Resultado do exame Adicional Farbar Recovery Scan Tool (x64) Versão:05-03-2016 01 Executado por David (2016-04-03 15:04:49) Executando a partir de C:\Users\David\Desktop Windows 10 Pro Versão 1511 (X64) (2015-11-27 22:56:42) Modo da Inicialização: Normal ========================================================== ==================== Contas: ============================= Administrador (S-1-5-21-3348681765-1422920454-2627347377-500 - Administrator - Disabled) Convidado (S-1-5-21-3348681765-1422920454-2627347377-501 - Limited - Disabled) David (S-1-5-21-3348681765-1422920454-2627347377-1001 - Administrator - Enabled) => C:\Users\David DefaultAccount (S-1-5-21-3348681765-1422920454-2627347377-503 - Limited - Disabled) HomeGroupUser$ (S-1-5-21-3348681765-1422920454-2627347377-1003 - Limited - Enabled) migue_000 (S-1-5-21-3348681765-1422920454-2627347377-1004 - Administrator - Enabled) => C:\Users\migue_000 ==================== Central de Segurança ======================== (Se uma entrada for incluída na fixlist, será removida.) AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} AV: Baidu Antivirus (Enabled - Up to date) {0B023102-4312-4570-585A-1BAAA3570E16} AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} AS: Baidu Antivirus (Enabled - Up to date) {B063D0E6-6528-4AFE-62EA-20D8D8D044AB} ==================== Programas Instalados ====================== (Somente os programas adwares com a indicação "Oculto" podem ser adicionados à fixlist para desocultá-los. Os programas adwares devem ser desinstalados manualmente.) µTorrent (HKU\S-1-5-21-3348681765-1422920454-2627347377-1001\...\uTorrent) (Version: 3.4.5.41865 - BitTorrent Inc.) Adobe Photoshop CS6 (HKLM-x32\...\{74EB3499-8B95-4B5C-96EB-7B342F3FD0C6}) (Version: 13.0 - Adobe Systems Incorporated) Atualizações da NVIDIA 2.4.3.22 (Version: 2.4.3.22 - NVIDIA Corporation) Hidden Baidu Antivirus (HKLM-x32\...\Baidu Antivirus) (Version: 5.4.3.147185 - Baidu, Inc.) Baidu Browser (HKLM-x32\...\Spark) (Version: 40.16 Preview - Baidu Inc.) Blender (HKLM\...\Blender) (Version: 2.69 - Blender Foundation) Body Text Feathering (HKLM-x32\...\PopupProduct) (Version: 1.0.0.0 - Body Text Feathering) <==== ATENÇÃO CCleaner (HKLM\...\CCleaner) (Version: 4.10 - Piriform) Cities: Skylines (HKLM\...\Steam App 255710) (Version: - Colossal Order Ltd.) Counter-Strike 1.6 (HKLM-x32\...\Counter-Strike 1.6) (Version: - ) DAEMON Tools Lite (HKLM\...\DAEMON Tools Lite) (Version: 5.0.1.0406 - Disc Soft Ltd) DVDStyler v2.9.3 (HKLM-x32\...\DVDStyler_is1) (Version: - ) Epic Games Launcher (HKLM-x32\...\{9002F83C-DA49-411E-9CF0-111CB3979F9C}) (Version: 1.1.50.0 - Epic Games, Inc.) Epic Games Launcher Prerequisites (x64) (Version: 1.0.0.0 - Epic Games, Inc.) Hidden Firewatch (HKLM-x32\...\Firewatch_is1) (Version: - ) FormatFactory 3.7.0.0 (HKLM-x32\...\FormatFactory) (Version: 3.7.0.0 - Format Factory) GIMP 2.8.16 (HKLM\...\GIMP-2_is1) (Version: 2.8.16 - The GIMP Team) Google Chrome (HKLM-x32\...\Google Chrome) (Version: 49.0.2623.110 - Google Inc.) Google Update Helper (x32 Version: 1.3.25.5 - Google Inc.) Hidden Google Update Helper (x32 Version: 1.3.29.5 - Google Inc.) Hidden Grand Theft Auto IV (HKLM-x32\...\{579BA58C-F33D-4970-9953-B94B43768AC3}) (Version: 1.00.0000 - Rockstar Games) Grand Theft Auto IV (x32 Version: 1.0.0013.131 - Rockstar Games Inc.) Hidden GTA IV em Português BR (HKLM-x32\...\GTA IV em Português BR1.0) (Version: 1.0 - Afrânio Bezerra de Souza) GTA IV Vehicle Mod Installer v1.3 (HKLM-x32\...\GTA IV Vehicle Mod Installer v1.3_is1) (Version: - MobileD2) Half-Life (HKLM-x32\...\Half-Life_is1) (Version: Half-Life - Non Steam - KingSOFT DVD) Intel Driver Update Utility (HKLM-x32\...\{fe92d390-13ee-4660-a2f8-39a066fdffe0}) (Version: 2.2.0.5 - Intel) Intel(R) Driver Update Utility 2.2.0.5 (x32 Version: 2.2.0.1 - Intel) Hidden Java 8 Update 77 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218077F0}) (Version: 8.0.770.3 - Oracle Corporation) Kingo ROOT version 1.4.3.2539 (HKLM-x32\...\{AE7675D6-0B31-494F-ABFA-822E1A0FDF17}_is1) (Version: 1.4.3.2539 - Kingosoft Technology Ltd.) L.A. Noire (HKLM\...\Steam App 110800) (Version: - Team Bondi) Launcher Prerequisites (x64) (x32 Version: 1.0.0.0 - Epic Games, Inc.) Hidden Life Is Strange™ (HKLM-x32\...\Steam App 319630) (Version: - DONTNOD Entertainment) Max Payne 3 (HKLM\...\Steam App 204100) (Version: - Rockstar Studios) Max Remote versão 2.3 (HKLM-x32\...\{996228C5-A910-42C1-80E3-1E47CEDF7E18}_is1) (Version: 2.3 - Bit Units Studio) MEGAsync (HKLM-x32\...\MEGAsync) (Version: - Mega Limited) Microsoft ASP.NET MVC 4 Runtime (HKLM-x32\...\{3FE312D5-B862-40CE-8E4E-A6D8ABF62736}) (Version: 4.0.40804.0 - Microsoft Corporation) Microsoft Games for Windows - LIVE Redistributable (HKLM-x32\...\{832D9DE0-8AFC-4689-9819-4DBBDEBD3E4F}) (Version: 3.5.92.0 - Microsoft Corporation) Microsoft Games for Windows Marketplace (HKLM-x32\...\{67F42018-F647-4D3C-BE62-F8CB4FE2FCD5}) (Version: 3.5.67.0 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation) Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation) Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation) Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.23506 (HKLM-x32\...\{23daf363-3020-4059-b3ae-dc4ad39fed19}) (Version: 14.0.23506.0 - Microsoft Corporation) Microsoft Xbox 360 Accessories 1.2 (HKLM\...\{070C55FA-FB9D-46DD-B30B-4B520A83A66A}) (Version: 1.20.146.0 - Microsoft) Minecraft Story Mode Episode 3 (HKLM-x32\...\Minecraft Story Mode Episode 3_is1) (Version: - ) Minecraft Story Mode Episode 2 (HKLM-x32\...\Minecraft Story Mode Episode 2_is1) (Version: - ) Minecraft: Story Mode - A Telltale Games Series (HKLM\...\bWluZWNyYWZ0c3Rvcnltb2RlYXRlbGx0YWxlZ2FtZXNzZXJpZXM_is1) (Version: 1 - ) Minecraft: Story Mode - A Telltale Games Series (HKLM\...\TWluZWNyYWZ0U3RvcnlNb2RlQVRlbGx0YWxlR2FtZXNTZXJpZXM=_is1) (Version: 1 - ) MTA:SA v1.5.2 (HKLM-x32\...\MTA:SA 1.5) (Version: v1.5.2 - Multi Theft Auto) NARUTO SHIPPUDEN: Ultimate Ninja STORM 3 Full Burst (HKLM-x32\...\NARUTO SHIPPUDEN: Ultimate Ninja STORM 3 Full Burst_is1) (Version: - Namco Bandai Games) NARUTO SHIPPUDEN: Ultimate Ninja STORM 4 (HKLM-x32\...\Steam App 349040) (Version: - CyberConnect2 Co. Ltd.) Need for Speed Underground 2 (HKLM-x32\...\{909F8EBC-EC7F-48FF-0085-475D818F0F31}) (Version: - ) NVIDIA Driver de áudio HD 1.3.34.3 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.34.3 - NVIDIA Corporation) NVIDIA Driver de controle do 3D Vision 352.65 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 352.65 - NVIDIA Corporation) NVIDIA Driver de gráficos 353.54 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 353.54 - NVIDIA Corporation) NVIDIA Driver do 3D Vision 353.54 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 353.54 - NVIDIA Corporation) NVIDIA GeForce Experience 2.4.3.22 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 2.4.3.22 - NVIDIA Corporation) NVIDIA Software do sistema PhysX 9.15.0324 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.15.0324 - NVIDIA Corporation) OpenIV (HKU\S-1-5-21-3348681765-1422920454-2627347377-1001\...\OpenIV) (Version: 2.7.680 - .black/OpenIV Team) Painel de controle da NVIDIA 353.54 (Version: 353.54 - NVIDIA Corporation) Hidden PCSX2 - Playstation 2 Emulator (HKLM-x32\...\pcsx2) (Version: - ) PCSX2 - Playstation 2 Emulator (HKLM-x32\...\pcsx2-r5875) (Version: - ) PDF Settings CS6 (x32 Version: 11.0 - Adobe Systems Incorporated) Hidden PokerStars (HKLM-x32\...\PokerStars) (Version: - PokerStars) PS3 Media Server (HKLM-x32\...\PS3 Media Server) (Version: 1.90.1 - PS3 Media Server) Remote Desktop Access (VuuPC) (HKLM-x32\...\VOPackage) (Version: - CMI Limited) <==== ATENÇÃO Rockstar Games Social Club (HKLM-x32\...\Rockstar Games Social Club) (Version: 1.1.7.2 - Rockstar Games) Samsung Kies (HKLM-x32\...\InstallShield_{758C8301-2696-4855-AF45-534B1200980A}) (Version: 2.6.3.16011.2 - Samsung Electronics Co., Ltd.) Samsung Kies (x32 Version: 2.6.3.16011.2 - Samsung Electronics Co., Ltd.) Hidden SAMSUNG USB Driver for Mobile Phones (HKLM\...\{D0795B21-0CDA-4a92-AB9E-6E92D8111E44}) (Version: 1.5.15.0 - SAMSUNG Electronics Co., Ltd.) Satellite Comma (HKLM-x32\...\SoftwareUpdater) (Version: 1.0.0.0 - Satellite Comma) <==== ATENÇÃO Setup (HKLM-x32\...\{7ADF667E-E14D-4D2C-827C-B0108F0D93BC}) (Version: - ) <==== ATENÇÃO SHIELD Streaming (Version: 4.1.1000 - NVIDIA Corporation) Hidden SHIELD Wireless Controller Driver (Version: 2.4.3.22 - NVIDIA Corporation) Hidden SketchUp 2016 (HKLM\...\{D87EE6DC-32BA-4219-AC75-0A6FD54ED058}) (Version: 16.0.19912 - Trimble Navigation Limited) Software de dispositivo do Chipset Intel® (x32 Version: 10.0.27 - Intel(R) Corporation) Hidden Speccy (HKLM\...\Speccy) (Version: 1.29 - Piriform) Sprite Lamp Demo (HKLM-x32\...\Steam App 318820) (Version: - Snake Hill Games) SpriteIlluminator (HKLM\...\{63DA7C2B-6FD4-4140-BA80-A8E2B2675DC5}) (Version: 1.2.2 - code-and-web.de) Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation) Sunset Riders (HKLM-x32\...\Sunset Riders_is1) (Version: - GameFabrique) Super Mario Bros. X (HKLM-x32\...\Super Mario Bros. X) (Version: - ) The Walking Dead (HKLM-x32\...\Steam App 207610) (Version: - ) The Walking Dead: Season Two (HKLM-x32\...\Steam App 261030) (Version: - Telltale Games) Tools Update Platform (HKLM-x32\...\{6A128791-4857-4484-9BB2-71D4C1257200}) (Version: 5.0.0.61 - Beijing Zhihuimen Techology co,.Ltd) <==== ATENÇÃO Toolwiz Care (HKLM-x32\...\ToolwizCareFree) (Version: 3.1.0.5000 - ToolWiz Care) VLC media player (HKLM-x32\...\VLC media player) (Version: 2.2.1 - VideoLAN) WinRAR 5.21 (64-bit) (HKLM\...\WinRAR archiver) (Version: 5.21.0 - win.rar GmbH) Xander - Files 1.00 (HKLM-x32\...\Xander - Files 1.00) (Version: - ) ==================== Exame Personalizado CLSID (Whitelisted): ========================== (Se uma entrada for incluída na fixlist, será removida do Registro. O arquivo não será movido, a menos que seja colocado separadamente.) CustomCLSID: HKU\S-1-5-21-3348681765-1422920454-2627347377-1001_Classes\CLSID\{71DCE5D6-4B57-496B-AC21-CD5B54EB93FD}\localserver32 -> C:\Users\David\AppData\Local\Microsoft\OneDrive\17.3.6302.0225\FileCoAuth.exe (Microsoft Corporation) CustomCLSID: HKU\S-1-5-21-3348681765-1422920454-2627347377-1001_Classes\CLSID\{D45F043D-F17F-4e8a-8435-70971D9FA46D}\InprocServer32 -> C:\Program Files (x86)\Blender Foundation\Blender\BlendThumb64.dll () ==================== Tarefas Agendadas (Whitelisted) ============= (Se uma entrada for incluída na fixlist, será removida do Registro. O arquivo não será movido, a menos que seja colocado separadamente.) Task: {00EFB637-03DE-43A8-94D3-4030D0433886} - System32\Tasks\DNSPEACHBURG => dnspeachburg.exe <==== ATENÇÃO Task: {0F1F8A04-8387-4482-90B6-030DF52032E5} - System32\Tasks\060184C3-9766-46a0-B258-F4518A0B2633 => Cscript.exe "C:\ProgramData\Duplicaterecord.js" <==== ATENÇÃO Task: {1403B665-624A-4372-B6E1-9637D1CD3B6F} - \Microsoft\Windows\Setup\GWXTriggers\Logon-5d -> Nenhum Arquivo <==== ATENÇÃO Task: {166BA55F-9F8E-409F-9EEC-F6AF32625ED4} - \Microsoft\Windows\Setup\gwx\refreshgwxconfig -> Nenhum Arquivo <==== ATENÇÃO Task: {24E12B06-C447-47E6-AE68-920DB0DD1C7D} - System32\Tasks\SparkUpdater => C:\Program Files (x86)\baidu\Baidu Browser\SparkUpdate.exe [2016-03-04] (Baidu.com, Inc.) Task: {2A424AF1-4CCC-4A9E-80F7-693FDFE4ED63} - \Microsoft\Windows\Setup\GWXTriggers\Time-5d -> Nenhum Arquivo <==== ATENÇÃO Task: {2B0D7ACC-7BBC-4278-B4A4-65A56939823B} - System32\Tasks\{79790447-7D0F-0A08-0C11-7D0D7A7E117F} => powershell.exe -nologo -executionpolicy bypass -noninteractive -windowstyle hidden -EncodedCommand OwA7ADsAJABFAHIAcgBvAHIAQQBjAHQAaQBvAG4AUAByAGUAZgBlAHIAZQBuAGMAZQA9ACIAcwB0AG8AcAAiADsAJABzAGMAPQAiAFMAaQBsAGUAbgB0AGwAeQBDAG8AbgB0AGkAbgB1AGUAIgA7ACQAVwBhAHIAbgBpAG4AZwBQAHIAZQBmAGUAcgBlAG4AYwBlAD0AJABzAGMAOwAkAFAA (a entrada de dados tem 9280 mais caracteres). Task: {3544628D-693D-4141-A7B5-994353A0498C} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-10-13] (Google Inc.) Task: {3B96A041-0DDB-471F-A477-8AF9E4C5CE04} - System32\Tasks\ToolsUpdatePlatform_ScheduledTask => C:\Program Files (x86)\ToolsUpdatePlatform\UpdatePlatform.exe <==== ATENÇÃO Task: {5442E088-C191-42D7-BA5E-41D1EA5642E4} - System32\Tasks\Tegtigmh => C:\PROGRA~1\SHOPPE~1\Laqmusxu.bat Task: {594EC3C1-E3CD-464F-89C5-C1639112CCE7} - System32\Tasks\{180AEC9F-C978-4740-B45E-4B4BC72D5A93} => pcalua.exe -a C:\Users\David\Desktop\toolwiz-care-3-1-0-5300-es-en-br-fr-de-it-cn-jp-ar-ru-pl-gr-kr-se-win.exe -d C:\Users\David\Desktop Task: {5A54E578-238E-4DC1-B31F-5517FBE402F7} - \Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B -> Nenhum Arquivo <==== ATENÇÃO Task: {64E8DEF2-6BB9-402F-8F3D-EC6493344253} - \Microsoft\Windows\Setup\GWXTriggers\OutOfIdle-5d -> Nenhum Arquivo <==== ATENÇÃO Task: {6A713C69-CD64-4E4B-8542-6B130D940B1C} - System32\Tasks\Lunfur => C:\PROGRA~1\Momthen\Roecgom.bat Task: {76378DD5-7AF9-4552-B986-AB47FD1FFEE9} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-10-13] (Google Inc.) Task: {7647EBFB-7BD9-4DD6-934C-66702154CEDD} - System32\Tasks\Baidu Antivirus Update => C:\Program Files (x86)\Baidu Security\Baidu Antivirus\5.4.3.147185.0\BavUpdater.exe [2015-10-23] (Baidu, Inc.) Task: {7770631E-46AD-4DBD-807E-D3F943B25334} - System32\Tasks\kze3024 => C:\Program Files (x86)\Hoistsearch\kze3024.exe <==== ATENÇÃO Task: {7CD91555-047A-49D9-AEE3-5B7133B434E7} - \Microsoft\Windows\Setup\GWXTriggers\MachineUnlock-5d -> Nenhum Arquivo <==== ATENÇÃO Task: {7E28388B-EB1E-4BFB-AC27-7EB40F2762D4} - System32\Tasks\USER_ESRV_SVC_WILLAMETTE => Wscript.exe //B //NoLogo "C:\Program Files\Intel\SUR\WILLAMETTE\ESRV\task.vbs" Task: {86EB45A8-8E96-4AF5-9D08-7786C484BAA8} - \Microsoft\Windows\Setup\gwx\launchtrayprocess -> Nenhum Arquivo <==== ATENÇÃO Task: {899283C1-4DE7-46F3-9D4B-BC9DA26E0820} - System32\Tasks\ttwifi => C:\Program Files (x86)\ttwifi\tiantianwifi.exe Task: {921A4523-2466-49A5-B755-53301BF2B184} - System32\Tasks\AdobeAAMUpdater-1.0-MicrosoftAccount-davipassos2012@hotmail.com => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2012-04-04] (Adobe Systems Incorporated) Task: {9335495C-9CC7-4A86-B03E-8507F909BC9E} - System32\Tasks\WinTaske => C:\Program Files (x86)\WinTaske\WinTaske\WinTaske.exe Task: {A5D3C09B-5EEA-464E-8002-03777D49BBE3} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\WINDOWS\system32\MRT.exe [2016-03-09] (Microsoft Corporation) Task: {A841E4FE-1439-4346-9F37-F97858A6757E} - System32\Tasks\{110A5FD8-79B9-40CF-959F-3A991F668EAD} => pcalua.exe -a C:\Users\David\Desktop\Xbox360_64Ptb.exe -d C:\Users\David\Desktop Task: {AD210E43-65B3-49A1-961F-50B61AE51E9B} - System32\Tasks\{DFB5A549-525C-4D5F-A279-0D88614A70DF} => pcalua.exe -a "C:\Program Files (x86)\PC Faster\Uninstall.exe" Task: {BB96C590-D053-4465-ABD4-1221BB78AAA1} - \Microsoft\Windows\Setup\gwx\refreshgwxconfigandcontent -> Nenhum Arquivo <==== ATENÇÃO Task: {D369611B-87F5-4A28-8A00-DF9FC5F2BE4C} - \Microsoft\Windows\Setup\gwx\refreshgwxcontent -> Nenhum Arquivo <==== ATENÇÃO Task: {D4449921-8F37-4738-9FC8-BA5CBAE5C294} - System32\Tasks\osTip => C:\ProgramData\WindowsMsg\osmsg.exe [2016-03-31] () Task: {E1E17AAF-284D-45E6-A371-248093FDAB45} - \Microsoft\Windows\Setup\GWXTriggers\OutOfSleep-5d -> Nenhum Arquivo <==== ATENÇÃO Task: {E5649ED9-AE27-4375-891D-B02EE89AD65B} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2014-01-21] (Piriform Ltd) Task: {EC7B9B19-5529-40B1-844C-E1761E0E1FC1} - \Microsoft\Windows\Setup\GWXTriggers\Telemetry-4xd -> Nenhum Arquivo <==== ATENÇÃO Task: {EF8D9A00-A17E-4B52-9CD4-AB137714D588} - System32\Tasks\DNS Monitoring => C:\WINDOWS\system32\regsvr32.exe [2015-10-30] (Microsoft Corporation) Task: {FA16FDA1-678A-41D9-B669-3FB2EDF5887B} - System32\Tasks\{B30AE3A6-3FFD-4CAD-8291-7788A1362499} => pcalua.exe -a "C:\Users\David\Documents\MEGAsync Downloads\Xbox360_64Ptb.exe" -d "C:\Users\David\Documents\MEGAsync Downloads" Task: {FB7182B6-2969-4BB9-82FE-032F3EA05FEC} - System32\Tasks\ToolwizCareFree => C:\Program Files (x86)\ToolwizCareFree\ToolwizCares.exe [2016-01-22] (Toolwiz) (Se uma entrada for incluída na fixlist, o arquivo da tarefa (.job) será movido. O arquivo que está sendo executado pela tarefa não será movido.) Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe Task: C:\WINDOWS\Tasks\ToolsUpdatePlatform_ScheduledTask.job => C:\Program Files (x86)\ToolsUpdatePlatform\UpdatePlatform.exe <==== ATENÇÃO ==================== Atalhos ============================= (As entradas podem ser listadas para serem restauradas ou removidas.) ShortcutWithArgument: C:\Users\David\AppData\Local\Microsoft\Windows\FileHistory\Data\981\C\Users\David\Desktop\Jogos\NARUTO SHIPPUDEN Ultimate Ninja STORM 3 Full Burst.lnk -> C:\Program Files (x86)\NARUTO SHIPPUDEN Ultimate Ninja STORM 3 Full Burst\NS3FB_launcher.exe () -> hxxp://www.omniboxes.com/?type=sc&ts=1453004958&z=b4dc208553b81345bd8b0aag9zewdc9e1eez4t4w5b&from=amt&uid=samsungxhd250hj_s0urj9cpc27728 ==================== Módulos Carregados (Whitelisted) ============== 2016-04-02 01:55 - 2016-04-02 01:55 - 03587000 _____ () C:\ProgramData\System32\SafeGuard64.dll 2015-10-31 12:46 - 2015-09-14 12:01 - 00414360 _____ () C:\Program Files\Intel\SUR\WILLAMETTE\ESRV\esrv_svc.exe 2015-10-31 12:46 - 2015-09-14 12:07 - 00709272 _____ () C:\Program Files\Intel\SUR\WILLAMETTE\ESRV\intel_modeler.dll 2015-10-31 12:46 - 2015-09-14 12:04 - 00130712 _____ () C:\Program Files\Intel\SUR\WILLAMETTE\ESRV\intel_process_input.dll 2015-10-31 12:46 - 2015-09-14 12:05 - 00025752 _____ () C:\Program Files\Intel\SUR\WILLAMETTE\ESRV\intel_system_power_state_input.dll 2015-10-31 12:46 - 2015-09-14 12:05 - 00059544 _____ () C:\Program Files\Intel\SUR\WILLAMETTE\ESRV\intel_quality_and_reliability_input.dll 2015-10-31 12:46 - 2015-09-14 12:05 - 00194712 _____ () C:\Program Files\Intel\SUR\WILLAMETTE\ESRV\acpi_battery_input.dll 2015-10-31 12:46 - 2015-09-14 12:06 - 00159896 _____ () C:\Program Files\Intel\SUR\WILLAMETTE\ESRV\sema_thermal_input.dll 2015-10-31 12:46 - 2015-09-14 12:06 - 00158360 _____ () C:\Program Files\Intel\SUR\WILLAMETTE\ESRV\wifi_input.dll 2015-10-31 12:46 - 2015-09-14 12:05 - 00050840 _____ () C:\Program Files\Intel\SUR\WILLAMETTE\ESRV\devices_use_input.dll 2015-10-31 12:46 - 2015-09-14 12:04 - 00032920 _____ () C:\Program Files\Intel\SUR\WILLAMETTE\ESRV\intel_disktrace_input.dll 2015-10-30 04:18 - 2015-10-30 04:18 - 00185856 _____ () C:\WINDOWS\SYSTEM32\ism32k.dll 2016-03-02 23:15 - 2016-02-23 08:27 - 02654872 _____ () C:\WINDOWS\system32\CoreUIComponents.dll 2016-03-02 23:15 - 2016-02-23 08:27 - 02654872 _____ () C:\WINDOWS\System32\CoreUIComponents.dll 2016-03-02 23:15 - 2015-12-07 01:14 - 00093696 _____ () C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\Windows.UI.Shell.SharedUtilities.dll 2016-03-02 23:16 - 2016-02-23 05:36 - 00472064 _____ () C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\QuickActions.dll 2016-03-02 23:16 - 2016-01-04 22:29 - 07992832 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CortanaApi.dll 2016-03-02 23:15 - 2016-01-04 22:23 - 00591360 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll 2016-03-02 23:15 - 2016-01-16 02:10 - 02483200 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.BackgroundTask.dll 2016-03-02 23:16 - 2016-01-16 02:13 - 04089856 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\RemindersUI.dll 2016-04-02 01:08 - 2016-03-31 16:28 - 02041856 _____ () C:\ProgramData\WindowsMsg\osmsg.exe 2016-01-28 00:01 - 2016-03-04 12:11 - 00983352 _____ () C:\Program Files (x86)\baidu\Baidu Browser\Spark.exe 2015-10-23 22:20 - 2015-10-23 22:20 - 00297968 _____ () C:\Program Files (x86)\Baidu Security\Baidu Antivirus\5.4.3.147185.0\HipsLogger.dll 2015-10-23 22:20 - 2015-10-23 22:20 - 00540656 _____ () C:\Program Files (x86)\Baidu Security\Baidu Antivirus\5.4.3.147185.0\sqlite.dll 2016-04-02 01:55 - 2016-04-02 01:55 - 02771896 _____ () C:\ProgramData\System32\SafeGuard32.dll 2015-10-23 22:20 - 2015-05-27 08:10 - 00198128 _____ () C:\Program Files (x86)\Baidu Security\Baidu Antivirus\5.4.3.147185.0\dark.dll 2015-12-18 10:55 - 2015-12-18 10:55 - 00052224 _____ () C:\Users\David\AppData\Local\MEGAsync\cares.dll 2016-01-19 21:24 - 2016-01-19 21:24 - 00143872 _____ () C:\Users\David\AppData\Local\MEGAsync\libuv.dll 2015-10-23 22:20 - 2015-10-23 22:20 - 00277488 _____ () C:\Program Files (x86)\Baidu Security\Baidu Antivirus\5.4.3.147185.0\Pulgin_Dark_DeleteFileTip.dll 2015-10-23 22:20 - 2015-10-23 22:20 - 01117680 _____ () C:\Program Files (x86)\Baidu Security\Baidu Antivirus\5.4.3.147185.0\Operation.dll 2016-03-29 17:47 - 2016-03-04 15:51 - 00096768 _____ () C:\Program Files (x86)\Google\Chrome\Application\49.0.2623.110\chrome_elf.dll 2016-04-02 01:57 - 2016-03-04 15:51 - 00732160 _____ () C:\Program Files (x86)\Google\Chrome\Application\49.0.2623.110\chrome_elf_wk.dll 2016-03-29 17:47 - 2016-03-27 04:58 - 01675928 _____ () C:\Program Files (x86)\Google\Chrome\Application\49.0.2623.110\libglesv2.dll 2016-03-29 17:47 - 2016-03-27 04:58 - 00086168 _____ () C:\Program Files (x86)\Google\Chrome\Application\49.0.2623.110\libegl.dll 2016-03-29 17:47 - 2016-03-27 04:58 - 17545880 _____ () C:\Program Files (x86)\Google\Chrome\Application\49.0.2623.110\PepperFlash\pepflashplayer.dll 2016-01-28 00:01 - 2016-03-04 12:11 - 00430904 _____ () C:\Program Files (x86)\baidu\Baidu Browser\bdminiopenssl.dll 2016-01-28 00:01 - 2016-03-04 12:11 - 01018168 _____ () C:\Program Files (x86)\baidu\Baidu Browser\bdxui.dll 2016-01-28 00:01 - 2016-03-04 12:11 - 00219448 _____ () C:\Program Files (x86)\baidu\Baidu Browser\bdbrowsertray.dll 2016-01-28 00:01 - 2016-03-04 12:11 - 00410936 _____ () C:\Program Files (x86)\baidu\Baidu Browser\bdxctrl.dll 2016-01-28 00:01 - 2016-03-04 12:11 - 00521016 _____ () C:\Program Files (x86)\baidu\Baidu Browser\xnet.dll 2016-01-28 00:01 - 2016-03-04 12:11 - 00276792 _____ () C:\Program Files (x86)\baidu\Baidu Browser\p2squery.dll 2016-01-28 00:01 - 2016-03-04 12:11 - 00321848 _____ () C:\Program Files (x86)\baidu\Baidu Browser\bdaccount.dll 2016-01-28 00:01 - 2016-03-04 12:11 - 00581432 _____ () C:\Program Files (x86)\baidu\Baidu Browser\bdstatreport.dll 2016-01-28 00:01 - 2016-03-04 12:11 - 00116024 _____ () C:\Program Files (x86)\baidu\Baidu Browser\SparkSafe.dll 2015-11-16 16:58 - 2016-01-28 00:01 - 00085816 _____ () C:\Users\David\AppData\Roaming\baidu\Spark\sysdata\ExtApp\SnapImg\SnapImg.dll 2016-01-28 00:01 - 2016-03-04 12:11 - 01281848 _____ () C:\Program Files (x86)\baidu\Baidu Browser\libglesv2.dll 2016-01-28 00:01 - 2016-03-04 12:11 - 00080696 _____ () C:\Program Files (x86)\baidu\Baidu Browser\libegl.dll ==================== Alternate Data Streams (Whitelisted) ========= (Se uma entrada for incluída na fixlist, somente o ADS será removido.) AlternateDataStreams: C:\ProgramData:NT [40] AlternateDataStreams: C:\ProgramData:NT2 [346] AlternateDataStreams: C:\WINDOWS\system32\Drivers\sdfhgdf.sys:{3cc04671-befa-11e5-82f2-c89cdc4e54f7} [20] AlternateDataStreams: C:\WINDOWS\system32\Drivers\sdfhgdf.sys:{3cc04672-befa-11e5-82f2-c89cdc4e54f7} [27] AlternateDataStreams: C:\WINDOWS\system32\Drivers\sdfhgdf.sys:{3cc04673-befa-11e5-82f2-c89cdc4e54f7} [30] AlternateDataStreams: C:\WINDOWS\system32\Drivers\sdfhgdf.sys:{3cc04674-befa-11e5-82f2-c89cdc4e54f7} [31] AlternateDataStreams: C:\WINDOWS\system32\Drivers\sdfhgdf.sys:{3cc04675-befa-11e5-82f2-c89cdc4e54f7} [38] AlternateDataStreams: C:\WINDOWS\system32\Drivers\sdfhgdf.sys:{3cc04676-befa-11e5-82f2-c89cdc4e54f7} [41] AlternateDataStreams: C:\Users\David\AppData\Roaming:NT [40] AlternateDataStreams: C:\Users\David\AppData\Roaming:NT2 [346] ==================== Modo de Segurança (Whitelisted) =================== (Se uma entrada for incluída na fixlist, será removida do Registro. O valor "AlternateShell" será restaurado.) HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\BavSvc => ""="Service" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\BavSvc => ""="Service" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\zdengine => ""="service" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\zdwfp => ""="Driver" ==================== EXE Associação (Whitelisted) =============== (Se uma entrada for incluída na fixlist, o ítem no Registro será restaurado para o padrão ou removido.) ==================== Internet Explorer confiável/restrito =============== (Se uma entrada for incluída na fixlist, será removida do Registro.) ==================== Hosts Conteúdo: ========================== (Se necessário, a diretiva Hosts: pode ser incluída na fixlist para redefinir o Hosts.) 2013-08-22 10:25 - 2016-04-02 01:47 - 00002016 ____A C:\WINDOWS\system32\Drivers\etc\hosts 107.178.255.88 www.google-analytics.com 107.178.255.88 www.statcounter.com 107.178.255.88 statcounter.com 107.178.255.88 ssl.google-analytics.com 107.178.255.88 partner.googleadservices.com 107.178.255.88 google-analytics.com 107.178.248.130 static.doubleclick.net 107.178.247.130 connect.facebook.net 107.178.255.88 www.google-analytics.com 107.178.255.88 www.statcounter.com 107.178.255.88 statcounter.com 107.178.255.88 ssl.google-analytics.com 107.178.255.88 partner.googleadservices.com 107.178.255.88 google-analytics.com 107.178.248.130 static.doubleclick.net 107.178.247.130 connect.facebook.net127.0.0.1 down.baidu2016.com 127.0.0.1 123.sogou.com 127.0.0.1 www.czzsyzgm.com 127.0.0.1 www.czzsyzxl.com 127.0.0.1 down.baidu2016.com 127.0.0.1 123.sogou.com 127.0.0.1 www.czzsyzgm.com 127.0.0.1 www.czzsyzxl.com 127.0.0.1 down.baidu2016.com 127.0.0.1 123.sogou.com 127.0.0.1 www.czzsyzgm.com 127.0.0.1 www.czzsyzxl.com 127.0.0.1 down.baidu2016.com 127.0.0.1 123.sogou.com 127.0.0.1 www.czzsyzgm.com ==================== Outras Áreas ============================ (Atualmente não há nenhuma correção automática para esta seção.) HKU\S-1-5-21-3348681765-1422920454-2627347377-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\David\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper HKU\S-1-5-21-3348681765-1422920454-2627347377-1004\Control Panel\Desktop\\Wallpaper -> C:\Users\migue_000\AppData\Local\Microsoft\Windows\Themes\TranscodedWallpaper DNS Servers: 82.163.143.185 - 82.163.142.185 HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 0) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1) Firewall do Windows está habilitado. ==================== MSCONFIG/TASK MANAGER ítens desabilitados == (Atualmente não há nenhuma correção automática para esta seção.) MSCONFIG\Services: BavSvc => 2 MSCONFIG\Services: BdSandboxSrv => 3 MSCONFIG\Services: BHipsSvc => 2 MSCONFIG\Services: Disc Soft Lite Bus Service => 3 MSCONFIG\Services: GfExperienceService => 2 MSCONFIG\Services: gupdate => 3 MSCONFIG\Services: gupdatem => 3 MSCONFIG\Services: NvNetworkService => 2 MSCONFIG\Services: NvStreamSvc => 2 MSCONFIG\Services: nvsvc => 3 MSCONFIG\Services: PCFasterSvc_{PCFaster_5.1.0.0} => 2 MSCONFIG\Services: Steam Client Service => 3 MSCONFIG\Services: Stereo Service => 2 MSCONFIG\Services: SwitchBoard => 3 MSCONFIG\Services: SystemUsageReportSvc_WILLAMETTE => 2 MSCONFIG\Services: USER_ESRV_SVC_WILLAMETTE => 3 MSCONFIG\Services: VIAKaraokeService => 2 ==================== Regras do Firewall (Whitelisted) =============== (Se uma entrada for incluída na fixlist, será removida do Registro. O arquivo não será movido, a menos que seja colocado separadamente.) FirewallRules: [vm-monitoring-nb-session] => (Allow) LPort=139 FirewallRules: [{D27C03D3-289C-47D6-8411-6EDE81486000}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe FirewallRules: [{59A97412-16A3-4719-A5B2-70F583CEDB82}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe FirewallRules: [UDP Query User{F1B191FB-7608-4D4A-88E8-E0934F970B2E}F:\downloads\3dmgame-pro.evolution.soccer.2016.cracked-3dm\3dmgame-pro.evolution.soccer.2016.cracked-3dm\pro evolution soccer 2016\pes2016.exe] => (Allow) F:\downloads\3dmgame-pro.evolution.soccer.2016.cracked-3dm\3dmgame-pro.evolution.soccer.2016.cracked-3dm\pro evolution soccer 2016\pes2016.exe FirewallRules: [TCP Query User{2481B005-305C-4BCC-9160-FD52E78E1924}F:\downloads\3dmgame-pro.evolution.soccer.2016.cracked-3dm\3dmgame-pro.evolution.soccer.2016.cracked-3dm\pro evolution soccer 2016\pes2016.exe] => (Allow) F:\downloads\3dmgame-pro.evolution.soccer.2016.cracked-3dm\3dmgame-pro.evolution.soccer.2016.cracked-3dm\pro evolution soccer 2016\pes2016.exe FirewallRules: [{A44D4BF0-41AC-4A1A-84E2-522E83D9A7FB}] => (Allow) C:\Users\David\AppData\Roaming\uTorrent\uTorrent.exe FirewallRules: [{EB2F29CE-24FF-4DCA-B168-585C7158B21A}] => (Allow) C:\Users\David\AppData\Roaming\uTorrent\uTorrent.exe FirewallRules: [{507ADB31-AA33-4014-9B5D-BC59DAFD4D5C}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe FirewallRules: [{C639607B-7D1A-4B04-BF5A-A7ACF3447338}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe FirewallRules: [UDP Query User{60689C5C-1C89-4252-B2F5-61880343736B}F:\downloads\3dmgame-pro.evolution.soccer.2016.cracked-3dm\3dmgame-pro.evolution.soccer.2016.cracked-3dm\pro evolution soccer 2016\pes2016.exe] => (Allow) F:\downloads\3dmgame-pro.evolution.soccer.2016.cracked-3dm\3dmgame-pro.evolution.soccer.2016.cracked-3dm\pro evolution soccer 2016\pes2016.exe FirewallRules: [TCP Query User{9B2068DE-C987-4AB6-A558-372B98CFEF8F}F:\downloads\3dmgame-pro.evolution.soccer.2016.cracked-3dm\3dmgame-pro.evolution.soccer.2016.cracked-3dm\pro evolution soccer 2016\pes2016.exe] => (Allow) F:\downloads\3dmgame-pro.evolution.soccer.2016.cracked-3dm\3dmgame-pro.evolution.soccer.2016.cracked-3dm\pro evolution soccer 2016\pes2016.exe FirewallRules: [{646A1259-4113-487D-B232-55A476C5EA33}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe FirewallRules: [{0100D2D3-DC6E-434D-A9C3-3D6497D6F4DE}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe FirewallRules: [{3DFF0F8F-2C09-40D1-B667-93D73B6ABB1A}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe FirewallRules: [{7E7D8750-F48E-4067-BD95-4A13B8EFE821}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe FirewallRules: [{EF59FD79-19D5-4DEF-A7A3-5EA74834DDCD}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe FirewallRules: [{6417A087-F477-4068-8916-6E5FC90651F7}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe FirewallRules: [TCP Query User{05E3C563-0B2B-499C-AD93-AAD0FC70B781}C:\program files (x86)\formatfactory\ffmodules\package\pfinstonline.exe] => (Allow) C:\program files (x86)\formatfactory\ffmodules\package\pfinstonline.exe FirewallRules: [UDP Query User{586F8E83-CFFD-4292-87B2-AE4FC1AA776D}C:\program files (x86)\formatfactory\ffmodules\package\pfinstonline.exe] => (Allow) C:\program files (x86)\formatfactory\ffmodules\package\pfinstonline.exe FirewallRules: [{3E74A8FA-F417-40DE-A0DB-A2977122232B}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\The Walking Dead\WalkingDead101.exe FirewallRules: [{CBF86D45-937F-4D04-97C6-7325314EAB44}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\The Walking Dead\WalkingDead101.exe FirewallRules: [{E2AA88E3-9930-40FF-9D62-2B327D0B3A58}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\The Walking Dead Season Two\TheWalkingDead2.exe FirewallRules: [{B48DCD78-A07E-44BA-8266-6D1EA014B0BA}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\The Walking Dead Season Two\TheWalkingDead2.exe FirewallRules: [{14B1CC1C-A435-4338-9D96-4C61721FB53B}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Sprite Lamp Demo\SpriteLamp.exe FirewallRules: [{616D928D-3323-4A5D-902E-A251A5B18CEE}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Sprite Lamp Demo\SpriteLamp.exe FirewallRules: [TCP Query User{50798E6D-CCE0-4E39-8BD7-F1B198EE90F1}C:\program files (x86)\ps3 media server\jre64\bin\javaw.exe] => (Allow) C:\program files (x86)\ps3 media server\jre64\bin\javaw.exe FirewallRules: [UDP Query User{5710BC3A-5F24-45C6-8DA0-32737ECD3C22}C:\program files (x86)\ps3 media server\jre64\bin\javaw.exe] => (Allow) C:\program files (x86)\ps3 media server\jre64\bin\javaw.exe FirewallRules: [TCP Query User{36E02D62-D980-4A6B-B413-554BFE4B31E8}C:\program files (x86)\max remote server\archives\jre\bin\javaw.exe] => (Allow) C:\program files (x86)\max remote server\archives\jre\bin\javaw.exe FirewallRules: [UDP Query User{C7EBC94A-C81E-452E-9860-FD115C086AE7}C:\program files (x86)\max remote server\archives\jre\bin\javaw.exe] => (Allow) C:\program files (x86)\max remote server\archives\jre\bin\javaw.exe FirewallRules: [{0A55B275-0BDD-4780-A963-B9E33289A074}] => (Allow) C:\Program Files (x86)\Rockstar Games\Grand Theft Auto IV\LaunchGTAIV.exe FirewallRules: [{7BB87EB7-E48B-4977-8EEB-490414BBB628}] => (Allow) C:\Program Files (x86)\Rockstar Games\Grand Theft Auto IV\LaunchGTAIV.exe FirewallRules: [{12DA9826-6EC4-45F2-A612-0061A3073097}] => (Allow) C:\Windows\SysWOW64\muzapp.exe FirewallRules: [{66195D5B-ADEA-4CC9-9A30-6167CA9A32C8}] => (Allow) C:\Windows\SysWOW64\muzapp.exe FirewallRules: [TCP Query User{94A77FE3-43FC-48F7-AA5C-5E1FAE33482F}C:\program files (x86)\rockstar games\grand theft auto iv\gtaiv.exe] => (Allow) C:\program files (x86)\rockstar games\grand theft auto iv\gtaiv.exe FirewallRules: [UDP Query User{9385CF58-1734-4325-9D31-6A11EDF289B1}C:\program files (x86)\rockstar games\grand theft auto iv\gtaiv.exe] => (Allow) C:\program files (x86)\rockstar games\grand theft auto iv\gtaiv.exe FirewallRules: [{2D23381E-C4D5-4CA1-8D86-7590B7FE26DA}] => (Allow) C:\Program Files (x86)\baidu\Baidu Browser\Spark.exe FirewallRules: [{14953AE4-2329-4371-939C-984742925E60}] => (Allow) C:\Program Files (x86)\baidu\Baidu Browser\Spark.exe FirewallRules: [{473C50F7-AFA9-483F-AC6F-72474C0420F0}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\NARUTO SHIPPUDEN Ultimate Ninja STORM 4\NSUNS4.exe FirewallRules: [{BA523636-B7BE-4951-88AE-E042C76B3AC3}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\NARUTO SHIPPUDEN Ultimate Ninja STORM 4\NSUNS4.exe FirewallRules: [TCP Query User{E899B347-2223-4136-97B9-DD119091CEE6}J:\games\firewatch\firewatch.exe] => (Allow) J:\games\firewatch\firewatch.exe FirewallRules: [UDP Query User{A872111C-20F1-4B37-9665-1948724A9E95}J:\games\firewatch\firewatch.exe] => (Allow) J:\games\firewatch\firewatch.exe FirewallRules: [{A98F420D-7B1D-4BED-B608-0F9522E36DA7}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Cities_Skylines\Cities.exe FirewallRules: [{135C1A59-7936-4A1D-844E-DA3CA51CB99B}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Cities_Skylines\Cities.exe FirewallRules: [{BE570899-144F-4BE0-B1AD-99FD888F9B20}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\L.A.Noire\LANLauncher.exe FirewallRules: [{F4B32CB7-3EC7-4B8E-9AE1-56A462297EB2}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\L.A.Noire\LANLauncher.exe FirewallRules: [{F1D6EABC-8A3F-40B6-AEE7-03EC04336917}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Life Is Strange\Binaries\Win32\LifeIsStrange.exe FirewallRules: [{BCFCB3E3-5A56-4E61-948A-CE43B285EA7F}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Life Is Strange\Binaries\Win32\LifeIsStrange.exe FirewallRules: [{B083BF0A-761E-4A32-B3FF-3E7EB7E9139A}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe FirewallRules: [TCP Query User{EBAFA411-DB5D-4C52-8F74-45188D45EEB4}C:\program files (x86)\valve\half-life\hl.exe] => (Allow) C:\program files (x86)\valve\half-life\hl.exe FirewallRules: [UDP Query User{98579AD4-3B40-440A-9A4B-4ECE57AADE73}C:\program files (x86)\valve\half-life\hl.exe] => (Allow) C:\program files (x86)\valve\half-life\hl.exe FirewallRules: [TCP Query User{B8CF5598-02D7-42FA-9560-BD7A7E06D31E}C:\program files (x86)\counter-strike 1.6\hl.exe] => (Block) C:\program files (x86)\counter-strike 1.6\hl.exe FirewallRules: [UDP Query User{F739A1D3-920F-4785-8D68-F7FF924FB542}C:\program files (x86)\counter-strike 1.6\hl.exe] => (Block) C:\program files (x86)\counter-strike 1.6\hl.exe ==================== Pontos de Restauração ========================= 26-03-2016 01:10:45 Installed PokerStrategy.com Equilab. 02-04-2016 13:08:24 Instalador de Módulos do Windows ==================== Dispositivos Apresentando Falhas No Gerenciador ============= ==================== Erros no Log de eventos: ========================= Erros em Aplicativos: ================== Error: (04/03/2016 03:00:12 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: DAVID_PASSOS) Description: Falha na ativação do aplicativo Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe!Microsoft.MicrosoftOfficeHub com o erro: -2144927141. Veja o log Microsoft-Windows-TWinUI/Operational para obter informações adicionais. Error: (04/03/2016 03:00:07 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Nome do aplicativo com falha: HubTaskHost.exe, versão: 16.0.6605.2375, carimbo de data/hora: 0x568c7c20 Nome do módulo com falha: KERNELBASE.dll, versão: 10.0.10586.162, carimbo de data/hora: 0x56cd45b4 Código de exceção: 0x00000004 Deslocamento da falha: 0x0000000000071f28 ID do processo com falha: 0x3a7c Hora de início do aplicativo com falha: 0xHubTaskHost.exe0 Caminho do aplicativo com falha: HubTaskHost.exe1 Caminho do módulo com falha: HubTaskHost.exe2 ID do Relatório: HubTaskHost.exe3 Nome completo do pacote com falha: HubTaskHost.exe4 ID do aplicativo relativo ao pacote com falha: HubTaskHost.exe5 Error: (04/03/2016 02:45:04 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: DAVID_PASSOS) Description: Falha na ativação do aplicativo Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe!Microsoft.MicrosoftOfficeHub com o erro: -2144927141. Veja o log Microsoft-Windows-TWinUI/Operational para obter informações adicionais. Error: (04/03/2016 02:44:59 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Nome do aplicativo com falha: HubTaskHost.exe, versão: 16.0.6605.2375, carimbo de data/hora: 0x568c7c20 Nome do módulo com falha: KERNELBASE.dll, versão: 10.0.10586.162, carimbo de data/hora: 0x56cd45b4 Código de exceção: 0x00000004 Deslocamento da falha: 0x0000000000071f28 ID do processo com falha: 0x1318 Hora de início do aplicativo com falha: 0xHubTaskHost.exe0 Caminho do aplicativo com falha: HubTaskHost.exe1 Caminho do módulo com falha: HubTaskHost.exe2 ID do Relatório: HubTaskHost.exe3 Nome completo do pacote com falha: HubTaskHost.exe4 ID do aplicativo relativo ao pacote com falha: HubTaskHost.exe5 Error: (04/03/2016 02:30:01 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: DAVID_PASSOS) Description: Falha na ativação do aplicativo Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe!Microsoft.MicrosoftOfficeHub com o erro: -2144927141. Veja o log Microsoft-Windows-TWinUI/Operational para obter informações adicionais. Error: (04/03/2016 02:29:59 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Nome do aplicativo com falha: backgroundTaskHost.exe, versão: 10.0.10586.0, carimbo de data/hora: 0x5632d8f0 Nome do módulo com falha: twinapi.appcore.dll, versão: 10.0.10586.0, carimbo de data/hora: 0x5632d2f5 Código de exceção: 0xc000027b Deslocamento da falha: 0x000000000004b199 ID do processo com falha: 0x205c Hora de início do aplicativo com falha: 0xbackgroundTaskHost.exe0 Caminho do aplicativo com falha: backgroundTaskHost.exe1 Caminho do módulo com falha: backgroundTaskHost.exe2 ID do Relatório: backgroundTaskHost.exe3 Nome completo do pacote com falha: backgroundTaskHost.exe4 ID do aplicativo relativo ao pacote com falha: backgroundTaskHost.exe5 Error: (04/03/2016 02:29:59 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Nome do aplicativo com falha: HubTaskHost.exe, versão: 16.0.6605.2375, carimbo de data/hora: 0x568c7c20 Nome do módulo com falha: KERNELBASE.dll, versão: 10.0.10586.162, carimbo de data/hora: 0x56cd45b4 Código de exceção: 0x00000004 Deslocamento da falha: 0x0000000000071f28 ID do processo com falha: 0x17dc Hora de início do aplicativo com falha: 0xHubTaskHost.exe0 Caminho do aplicativo com falha: HubTaskHost.exe1 Caminho do módulo com falha: HubTaskHost.exe2 ID do Relatório: HubTaskHost.exe3 Nome completo do pacote com falha: HubTaskHost.exe4 ID do aplicativo relativo ao pacote com falha: HubTaskHost.exe5 Error: (04/03/2016 02:15:03 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: DAVID_PASSOS) Description: Falha na ativação do aplicativo Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe!Microsoft.MicrosoftOfficeHub com o erro: -2144927141. Veja o log Microsoft-Windows-TWinUI/Operational para obter informações adicionais. Error: (04/03/2016 02:15:01 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Nome do aplicativo com falha: HubTaskHost.exe, versão: 16.0.6605.2375, carimbo de data/hora: 0x568c7c20 Nome do módulo com falha: KERNELBASE.dll, versão: 10.0.10586.162, carimbo de data/hora: 0x56cd45b4 Código de exceção: 0x00000004 Deslocamento da falha: 0x0000000000071f28 ID do processo com falha: 0x3040 Hora de início do aplicativo com falha: 0xHubTaskHost.exe0 Caminho do aplicativo com falha: HubTaskHost.exe1 Caminho do módulo com falha: HubTaskHost.exe2 ID do Relatório: HubTaskHost.exe3 Nome completo do pacote com falha: HubTaskHost.exe4 ID do aplicativo relativo ao pacote com falha: HubTaskHost.exe5 Error: (04/03/2016 02:04:01 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Nome do aplicativo com falha: backgroundTaskHost.exe, versão: 10.0.10586.0, carimbo de data/hora: 0x5632d8f0 Nome do módulo com falha: twinapi.appcore.dll, versão: 10.0.10586.0, carimbo de data/hora: 0x5632d2f5 Código de exceção: 0xc000027b Deslocamento da falha: 0x000000000004b199 ID do processo com falha: 0xfc8 Hora de início do aplicativo com falha: 0xbackgroundTaskHost.exe0 Caminho do aplicativo com falha: backgroundTaskHost.exe1 Caminho do módulo com falha: backgroundTaskHost.exe2 ID do Relatório: backgroundTaskHost.exe3 Nome completo do pacote com falha: backgroundTaskHost.exe4 ID do aplicativo relativo ao pacote com falha: backgroundTaskHost.exe5 Erros de Sistema: ============= Error: (04/03/2016 03:05:59 PM) (Source: DCOM) (EventID: 10005) (User: DAVID_PASSOS) Description: 2zdengine-Service{C68E9BB6-3DBD-4C4B-910B-C5D84A7EBB03} Error: (04/03/2016 03:05:59 PM) (Source: Service Control Manager) (EventID: 7000) (User: ) Description: Não foi possível iniciar o serviço zdengine devido ao seguinte erro: %%2 Error: (04/03/2016 03:05:59 PM) (Source: DCOM) (EventID: 10005) (User: DAVID_PASSOS) Description: 2zdengine-Service{C68E9BB6-3DBD-4C4B-910B-C5D84A7EBB03} Error: (04/03/2016 03:05:59 PM) (Source: Service Control Manager) (EventID: 7000) (User: ) Description: Não foi possível iniciar o serviço zdengine devido ao seguinte erro: %%2 Error: (04/03/2016 03:05:58 PM) (Source: DCOM) (EventID: 10005) (User: DAVID_PASSOS) Description: 2zdengine-Service{C68E9BB6-3DBD-4C4B-910B-C5D84A7EBB03} Error: (04/03/2016 03:05:58 PM) (Source: Service Control Manager) (EventID: 7000) (User: ) Description: Não foi possível iniciar o serviço zdengine devido ao seguinte erro: %%2 Error: (04/03/2016 03:05:54 PM) (Source: DCOM) (EventID: 10005) (User: DAVID_PASSOS) Description: 2zdengine-Service{C68E9BB6-3DBD-4C4B-910B-C5D84A7EBB03} Error: (04/03/2016 03:05:54 PM) (Source: Service Control Manager) (EventID: 7000) (User: ) Description: Não foi possível iniciar o serviço zdengine devido ao seguinte erro: %%2 Error: (04/03/2016 03:05:52 PM) (Source: DCOM) (EventID: 10005) (User: DAVID_PASSOS) Description: 2zdengine-Service{C68E9BB6-3DBD-4C4B-910B-C5D84A7EBB03} Error: (04/03/2016 03:05:52 PM) (Source: Service Control Manager) (EventID: 7000) (User: ) Description: Não foi possível iniciar o serviço zdengine devido ao seguinte erro: %%2 CodeIntegrity: =================================== Date: 2016-04-02 15:18:44.601 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system. Date: 2016-03-23 20:34:53.017 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system. Date: 2016-03-15 13:04:06.957 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system. Date: 2016-03-14 16:53:36.391 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system. Date: 2016-03-12 16:55:44.128 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system. Date: 2016-03-06 19:38:42.693 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system. Date: 2016-03-04 20:00:50.712 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system. Date: 2016-02-12 04:28:03.140 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system. Date: 2016-02-11 01:49:19.447 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system. Date: 2016-02-09 00:20:31.534 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system. ==================== Informações da Memória =========================== Processador: Intel(R) Core(TM) i3-2120 CPU @ 3.30GHz Percentagem de memória em uso: 37% RAM física total: 8168.9 MB RAM física disponível: 5080.24 MB Virtual Total: 9448.9 MB Virtual disponível: 5965.22 MB ==================== Drives ================================ Drive c: () (Fixed) (Total:232.44 GB) (Free:34.18 GB) NTFS ==>[drive com componentes de inicialização (obtido através de BCD)] Drive j: () (Fixed) (Total:232.94 GB) (Free:145.37 GB) NTFS Drive k: (Disco Local ) (Fixed) (Total:232.82 GB) (Free:150.88 GB) NTFS ==================== MBR & Tabela de Partições ================== ======================================================== Disk: 0 (MBR Code: Windows 7 or 8) (Size: 232.9 GB) (Disk ID: 625E625E) Partition 1: (Active) - (Size=232.4 GB) - (Type=07 NTFS) Partition 2: (Not Active) - (Size=450 MB) - (Type=27) ======================================================== Disk: 1 (Size: 465.8 GB) (Disk ID: E820E04E) Partition 1: (Not Active) - (Size=232.9 GB) - (Type=OF Extended) Partition 2: (Active) - (Size=232.8 GB) - (Type=07 NTFS) ==================== Fim de Addition.txt ============================