Corel Corporation) Hidden
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 70.0.3538.77 - Google Inc.)
Google Update Helper (HKLM-x32\...\{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.33.17 - Google Inc.) Hidden
HP Deskjet 2050 J510 series Ajuda (HKLM-x32\...\{7A3DF2E2-CF13-44FB-A93E-F71D5381DB3F}) (Version: 140.0.61.61 - Hewlett Packard)
HP Deskjet 2050 J510 series Estudo de aprimoramento de produtos (HKLM\...\{8D71EFB0-B1EF-4478-92D2-A65DB23AC460}) (Version: 28.0.1313.0 - Hewlett-Packard Co.)
HP Deskjet 2050 J510 series Software básico do dispositivo (HKLM\...\{2DCBB45E-AA03-4089-87E7-EC17E606D738}) (Version: 28.0.1313.0 - Hewlett-Packard Co.)
HP Photo Creations (HKLM-x32\...\HP Photo Creations) (Version: 1.0.0.7702 - HP)
HP Update (HKLM-x32\...\{912D30CF-F39E-4B31-AD9A-123C6B794EE2}) (Version: 5.005.002.002 - Hewlett-Packard)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 9.17.10.4229 - Intel Corporation)
KMSpico (HKLM\...\{8B29D47F-92E2-4C20-9EE0-F710991F5D7C}_is1) (Version: - )
LG Mobile Driver (HKLM-x32\...\{3F490D0E-3131-438C-BCF9-7549CB88DF41}) (Version: 4.2.0 - LG Electronics)
LG United Mobile Drivers (HKLM-x32\...\{5DB849D6-9392-4FB7-9ABB-87ED433152E5}) (Version: 3.8.1 - LG Electronics)
LG USB WML Modem Driver (HKLM-x32\...\{FBA0CA60-8BF2-4381-B819-74F020E165A9}) (Version: 1.0 - LG Electronics)
Lightshot-5.4.0.35 (HKLM-x32\...\{30A5B3C9-2084-4063-A32A-628A98DE512B}_is1) (Version: 5.4.0.35 - Skillbrains)
MEmu (HKLM-x32\...\MEmu) (Version: 5.5.1.0 - Microvirt Software Technology Co. Ltd)
Microsoft Office Professional Plus 2016 - en-us (HKLM\...\ProPlusRetail - en-us) (Version: 16.0.11001.20074 - Microsoft Corporation)
Microsoft Office Professional Plus 2016 - pt-br (HKLM\...\ProPlusRetail - pt-br) (Version: 16.0.11001.20074 - Microsoft Corporation)
Microsoft OneDrive (HKU\.DEFAULT\...\OneDriveSetup.exe) (Version: 17.3.6743.1212 - Microsoft Corporation)
Microsoft OneDrive (HKU\S-1-5-21-273205616-5991483-2140142682-1004\...\OneDriveSetup.exe) (Version: 18.025.0204.0009 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30514.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2017 Redistributable (x64) - 14.12.25810 (HKLM-x32\...\{e2ee15e2-a480-4bc5-bfb7-e9803d1d9823}) (Version: 14.12.25810.0 - Microsoft Corporation)
Microsoft Visual Studio Tools for Applications 2015 (HKLM-x32\...\{dd8b09df-3ef8-49f1-bd1a-65278435860b}) (Version: 14.0.23217 - Microsoft Corporation)
Microsoft Visual Studio Tools for Applications 2017 (HKLM-x32\...\{5a7dc0ad-cdb2-43b5-8b82-f81065fe6092}) (Version: 15.0.26717 - Microsoft Corporation)
Mozilla Firefox 63.0.1 (x64 pt-BR) (HKLM\...\Mozilla Firefox 63.0.1 (x64 pt-BR)) (Version: 63.0.1 - Mozilla)
Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 63.0.1 - Mozilla)
Office 16 Click-to-Run Extensibility Component (HKLM-x32\...\{90160000-008C-0000-0000-0000000FF1CE}) (Version: 16.0.11001.20074 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Extensibility Component 64-bit Registration (HKLM\...\{90160000-00DD-0000-1000-0000000FF1CE}) (Version: 16.0.11001.20074 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Licensing Component (HKLM\...\{90160000-008F-0000-1000-0000000FF1CE}) (Version: 16.0.11001.20074 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Localization Component (HKLM-x32\...\{90160000-008C-0409-0000-0000000FF1CE}) (Version: 16.0.11001.20074 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Localization Component (HKLM-x32\...\{90160000-008C-0416-0000-0000000FF1CE}) (Version: 16.0.11001.20074 - Microsoft Corporation) Hidden
QuickTime 7 (HKLM-x32\...\{FF59BD75-466A-4D5A-AD23-AAD87C5FD44C}) (Version: 7.79.80.95 - Apple Inc.)
SAMSUNG USB Driver for Mobile Phones (HKLM\...\{D0795B21-0CDA-4a92-AB9E-6E92D8111E44}) (Version: 1.5.51.0 - SAMSUNG Electronics Co., Ltd.)
Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)
Suporte para Aplicativos Apple (HKLM-x32\...\{46F044A5-CE8B-4196-984E-5BD6525E361D}) (Version: 2.3.6 - Apple Inc.)
VEGAS Pro 14.0 (64-bit) (HKLM\...\{4D911470-79F9-11E6-9145-BB95F5A309BD}) (Version: 14.0.161 - VEGAS)
VEGAS Pro 15.0 (HKLM\...\{B53381C0-CFA3-11E7-8076-FBB956011AFA}) (Version: 15.0.261 - VEGAS)
WinRAR 5.50 (64-bit) (HKLM\...\WinRAR archiver) (Version: 5.50.0 - win.rar GmbH)
==================== Custom CLSID (Whitelisted): ==========================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
ShellIconOverlayIdentifiers: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2018-10-22] (AVAST Software)
ContextMenuHandlers1: [avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2018-10-22] (AVAST Software)
ContextMenuHandlers1: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2017-08-11] (Alexander Roshal)
ContextMenuHandlers1-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2017-08-11] (Alexander Roshal)
ContextMenuHandlers3: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2018-10-22] (AVAST Software)
ContextMenuHandlers5: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} => C:\WINDOWS\system32\igfxpph.dll [2015-06-01] (Intel Corporation)
ContextMenuHandlers6: [avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2018-10-22] (AVAST Software)
ContextMenuHandlers6: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2017-08-11] (Alexander Roshal)
ContextMenuHandlers6-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2017-08-11] (Alexander Roshal)
==================== Scheduled Tasks (Whitelisted) =============
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
Task: {0E94458A-B293-4BB6-8946-A80A36DD01A8} - System32\Tasks\Adobe Flash Player NPAPI Notifier => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashUtil32_31_0_0_122_Plugin.exe [2018-10-10] (Adobe Systems Incorporated)
Task: {22FD0B8A-0909-4DDE-AD15-AF69702E16D0} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack2016 => C:\Program Files (x86)\Microsoft Office\root\Office16\msoia.exe [2018-11-04] (Microsoft Corporation)
Task: {35B80DDE-DBB0-4774-9F45-354862995313} - \WPD\SqmUpload_S-1-5-21-273205616-5991483-2140142682-1001 -> No File <==== ATTENTION
Task: {3E6C4822-9AF3-497B-AEF9-EDA363428425} - System32\Tasks\Microsoft\Office\OfficeBackgroundTaskHandlerLogon => C:\Program Files (x86)\Microsoft Office\root\Office16\officebackgroundtaskhandler.exe [2018-11-04] (Microsoft Corporation)
Task: {48C77F2C-5E3A-478C-9A18-6812F1FBB1AE} - System32\Tasks\CCleaner Update => C:\Program Files\CCleaner\CCUpdate.exe [2018-09-10] (Piriform Ltd)
Task: {52D65EA2-BED7-4A7B-8552-F587301413A7} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2018-09-10] (Piriform Ltd)
Task: {59EDE91E-1857-47B7-9DC6-E95620D6404E} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)
Task: {5CFC83F4-58B2-4865-B4E8-1857D2F418DC} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2018-08-14] (Adobe Systems Incorporated)
Task: {6784A048-A3A5-40A7-83E1-86E8449F9AA5} - System32\Tasks\Avast Emergency Update => C:\Program Files\AVAST Software\Avast\AvEmUpdate.exe [2018-10-22] (AVAST Software)
Task: {6CA8FA91-370E-415E-AA2C-DA47BCB1B9DF} - System32\Tasks\Microsoft\Office\Office Feature Updates Logon => C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesCommonX86\Microsoft Shared\Office16\sdxhelper.exe [2018-11-04] (Microsoft Corporation)
Task: {8A5EB032-2BB8-455C-A720-F272DAC1D891} - System32\Tasks\AdwCleaner_onReboot => C:\Users\eliane\Downloads\adwcleaner_7.2.4.0.exe [2018-11-09] (Malwarebytes)
Task: {8DF11BB8-0A4D-4008-BC9E-87366C20DAB4} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2018-01-22] (Google Inc.)
Task: {90288114-ACD9-48A8-BDA9-C0FCDC958F0A} - System32\Tasks\Adobe Flash Player Updater => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2018-10-10] (Adobe Systems Incorporated)
Task: {921E97A9-D948-4F4A-A5D2-C3433D0A959B} - System32\Tasks\Avast Software\Overseer => C:\Program Files\Common Files\Avast Software\Overseer\overseer.exe [2018-10-29] (AVAST Software)
Task: {935A632A-107D-4442-934C-A09604A5CD47} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2018-01-22] (Google Inc.)
Task: {962C1B62-7CD1-4C78-B618-FD1BA30BF82F} - \Optimize Start Menu Cache Files-S-1-5-21-273205616-5991483-2140142682-1001 -> No File <==== ATTENTION
Task: {A57706E3-9D04-431F-AE46-79045494554E} - System32\Tasks\Microsoft\Office\Office Automatic Updates 2.0 => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [2018-10-24] (Microsoft Corporation)
Task: {A84351AE-3BAB-4436-BECE-201904A93E6F} - System32\Tasks\CorelUpdateHelperTaskCore => c:\Program Files (x86)\Corel\CUH\v2\CUH.exe [2018-06-21] (Corel Corporation)
Task: {C7BB6A91-A456-4D90-BD40-75D1D8E00B87} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn2016 => C:\Program Files (x86)\Microsoft Office\root\Office16\msoia.exe [2018-11-04] (Microsoft Corporation)
Task: {C839C603-35EE-4939-99FC-251BE866CB89} - System32\Tasks\Microsoft\Office\OfficeBackgroundTaskHandlerRegistration => C:\Program Files (x86)\Microsoft Office\root\Office16\officebackgroundtaskhandler.exe [2018-11-04] (Microsoft Corporation)
Task: {EBE2552B-8852-43A8-B367-93604E0345EB} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [2018-10-24] (Microsoft Corporation)
Task: {F1C10DA7-05B6-4764-BE6F-BE888AC74293} - \AutoPico Daily Restart -> No File <==== ATTENTION
Task: {F49DB361-D229-469C-B5BB-E41CE83188E4} - System32\Tasks\Microsoft\Office\Office Feature Updates => C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesCommonX86\Microsoft Shared\Office16\sdxhelper.exe [2018-11-04] (Microsoft Corporation)
(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)
Task: C:\WINDOWS\Tasks\update-S-1-5-21-273205616-5991483-2140142682-1004.job => C:\Program Files (x86)\Skillbrains\Updater\Updater.exe
==================== Shortcuts & WMI ========================
(The entries could be listed to be restored or removed.)
ShortcutWithArgument: C:\Users\eliane\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Aplicativos do Google Chrome\Vysor.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> --profile-directory=Default --app-id=gidgenkbbabolejbgbpnhbimgjbffefm
==================== Loaded Modules (Whitelisted) ==============
2018-01-21 22:54 - 2018-01-21 22:54 - 000003584 _____ () C:\WINDOWS\SECOH-QAD.dll
2018-10-25 19:34 - 2018-10-23 19:24 - 005020504 _____ () C:\Program Files (x86)\Google\Chrome\Application\70.0.3538.77\libglesv2.dll
2018-10-25 19:34 - 2018-10-23 19:24 - 000116056 _____ () C:\Program Files (x86)\Google\Chrome\Application\70.0.3538.77\libegl.dll
2018-10-22 23:38 - 2018-10-22 23:38 - 000598232 _____ () C:\Program Files\AVAST Software\Avast\streamback.dll
2018-03-14 13:56 - 2018-03-14 13:56 - 067126928 _____ () C:\Program Files\AVAST Software\Avast\libcef.dll
==================== Alternate Data Streams (Whitelisted) =========
(If an entry is included in the fixlist, only the ADS will be removed.)
==================== Safe Mode (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)
==================== Association (Whitelisted) ===============
(If an entry is included in the fixlist, the registry item will be restored to default or removed.)
==================== Internet Explorer trusted/restricted ===============
(If an entry is included in the fixlist, it will be removed from the registry.)
==================== Hosts content: ===============================
(If needed Hosts: directive could be included in the fixlist to reset Hosts.)
2013-08-22 11:25 - 2018-10-17 22:54 - 000000843 _____ C:\WINDOWS\system32\Drivers\etc\hosts
==================== Other Areas ============================
(Currently there is no automatic fix for this section.)
HKU\S-1-5-21-273205616-5991483-2140142682-1004\Control Panel\Desktop\\Wallpaper -> C:\WINDOWS\web\wallpaper\Windows\img0.jpg
DNS Servers: 192.168.1.254
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: Off)
Windows Firewall is enabled.
==================== MSCONFIG/TASK MANAGER disabled items ==
If an entry is included in the fixlist, it will be removed.
HKLM\...\StartupApproved\Run: => "IgfxTray"
HKLM\...\StartupApproved\Run: => "HotKeysCmds"
HKLM\...\StartupApproved\Run: => "Persistence"
HKLM\...\StartupApproved\Run32: => "APSDaemon"
HKU\S-1-5-21-273205616-5991483-2140142682-1004\...\StartupApproved\Run: => "Steam"
==================== FirewallRules (Whitelisted) ===============
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
FirewallRules: [{FE0F5BFF-400B-4193-BD44-B76590BACDDD}] => (Allow) C:\Users\eliane\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{166DCE72-5E9A-4FB7-86A1-E94EAA591B96}] => (Allow) C:\Users\eliane\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{947705F1-AA64-4596-BC00-E8FF0F858D5B}] => (Allow) C:\Users\eliane\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{649E1194-DC84-4BBF-9631-9805FB93ADF2}] => (Allow) C:\Users\eliane\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{A433EE19-41E8-4BEA-88D0-486F9588DB22}] => (Allow) C:\Users\eliane\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{D0D742C3-374A-42BC-B71A-6DCC900B6CB3}] => (Allow) C:\Users\eliane\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [TCP Query User{BA1B50A6-3831-41EF-B7C2-333EAF67F765}C:\users\eliane\appdata\roaming\utorrent\updates\3.5.1_44332.exe] => (Block) C:\users\eliane\appdata\roaming\utorrent\updates\3.5.1_44332.exe
FirewallRules: [UDP Query User{6568D936-3B5A-4450-904E-CB9FD2F61E5F}C:\users\eliane\appdata\roaming\utorrent\updates\3.5.1_44332.exe] => (Block) C:\users\eliane\appdata\roaming\utorrent\updates\3.5.1_44332.exe
FirewallRules: [TCP Query User{2B6EE529-027F-4BE2-98FD-9EDC286AA758}C:\users\eliane\appdata\roaming\utorrent\updates\3.5.1_44332.exe] => (Block) C:\users\eliane\appdata\roaming\utorrent\updates\3.5.1_44332.exe
FirewallRules: [UDP Query User{7E984562-0497-4DFD-97C7-5FF7F9B6F196}C:\users\eliane\appdata\roaming\utorrent\updates\3.5.1_44332.exe] => (Block) C:\users\eliane\appdata\roaming\utorrent\updates\3.5.1_44332.exe
FirewallRules: [{5001E509-390C-4700-9816-D95F148615D7}] => (Allow) C:\Program Files (x86)\Microsoft Office\root\Office16\Lync.exe
FirewallRules: [{5D558DA9-7CC1-4507-9595-C795F463FC2B}] => (Allow) C:\Program Files (x86)\Microsoft Office\root\Office16\UcMapi.exe
FirewallRules: [{7C26BA97-E932-4BB1-938A-9A347F30B4F4}] => (Allow) C:\Users\eliane\AppData\Local\Microsoft\OneDrive\OneDrive.exe
FirewallRules: [{C169BA31-88AD-4570-96AF-0C99C528AF32}] => (Allow) C:\Users\eliane\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{39B1C348-82B7-4F24-B235-95DA39BD1B1C}] => (Allow) C:\Users\eliane\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{186B6945-4309-4610-A616-01865A48FEBE}] => (Allow) C:\Program Files\HP\HP Deskjet 2050 J510 series\Bin\USBSetup.exe
FirewallRules: [{49E63EE5-5A2E-4D5B-BC75-20EB18ABC43B}] => (Allow) LPort=1688
FirewallRules: [{4312D84C-0662-4A2D-B62F-DA10DF9920B4}] => (Allow) C:\Program Files\KMSpico\Service_KMS.exe
FirewallRules: [{37E87BA3-754C-4761-94D2-4D6A8B19F851}] => (Allow) C:\Program Files\KMSpico\Service_KMS.exe
FirewallRules: [TCP Query User{70A6EB7B-DD05-40DD-979D-D124C2369E4D}C:\program files (x86)\drivingspeed2\drivingspeed.exe] => (Block) C:\program files (x86)\drivingspeed2\drivingspeed.exe
FirewallRules: [UDP Query User{50965287-D92C-49F6-9EA4-A7CEBD1D554A}C:\program files (x86)\drivingspeed2\drivingspeed.exe] => (Block) C:\program files (x86)\drivingspeed2\drivingspeed.exe
FirewallRules: [{08B53B74-CF0D-421F-A1E2-EE469BB7F744}] => (Allow) C:\Program Files (x86)\Common Files\Apple\Apple Application Support\WebKit2WebProcess.exe
FirewallRules: [{C216B172-186F-41F5-8870-8761BC2AA792}] => (Block) c:\Program Files\Corel\CorelDRAW Graphics Suite 2018\Programs64\CorelDrw.exe
FirewallRules: [{9E635F67-3C7A-4BCD-A0EC-3697C7BE456D}] => (Block) c:\Program Files\Corel\CorelDRAW Graphics Suite 2018\Programs64\CorelPP.exe
FirewallRules: [{9E1BF72E-FAB0-4FA7-9697-6CA5796B86C5}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{DF310C01-55A7-48EF-9183-FF388010F7CE}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{F677A011-9AE9-43AB-B7D0-381096DFEAA8}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe
FirewallRules: [{8F43DF0B-03A8-484D-A11F-28987AFD5B13}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe
FirewallRules: [{BFB57318-3EDF-43B5-B939-BC02C5CB04C3}] => (Allow) C:\Program Files\CCleaner\CCUpdate.exe
FirewallRules: [{DB5EC117-677C-4949-9EAB-4BF98D435225}] => (Allow) C:\Program Files\CCleaner\CCUpdate.exe
FirewallRules: [{F1C27D00-8EA9-4BFD-B041-53C64B5643B9}] => (Allow) C:\Program Files (x86)\Microsoft Office\root\Office16\outlook.exe
FirewallRules: [{CAC7A595-BB6E-4A0F-BA46-9154899F2AA4}] => (Allow) C:\Users\eliane\AppData\Local\Temp\7zS627D\HPDiagnosticCoreUI.exe
FirewallRules: [{E7308D99-A000-421F-B5FF-0CF4796ECF12}] => (Allow) C:\Users\eliane\AppData\Local\Temp\7zS627D\HPDiagnosticCoreUI.exe
FirewallRules: [{B1B3B681-AE02-4DA7-BD0E-9DDBD038F19A}] => (Allow) C:\Program Files (x86)\Microsoft Office\root\Office16\Lync.exe
FirewallRules: [{B3BEBE7A-292E-4040-AF4A-2CA9ACAE04B6}] => (Allow) C:\Program Files (x86)\Microsoft Office\root\Office16\UcMapi.exe
FirewallRules: [{70F40991-B65F-4B7E-9FA4-7C2C42FBBF03}] => (Allow) C:\Program Files\BlueStacks\HD-Player.exe
FirewallRules: [{6A162D0B-752D-4B76-8572-3DEAF13318D0}] => (Allow) C:\Users\eliane\AppData\Local\Temp\7zS4924\HPDiagnosticCoreUI.exe
FirewallRules: [{4BE8828F-85D3-4001-A828-71FE2B4A5C9E}] => (Allow) C:\Users\eliane\AppData\Local\Temp\7zS4924\HPDiagnosticCoreUI.exe
FirewallRules: [{1F406E8E-7034-4231-A03C-0D1A90C1D618}] => (Allow) C:\Users\eliane\AppData\Local\Temp\7zS4784\HPDiagnosticCoreUI.exe
FirewallRules: [{DCD4AF8C-84E5-401E-ABFE-708B0C3B537C}] => (Allow) C:\Users\eliane\AppData\Local\Temp\7zS4784\HPDiagnosticCoreUI.exe
FirewallRules: [{F5CD3297-C337-4C64-91C4-10EA5773A41E}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
FirewallRules: [{A6ADBA66-54F8-457D-A0B3-5B926CC445D1}] => (Allow) C:\Program Files (x86)\MediatekWiFi\Common\RaUI.exe
FirewallRules: [{18891583-F666-43BB-9524-BFE3752760B1}] => (Allow) C:\Program Files\AVAST Software\Avast\AvEmUpdate.exe
FirewallRules: [{A8DC4DB1-6423-4C86-B9FD-37A789E6E9F6}] => (Allow) C:\Program Files\AVAST Software\Avast\AvEmUpdate.exe
FirewallRules: [{75B7B43E-12C4-4776-A891-C1B986369D80}] => (Allow) C:\Users\eliane\AppData\Local\Mozilla Firefox\firefox.exe
FirewallRules: [{54AAF5A7-A55C-4B73-BD4A-EDAE58B5C645}] => (Allow) C:\Users\eliane\AppData\Local\Mozilla Firefox\firefox.exe
==================== Restore Points =========================
14-10-2018 11:29:04 Windows Update
27-10-2018 17:27:54 Instalado Mediatek Wireless LAN
09-11-2018 15:56:29 Removido Mediatek Wireless LAN
==================== Faulty Device Manager Devices =============
Name: avast! SecureLine TAP Adapter v3
Description: avast! SecureLine TAP Adapter v3
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: TAP-Windows Provider V9
Service: aswTap
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.
==================== Event log errors: =========================
Application errors:
==================
Error: (11/09/2018 04:06:16 PM) (Source: Software Protection Platform Service) (EventID: 16385) (User: )
Description: Falha ao agendar o reinício do serviço Proteção de Software 2018-12-09T17:42:16Z. Código de Erro: 0x80070002.
Error: (11/09/2018 04:05:46 PM) (Source: Software Protection Platform Service) (EventID: 16385) (User: )
Description: Falha ao agendar o reinício do serviço Proteção de Software 2018-12-09T17:41:46Z. Código de Erro: 0x80070002.
Error: (11/09/2018 04:05:16 PM) (Source: Software Protection Platform Service) (EventID: 16385) (User: )
Description: Falha ao agendar o reinício do serviço Proteção de Software 2018-12-09T17:42:16Z. Código de Erro: 0x80070002.
Error: (11/09/2018 04:04:45 PM) (Source: Software Protection Platform Service) (EventID: 16385) (User: )
Description: Falha ao agendar o reinício do serviço Proteção de Software 2018-12-09T17:41:45Z. Código de Erro: 0x80070002.
Error: (11/09/2018 04:04:15 PM) (Source: Software Protection Platform Service) (EventID: 16385) (User: )
Description: Falha ao agendar o reinício do serviço Proteção de Software 2018-12-09T17:42:15Z. Código de Erro: 0x80070002.
Error: (11/09/2018 04:03:45 PM) (Source: Software Protection Platform Service) (EventID: 16385) (User: )
Description: Falha ao agendar o reinício do serviço Proteção de Software 2018-12-09T17:41:45Z. Código de Erro: 0x80070002.
Error: (11/09/2018 04:03:15 PM) (Source: Software Protection Platform Service) (EventID: 16385) (User: )
Description: Falha ao agendar o reinício do serviço Proteção de Software 2018-12-09T17:42:15Z. Código de Erro: 0x80070002.
Error: (11/09/2018 04:02:45 PM) (Source: Software Protection Platform Service) (EventID: 16385) (User: )
Description: Falha ao agendar o reinício do serviço Proteção de Software 2018-12-09T17:41:45Z. Código de Erro: 0x80070002.
System errors:
=============
Error: (11/09/2018 04:02:27 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: O serviço Windows Media Player Network Sharing Service foi finalizado inesperadamente. Isto aconteceu 1 vez(es). A seguinte ação corretiva será tomada em 30000 milissegundos: Restart the service.
Error: (11/09/2018 04:02:27 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: O serviço Avast Cleanup Premium foi finalizado inesperadamente. Isto aconteceu 1 vez(es). A seguinte ação corretiva será tomada em 5000 milissegundos: Restart the service.
Error: (11/09/2018 04:02:27 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: O serviço BBUpdate foi encerrado inesperadamente. Isso aconteceu 1 vez(es).
Error: (11/09/2018 04:02:27 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: O serviço Microsoft Office Click-to-Run Service foi finalizado inesperadamente. Isto aconteceu 1 vez(es). A seguinte ação corretiva será tomada em 0 milissegundos: Restart the service.
Error: (11/09/2018 04:02:27 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: O serviço Service KMSELDI foi encerrado inesperadamente. Isso aconteceu 1 vez(es).
Error: (11/09/2018 04:02:27 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: O serviço Adobe Acrobat Update Service foi encerrado inesperadamente. Isso aconteceu 1 vez(es).
Error: (11/09/2018 04:02:27 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: O serviço SAMSUNG Mobile Connectivity Service foi encerrado inesperadamente. Isso aconteceu 1 vez(es).
Error: (11/09/2018 04:02:27 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: O serviço Corel License Validation Service V2, Powered by arvato foi encerrado inesperadamente. Isso aconteceu 1 vez(es).
Windows Defender:
===================================
Date: 2018-01-21 22:55:14.708
Description:
O Windows Defender detectou malware ou outros softwares potencialmente indesejados.
Para obter mais informações, consulte:
http://go.microsoft.com/fwlink/?linkid=37020&name=HackTool:Win32/AutoKMS&threatid=2147685180
Nome: HackTool:Win32/AutoKMS
ID: 2147685180
Severidade: Medium
Categoria: Tool
Caminho: file:_C:\Users\eliane\AppData\Local\Temp\KMSpico\AutoPico.exe;process:_pid:1284,ProcessStart:131610560627075981;process:_pid:1828,ProcessStart:131610561125694281;process:_pid:3232,ProcessStart:131610560983676358
Origem da Detecção: Computador local
Tipo de Detecção: Concreto
Origem da Detecção: Proteção em Tempo Real
Usuário: ELIANE\eliane
Nome do Processo: C:\Users\eliane\AppData\Local\Temp\KMSpico\AutoPico.exe
Versão da Assinatura: AV: 1.193.2275.0, AS: 1.193.2275.0, NIS: 113.74.0.0
Versão do Mecanismo: AM: 1.1.11400.0, NIS: 2.1.11005.0
Date: 2018-01-21 22:55:11.756
Description:
O Windows Defender detectou malware ou outros softwares potencialmente indesejados.
Para obter mais informações, consulte:
http://go.microsoft.com/fwlink/?linkid=37020&name=HackTool:Win32/AutoKMS&threatid=2147685180
Nome: HackTool:Win32/AutoKMS
ID: 2147685180
Severidade: Medium
Categoria: Tool
Caminho: file:_C:\Users\eliane\AppData\Local\Temp\KMSpico\AutoPico.exe;process:_pid:1284,ProcessStart:131610560627075981;process:_pid:3232,ProcessStart:131610560983676358
Origem da Detecção: Computador local
Tipo de Detecção: Concreto
Origem da Detecção: Proteção em Tempo Real
Usuário: ELIANE\eliane
Nome do Processo: C:\Users\eliane\Desktop\KMSpico.exe
Versão da Assinatura: AV: 1.193.2275.0, AS: 1.193.2275.0, NIS: 113.74.0.0
Versão do Mecanismo: AM: 1.1.11400.0, NIS: 2.1.11005.0
Date: 2018-01-21 22:55:00.614
Description:
O Windows Defender detectou malware ou outros softwares potencialmente indesejados.
Para obter mais informações, consulte:
http://go.microsoft.com/fwlink/?linkid=37020&name=HackTool:Win32/AutoKMS&threatid=2147685180
Nome: HackTool:Win32/AutoKMS
ID: 2147685180
Severidade: Medium
Categoria: Tool
Caminho: file:_C:\Users\eliane\AppData\Local\Temp\KMSpico\AutoPico.exe;process:_pid:1284,ProcessStart:131610560627075981;process:_pid:3232,ProcessStart:131610560983676358
Origem da Detecção: Computador local
Tipo de Detecção: Concreto
Origem da Detecção: Proteção em Tempo Real
Usuário: ELIANE\eliane
Nome do Processo: C:\Users\eliane\AppData\Local\Temp\KMSpico\AutoPico.exe
Versão da Assinatura: AV: 1.193.2275.0, AS: 1.193.2275.0, NIS: 113.74.0.0
Versão do Mecanismo: AM: 1.1.11400.0, NIS: 2.1.11005.0
Date: 2018-01-21 22:54:57.586
Description:
O Windows Defender detectou malware ou outros softwares potencialmente indesejados.
Para obter mais informações, consulte:
http://go.microsoft.com/fwlink/?linkid=37020&name=HackTool:Win32/AutoKMS&threatid=2147685180
Nome: HackTool:Win32/AutoKMS
ID: 2147685180
Severidade: Medium
Categoria: Tool
Caminho: file:_C:\Users\eliane\AppData\Local\Temp\KMSpico\AutoPico.exe;process:_pid:1284,ProcessStart:131610560627075981
Origem da Detecção: Computador local
Tipo de Detecção: Concreto
Origem da Detecção: Proteção em Tempo Real
Usuário: ELIANE\eliane
Nome do Processo: C:\Users\eliane\Desktop\KMSpico.exe
Versão da Assinatura: AV: 1.193.2275.0, AS: 1.193.2275.0, NIS: 113.74.0.0
Versão do Mecanismo: AM: 1.1.11400.0, NIS: 2.1.11005.0
Date: 2018-01-21 22:54:28.111
Description:
O Windows Defender detectou malware ou outros softwares potencialmente indesejados.
Para obter mais informações, consulte:
http://go.microsoft.com/fwlink/?linkid=37020&name=HackTool:Win32/AutoKMS&threatid=2147685180
Nome: HackTool:Win32/AutoKMS
ID: 2147685180
Severidade: Medium
Categoria: Tool
Caminho: file:_C:\Users\eliane\AppData\Local\Temp\KMSpico\AutoPico.exe;process:_pid:1284,ProcessStart:131610560627075981
Origem da Detecção: Computador local
Tipo de Detecção: Concreto
Origem da Detecção: Proteção em Tempo Real
Usuário: ELIANE\eliane
Nome do Processo: C:\Users\eliane\AppData\Local\Temp\KMSpico\AutoPico.exe
Versão da Assinatura: AV: 1.193.2275.0, AS: 1.193.2275.0, NIS: 113.74.0.0
Versão do Mecanismo: AM: 1.1.11400.0, NIS: 2.1.11005.0
Date: 2015-03-11 16:50:35.899
Description:
O recurso de Proteção em Tempo Real do Windows Defender encontrou um erro e falhou.
Recurso: Sistema de Inspeção de Rede
Código do Erro: 0x80070002
Descrição do erro: The system cannot find the file specified.
Motivo: O sistema não possui atualizações que são necessárias para executar o Sistema de Inspeção de Rede. Instale as atualizações necessárias e reinicie o computador.
Date: 2015-03-11 16:10:02.060
Description:
O recurso de Proteção em Tempo Real do Windows Defender encontrou um erro e falhou.
Recurso: Sistema de Inspeção de Rede
Código do Erro: 0x80070002
Descrição do erro: The system cannot find the file specified.
Motivo: O sistema não possui atualizações que são necessárias para executar o Sistema de Inspeção de Rede. Instale as atualizações necessárias e reinicie o computador.
Date: 2015-03-11 12:47:14.980
Description:
O recurso de Proteção em Tempo Real do Windows Defender encontrou um erro e falhou.
Recurso: Sistema de Inspeção de Rede
Código do Erro: 0x80070002
Descrição do erro: The system cannot find the file specified.
Motivo: O sistema não possui atualizações que são necessárias para executar o Sistema de Inspeção de Rede. Instale as atualizações necessárias e reinicie o computador.
Date: 2015-03-11 12:14:25.375
Description:
O recurso de Proteção em Tempo Real do Windows Defender encontrou um erro e falhou.
Recurso: Sistema de Inspeção de Rede
Código do Erro: 0x80070002
Descrição do erro: The system cannot find the file specified.
Motivo: O sistema não possui atualizações que são necessárias para executar o Sistema de Inspeção de Rede. Instale as atualizações necessárias e reinicie o computador.
Date: 2015-03-11 11:27:15.959
Description:
O recurso de Proteção em Tempo Real do Windows Defender encontrou um erro e falhou.
Recurso: Sistema de Inspeção de Rede
Código do Erro: 0x80070002
Descrição do erro: The system cannot find the file specified.
Motivo: O sistema não possui atualizações que são necessárias para executar o Sistema de Inspeção de Rede. Instale as atualizações necessárias e reinicie o computador.
CodeIntegrity:
===================================
Date: 2018-07-01 14:22:50.085
Description:
Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\wow64.dll because the set of per-page image hashes could not be found on the system.
Date: 2018-07-01 14:22:49.538
Description:
Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\wow64.dll because the set of per-page image hashes could not be found on the system.
Date: 2018-07-01 14:22:49.038
Description:
Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\wow64.dll because the set of per-page image hashes could not be found on the system.
Date: 2018-07-01 14:22:48.491
Description:
Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\wow64.dll because the set of per-page image hashes could not be found on the system.
Date: 2018-07-01 14:22:47.960
Description:
Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\wow64.dll because the set of per-page image hashes could not be found on the system.
Date: 2018-07-01 14:22:47.444
Description:
Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\wow64.dll because the set of per-page image hashes could not be found on the system.
Date: 2018-07-01 14:22:46.929
Description:
Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\wow64.dll because the set of per-page image hashes could not be found on the system.
Date: 2018-07-01 14:22:46.241
Description:
Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\wow64.dll because the set of per-page image hashes could not be found on the system.
==================== Memory info ===========================
Processor: Intel(R) Pentium(R) CPU G620 @ 2.60GHz
Percentage of memory in use: 61%
Total physical RAM: 3969.47 MB
Available physical RAM: 1528.81 MB
Total Virtual: 8065.47 MB
Available Virtual: 5807.77 MB
==================== Drives ================================
Drive c: () (Fixed) (Total:223.29 GB) (Free:91.75 GB) NTFS
Drive e: () (Fixed) (Total:242.13 GB) (Free:239.81 GB) NTFS
\\?\Volume{a02d2c90-ff0f-11e7-8259-806e6f6e6963}\ (Reservado pelo Sistema) (Fixed) (Total:0.34 GB) (Free:0.06 GB) NTFS
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (MBR Code: Windows 7/8/10) (Size: 465.8 GB) (Disk ID: 5CB8D2AD)
Partition 1: (Active) - (Size=350 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=223.3 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=242.1 GB) - (Type=07 NTFS)
==================== End of Addition.txt ============================
Ran by ELIANE (09-11-2018 16:06:06)
Running from C:\Users\eliane\Downloads
Windows 8.1 Pro (Update) (X64) (2018-01-22 00:29:50)
Boot Mode: Normal
==========================================================
==================== Accounts: =============================
Administrator (S-1-5-21-273205616-5991483-2140142682-500 - Administrator - Disabled) => C:\Users\Administrator
ELIANE (S-1-5-21-273205616-5991483-2140142682-1004 - Administrator - Enabled) => C:\Users\eliane
Guest (S-1-5-21-273205616-5991483-2140142682-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-273205616-5991483-2140142682-1008 - Limited - Enabled)
kassi_000 (S-1-5-21-273205616-5991483-2140142682-1009 - Administrator - Enabled) => C:\Users\kassi_000
==================== Security Center ========================
(If an entry is included in the fixlist, it will be removed.)
AV: Avast Antivirus (Enabled - Up to date) {8EA8924E-BC81-DC44-8BB0-8BAE75D86EBF}
AS: Avast Antivirus (Enabled - Up to date) {35C973AA-9ABB-D3CA-B100-B0DC0E5F2402}
FW: Avast Antivirus (Enabled) {B693136B-F6EE-DD1C-A0EF-229B8B0B29C4}
==================== Installed Programs ======================
(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
µTorrent (HKU\S-1-5-21-273205616-5991483-2140142682-1004\...\uTorrent) (Version: 3.5.4.44632 - BitTorrent Inc.)
Adobe Acrobat Reader DC - Português (HKLM-x32\...\{AC76BA86-7AD7-1046-7B44-AC0F074E4100}) (Version: 19.008.20080 - Adobe Systems Incorporated)
Adobe Flash Player 31 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 31.0.0.122 - Adobe Systems Incorporated)
Adobe Photoshop CC 2015 (HKLM-x32\...\{793C2BF7-A4FE-4608-91C9-9282C5801C21}) (Version: 16.0 - Adobe Systems Incorporated)
Aiseesoft Video Converter Ultimate 9.2.38 (HKLM-x32\...\{4E453AA0-3B4A-4b78-BA4B-E2EAB6DF11D6}_is1) (Version: 9.2.38 - Aiseesoft Studio)
Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)
aTube Catcher versão 3.8 (HKLM-x32\...\{D43B360E-722D-421B-BC77-20B9E0F8B6CD}_is1) (Version: 3.8 - DsNET Corp)
Avast Cleanup Premium (HKLM-x32\...\{075CC190-59EE-499F-828B-0B5C098C8C15}_is1) (Version: 17.3.4228 - AVAST Software)
Avast Premier (HKLM-x32\...\Avast Antivirus) (Version: 18.7.2354 - AVAST Software)
Bing Bar (HKLM-x32\...\{3611CA6C-5FCA-4900-A329-6A118123CCFC}) (Version: 7.1.355.0 - Microsoft Corporation)
CCleaner (HKLM\...\CCleaner) (Version: 5.46 - Piriform)
Corel Graphics - Windows Shell Extension (HKLM\...\_{CD4FAF77-25BC-4838-9B4B-5C59AC8662D1}) (Version: 20.0.0.633 - Corel Corporation)
Corel Graphics - Windows Shell Extension (HKLM\...\{CD4FAF77-25BC-4838-9B4B-5C59AC8662D1}) (Version: 20.0.633 - Corel Corporation) Hidden
Corel Graphics - Windows Shell Extension 32 Bit Keys (HKLM\...\{C0408619-0431-4B54-B63C-C3AB18B1E4B4}) (Version: 20.0.633 - Corel Corporation) Hidden
Corel Update Manager (HKLM\...\{7A731C52-8DC6-47AB-B2BC-3FE70F6C6968}) (Version: 2.9.389 - Corel corporation) Hidden
CorelDRAW Graphics Suite 2018 - BR (x64) (HKLM\...\{575AFBB6-FDF0-4191-97D0-E109C1A53E9B}) (Version: 20.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite 2018 - Capture (x64) (HKLM\...\{57B35A9E-2E5C-4CE4-AE54-61B02500ED6C}) (Version: 20.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite 2018 - Common (x64) (HKLM\...\{C9E9E21E-E375-4BAF-B647-22ABA6ABBACF}) (Version: 20.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite 2018 - Connect (x64) (HKLM\...\{BCAF055A-51F2-4266-BC27-E67AFE02B1CE}) (Version: 20.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite 2018 - Custom Data (x64) (HKLM\...\{098FFEC8-98D9-4DE0-BC3F-B5A94547FF73}) (Version: 20.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite 2018 - Draw (x64) (HKLM\...\{121B4D48-BDC1-4037-B150-28037FA47510}) (Version: 20.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite 2018 - Filters (x64) (HKLM\...\{9433E8C4-DD2E-40BE-A1AF-0832DFE89C92}) (Version: 20.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite 2018 - Font Manager (x64) (HKLM\...\{EFD5BDD5-CEF1-4209-ABF1-2387D0756D14}) (Version: 20.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite 2018 - IPM Content BR (HKLM-x32\...\{F0FAEE69-7104-4C61-9E1D-B292E780C41E}) (Version: 20.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite 2018 - IPM T (x64) (HKLM\...\{A4DEA23F-2371-483E-93C1-1764CA80DDEF}) (Version: 20.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite 2018 - PHOTO-PAINT (x64) (HKLM\...\{CA42C3C9-6A8C-423E-885E-064B06DAD20E}) (Version: 20.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite 2018 - Redist (x64) (HKLM\...\{E442BB6A-268E-4864-9780-C0A4789DA64F}) (Version: 20.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite 2018 - Setup Files (x64) (HKLM\...\{CBBC5C20-F3ED-4425-9393-F77D50036592}) (Version: 20.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite 2018 - VBA (x64) (HKLM\...\{8FE99871-8AF0-449F-A1C4-F18EE971DC84}) (Version: 20.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite 2018 - Workspaces (x64) (HKLM\...\{94B3EE65-9BD2-4C39-9E43-E1403F6A82F4}) (Version: 20.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite 2018 - Writing Tools (x64) (HKLM\...\{F5CC82A3-6FF2-4D76-AC4F-3A7C63E3487C}) (Version: 20.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite 2018 (64-Bit) (HKLM\...\_{CBBC5C20-F3ED-4425-9393-F77D50036592}) (Version: 20.0.0.633 - Corel Corporation)
CorelDRAW Graphics Suite 2018 (HKLM\...\{23465DF5-08D9-4150-9621-7A127B208936}) (Version: 20.0 - Corel Corporation) Hidden
Driving Speed 2.0 (HKLM-x32\...\Driving Speed 2_is1) (Version: - WheelSpin Studios)
EaseUS MobiSaver for Android version 5.0 (HKLM-x32\...\{82D2239C-0F46-4446-B3CA-810A07BF7A6E}_is1) (Version: 5.0 - CHENGDU YIWO Tech Development Co., Ltd.)
Euro Truck Simulator 2 (HKLM-x32\...\Euro Truck Simulator 2_is1) (Version: 1.20.0.2s - Релиз от R.G. Steamgames)
Ghostscript GPL 8.64 (Msi Setup) (HKLM-x32\...\_{06CD45E6-FF5E-4D8E-BC01-B276A90DADF2}) (Version: 8.64 - Corel Corporation)
Ghostscript GPL 8.64 (Msi Setup) (HKLM-x32\...\{06CD45E6-FF5E-4D8E-BC01-B276A90DADF2}) (Version: 8.64 - Corel Corporation) Hidden
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 70.0.3538.77 - Google Inc.)
Google Update Helper (HKLM-x32\...\{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.33.17 - Google Inc.) Hidden
HP Deskjet 2050 J510 series Ajuda (HKLM-x32\...\{7A3DF2E2-CF13-44FB-A93E-F71D5381DB3F}) (Version: 140.0.61.61 - Hewlett Packard)
HP Deskjet 2050 J510 series Estudo de aprimoramento de produtos (HKLM\...\{8D71EFB0-B1EF-4478-92D2-A65DB23AC460}) (Version: 28.0.1313.0 - Hewlett-Packard Co.)
HP Deskjet 2050 J510 series Software básico do dispositivo (HKLM\...\{2DCBB45E-AA03-4089-87E7-EC17E606D738}) (Version: 28.0.1313.0 - Hewlett-Packard Co.)
HP Photo Creations (HKLM-x32\...\HP Photo Creations) (Version: 1.0.0.7702 - HP)
HP Update (HKLM-x32\...\{912D30CF-F39E-4B31-AD9A-123C6B794EE2}) (Version: 5.005.002.002 - Hewlett-Packard)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 9.17.10.4229 - Intel Corporation)
KMSpico (HKLM\...\{8B29D47F-92E2-4C20-9EE0-F710991F5D7C}_is1) (Version: - )
LG Mobile Driver (HKLM-x32\...\{3F490D0E-3131-438C-BCF9-7549CB88DF41}) (Version: 4.2.0 - LG Electronics)
LG United Mobile Drivers (HKLM-x32\...\{5DB849D6-9392-4FB7-9ABB-87ED433152E5}) (Version: 3.8.1 - LG Electronics)
LG USB WML Modem Driver (HKLM-x32\...\{FBA0CA60-8BF2-4381-B819-74F020E165A9}) (Version: 1.0 - LG Electronics)
Lightshot-5.4.0.35 (HKLM-x32\...\{30A5B3C9-2084-4063-A32A-628A98DE512B}_is1) (Version: 5.4.0.35 - Skillbrains)
MEmu (HKLM-x32\...\MEmu) (Version: 5.5.1.0 - Microvirt Software Technology Co. Ltd)
Microsoft Office Professional Plus 2016 - en-us (HKLM\...\ProPlusRetail - en-us) (Version: 16.0.11001.20074 - Microsoft Corporation)
Microsoft Office Professional Plus 2016 - pt-br (HKLM\...\ProPlusRetail - pt-br) (Version: 16.0.11001.20074 - Microsoft Corporation)
Microsoft OneDrive (HKU\.DEFAULT\...\OneDriveSetup.exe) (Version: 17.3.6743.1212 - Microsoft Corporation)
Microsoft OneDrive (HKU\S-1-5-21-273205616-5991483-2140142682-1004\...\OneDriveSetup.exe) (Version: 18.025.0204.0009 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30514.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2017 Redistributable (x64) - 14.12.25810 (HKLM-x32\...\{e2ee15e2-a480-4bc5-bfb7-e9803d1d9823}) (Version: 14.12.25810.0 - Microsoft Corporation)
Microsoft Visual Studio Tools for Applications 2015 (HKLM-x32\...\{dd8b09df-3ef8-49f1-bd1a-65278435860b}) (Version: 14.0.23217 - Microsoft Corporation)
Microsoft Visual Studio Tools for Applications 2017 (HKLM-x32\...\{5a7dc0ad-cdb2-43b5-8b82-f81065fe6092}) (Version: 15.0.26717 - Microsoft Corporation)
Mozilla Firefox 63.0.1 (x64 pt-BR) (HKLM\...\Mozilla Firefox 63.0.1 (x64 pt-BR)) (Version: 63.0.1 - Mozilla)
Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 63.0.1 - Mozilla)
Office 16 Click-to-Run Extensibility Component (HKLM-x32\...\{90160000-008C-0000-0000-0000000FF1CE}) (Version: 16.0.11001.20074 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Extensibility Component 64-bit Registration (HKLM\...\{90160000-00DD-0000-1000-0000000FF1CE}) (Version: 16.0.11001.20074 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Licensing Component (HKLM\...\{90160000-008F-0000-1000-0000000FF1CE}) (Version: 16.0.11001.20074 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Localization Component (HKLM-x32\...\{90160000-008C-0409-0000-0000000FF1CE}) (Version: 16.0.11001.20074 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Localization Component (HKLM-x32\...\{90160000-008C-0416-0000-0000000FF1CE}) (Version: 16.0.11001.20074 - Microsoft Corporation) Hidden
QuickTime 7 (HKLM-x32\...\{FF59BD75-466A-4D5A-AD23-AAD87C5FD44C}) (Version: 7.79.80.95 - Apple Inc.)
SAMSUNG USB Driver for Mobile Phones (HKLM\...\{D0795B21-0CDA-4a92-AB9E-6E92D8111E44}) (Version: 1.5.51.0 - SAMSUNG Electronics Co., Ltd.)
Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)
Suporte para Aplicativos Apple (HKLM-x32\...\{46F044A5-CE8B-4196-984E-5BD6525E361D}) (Version: 2.3.6 - Apple Inc.)
VEGAS Pro 14.0 (64-bit) (HKLM\...\{4D911470-79F9-11E6-9145-BB95F5A309BD}) (Version: 14.0.161 - VEGAS)
VEGAS Pro 15.0 (HKLM\...\{B53381C0-CFA3-11E7-8076-FBB956011AFA}) (Version: 15.0.261 - VEGAS)
WinRAR 5.50 (64-bit) (HKLM\...\WinRAR archiver) (Version: 5.50.0 - win.rar GmbH)
==================== Custom CLSID (Whitelisted): ==========================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
ShellIconOverlayIdentifiers: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2018-10-22] (AVAST Software)
ContextMenuHandlers1: [avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2018-10-22] (AVAST Software)
ContextMenuHandlers1: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2017-08-11] (Alexander Roshal)
ContextMenuHandlers1-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2017-08-11] (Alexander Roshal)
ContextMenuHandlers3: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2018-10-22] (AVAST Software)
ContextMenuHandlers5: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} => C:\WINDOWS\system32\igfxpph.dll [2015-06-01] (Intel Corporation)
ContextMenuHandlers6: [avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2018-10-22] (AVAST Software)
ContextMenuHandlers6: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2017-08-11] (Alexander Roshal)
ContextMenuHandlers6-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2017-08-11] (Alexander Roshal)
==================== Scheduled Tasks (Whitelisted) =============
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
Task: {0E94458A-B293-4BB6-8946-A80A36DD01A8} - System32\Tasks\Adobe Flash Player NPAPI Notifier => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashUtil32_31_0_0_122_Plugin.exe [2018-10-10] (Adobe Systems Incorporated)
Task: {22FD0B8A-0909-4DDE-AD15-AF69702E16D0} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack2016 => C:\Program Files (x86)\Microsoft Office\root\Office16\msoia.exe [2018-11-04] (Microsoft Corporation)
Task: {35B80DDE-DBB0-4774-9F45-354862995313} - \WPD\SqmUpload_S-1-5-21-273205616-5991483-2140142682-1001 -> No File <==== ATTENTION
Task: {3E6C4822-9AF3-497B-AEF9-EDA363428425} - System32\Tasks\Microsoft\Office\OfficeBackgroundTaskHandlerLogon => C:\Program Files (x86)\Microsoft Office\root\Office16\officebackgroundtaskhandler.exe [2018-11-04] (Microsoft Corporation)
Task: {48C77F2C-5E3A-478C-9A18-6812F1FBB1AE} - System32\Tasks\CCleaner Update => C:\Program Files\CCleaner\CCUpdate.exe [2018-09-10] (Piriform Ltd)
Task: {52D65EA2-BED7-4A7B-8552-F587301413A7} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2018-09-10] (Piriform Ltd)
Task: {59EDE91E-1857-47B7-9DC6-E95620D6404E} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)
Task: {5CFC83F4-58B2-4865-B4E8-1857D2F418DC} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2018-08-14] (Adobe Systems Incorporated)
Task: {6784A048-A3A5-40A7-83E1-86E8449F9AA5} - System32\Tasks\Avast Emergency Update => C:\Program Files\AVAST Software\Avast\AvEmUpdate.exe [2018-10-22] (AVAST Software)
Task: {6CA8FA91-370E-415E-AA2C-DA47BCB1B9DF} - System32\Tasks\Microsoft\Office\Office Feature Updates Logon => C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesCommonX86\Microsoft Shared\Office16\sdxhelper.exe [2018-11-04] (Microsoft Corporation)
Task: {8A5EB032-2BB8-455C-A720-F272DAC1D891} - System32\Tasks\AdwCleaner_onReboot => C:\Users\eliane\Downloads\adwcleaner_7.2.4.0.exe [2018-11-09] (Malwarebytes)
Task: {8DF11BB8-0A4D-4008-BC9E-87366C20DAB4} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2018-01-22] (Google Inc.)
Task: {90288114-ACD9-48A8-BDA9-C0FCDC958F0A} - System32\Tasks\Adobe Flash Player Updater => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2018-10-10] (Adobe Systems Incorporated)
Task: {921E97A9-D948-4F4A-A5D2-C3433D0A959B} - System32\Tasks\Avast Software\Overseer => C:\Program Files\Common Files\Avast Software\Overseer\overseer.exe [2018-10-29] (AVAST Software)
Task: {935A632A-107D-4442-934C-A09604A5CD47} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2018-01-22] (Google Inc.)
Task: {962C1B62-7CD1-4C78-B618-FD1BA30BF82F} - \Optimize Start Menu Cache Files-S-1-5-21-273205616-5991483-2140142682-1001 -> No File <==== ATTENTION
Task: {A57706E3-9D04-431F-AE46-79045494554E} - System32\Tasks\Microsoft\Office\Office Automatic Updates 2.0 => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [2018-10-24] (Microsoft Corporation)
Task: {A84351AE-3BAB-4436-BECE-201904A93E6F} - System32\Tasks\CorelUpdateHelperTaskCore => c:\Program Files (x86)\Corel\CUH\v2\CUH.exe [2018-06-21] (Corel Corporation)
Task: {C7BB6A91-A456-4D90-BD40-75D1D8E00B87} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn2016 => C:\Program Files (x86)\Microsoft Office\root\Office16\msoia.exe [2018-11-04] (Microsoft Corporation)
Task: {C839C603-35EE-4939-99FC-251BE866CB89} - System32\Tasks\Microsoft\Office\OfficeBackgroundTaskHandlerRegistration => C:\Program Files (x86)\Microsoft Office\root\Office16\officebackgroundtaskhandler.exe [2018-11-04] (Microsoft Corporation)
Task: {EBE2552B-8852-43A8-B367-93604E0345EB} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [2018-10-24] (Microsoft Corporation)
Task: {F1C10DA7-05B6-4764-BE6F-BE888AC74293} - \AutoPico Daily Restart -> No File <==== ATTENTION
Task: {F49DB361-D229-469C-B5BB-E41CE83188E4} - System32\Tasks\Microsoft\Office\Office Feature Updates => C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesCommonX86\Microsoft Shared\Office16\sdxhelper.exe [2018-11-04] (Microsoft Corporation)
(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)
Task: C:\WINDOWS\Tasks\update-S-1-5-21-273205616-5991483-2140142682-1004.job => C:\Program Files (x86)\Skillbrains\Updater\Updater.exe
==================== Shortcuts & WMI ========================
(The entries could be listed to be restored or removed.)
ShortcutWithArgument: C:\Users\eliane\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Aplicativos do Google Chrome\Vysor.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> --profile-directory=Default --app-id=gidgenkbbabolejbgbpnhbimgjbffefm
==================== Loaded Modules (Whitelisted) ==============
2018-01-21 22:54 - 2018-01-21 22:54 - 000003584 _____ () C:\WINDOWS\SECOH-QAD.dll
2018-10-25 19:34 - 2018-10-23 19:24 - 005020504 _____ () C:\Program Files (x86)\Google\Chrome\Application\70.0.3538.77\libglesv2.dll
2018-10-25 19:34 - 2018-10-23 19:24 - 000116056 _____ () C:\Program Files (x86)\Google\Chrome\Application\70.0.3538.77\libegl.dll
2018-10-22 23:38 - 2018-10-22 23:38 - 000598232 _____ () C:\Program Files\AVAST Software\Avast\streamback.dll
2018-03-14 13:56 - 2018-03-14 13:56 - 067126928 _____ () C:\Program Files\AVAST Software\Avast\libcef.dll
==================== Alternate Data Streams (Whitelisted) =========
(If an entry is included in the fixlist, only the ADS will be removed.)
==================== Safe Mode (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)
==================== Association (Whitelisted) ===============
(If an entry is included in the fixlist, the registry item will be restored to default or removed.)
==================== Internet Explorer trusted/restricted ===============
(If an entry is included in the fixlist, it will be removed from the registry.)
==================== Hosts content: ===============================
(If needed Hosts: directive could be included in the fixlist to reset Hosts.)
2013-08-22 11:25 - 2018-10-17 22:54 - 000000843 _____ C:\WINDOWS\system32\Drivers\etc\hosts
==================== Other Areas ============================
(Currently there is no automatic fix for this section.)
HKU\S-1-5-21-273205616-5991483-2140142682-1004\Control Panel\Desktop\\Wallpaper -> C:\WINDOWS\web\wallpaper\Windows\img0.jpg
DNS Servers: 192.168.1.254
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: Off)
Windows Firewall is enabled.
==================== MSCONFIG/TASK MANAGER disabled items ==
If an entry is included in the fixlist, it will be removed.
HKLM\...\StartupApproved\Run: => "IgfxTray"
HKLM\...\StartupApproved\Run: => "HotKeysCmds"
HKLM\...\StartupApproved\Run: => "Persistence"
HKLM\...\StartupApproved\Run32: => "APSDaemon"
HKU\S-1-5-21-273205616-5991483-2140142682-1004\...\StartupApproved\Run: => "Steam"
==================== FirewallRules (Whitelisted) ===============
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
FirewallRules: [{FE0F5BFF-400B-4193-BD44-B76590BACDDD}] => (Allow) C:\Users\eliane\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{166DCE72-5E9A-4FB7-86A1-E94EAA591B96}] => (Allow) C:\Users\eliane\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{947705F1-AA64-4596-BC00-E8FF0F858D5B}] => (Allow) C:\Users\eliane\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{649E1194-DC84-4BBF-9631-9805FB93ADF2}] => (Allow) C:\Users\eliane\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{A433EE19-41E8-4BEA-88D0-486F9588DB22}] => (Allow) C:\Users\eliane\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{D0D742C3-374A-42BC-B71A-6DCC900B6CB3}] => (Allow) C:\Users\eliane\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [TCP Query User{BA1B50A6-3831-41EF-B7C2-333EAF67F765}C:\users\eliane\appdata\roaming\utorrent\updates\3.5.1_44332.exe] => (Block) C:\users\eliane\appdata\roaming\utorrent\updates\3.5.1_44332.exe
FirewallRules: [UDP Query User{6568D936-3B5A-4450-904E-CB9FD2F61E5F}C:\users\eliane\appdata\roaming\utorrent\updates\3.5.1_44332.exe] => (Block) C:\users\eliane\appdata\roaming\utorrent\updates\3.5.1_44332.exe
FirewallRules: [TCP Query User{2B6EE529-027F-4BE2-98FD-9EDC286AA758}C:\users\eliane\appdata\roaming\utorrent\updates\3.5.1_44332.exe] => (Block) C:\users\eliane\appdata\roaming\utorrent\updates\3.5.1_44332.exe
FirewallRules: [UDP Query User{7E984562-0497-4DFD-97C7-5FF7F9B6F196}C:\users\eliane\appdata\roaming\utorrent\updates\3.5.1_44332.exe] => (Block) C:\users\eliane\appdata\roaming\utorrent\updates\3.5.1_44332.exe
FirewallRules: [{5001E509-390C-4700-9816-D95F148615D7}] => (Allow) C:\Program Files (x86)\Microsoft Office\root\Office16\Lync.exe
FirewallRules: [{5D558DA9-7CC1-4507-9595-C795F463FC2B}] => (Allow) C:\Program Files (x86)\Microsoft Office\root\Office16\UcMapi.exe
FirewallRules: [{7C26BA97-E932-4BB1-938A-9A347F30B4F4}] => (Allow) C:\Users\eliane\AppData\Local\Microsoft\OneDrive\OneDrive.exe
FirewallRules: [{C169BA31-88AD-4570-96AF-0C99C528AF32}] => (Allow) C:\Users\eliane\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{39B1C348-82B7-4F24-B235-95DA39BD1B1C}] => (Allow) C:\Users\eliane\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{186B6945-4309-4610-A616-01865A48FEBE}] => (Allow) C:\Program Files\HP\HP Deskjet 2050 J510 series\Bin\USBSetup.exe
FirewallRules: [{49E63EE5-5A2E-4D5B-BC75-20EB18ABC43B}] => (Allow) LPort=1688
FirewallRules: [{4312D84C-0662-4A2D-B62F-DA10DF9920B4}] => (Allow) C:\Program Files\KMSpico\Service_KMS.exe
FirewallRules: [{37E87BA3-754C-4761-94D2-4D6A8B19F851}] => (Allow) C:\Program Files\KMSpico\Service_KMS.exe
FirewallRules: [TCP Query User{70A6EB7B-DD05-40DD-979D-D124C2369E4D}C:\program files (x86)\drivingspeed2\drivingspeed.exe] => (Block) C:\program files (x86)\drivingspeed2\drivingspeed.exe
FirewallRules: [UDP Query User{50965287-D92C-49F6-9EA4-A7CEBD1D554A}C:\program files (x86)\drivingspeed2\drivingspeed.exe] => (Block) C:\program files (x86)\drivingspeed2\drivingspeed.exe
FirewallRules: [{08B53B74-CF0D-421F-A1E2-EE469BB7F744}] => (Allow) C:\Program Files (x86)\Common Files\Apple\Apple Application Support\WebKit2WebProcess.exe
FirewallRules: [{C216B172-186F-41F5-8870-8761BC2AA792}] => (Block) c:\Program Files\Corel\CorelDRAW Graphics Suite 2018\Programs64\CorelDrw.exe
FirewallRules: [{9E635F67-3C7A-4BCD-A0EC-3697C7BE456D}] => (Block) c:\Program Files\Corel\CorelDRAW Graphics Suite 2018\Programs64\CorelPP.exe
FirewallRules: [{9E1BF72E-FAB0-4FA7-9697-6CA5796B86C5}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{DF310C01-55A7-48EF-9183-FF388010F7CE}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{F677A011-9AE9-43AB-B7D0-381096DFEAA8}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe
FirewallRules: [{8F43DF0B-03A8-484D-A11F-28987AFD5B13}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe
FirewallRules: [{BFB57318-3EDF-43B5-B939-BC02C5CB04C3}] => (Allow) C:\Program Files\CCleaner\CCUpdate.exe
FirewallRules: [{DB5EC117-677C-4949-9EAB-4BF98D435225}] => (Allow) C:\Program Files\CCleaner\CCUpdate.exe
FirewallRules: [{F1C27D00-8EA9-4BFD-B041-53C64B5643B9}] => (Allow) C:\Program Files (x86)\Microsoft Office\root\Office16\outlook.exe
FirewallRules: [{CAC7A595-BB6E-4A0F-BA46-9154899F2AA4}] => (Allow) C:\Users\eliane\AppData\Local\Temp\7zS627D\HPDiagnosticCoreUI.exe
FirewallRules: [{E7308D99-A000-421F-B5FF-0CF4796ECF12}] => (Allow) C:\Users\eliane\AppData\Local\Temp\7zS627D\HPDiagnosticCoreUI.exe
FirewallRules: [{B1B3B681-AE02-4DA7-BD0E-9DDBD038F19A}] => (Allow) C:\Program Files (x86)\Microsoft Office\root\Office16\Lync.exe
FirewallRules: [{B3BEBE7A-292E-4040-AF4A-2CA9ACAE04B6}] => (Allow) C:\Program Files (x86)\Microsoft Office\root\Office16\UcMapi.exe
FirewallRules: [{70F40991-B65F-4B7E-9FA4-7C2C42FBBF03}] => (Allow) C:\Program Files\BlueStacks\HD-Player.exe
FirewallRules: [{6A162D0B-752D-4B76-8572-3DEAF13318D0}] => (Allow) C:\Users\eliane\AppData\Local\Temp\7zS4924\HPDiagnosticCoreUI.exe
FirewallRules: [{4BE8828F-85D3-4001-A828-71FE2B4A5C9E}] => (Allow) C:\Users\eliane\AppData\Local\Temp\7zS4924\HPDiagnosticCoreUI.exe
FirewallRules: [{1F406E8E-7034-4231-A03C-0D1A90C1D618}] => (Allow) C:\Users\eliane\AppData\Local\Temp\7zS4784\HPDiagnosticCoreUI.exe
FirewallRules: [{DCD4AF8C-84E5-401E-ABFE-708B0C3B537C}] => (Allow) C:\Users\eliane\AppData\Local\Temp\7zS4784\HPDiagnosticCoreUI.exe
FirewallRules: [{F5CD3297-C337-4C64-91C4-10EA5773A41E}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
FirewallRules: [{A6ADBA66-54F8-457D-A0B3-5B926CC445D1}] => (Allow) C:\Program Files (x86)\MediatekWiFi\Common\RaUI.exe
FirewallRules: [{18891583-F666-43BB-9524-BFE3752760B1}] => (Allow) C:\Program Files\AVAST Software\Avast\AvEmUpdate.exe
FirewallRules: [{A8DC4DB1-6423-4C86-B9FD-37A789E6E9F6}] => (Allow) C:\Program Files\AVAST Software\Avast\AvEmUpdate.exe
FirewallRules: [{75B7B43E-12C4-4776-A891-C1B986369D80}] => (Allow) C:\Users\eliane\AppData\Local\Mozilla Firefox\firefox.exe
FirewallRules: [{54AAF5A7-A55C-4B73-BD4A-EDAE58B5C645}] => (Allow) C:\Users\eliane\AppData\Local\Mozilla Firefox\firefox.exe
==================== Restore Points =========================
14-10-2018 11:29:04 Windows Update
27-10-2018 17:27:54 Instalado Mediatek Wireless LAN
09-11-2018 15:56:29 Removido Mediatek Wireless LAN
==================== Faulty Device Manager Devices =============
Name: avast! SecureLine TAP Adapter v3
Description: avast! SecureLine TAP Adapter v3
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: TAP-Windows Provider V9
Service: aswTap
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.
==================== Event log errors: =========================
Application errors:
==================
Error: (11/09/2018 04:06:16 PM) (Source: Software Protection Platform Service) (EventID: 16385) (User: )
Description: Falha ao agendar o reinício do serviço Proteção de Software 2018-12-09T17:42:16Z. Código de Erro: 0x80070002.
Error: (11/09/2018 04:05:46 PM) (Source: Software Protection Platform Service) (EventID: 16385) (User: )
Description: Falha ao agendar o reinício do serviço Proteção de Software 2018-12-09T17:41:46Z. Código de Erro: 0x80070002.
Error: (11/09/2018 04:05:16 PM) (Source: Software Protection Platform Service) (EventID: 16385) (User: )
Description: Falha ao agendar o reinício do serviço Proteção de Software 2018-12-09T17:42:16Z. Código de Erro: 0x80070002.
Error: (11/09/2018 04:04:45 PM) (Source: Software Protection Platform Service) (EventID: 16385) (User: )
Description: Falha ao agendar o reinício do serviço Proteção de Software 2018-12-09T17:41:45Z. Código de Erro: 0x80070002.
Error: (11/09/2018 04:04:15 PM) (Source: Software Protection Platform Service) (EventID: 16385) (User: )
Description: Falha ao agendar o reinício do serviço Proteção de Software 2018-12-09T17:42:15Z. Código de Erro: 0x80070002.
Error: (11/09/2018 04:03:45 PM) (Source: Software Protection Platform Service) (EventID: 16385) (User: )
Description: Falha ao agendar o reinício do serviço Proteção de Software 2018-12-09T17:41:45Z. Código de Erro: 0x80070002.
Error: (11/09/2018 04:03:15 PM) (Source: Software Protection Platform Service) (EventID: 16385) (User: )
Description: Falha ao agendar o reinício do serviço Proteção de Software 2018-12-09T17:42:15Z. Código de Erro: 0x80070002.
Error: (11/09/2018 04:02:45 PM) (Source: Software Protection Platform Service) (EventID: 16385) (User: )
Description: Falha ao agendar o reinício do serviço Proteção de Software 2018-12-09T17:41:45Z. Código de Erro: 0x80070002.
System errors:
=============
Error: (11/09/2018 04:02:27 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: O serviço Windows Media Player Network Sharing Service foi finalizado inesperadamente. Isto aconteceu 1 vez(es). A seguinte ação corretiva será tomada em 30000 milissegundos: Restart the service.
Error: (11/09/2018 04:02:27 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: O serviço Avast Cleanup Premium foi finalizado inesperadamente. Isto aconteceu 1 vez(es). A seguinte ação corretiva será tomada em 5000 milissegundos: Restart the service.
Error: (11/09/2018 04:02:27 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: O serviço BBUpdate foi encerrado inesperadamente. Isso aconteceu 1 vez(es).
Error: (11/09/2018 04:02:27 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: O serviço Microsoft Office Click-to-Run Service foi finalizado inesperadamente. Isto aconteceu 1 vez(es). A seguinte ação corretiva será tomada em 0 milissegundos: Restart the service.
Error: (11/09/2018 04:02:27 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: O serviço Service KMSELDI foi encerrado inesperadamente. Isso aconteceu 1 vez(es).
Error: (11/09/2018 04:02:27 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: O serviço Adobe Acrobat Update Service foi encerrado inesperadamente. Isso aconteceu 1 vez(es).
Error: (11/09/2018 04:02:27 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: O serviço SAMSUNG Mobile Connectivity Service foi encerrado inesperadamente. Isso aconteceu 1 vez(es).
Error: (11/09/2018 04:02:27 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: O serviço Corel License Validation Service V2, Powered by arvato foi encerrado inesperadamente. Isso aconteceu 1 vez(es).
Windows Defender:
===================================
Date: 2018-01-21 22:55:14.708
Description:
O Windows Defender detectou malware ou outros softwares potencialmente indesejados.
Para obter mais informações, consulte:
http://go.microsoft.com/fwlink/?linkid=37020&name=HackTool:Win32/AutoKMS&threatid=2147685180
Nome: HackTool:Win32/AutoKMS
ID: 2147685180
Severidade: Medium
Categoria: Tool
Caminho: file:_C:\Users\eliane\AppData\Local\Temp\KMSpico\AutoPico.exe;process:_pid:1284,ProcessStart:131610560627075981;process:_pid:1828,ProcessStart:131610561125694281;process:_pid:3232,ProcessStart:131610560983676358
Origem da Detecção: Computador local
Tipo de Detecção: Concreto
Origem da Detecção: Proteção em Tempo Real
Usuário: ELIANE\eliane
Nome do Processo: C:\Users\eliane\AppData\Local\Temp\KMSpico\AutoPico.exe
Versão da Assinatura: AV: 1.193.2275.0, AS: 1.193.2275.0, NIS: 113.74.0.0
Versão do Mecanismo: AM: 1.1.11400.0, NIS: 2.1.11005.0
Date: 2018-01-21 22:55:11.756
Description:
O Windows Defender detectou malware ou outros softwares potencialmente indesejados.
Para obter mais informações, consulte:
http://go.microsoft.com/fwlink/?linkid=37020&name=HackTool:Win32/AutoKMS&threatid=2147685180
Nome: HackTool:Win32/AutoKMS
ID: 2147685180
Severidade: Medium
Categoria: Tool
Caminho: file:_C:\Users\eliane\AppData\Local\Temp\KMSpico\AutoPico.exe;process:_pid:1284,ProcessStart:131610560627075981;process:_pid:3232,ProcessStart:131610560983676358
Origem da Detecção: Computador local
Tipo de Detecção: Concreto
Origem da Detecção: Proteção em Tempo Real
Usuário: ELIANE\eliane
Nome do Processo: C:\Users\eliane\Desktop\KMSpico.exe
Versão da Assinatura: AV: 1.193.2275.0, AS: 1.193.2275.0, NIS: 113.74.0.0
Versão do Mecanismo: AM: 1.1.11400.0, NIS: 2.1.11005.0
Date: 2018-01-21 22:55:00.614
Description:
O Windows Defender detectou malware ou outros softwares potencialmente indesejados.
Para obter mais informações, consulte:
http://go.microsoft.com/fwlink/?linkid=37020&name=HackTool:Win32/AutoKMS&threatid=2147685180
Nome: HackTool:Win32/AutoKMS
ID: 2147685180
Severidade: Medium
Categoria: Tool
Caminho: file:_C:\Users\eliane\AppData\Local\Temp\KMSpico\AutoPico.exe;process:_pid:1284,ProcessStart:131610560627075981;process:_pid:3232,ProcessStart:131610560983676358
Origem da Detecção: Computador local
Tipo de Detecção: Concreto
Origem da Detecção: Proteção em Tempo Real
Usuário: ELIANE\eliane
Nome do Processo: C:\Users\eliane\AppData\Local\Temp\KMSpico\AutoPico.exe
Versão da Assinatura: AV: 1.193.2275.0, AS: 1.193.2275.0, NIS: 113.74.0.0
Versão do Mecanismo: AM: 1.1.11400.0, NIS: 2.1.11005.0
Date: 2018-01-21 22:54:57.586
Description:
O Windows Defender detectou malware ou outros softwares potencialmente indesejados.
Para obter mais informações, consulte:
http://go.microsoft.com/fwlink/?linkid=37020&name=HackTool:Win32/AutoKMS&threatid=2147685180
Nome: HackTool:Win32/AutoKMS
ID: 2147685180
Severidade: Medium
Categoria: Tool
Caminho: file:_C:\Users\eliane\AppData\Local\Temp\KMSpico\AutoPico.exe;process:_pid:1284,ProcessStart:131610560627075981
Origem da Detecção: Computador local
Tipo de Detecção: Concreto
Origem da Detecção: Proteção em Tempo Real
Usuário: ELIANE\eliane
Nome do Processo: C:\Users\eliane\Desktop\KMSpico.exe
Versão da Assinatura: AV: 1.193.2275.0, AS: 1.193.2275.0, NIS: 113.74.0.0
Versão do Mecanismo: AM: 1.1.11400.0, NIS: 2.1.11005.0
Date: 2018-01-21 22:54:28.111
Description:
O Windows Defender detectou malware ou outros softwares potencialmente indesejados.
Para obter mais informações, consulte:
http://go.microsoft.com/fwlink/?linkid=37020&name=HackTool:Win32/AutoKMS&threatid=2147685180
Nome: HackTool:Win32/AutoKMS
ID: 2147685180
Severidade: Medium
Categoria: Tool
Caminho: file:_C:\Users\eliane\AppData\Local\Temp\KMSpico\AutoPico.exe;process:_pid:1284,ProcessStart:131610560627075981
Origem da Detecção: Computador local
Tipo de Detecção: Concreto
Origem da Detecção: Proteção em Tempo Real
Usuário: ELIANE\eliane
Nome do Processo: C:\Users\eliane\AppData\Local\Temp\KMSpico\AutoPico.exe
Versão da Assinatura: AV: 1.193.2275.0, AS: 1.193.2275.0, NIS: 113.74.0.0
Versão do Mecanismo: AM: 1.1.11400.0, NIS: 2.1.11005.0
Date: 2015-03-11 16:50:35.899
Description:
O recurso de Proteção em Tempo Real do Windows Defender encontrou um erro e falhou.
Recurso: Sistema de Inspeção de Rede
Código do Erro: 0x80070002
Descrição do erro: The system cannot find the file specified.
Motivo: O sistema não possui atualizações que são necessárias para executar o Sistema de Inspeção de Rede. Instale as atualizações necessárias e reinicie o computador.
Date: 2015-03-11 16:10:02.060
Description:
O recurso de Proteção em Tempo Real do Windows Defender encontrou um erro e falhou.
Recurso: Sistema de Inspeção de Rede
Código do Erro: 0x80070002
Descrição do erro: The system cannot find the file specified.
Motivo: O sistema não possui atualizações que são necessárias para executar o Sistema de Inspeção de Rede. Instale as atualizações necessárias e reinicie o computador.
Date: 2015-03-11 12:47:14.980
Description:
O recurso de Proteção em Tempo Real do Windows Defender encontrou um erro e falhou.
Recurso: Sistema de Inspeção de Rede
Código do Erro: 0x80070002
Descrição do erro: The system cannot find the file specified.
Motivo: O sistema não possui atualizações que são necessárias para executar o Sistema de Inspeção de Rede. Instale as atualizações necessárias e reinicie o computador.
Date: 2015-03-11 12:14:25.375
Description:
O recurso de Proteção em Tempo Real do Windows Defender encontrou um erro e falhou.
Recurso: Sistema de Inspeção de Rede
Código do Erro: 0x80070002
Descrição do erro: The system cannot find the file specified.
Motivo: O sistema não possui atualizações que são necessárias para executar o Sistema de Inspeção de Rede. Instale as atualizações necessárias e reinicie o computador.
Date: 2015-03-11 11:27:15.959
Description:
O recurso de Proteção em Tempo Real do Windows Defender encontrou um erro e falhou.
Recurso: Sistema de Inspeção de Rede
Código do Erro: 0x80070002
Descrição do erro: The system cannot find the file specified.
Motivo: O sistema não possui atualizações que são necessárias para executar o Sistema de Inspeção de Rede. Instale as atualizações necessárias e reinicie o computador.
CodeIntegrity:
===================================
Date: 2018-07-01 14:22:50.085
Description:
Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\wow64.dll because the set of per-page image hashes could not be found on the system.
Date: 2018-07-01 14:22:49.538
Description:
Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\wow64.dll because the set of per-page image hashes could not be found on the system.
Date: 2018-07-01 14:22:49.038
Description:
Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\wow64.dll because the set of per-page image hashes could not be found on the system.
Date: 2018-07-01 14:22:48.491
Description:
Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\wow64.dll because the set of per-page image hashes could not be found on the system.
Date: 2018-07-01 14:22:47.960
Description:
Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\wow64.dll because the set of per-page image hashes could not be found on the system.
Date: 2018-07-01 14:22:47.444
Description:
Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\wow64.dll because the set of per-page image hashes could not be found on the system.
Date: 2018-07-01 14:22:46.929
Description:
Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\wow64.dll because the set of per-page image hashes could not be found on the system.
Date: 2018-07-01 14:22:46.241
Description:
Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\wow64.dll because the set of per-page image hashes could not be found on the system.
==================== Memory info ===========================
Processor: Intel(R) Pentium(R) CPU G620 @ 2.60GHz
Percentage of memory in use: 61%
Total physical RAM: 3969.47 MB
Available physical RAM: 1528.81 MB
Total Virtual: 8065.47 MB
Available Virtual: 5807.77 MB
==================== Drives ================================
Drive c: () (Fixed) (Total:223.29 GB) (Free:91.75 GB) NTFS
Drive e: () (Fixed) (Total:242.13 GB) (Free:239.81 GB) NTFS
\\?\Volume{a02d2c90-ff0f-11e7-8259-806e6f6e6963}\ (Reservado pelo Sistema) (Fixed) (Total:0.34 GB) (Free:0.06 GB) NTFS
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (MBR Code: Windows 7/8/10) (Size: 465.8 GB) (Disk ID: 5CB8D2AD)
Partition 1: (Active) - (Size=350 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=223.3 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=242.1 GB) - (Type=07 NTFS)
==================== End of Addition.txt ============================