Resultado do exame Adicional Farbar Recovery Scan Tool (x64) Versão:14-12-2015 Executado por JD_LC (2015-12-15 23:37:48) Executando a partir de E:\Users\JD_LC\Desktop Windows 7 Ultimate Service Pack 1 (X64) (2014-01-18 05:00:10) Modo da Inicialização: Normal ========================================================== ==================== Contas: ============================= Administrador (S-1-5-21-2662280489-2615740208-2487742208-500 - Administrator - Disabled) Convidado (S-1-5-21-2662280489-2615740208-2487742208-501 - Limited - Disabled) JD_LC (S-1-5-21-2662280489-2615740208-2487742208-1000 - Administrator - Enabled) => E:\Users\JD_LC UpdatusUser (S-1-5-21-2662280489-2615740208-2487742208-1003 - Limited - Enabled) => E:\Users\UpdatusUser ==================== Central de Segurança ======================== (Se uma entrada for incluída na fixlist, será removida.) AV: avast! Antivirus (Enabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B} AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} AS: IObit Malware Fighter (Enabled - Up to date) {A751AC20-3B48-5237-898A-78C4436BB78D} AS: avast! Antivirus (Enabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736} ==================== Programas Instalados ====================== (Somente os programas adwares com a indicação "Oculto" podem ser adicionados à fixlist para desocultá-los. Os programas adwares devem ser desinstalados manualmente.) µTorrent (HKU\S-1-5-21-2662280489-2615740208-2487742208-1000\...\uTorrent) (Version: 3.4.5.41372 - BitTorrent Inc.) Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 18.0.0.180 - Adobe Systems Incorporated) Adobe Digital Editions 2.0 (HKLM-x32\...\Adobe Digital Editions 2.0) (Version: 2.0.1 - Adobe Systems Incorporated) Adobe Download Assistant (HKLM-x32\...\com.adobe.downloadassistant.AdobeDownloadAssistant) (Version: 1.2.6 - Adobe Systems Incorporated) Adobe Flash Player 20 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 20.0.0.228 - Adobe Systems Incorporated) Adobe Flash Player 20 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 20.0.0.235 - Adobe Systems Incorporated) Adobe Flash Player 20 PPAPI (HKLM-x32\...\Adobe Flash Player PPAPI) (Version: 20.0.0.228 - Adobe Systems Incorporated) Adobe Photoshop CS6 (HKLM-x32\...\{74EB3499-8B95-4B5C-96EB-7B342F3FD0C6}) (Version: 13.0 - Adobe Systems Incorporated) Adobe Reader XI (11.0.13) (HKLM-x32\...\{AC76BA86-7AD7-1033-7B44-AB0000000001}) (Version: 11.0.13 - Adobe Systems Incorporated) Advanced SystemCare 8 (HKLM-x32\...\Advanced SystemCare 8_is1) (Version: 8.4.0 - IObit) Ashampoo Burning Studio Elements 10.0.9 (HKLM-x32\...\Ashampoo Burning Studio Elements_is1) (Version: 3.1.1 - Ashampoo GmbH & Co. KG) Atualizações da NVIDIA 1.10.8 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Update) (Version: 1.10.8 - NVIDIA Corporation) Avanquest Message (HKU\S-1-5-21-2662280489-2615740208-2487742208-1000\...\{20573C69-4A68-4BEF-A23D-365CB66924CE}) (Version: 2.0.0 - Avanquest Software) Avast Free Antivirus (HKLM-x32\...\Avast) (Version: 11.1.2241 - AVAST Software) avast! EasyPass (HKLM-x32\...\AI RoboForm) (Version: 7-9-1-129 - AVAST Software) AzureTools.Notifications (x32 Version: 2.1.10731.1602 - Microsoft Corporation) Hidden Behaviors SDK (XAML) for Visual Studio (x32 Version: 12.0.41002.1 - Microsoft Corporation) Hidden BitTorrent (HKU\S-1-5-21-2662280489-2615740208-2487742208-1000\...\BitTorrent) (Version: 7.9.3.40299 - BitTorrent Inc.) Blend for Visual Studio 2013 (x32 Version: 12.0.41002.1 - Microsoft Corporation) Hidden Blend for Visual Studio 2013 ENU resources (x32 Version: 12.0.41002.1 - Microsoft Corporation) Hidden Blend for Visual Studio SDK for .NET 4.5 (x32 Version: 3.0.40218.0 - Microsoft Corporation) Hidden Blend for Visual Studio SDK for Silverlight 5 (x32 Version: 3.0.40218.0 - Microsoft Corporation) Hidden Build Tools - amd64 (Version: 12.0.21005 - Microsoft Corporation) Hidden Build Tools - x86 (x32 Version: 12.0.21005 - Microsoft Corporation) Hidden Build Tools Language Resources - amd64 (Version: 12.0.21005 - Microsoft Corporation) Hidden Build Tools Language Resources - x86 (x32 Version: 12.0.21005 - Microsoft Corporation) Hidden calibre 64bit (HKLM\...\{7159D1E5-62F5-42C9-825E-BE613B5DFB0F}) (Version: 2.38.0 - Kovid Goyal) Complemento do Microsoft Report Viewer para Visual Studio 2013 (x32 Version: 11.1.3366.16 - Microsoft Corporation) Hidden DAEMON Tools Lite (HKLM-x32\...\DAEMON Tools Lite) (Version: 4.48.1.0347 - Disc Soft Ltd) DirectVobSub 2.40.4209 (HKLM-x32\...\vsfilter_is1) (Version: 2.40.4209 - MPC-HC Team) Dotfuscator and Analytics Community Edition (x32 Version: 5.5.4954.46574 - PreEmptive Solutions) Hidden Dropbox (HKU\S-1-5-21-2662280489-2615740208-2487742208-1000\...\Dropbox) (Version: 3.12.5 - Dropbox, Inc.) Entity Framework Tools for Visual Studio 2013 (HKLM-x32\...\{08AEF86A-1956-4846-B906-B01350E96E30}) (Version: 12.0.20912.0 - Microsoft Corporation) Facebook Video Calling 3.1.0.521 (HKLM-x32\...\{2091F234-EB58-4B80-8C96-8EB78C808CF7}) (Version: 3.1.521 - Skype Limited) Ferramentas de Coleta de Desempenho do Microsoft Visual Studio 2013 - PTB (Version: 12.0.21005 - Microsoft Corporation) Hidden FormatFactory 3.3.5.0 (HKLM-x32\...\FormatFactory) (Version: 3.3.5.0 - Format Factory) Free YouTube Download version 4.0.0.915 (HKLM-x32\...\Free YouTube Download_is1) (Version: 4.0.0.915 - DVDVideoSoft Ltd.) Google Chrome (HKLM-x32\...\Google Chrome) (Version: 47.0.2526.80 - Google Inc.) Google Update Helper (x32 Version: 1.3.25.11 - Google Inc.) Hidden Google Update Helper (x32 Version: 1.3.29.1 - Google Inc.) Hidden IIS 8.0 Express (HKLM\...\{7BF61FA9-BDFB-4563-98AD-FCB0DA28CCC7}) (Version: 8.0.1557 - Microsoft Corporation) IIS Express Application Compatibility Database for x64 (HKLM\...\{9f4f4a9b-eec5-4906-92fe-d1f43ccf5c8d}.sdb) (Version: - ) IIS Express Application Compatibility Database for x86 (HKLM\...\{fdfba1f3-74ae-4255-9c10-a0f552b4610f}.sdb) (Version: - ) InPixio Photo Editor (HKLM-x32\...\{E51C8DC9-BFE1-433F-8339-EA2321EF9F12}) (Version: 1.0.0 - Avanquest Software) InstaCards (HKLM-x32\...\{58259C24-7B5E-4977-93B0-E9EEA1B884CE}) (Version: 1.5.0 - Avanquest Software) IObit Malware Fighter 3 (HKLM-x32\...\IObit Malware Fighter_is1) (Version: 3.1 - IObit) IObit Uninstaller (HKLM-x32\...\IObitUninstall) (Version: 5.1.0.37 - IObit) Java 7 Update 45 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86417045FF}) (Version: 7.0.450 - Oracle) Java 7 Update 72 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F03217072FF}) (Version: 7.0.720 - Oracle) Java 8 Update 11 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86418011FF}) (Version: 8.0.110 - Oracle Corporation) Java 8 Update 20 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86418020F0}) (Version: 8.0.200 - Oracle Corporation) Java 8 Update 31 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86418031F0}) (Version: 8.0.310 - Oracle Corporation) Java 8 Update 45 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86418045F0}) (Version: 8.0.450 - Oracle Corporation) Java 8 Update 45 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218045F0}) (Version: 8.0.450 - Oracle Corporation) Java SE Development Kit 8 Update 11 (64-bit) (HKLM\...\{64A3A4F4-B792-11D6-A78A-00B0D0180110}) (Version: 8.0.110 - Oracle Corporation) Java SE Development Kit 8 Update 20 (64-bit) (HKLM\...\{64A3A4F4-B792-11D6-A78A-00B0D0180200}) (Version: 8.0.200.26 - Oracle Corporation) Java SE Development Kit 8 Update 40 (64-bit) (HKLM\...\{64A3A4F4-B792-11D6-A78A-00B0D0180400}) (Version: 8.0.400.26 - Oracle Corporation) JavaFX Scene Builder 1.1 (HKLM-x32\...\{AB468309-88EB-4250-BFEA-45479091102B}) (Version: 1.1 - Oracle) JavaFX Scene Builder 2.0 (HKLM-x32\...\{B4665EB1-1F7A-44F5-AD07-C20A938E8BC2}) (Version: 2.0 - Oracle) JavaScript Tooling (Version: 12.0.21005 - Microsoft Corporation) Hidden JCreator Pro 5.00 (HKLM-x32\...\JCreator Pro_is1) (Version: - Xinox Software) JetBrains PhpStorm 8.0.1 (HKLM-x32\...\PhpStorm 8.0.1) (Version: 138.2001.2328 - JetBrains s.r.o.) Lagarith Lossless Codec (1.3.27) (HKLM-x32\...\{F59AC46C-10C3-4023-882C-4212A92283B3}_is1) (Version: - ) LocalESPC Dev12 (x32 Version: 8.100.25984 - Microsoft Corporation) Hidden LocalESPCui for en-us Dev12 (x32 Version: 8.100.25984 - Microsoft) Hidden LocalESPCui for pt-br (x32 Version: 8.59.29989 - Microsoft) Hidden LocalESPCui for pt-br Dev12 (x32 Version: 8.100.25984 - Microsoft) Hidden Ma-Config.com (64 bits) (HKLM\...\{2D6119D8-B37F-4D6E-92F3-25783B7BE8E5}) (Version: 7.1.5.0 - Cybelsoft) Malwarebytes Anti-Malware versão 2.2.0.1024 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.2.0.1024 - Malwarebytes) Microsoft .NET Framework 4.5 Multi-Targeting Pack (HKLM-x32\...\{56E962F0-4FB0-3C67-88DB-9EAA6EEFC493}) (Version: 4.5.50710 - Microsoft Corporation) Microsoft .NET Framework 4.5 SDK - PTB Lang Pack (HKLM-x32\...\{DC372AEA-8483-4785-B291-62F67EBFF02F}) (Version: 4.5.50710 - Microsoft Corporation) Microsoft .NET Framework 4.5 SDK (HKLM-x32\...\{4AE57014-05C4-4864-A13D-86517A7E1BA4}) (Version: 4.5.50710 - Microsoft Corporation) Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation) Microsoft .NET Framework 4.5.1 (Português do Brasil) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1046) (Version: 4.5.50938 - Microsoft Corporation) Microsoft .NET Framework 4.5.1 Multi-Targeting Pack (ENU) (HKLM-x32\...\{AD808004-719D-3045-B1FA-C0C845BB7C63}) (Version: 4.5.50932 - Microsoft Corporation) Microsoft .NET Framework 4.5.1 Multi-Targeting Pack (ENU) (HKLM-x32\...\{D3517C62-68A5-37CF-92F7-93C029A89681}) (Version: 4.5.50932 - Microsoft Corporation) Microsoft .NET Framework 4.5.1 Multi-Targeting Pack (HKLM-x32\...\{6A0C6700-EA93-372C-8871-DCCF13D160A4}) (Version: 4.5.50932 - Microsoft Corporation) Microsoft .NET Framework 4.5.1 SDK (ENU) (HKLM-x32\...\{8EBF82FA-BD9E-4154-94DB-0946B48C346B}) (Version: 4.5.51641 - Microsoft Corporation) Microsoft .NET Framework 4.5.1 SDK (HKLM-x32\...\{19A5926D-66E1-46FC-854D-163AA10A52D3}) (Version: 4.5.51641 - Microsoft Corporation) Microsoft Help Viewer 2.1 (HKLM-x32\...\Microsoft Help Viewer 2.1) (Version: 2.1.21005 - Microsoft Corporation) Microsoft Office Language Pack 2013 - Portuguese/Português (Brasil) (HKLM\...\Office15.OMUI.pt-br) (Version: 15.0.4420.1017 - Microsoft Corporation) Microsoft Office Professional Plus 2013 (HKLM\...\Office15.PROPLUS) (Version: 15.0.4420.1017 - Microsoft Corporation) Microsoft Silverlight (HKLM-x32\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.20513.0 - Microsoft Corporation) Microsoft Silverlight 5 SDK (HKLM-x32\...\{E1FBB3D4-ADB0-4949-B101-855DA061C735}) (Version: 5.0.61118.0 - Microsoft Corporation) Microsoft SQL Server 2012 Data-Tier App Framework (HKLM-x32\...\{1B876496-B3A2-4D22-9B12-B608A3FD4B8B}) (Version: 11.1.2902.0 - Microsoft Corporation) Microsoft SQL Server 2012 Data-Tier App Framework (x64) (HKLM\...\{A6BA243E-85A3-4635-A269-32949C98AC7F}) (Version: 11.1.2902.0 - Microsoft Corporation) Microsoft SQL Server 2012 Express LocalDB (HKLM\...\{6C026A91-640F-4A23-8B68-05D589CC6F18}) (Version: 11.1.3000.0 - Microsoft Corporation) Microsoft SQL Server 2012 Management Objects (HKLM-x32\...\{2F7DBBE6-8EBC-495C-9041-46A772F4E311}) (Version: 11.1.3000.0 - Microsoft Corporation) Microsoft SQL Server 2012 Management Objects (x64) (HKLM\...\{43A5C316-9521-49C3-B9B6-FCE5E1005DF0}) (Version: 11.1.3000.0 - Microsoft Corporation) Microsoft SQL Server Compact 4.0 SP1 x64 ENU (HKLM\...\{78909610-D229-459C-A936-25D92283D3FD}) (Version: 4.0.8876.1 - Microsoft Corporation) Microsoft SQL Server Compact 4.0 SP1 x64 PTB (HKLM\...\{E451FC79-21BE-4BDA-86DB-9F3B34DE181D}) (Version: 4.0.8876.1 - Microsoft Corporation) Microsoft SQL Server Data Tools - enu (12.0.30919.1) (HKLM-x32\...\{0D7FCBFB-F478-4D32-901C-83F0BF5A3501}) (Version: 12.0.30919.1 - Microsoft Corporation) Microsoft SQL Server Data Tools - PTB (12.0.30919.1) (HKLM-x32\...\{78524AD4-5444-4E78-9008-C14DEFBE33BB}) (Version: 12.0.30919.1 - Microsoft Corporation) Microsoft SQL Server Data Tools Build Utilities - enu (12.0.30919.1) (HKLM-x32\...\{6781FF9B-E87D-4A03-9373-A55A288B83FA}) (Version: 12.0.30919.1 - Microsoft Corporation) Microsoft SQL Server Data Tools Build Utilities - PTB (12.0.30919.1) (HKLM-x32\...\{6CF636F7-1C41-4CC4-B985-386ADF2707EF}) (Version: 12.0.30919.1 - Microsoft Corporation) Microsoft SQL Server System CLR Types (HKLM-x32\...\{A47FD1BF-A815-4A76-BE65-53A15BD5D25D}) (Version: 10.50.1600.1 - Microsoft Corporation) Microsoft SQL Server System CLR Types (x64) (HKLM\...\{4701DEDE-1888-49E0-BAE5-857875924CA2}) (Version: 10.50.1600.1 - Microsoft Corporation) Microsoft System CLR Types for SQL Server 2012 (HKLM-x32\...\{070C38AC-05CE-43DF-9A20-141332F6AB2B}) (Version: 11.1.3366.16 - Microsoft Corporation) Microsoft System CLR Types for SQL Server 2012 (x64) (HKLM\...\{05FF8209-C4F1-4C77-BC28-791653156D20}) (Version: 11.1.3366.16 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.60610 (HKLM-x32\...\{a1909659-0a08-4554-8af1-2175904903a1}) (Version: 11.0.60610.1 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.60610 (HKLM-x32\...\{95716cce-fc71-413f-8ad5-56c2892d4b3a}) (Version: 11.0.60610.1 - Microsoft Corporation) Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation) Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.40820 - Microsoft Corporation) Microsoft Visual Studio Ultimate 2013 (HKLM-x32\...\{cd09eea6-d0b3-4246-bb80-e047ceadf61f}) (Version: 12.0.21005.13 - Microsoft Corporation) Microsoft Web Deploy 3.5 (HKLM\...\{3674F088-9B90-473A-AAC3-20A00D8D810C}) (Version: 3.1237.1762 - Microsoft Corporation) Modelo de Redirecionamento do Python Tools (x32 Version: 1.1 - Microsoft Corporation) Hidden Mozilla Firefox 38.0.5 (x86 pt-BR) (HKLM-x32\...\Mozilla Firefox 38.0.5 (x86 pt-BR)) (Version: 38.0.5 - Mozilla) Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 38.0.5 - Mozilla) MySQL Installer - Community (HKLM-x32\...\{4553E209-560C-451E-9DE9-E6B812D32B8C}) (Version: 1.4.8.0 - Oracle Corporation) MySQL Server 5.6 (HKLM\...\{D56781C6-A99A-4671-8567-AD255244176B}) (Version: 5.6.25 - Oracle Corporation) MySQL Workbench 6.3 CE (HKLM\...\{2F531783-BBF7-40CF-ACF5-2EB4CD83CAF6}) (Version: 6.3.3 - Oracle Corporation) NetBeans IDE 8.0.1 (HKLM\...\nbi-nb-base-8.0.1.0.201408251540) (Version: 8.0.1 - NetBeans.org) NetBeans IDE 8.0.2 (HKLM\...\nbi-nb-base-8.0.2.0.201411181905) (Version: 8.0.2 - NetBeans.org) Notepad2 (Notepad Replacement) (HKLM\...\Notepad2) (Version: 4.2.25 - Florian Balmer) NVIDIA Drivers (HKLM\...\NVIDIA Drivers) (Version: 1.10.57.35 - NVIDIA Corporation) NVIDIA PhysX (HKLM-x32\...\{B455E95A-B804-439F-B533-336B1635AE97}) (Version: 9.14.0702 - NVIDIA Corporation) Open XML SDK 2.5 for Microsoft Office (x32 Version: 2.5.5631 - Microsoft Corporation) Hidden OpenSource Flash Video Splitter 1.0.0.5 (HKLM-x32\...\OpenSource Flash Video Splitter) (Version: 1.0.0.5 - ) Outils de vérification linguistique 2013 de Microsoft Office - Français (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden Pacote de Idioma do Modelo de Objeto do Microsoft Team Foundation Server 2013 (x64) - PTB (Version: 12.0.21005 - Microsoft Corporation) Hidden Pacote de Idiomas do Microsoft SharePoint 2013 Developer Tools para Visual Studio PTB (x32 Version: 12.0.21005 - Microsoft Corporation) Hidden Pacote de Idiomas do Microsoft Visual Studio 2013 - PTB (x32 Version: 12.0.21005.13 - Microsoft Corporation) Hidden Pacote de Idiomas do Team Explorer para Microsoft Visual Studio 2013 - PTB (x32 Version: 12.0.21005 - Microsoft Corporation) Hidden Pacote de Idiomas do Visualizador de Ajuda Microsoft 2.1 - PTB (HKLM-x32\...\Pacote de Idiomas do Visualizador de Ajuda Microsoft 2.1 - PTB) (Version: 2.1.21005 - Microsoft Corporation) Pacote de Idiomas do Visualizador de Ajuda Microsoft 2.1 - PTB (x32 Version: 2.1.21005 - Microsoft Corporation) Hidden Painel de controle da NVIDIA 341.44 (Version: 341.44 - NVIDIA Corporation) Hidden PDF Settings CS6 (x32 Version: 11.0 - Adobe Systems Incorporated) Hidden PhotoScape (HKLM-x32\...\PhotoScape) (Version: - ) PreEmptive Analytics Visual Studio Components (x32 Version: 1.2.3197.1 - PreEmptive Solutions) Hidden Preparação do Microsoft Visual Studio 2013 (x32 Version: 12.0.21005 - Microsoft Corporation) Hidden Prerequisites for SSDT (HKLM-x32\...\{35C1D9D6-87C0-46A3-B1B4-EDBCC063221C}) (Version: 11.1.3000.0 - Microsoft Corporation) Python Tools Redirection Template (x32 Version: 1.1 - Microsoft Corporation) Hidden Ralink RT2870 Wireless LAN Card (HKLM-x32\...\{28DA7D8B-F9A4-4F18-8AA0-551B1E084D0D}) (Version: 1.5.19.0 - Ralink) Recursos de Desenvolvedor do Microsoft Visual Studio 2013 (x32 Version: 12.0.21005 - Microsoft Corporation) Hidden Recursos do Shell do Microsoft Visual Studio 2013 (Mínimo) (x32 Version: 12.0.21005 - Microsoft Corporation) Hidden Revisores de Texto do Microsoft Office 2013 – Português do Brasil (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden SharePoint Client Components (Version: 15.0.4481.1505 - Microsoft Corporation) Hidden Smart Defrag 4 (HKLM-x32\...\Smart Defrag 4_is1) (Version: 4.3 - IObit) Surfing Protection (HKLM-x32\...\IObit Surfing Protection_is1) (Version: 1.2 - IObit) TDM-GCC (HKLM-x32\...\TDM-GCC) (Version: 1.1006.0 - TDM) Team Explorer for Microsoft Visual Studio 2013 (x32 Version: 12.0.21005 - Microsoft Corporation) Hidden The Desktop Weather 2.0 (HKLM\...\WeatherTool) (Version: 2.0.0.10998 - ShenZhen Enode Techology co,.Ltd) <==== ATENÇÃO Update for (KB2504637) (HKLM-x32\...\{CFEF48A8-BFB8-3EAC-8BA5-DE4F8AA267CE}.KB2504637) (Version: 1 - Microsoft Corporation) VC80CRTRedist - 8.0.50727.6195 (x32 Version: 1.2.0 - DivX, Inc) Hidden VLC media player (HKLM\...\VLC media player) (Version: 2.2.1 - VideoLAN) VLC media player (HKLM-x32\...\VLC media player) (Version: 2.2.1 - VideoLAN) WCF Data Services 5.6.0 Runtime (x32 Version: 5.6.61587.0 - Microsoft Corporation) Hidden WCF Data Services Tools for Microsoft Visual Studio 2013 (x32 Version: 5.6.61587.0 - Microsoft Corporation) Hidden WinRAR 5.11 (32-bit) (HKLM-x32\...\WinRAR archiver) (Version: 5.11.0 - win.rar GmbH) Workflow Manager Client 1.0 (Version: 2.0.30813.2 - Microsoft Corporation) Hidden Workflow Manager Tools 1.0 for Visual Studio (Version: 2.0.30725.1 - Microsoft Corporation) Hidden X-Proxy (HKU\S-1-5-21-2662280489-2615740208-2487742208-1000\...\cc77acb7c6c82091) (Version: 6.1.0.4 - Sauces Software) yessearches Uninstall (HKLM-x32\...\pmr Uninstall) (Version: - ) ==================== Exame Personalizado CLSID (Whitelisted): ========================== (Se uma entrada for incluída na fixlist, será removida do Registro. O arquivo não será movido, a menos que seja colocado separadamente.) CustomCLSID: HKU\S-1-5-21-2662280489-2615740208-2487742208-1000_Classes\CLSID\{005A3A96-BAC4-4B0A-94EA-C0CE100EA736}\localserver32 -> E:\Users\JD_LC\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-2662280489-2615740208-2487742208-1000_Classes\CLSID\{ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C}\InprocServer32 -> E:\Users\JD_LC\AppData\Roaming\Dropbox\bin\DropboxExt64.28.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-2662280489-2615740208-2487742208-1000_Classes\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> E:\Users\JD_LC\AppData\Roaming\Dropbox\bin\DropboxExt64.28.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-2662280489-2615740208-2487742208-1000_Classes\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> E:\Users\JD_LC\AppData\Roaming\Dropbox\bin\DropboxExt64.28.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-2662280489-2615740208-2487742208-1000_Classes\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> E:\Users\JD_LC\AppData\Roaming\Dropbox\bin\DropboxExt64.28.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-2662280489-2615740208-2487742208-1000_Classes\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> E:\Users\JD_LC\AppData\Roaming\Dropbox\bin\DropboxExt64.28.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-2662280489-2615740208-2487742208-1000_Classes\CLSID\{FB314EDD-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> E:\Users\JD_LC\AppData\Roaming\Dropbox\bin\DropboxExt64.28.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-2662280489-2615740208-2487742208-1000_Classes\CLSID\{FB314EDE-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> E:\Users\JD_LC\AppData\Roaming\Dropbox\bin\DropboxExt64.28.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-2662280489-2615740208-2487742208-1000_Classes\CLSID\{FB314EDF-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> E:\Users\JD_LC\AppData\Roaming\Dropbox\bin\DropboxExt64.28.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-2662280489-2615740208-2487742208-1000_Classes\CLSID\{FB314EE0-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> E:\Users\JD_LC\AppData\Roaming\Dropbox\bin\DropboxExt64.28.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-2662280489-2615740208-2487742208-1000_Classes\CLSID\{FBC9D74C-AF55-4309-9FB2-C426E071637F}\InprocServer32 -> E:\Users\JD_LC\AppData\Roaming\Dropbox\bin\DropboxExt64.28.dll (Dropbox, Inc.) ==================== Pontos de Restauração ========================= 17-11-2015 16:42:19 Windows Update 18-11-2015 23:22:07 Instalador de Módulos do Windows 26-11-2015 10:47:02 Windows Update 29-11-2015 12:18:16 Windows Update 05-12-2015 08:39:54 Windows Update 06-12-2015 02:28:26 Instalador de Módulos do Windows 11-12-2015 17:35:11 Windows Update ==================== Hosts Conteúdo: ========================== (Se necessário, a diretiva Hosts: pode ser incluída na fixlist para redefinir o Hosts.) 2009-07-14 00:34 - 2015-12-06 03:51 - 00684718 ____A E:\Windows\system32\Drivers\etc\hosts 127.0.0.1 localhost127.0.0.1 fr.a2dfp.net 127.0.0.1 m.fr.a2dfp.net 127.0.0.1 mfr.a2dfp.net 127.0.0.1 ad.a8.net 127.0.0.1 asy.a8ww.net 127.0.0.1 static.a-ads.com 127.0.0.1 atlas.aamedia.ro 127.0.0.1 abcstats.com 127.0.0.1 ad4.abradio.cz 127.0.0.1 a.abv.bg 127.0.0.1 adserver.abv.bg 127.0.0.1 adv.abv.bg 127.0.0.1 bimg.abv.bg 127.0.0.1 ca.abv.bg 127.0.0.1 track.acclaimnetwork.com 127.0.0.1 accuserveadsystem.com 127.0.0.1 www.accuserveadsystem.com 127.0.0.1 achmedia.com 127.0.0.1 csh.actiondesk.com 127.0.0.1 ads.activepower.net 127.0.0.1 app.activetrail.com 127.0.0.1 stat.active24stats.nl #[Tracking.Cookie] 127.0.0.1 traffic.acwebconnecting.com 127.0.0.1 office.ad1.ru 127.0.0.1 cms.ad2click.nl 127.0.0.1 ad2games.com 127.0.0.1 ads.ad2games.com 127.0.0.1 content.ad20.net 127.0.0.1 core.ad20.net 127.0.0.1 banner.ad.nu Existem ainda 16953 mais linhas. ==================== Tarefas Agendadas (Whitelisted) ============= (Se uma entrada for incluída na fixlist, será removida do Registro. O arquivo não será movido, a menos que seja colocado separadamente.) Task: {04C78F63-BE05-49F7-AD2D-C0437E8D1190} - System32\Tasks\AVAST Software\Avast settings backup => E:\Program Files\Common Files\AV\avast! Antivirus\backup.exe [2015-12-15] (AVAST Software) Task: {0542E105-E272-4566-8F6A-E32656F7DBF7} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn => E:\Program Files\Microsoft Office\Office15\msoia.exe [2012-10-01] (Microsoft Corporation) Task: {0563660E-2B1E-444A-B28E-6877501E2260} - System32\Tasks\DropboxUpdateTaskUserS-1-5-21-2662280489-2615740208-2487742208-1000Core => E:\Users\JD_LC\AppData\Local\Dropbox\Update\DropboxUpdate.exe [2015-06-15] (Dropbox, Inc.) Task: {09C5B975-CE77-4CE6-A648-BDC0AEB1C141} - System32\Tasks\Microsoft Office 15 Sync Maintenance for JD_LC-PC-JD_LC JD_LC-PC => E:\Program Files\Microsoft Office\Office15\MsoSync.exe [2012-10-01] (Microsoft Corporation) Task: {12401AB8-6167-4C0E-AC87-FD5F74415F3C} - System32\Tasks\GoogleUpdateTaskMachineUA => E:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-12-03] (Google Inc.) Task: {1290BDF7-3167-46FE-8A84-7687D9F65658} - System32\Tasks\GtIdbkbXX => E:\Users\JD_LC\AppData\Roaming\GtIdbkbXX.exe <==== ATENÇÃO Task: {13649435-411A-4701-AC2A-20ED622470C7} - System32\Tasks\6tqZYGen5lQPUeHn => E:\Users\JD_LC\AppData\Roaming\6tqZYGen5lQPUeHn.exe <==== ATENÇÃO Task: {1830C1D0-F6B5-4738-9857-5D77CEF98632} - System32\Tasks\{364ADBF0-C86C-4B7C-A2B2-0D000EF97C41} => pcalua.exe -a "F:\WiFi\258 20MP Driver Install.exe" -d F:\WiFi Task: {1927F548-F59B-4F00-8C02-6107FBA6483E} - System32\Tasks\jOzK2RlIwr => E:\Users\JD_LC\AppData\Roaming\jOzK2RlIwr.exe <==== ATENÇÃO Task: {1DA4AA89-397F-4060-A083-114DAD109AA4} - System32\Tasks\Adobe Flash Player PPAPI Notifier => E:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_20_0_0_228_pepper.exe [2015-12-12] (Adobe Systems Incorporated) Task: {2B372D97-8845-42C8-91B6-893F7E743FD7} - System32\Tasks\DLEbF0CvNNcdIAow8eCYB12V0t => E:\Users\JD_LC\AppData\Roaming\DLEbF0CvNNcdIAow8eCYB12V0t.exe <==== ATENÇÃO Task: {35214563-0A28-42DE-8BF6-C1740EAECA6E} - System32\Tasks\FacebookUpdateTaskUserS-1-5-21-2662280489-2615740208-2487742208-1000UA => E:\Users\JD_LC\AppData\Local\Facebook\Update\FacebookUpdate.exe [2014-07-28] (Facebook Inc.) Task: {372AD235-EA18-4C8A-BBEE-BF3238462744} - System32\Tasks\CGN => E:\Program Files (x86)\Common Files\ClaraUpdater\ClaraUpdater.exe Task: {38DB2F12-374B-44E5-BBDE-4E69D46086DD} - System32\Tasks\SmartDefrag4_Startup => E:\Program Files (x86)\IObit\Smart Defrag 4\SmartDefrag.exe [2015-10-27] (IObit) Task: {51EA8D97-D4C1-411A-85FC-1F06428E9673} - System32\Tasks\Touch Component => Rundll32.exe "E:\Users\JD_LC\AppData\Local\Touch Component\xBin\TouchComponent.dll",#3 <==== ATENÇÃO Task: {52197524-CE3D-4C62-B990-47494F6CCE0A} - System32\Tasks\ASC8_PerformanceMonitor => E:\Program Files (x86)\IObit\Advanced SystemCare 8\Monitor.exe [2015-08-12] (IObit) Task: {5B455677-D8AF-4F61-9624-15D97B7259BD} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack => E:\Program Files\Microsoft Office\Office15\msoia.exe [2012-10-01] (Microsoft Corporation) Task: {66B682BE-C9A0-4CC9-870A-53F9A9ABCE83} - System32\Tasks\DropboxUpdateTaskUserS-1-5-21-2662280489-2615740208-2487742208-1000UA => E:\Users\JD_LC\AppData\Local\Dropbox\Update\DropboxUpdate.exe [2015-06-15] (Dropbox, Inc.) Task: {66ECF2B9-1A16-4C39-952C-0EE0348E61DE} - System32\Tasks\Microsoft\Office\Office 15 Subscription Heartbeat => E:\Program Files\Common Files\Microsoft Shared\Office15\OLicenseHeartbeat.exe [2012-10-01] (Microsoft Corporation) Task: {767CD2BD-C1AF-4F9B-99BF-2E74B02BEAB8} - System32\Tasks\MySQL\Installer\ManifestUpdate => E:\Program Files (x86)\MySQL\MySQL Installer for Windows\MySQLInstallerConsole.exe [2015-05-23] (Oracle Corporation) Task: {82FA8473-7069-4311-835C-CD5647E246FF} - System32\Tasks\FacebookUpdateTaskUserS-1-5-21-2662280489-2615740208-2487742208-1000Core => E:\Users\JD_LC\AppData\Local\Facebook\Update\FacebookUpdate.exe [2014-07-28] (Facebook Inc.) Task: {86685B31-5C80-4886-ABC6-2C4BADB85E46} - System32\Tasks\ReimageUpdater => E:\Program Files\Reimage\Reimage Protector\ReiGuard.exe <==== ATENÇÃO Task: {88288C62-E61B-4C42-94E5-48F61B82946B} - System32\Tasks\tAGPQFUTFBowBHpg0HMe6Zx => E:\Users\JD_LC\AppData\Roaming\tAGPQFUTFBowBHpg0HMe6Zx.exe <==== ATENÇÃO Task: {8889FE5F-7C7E-4246-8759-EA73D0A72910} - System32\Tasks\O3ECSoeQhE43 => E:\Users\JD_LC\AppData\Roaming\O3ECSoeQhE43.exe <==== ATENÇÃO Task: {8BB395E9-99D4-4AAB-ABF8-B31F640BC1BE} - System32\Tasks\pjVRprj2tz6WOYwdKAHW5lS => E:\Users\JD_LC\AppData\Roaming\pjVRprj2tz6WOYwdKAHW5lS.exe <==== ATENÇÃO Task: {8D1678AE-319D-4D6C-986C-EECD5B0C0E28} - System32\Tasks\TgUaBK4mUePZ9kfA47OL948T => E:\Users\JD_LC\AppData\Roaming\TgUaBK4mUePZ9kfA47OL948T.exe <==== ATENÇÃO Task: {8FF34296-C71B-4D19-B475-621DDE07F57A} - System32\Tasks\avastBCLRestartS-1-5-21-2662280489-2615740208-2487742208-1000 => Chrome.exe Task: {97F0B1CD-BCFD-4DB6-B619-226D8E7CA640} - System32\Tasks\ASC8_SkipUac_JD_LC => E:\Program Files (x86)\IObit\Advanced SystemCare 8\ASC.exe [2015-08-17] (IObit) Task: {98964095-F588-4754-8108-27D4B279368F} - System32\Tasks\SmartDefrag4_Update => E:\Program Files (x86)\IObit\Smart Defrag 4\AutoUpdate.exe [2015-08-21] (IObit) Task: {AB88F70D-6205-44F5-B61A-9A6ECD5A79ED} - System32\Tasks\{7D8BBFB6-E223-455E-9FDD-AC59CE2ED759} => pcalua.exe -a "E:\Users\JD_LC\Downloads\Programas\Banco de dados\DBDesigner4.0.5.6_Setup.exe" -d "E:\Users\JD_LC\Downloads\Programas\Banco de dados" Task: {B16CBD1F-C85D-4FF5-A147-9B4DF35C9526} - System32\Tasks\{B372FDF5-53AB-4CC3-9104-E0E52DD7C2BA} => pcalua.exe -a "E:\Users\JD_LC\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\P4CCVNMF\DiagnosticoItau.exe" -d E:\Users\JD_LC\Desktop Task: {BC014E49-2BD0-4A91-A977-6D83F2CE6992} - System32\Tasks\Run RoboForm TaskBar Icon => E:\Program Files (x86)\Siber Systems\AI RoboForm\RoboTaskBarIcon.exe [2014-01-18] (Siber Systems) Task: {BE3E08D7-BDD8-4688-A7C9-E5CF58BA0C8E} - System32\Tasks\Adobe Flash Player Updater => E:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-12-12] (Adobe Systems Incorporated) Task: {C174CB51-6F08-46E3-9DCB-C76B783DDD82} - System32\Tasks\{30D61AA9-8319-4838-8736-7510CE1D0DFB} => pcalua.exe -a E:\Users\JD_LC\Downloads\ualsetup_2.0.exe -d E:\Users\JD_LC\Downloads Task: {C2573896-2327-44D5-BEC9-DB4AFBD63EDF} - System32\Tasks\GoogleUpdateTaskMachineCore => E:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-12-03] (Google Inc.) Task: {DAF0C893-01EE-423D-832E-E406FA994E18} - System32\Tasks\a7um5ggOFMx => E:\Users\JD_LC\AppData\Roaming\a7um5ggOFMx.exe <==== ATENÇÃO Task: {DEF5701C-275F-4EA4-999B-78E93E0D4A68} - System32\Tasks\Adobe Acrobat Update Task => E:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2015-10-28] (Adobe Systems Incorporated) Task: {E0C1A1B5-FCAD-4AA3-8064-15EE0930D9E7} - System32\Tasks\avast! Emergency Update => E:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [2015-11-08] (AVAST Software) Task: {E0C8FC17-3E6E-498C-B5D6-6DC0ADB90CCA} - System32\Tasks\ZxOvWCF7LI1yYDnReod => E:\Users\JD_LC\AppData\Roaming\ZxOvWCF7LI1yYDnReod.exe <==== ATENÇÃO Task: {E5BFEBEE-73C2-4E0D-8872-831D22EBF540} - System32\Tasks\{C5D262BB-B5EC-4BDC-9D2D-0C110217EBA8} => pcalua.exe -a E:\Users\JD_LC\Dropbox\Livros\Atlas\DiagnosticoItau.exe -d E:\Users\JD_LC\Dropbox\Livros\Atlas -c admin_service Task: {F151477F-9FC3-4522-A6CF-E1150F118396} - System32\Tasks\task Update => E:\Program Files (x86)\yessearchesbnd\task.exe Task: {F193028F-2978-4AD7-A440-423960FD9F00} - System32\Tasks\3c91fcc2-ce59-42b3-b901-f68079520898 => E:\Users\JD_LC\AppData\Local\Temp\ce98ac2e-20c0-4a93-86f6-bdb3e61caf55.exe <==== ATENÇÃO Task: {FF10175D-F1CB-43A9-AF11-7DC23ED1518D} - System32\Tasks\Uninstaller_SkipUac_JD_LC => E:\Program Files (x86)\IObit\IObit Uninstaller\IObitUninstaler.exe [2015-10-30] (IObit) (Se uma entrada for incluída na fixlist, o arquivo da tarefa (.job) será movido. O arquivo que está sendo executado pela tarefa não será movido.) Task: E:\Windows\Tasks\5gK5b8k9C94Ih5u2H7budJR.job => E:\Users\JD_LC\AppData\Roaming\5gK5b8k9C94Ih5u2H7budJR.exe <==== ATENÇÃO Task: E:\Windows\Tasks\6tqZYGen5lQPUeHn.job => E:\Users\JD_LC\AppData\Roaming\6tqZYGen5lQPUeHn.exe <==== ATENÇÃO Task: E:\Windows\Tasks\a7um5ggOFMx.job => E:\Users\JD_LC\AppData\Roaming\a7um5ggOFMx.exe <==== ATENÇÃO Task: E:\Windows\Tasks\Adobe Flash Player PPAPI Notifier.job => E:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_20_0_0_228_pepper.exe Task: E:\Windows\Tasks\Adobe Flash Player Updater.job => E:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe Task: E:\Windows\Tasks\BTboIchqPOP7iuN5C.job => E:\Users\JD_LC\AppData\Roaming\BTboIchqPOP7iuN5C.exe <==== ATENÇÃO Task: E:\Windows\Tasks\DLEbF0CvNNcdIAow8eCYB12V0t.job => E:\Users\JD_LC\AppData\Roaming\DLEbF0CvNNcdIAow8eCYB12V0t.exe <==== ATENÇÃO Task: E:\Windows\Tasks\DropboxUpdateTaskUserS-1-5-21-2662280489-2615740208-2487742208-1000Core.job => E:\Users\JD_LC\AppData\Local\Dropbox\Update\DropboxUpdate.exe Task: E:\Windows\Tasks\DropboxUpdateTaskUserS-1-5-21-2662280489-2615740208-2487742208-1000UA.job => E:\Users\JD_LC\AppData\Local\Dropbox\Update\DropboxUpdate.exe Task: E:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-2662280489-2615740208-2487742208-1000Core.job => E:\Users\JD_LC\AppData\Local\Facebook\Update\FacebookUpdate.exe Task: E:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-2662280489-2615740208-2487742208-1000UA.job => E:\Users\JD_LC\AppData\Local\Facebook\Update\FacebookUpdate.exe Task: E:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => E:\Program Files (x86)\Google\Update\GoogleUpdate.exe Task: E:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => E:\Program Files (x86)\Google\Update\GoogleUpdate.exe Task: E:\Windows\Tasks\GtIdbkbXX.job => E:\Users\JD_LC\AppData\Roaming\GtIdbkbXX.exe <==== ATENÇÃO Task: E:\Windows\Tasks\jOzK2RlIwr.job => E:\Users\JD_LC\AppData\Roaming\jOzK2RlIwr.exe <==== ATENÇÃO Task: E:\Windows\Tasks\Km9mdMI3.job => E:\Users\JD_LC\AppData\Roaming\Km9mdMI3.exe <==== ATENÇÃO Task: E:\Windows\Tasks\O3ECSoeQhE43.job => E:\Users\JD_LC\AppData\Roaming\O3ECSoeQhE43.exe <==== ATENÇÃO Task: E:\Windows\Tasks\pjVRprj2tz6WOYwdKAHW5lS.job => E:\Users\JD_LC\AppData\Roaming\pjVRprj2tz6WOYwdKAHW5lS.exe <==== ATENÇÃO Task: E:\Windows\Tasks\tAGPQFUTFBowBHpg0HMe6Zx.job => E:\Users\JD_LC\AppData\Roaming\tAGPQFUTFBowBHpg0HMe6Zx.exe <==== ATENÇÃO Task: E:\Windows\Tasks\TgUaBK4mUePZ9kfA47OL948T.job => E:\Users\JD_LC\AppData\Roaming\TgUaBK4mUePZ9kfA47OL948T.exe <==== ATENÇÃO Task: E:\Windows\Tasks\yY6trHPhB2xG.job => E:\Users\JD_LC\AppData\Roaming\yY6trHPhB2xG.exe <==== ATENÇÃO Task: E:\Windows\Tasks\ZxOvWCF7LI1yYDnReod.job => E:\Users\JD_LC\AppData\Roaming\ZxOvWCF7LI1yYDnReod.exe <==== ATENÇÃO ==================== Atalhos ============================= (As entradas podem ser listadas para serem restauradas ou removidas.) ==================== Módulos Carregados (Whitelisted) ============== 2014-04-08 00:33 - 2015-02-04 00:21 - 00115400 _____ () E:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll 2015-11-01 23:48 - 2015-11-01 23:48 - 01049032 _____ () E:\Program Files (x86)\WeatherTool\2.0.0.10998\WeatherEntryDll.dll 2015-05-05 14:36 - 2015-05-05 14:36 - 13057024 _____ () E:\Program Files\MySQL\MySQL Server 5.6\bin\mysqld.exe 2015-12-03 11:09 - 2015-12-02 17:30 - 02920448 _____ () E:\ProgramData\WindowsMsg\osmsg.exe 2015-11-01 23:48 - 2015-11-01 23:48 - 00152008 _____ () E:\Program Files (x86)\WeatherTool\2.0.0.10998\WeatherService.exe 2015-11-08 19:08 - 2015-11-08 19:08 - 00103888 _____ () E:\Program Files\AVAST Software\Avast\log.dll 2015-11-08 19:08 - 2015-11-08 19:08 - 00125512 _____ () E:\Program Files\AVAST Software\Avast\JsonRpcServer.dll 2015-12-15 13:16 - 2015-12-15 13:16 - 02803712 _____ () E:\Program Files\AVAST Software\Avast\defs\15121500\algo.dll 2015-11-08 19:08 - 2015-11-08 19:08 - 00466448 _____ () E:\Program Files\AVAST Software\Avast\ffl2.dll 2015-07-01 00:01 - 2015-01-09 19:46 - 00517408 _____ () E:\Program Files (x86)\IObit\IObit Malware Fighter\sqlite3.dll 2015-11-09 21:41 - 2015-10-27 14:05 - 00618784 _____ () E:\Program Files (x86)\IObit\Smart Defrag 4\ProductStatistics.dll 2015-07-01 00:02 - 2013-01-15 18:47 - 00893248 _____ () E:\Program Files (x86)\IObit\Smart Defrag 4\webres.dll 2015-07-01 00:08 - 2013-01-15 19:47 - 00893248 _____ () E:\Program Files (x86)\IObit\Advanced SystemCare 8\webres.dll 2015-12-15 13:24 - 2015-10-30 22:59 - 00034768 _____ () E:\Users\JD_LC\AppData\Roaming\Dropbox\bin\_multiprocessing.pyd 2015-12-15 13:28 - 2015-10-30 23:00 - 00019408 _____ () E:\Users\JD_LC\AppData\Roaming\Dropbox\bin\faulthandler.pyd 2015-12-15 13:28 - 2015-12-08 19:36 - 00022848 _____ () E:\Users\JD_LC\AppData\Roaming\Dropbox\bin\Crypto.Random.OSRNG.winrandom.pyd 2015-12-15 13:28 - 2015-12-08 19:36 - 00023352 _____ () E:\Users\JD_LC\AppData\Roaming\Dropbox\bin\Crypto.Util._counter.pyd 2015-12-15 13:28 - 2015-12-08 19:36 - 00042296 _____ () E:\Users\JD_LC\AppData\Roaming\Dropbox\bin\Crypto.Cipher._AES.pyd 2015-12-15 13:24 - 2015-10-30 22:59 - 00116688 _____ () E:\Users\JD_LC\AppData\Roaming\Dropbox\bin\pywintypes27.dll 2015-12-15 13:24 - 2015-10-30 22:59 - 00093640 _____ () E:\Users\JD_LC\AppData\Roaming\Dropbox\bin\_ctypes.pyd 2015-12-15 13:24 - 2015-10-30 22:59 - 00018376 _____ () E:\Users\JD_LC\AppData\Roaming\Dropbox\bin\select.pyd 2015-12-15 13:24 - 2015-12-08 19:36 - 00019760 _____ () E:\Users\JD_LC\AppData\Roaming\Dropbox\bin\tornado.speedups.pyd 2015-12-15 13:24 - 2015-10-30 23:00 - 00105928 _____ () E:\Users\JD_LC\AppData\Roaming\Dropbox\bin\win32api.pyd 2015-12-15 13:24 - 2015-10-30 22:59 - 00392144 _____ () E:\Users\JD_LC\AppData\Roaming\Dropbox\bin\pythoncom27.dll 2015-12-15 13:24 - 2015-12-08 19:36 - 00381752 _____ () E:\Users\JD_LC\AppData\Roaming\Dropbox\bin\win32com.shell.shell.pyd 2015-12-15 13:24 - 2015-10-30 22:59 - 00692688 _____ () E:\Users\JD_LC\AppData\Roaming\Dropbox\bin\unicodedata.pyd 2015-12-15 13:28 - 2015-12-08 19:36 - 00020816 _____ () E:\Users\JD_LC\AppData\Roaming\Dropbox\bin\cryptography.hazmat.bindings._constant_time.pyd 2015-12-15 13:24 - 2015-10-30 23:00 - 00109520 _____ () E:\Users\JD_LC\AppData\Roaming\Dropbox\bin\_cffi_backend.pyd 2015-12-15 13:28 - 2015-12-08 19:36 - 01737032 _____ () E:\Users\JD_LC\AppData\Roaming\Dropbox\bin\cryptography.hazmat.bindings._openssl.pyd 2015-12-15 13:28 - 2015-12-08 19:36 - 00020808 _____ () E:\Users\JD_LC\AppData\Roaming\Dropbox\bin\cryptography.hazmat.bindings._padding.pyd 2015-12-15 13:24 - 2015-12-08 19:36 - 00020800 _____ () E:\Users\JD_LC\AppData\Roaming\Dropbox\bin\_cffi_python_x66cf7a7cx17a72769.pyd 2015-12-15 13:24 - 2015-12-08 19:36 - 00021840 _____ () E:\Users\JD_LC\AppData\Roaming\Dropbox\bin\_cffi_unicode_environ_win32_x8bf8e68bx9968e850.pyd 2015-12-15 13:28 - 2015-12-08 19:36 - 00038696 _____ () E:\Users\JD_LC\AppData\Roaming\Dropbox\bin\fastpath.pyd 2015-12-15 13:24 - 2015-10-30 23:00 - 00024528 _____ () E:\Users\JD_LC\AppData\Roaming\Dropbox\bin\win32event.pyd 2015-12-15 13:28 - 2015-10-30 23:00 - 00020936 _____ () E:\Users\JD_LC\AppData\Roaming\Dropbox\bin\mmapfile.pyd 2015-12-15 13:24 - 2015-10-30 23:00 - 00114640 _____ () E:\Users\JD_LC\AppData\Roaming\Dropbox\bin\win32security.pyd 2015-12-15 13:24 - 2015-12-08 19:36 - 00021320 _____ () E:\Users\JD_LC\AppData\Roaming\Dropbox\bin\_cffi_pywin_kernel32_xde9e4433x360333f0.pyd 2015-12-15 13:24 - 2015-10-30 23:00 - 00124880 _____ () E:\Users\JD_LC\AppData\Roaming\Dropbox\bin\win32file.pyd 2015-12-15 13:24 - 2015-10-30 23:00 - 00030160 _____ () E:\Users\JD_LC\AppData\Roaming\Dropbox\bin\win32pipe.pyd 2015-12-15 13:24 - 2015-10-30 23:00 - 00043472 _____ () E:\Users\JD_LC\AppData\Roaming\Dropbox\bin\win32process.pyd 2015-12-15 13:24 - 2015-10-30 23:00 - 00175560 _____ () E:\Users\JD_LC\AppData\Roaming\Dropbox\bin\win32gui.pyd 2015-12-15 13:24 - 2015-10-30 23:00 - 00028616 _____ () E:\Users\JD_LC\AppData\Roaming\Dropbox\bin\win32ts.pyd 2015-12-15 13:24 - 2015-10-30 23:00 - 00024016 _____ () E:\Users\JD_LC\AppData\Roaming\Dropbox\bin\win32clipboard.pyd 2015-12-15 13:24 - 2015-10-30 23:00 - 00048592 _____ () E:\Users\JD_LC\AppData\Roaming\Dropbox\bin\win32service.pyd 2015-12-15 13:28 - 2015-12-08 19:36 - 00024392 _____ () E:\Users\JD_LC\AppData\Roaming\Dropbox\bin\librsyncffi.compiled._librsyncffi.pyd 2015-12-15 13:28 - 2015-10-30 23:00 - 00036296 _____ () E:\Users\JD_LC\AppData\Roaming\Dropbox\bin\librsync.dll 2015-12-15 13:24 - 2015-10-30 23:00 - 00024016 _____ () E:\Users\JD_LC\AppData\Roaming\Dropbox\bin\win32profile.pyd 2015-12-15 13:28 - 2015-12-08 19:36 - 00117056 _____ () E:\Users\JD_LC\AppData\Roaming\Dropbox\bin\breakpad.client.windows.handler.pyd 2015-12-15 13:24 - 2015-12-08 19:36 - 00023376 _____ () E:\Users\JD_LC\AppData\Roaming\Dropbox\bin\winscreenshot.compiled._CaptureScreenshot.pyd 2015-12-15 13:24 - 2015-10-30 22:59 - 00134608 _____ () E:\Users\JD_LC\AppData\Roaming\Dropbox\bin\_elementtree.pyd 2015-12-15 13:24 - 2015-10-30 22:59 - 00134088 _____ () E:\Users\JD_LC\AppData\Roaming\Dropbox\bin\pyexpat.pyd 2015-12-15 13:28 - 2015-10-30 23:00 - 00240584 _____ () E:\Users\JD_LC\AppData\Roaming\Dropbox\bin\jpegtran.pyd 2015-12-15 13:28 - 2015-12-08 19:36 - 00020280 _____ () E:\Users\JD_LC\AppData\Roaming\Dropbox\bin\cpuid.compiled._cpuid.pyd 2015-12-15 13:24 - 2015-12-08 19:36 - 00052024 _____ () E:\Users\JD_LC\AppData\Roaming\Dropbox\bin\psutil._psutil_windows.pyd 2015-12-15 13:28 - 2015-12-08 19:36 - 00021304 _____ () E:\Users\JD_LC\AppData\Roaming\Dropbox\bin\Crypto.Util.strxor.pyd 2015-12-15 13:24 - 2015-10-30 23:00 - 00350152 _____ () E:\Users\JD_LC\AppData\Roaming\Dropbox\bin\winxpgui.pyd 2015-12-15 13:28 - 2015-12-08 19:36 - 00084792 _____ () E:\Users\JD_LC\AppData\Roaming\Dropbox\bin\dropbox_sqlite_ext.DLL 2015-12-15 13:24 - 2015-12-08 19:36 - 01826608 _____ () E:\Users\JD_LC\AppData\Roaming\Dropbox\bin\PyQt5.QtCore.pyd 2015-12-15 13:24 - 2015-10-30 23:00 - 00083912 _____ () E:\Users\JD_LC\AppData\Roaming\Dropbox\bin\sip.pyd 2015-12-15 13:24 - 2015-12-08 19:36 - 03891504 _____ () E:\Users\JD_LC\AppData\Roaming\Dropbox\bin\PyQt5.QtWidgets.pyd 2015-12-15 13:24 - 2015-12-08 19:36 - 01950000 _____ () E:\Users\JD_LC\AppData\Roaming\Dropbox\bin\PyQt5.QtGui.pyd 2015-12-15 13:24 - 2015-12-08 19:36 - 00519984 _____ () E:\Users\JD_LC\AppData\Roaming\Dropbox\bin\PyQt5.QtNetwork.pyd 2015-12-15 13:24 - 2015-12-08 19:36 - 00133936 _____ () E:\Users\JD_LC\AppData\Roaming\Dropbox\bin\PyQt5.QtWebKit.pyd 2015-12-15 13:24 - 2015-12-08 19:36 - 00225080 _____ () E:\Users\JD_LC\AppData\Roaming\Dropbox\bin\PyQt5.QtWebKitWidgets.pyd 2015-12-15 13:24 - 2015-12-08 19:36 - 00207672 _____ () E:\Users\JD_LC\AppData\Roaming\Dropbox\bin\PyQt5.QtPrintSupport.pyd 2015-12-15 13:24 - 2015-12-08 19:36 - 00024904 _____ () E:\Users\JD_LC\AppData\Roaming\Dropbox\bin\_cffi_wpad_proxy_win_x752e3d61xdcfdcc84.pyd 2015-12-15 13:24 - 2015-12-08 19:36 - 00486704 _____ () E:\Users\JD_LC\AppData\Roaming\Dropbox\bin\PyQt5.QtQuick.pyd 2015-12-15 13:24 - 2015-12-08 19:36 - 00357680 _____ () E:\Users\JD_LC\AppData\Roaming\Dropbox\bin\PyQt5.QtQml.pyd 2015-12-15 13:24 - 2015-10-30 23:01 - 00019920 _____ () E:\Users\JD_LC\AppData\Roaming\Dropbox\bin\QtQuick.2\qtquick2plugin.dll 2015-03-04 19:45 - 2015-10-30 23:00 - 00786904 _____ () E:\Users\JD_LC\AppData\Roaming\Dropbox\bin\QtQuick\Controls\qtquickcontrolsplugin.dll 2015-12-15 13:24 - 2015-10-30 23:00 - 00063448 _____ () E:\Users\JD_LC\AppData\Roaming\Dropbox\bin\QtQuick\Layouts\qquicklayoutsplugin.dll 2015-12-15 13:24 - 2015-10-30 23:00 - 00019408 _____ () E:\Users\JD_LC\AppData\Roaming\Dropbox\bin\QtQuick\Window.2\windowplugin.dll 2014-02-01 17:36 - 2015-09-21 10:49 - 00348960 _____ () E:\Program Files (x86)\IObit\IObit Uninstaller\madExcept_.bpl 2014-02-01 17:36 - 2015-09-21 10:49 - 00183584 _____ () E:\Program Files (x86)\IObit\IObit Uninstaller\madBasic_.bpl 2014-02-01 17:36 - 2015-09-21 10:49 - 00050976 _____ () E:\Program Files (x86)\IObit\IObit Uninstaller\madDisAsm_.bpl 2015-07-02 16:54 - 2015-07-02 16:54 - 40540672 _____ () E:\Program Files\AVAST Software\Avast\libcef.dll 2015-07-01 00:01 - 2015-03-27 16:39 - 00182080 _____ () E:\Program Files (x86)\IObit\IObit Malware Fighter\unrar.dll 2015-07-01 00:01 - 2015-01-09 19:46 - 00145184 _____ () E:\Program Files (x86)\IObit\IObit Malware Fighter\zlibwapi.dll 2015-12-11 13:07 - 2015-12-04 19:32 - 01583432 _____ () E:\Program Files (x86)\Google\Chrome\Application\47.0.2526.80\libglesv2.dll 2015-12-11 13:07 - 2015-12-04 19:32 - 00081224 _____ () E:\Program Files (x86)\Google\Chrome\Application\47.0.2526.80\libegl.dll ==================== Alternate Data Streams (Whitelisted) ========= (Se uma entrada for incluída na fixlist, somente o ADS será removido.) ==================== Modo de Segurança (Whitelisted) =================== (Se uma entrada for incluída na fixlist, será removida do Registro. O valor "AlternateShell" será restaurado.) HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\IMFservice => ""="Service" ==================== EXE Associação (Whitelisted) =============== (Se uma entrada for incluída na fixlist, o ítem no Registro será restaurado para o padrão ou removido.) ==================== Internet Explorer confiável/restrito =============== (Se uma entrada for incluída na fixlist, será removida do Registro.) IE trusted site: HKU\S-1-5-21-2662280489-2615740208-2487742208-1000\...\google.com -> www.google.com IE trusted site: HKU\S-1-5-21-2662280489-2615740208-2487742208-1000\...\google.com.br -> www.google.com.br IE trusted site: HKU\S-1-5-21-2662280489-2615740208-2487742208-1000\...\itau.b.br -> www.itau.b.br IE trusted site: HKU\S-1-5-21-2662280489-2615740208-2487742208-1000\...\itau.com.br -> bankline.itau.com.br IE trusted site: HKU\S-1-5-21-2662280489-2615740208-2487742208-1000\...\itaupersonnalite.com.br -> www.itaupersonnalite.com.br IE restricted site: HKU\S-1-5-21-2662280489-2615740208-2487742208-1000\...\008i.com -> 008i.com IE restricted site: HKU\S-1-5-21-2662280489-2615740208-2487742208-1000\...\008k.com -> 008k.com IE restricted site: HKU\S-1-5-21-2662280489-2615740208-2487742208-1000\...\00hq.com -> 00hq.com IE restricted site: HKU\S-1-5-21-2662280489-2615740208-2487742208-1000\...\0190-dialers.com -> 0190-dialers.com IE restricted site: HKU\S-1-5-21-2662280489-2615740208-2487742208-1000\...\01i.info -> 01i.info IE restricted site: HKU\S-1-5-21-2662280489-2615740208-2487742208-1000\...\02pmnzy5eo29bfk4.com -> 02pmnzy5eo29bfk4.com IE restricted site: HKU\S-1-5-21-2662280489-2615740208-2487742208-1000\...\05p.com -> 05p.com IE restricted site: HKU\S-1-5-21-2662280489-2615740208-2487742208-1000\...\07ic5do2myz3vzpk.com -> 07ic5do2myz3vzpk.com IE restricted site: HKU\S-1-5-21-2662280489-2615740208-2487742208-1000\...\08nigbmwk43i01y6.com -> 08nigbmwk43i01y6.com IE restricted site: HKU\S-1-5-21-2662280489-2615740208-2487742208-1000\...\093qpeuqpmz6ebfa.com -> 093qpeuqpmz6ebfa.com IE restricted site: HKU\S-1-5-21-2662280489-2615740208-2487742208-1000\...\0calories.net -> 0calories.net IE restricted site: HKU\S-1-5-21-2662280489-2615740208-2487742208-1000\...\0cj.net -> 0cj.net IE restricted site: HKU\S-1-5-21-2662280489-2615740208-2487742208-1000\...\0scan.com -> 0scan.com IE restricted site: HKU\S-1-5-21-2662280489-2615740208-2487742208-1000\...\1-britney-spears-nude.com -> 1-britney-spears-nude.com IE restricted site: HKU\S-1-5-21-2662280489-2615740208-2487742208-1000\...\1-domains-registrations.com -> 1-domains-registrations.com IE restricted site: HKU\S-1-5-21-2662280489-2615740208-2487742208-1000\...\1-se.com -> 1-se.com IE restricted site: HKU\S-1-5-21-2662280489-2615740208-2487742208-1000\...\1001movie.com -> 1001movie.com IE restricted site: HKU\S-1-5-21-2662280489-2615740208-2487742208-1000\...\1001night.biz -> 1001night.biz IE restricted site: HKU\S-1-5-21-2662280489-2615740208-2487742208-1000\...\100gal.net -> 100gal.net IE restricted site: HKU\S-1-5-21-2662280489-2615740208-2487742208-1000\...\100sexlinks.com -> 100sexlinks.com Existem ainda 4797 sites a mais. ==================== Outras Áreas ============================ (Atualmente não há nenhuma correção automática para esta seção.) HKU\S-1-5-21-2662280489-2615740208-2487742208-1000\Control Panel\Desktop\\Wallpaper -> E:\Users\JD_LC\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg DNS Servers: 192.168.0.100 HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1) Firewall do Windows está habilitado. ==================== MSCONFIG/TASK MANAGER ítens desabilitados == (Atualmente não há nenhuma correção automática para esta seção.) MSCONFIG\startupfolder: E:^Users^JD_LC^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Dropbox.lnk => E:\Windows\pss\Dropbox.lnk.Startup MSCONFIG\startupreg: Adobe ARM => "E:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" MSCONFIG\startupreg: DAEMON Tools Lite => "E:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun MSCONFIG\startupreg: DivXMediaServer => E:\Program Files (x86)\DivX\DivX Media Server\DivXMediaServer.exe MSCONFIG\startupreg: DivXUpdate => "E:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe" /CHECKNOW MSCONFIG\startupreg: HomePageHelper => MSCONFIG\startupreg: Lync => "E:\Program Files\Microsoft Office\Office15\lync.exe" /fromrunkey MSCONFIG\startupreg: RoboForm => "E:\Program Files (x86)\Siber Systems\AI RoboForm\RoboTaskBarIcon.exe" MSCONFIG\startupreg: SunJavaUpdateSched => "E:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" MSCONFIG\startupreg: uTorrent => "E:\Users\JD_LC\AppData\Roaming\uTorrent\uTorrent.exe" /MINIMIZED MSCONFIG\startupreg: WinMPX => E:\Users\JD_LC\AppData\AdobeFlashPlayer_13.0.0.206.bat MSCONFIG\startupreg: Wondershare Helper Compact.exe => MSCONFIG\startupreg: YeaInstaller => ==================== Regras do Firewall (Whitelisted) =============== (Se uma entrada for incluída na fixlist, será removida do Registro. O arquivo não será movido, a menos que seja colocado separadamente.) FirewallRules: [TCP Query User{AAACBAE2-9229-47BD-A5A8-9267E4295DAD}E:\users\jd_lc\downloads\office 2013\microsoft toolkit 2.4.5.exe] => (Allow) E:\users\jd_lc\downloads\office 2013\microsoft toolkit 2.4.5.exe FirewallRules: [UDP Query User{92E0AD50-1D5E-4EF6-9063-D8E3EE594E80}E:\users\jd_lc\downloads\office 2013\microsoft toolkit 2.4.5.exe] => (Allow) E:\users\jd_lc\downloads\office 2013\microsoft toolkit 2.4.5.exe FirewallRules: [{E0632A3C-925D-4E1C-AABF-83D65FBF493F}] => (Allow) E:\Program Files\Microsoft Office\Office15\lync.exe FirewallRules: [{AC6B74EA-9DDD-4523-A5DA-054113D5729A}] => (Allow) E:\Program Files\Microsoft Office\Office15\lync.exe FirewallRules: [{40F48A65-5EB2-4CDE-8287-D28688A900DE}] => (Allow) E:\Program Files\Microsoft Office\Office15\UcMapi.exe FirewallRules: [{A25DCB9A-0D28-43D1-94B2-4ED6AF3562AC}] => (Allow) E:\Program Files\Microsoft Office\Office15\UcMapi.exe FirewallRules: [TCP Query User{D47F91BF-931D-45FE-B79D-D2E3D4404A6F}E:\users\jd_lc\desktop\utorrent.exe] => (Allow) E:\users\jd_lc\desktop\utorrent.exe FirewallRules: [UDP Query User{E05FA8FB-843B-4C02-8F1E-842DA735BC0A}E:\users\jd_lc\desktop\utorrent.exe] => (Allow) E:\users\jd_lc\desktop\utorrent.exe FirewallRules: [TCP Query User{4BBEA781-0CC8-48DC-BE6A-5F4B6B039A82}E:\users\jd_lc\desktop\utorrent.exe] => (Block) E:\users\jd_lc\desktop\utorrent.exe FirewallRules: [UDP Query User{36662AD6-C489-4DBE-B024-27B7BB9525E4}E:\users\jd_lc\desktop\utorrent.exe] => (Block) E:\users\jd_lc\desktop\utorrent.exe FirewallRules: [{8B74660B-B0CE-4EC2-9E30-4FF290B08C21}] => (Allow) E:\Users\JD_LC\AppData\Roaming\Dropbox\bin\Dropbox.exe FirewallRules: [{1D8F6983-4D40-428D-9C51-2A21B63F51D9}] => (Allow) E:\Users\JD_LC\AppData\Roaming\Dropbox\bin\Dropbox.exe FirewallRules: [{C887B4F0-472E-416F-96AB-6A7A86A5B262}] => (Allow) E:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe FirewallRules: [{CF11E253-A5ED-4CBA-B824-2A7955A1D413}] => (Allow) E:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe FirewallRules: [TCP Query User{568ED19B-BA98-4680-A9C1-9E7B936ED6BB}E:\program files (x86)\divx\divx media server\divxmediaserver.exe] => (Allow) E:\program files (x86)\divx\divx media server\divxmediaserver.exe FirewallRules: [UDP Query User{3071DF22-B954-43D8-9F5E-DDD815A8E5A8}E:\program files (x86)\divx\divx media server\divxmediaserver.exe] => (Allow) E:\program files (x86)\divx\divx media server\divxmediaserver.exe FirewallRules: [TCP Query User{9AC5224D-99E5-4801-898E-9DB78ECD383A}E:\program files\Microsoft Office\Office15\lync.exe] => (Block) E:\program files\Microsoft Office\Office15\lync.exe FirewallRules: [UDP Query User{FE3C7D36-1E45-44DF-A6E6-F42E02B03B2F}E:\program files\Microsoft Office\Office15\lync.exe] => (Block) E:\program files\Microsoft Office\Office15\lync.exe FirewallRules: [TCP Query User{7B5907AD-6A2C-4A1D-8981-996F363DE1F8}E:\program files\java\jdk1.8.0_11\bin\jmc.exe] => (Allow) E:\program files\java\jdk1.8.0_11\bin\jmc.exe FirewallRules: [UDP Query User{9C18B81E-9BC8-485C-8BAD-8D47F56F4330}E:\program files\java\jdk1.8.0_11\bin\jmc.exe] => (Allow) E:\program files\java\jdk1.8.0_11\bin\jmc.exe FirewallRules: [{88B1CED0-34B3-4CD0-856A-EEAF1B4002DA}] => (Allow) E:\Program Files (x86)\Microsoft Visual Studio 12.0\Common7\IDE\devenv.exe FirewallRules: [{B1902917-7261-4F1C-AD37-323AA424C5F6}] => (Allow) E:\Program Files (x86)\Microsoft Visual Studio 12.0\Common7\IDE\devenv.exe FirewallRules: [{FF62C66F-C444-4E96-B99E-1FEB599C2AAA}] => (Allow) E:\Program Files (x86)\Microsoft Visual Studio 12.0\Common7\IDE\devenv.exe FirewallRules: [{363E244F-2284-4C19-9ECB-736E7E59515F}] => (Allow) E:\Program Files (x86)\Microsoft Visual Studio 12.0\Common7\IDE\devenv.exe FirewallRules: [{0AE1325C-16B4-4255-8FEC-086099804BEF}] => (Allow) E:\Program Files (x86)\Microsoft Visual Studio 12.0\Common7\IDE\devenv.exe FirewallRules: [{755BF70C-CDA4-477E-AB02-C691A316BFEB}] => (Allow) E:\Program Files (x86)\Microsoft Visual Studio 12.0\Common7\IDE\devenv.exe FirewallRules: [{DF8AE519-D048-493C-A2AB-17F91E604336}] => (Allow) E:\Program Files (x86)\Microsoft Visual Studio 12.0\Common7\IDE\devenv.exe FirewallRules: [{8E27C81F-D1FD-42CC-900F-89F1170B8B78}] => (Allow) LPort=12292 FirewallRules: [{46DC41AB-D9E8-463B-912D-639FF343A499}] => (Allow) E:\Program Files (x86)\Microsoft Visual Studio 12.0\Common7\IDE\devenv.exe FirewallRules: [{D5184678-32EE-42F3-8B33-D3CC881D3C7A}] => (Allow) E:\Program Files (x86)\Microsoft Visual Studio 12.0\Common7\IDE\devenv.exe FirewallRules: [{012B3648-1237-4FF3-A751-3E62F55FDD7C}] => (Allow) E:\Program Files (x86)\Microsoft Visual Studio 12.0\Common7\IDE\devenv.exe FirewallRules: [{E0D462B7-D6F9-487B-970C-432F6198DE38}] => (Allow) E:\Program Files (x86)\Microsoft Visual Studio 12.0\Common7\IDE\devenv.exe FirewallRules: [{2CAE84E1-6D51-4404-8433-201D18EC2F75}] => (Allow) E:\Program Files (x86)\Microsoft Visual Studio 12.0\Common7\IDE\devenv.exe FirewallRules: [{6911DB73-91CB-4C3A-9D54-B9B20821C353}] => (Allow) E:\Program Files (x86)\Microsoft Visual Studio 12.0\Common7\IDE\devenv.exe FirewallRules: [{1768B65D-1F13-4C9A-B14B-C3EBF0C6A4F6}] => (Allow) E:\Users\JD_LC\AppData\Local\Facebook\Video\Skype\FacebookVideoCalling.exe FirewallRules: [{5A6B05CA-3168-490A-8BEF-7D6DA9F21FC0}] => (Allow) LPort=48113 FirewallRules: [{63870F60-9695-4994-8BEF-7D763F55867D}] => (Allow) LPort=48114 FirewallRules: [{ACE14E80-3F76-43B3-8772-F3C2092BA3A3}] => (Allow) E:\Program Files\ma-config.com\MaConfigAgent.exe FirewallRules: [{57F79895-BF19-4857-84D2-D1523C4C1BF3}] => (Allow) E:\Program Files\ma-config.com\MaConfigAgent.exe FirewallRules: [TCP Query User{BC30ABD0-428D-4CCB-A65F-00B454C213BA}E:\users\jd_lc\appdata\roaming\dropbox\bin\dropbox.exe] => (Allow) E:\users\jd_lc\appdata\roaming\dropbox\bin\dropbox.exe FirewallRules: [UDP Query User{D5543E95-F555-442F-84CD-06A3C8B1BFFE}E:\users\jd_lc\appdata\roaming\dropbox\bin\dropbox.exe] => (Allow) E:\users\jd_lc\appdata\roaming\dropbox\bin\dropbox.exe FirewallRules: [TCP Query User{E0848C7B-485F-4E8C-A2CC-F7BD6024FA22}E:\program files\java\jdk1.8.0_20\bin\jmc.exe] => (Allow) E:\program files\java\jdk1.8.0_20\bin\jmc.exe FirewallRules: [UDP Query User{3B4C1B37-A238-4E65-AD68-FF651D7EA46B}E:\program files\java\jdk1.8.0_20\bin\jmc.exe] => (Allow) E:\program files\java\jdk1.8.0_20\bin\jmc.exe FirewallRules: [TCP Query User{335583D9-9F38-4E48-B3B1-CB838412107C}E:\program files (x86)\jetbrains\phpstorm 8.0.1\bin\phpstorm.exe] => (Allow) E:\program files (x86)\jetbrains\phpstorm 8.0.1\bin\phpstorm.exe FirewallRules: [UDP Query User{90807594-FDDB-485C-8375-848EB54D1919}E:\program files (x86)\jetbrains\phpstorm 8.0.1\bin\phpstorm.exe] => (Allow) E:\program files (x86)\jetbrains\phpstorm 8.0.1\bin\phpstorm.exe FirewallRules: [{4C59C01F-740C-4331-87D0-F98B1451E05A}] => (Allow) E:\Program Files (x86)\Mozilla Firefox\firefox.exe FirewallRules: [{FF8B3A48-FC37-49B6-82AB-55F4213707B8}] => (Allow) E:\Program Files (x86)\Mozilla Firefox\firefox.exe FirewallRules: [TCP Query User{967C21AF-27DB-4D0B-8EE2-A3E4D84D47A4}E:\program files (x86)\jetbrains\phpstorm 8.0.1\bin\phpstorm.exe] => (Allow) E:\program files (x86)\jetbrains\phpstorm 8.0.1\bin\phpstorm.exe FirewallRules: [UDP Query User{7169EB93-D7D7-4BA6-B041-1304BC37C85C}E:\program files (x86)\jetbrains\phpstorm 8.0.1\bin\phpstorm.exe] => (Allow) E:\program files (x86)\jetbrains\phpstorm 8.0.1\bin\phpstorm.exe FirewallRules: [{486A223C-94DB-44E6-AF6E-F8D4063FF39A}] => (Allow) E:\Users\JD_LC\AppData\Roaming\BitTorrent\BitTorrent.exe FirewallRules: [{C4050983-1BB3-4257-9F08-FC9209228E75}] => (Allow) E:\Users\JD_LC\AppData\Roaming\BitTorrent\BitTorrent.exe FirewallRules: [{42AD1A26-DE06-4252-8D7A-0C9084A1B25A}] => (Allow) LPort=3306 FirewallRules: [{F29A649D-A47E-4E6C-8431-5FB55A0FB0AD}] => (Allow) LPort=3306 FirewallRules: [{74C71500-BD6A-4D02-B2A6-95A1B2CAB749}] => (Allow) E:\Program Files (x86)\Ralink\Common\RaMediaServer.exe FirewallRules: [{03CD8FF9-A861-47CB-AAEB-46C154F557B0}] => (Allow) E:\Program Files (x86)\Ralink\Common\RaMediaServer.exe FirewallRules: [{30BF4C1A-2595-4A9F-9057-8BAD718CA780}] => (Allow) E:\Program Files (x86)\Ralink\Common\RaUI.exe FirewallRules: [{B664954A-201E-40DD-9B4E-4A876F6D6889}] => (Allow) E:\Program Files (x86)\Ralink\Common\RaUI.exe FirewallRules: [TCP Query User{68C644E7-F2B8-4D0E-9AD8-6564767BC3CE}E:\program files (x86)\ralink\common\apui.exe] => (Allow) E:\program files (x86)\ralink\common\apui.exe FirewallRules: [UDP Query User{896E3212-A174-41DB-A9BD-D37B01BAEFA6}E:\program files (x86)\ralink\common\apui.exe] => (Allow) E:\program files (x86)\ralink\common\apui.exe FirewallRules: [{97AA37BC-040E-4D1C-9A11-3DB7FD7DC433}] => (Allow) E:\Users\JD_LC\AppData\Roaming\uTorrent\uTorrent.exe FirewallRules: [{67BADEF5-5CC3-4906-A95B-AFBB4B72F157}] => (Allow) E:\Users\JD_LC\AppData\Roaming\uTorrent\uTorrent.exe FirewallRules: [{F43B4E65-0FF9-4B2C-BF95-B8F657DABF85}] => (Allow) E:\Program Files (x86)\Apowersoft\Streaming Video Recorder\Streaming Video Recorder.exe FirewallRules: [{A08FB6B2-7867-46ED-B693-ED820E7C61F9}] => (Allow) E:\Program Files (x86)\Apowersoft\Streaming Video Recorder\Streaming Video Recorder.exe FirewallRules: [{003D9D4E-5E9F-4BA9-B215-1A020D854647}] => (Allow) E:\Program Files (x86)\Apowersoft\Streaming Video Recorder\ApowersoftSrv.dll FirewallRules: [{2274164F-1B9B-409E-9C0E-FD4F963AF00F}] => (Allow) E:\Program Files (x86)\Apowersoft\Streaming Video Recorder\ApowersoftSrv.dll FirewallRules: [{0F223E87-FAFC-4B26-A828-DB777F4E1E48}] => (Allow) E:\Program Files (x86)\Apowersoft\Streaming Video Recorder\ApowersoftDump.dll FirewallRules: [{E0B196E7-28A7-46E6-8D71-AC91F2CD32CE}] => (Allow) E:\Program Files (x86)\Apowersoft\Streaming Video Recorder\ApowersoftDump.dll FirewallRules: [{085E2289-A6DA-468F-8034-8A7310B25E0C}] => (Allow) E:\Program Files (x86)\Apowersoft\Streaming Video Recorder\ApowersoftAC.dll FirewallRules: [{6223325C-E476-479E-9D9F-2FA1551BC6F1}] => (Allow) E:\Program Files (x86)\Apowersoft\Streaming Video Recorder\ApowersoftAC.dll FirewallRules: [{9ACDA311-5A3F-46DF-9657-D192E4E27E5E}] => (Allow) E:\Program Files (x86)\Apowersoft\Streaming Video Recorder\ApowersoftPlayer.dll FirewallRules: [{E193FCD2-3C3A-4648-AB79-C3B1F5AA429C}] => (Allow) E:\Program Files (x86)\Apowersoft\Streaming Video Recorder\ApowersoftPlayer.dll FirewallRules: [{A2CCE6E8-ACDC-4E0F-B4AF-A081978EF752}] => (Allow) E:\Program Files (x86)\Apowersoft\Streaming Video Recorder\ApowersoftDownloaderHelp.dll FirewallRules: [{A589169A-80B1-434E-89D7-2F4C62751435}] => (Allow) E:\Program Files (x86)\Apowersoft\Streaming Video Recorder\ApowersoftDownloaderHelp.dll FirewallRules: [{30D0903C-B50F-4960-8973-1B5F21FCE912}] => (Allow) E:\Program Files (x86)\Apowersoft\Streaming Video Recorder\ApowersoftHDSDump.dll FirewallRules: [{8332628B-E302-4490-ABC6-F598D6855067}] => (Allow) E:\Program Files (x86)\Apowersoft\Streaming Video Recorder\ApowersoftHDSDump.dll FirewallRules: [{1A8E07F1-7DBF-4080-92EE-99334B1FF28F}] => (Allow) E:\Program Files\AVAST Software\Avast\ng\vbox\aswFe.exe FirewallRules: [{7A7863B7-0F7D-4D58-9629-9D8007703DB5}] => (Allow) E:\Program Files\AVAST Software\Avast\ng\vbox\aswFe.exe FirewallRules: [TCP Query User{ADB22982-F6BE-48EE-9555-44BD3A5FF420}E:\program files (x86)\a4proxy\a4proxy.exe] => (Allow) E:\program files (x86)\a4proxy\a4proxy.exe FirewallRules: [UDP Query User{11518A8A-339E-491A-8E0A-A698F78E9118}E:\program files (x86)\a4proxy\a4proxy.exe] => (Allow) E:\program files (x86)\a4proxy\a4proxy.exe FirewallRules: [{70299C1D-B05F-4746-912B-9BEE6143BCAA}] => (Allow) E:\Program Files (x86)\Google\Chrome\Application\chrome.exe ==================== Dispositivos Apresentando Falhas No Gerenciador ============= Name: Adaptador de Miniporta WiFi Virtual da Microsoft Description: Adaptador de Miniporta WiFi Virtual da Microsoft Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318} Manufacturer: Microsoft Service: vwifimp Problem: : This device is disabled. (Code 22) Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions. Name: Adaptador do Microsoft ISATAP Description: Adaptador do Microsoft ISATAP Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318} Manufacturer: Microsoft Service: tunnel Problem: : This device cannot start. (Code10) Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device. On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard. Name: Teredo Tunneling Pseudo-Interface Description: Adaptador de Túnel Teredo da Microsoft Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318} Manufacturer: Microsoft Service: tunnel Problem: : This device cannot start. (Code10) Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device. On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard. ==================== Erros no Log de eventos: ========================= Erros em Aplicativos: ================== Error: (12/15/2015 11:05:14 PM) (Source: Microsoft-Windows-EapHost) (EventID: 2002) (User: AUTORIDADE NT) Description: Ignorando: ocorreu uma falha na validação de Eap method DLL path name. Erro: typeId=43, authorId=9, vendorId=0, vendorType=0 Error: (12/15/2015 11:05:14 PM) (Source: Microsoft-Windows-EapHost) (EventID: 2002) (User: AUTORIDADE NT) Description: Ignorando: ocorreu uma falha na validação de Eap method DLL path name. Erro: typeId=25, authorId=9, vendorId=0, vendorType=0 Error: (12/15/2015 03:48:29 PM) (Source: AdvancedSystemCareService8) (EventID: 0) (User: ) Description: Identificador inválido Error: (12/15/2015 03:48:29 PM) (Source: AdvancedSystemCareService8) (EventID: 0) (User: ) Description: Identificador inválido Error: (12/15/2015 01:08:52 PM) (Source: Microsoft-Windows-EapHost) (EventID: 2002) (User: AUTORIDADE NT) Description: Ignorando: ocorreu uma falha na validação de Eap method DLL path name. Erro: typeId=43, authorId=9, vendorId=0, vendorType=0 Error: (12/15/2015 01:08:52 PM) (Source: Microsoft-Windows-EapHost) (EventID: 2002) (User: AUTORIDADE NT) Description: Ignorando: ocorreu uma falha na validação de Eap method DLL path name. Erro: typeId=25, authorId=9, vendorId=0, vendorType=0 Error: (12/15/2015 12:10:41 PM) (Source: AdvancedSystemCareService8) (EventID: 0) (User: ) Description: Interface desconhecida Error: (12/15/2015 12:10:41 PM) (Source: AdvancedSystemCareService8) (EventID: 0) (User: ) Description: Identificador inválido Error: (12/15/2015 11:02:45 AM) (Source: Office 2013 Licensing Service) (EventID: 0) (User: ) Description: Subscription licensing service failed: -1073418225 Error: (12/15/2015 10:52:30 AM) (Source: Microsoft-Windows-EapHost) (EventID: 2002) (User: AUTORIDADE NT) Description: Ignorando: ocorreu uma falha na validação de Eap method DLL path name. Erro: typeId=43, authorId=9, vendorId=0, vendorType=0 Erros de Sistema: ============= Error: (12/15/2015 11:35:43 PM) (Source: ipnathlp) (EventID: 1233) (User: ) Description: Error: (12/15/2015 11:11:15 PM) (Source: ipnathlp) (EventID: 1233) (User: ) Description: Error: (12/15/2015 11:09:08 PM) (Source: ipnathlp) (EventID: 30013) (User: ) Description: 169.254.112.128192.168.0.0255.255.255.0 Error: (12/15/2015 11:07:54 PM) (Source: Service Control Manager) (EventID: 7009) (User: ) Description: Tempo limite esgotado (30000 milissegundos) ao aguardar a conexão do serviço Ralink UPnP Media Server. Error: (12/15/2015 03:02:54 PM) (Source: ipnathlp) (EventID: 30013) (User: ) Description: 169.254.112.128192.168.0.0255.255.255.0 Error: (12/15/2015 02:44:55 PM) (Source: ipnathlp) (EventID: 1233) (User: ) Description: Error: (12/15/2015 02:32:48 PM) (Source: ipnathlp) (EventID: 1233) (User: ) Description: Error: (12/15/2015 01:55:07 PM) (Source: ipnathlp) (EventID: 1233) (User: ) Description: Error: (12/15/2015 01:43:00 PM) (Source: ipnathlp) (EventID: 1233) (User: ) Description: Error: (12/15/2015 01:41:02 PM) (Source: Server) (EventID: 2505) (User: ) Description: O servidor não pôde ligar-se com o transporte \Device\NetBT_Tcpip_{E0349DC1-66E2-4A59-9A7B-A8D5A4646FD1} porque outro computador na rede tem o mesmo nome. Não foi possível iniciar o servidor. CodeIntegrity: =================================== Date: 2015-11-10 19:10:50.449 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume3\Program Files\SpaceSoundPro\SpaceSoundPro.dll because the set of per-page image hashes could not be found on the system. Date: 2015-11-10 19:10:50.340 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume3\Program Files\SpaceSoundPro\SpaceSoundPro.dll because the set of per-page image hashes could not be found on the system. Date: 2015-11-10 19:10:48.243 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume3\Program Files\SpaceSoundPro\SpaceSoundPro.dll because the set of per-page image hashes could not be found on the system. Date: 2015-11-10 19:10:48.129 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume3\Program Files\SpaceSoundPro\SpaceSoundPro.dll because the set of per-page image hashes could not be found on the system. Date: 2015-11-10 19:10:25.986 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume3\Program Files\SpaceSoundPro\SpaceSoundPro.dll because the set of per-page image hashes could not be found on the system. Date: 2015-11-10 19:10:25.860 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume3\Program Files\SpaceSoundPro\SpaceSoundPro.dll because the set of per-page image hashes could not be found on the system. Date: 2015-11-10 19:10:25.431 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume3\Program Files\SpaceSoundPro\SpaceSoundPro.dll because the set of per-page image hashes could not be found on the system. Date: 2015-11-10 19:10:25.312 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume3\Program Files\SpaceSoundPro\SpaceSoundPro.dll because the set of per-page image hashes could not be found on the system. Date: 2015-11-10 19:10:24.706 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume3\Program Files\SpaceSoundPro\SpaceSoundPro.dll because the set of per-page image hashes could not be found on the system. Date: 2015-11-10 19:10:24.579 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume3\Program Files\SpaceSoundPro\SpaceSoundPro.dll because the set of per-page image hashes could not be found on the system. ==================== Informações da Memória =========================== Processador: AMD Athlon(tm) II X2 250 Processor Percentagem de memória em uso: 64% RAM física total: 4095.37 MB RAM física disponível: 1463.27 MB Virtual Total: 8188.94 MB Virtual disponível: 4673.97 MB ==================== Drives ================================ Drive c: () (Fixed) (Total:36.33 GB) (Free:20.24 GB) NTFS ==>[drive com componentes de inicialização (obtido através de BCD)] Drive d: (Reservado pelo Sistema) (Fixed) (Total:0.35 GB) (Free:0.21 GB) NTFS Drive e: () (Fixed) (Total:465.41 GB) (Free:63.31 GB) NTFS ==================== MBR & Tabela de Partições ================== ======================================================== Disk: 0 (MBR Code: Windows 7 or 8) (Size: 37.3 GB) (Disk ID: 97BE5B6A) Partition 1: (Active) - (Size=36.3 GB) - (Type=07 NTFS) ======================================================== Disk: 1 (MBR Code: Windows 7 or 8) (Size: 465.8 GB) (Disk ID: 2BD2C32A) Partition 1: (Active) - (Size=356 MB) - (Type=07 NTFS) Partition 2: (Not Active) - (Size=465.4 GB) - (Type=07 NTFS) ==================== Fim de Addition.txt ============================