Resultado do exame Adicional Farbar Recovery Scan Tool (x64) Versão: 20.06.2018 Executado por silas (14-07-2018 14:54:43) Executando a partir de C:\Users\silas\Desktop Windows 10 Home Single Language Versão 1803 17134.165 (X64) (2018-06-19 19:32:11) Modo da Inicialização: Normal ========================================================== ==================== Contas: ============================= Administrador (S-1-5-21-2181840671-3561481943-960450070-500 - Administrator - Disabled) Convidado (S-1-5-21-2181840671-3561481943-960450070-501 - Limited - Disabled) DefaultAccount (S-1-5-21-2181840671-3561481943-960450070-503 - Limited - Disabled) silas (S-1-5-21-2181840671-3561481943-960450070-1002 - Administrator - Enabled) => C:\Users\silas WDAGUtilityAccount (S-1-5-21-2181840671-3561481943-960450070-504 - Limited - Disabled) ==================== Central de Segurança ======================== (Se uma entrada for incluída na fixlist, será removida.) AV: Avast Antivirus (Enabled - Up to date) {8EA8924E-BC81-DC44-8BB0-8BAE75D86EBF} AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} AV: Malwarebytes (Enabled - Up to date) {23007AD3-69FE-687C-2629-D584AFFAF72B} AS: Malwarebytes (Enabled - Up to date) {98619B37-4FC4-67F2-1C99-EEF6D47DBD96} AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} AS: Avast Antivirus (Enabled - Up to date) {35C973AA-9ABB-D3CA-B100-B0DC0E5F2402} ==================== Programas Instalados ====================== (Somente os programas adwares com a indicação "Oculto" podem ser adicionados à fixlist para desocultá-los. Os programas adwares devem ser desinstalados manualmente.) µTorrent (HKU\S-1-5-21-2181840671-3561481943-960450070-1002\...\uTorrent) (Version: 3.5.3.44494 - BitTorrent Inc.) abFiles (HKLM-x32\...\{13885028-098C-4799-9B71-27DAC96502D5}) (Version: 2.08.2001 - Acer Incorporated) abPhoto (HKLM-x32\...\{B5AD89F2-03D3-4206-8487-018298007DD0}) (Version: 4.00.2001.1 - Acer Incorporated) Acer Care Center (HKLM\...\{1AF41E84-3408-499A-8C93-8891F0612719}) (Version: 2.00.3029 - Acer Incorporated) Acer Collection (HKLM-x32\...\{8CD449EA-BBA0-477F-AFF9-9AF6E8C50EF2}) (Version: 1.01.3011 - Acer Incorporated) Acer Configuration Manager (HKLM-x32\...\{414D554E-4453-454E-0201-000000016258}) (Version: 2.1.16258 - Acer) Acer Portal (HKLM-x32\...\{A5AD0B17-F34D-49BE-A157-C8B3D52ACD13}) (Version: 3.12.2006 - Acer Incorporated) Acer Quick Access (HKLM\...\{8BBF04F1-C68A-441C-B5EF-446EE9960EAF}) (Version: 2.01.3012 - Acer Incorporated) Acer UEIP Framework (HKLM\...\{12A718F2-2357-4D41-9E1F-18583A4745F7}) (Version: 3.03.3000 - Acer Incorporated) Adobe Acrobat Reader DC - Português (HKLM-x32\...\{AC76BA86-7AD7-1046-7B44-AC0F074E4100}) (Version: 18.011.20055 - Adobe Systems Incorporated) Adobe After (HKLM\...\{6A915992-D887-4897-82F5-950EDD12DEB1}) (Version: 1.0.0000 - Adobe Systems Incorporated) Hidden Adobe After Effects CC 2017 (HKLM-x32\...\AEFT_14_0_1) (Version: 14.0.1 - Adobe Systems Incorporated) Adobe Creative Cloud (HKLM-x32\...\Adobe Creative Cloud) (Version: 3.9.1.335 - Adobe Systems Incorporated) Adobe Illustrator CC 2017 (HKLM-x32\...\ILST_21_0_0) (Version: 21.0.0 - Adobe Systems Incorporated) Adobe Photoshop CC 2017 (HKLM-x32\...\PHSP_18_0) (Version: 18.0.0 - Adobe Systems Incorporated) Adobe Premiere (HKLM\...\{C1CB876C-A08E-4692-B525-42848BD154D7}) (Version: 1.0.0000 - Adobe Systems Incorporated) Hidden Adobe Premiere Pro CC 2017 (HKLM-x32\...\PPRO_11_0_1) (Version: 11.0.1 - Adobe Systems Incorporated) Any Video Converter 6.2.4 (HKLM-x32\...\Any Video Converter) (Version: 6.2.4 - Anvsoft) AOP Framework (HKLM-x32\...\{4A37A114-702F-4055-A4B6-16571D4A5353}) (Version: 3.25.2001.0 - Acer Incorporated) App Explorer (HKU\S-1-5-21-2181840671-3561481943-960450070-1002\...\Host App Service) (Version: 0.273.2.800 - SweetLabs) <==== ATENÇÃO Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.) Atualizações da NVIDIA 31.2.0.0 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Update) (Version: 31.2.0.0 - NVIDIA Corporation) Hidden Avast Free Antivirus (HKLM-x32\...\Avast Antivirus) (Version: 18.5.2342 - AVAST Software) Battle.net (HKLM-x32\...\Battle.net) (Version: - Blizzard Entertainment) Bonjour (HKLM\...\{B91110FB-33B4-468B-90C2-4D5E8AE3FAE1}) (Version: 2.0.2.0 - Apple Inc.) CCleaner (HKLM\...\CCleaner) (Version: 5.41 - Piriform) CPUID HWMonitor 1.34 (HKLM\...\CPUID HWMonitor_is1) (Version: 1.34 - ) CyberLink PowerDVD 12 (HKLM-x32\...\InstallShield_{B46BEA36-0B71-4A4E-AE41-87241643FA0A}) (Version: 12.0.5917.02 - CyberLink Corp.) Dashlane Upgrade Service (HKLM-x32\...\Dashlane Upgrade Service) (Version: 2.1.17.0 - Dashlane, Inc.) Discord (HKU\S-1-5-21-2181840671-3561481943-960450070-1002\...\Discord) (Version: 0.0.301 - Discord Inc.) DisplayDriverAnalyzer (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_DisplayDriverAnalyzer) (Version: 398.36 - NVIDIA Corporation) Hidden DriverSetupUtility (HKLM\...\{2B51C83A-465D-4EA9-9CDC-1ED95ED09AC6}) (Version: 1.00.3019 - Acer Incorporated) Google Chrome (HKLM-x32\...\Google Chrome) (Version: 67.0.3396.99 - Google Inc.) Google Update Helper (HKLM-x32\...\{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.33.17 - Google Inc.) Hidden Intel(R) Management Engine Components (HKLM\...\{1CEAC85D-2590-4760-800F-8DE5E91F3700}) (Version: 11.6.0.1025 - Intel Corporation) Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 21.20.16.4534 - Intel Corporation) Intel(R) Rapid Storage Technology (HKLM\...\{409CB30E-E457-4008-9B1A-ED1B9EA21140}) (Version: 15.2.0.1020 - Intel Corporation) Intel(R) Serial IO (HKLM\...\{9FD91C5C-44AE-4D9D-85BE-AE52816B0294}) (Version: 30.100.1633.3 - Intel Corporation) Malwarebytes versão 3.5.1.2522 (HKLM\...\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1) (Version: 3.5.1.2522 - Malwarebytes) Microsoft Office 365 - pt-br (HKLM\...\O365HomePremRetail - pt-br) (Version: 16.0.10228.20104 - Microsoft Corporation) Microsoft OneDrive (HKU\S-1-5-21-2181840671-3561481943-960450070-1002\...\OneDriveSetup.exe) (Version: 18.111.0603.0006 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{071c9b48-7c32-4621-a0ac-3f809523288f}) (Version: 8.0.56336 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.60610 (HKLM-x32\...\{a1909659-0a08-4554-8af1-2175904903a1}) (Version: 11.0.60610.1 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.60610 (HKLM-x32\...\{95716cce-fc71-413f-8ad5-56c2892d4b3a}) (Version: 11.0.60610.1 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation) Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation) Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation) Microsoft Visual C++ 2017 Redistributable (x64) - 14.10.25008 (HKLM-x32\...\{f1e7e313-06df-4c56-96a9-99fdfd149c51}) (Version: 14.10.25008.0 - Microsoft Corporation) Microsoft Visual C++ 2017 Redistributable (x86) - 14.10.25008 (HKLM-x32\...\{c239cea1-d49e-4e16-8e87-8c055765f7ec}) (Version: 14.10.25008.0 - Microsoft Corporation) Microsoft Visual Studio Tools for Applications 2015 (HKLM-x32\...\{dd8b09df-3ef8-49f1-bd1a-65278435860b}) (Version: 14.0.23217 - Microsoft Corporation) Movavi Video Converter 18 Premium (HKLM-x32\...\Movavi Video Converter 18 Premium) (Version: 18.3.1 - Movavi) Mozilla Firefox 56.0 (x86 en-US) (HKLM-x32\...\Mozilla Firefox 56.0 (x86 en-US)) (Version: 56.0 - Mozilla) Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 50.1.0 - Mozilla) NVIDIA Driver de gráficos 398.36 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 398.36 - NVIDIA Corporation) NVIDIA GeForce Experience 3.14.0.139 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 3.14.0.139 - NVIDIA Corporation) NVIDIA Software do sistema PhysX 9.17.0524 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.17.0524 - NVIDIA Corporation) Office 16 Click-to-Run Extensibility Component (HKLM-x32\...\{90160000-008C-0000-0000-0000000FF1CE}) (Version: 16.0.10228.20104 - Microsoft Corporation) Hidden Office 16 Click-to-Run Extensibility Component 64-bit Registration (HKLM\...\{90160000-00DD-0000-1000-0000000FF1CE}) (Version: 16.0.10228.20104 - Microsoft Corporation) Hidden Office 16 Click-to-Run Licensing Component (HKLM\...\{90160000-008F-0000-1000-0000000FF1CE}) (Version: 16.0.10228.20104 - Microsoft Corporation) Hidden Office 16 Click-to-Run Localization Component (HKLM-x32\...\{90160000-008C-0416-0000-0000000FF1CE}) (Version: 16.0.10228.20104 - Microsoft Corporation) Hidden Origin (HKLM-x32\...\Origin) (Version: 10.5.14.38647 - Electronic Arts, Inc.) Painel de controle da NVIDIA 398.36 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.ControlPanel) (Version: 398.36 - NVIDIA Corporation) Hidden Qualcomm Atheros Bluetooth Suite (64) (HKLM\...\{A84A4FB1-D703-48DB-89E0-68B6499D2801}) (Version: 10.0.1.11 - Qualcomm Atheros) Qualcomm Atheros WiFi Driver Installation (HKLM-x32\...\{28006915-2739-4EBE-B5E8-49B25D32EB33}) (Version: 12.75 - Qualcomm Atheros) QuickTime 7 (HKLM-x32\...\{FF59BD75-466A-4D5A-AD23-AAD87C5FD44C}) (Version: 7.79.80.95 - Apple Inc.) Realtek Card Reader (HKLM-x32\...\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}) (Version: 10.0.14393.21292 - Realtek Semiconductor Corp.) Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 10.10.714.2016 - Realtek) Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.8205 - Realtek Semiconductor Corp.) Software de dispositivo do Chipset Intel® (HKLM-x32\...\{bb0592a7-5772-4736-9d55-2402740085db}) (Version: 10.1.1.38 - Intel(R) Corporation) Hidden Spotify (HKU\S-1-5-21-2181840671-3561481943-960450070-1002\...\Spotify) (Version: 1.0.84.344.gfc674f6f - Spotify AB) Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation) Suporte para Aplicativos Apple (HKLM-x32\...\{46F044A5-CE8B-4196-984E-5BD6525E361D}) (Version: 2.3.6 - Apple Inc.) The Crew (Worldwide) (HKLM-x32\...\Uplay Install 413) (Version: - Ubisoft) The Elder Scrolls Online (HKLM-x32\...\The Elder Scrolls Online) (Version: 2.6.3.0 - Zenimax Online Studios) Uplay (HKLM-x32\...\Uplay) (Version: 51.2 - Ubisoft) WinRAR 5.50 (64-bit) (HKLM\...\WinRAR archiver) (Version: 5.50.0 - win.rar GmbH) ==================== Exame Personalizado CLSID (Whitelisted): ========================== (Se uma entrada for incluída na fixlist, será removida do Registro. O arquivo não será movido, a menos que seja colocado separadamente.) CustomCLSID: HKU\S-1-5-21-2181840671-3561481943-960450070-1002_Classes\CLSID\{e8c77137-e224-5791-b6e9-ff0305797a13}\InprocServer32 -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect64.dll (Adobe Systems) ShellIconOverlayIdentifiers: [ AccExtIco1] -> {AB9CF9F8-8A96-4F9D-BF21-CE85714C3A47} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll [2016-10-25] () ShellIconOverlayIdentifiers: [ AccExtIco2] -> {853B7E05-C47D-4985-909A-D0DC5C6D7303} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll [2016-10-25] () ShellIconOverlayIdentifiers: [ AccExtIco3] -> {42D38F2E-98E9-4382-B546-E24E4D6D04BB} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll [2016-10-25] () ShellIconOverlayIdentifiers: [ ACloudSynced] -> {5CCE71FA-9F61-4F24-9CD1-98D819B40D68} => C:\Program Files (x86)\Acer\shellext\x64\shellext_win.dll [2017-10-02] (Acer Incorporated) ShellIconOverlayIdentifiers: [ ACloudSyncing] -> {C1E1456F-C2D8-4C96-870D-35F1E13941EE} => C:\Program Files (x86)\Acer\shellext\x64\shellext_win.dll [2017-10-02] (Acer Incorporated) ShellIconOverlayIdentifiers: [ ACloudToBeSynced] -> {307523FA-DDC0-4068-983F-2A6B34627744} => C:\Program Files (x86)\Acer\shellext\x64\shellext_win.dll [2017-10-02] (Acer Incorporated) ShellIconOverlayIdentifiers: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2018-06-25] (AVAST Software) ContextMenuHandlers1: [AccExt] -> {2A118EB5-5797-4F5E-8B3D-F4ECBA3C98E4} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll [2016-10-25] () ContextMenuHandlers1: [avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2018-06-25] (AVAST Software) ContextMenuHandlers1: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2017-08-11] (Alexander Roshal) ContextMenuHandlers1-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2017-08-11] (Alexander Roshal) ContextMenuHandlers3: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2018-06-25] (AVAST Software) ContextMenuHandlers3: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2018-05-09] (Malwarebytes) ContextMenuHandlers5: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} => -> Nenhum Arquivo ContextMenuHandlers5: [igfxDTCM] -> {9B5F5829-A529-4B12-814A-E81BCB8D93FC} => C:\WINDOWS\System32\DriverStore\FileRepository\igdlh64.inf_amd64_82119d956c80af5a\igfxDTCM.dll [2017-01-05] (Intel Corporation) ContextMenuHandlers5: [NvCplDesktopContext] -> {3D1975AF-48C6-4f8e-A182-BE0E08FA86A9} => C:\WINDOWS\system32\nvshext.dll [2018-06-24] (NVIDIA Corporation) ContextMenuHandlers6: [AccExt] -> {2A118EB5-5797-4F5E-8B3D-F4ECBA3C98E4} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll [2016-10-25] () ContextMenuHandlers6: [avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2018-06-25] (AVAST Software) ContextMenuHandlers6: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2018-05-09] (Malwarebytes) ContextMenuHandlers6: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2017-08-11] (Alexander Roshal) ContextMenuHandlers6-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2017-08-11] (Alexander Roshal) ==================== Tarefas Agendadas (Whitelisted) ============= (Se uma entrada for incluída na fixlist, será removida do Registro. O arquivo não será movido, a menos que seja colocado separadamente.) Task: {063FC697-71CE-4E6F-BCC7-9F73EEB0602A} - System32\Tasks\Acer Collection Application => C:\Program Files (x86)\Acer\Acer Collection\ACEStd.exe [2017-12-14] () Task: {0DBD13DE-2B5A-40FF-A686-068075159471} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [2018-06-30] (Microsoft Corporation) Task: {0FD11FFE-7460-45EB-8922-157F618D8BCE} - System32\Tasks\Microsoft\Windows\Setup\Notifier => C:\WINDOWS\system32\Notifier.exe Task: {1349566A-0717-4B17-A0E8-B91EC73334C6} - System32\Tasks\Quick Access => C:\Program Files\Acer\Acer Quick Access\QALauncher.exe [2017-02-15] (Acer Incorporated) Task: {18C449A2-B0B8-4545-97DB-1C702926195A} - System32\Tasks\Power Button => C:\Program Files\Acer\Acer Quick Access\ePowerButton_NB.exe [2017-02-15] (Acer Incorporated) Task: {1BDEDCA3-95B3-42F7-A7CD-1EE876D43C79} - System32\Tasks\Microsoft\Office\OfficeBackgroundTaskHandlerRegistration => C:\Program Files (x86)\Microsoft Office\root\Office16\officebackgroundtaskhandler.exe [2018-07-12] (Microsoft Corporation) Task: {1F7890CA-4259-4247-B824-C22882CA1A67} - System32\Tasks\ACCBackgroundApplication => C:\Program Files (x86)\Acer\Care Center\ACCStd.exe [2017-05-24] () Task: {2B07F17C-3E1A-4519-993F-04320E5C099A} - System32\Tasks\Intel PTT EK Recertification => C:\Program Files\Intel\iCLS Client\IntelPTTEKRecertification.exe [2016-07-26] (Intel(R) Corporation) Task: {2ECE2501-41EF-47E2-97C3-3F2849725C41} - System32\Tasks\AcerCMUpdateTask2.1.16258 => C:\Program Files (x86)\Acer\Amundsen\2.1.16258\AWC.exe [2016-09-20] () Task: {2FA124BA-2BC8-41A6-98CE-3FF4EE40F571} - System32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\NvNode\nvnodejslauncher.exe [2018-05-20] (NVIDIA Corporation) Task: {2FD1883C-8425-4840-8683-5D62164FD7AA} - System32\Tasks\Microsoft\Office\OfficeBackgroundTaskHandlerLogon => C:\Program Files (x86)\Microsoft Office\root\Office16\officebackgroundtaskhandler.exe [2018-07-12] (Microsoft Corporation) Task: {3C3770E6-C9D2-4140-99A3-A010B5A2C0FA} - System32\Tasks\App Explorer => C:\Users\silas\AppData\Local\Host App Service\Engine\HostAppServiceUpdater.exe [2018-06-19] (SweetLabs, Inc) <==== ATENÇÃO Task: {3C502A14-3701-4389-8361-B668479CB3BD} - System32\Tasks\Acer Collection Monitor Application => C:\Program Files (x86)\Acer\Acer Collection\ACEMon.exe [2017-12-13] (Acer Incorporated) Task: {3DCCF0B8-1D2D-4079-9D4E-141AF4081C11} - System32\Tasks\User Boot Experience Task => C:\OEM\Preload\FUBService\FUBService.exe [2015-05-14] () Task: {430A0B9D-5A6B-4BCF-B0C0-B8DF8D24B687} - System32\Tasks\Avast Software\Overseer => C:\Program Files\Common Files\Avast Software\Overseer\overseer.exe [2018-06-13] (AVAST Software) Task: {4374D316-E42E-4202-AE9C-AF278F9C7F0E} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.) Task: {4796BE51-1CE4-43B1-B023-C3AFAEDE0D2F} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2018-03-06] (Piriform Ltd) Task: {4A9F1444-D714-4A7E-86D0-02D3CA0365E6} - System32\Tasks\NvTmRepCR2_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmRep.exe [2018-05-20] (NVIDIA Corporation) Task: {55C1643E-E6E2-4597-9369-B138E0A876D5} - System32\Tasks\AdobeAAMUpdater-1.0-MicrosoftAccount-silaspedro936@hotmail.com => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2016-07-01] (Adobe Systems Incorporated) Task: {5918AB3B-BB45-4DF4-8BEB-9E28FDE0E792} - System32\Tasks\DashlaneUpgradeCheck => net [Argument = start "Dashlane Upgrade Service"] Task: {62AEA5AA-CB49-4CC4-9861-5158E29B94AF} - System32\Tasks\Software Update Application => C:\ProgramData\OEM\UpgradeTool\ListCheck.exe [2017-02-21] (Acer Incorporated) Task: {644F8C83-CBBF-4233-ABBB-198C581D8795} - System32\Tasks\ACC => C:\Program Files (x86)\Acer\Care Center\LiveUpdateChecker.exe [2017-05-24] () Task: {65B85F6F-35B3-4459-A179-28255D5B7B25} - System32\Tasks\Microsoft\Windows\HelloFace\FODCleanupTask => C:\WINDOWS\System32\WinBioPlugIns\FaceFodUninstaller.exe [2018-04-11] () Task: {754B3F75-AAC9-4499-A9C2-DCFBB435DAAD} - System32\Tasks\AdobeGCInvoker-1.0-MicrosoftAccount-silaspedro936@hotmail.com => C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGCInvokerUtility.exe [2018-05-11] (Adobe Systems, Incorporated) Task: {805148C9-B14B-4E51-A6E1-C995BE1DD040} - System32\Tasks\NvTmRep_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmRep.exe [2018-05-20] (NVIDIA Corporation) Task: {917BC7D8-CFE5-4314-B855-BF599E979871} - System32\Tasks\Microsoft\Office\Office Automatic Updates 2.0 => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [2018-06-30] (Microsoft Corporation) Task: {930C0F12-3D97-4A7B-BAAD-F4342EB3C538} - System32\Tasks\NVIDIA GeForce Experience SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA GeForce Experience.exe [2018-05-20] (NVIDIA Corporation) Task: {98C9660A-D4D3-4BF7-A6B5-400CB621DD3D} - System32\Tasks\NvTmMon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmMon.exe [2018-05-20] (NVIDIA Corporation) Task: {9918731F-D32D-4D32-A2C6-1A32FB16CEF0} - System32\Tasks\NvBatteryBoostCheckOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [2018-05-20] (NVIDIA Corporation) Task: {A2D1F89B-BAC8-409B-85AE-095F4B57DE0D} - System32\Tasks\NvTmRepCR3_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmRep.exe [2018-05-20] (NVIDIA Corporation) Task: {B969CA10-F25B-46DE-A3C0-C81B411D111C} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2018-02-03] (Google Inc.) Task: {BC4AAA3F-9559-4321-AB8F-049C8B1589A6} - System32\Tasks\AcerCloud => C:\Program Files (x86)\Acer\Acer Portal\AcerPortal.exe [2017-10-02] (Acer) Task: {BD41CA40-06CB-46DA-9F3D-5A15D51FF1D1} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2018-03-21] (Adobe Systems Incorporated) Task: {CAEEDD49-AB6B-4F30-80D2-373712B6B5C6} - System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [2018-05-20] (NVIDIA Corporation) Task: {CCBB9494-BD49-4B22-8DE7-0F2FF9817687} - System32\Tasks\Microsoft\Office\OfficeOsfInstaller => C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesCommonX86\Microsoft Shared\Office16\osfinstaller.exe [2018-07-12] (Microsoft Corporation) Task: {CD9B4F85-3E52-444C-9945-103F6B76A308} - System32\Tasks\Avast Emergency Update => C:\Program Files\AVAST Software\Avast\AvEmUpdate.exe [2018-06-25] (AVAST Software) Task: {D5037D3C-C239-49F3-9503-E68F6B7E0868} - System32\Tasks\NvDriverUpdateCheckDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [2018-05-20] (NVIDIA Corporation) Task: {D9263370-CC03-45A0-B57F-8C3677B7C1DF} - System32\Tasks\Microsoft\Office\Office Subscription Maintenance => C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonx86\Microsoft Shared\Office16\OLicenseHeartbeat.exe [2018-07-12] (Microsoft Corporation) Task: {DDACBED7-4D7E-4C72-B244-9633CACE0E79} - System32\Tasks\UbtFrameworkService => C:\Program Files\Acer\User Experience Improvement Program\Framework\TriggerFramework.exe [2017-02-17] (TODO: ) Task: {E5494DCF-18B9-4E18-8D24-352455FD0255} - System32\Tasks\NvTmRepCR1_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmRep.exe [2018-05-20] (NVIDIA Corporation) Task: {EB94B95B-BDF1-4884-9F8D-E6FE9E69BFE7} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2018-02-03] (Google Inc.) Task: {ED7E962B-AF62-40CB-8172-E1476A3F1C61} - System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [2018-05-20] (NVIDIA Corporation) Task: {EE7EB96A-E8EF-4322-B246-27B0A0273B4E} - System32\Tasks\BacKGroundAgent => C:\Program Files (x86)\Acer\AOP Framework\BackgroundAgent.exe [2017-09-26] (Acer Incorporated) Task: {FDB25EB3-B5B5-4F5E-BCE6-2FEB734DE1C4} - System32\Tasks\ACCAgent => C:\Program Files (x86)\Acer\Care Center\LiveUpdateAgent.exe [2017-02-21] () Task: {FDB3D9AE-F8DD-448F-B08B-86817D9BBD81} - System32\Tasks\CCleaner Update => C:\Program Files\CCleaner\CCUpdate.exe [2018-03-06] (Piriform Ltd) (Se uma entrada for incluída na fixlist, o arquivo da tarefa (.job) será movido. O arquivo que está sendo executado pela tarefa não será movido.) ==================== Atalhos & WMI ======================== (As entradas podem ser listadas para serem restauradas ou removidas.) ==================== Módulos Carregados (Whitelisted) ============== 2018-04-11 20:34 - 2018-04-11 20:34 - 000491744 _____ () C:\WINDOWS\SYSTEM32\inputhost.dll 2016-10-25 09:57 - 2016-10-25 09:57 - 000491184 _____ () C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll 2018-04-11 20:34 - 2018-04-11 20:34 - 000472064 _____ () C:\Windows\ShellExperiences\TileControl.dll 2018-04-11 20:34 - 2018-04-11 20:34 - 002759168 _____ () C:\Windows\ShellComponents\TaskFlowUI.dll 2018-05-29 16:10 - 2018-05-20 14:36 - 001315296 _____ () C:\Program Files\NVIDIA Corporation\NvContainer\libprotobuf.dll 2017-12-21 14:40 - 2016-08-15 17:03 - 000111320 _____ () C:\Program Files (x86)\Acer\clear.fi plug-in\Clearfishellext_x64.dll 2018-07-10 17:23 - 2018-07-06 03:55 - 002185728 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll 2018-05-24 20:50 - 2018-05-24 20:50 - 000086528 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_12.1815.209.0_x64__kzf8qxf38zg5c\SkypeHost.exe 2018-05-24 20:50 - 2018-05-24 20:50 - 000195072 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_12.1815.209.0_x64__kzf8qxf38zg5c\SkypeBackgroundTasks.dll 2018-05-24 20:50 - 2018-05-24 20:50 - 022374400 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_12.1815.209.0_x64__kzf8qxf38zg5c\SkyWrap.dll 2018-05-24 20:50 - 2018-05-24 20:50 - 002610176 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_12.1815.209.0_x64__kzf8qxf38zg5c\skypert.dll 2018-05-24 20:50 - 2018-05-24 20:50 - 000654848 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_12.1815.209.0_x64__kzf8qxf38zg5c\RtmMvrUap.dll 2018-06-25 19:36 - 2018-06-22 16:15 - 004608856 _____ () C:\Program Files (x86)\Google\Chrome\Application\67.0.3396.99\libglesv2.dll 2018-06-25 19:36 - 2018-06-22 16:15 - 000099672 _____ () C:\Program Files (x86)\Google\Chrome\Application\67.0.3396.99\libegl.dll 2017-12-14 18:10 - 2017-12-14 18:10 - 000479024 _____ () C:\Program Files (x86)\Acer\Acer Collection\ACEStd.exe 2017-05-24 20:11 - 2017-05-24 20:11 - 004645168 _____ () C:\Program Files (x86)\Acer\Care Center\ACCStd.exe 2018-06-19 16:52 - 2018-06-19 16:53 - 004193792 _____ () C:\Program Files\WindowsApps\Microsoft.WindowsCalculator_10.1805.1201.0_x64__8wekyb3d8bbwe\Calculator.exe 2018-05-03 17:04 - 2018-05-03 17:04 - 000634880 _____ () C:\Program Files\WindowsApps\Microsoft.WindowsCalculator_10.1805.1201.0_x64__8wekyb3d8bbwe\RuntimeConfiguration.dll 2018-07-13 16:46 - 2018-06-18 13:32 - 002433744 _____ () C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\SelfProtectionSdk.dll 2018-07-13 16:46 - 2018-07-03 12:59 - 002535120 _____ () C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\MwacLib.dll 2018-06-10 15:50 - 2018-06-10 15:50 - 000478720 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2018.18041.15530.0_x64__8wekyb3d8bbwe\Microsoft.Photos.exe 2018-06-10 15:50 - 2018-06-10 15:50 - 067232256 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2018.18041.15530.0_x64__8wekyb3d8bbwe\Microsoft.Photos.dll 2018-02-03 20:04 - 2018-02-03 20:24 - 002523136 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2018.18041.15530.0_x64__8wekyb3d8bbwe\UnityEngineDelegates.dll 2018-05-24 20:51 - 2018-05-24 20:53 - 000010752 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2018.18041.15530.0_x64__8wekyb3d8bbwe\RenderingPlugin.dll 2018-05-24 20:51 - 2018-05-24 20:52 - 004214784 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2018.18041.15530.0_x64__8wekyb3d8bbwe\MediaEngineCSWrapper.dll 2018-05-03 17:02 - 2018-05-03 17:03 - 000009216 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2018.18041.15530.0_x64__8wekyb3d8bbwe\ImagePipelineNative.dll 2018-05-24 20:51 - 2018-05-24 20:53 - 000035840 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2018.18041.15530.0_x64__8wekyb3d8bbwe\WinMLWrapper.UWP.dll 2018-03-28 13:40 - 2018-03-28 13:44 - 002283008 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2018.18041.15530.0_x64__8wekyb3d8bbwe\TrackingDLLUWP.dll 2018-06-10 15:50 - 2018-06-10 15:51 - 014851072 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2018.18041.15530.0_x64__8wekyb3d8bbwe\PhotosApp.Windows.dll 2018-05-24 20:51 - 2018-05-24 20:52 - 004058624 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2018.18041.15530.0_x64__8wekyb3d8bbwe\MediaEngine.dll 2018-06-10 15:50 - 2018-06-10 15:50 - 003266048 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2018.18041.15530.0_x64__8wekyb3d8bbwe\AppCore.Windows.dll 2018-05-24 20:51 - 2018-05-24 20:53 - 001393664 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2018.18041.15530.0_x64__8wekyb3d8bbwe\Microsoft.RichMedia.Ink.Controls.dll 2018-05-24 20:51 - 2018-05-24 20:53 - 004218080 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2018.18041.15530.0_x64__8wekyb3d8bbwe\Microsoft.UI.Xaml.dll 2018-05-24 20:51 - 2018-05-24 20:53 - 000872448 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2018.18041.15530.0_x64__8wekyb3d8bbwe\RuntimeConfiguration.dll 2018-06-10 15:50 - 2018-06-10 15:51 - 000165376 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2018.18041.15530.0_x64__8wekyb3d8bbwe\SKU.dll 2018-06-10 15:50 - 2018-06-10 15:50 - 000038912 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2018.18041.15530.0_x64__8wekyb3d8bbwe\ExploreModel.dll 2018-06-10 15:50 - 2018-06-10 15:50 - 000046080 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2018.18041.15530.0_x64__8wekyb3d8bbwe\ImageDecoding.dll 2018-06-29 02:15 - 2018-06-29 02:16 - 027126784 _____ () C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.18052.10711.0_x64__8wekyb3d8bbwe\Video.UI.exe 2018-06-29 02:15 - 2018-06-29 02:16 - 000306176 _____ () C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.18052.10711.0_x64__8wekyb3d8bbwe\SharedUI.dll 2018-06-29 02:15 - 2018-06-29 02:16 - 006735872 _____ () C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.18052.10711.0_x64__8wekyb3d8bbwe\EntCommon.dll 2018-02-03 19:33 - 2018-02-03 19:35 - 003553704 _____ () C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.18052.10711.0_x64__8wekyb3d8bbwe\Microsoft.UI.Xaml.dll 2018-06-29 02:15 - 2018-06-29 02:16 - 009360384 _____ () C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.18052.10711.0_x64__8wekyb3d8bbwe\EntPlat.dll 2018-07-10 21:02 - 2018-07-10 21:02 - 001922224 _____ () C:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_17.10314.31700.0_x64__8wekyb3d8bbwe\Microsoft.Applications.Telemetry.Windows.dll 2017-10-02 13:56 - 2017-10-02 13:56 - 000202456 _____ () C:\Program Files (x86)\Acer\Acer Portal\curllib.dll 2017-10-02 13:56 - 2017-10-02 13:56 - 000119000 _____ () C:\Program Files (x86)\Acer\Acer Portal\OpenLDAP.dll 2017-09-22 14:17 - 2017-09-22 14:17 - 000641312 _____ () C:\Program Files (x86)\Acer\abPhoto\tag.dll 2017-09-22 14:17 - 2017-09-22 14:17 - 000654072 _____ () C:\Program Files (x86)\Acer\abPhoto\sqlite3.dll 2017-09-22 14:14 - 2017-09-22 14:14 - 000202528 _____ () C:\Program Files (x86)\Acer\abPhoto\curllib.dll 2017-09-22 14:16 - 2017-09-22 14:16 - 000119072 _____ () C:\Program Files (x86)\Acer\abPhoto\OpenLDAP.dll 2018-06-19 16:15 - 2018-06-19 16:15 - 000015136 _____ () C:\WINDOWS\assembly\GAC_MSIL\MyService\1.0.0.1__2dfa3f50f0bed57d\MyService.dll 2017-09-26 11:35 - 2017-09-26 11:35 - 000013088 _____ () C:\Program Files (x86)\Acer\AOP Framework\ServiceInterface.dll 2017-09-26 11:34 - 2017-09-26 11:34 - 000277856 _____ () C:\Program Files (x86)\Acer\AOP Framework\libcurl.dll 2018-05-23 05:09 - 2018-05-23 05:09 - 000146448 _____ () C:\Program Files (x86)\Movavi Video Converter 18 Premium\COREMANAGER.DLL 2018-05-23 05:10 - 2018-05-23 05:10 - 000411144 _____ () C:\Program Files (x86)\Movavi Video Converter 18 Premium\MQtUtil.DLL 2018-05-23 05:09 - 2018-05-23 05:09 - 000707592 _____ () C:\Program Files (x86)\Movavi Video Converter 18 Premium\CoreInt.dll 2018-05-23 05:09 - 2018-05-23 05:09 - 001102344 _____ () C:\Program Files (x86)\Movavi Video Converter 18 Premium\ConfInt.dll 2018-05-23 05:09 - 2018-05-23 05:09 - 000809992 _____ () C:\Program Files (x86)\Movavi Video Converter 18 Premium\ProcInt.dll 2018-05-23 05:09 - 2018-05-23 05:09 - 000190472 _____ () C:\Program Files (x86)\Movavi Video Converter 18 Premium\CodecFactory.dll 2018-05-23 05:10 - 2018-05-23 05:10 - 000332304 _____ () C:\Program Files (x86)\Movavi Video Converter 18 Premium\MovaviIO.dll 2018-05-23 05:10 - 2018-05-23 05:10 - 000190992 _____ () C:\Program Files (x86)\Movavi Video Converter 18 Premium\MuxerFactory.dll 2018-05-23 05:10 - 2018-05-23 05:10 - 000163848 _____ () C:\Program Files (x86)\Movavi Video Converter 18 Premium\ParserFactory.dll 2018-05-23 05:10 - 2018-05-23 05:10 - 000140816 _____ () C:\Program Files (x86)\Movavi Video Converter 18 Premium\Policies.dll 2018-05-23 05:09 - 2018-05-23 05:09 - 000326664 _____ () C:\Program Files (x86)\Movavi Video Converter 18 Premium\FilterFactory.dll 2018-05-23 05:10 - 2018-05-23 05:10 - 000152080 _____ () C:\Program Files (x86)\Movavi Video Converter 18 Premium\EffectFactory.dll 2018-05-23 05:10 - 2018-05-23 05:10 - 000137744 _____ () C:\Program Files (x86)\Movavi Video Converter 18 Premium\ComputingResourceManager.dll 2018-05-23 05:10 - 2018-05-23 05:10 - 000183312 _____ () C:\Program Files (x86)\Movavi Video Converter 18 Premium\Threading.dll 2018-05-23 05:10 - 2018-05-23 05:10 - 000107536 _____ () C:\Program Files (x86)\Movavi Video Converter 18 Premium\ASSWrapper.dll 2018-05-23 05:09 - 2018-05-23 05:09 - 000196624 _____ () C:\Program Files (x86)\Movavi Video Converter 18 Premium\MediaTypes.dll 2018-05-23 05:09 - 2018-05-23 05:09 - 000026640 _____ () C:\Program Files (x86)\Movavi Video Converter 18 Premium\boost_system-vc140-mt-1_60.dll 2018-05-23 05:09 - 2018-05-23 05:09 - 000090632 _____ () C:\Program Files (x86)\Movavi Video Converter 18 Premium\libglog-msvc-14.dll 2018-05-23 05:09 - 2018-05-23 05:09 - 000128520 _____ () C:\Program Files (x86)\Movavi Video Converter 18 Premium\boost_filesystem-vc140-mt-1_60.dll 2018-05-23 05:09 - 2018-05-23 05:09 - 000035856 _____ () C:\Program Files (x86)\Movavi Video Converter 18 Premium\boost_chrono-vc140-mt-1_60.dll 2018-05-23 05:09 - 2018-05-23 05:09 - 000543752 _____ () C:\Program Files (x86)\Movavi Video Converter 18 Premium\Settings.dll 2018-05-23 05:09 - 2018-05-23 05:09 - 000099336 _____ () C:\Program Files (x86)\Movavi Video Converter 18 Premium\boost_thread-vc140-mt-1_60.dll 2018-05-23 05:09 - 2018-05-23 05:09 - 000057352 _____ () C:\Program Files (x86)\Movavi Video Converter 18 Premium\boost_date_time-vc140-mt-1_60.dll 2018-05-23 05:10 - 2018-05-23 05:10 - 000780816 _____ () C:\Program Files (x86)\Movavi Video Converter 18 Premium\DataHelpers.dll 2018-05-23 05:09 - 2018-05-23 05:09 - 000716976 _____ () C:\Program Files (x86)\Movavi Video Converter 18 Premium\avutil.dll 2018-05-23 05:09 - 2018-05-23 05:09 - 002493672 _____ () C:\Program Files (x86)\Movavi Video Converter 18 Premium\libass.dll 2018-05-23 05:09 - 2018-05-23 05:09 - 000394768 _____ () C:\Program Files (x86)\Movavi Video Converter 18 Premium\FFWrapper.dll 2018-05-23 05:09 - 2018-05-23 05:09 - 020760176 _____ () C:\Program Files (x86)\Movavi Video Converter 18 Premium\avcodec.dll 2018-05-23 05:09 - 2018-05-23 05:09 - 002883224 _____ () C:\Program Files (x86)\Movavi Video Converter 18 Premium\avformat.dll 2018-05-23 05:10 - 2018-05-23 05:10 - 000134664 _____ () C:\Program Files (x86)\Movavi Video Converter 18 Premium\CoreLocalization.dll 2018-05-23 05:09 - 2018-05-23 05:09 - 000129048 _____ () C:\Program Files (x86)\Movavi Video Converter 18 Premium\libgcc_s_dw2-1.dll 2018-05-23 05:09 - 2018-05-23 05:09 - 003183648 _____ () C:\Program Files (x86)\Movavi Video Converter 18 Premium\avfilter.dll 2018-05-23 05:10 - 2018-05-23 05:10 - 000410640 _____ () C:\Program Files (x86)\Movavi Video Converter 18 Premium\boost_locale-vc140-mt-1_60.dll 2018-05-23 05:09 - 2018-05-23 05:09 - 000648352 _____ () C:\Program Files (x86)\Movavi Video Converter 18 Premium\swscale.dll 2018-05-23 05:09 - 2018-05-23 05:09 - 000240248 _____ () C:\Program Files (x86)\Movavi Video Converter 18 Premium\avresample.dll 2018-05-23 05:09 - 2018-05-23 05:09 - 000194672 _____ () C:\Program Files (x86)\Movavi Video Converter 18 Premium\swresample.dll 2018-05-23 05:09 - 2018-05-23 05:09 - 000726536 _____ () C:\Program Files (x86)\Movavi Video Converter 18 Premium\ClientAPI.dll 2018-05-23 05:10 - 2018-05-23 05:10 - 000129544 _____ () C:\Program Files (x86)\Movavi Video Converter 18 Premium\Demuxers.dll 2018-05-23 05:10 - 2018-05-23 05:10 - 000204304 _____ () C:\Program Files (x86)\Movavi Video Converter 18 Premium\Presets.dll 2018-05-23 05:10 - 2018-05-23 05:10 - 000123912 _____ () C:\Program Files (x86)\Movavi Video Converter 18 Premium\StreamReader.dll 2018-05-23 05:11 - 2018-05-23 05:11 - 005508112 _____ () C:\Program Files (x86)\Movavi Video Converter 18 Premium\Application.dll 2018-05-23 05:11 - 2018-05-23 05:11 - 000083976 _____ () C:\Program Files (x86)\Movavi Video Converter 18 Premium\DesktopNotification.dll 2018-05-23 05:11 - 2018-05-23 05:11 - 000366600 _____ () C:\Program Files (x86)\Movavi Video Converter 18 Premium\CoreApp.dll 2018-05-23 05:11 - 2018-05-23 05:11 - 000257040 _____ () C:\Program Files (x86)\Movavi Video Converter 18 Premium\NagScreen.dll 2018-05-23 05:11 - 2018-05-23 05:11 - 000180752 _____ () C:\Program Files (x86)\Movavi Video Converter 18 Premium\WebBrowser.dll 2018-05-23 05:10 - 2018-05-23 05:10 - 000425992 _____ () C:\Program Files (x86)\Movavi Video Converter 18 Premium\OglManager.dll 2018-05-23 05:11 - 2018-05-23 05:11 - 000062984 _____ () C:\Program Files (x86)\Movavi Video Converter 18 Premium\MQtDownloadManager.dll 2018-05-23 05:11 - 2018-05-23 05:11 - 000048136 _____ () C:\Program Files (x86)\Movavi Video Converter 18 Premium\ResourceUtil.dll 2018-05-23 05:11 - 2018-05-23 05:11 - 000187920 _____ () C:\Program Files (x86)\Movavi Video Converter 18 Premium\quazip.dll 2018-05-23 05:10 - 2018-05-23 05:10 - 000329224 _____ () C:\Program Files (x86)\Movavi Video Converter 18 Premium\glew32.dll 2018-05-23 05:08 - 2018-05-23 05:08 - 000277008 _____ () C:\Program Files (x86)\Movavi Video Converter 18 Premium\OpenglSwitcherAPI.dll 2018-05-23 05:11 - 2018-05-23 05:11 - 000057864 _____ () C:\Program Files (x86)\Movavi Video Converter 18 Premium\CoreTime.dll 2018-05-29 16:10 - 2018-05-20 14:36 - 001033184 _____ () C:\Program Files (x86)\NVIDIA Corporation\NvContainer\libprotobuf.dll 2018-03-09 23:26 - 2018-03-09 23:26 - 067126928 _____ () C:\Program Files\AVAST Software\Avast\libcef.dll 2018-06-25 08:19 - 2018-06-25 08:19 - 000483544 _____ () C:\Program Files\AVAST Software\Avast\streamback.dll 2018-06-25 08:19 - 2018-06-25 08:19 - 000282840 _____ () C:\Program Files\AVAST Software\Avast\gaming_mode_ui.dll 2016-08-29 23:19 - 2016-08-29 23:19 - 001243936 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\ACE.dll ==================== Alternate Data Streams (Whitelisted) ========= (Se uma entrada for incluída na fixlist, somente o ADS será removido.) AlternateDataStreams: C:\Users\silas\OneDrive\Documentos\Adobe:${3D0CE612-FDEE-43f7-8ACA-957BEC0CCBA0}.Metadata [194] AlternateDataStreams: C:\Users\silas\OneDrive\Documentos\Any Video Converter:${3D0CE612-FDEE-43f7-8ACA-957BEC0CCBA0}.Metadata [194] AlternateDataStreams: C:\Users\silas\OneDrive\Documentos\App:${3D0CE612-FDEE-43f7-8ACA-957BEC0CCBA0}.Metadata [194] AlternateDataStreams: C:\Users\silas\OneDrive\Documentos\Corel:${3D0CE612-FDEE-43f7-8ACA-957BEC0CCBA0}.Metadata [194] AlternateDataStreams: C:\Users\silas\OneDrive\Documentos\Data:${3D0CE612-FDEE-43f7-8ACA-957BEC0CCBA0}.Metadata [194] ==================== Modo de Segurança (Whitelisted) =================== (Se uma entrada for incluída na fixlist, será removida do Registro. O valor "AlternateShell" será restaurado.) HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService => ""="Service" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMService => ""="Service" ==================== Associação (Whitelisted) =============== (Se uma entrada for incluída na fixlist, o ítem no Registro será restaurado para o padrão ou removido.) ==================== Internet Explorer confiável/restrito =============== (Se uma entrada for incluída na fixlist, será removida do Registro.) IE trusted site: HKU\S-1-5-21-2181840671-3561481943-960450070-1002\...\localhost -> localhost IE trusted site: HKU\S-1-5-21-2181840671-3561481943-960450070-1002\...\webcompanion.com -> hxxp://webcompanion.com ==================== Hosts Conteúdo: =============================== (Se necessário, a diretiva Hosts: pode ser incluída na fixlist para redefinir o Hosts.) 2016-07-16 08:47 - 2018-07-07 18:30 - 000000826 _____ C:\WINDOWS\system32\Drivers\etc\hosts ==================== Outras Áreas ============================ (Atualmente não há nenhuma correção automática para esta seção.) HKU\S-1-5-21-2181840671-3561481943-960450070-1002\Control Panel\Desktop\\Wallpaper -> C:\Users\silas\AppData\Local\Microsoft\Windows\Themes\RoamedThemeFiles\DesktopBackground\win7 chrome 1920x1200.jpg DNS Servers: 192.168.15.1 HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1) HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: ) Firewall do Windows está habilitado. ==================== MSCONFIG/TASK MANAGER ítens desabilitados == HKLM\...\StartupApproved\Run32: => "Adobe Creative Cloud" HKU\S-1-5-21-2181840671-3561481943-960450070-1002\...\StartupApproved\Run: => "Discord" HKU\S-1-5-21-2181840671-3561481943-960450070-1002\...\StartupApproved\Run: => "CCleaner Monitoring" HKU\S-1-5-21-2181840671-3561481943-960450070-1002\...\StartupApproved\Run: => "Spotify" HKU\S-1-5-21-2181840671-3561481943-960450070-1002\...\StartupApproved\Run: => "Spotify Web Helper" HKU\S-1-5-21-2181840671-3561481943-960450070-1002\...\StartupApproved\Run: => "EADM" ==================== Regras do Firewall (Whitelisted) =============== (Se uma entrada for incluída na fixlist, será removida do Registro. O arquivo não será movido, a menos que seja colocado separadamente.) FirewallRules: [UDP Query User{0746EDD2-2894-4FA3-8744-FE8BEBB6D86B}C:\users\silas\desktop\gclauncher.new.exe] => (Allow) C:\users\silas\desktop\gclauncher.new.exe FirewallRules: [TCP Query User{967FB4F9-5135-4FB4-A9FF-39261273DE74}C:\users\silas\desktop\gclauncher.new.exe] => (Allow) C:\users\silas\desktop\gclauncher.new.exe FirewallRules: [{5BDFE2F2-8F61-43BC-A0B9-95A0435C5866}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe FirewallRules: [{5F5972BD-D151-40F6-9465-A8B1133ABC17}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe FirewallRules: [{6EEBE951-B50B-4390-A16C-A3EA12719817}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe FirewallRules: [{F6BF8CC0-04B5-486A-A0DF-7B4F72DFF3CB}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe FirewallRules: [{A2DB3263-49D3-49C2-B9D1-A854F955422E}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe FirewallRules: [{1E0452C9-2098-4E32-A3C1-200EC4A60EF3}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe FirewallRules: [{F2926796-4D9D-4553-9E27-CD3A6C316D96}] => (Allow) %systemroot%\system32\alg.exe FirewallRules: [UDP Query User{95AE6F84-A990-4311-8C9F-CD961F0EFAFE}C:\users\silas\onedrive\área de trabalho\gclauncher.exe] => (Allow) C:\users\silas\onedrive\área de trabalho\gclauncher.exe FirewallRules: [TCP Query User{EC755958-50CB-41F5-8B9B-9131F7B2874E}C:\users\silas\onedrive\área de trabalho\gclauncher.exe] => (Allow) C:\users\silas\onedrive\área de trabalho\gclauncher.exe FirewallRules: [UDP QUERY USER{97D5841C-DCD3-4A61-BBEA-615D8EB4EAD2}C:\USERS\SILAS\ONEDRIVE\ÁREA DE TRABALHO\GCLAUNCHER.NEW.EXE] => (Allow) C:\users\silas\onedrive\área de trabalho\gclauncher.new.exe FirewallRules: [TCP QUERY USER{B3A6EF2D-2028-4DF7-97CD-97EA221474A2}C:\USERS\SILAS\ONEDRIVE\ÁREA DE TRABALHO\GCLAUNCHER.NEW.EXE] => (Allow) C:\users\silas\onedrive\área de trabalho\gclauncher.new.exe FirewallRules: [{FA0EDD24-2FD9-41E1-972E-0E22EB95E32C}] => (Block) C:\users\silas\onedrive\área de trabalho\gclauncher.new.exe FirewallRules: [{699814DB-C646-432F-9232-74CF0291952A}] => (Block) C:\users\silas\onedrive\área de trabalho\gclauncher.new.exe FirewallRules: [UDP Query User{54919B07-EEC1-4963-8F98-AA7409DFB917}C:\program files (x86)\origin games\fifa 18\fifa18.exe] => (Allow) C:\program files (x86)\origin games\fifa 18\fifa18.exe FirewallRules: [TCP Query User{E2FCA7A6-7DAA-4811-868C-5C648222600C}C:\program files (x86)\origin games\fifa 18\fifa18.exe] => (Allow) C:\program files (x86)\origin games\fifa 18\fifa18.exe FirewallRules: [UDP Query User{98B6F819-7AEA-4905-8CBA-E618F2D56BFD}C:\program files (x86)\steam\steamapps\common\pubg\tslgame\binaries\win64\tslgame.exe] => (Block) C:\program files (x86)\steam\steamapps\common\pubg\tslgame\binaries\win64\tslgame.exe FirewallRules: [TCP Query User{460BCA60-D427-4AFB-A8A5-21FFDEAC6B56}C:\program files (x86)\steam\steamapps\common\pubg\tslgame\binaries\win64\tslgame.exe] => (Block) C:\program files (x86)\steam\steamapps\common\pubg\tslgame\binaries\win64\tslgame.exe FirewallRules: [{5ADF8CE3-690D-4FDF-BD3C-82A0B45DDAEF}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Left 4 Dead 2\left4dead2.exe FirewallRules: [{94107A2A-4657-4CFF-83AB-1B8233129C43}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Left 4 Dead 2\left4dead2.exe FirewallRules: [{360A0802-FCD6-4E5B-8AD4-6D06EFB825DC}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Zenimax Online\zosSteamStarter.exe FirewallRules: [{0F89EAB7-6651-46D3-82F4-DEE02C7CA815}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Zenimax Online\zosSteamStarter.exe FirewallRules: [{A1A8428A-B3E0-457B-B9F7-B8F1E84E46E3}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Skyrim\SkyrimLauncher.exe FirewallRules: [{8AA97936-9D51-4124-8776-F9C7873D831C}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Skyrim\SkyrimLauncher.exe FirewallRules: [{8E454FA2-28DC-4ED4-A094-7BFA1945A104}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\MK10\Binaries\Retail\MKXLauncher.exe FirewallRules: [{DDB2147C-8848-479D-852F-AB1F2654791B}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\MK10\Binaries\Retail\MKXLauncher.exe FirewallRules: [{6216732D-BD77-49BB-B794-4750A7A505B8}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\MK10\Binaries\Retail\MK10.exe FirewallRules: [{882E943F-3179-460C-A6EB-BE87C4FA7A66}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\MK10\Binaries\Retail\MK10.exe FirewallRules: [{FC18FE96-78DE-41A1-A2D3-3729597FB9A0}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Batman Arkham Knight\Binaries\Win64\BatmanAK.exe FirewallRules: [{A46B7C4F-4E58-42EA-BF93-B6E7CE72B4BE}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Batman Arkham Knight\Binaries\Win64\BatmanAK.exe FirewallRules: [{1C40AABB-8C03-42CD-A901-EB067F4763D1}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Batman Arkham Origins\Online\Binaries\Win32\BatmanOriginsOnline.exe FirewallRules: [{ECA8D4ED-8695-4AC0-A8CA-95A69CF22756}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Batman Arkham Origins\Online\Binaries\Win32\BatmanOriginsOnline.exe FirewallRules: [{8ECE1F2E-F2F6-48AF-94A0-FB7907773B39}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Batman Arkham Origins\SinglePlayer\Binaries\Win32\BatmanOrigins.exe FirewallRules: [{2DEADA33-34D1-4C5F-A017-3EC2F024E4E7}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Batman Arkham Origins\SinglePlayer\Binaries\Win32\BatmanOrigins.exe FirewallRules: [{D0F69F06-9B3D-4A8E-ACE7-5EE2A4B6CF7D}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Batman Arkham Origins Blackgate HD\Bin\Game.exe FirewallRules: [{8A26EBD8-B205-4BCC-BA83-01978307F9EC}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Batman Arkham Origins Blackgate HD\Bin\Game.exe FirewallRules: [{69BCDAB6-12F6-4B0E-865C-1F38F0177105}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Batman Arkham City GOTY\Binaries\Win32\BatmanAC.exe FirewallRules: [{87979099-823B-42B8-86AF-8CBB360894C4}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Batman Arkham City GOTY\Binaries\Win32\BatmanAC.exe FirewallRules: [{DBE2A474-3878-4F6D-BC2B-B0DB215AF5D3}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Batman Arkham Asylum GOTY\Binaries\BmLauncher.exe FirewallRules: [{5D05C069-507E-4C5F-A053-35FBBC248DDB}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Batman Arkham Asylum GOTY\Binaries\BmLauncher.exe FirewallRules: [UDP Query User{B16EE0EA-3B86-4CC7-81AC-CE977A3BDBDF}C:\users\silas\appdata\roaming\spotify\spotify.exe] => (Block) C:\users\silas\appdata\roaming\spotify\spotify.exe FirewallRules: [TCP Query User{E3FA91E3-2DCD-4167-943C-1A39381A333B}C:\users\silas\appdata\roaming\spotify\spotify.exe] => (Block) C:\users\silas\appdata\roaming\spotify\spotify.exe FirewallRules: [{B8199425-0E6D-4DB0-AB92-44D04F4E2D7C}] => (Allow) C:\Program Files (x86)\Microsoft Office\root\Office16\outlook.exe FirewallRules: [{E0AEB41A-CD88-4C8A-B4BD-240448E6B189}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\PUBG\TslGame\Binaries\Win64\TslGame_BE.exe FirewallRules: [{8EA31E6B-6550-4734-8230-522D4876CDC1}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\PUBG\TslGame\Binaries\Win64\TslGame_BE.exe FirewallRules: [{785277C2-0487-4A47-8DD7-18315C249ABA}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Counter-Strike Global Offensive\csgo.exe FirewallRules: [{E408DB4B-5361-4829-8D04-65CA7AB1B6C5}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Counter-Strike Global Offensive\csgo.exe FirewallRules: [{866B13F5-247F-424D-8090-49EC0164D81E}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe FirewallRules: [{0D4B0394-15A6-4484-A139-320C2B37B7C7}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe FirewallRules: [{D2FFBED0-C6BC-4BB3-AC3F-3C54A0A9CAD9}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe FirewallRules: [{5582D02D-025E-491F-8C9C-14D7AE8A0979}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe FirewallRules: [{D1B684F5-6A49-4B81-AF96-C9CF9290D091}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe FirewallRules: [{B8CC6D5D-841E-4C70-8723-58DBF8200EA3}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe FirewallRules: [{95C99B9F-FCA2-479F-862B-048E3FAFF90C}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\NvContainer.exe FirewallRules: [{6AC7A925-9D7E-4827-ADC4-62183E727EC8}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\NvContainer.exe FirewallRules: [{C0CAD662-EDD0-4A9B-83B2-66819FFC665B}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe FirewallRules: [{99566575-FA68-44B5-B82E-AD71E6BC494F}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe FirewallRules: [{851F256A-9BDA-4E0B-B7C0-7890CD268739}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe FirewallRules: [{9A0D9765-214A-4D5D-9E98-6054AA968A7D}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe FirewallRules: [{E01B3FB6-8589-48A3-ADA5-3A2CA486020F}] => (Allow) C:\Program Files (x86)\CyberLink\PowerDVD12\PowerDVD12.exe FirewallRules: [{1FC1AD2E-B4CF-47A8-80FB-659E568E3D27}] => (Allow) C:\Program Files (x86)\CyberLink\PowerDVD12\PowerDVD12ML.exe FirewallRules: [{E5A44527-76A0-41D8-A149-26C8206DD0C5}] => (Allow) C:\Program Files (x86)\CyberLink\PowerDVD12\Movie\PowerDVD.exe FirewallRules: [{1EB3E9F7-9F35-4B5B-8255-D9E519FF79A9}] => (Allow) C:\Program Files (x86)\Acer\AOP Framework\acer\ccd.exe FirewallRules: [{4E9DD1E7-D20D-42E7-991B-4D3EB8CCE2DA}] => (Allow) C:\Program Files (x86)\Acer\AOP Framework\acer\ccd.exe FirewallRules: [{9F9729F5-AACC-4A23-A995-DE7F2F0F706D}] => (Allow) C:\Program Files (x86)\Acer\abPhoto\DMCDaemon.exe FirewallRules: [{D574E604-341E-4E67-BA8E-4A038575407F}] => (Allow) C:\Program Files (x86)\Acer\abPhoto\DMCDaemon.exe FirewallRules: [{217705CA-044E-45E2-9A7B-735E592EE0CC}] => (Allow) C:\Program Files (x86)\Acer\abPhoto\WindowsUpnp.exe FirewallRules: [{89BF3B27-D169-49E8-A42A-2A8727CCD77F}] => (Allow) C:\Program Files (x86)\Acer\abPhoto\WindowsUpnp.exe FirewallRules: [{74F91B8B-2418-4E41-83A7-55121D2D05A4}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe FirewallRules: [{787836C5-904E-4336-BB68-2E5145E4BBA8}] => (Allow) C:\Program Files (x86)\Common Files\Apple\Apple Application Support\WebKit2WebProcess.exe FirewallRules: [{8D8A0E14-65B5-49AC-A77D-559EFBFE3242}] => (Allow) C:\Program Files\AVAST Software\Avast\AvEmUpdate.exe FirewallRules: [{7535739E-8FFB-44C8-A656-3E73638A5C23}] => (Allow) C:\Program Files\AVAST Software\Avast\AvEmUpdate.exe ==================== Pontos de Restauração ========================= 09-07-2018 19:50:56 Ponto de Verificação Agendado 13-07-2018 13:48:50 Installed QuickTime 7 ==================== Dispositivos Apresentando Falhas No Gerenciador ============= ==================== Erros no Log de eventos: ========================= Erros em Aplicativos: ================== Error: (07/14/2018 02:21:14 PM) (Source: Office 2016 Licensing Service) (EventID: 0) (User: ) Description: Event-ID 0 Error: (07/14/2018 02:18:19 PM) (Source: Bonjour Service) (EventID: 100) (User: ) Description: mDNSCoreReceiveResponse: Reseting to Probing: 16 LAPTOP-FTMPPFAM.local. AAAA FE80:0000:0000:0000:D529:9FA3:C8CC:448C Error: (07/14/2018 02:18:19 PM) (Source: Bonjour Service) (EventID: 100) (User: ) Description: mDNSCoreReceiveResponse: Received from 192.168.15.8:5353 4 LAPTOP-FTMPPFAM.local. Addr 192.168.15.8 Error: (07/14/2018 02:18:19 PM) (Source: Bonjour Service) (EventID: 100) (User: ) Description: mDNSCoreReceiveResponse: Reseting to Probing: 16 LAPTOP-FTMPPFAM.local. AAAA 2804:0431:D735:BB0F:89FC:58DE:DDEF:5F68 Error: (07/14/2018 02:18:19 PM) (Source: Bonjour Service) (EventID: 100) (User: ) Description: mDNSCoreReceiveResponse: Received from 192.168.15.8:5353 4 LAPTOP-FTMPPFAM.local. Addr 192.168.15.8 Error: (07/14/2018 02:18:19 PM) (Source: Bonjour Service) (EventID: 100) (User: ) Description: mDNSCoreReceiveResponse: Reseting to Probing: 16 LAPTOP-FTMPPFAM.local. AAAA 2804:0431:D735:BB0F:D529:9FA3:C8CC:448C Error: (07/14/2018 02:18:19 PM) (Source: Bonjour Service) (EventID: 100) (User: ) Description: mDNSCoreReceiveResponse: Received from 192.168.15.8:5353 4 LAPTOP-FTMPPFAM.local. Addr 192.168.15.8 Error: (07/14/2018 02:18:19 PM) (Source: Bonjour Service) (EventID: 100) (User: ) Description: mDNSCoreReceiveResponse: Reseting to Probing: 4 LAPTOP-FTMPPFAM.local. Addr 169.254.68.140 Erros de Sistema: ============= Error: (07/14/2018 02:21:03 PM) (Source: DCOM) (EventID: 10016) (User: AUTORIDADE NT) Description: As configurações de permissão específico do aplicativo não concedem permissão Local Ativação para o aplicativo de Servidor COM com CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} e APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} ao usuário AUTORIDADE NT\SERVIÇO LOCAL SID (S-1-5-19) do endereço LocalHost (Usando LRPC) que está sendo executado no contêiner de aplicativos Não Disponível SID (Não Disponível). Essa permissão de segurança pode ser modificada com a ferramenta administrativa Serviços de Componentes. Error: (07/14/2018 02:18:16 PM) (Source: DCOM) (EventID: 10016) (User: AUTORIDADE NT) Description: As configurações de permissão específico do aplicativo não concedem permissão Local Ativação para o aplicativo de Servidor COM com CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} e APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} ao usuário AUTORIDADE NT\SERVIÇO LOCAL SID (S-1-5-19) do endereço LocalHost (Usando LRPC) que está sendo executado no contêiner de aplicativos Não Disponível SID (Não Disponível). Essa permissão de segurança pode ser modificada com a ferramenta administrativa Serviços de Componentes. Error: (07/13/2018 04:56:23 PM) (Source: Service Control Manager) (EventID: 7034) (User: ) Description: O serviço Avast Antivirus foi encerrado inesperadamente. Isso aconteceu 4 vez(es). Error: (07/13/2018 04:55:18 PM) (Source: Service Control Manager) (EventID: 7031) (User: ) Description: O serviço Avast Antivirus foi finalizado inesperadamente. Isto aconteceu 3 vez(es). A seguinte ação corretiva será tomada em 5000 milissegundos: Executar o programa de recuperação configurado. Error: (07/13/2018 04:55:07 PM) (Source: Service Control Manager) (EventID: 7031) (User: ) Description: O serviço Avast Antivirus foi finalizado inesperadamente. Isto aconteceu 2 vez(es). A seguinte ação corretiva será tomada em 5000 milissegundos: Reiniciar o serviço. Error: (07/13/2018 04:54:12 PM) (Source: Service Control Manager) (EventID: 7031) (User: ) Description: O serviço Avast Antivirus foi finalizado inesperadamente. Isto aconteceu 1 vez(es). A seguinte ação corretiva será tomada em 5000 milissegundos: Reiniciar o serviço. Error: (07/13/2018 04:40:26 PM) (Source: DCOM) (EventID: 10016) (User: AUTORIDADE NT) Description: As configurações de permissão específico do aplicativo não concedem permissão Local Ativação para o aplicativo de Servidor COM com CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} e APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} ao usuário AUTORIDADE NT\SERVIÇO LOCAL SID (S-1-5-19) do endereço LocalHost (Usando LRPC) que está sendo executado no contêiner de aplicativos Não Disponível SID (Não Disponível). Essa permissão de segurança pode ser modificada com a ferramenta administrativa Serviços de Componentes. Error: (07/13/2018 04:34:41 PM) (Source: DCOM) (EventID: 10016) (User: AUTORIDADE NT) Description: As configurações de permissão específico do aplicativo não concedem permissão Local Ativação para o aplicativo de Servidor COM com CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} e APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} ao usuário AUTORIDADE NT\SERVIÇO LOCAL SID (S-1-5-19) do endereço LocalHost (Usando LRPC) que está sendo executado no contêiner de aplicativos Não Disponível SID (Não Disponível). Essa permissão de segurança pode ser modificada com a ferramenta administrativa Serviços de Componentes. Windows Defender: =================================== Date: 2018-07-13 16:35:26.049 Description: O Windows Defender Antivirus encontrou um erro ao atualizar assinaturas. Versão da Nova Assinatura: Versão da Assinatura Anterior: 1.261.728.0 Origem da Atualização: Centro de Proteção contra Malware da Microsoft Tipo de Assinatura: Antivírus Tipo de Atualização: Completa Usuário: AUTORIDADE NT\SERVIÇO DE REDE Versão do Mecanismo Atual: Versão do Mecanismo Anterior: 1.1.14500.5 Código de erro: 0x80072ee7 Descrição do erro: O nome ou o endereço do servidor não pôde ser resolvido Date: 2018-07-13 16:35:26.049 Description: O Windows Defender Antivirus encontrou um erro ao atualizar assinaturas. Versão da Nova Assinatura: Versão da Assinatura Anterior: 1.261.728.0 Origem da Atualização: Centro de Proteção contra Malware da Microsoft Tipo de Assinatura: Anti-spyware Tipo de Atualização: Completa Usuário: AUTORIDADE NT\SERVIÇO DE REDE Versão do Mecanismo Atual: Versão do Mecanismo Anterior: 1.1.14500.5 Código de erro: 0x80072ee7 Descrição do erro: O nome ou o endereço do servidor não pôde ser resolvido Date: 2018-07-13 16:35:26.049 Description: O Windows Defender Antivirus encontrou um erro ao atualizar assinaturas. Versão da Nova Assinatura: Versão da Assinatura Anterior: 1.261.728.0 Origem da Atualização: Centro de Proteção contra Malware da Microsoft Tipo de Assinatura: Antivírus Tipo de Atualização: Completa Usuário: AUTORIDADE NT\SERVIÇO DE REDE Versão do Mecanismo Atual: Versão do Mecanismo Anterior: 1.1.14500.5 Código de erro: 0x80072ee7 Descrição do erro: O nome ou o endereço do servidor não pôde ser resolvido Date: 2018-07-13 16:35:25.932 Description: O Windows Defender Antivirus encontrou um erro ao atualizar assinaturas. Versão da Nova Assinatura: Versão da Assinatura Anterior: 1.261.728.0 Origem da Atualização: Servidor do Microsoft Update Tipo de Assinatura: Antivírus Tipo de Atualização: Completa Usuário: AUTORIDADE NT\SISTEMA Versão do Mecanismo Atual: Versão do Mecanismo Anterior: 1.1.14500.5 Código de erro: 0x80240438 Descrição do erro: Erro inesperado ao verificar atualizações. Para obter informações sobre como instalar ou solucionar problemas de atualizações, consulte Ajuda e Suporte. Date: 2018-07-13 16:25:26.069 Description: O Windows Defender Antivirus encontrou um erro ao atualizar assinaturas. Versão da Nova Assinatura: Versão da Assinatura Anterior: 1.261.728.0 Origem da Atualização: Centro de Proteção contra Malware da Microsoft Tipo de Assinatura: Antivírus Tipo de Atualização: Completa Usuário: AUTORIDADE NT\SERVIÇO DE REDE Versão do Mecanismo Atual: Versão do Mecanismo Anterior: 1.1.14500.5 Código de erro: 0x80072ee7 Descrição do erro: O nome ou o endereço do servidor não pôde ser resolvido CodeIntegrity: =================================== Date: 2018-07-13 16:47:12.644 Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files (x86)\Google\Chrome\Application\chrome.exe) attempted to load \Device\HarddiskVolume3\Program Files\Malwarebytes\Anti-Malware\mbae64.dll that did not meet the Microsoft signing level requirements. ==================== Informações da Memória =========================== Processador: Intel(R) Core(TM) i7-7500U CPU @ 2.70GHz Percentagem de memória em uso: 41% RAM física total: 16252.22 MB RAM física disponível: 9574.39 MB Virtual Total: 18684.22 MB Virtual disponível: 11399.57 MB ==================== Drives ================================ Drive c: (Acer) (Fixed) (Total:1861.9 GB) (Free:1379.19 GB) NTFS \\?\Volume{7b4bb61c-d40d-444b-9797-32d4064f4e4a}\ (Recovery) (Fixed) (Total:1 GB) (Free:0.61 GB) NTFS \\?\Volume{1d92fab5-3a20-49a4-b3f6-dbd468922681}\ (ESP) (Fixed) (Total:0.09 GB) (Free:0.05 GB) FAT32 ==================== MBR & Tabela de Partições ================== ======================================================== Disk: 0 (Size: 1863 GB) (Disk ID: F1CDE2CB) Partition: GPT. ==================== Fim de Addition.txt ============================