Resultado da Correção pela Farbar Recovery Scan Tool (x64) Versão: 20-04-2017 Executado por gilvando 123 (21-04-2017 21:19:08) Run:1 Executando a partir de C:\Users\gilvando 123\Desktop Perfis Carregados: gilvando 123 (Perfis Disponíveis: gilvando 123) Modo da Inicialização: Normal ============================================== fixlist Conteúdo: ***************** start CloseProcesses: GroupPolicy: Restrição <======= ATENÇÃO HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.bing.com/search?FORM=INCOH1&PC=IC05&PTAG=ICO-1a93f666 HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.bing.com/search?FORM=INCOH1&PC=IC05&PTAG=ICO-1a93f666 HKU\S-1-5-21-3069889820-3373727436-1154643513-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://go.microsoft.com/fwlink/?LinkID=617912&ResetID=131256316377583497&GUID=385C27E7-C8E6-42CF-AE2A-211906E52609 HKU\S-1-5-21-3069889820-3373727436-1154643513-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://oem.msn.com/?pc=NMJB SearchScopes: HKLM -> DefaultScope {9AE482A6-FAD9-45DD-BB8F-EFD5F4CF9CC3} URL = hxxp://www.bing.com/search?FORM=INCOH2&PC=IC05&PTAG=ICO-1a93f666&q={searchTerms} SearchScopes: HKLM -> {9AE482A6-FAD9-45DD-BB8F-EFD5F4CF9CC3} URL = hxxp://www.bing.com/search?FORM=INCOH2&PC=IC05&PTAG=ICO-1a93f666&q={searchTerms} SearchScopes: HKLM-x32 -> DefaultScope {9AE482A6-FAD9-45DD-BB8F-EFD5F4CF9CC3} URL = hxxp://www.bing.com/search?FORM=INCOH2&PC=IC05&PTAG=ICO-1a93f666&q={searchTerms} SearchScopes: HKLM-x32 -> {9AE482A6-FAD9-45DD-BB8F-EFD5F4CF9CC3} URL = hxxp://www.bing.com/search?FORM=INCOH2&PC=IC05&PTAG=ICO-1a93f666&q={searchTerms} SearchScopes: HKU\S-1-5-21-3069889820-3373727436-1154643513-1001 -> DefaultScope {9AE482A6-FAD9-45DD-BB8F-EFD5F4CF9CC3} URL = SearchScopes: HKU\S-1-5-21-3069889820-3373727436-1154643513-1001 -> {d4fee3d1-1014-4db8-a824-573bf9ab51c7} URL = hxxp://www.bing.com/search?FORM=INCOH2&PC=IC05&PTAG=ICO-1a93f666&q={searchTerms} CHR Extension: (Avast SafePrice) - C:\Users\gilvando 123\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\eofcbnmajmjmplflapaojjnihcjkigck [2017-04-21] S3 DIRECTIO; \??\C:\wst2\programs\BurnInTest\DirectIo64.sys [X] 2014-02-12 08:08 - 2014-02-12 08:08 - 0510976 _____ () C:\ProgramData\DRV10.tmp 2014-02-12 08:08 - 2014-02-12 08:08 - 5501952 _____ (OEM) C:\ProgramData\E1010.tmp Task: {379A44B0-2093-460A-B5C4-82C3C9CCD154} - System32\Tasks\R@1n-KMS\Office16ProPlus => wmic Task: {74A54BEC-362D-4336-A81A-FE4BD788079E} - \Bing Search Engine midar -> Nenhum Arquivo <==== ATENÇÃO Task: {B2FC3329-70C9-4D7F-81B8-AE1EC027306F} - System32\Tasks\R@1n-KMS\Windows62CoreSingleLanguage => wmic Task: {BEB08BDC-250B-430C-A1F1-2CB6FDE93565} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2017-02-02] (Adobe Systems Incorporated) Task: {FBD22CB5-EC4A-4F9D-A6AD-D9D39E63F3BC} - System32\Tasks\{28FCC88A-7956-A95B-0AC9-138ECE70F77F} => C:\Users\GILVAN~1\AppData\Roaming\UPDATE~1\sync.exe <==== ATENÇÃO Task: C:\Windows\Tasks\{28FCC88A-7956-A95B-0AC9-138ECE70F77F}.job => C:\Users\GILVAN~1\AppData\Roaming\UPDATE~1\sync.exe <==== ATENÇÃO ShortcutWithArgument: C:\Users\gilvando 123\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\ImplicitAppShortcuts\69639df789022856\Google Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> --profile-directory="Profile 1" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\94192485.sys => ""="Driver" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\mcpltsvc => ""="" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\94192485.sys => ""="Driver" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mcpltsvc => ""="" C:\Windows\Tasks\{28FCC88A-7956-A95B-0AC9-138ECE70F77F}.job CreateRestorePoint: EmptyTemp: Reboot: end ***************** Processos fechados com sucesso. C:\Windows\system32\GroupPolicy\Machine => movido com sucesso C:\Windows\system32\GroupPolicy\GPT.ini => movido com sucesso C:\Windows\SysWOW64\GroupPolicy\GPT.ini => movido com sucesso HKLM\Software\\Microsoft\Internet Explorer\Main\\Start Page => valor restaurado com sucesso HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main\\Start Page => valor restaurado com sucesso HKU\S-1-5-21-3069889820-3373727436-1154643513-1001\Software\Microsoft\Internet Explorer\Main\\Start Page => valor restaurado com sucesso HKU\S-1-5-21-3069889820-3373727436-1154643513-1001\Software\Microsoft\Internet Explorer\Main\\Default_Page_URL => valor restaurado com sucesso HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => valor restaurado com sucesso HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{9AE482A6-FAD9-45DD-BB8F-EFD5F4CF9CC3} => chave removido (a) com sucesso. HKCR\CLSID\{9AE482A6-FAD9-45DD-BB8F-EFD5F4CF9CC3} => chave não encontrado (a). HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => valor restaurado com sucesso HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{9AE482A6-FAD9-45DD-BB8F-EFD5F4CF9CC3} => chave removido (a) com sucesso. HKCR\Wow6432Node\CLSID\{9AE482A6-FAD9-45DD-BB8F-EFD5F4CF9CC3} => chave não encontrado (a). HKU\S-1-5-21-3069889820-3373727436-1154643513-1001\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => valor removido (a) com sucesso. HKU\S-1-5-21-3069889820-3373727436-1154643513-1001\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{d4fee3d1-1014-4db8-a824-573bf9ab51c7} => chave removido (a) com sucesso. HKCR\CLSID\{d4fee3d1-1014-4db8-a824-573bf9ab51c7} => chave não encontrado (a). C:\Users\gilvando 123\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\eofcbnmajmjmplflapaojjnihcjkigck => movido com sucesso HKLM\System\CurrentControlSet\Services\DIRECTIO => chave removido (a) com sucesso. DIRECTIO => serviço removido (a) com sucesso. C:\ProgramData\DRV10.tmp => movido com sucesso C:\ProgramData\E1010.tmp => movido com sucesso HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{379A44B0-2093-460A-B5C4-82C3C9CCD154} => chave removido (a) com sucesso. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{379A44B0-2093-460A-B5C4-82C3C9CCD154} => chave removido (a) com sucesso. C:\Windows\System32\Tasks\R@1n-KMS\Office16ProPlus => movido com sucesso HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\R@1n-KMS\Office16ProPlus => chave removido (a) com sucesso. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{74A54BEC-362D-4336-A81A-FE4BD788079E} => chave removido (a) com sucesso. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{74A54BEC-362D-4336-A81A-FE4BD788079E} => chave removido (a) com sucesso. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Bing Search Engine midar => chave removido (a) com sucesso. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{B2FC3329-70C9-4D7F-81B8-AE1EC027306F} => chave removido (a) com sucesso. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{B2FC3329-70C9-4D7F-81B8-AE1EC027306F} => chave removido (a) com sucesso. C:\Windows\System32\Tasks\R@1n-KMS\Windows62CoreSingleLanguage => movido com sucesso HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\R@1n-KMS\Windows62CoreSingleLanguage => chave removido (a) com sucesso. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{BEB08BDC-250B-430C-A1F1-2CB6FDE93565} => chave removido (a) com sucesso. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{BEB08BDC-250B-430C-A1F1-2CB6FDE93565} => chave removido (a) com sucesso. C:\Windows\System32\Tasks\Adobe Acrobat Update Task => movido com sucesso HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Adobe Acrobat Update Task => chave removido (a) com sucesso. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{FBD22CB5-EC4A-4F9D-A6AD-D9D39E63F3BC} => chave removido (a) com sucesso. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{FBD22CB5-EC4A-4F9D-A6AD-D9D39E63F3BC} => chave removido (a) com sucesso. C:\Windows\System32\Tasks\{28FCC88A-7956-A95B-0AC9-138ECE70F77F} => movido com sucesso HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{28FCC88A-7956-A95B-0AC9-138ECE70F77F} => chave removido (a) com sucesso. C:\Windows\Tasks\{28FCC88A-7956-A95B-0AC9-138ECE70F77F}.job => movido com sucesso C:\Users\gilvando 123\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\ImplicitAppShortcuts\69639df789022856\Google Chrome.lnk => Atalho argumento removido (a) com sucesso.. HKLM\System\CurrentControlSet\Control\SafeBoot\Minimal\94192485.sys => chave removido (a) com sucesso. HKLM\System\CurrentControlSet\Control\SafeBoot\Minimal\mcpltsvc => chave removido (a) com sucesso. HKLM\System\CurrentControlSet\Control\SafeBoot\Network\94192485.sys => chave removido (a) com sucesso. HKLM\System\CurrentControlSet\Control\SafeBoot\Network\mcpltsvc => chave removido (a) com sucesso. "C:\Windows\Tasks\{28FCC88A-7956-A95B-0AC9-138ECE70F77F}.job" => não encontrado (a). Ponto de Restauração criado com sucesso. =========== EmptyTemp: ========== BITS transfer queue => 12582912 B DOMStore, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 10678488 B Java, Flash, Steam htmlcache => 506 B Windows/system/drivers => 64742826 B Edge => 0 B Chrome => 26767731 B Firefox => 86741454 B Opera => 0 B Temp, IE cache, history, cookies, recent: Default => 0 B Users => 0 B ProgramData => 0 B Public => 0 B systemprofile => 128 B systemprofile32 => 0 B LocalService => 824 B NetworkService => 0 B gilvando 123 => 170813491 B RecycleBin => 4903 B EmptyTemp: => 355.1 MB de dados temporários Removidos. ================================ O sistema precisou ser reiniciado. ==== Fim de Fixlog 21:21:02 ====