Publicité
Publicité
Format du document : text/plain
Prévisualisation
Resultado do exame Adicional Farbar Recovery Scan Tool (x64) Versão: 09-08-2016 01
Executado por Jaumm (2016-08-09 20:53:00)
Executando a partir de C:\Users\Jaumm\Downloads
Windows 7 Professional (X64) (2016-07-07 02:17:47)
Modo da Inicialização: Normal
==========================================================
==================== Contas: =============================
Administrador (S-1-5-21-1054260350-965703613-2792248110-500 - Administrator - Disabled)
Convidado (S-1-5-21-1054260350-965703613-2792248110-501 - Limited - Disabled)
Jaumm (S-1-5-21-1054260350-965703613-2792248110-1000 - Administrator - Enabled) => C:\Users\Jaumm
==================== Central de Segurança ========================
(Se uma entrada for incluída na fixlist, será removida.)
AS: Windows Defender (Enabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
==================== Programas Instalados ======================
(Somente os programas adwares com a indicação "Oculto" podem ser adicionados à fixlist para desocultá-los. Os programas adwares devem ser desinstalados manualmente.)
µTorrent (HKU\S-1-5-21-1054260350-965703613-2792248110-1000\...\uTorrent) (Version: 3.4.7.42330 - BitTorrent Inc.)
Age of Mythology (HKLM-x32\...\Age of Mythology 1.0) (Version: - )
BlueStacks App Player (HKLM-x32\...\BlueStacks) (Version: 2.3.41.6601 - BlueStack Systems, Inc.)
BrasMU Season 9 Battle Core (HKLM-x32\...\BrasMU Season 9 Battle Core) (Version: - )
Cisco EAP-FAST Module (HKLM-x32\...\{64BF0187-F3D2-498B-99EA-163AF9AE6EC9}) (Version: 2.2.14 - Cisco Systems, Inc.)
Cisco LEAP Module (HKLM-x32\...\{51C7AD07-C3F6-4635-8E8A-231306D810FE}) (Version: 1.0.19 - Cisco Systems, Inc.)
Cisco PEAP Module (HKLM-x32\...\{ED5776D5-59B4-46B7-AF81-5F2D94D7C640}) (Version: 1.1.6 - Cisco Systems, Inc.)
Corel Graphics - Windows Shell Extension (HKLM\...\_{EBDC2D0D-1E26-4EF2-BB48-C7E18F7800C6}) (Version: 16.0.0.707 - Corel Corporation)
Corel Graphics - Windows Shell Extension (Version: 16.0.707 - Corel Corporation) Hidden
Corel Graphics - Windows Shell Extension 32 Bit (Version: 16.0.707 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X6 - BR (x64) (Version: 16.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X6 - Capture (x64) (Version: 16.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X6 - Common (x64) (Version: 16.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X6 - Connect (x64) (Version: 16.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X6 - Custom Data (x64) (Version: 16.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X6 - Draw (x64) (Version: 16.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X6 - Filters (x64) (Version: 16.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X6 - FontNav (x64) (Version: 16.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X6 - IPM (Version: 16.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X6 - PHOTO-PAINT (x64) (Version: 16.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X6 - Photozoom Plugin (x64) (Version: 16.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X6 - Redist (x64) (Version: 16.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X6 - Setup Files (x64) (Version: 16.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X6 - VBA (x64) (Version: 16.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X6 - VideoBrowser (x64) (Version: 16.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X6 - VSTA (x64) (Version: 16.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X6 - Writing Tools (x64) (Version: 16.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X6 (64-Bit) (HKLM\...\_{BDBFAC49-8877-472F-876B-75ADB7DBC955}) (Version: 16.0.0.707 - Corel Corporation)
CorelDRAW Graphics Suite X6 (x64) (Version: 16.0 - Corel Corporation) Hidden
Counter-Strike 1.6 (HKU\S-1-5-21-1054260350-965703613-2792248110-1000\...\Counter-Strike 1.6) (Version: - )
DAEMON Tools Lite (HKLM\...\DAEMON Tools Lite) (Version: 10.4.0.0192 - Disc Soft Ltd)
Foxit Reader (HKLM-x32\...\Foxit Reader_is1) (Version: 8.0.0.624 - Foxit Software Inc.)
GameSpy Arcade (HKLM-x32\...\GameSpy Arcade) (Version: - )
Genymotion version 2.7.0 (HKLM\...\{6D180286-D4DF-40EF-9227-923B9C07C08A}_is1) (Version: 2.7.0 - Genymobile)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 52.0.2743.116 - Google Inc.)
Google Update Helper (x32 Version: 1.3.31.5 - Google Inc.) Hidden
HeroesMu Season 8 Episodio 3 (HKLM-x32\...\HeroesMu Season 8 Episodio 3) (Version: Season 8 Episodio 3 - Heroes Networks)
Hot Virtual Keyboard (HKLM\...\{0F896F26-E9C0-4331-BB90-28CDDA490C93}_is1) (Version: 8.4.1.0 - Comfort Software Group)
Hotkey 3.2003 (HKLM-x32\...\InstallShield_{164714B6-46BC-4649-9A30-A6ED32F03B5A}) (Version: 3.20.03 - NoteBook)
Hotkey 3.2003 (x32 Version: 3.20.03 - NoteBook) Hidden
Intel Security True Key (HKLM\...\TrueKey) (Version: 4.4.135.1 - Intel Security)
Intel(R) Graphics Media Accelerator Driver (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 8.15.10.2104 - Intel Corporation)
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 6.0.0.1179 - Intel Corporation)
JMicron Ethernet Adapter NDIS Driver (HKLM-x32\...\{96DCEE2F-98EE-4F80-8C0F-7C04D1FB9D7F}) (Version: 6.0.14.11 - JMicron Technology Corp.)
JMicron JMB38X Flash Media Controller (HKLM-x32\...\{26604C7E-A313-4D12-867F-7C6E7820BE4C}) (Version: 1.0.34.2 - JMicron Technology Corp.)
LunaticMu - Ex803 versão 1.0.0.2 (HKLM-x32\...\{572EE351-7F80-4422-B4B3-4F161251ABC6}_is1) (Version: 1.0.0.2 - Servidores LunaticMu, Inc.)
Medal of Honor Allied Assault(tm) Breakthrough Demo (HKLM-x32\...\{A9CEAAB2-B5C7-40F3-AA6E-D07F5DD76E55}) (Version: - )
MEGAsync (HKLM-x32\...\MEGAsync) (Version: - Mega Limited)
MEmu (HKLM-x32\...\{CA42170D-90AC-4578-A858-C851D886B82B}) (Version: 2.8.18.1800 - Brotsoft technology co., limited.)
Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual Studio Tools for Applications 2.0 - ENU (HKLM-x32\...\{AA4A4B2C-0465-3CF8-BA76-27A027D8ACAB}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual Studio Tools for Applications 2.0 Runtime (HKLM-x32\...\{299C0434-4F4E-341F-A916-4E07AEB35E79}) (Version: 9.0.30729 - Microsoft Corporation)
MSXML4 Parser (HKLM-x32\...\{01501EBA-EC35-4F9F-8889-3BE346E5DA13}) (Version: 1.0.0 - Microsoft Game Studios)
MU Freya Season 6.4 (HKLM-x32\...\MU Freya Season 6.4) (Version: Season 6.4 - HEXMU SERVER)
Mu Online LA - Season 6 EP3 (HKU\S-1-5-21-1054260350-965703613-2792248110-1000\...\Mu Online LA - Season 6 EP3) (Version: - )
Mu Ruby Season 4 (HKLM-x32\...\Mu Ruby Season 4) (Version: - )
MuonlineEvo versão Seasson 6 (HKLM-x32\...\{597EBDCC-7732-46F9-A777-EAEEA850181E}_is1) (Version: Seasson 6 - Lande Online)
MuZen (HKLM-x32\...\MuZen) (Version: 1.04Z Season 4 - By ADM_Renis)
Oracle VM VirtualBox 5.0.4 (HKLM\...\{FC191F32-1A67-4231-91D0-0059A57C99A8}) (Version: 5.0.4 - Oracle Corporation)
Pacote de Idiomas do Microsoft .NET Framework 4 Client Profile - Português (Brasil) (HKLM\...\Microsoft .NET Framework 4 Client Profile PTB Language Pack) (Version: 4.0.30319 - Microsoft Corporation)
Pacote de Idiomas do Microsoft .NET Framework 4 Extended - Português (Brasil) (HKLM\...\Microsoft .NET Framework 4 Extended PTB Language Pack) (Version: 4.0.30319 - Microsoft Corporation)
Platform (x32 Version: 1.34 - VIA Technologies, Inc.) Hidden
RaidCall (HKLM-x32\...\RaidCall) (Version: 7.3.8-1.0.3150.5 - raidcall.com.ru)
REALTEK Wireless LAN Driver (HKLM-x32\...\{}) (Version: 1.02.0203 - REALTEK Semiconductor Corp.)
REALTEK Wireless LAN Driver (HKLM-x32\...\{9D3D8C60-A55F-4fed-B2B9-173F09590E16}) (Version: 1.00.0136 - REALTEK Semiconductor Corp.)
Skype™ 7.25 (HKLM-x32\...\{FC965A47-4839-40CA-B618-18F486F042C6}) (Version: 7.25.106 - Skype Technologies S.A.)
Sygate Personal Firewall (HKLM-x32\...\{F34D9A5F-484A-4E31-A9D3-908CB265B289}) (Version: 5.6.2808 - Sygate Technologies, Inc.)
Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 13.2.3.0 - Synaptics Incorporated)
Vegas Pro 13.0 (64-bit) (HKLM\...\{D0360940-CCC6-11E3-B9C6-F04DA23A5C58}) (Version: 13.0.310 - Sony)
VIA Gerenciador de dispositivo de plataforma (HKLM-x32\...\InstallShield_{20D4A895-748C-4D88-871C-FDB1695B0169}) (Version: 1.34 - VIA Technologies, Inc.)
WinRAR 5.31 (64-bit) (HKLM\...\WinRAR archiver) (Version: 5.31.0 - win.rar GmbH)
Wondershare MobileGo(Version 8.2.3) (HKLM-x32\...\{1E04C795-7359-4E05-8A0E-5644F777AA09}_is1) (Version: 8.2.3 - Wondershare)
Xtreme Season 9 (HKLM-x32\...\Xtreme Season 9) (Version: - )
==================== Exame Personalizado CLSID (Whitelisted): ==========================
(Se uma entrada for incluída na fixlist, será removida do Registro. O arquivo não será movido, a menos que seja colocado separadamente.)
==================== Tarefas Agendadas (Whitelisted) =============
(Se uma entrada for incluída na fixlist, será removida do Registro. O arquivo não será movido, a menos que seja colocado separadamente.)
Task: {00BEE4D7-CE8E-4FAC-A97E-DBFBCF6BF3FA} - System32\Tasks\UDP Manager Task => C:\Program Files (x86)\UDP Manager\udpmgr.exe [2016-02-20] ()
Task: {0F5C63DB-1A7C-4E00-BCAB-D9BBE685BB47} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2016-07-07] (Google Inc.)
Task: {2A90847C-83BD-4FBE-B1F1-C5A7D6A6BC30} - System32\Tasks\UDP Manager => C:\Users\Jaumm\AppData\Roaming\udpmgr.exe [2016-02-20] () <==== ATENÇÃO
Task: {75F81B87-F0FB-45A0-AAE8-4E180FB9D8ED} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2016-07-07] (Google Inc.)
(Se uma entrada for incluída na fixlist, o arquivo da tarefa (.job) será movido. O arquivo que está sendo executado pela tarefa não será movido.)
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
==================== Atalhos =============================
(As entradas podem ser listadas para serem restauradas ou removidas.)
ShortcutWithArgument: C:\Users\Jaumm\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Aplicativos do Google Chrome\Vysor.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> --profile-directory=Default --app-id=gidgenkbbabolejbgbpnhbimgjbffefm
==================== Módulos Carregados (Whitelisted) ==============
2014-05-01 11:13 - 2016-07-20 21:11 - 00592384 _____ () C:\Users\Jaumm\AppData\Local\MEGAsync\ShellExtX64.dll
2016-08-09 18:19 - 2016-08-02 20:41 - 02366280 _____ () C:\Program Files (x86)\Google\Chrome\Application\52.0.2743.116\libglesv2.dll
2016-08-09 18:19 - 2016-08-02 20:40 - 00107848 _____ () C:\Program Files (x86)\Google\Chrome\Application\52.0.2743.116\libegl.dll
2016-08-04 00:48 - 1666-02-11 08:56 - 00697144 _____ () C:\Program Files (x86)\Simcake\2.8.18.1800\SimcakeAss.dll
2016-08-04 00:48 - 1666-02-11 08:56 - 00110760 _____ () C:\Program Files (x86)\Simcake\2.8.18.1800\UGCore.dll
2004-10-15 18:32 - 2004-10-15 18:32 - 01385712 _____ () C:\Program Files (x86)\Sygate\SPF\tse.dll
2004-10-15 18:32 - 2004-10-15 18:32 - 00890088 _____ () C:\Program Files (x86)\Sygate\SPF\SpNet.dll
2004-10-15 18:32 - 2004-10-15 18:32 - 00832744 _____ () C:\Program Files (x86)\Sygate\SPF\SyLink.dll
==================== Alternate Data Streams (Whitelisted) =========
(Se uma entrada for incluída na fixlist, somente o ADS será removido.)
==================== Modo de Segurança (Whitelisted) ===================
(Se uma entrada for incluída na fixlist, será removida do Registro. O valor "AlternateShell" será restaurado.)
==================== Associação (Whitelisted) ===============
(Se uma entrada for incluída na fixlist, o ítem no Registro será restaurado para o padrão ou removido.)
==================== Internet Explorer confiável/restrito ===============
(Se uma entrada for incluída na fixlist, será removida do Registro.)
==================== Hosts Conteúdo: ===============================
(Se necessário, a diretiva Hosts: pode ser incluída na fixlist para redefinir o Hosts.)
2009-07-13 23:34 - 2016-08-01 20:08 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts
==================== Outras Áreas ============================
(Atualmente não há nenhuma correção automática para esta seção.)
HKU\S-1-5-21-1054260350-965703613-2792248110-1000\Control Panel\Desktop\\Wallpaper ->
DNS Servers: 192.168.25.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Firewall do Windows está habilitado.
==================== MSCONFIG/TASK MANAGER ítens desabilitados ==
(Atualmente não há nenhuma correção automática para esta seção.)
MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Hotkey.lnk => C:\Windows\pss\Hotkey.lnk.CommonStartup
MSCONFIG\startupfolder: C:^Users^Jaumm^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^MEGAsync.lnk => C:\Windows\pss\MEGAsync.lnk.Startup
MSCONFIG\startupreg: 1 => C:\Users\Jaumm\AppData\Roaming\udpmgr.exe
MSCONFIG\startupreg: BlueStacks Agent => C:\Program Files (x86)\Bluestacks\HD-Agent.exe
MSCONFIG\startupreg: DAEMON Tools Lite Automount => "C:\Program Files\DAEMON Tools Lite\DTAgent.exe" -autorun
MSCONFIG\startupreg: HDAudDeck => C:\Program Files (x86)\VIA\VIAudioi\VDeck\VDeck.exe -r
MSCONFIG\startupreg: Skype => "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun
MSCONFIG\startupreg: SmcService => C:\PROGRA~2\Sygate\SPF\smc.exe -startgui
MSCONFIG\startupreg: SynTPEnh => %ProgramFiles%\Synaptics\SynTP\SynTPEnh.exe
MSCONFIG\startupreg: UDP Manager => C:\Program Files (x86)\UDP Manager\udpmgr.exe
MSCONFIG\startupreg: uTorrent => "C:\Users\Jaumm\AppData\Roaming\uTorrent\uTorrent.exe" /MINIMIZED
MSCONFIG\startupreg: VIAAUD => C:\Program Files (x86)\VIA\VIAudioi\VDeck\VIAAUD.exe
==================== Regras do Firewall (Whitelisted) ===============
(Se uma entrada for incluída na fixlist, será removida do Registro. O arquivo não será movido, a menos que seja colocado separadamente.)
FirewallRules: [SPPSVC-In-TCP] => (Allow) %SystemRoot%\system32\sppsvc.exe
FirewallRules: [SPPSVC-In-TCP-NoScope] => (Allow) %SystemRoot%\system32\sppsvc.exe
FirewallRules: [{0AA307E2-9454-4576-A3C4-F511E4271C06}] => (Allow) C:\Users\Jaumm\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{2D096843-4BE6-463D-BB7B-B719A35E7EF3}] => (Allow) C:\Users\Jaumm\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [TCP Query User{6BB42254-46BE-4986-9ADB-B3166B0B7FEE}C:\games\counter-strike source\hl2.exe] => (Block) C:\games\counter-strike source\hl2.exe
FirewallRules: [UDP Query User{499E41E3-1C2A-497F-9D74-0EF9C07DCD62}C:\games\counter-strike source\hl2.exe] => (Block) C:\games\counter-strike source\hl2.exe
FirewallRules: [TCP Query User{E51BB3AD-9CF9-42DD-9C5E-06C71B854940}C:\program files (x86)\counter-strike 1.6 omonas\hl.exe] => (Block) C:\program files (x86)\counter-strike 1.6 omonas\hl.exe
FirewallRules: [UDP Query User{346272F6-BCC4-49E8-9DE0-A9DC036D0140}C:\program files (x86)\counter-strike 1.6 omonas\hl.exe] => (Block) C:\program files (x86)\counter-strike 1.6 omonas\hl.exe
FirewallRules: [TCP Query User{E1A79C40-6FAC-4CF5-9F3C-11727293F85F}C:\program files (x86)\ea games\medal of honor allied assault breakthrough demo\moh_breakthrough_demo.exe] => (Allow) C:\program files (x86)\ea games\medal of honor allied assault breakthrough demo\moh_breakthrough_demo.exe
FirewallRules: [UDP Query User{6A8C4B58-B861-45D1-8211-2964B66022F7}C:\program files (x86)\ea games\medal of honor allied assault breakthrough demo\moh_breakthrough_demo.exe] => (Allow) C:\program files (x86)\ea games\medal of honor allied assault breakthrough demo\moh_breakthrough_demo.exe
FirewallRules: [TCP Query User{EE19A0C7-0888-422D-ABB5-58515CD5412C}C:\users\jaumm\downloads\medal of honor allied assault_codeking\mohaa\mohaa.exe] => (Allow) C:\users\jaumm\downloads\medal of honor allied assault_codeking\mohaa\mohaa.exe
FirewallRules: [UDP Query User{6392A742-02B2-429D-849C-43021C2F586F}C:\users\jaumm\downloads\medal of honor allied assault_codeking\mohaa\mohaa.exe] => (Allow) C:\users\jaumm\downloads\medal of honor allied assault_codeking\mohaa\mohaa.exe
FirewallRules: [TCP Query User{6065FAFD-B864-456A-ABFB-EA41AEEFCE2E}C:\users\jaumm\downloads\viridis\theeye_viridis.exe] => (Allow) C:\users\jaumm\downloads\viridis\theeye_viridis.exe
FirewallRules: [UDP Query User{08C33430-2038-4FBC-B759-DEA6E7287591}C:\users\jaumm\downloads\viridis\theeye_viridis.exe] => (Allow) C:\users\jaumm\downloads\viridis\theeye_viridis.exe
FirewallRules: [{1AF363D8-C67A-46EE-A38E-FB55B82238C4}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{A179AA14-1074-47D9-AFF9-ACCC8944DB84}] => (Allow) C:\Users\Jaumm\AppData\Roaming\Nox\bin\Nox.exe
FirewallRules: [{E676C6E0-76CF-4B39-B5F4-602EAD5A2C47}] => (Allow) C:\Program Files\Bignox\BigNoxVM\RTNoxVMHandle.exe
FirewallRules: [TCP Query User{CD9E7520-A48C-4AAB-90C9-F3D4A0927C5A}C:\program files (x86)\wondershare\mobilego\mobilegoservice.exe] => (Allow) C:\program files (x86)\wondershare\mobilego\mobilegoservice.exe
FirewallRules: [UDP Query User{0B57E1B7-A7CF-4DFD-A1B0-6F560D312D73}C:\program files (x86)\wondershare\mobilego\mobilegoservice.exe] => (Allow) C:\program files (x86)\wondershare\mobilego\mobilegoservice.exe
FirewallRules: [{36CAD19C-BFCC-47B3-A55E-9BF58BFA1756}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
==================== Pontos de Restauração =========================
01-08-2016 19:46:12 Configured Hotkey 3.2003
01-08-2016 19:49:12 Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501
01-08-2016 20:06:58 Removed Adobe Acrobat Reader DC - Português.
04-08-2016 01:51:44 Instalação de Pacote de Driver de Dispositivo: BigNox Corporation Controladores USB (barramento serial universal)
04-08-2016 02:46:52 Installed Oracle VM VirtualBox 5.0.4
05-08-2016 00:22:50 Instalação de Pacote de Driver de Dispositivo: Google, Inc.
==================== Dispositivos Apresentando Falhas No Gerenciador =============
Name: JÃUMM
Description: GT-I9515L
Class Guid: {eec5ad98-8080-425f-922a-dabf3de3f69a}
Manufacturer: Samsung Electronics Co., Ltd.
Service: WUDFRd
Problem: : This device cannot start. (Code10)
Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device.
On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard.
Name: CDC Serial
Description: CDC Serial
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.
==================== Erros no Log de eventos: =========================
Erros em Aplicativos:
==================
Error: (08/08/2016 04:35:59 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Nome de aplicativo com falha: Nox.exe, versão: 3.7.1.0, carimbo de hora: 0x084d7480
Nome do módulo de falhas: ntdll.dll, versão: 6.1.7600.16385, carimbo de hora: 0x4a5bdb3b
Código de exceção: 0xc0000005
Deslocamento com falha: 0x00033bd6
Identificação do processo com falha: 0xdbc
Hora de início do aplicativo com falha: 0xNox.exe0
Caminho do aplicativo com falha: Nox.exe1
FCaminho do módulo de falhas: Nox.exe2
Identificação do Relatório: Nox.exe3
Error: (08/04/2016 02:29:28 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Nome de aplicativo com falha: Nox.exe, versão: 3.7.1.0, carimbo de hora: 0x084d7480
Nome do módulo de falhas: Qt5WebKit.dll, versão: 5.4.1.0, carimbo de hora: 0x6537746e
Código de exceção: 0xc0000005
Deslocamento com falha: 0x00d81a10
Identificação do processo com falha: 0x834
Hora de início do aplicativo com falha: 0xNox.exe0
Caminho do aplicativo com falha: Nox.exe1
FCaminho do módulo de falhas: Nox.exe2
Identificação do Relatório: Nox.exe3
Error: (08/04/2016 02:06:45 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Nome de aplicativo com falha: Nox.exe, versão: 3.7.1.0, carimbo de hora: 0x084d7480
Nome do módulo de falhas: ntdll.dll, versão: 6.1.7600.16385, carimbo de hora: 0x4a5bdb3b
Código de exceção: 0xc0000005
Deslocamento com falha: 0x00033bd6
Identificação do processo com falha: 0x17c0
Hora de início do aplicativo com falha: 0xNox.exe0
Caminho do aplicativo com falha: Nox.exe1
FCaminho do módulo de falhas: Nox.exe2
Identificação do Relatório: Nox.exe3
Error: (08/04/2016 01:56:28 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Nome de aplicativo com falha: Nox.exe, versão: 3.7.1.0, carimbo de hora: 0x084d7480
Nome do módulo de falhas: Qt5Gui.dll, versão: 5.4.1.0, carimbo de hora: 0x0003f9bb
Código de exceção: 0xc0000005
Deslocamento com falha: 0x00053f20
Identificação do processo com falha: 0x18b4
Hora de início do aplicativo com falha: 0xNox.exe0
Caminho do aplicativo com falha: Nox.exe1
FCaminho do módulo de falhas: Nox.exe2
Identificação do Relatório: Nox.exe3
Error: (08/01/2016 07:28:30 PM) (Source: Adobe Reader) (EventID: 16) (User: )
Description:
Error: (08/01/2016 07:28:23 PM) (Source: Adobe Reader) (EventID: 16) (User: )
Description:
Error: (08/01/2016 07:28:16 PM) (Source: Adobe Reader) (EventID: 16) (User: )
Description:
Error: (08/01/2016 07:28:08 PM) (Source: Adobe Reader) (EventID: 16) (User: )
Description:
Error: (08/01/2016 07:27:49 PM) (Source: Adobe Reader) (EventID: 16) (User: )
Description:
Error: (07/24/2016 01:40:16 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Nome de aplicativo com falha: jogar.exe, versão: 1.0.0.217, carimbo de hora: 0x577f435a
Nome do módulo de falhas: unknown, versão: 0.0.0.0, carimbo de hora: 0x00000000
Código de exceção: 0xc0000005
Deslocamento com falha: 0x00638620
Identificação do processo com falha: 0x10bc
Hora de início do aplicativo com falha: 0xjogar.exe0
Caminho do aplicativo com falha: jogar.exe1
FCaminho do módulo de falhas: jogar.exe2
Identificação do Relatório: jogar.exe3
Erros de Sistema:
=============
Error: (08/09/2016 08:46:17 PM) (Source: ipnathlp) (EventID: 30013) (User: )
Description: 192.168.25.5192.168.137.0255.255.255.0
Error: (08/09/2016 08:46:17 PM) (Source: ipnathlp) (EventID: 1233) (User: )
Description:
Error: (08/09/2016 08:46:06 PM) (Source: Service Control Manager) (EventID: 7026) (User: )
Description: Falha ao carregar o(s) seguinte(s) driver(s) de início do sistema ou de inicialização:
Teefer
wpsdrvnt
Error: (08/09/2016 08:46:06 PM) (Source: Service Control Manager) (EventID: 7022) (User: )
Description: Serviço Intel(R) Biometric and Context Agent Service suspenso ao iniciar.
Error: (08/09/2016 08:44:32 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Não foi possível iniciar o serviço Service Installer TrueKey devido ao seguinte erro:
%%2 = O sistema não pode encontrar o arquivo especificado.
Error: (08/09/2016 08:44:26 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Não foi possível iniciar o serviço SyGate for NT, wg6n devido ao seguinte erro:
%%1275 = O carregamento deste driver foi bloqueado
Error: (08/09/2016 08:44:26 PM) (Source: Application Popup) (EventID: 1060) (User: )
Description: \SystemRoot\SysWow64\Drivers\wg6n.sys foi impedido de carregar devido a uma incompatibilidade com este sistema. Contate o fornecedor do software para obter uma versão compatível do driver.
Error: (08/09/2016 08:44:26 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Não foi possível iniciar o serviço SyGate for NT, wg5n devido ao seguinte erro:
%%1275 = O carregamento deste driver foi bloqueado
Error: (08/09/2016 08:44:26 PM) (Source: Application Popup) (EventID: 1060) (User: )
Description: \SystemRoot\SysWow64\Drivers\wg5n.sys foi impedido de carregar devido a uma incompatibilidade com este sistema. Contate o fornecedor do software para obter uma versão compatível do driver.
Error: (08/09/2016 08:44:26 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Não foi possível iniciar o serviço SyGate for NT, wg4n devido ao seguinte erro:
%%1275 = O carregamento deste driver foi bloqueado
==================== Informações da Memória ===========================
Processador: Intel(R) Core(TM) i3 CPU M 350 @ 2.27GHz
Percentagem de memória em uso: 55%
RAM física total: 3892.54 MB
RAM física disponível: 1736.83 MB
Virtual Total: 7783.23 MB
Virtual disponível: 5387.77 MB
==================== Drives ================================
Drive c: () (Fixed) (Total:241.05 GB) (Free:148.65 GB) NTFS
Drive d: () (Fixed) (Total:224.61 GB) (Free:223.37 GB) NTFS
Drive g: () (Removable) (Total:14.83 GB) (Free:14.82 GB) FAT32
==================== MBR & Tabela de Partições ==================
========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 465.8 GB) (Disk ID: 91E7F7A0)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=241.1 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=224.6 GB) - (Type=07 NTFS)
========================================================
Disk: 1 (Size: 14.8 GB) (Disk ID: 00000000)
Partition: GPT.
==================== Fim de Addition.txt ============================
Executado por Jaumm (2016-08-09 20:53:00)
Executando a partir de C:\Users\Jaumm\Downloads
Windows 7 Professional (X64) (2016-07-07 02:17:47)
Modo da Inicialização: Normal
==========================================================
==================== Contas: =============================
Administrador (S-1-5-21-1054260350-965703613-2792248110-500 - Administrator - Disabled)
Convidado (S-1-5-21-1054260350-965703613-2792248110-501 - Limited - Disabled)
Jaumm (S-1-5-21-1054260350-965703613-2792248110-1000 - Administrator - Enabled) => C:\Users\Jaumm
==================== Central de Segurança ========================
(Se uma entrada for incluída na fixlist, será removida.)
AS: Windows Defender (Enabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
==================== Programas Instalados ======================
(Somente os programas adwares com a indicação "Oculto" podem ser adicionados à fixlist para desocultá-los. Os programas adwares devem ser desinstalados manualmente.)
µTorrent (HKU\S-1-5-21-1054260350-965703613-2792248110-1000\...\uTorrent) (Version: 3.4.7.42330 - BitTorrent Inc.)
Age of Mythology (HKLM-x32\...\Age of Mythology 1.0) (Version: - )
BlueStacks App Player (HKLM-x32\...\BlueStacks) (Version: 2.3.41.6601 - BlueStack Systems, Inc.)
BrasMU Season 9 Battle Core (HKLM-x32\...\BrasMU Season 9 Battle Core) (Version: - )
Cisco EAP-FAST Module (HKLM-x32\...\{64BF0187-F3D2-498B-99EA-163AF9AE6EC9}) (Version: 2.2.14 - Cisco Systems, Inc.)
Cisco LEAP Module (HKLM-x32\...\{51C7AD07-C3F6-4635-8E8A-231306D810FE}) (Version: 1.0.19 - Cisco Systems, Inc.)
Cisco PEAP Module (HKLM-x32\...\{ED5776D5-59B4-46B7-AF81-5F2D94D7C640}) (Version: 1.1.6 - Cisco Systems, Inc.)
Corel Graphics - Windows Shell Extension (HKLM\...\_{EBDC2D0D-1E26-4EF2-BB48-C7E18F7800C6}) (Version: 16.0.0.707 - Corel Corporation)
Corel Graphics - Windows Shell Extension (Version: 16.0.707 - Corel Corporation) Hidden
Corel Graphics - Windows Shell Extension 32 Bit (Version: 16.0.707 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X6 - BR (x64) (Version: 16.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X6 - Capture (x64) (Version: 16.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X6 - Common (x64) (Version: 16.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X6 - Connect (x64) (Version: 16.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X6 - Custom Data (x64) (Version: 16.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X6 - Draw (x64) (Version: 16.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X6 - Filters (x64) (Version: 16.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X6 - FontNav (x64) (Version: 16.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X6 - IPM (Version: 16.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X6 - PHOTO-PAINT (x64) (Version: 16.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X6 - Photozoom Plugin (x64) (Version: 16.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X6 - Redist (x64) (Version: 16.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X6 - Setup Files (x64) (Version: 16.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X6 - VBA (x64) (Version: 16.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X6 - VideoBrowser (x64) (Version: 16.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X6 - VSTA (x64) (Version: 16.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X6 - Writing Tools (x64) (Version: 16.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X6 (64-Bit) (HKLM\...\_{BDBFAC49-8877-472F-876B-75ADB7DBC955}) (Version: 16.0.0.707 - Corel Corporation)
CorelDRAW Graphics Suite X6 (x64) (Version: 16.0 - Corel Corporation) Hidden
Counter-Strike 1.6 (HKU\S-1-5-21-1054260350-965703613-2792248110-1000\...\Counter-Strike 1.6) (Version: - )
DAEMON Tools Lite (HKLM\...\DAEMON Tools Lite) (Version: 10.4.0.0192 - Disc Soft Ltd)
Foxit Reader (HKLM-x32\...\Foxit Reader_is1) (Version: 8.0.0.624 - Foxit Software Inc.)
GameSpy Arcade (HKLM-x32\...\GameSpy Arcade) (Version: - )
Genymotion version 2.7.0 (HKLM\...\{6D180286-D4DF-40EF-9227-923B9C07C08A}_is1) (Version: 2.7.0 - Genymobile)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 52.0.2743.116 - Google Inc.)
Google Update Helper (x32 Version: 1.3.31.5 - Google Inc.) Hidden
HeroesMu Season 8 Episodio 3 (HKLM-x32\...\HeroesMu Season 8 Episodio 3) (Version: Season 8 Episodio 3 - Heroes Networks)
Hot Virtual Keyboard (HKLM\...\{0F896F26-E9C0-4331-BB90-28CDDA490C93}_is1) (Version: 8.4.1.0 - Comfort Software Group)
Hotkey 3.2003 (HKLM-x32\...\InstallShield_{164714B6-46BC-4649-9A30-A6ED32F03B5A}) (Version: 3.20.03 - NoteBook)
Hotkey 3.2003 (x32 Version: 3.20.03 - NoteBook) Hidden
Intel Security True Key (HKLM\...\TrueKey) (Version: 4.4.135.1 - Intel Security)
Intel(R) Graphics Media Accelerator Driver (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 8.15.10.2104 - Intel Corporation)
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 6.0.0.1179 - Intel Corporation)
JMicron Ethernet Adapter NDIS Driver (HKLM-x32\...\{96DCEE2F-98EE-4F80-8C0F-7C04D1FB9D7F}) (Version: 6.0.14.11 - JMicron Technology Corp.)
JMicron JMB38X Flash Media Controller (HKLM-x32\...\{26604C7E-A313-4D12-867F-7C6E7820BE4C}) (Version: 1.0.34.2 - JMicron Technology Corp.)
LunaticMu - Ex803 versão 1.0.0.2 (HKLM-x32\...\{572EE351-7F80-4422-B4B3-4F161251ABC6}_is1) (Version: 1.0.0.2 - Servidores LunaticMu, Inc.)
Medal of Honor Allied Assault(tm) Breakthrough Demo (HKLM-x32\...\{A9CEAAB2-B5C7-40F3-AA6E-D07F5DD76E55}) (Version: - )
MEGAsync (HKLM-x32\...\MEGAsync) (Version: - Mega Limited)
MEmu (HKLM-x32\...\{CA42170D-90AC-4578-A858-C851D886B82B}) (Version: 2.8.18.1800 - Brotsoft technology co., limited.)
Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual Studio Tools for Applications 2.0 - ENU (HKLM-x32\...\{AA4A4B2C-0465-3CF8-BA76-27A027D8ACAB}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual Studio Tools for Applications 2.0 Runtime (HKLM-x32\...\{299C0434-4F4E-341F-A916-4E07AEB35E79}) (Version: 9.0.30729 - Microsoft Corporation)
MSXML4 Parser (HKLM-x32\...\{01501EBA-EC35-4F9F-8889-3BE346E5DA13}) (Version: 1.0.0 - Microsoft Game Studios)
MU Freya Season 6.4 (HKLM-x32\...\MU Freya Season 6.4) (Version: Season 6.4 - HEXMU SERVER)
Mu Online LA - Season 6 EP3 (HKU\S-1-5-21-1054260350-965703613-2792248110-1000\...\Mu Online LA - Season 6 EP3) (Version: - )
Mu Ruby Season 4 (HKLM-x32\...\Mu Ruby Season 4) (Version: - )
MuonlineEvo versão Seasson 6 (HKLM-x32\...\{597EBDCC-7732-46F9-A777-EAEEA850181E}_is1) (Version: Seasson 6 - Lande Online)
MuZen (HKLM-x32\...\MuZen) (Version: 1.04Z Season 4 - By ADM_Renis)
Oracle VM VirtualBox 5.0.4 (HKLM\...\{FC191F32-1A67-4231-91D0-0059A57C99A8}) (Version: 5.0.4 - Oracle Corporation)
Pacote de Idiomas do Microsoft .NET Framework 4 Client Profile - Português (Brasil) (HKLM\...\Microsoft .NET Framework 4 Client Profile PTB Language Pack) (Version: 4.0.30319 - Microsoft Corporation)
Pacote de Idiomas do Microsoft .NET Framework 4 Extended - Português (Brasil) (HKLM\...\Microsoft .NET Framework 4 Extended PTB Language Pack) (Version: 4.0.30319 - Microsoft Corporation)
Platform (x32 Version: 1.34 - VIA Technologies, Inc.) Hidden
RaidCall (HKLM-x32\...\RaidCall) (Version: 7.3.8-1.0.3150.5 - raidcall.com.ru)
REALTEK Wireless LAN Driver (HKLM-x32\...\{}) (Version: 1.02.0203 - REALTEK Semiconductor Corp.)
REALTEK Wireless LAN Driver (HKLM-x32\...\{9D3D8C60-A55F-4fed-B2B9-173F09590E16}) (Version: 1.00.0136 - REALTEK Semiconductor Corp.)
Skype™ 7.25 (HKLM-x32\...\{FC965A47-4839-40CA-B618-18F486F042C6}) (Version: 7.25.106 - Skype Technologies S.A.)
Sygate Personal Firewall (HKLM-x32\...\{F34D9A5F-484A-4E31-A9D3-908CB265B289}) (Version: 5.6.2808 - Sygate Technologies, Inc.)
Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 13.2.3.0 - Synaptics Incorporated)
Vegas Pro 13.0 (64-bit) (HKLM\...\{D0360940-CCC6-11E3-B9C6-F04DA23A5C58}) (Version: 13.0.310 - Sony)
VIA Gerenciador de dispositivo de plataforma (HKLM-x32\...\InstallShield_{20D4A895-748C-4D88-871C-FDB1695B0169}) (Version: 1.34 - VIA Technologies, Inc.)
WinRAR 5.31 (64-bit) (HKLM\...\WinRAR archiver) (Version: 5.31.0 - win.rar GmbH)
Wondershare MobileGo(Version 8.2.3) (HKLM-x32\...\{1E04C795-7359-4E05-8A0E-5644F777AA09}_is1) (Version: 8.2.3 - Wondershare)
Xtreme Season 9 (HKLM-x32\...\Xtreme Season 9) (Version: - )
==================== Exame Personalizado CLSID (Whitelisted): ==========================
(Se uma entrada for incluída na fixlist, será removida do Registro. O arquivo não será movido, a menos que seja colocado separadamente.)
==================== Tarefas Agendadas (Whitelisted) =============
(Se uma entrada for incluída na fixlist, será removida do Registro. O arquivo não será movido, a menos que seja colocado separadamente.)
Task: {00BEE4D7-CE8E-4FAC-A97E-DBFBCF6BF3FA} - System32\Tasks\UDP Manager Task => C:\Program Files (x86)\UDP Manager\udpmgr.exe [2016-02-20] ()
Task: {0F5C63DB-1A7C-4E00-BCAB-D9BBE685BB47} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2016-07-07] (Google Inc.)
Task: {2A90847C-83BD-4FBE-B1F1-C5A7D6A6BC30} - System32\Tasks\UDP Manager => C:\Users\Jaumm\AppData\Roaming\udpmgr.exe [2016-02-20] () <==== ATENÇÃO
Task: {75F81B87-F0FB-45A0-AAE8-4E180FB9D8ED} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2016-07-07] (Google Inc.)
(Se uma entrada for incluída na fixlist, o arquivo da tarefa (.job) será movido. O arquivo que está sendo executado pela tarefa não será movido.)
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
==================== Atalhos =============================
(As entradas podem ser listadas para serem restauradas ou removidas.)
ShortcutWithArgument: C:\Users\Jaumm\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Aplicativos do Google Chrome\Vysor.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> --profile-directory=Default --app-id=gidgenkbbabolejbgbpnhbimgjbffefm
==================== Módulos Carregados (Whitelisted) ==============
2014-05-01 11:13 - 2016-07-20 21:11 - 00592384 _____ () C:\Users\Jaumm\AppData\Local\MEGAsync\ShellExtX64.dll
2016-08-09 18:19 - 2016-08-02 20:41 - 02366280 _____ () C:\Program Files (x86)\Google\Chrome\Application\52.0.2743.116\libglesv2.dll
2016-08-09 18:19 - 2016-08-02 20:40 - 00107848 _____ () C:\Program Files (x86)\Google\Chrome\Application\52.0.2743.116\libegl.dll
2016-08-04 00:48 - 1666-02-11 08:56 - 00697144 _____ () C:\Program Files (x86)\Simcake\2.8.18.1800\SimcakeAss.dll
2016-08-04 00:48 - 1666-02-11 08:56 - 00110760 _____ () C:\Program Files (x86)\Simcake\2.8.18.1800\UGCore.dll
2004-10-15 18:32 - 2004-10-15 18:32 - 01385712 _____ () C:\Program Files (x86)\Sygate\SPF\tse.dll
2004-10-15 18:32 - 2004-10-15 18:32 - 00890088 _____ () C:\Program Files (x86)\Sygate\SPF\SpNet.dll
2004-10-15 18:32 - 2004-10-15 18:32 - 00832744 _____ () C:\Program Files (x86)\Sygate\SPF\SyLink.dll
==================== Alternate Data Streams (Whitelisted) =========
(Se uma entrada for incluída na fixlist, somente o ADS será removido.)
==================== Modo de Segurança (Whitelisted) ===================
(Se uma entrada for incluída na fixlist, será removida do Registro. O valor "AlternateShell" será restaurado.)
==================== Associação (Whitelisted) ===============
(Se uma entrada for incluída na fixlist, o ítem no Registro será restaurado para o padrão ou removido.)
==================== Internet Explorer confiável/restrito ===============
(Se uma entrada for incluída na fixlist, será removida do Registro.)
==================== Hosts Conteúdo: ===============================
(Se necessário, a diretiva Hosts: pode ser incluída na fixlist para redefinir o Hosts.)
2009-07-13 23:34 - 2016-08-01 20:08 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts
==================== Outras Áreas ============================
(Atualmente não há nenhuma correção automática para esta seção.)
HKU\S-1-5-21-1054260350-965703613-2792248110-1000\Control Panel\Desktop\\Wallpaper ->
DNS Servers: 192.168.25.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Firewall do Windows está habilitado.
==================== MSCONFIG/TASK MANAGER ítens desabilitados ==
(Atualmente não há nenhuma correção automática para esta seção.)
MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Hotkey.lnk => C:\Windows\pss\Hotkey.lnk.CommonStartup
MSCONFIG\startupfolder: C:^Users^Jaumm^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^MEGAsync.lnk => C:\Windows\pss\MEGAsync.lnk.Startup
MSCONFIG\startupreg: 1 => C:\Users\Jaumm\AppData\Roaming\udpmgr.exe
MSCONFIG\startupreg: BlueStacks Agent => C:\Program Files (x86)\Bluestacks\HD-Agent.exe
MSCONFIG\startupreg: DAEMON Tools Lite Automount => "C:\Program Files\DAEMON Tools Lite\DTAgent.exe" -autorun
MSCONFIG\startupreg: HDAudDeck => C:\Program Files (x86)\VIA\VIAudioi\VDeck\VDeck.exe -r
MSCONFIG\startupreg: Skype => "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun
MSCONFIG\startupreg: SmcService => C:\PROGRA~2\Sygate\SPF\smc.exe -startgui
MSCONFIG\startupreg: SynTPEnh => %ProgramFiles%\Synaptics\SynTP\SynTPEnh.exe
MSCONFIG\startupreg: UDP Manager => C:\Program Files (x86)\UDP Manager\udpmgr.exe
MSCONFIG\startupreg: uTorrent => "C:\Users\Jaumm\AppData\Roaming\uTorrent\uTorrent.exe" /MINIMIZED
MSCONFIG\startupreg: VIAAUD => C:\Program Files (x86)\VIA\VIAudioi\VDeck\VIAAUD.exe
==================== Regras do Firewall (Whitelisted) ===============
(Se uma entrada for incluída na fixlist, será removida do Registro. O arquivo não será movido, a menos que seja colocado separadamente.)
FirewallRules: [SPPSVC-In-TCP] => (Allow) %SystemRoot%\system32\sppsvc.exe
FirewallRules: [SPPSVC-In-TCP-NoScope] => (Allow) %SystemRoot%\system32\sppsvc.exe
FirewallRules: [{0AA307E2-9454-4576-A3C4-F511E4271C06}] => (Allow) C:\Users\Jaumm\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{2D096843-4BE6-463D-BB7B-B719A35E7EF3}] => (Allow) C:\Users\Jaumm\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [TCP Query User{6BB42254-46BE-4986-9ADB-B3166B0B7FEE}C:\games\counter-strike source\hl2.exe] => (Block) C:\games\counter-strike source\hl2.exe
FirewallRules: [UDP Query User{499E41E3-1C2A-497F-9D74-0EF9C07DCD62}C:\games\counter-strike source\hl2.exe] => (Block) C:\games\counter-strike source\hl2.exe
FirewallRules: [TCP Query User{E51BB3AD-9CF9-42DD-9C5E-06C71B854940}C:\program files (x86)\counter-strike 1.6 omonas\hl.exe] => (Block) C:\program files (x86)\counter-strike 1.6 omonas\hl.exe
FirewallRules: [UDP Query User{346272F6-BCC4-49E8-9DE0-A9DC036D0140}C:\program files (x86)\counter-strike 1.6 omonas\hl.exe] => (Block) C:\program files (x86)\counter-strike 1.6 omonas\hl.exe
FirewallRules: [TCP Query User{E1A79C40-6FAC-4CF5-9F3C-11727293F85F}C:\program files (x86)\ea games\medal of honor allied assault breakthrough demo\moh_breakthrough_demo.exe] => (Allow) C:\program files (x86)\ea games\medal of honor allied assault breakthrough demo\moh_breakthrough_demo.exe
FirewallRules: [UDP Query User{6A8C4B58-B861-45D1-8211-2964B66022F7}C:\program files (x86)\ea games\medal of honor allied assault breakthrough demo\moh_breakthrough_demo.exe] => (Allow) C:\program files (x86)\ea games\medal of honor allied assault breakthrough demo\moh_breakthrough_demo.exe
FirewallRules: [TCP Query User{EE19A0C7-0888-422D-ABB5-58515CD5412C}C:\users\jaumm\downloads\medal of honor allied assault_codeking\mohaa\mohaa.exe] => (Allow) C:\users\jaumm\downloads\medal of honor allied assault_codeking\mohaa\mohaa.exe
FirewallRules: [UDP Query User{6392A742-02B2-429D-849C-43021C2F586F}C:\users\jaumm\downloads\medal of honor allied assault_codeking\mohaa\mohaa.exe] => (Allow) C:\users\jaumm\downloads\medal of honor allied assault_codeking\mohaa\mohaa.exe
FirewallRules: [TCP Query User{6065FAFD-B864-456A-ABFB-EA41AEEFCE2E}C:\users\jaumm\downloads\viridis\theeye_viridis.exe] => (Allow) C:\users\jaumm\downloads\viridis\theeye_viridis.exe
FirewallRules: [UDP Query User{08C33430-2038-4FBC-B759-DEA6E7287591}C:\users\jaumm\downloads\viridis\theeye_viridis.exe] => (Allow) C:\users\jaumm\downloads\viridis\theeye_viridis.exe
FirewallRules: [{1AF363D8-C67A-46EE-A38E-FB55B82238C4}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{A179AA14-1074-47D9-AFF9-ACCC8944DB84}] => (Allow) C:\Users\Jaumm\AppData\Roaming\Nox\bin\Nox.exe
FirewallRules: [{E676C6E0-76CF-4B39-B5F4-602EAD5A2C47}] => (Allow) C:\Program Files\Bignox\BigNoxVM\RTNoxVMHandle.exe
FirewallRules: [TCP Query User{CD9E7520-A48C-4AAB-90C9-F3D4A0927C5A}C:\program files (x86)\wondershare\mobilego\mobilegoservice.exe] => (Allow) C:\program files (x86)\wondershare\mobilego\mobilegoservice.exe
FirewallRules: [UDP Query User{0B57E1B7-A7CF-4DFD-A1B0-6F560D312D73}C:\program files (x86)\wondershare\mobilego\mobilegoservice.exe] => (Allow) C:\program files (x86)\wondershare\mobilego\mobilegoservice.exe
FirewallRules: [{36CAD19C-BFCC-47B3-A55E-9BF58BFA1756}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
==================== Pontos de Restauração =========================
01-08-2016 19:46:12 Configured Hotkey 3.2003
01-08-2016 19:49:12 Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501
01-08-2016 20:06:58 Removed Adobe Acrobat Reader DC - Português.
04-08-2016 01:51:44 Instalação de Pacote de Driver de Dispositivo: BigNox Corporation Controladores USB (barramento serial universal)
04-08-2016 02:46:52 Installed Oracle VM VirtualBox 5.0.4
05-08-2016 00:22:50 Instalação de Pacote de Driver de Dispositivo: Google, Inc.
==================== Dispositivos Apresentando Falhas No Gerenciador =============
Name: JÃUMM
Description: GT-I9515L
Class Guid: {eec5ad98-8080-425f-922a-dabf3de3f69a}
Manufacturer: Samsung Electronics Co., Ltd.
Service: WUDFRd
Problem: : This device cannot start. (Code10)
Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device.
On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard.
Name: CDC Serial
Description: CDC Serial
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.
==================== Erros no Log de eventos: =========================
Erros em Aplicativos:
==================
Error: (08/08/2016 04:35:59 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Nome de aplicativo com falha: Nox.exe, versão: 3.7.1.0, carimbo de hora: 0x084d7480
Nome do módulo de falhas: ntdll.dll, versão: 6.1.7600.16385, carimbo de hora: 0x4a5bdb3b
Código de exceção: 0xc0000005
Deslocamento com falha: 0x00033bd6
Identificação do processo com falha: 0xdbc
Hora de início do aplicativo com falha: 0xNox.exe0
Caminho do aplicativo com falha: Nox.exe1
FCaminho do módulo de falhas: Nox.exe2
Identificação do Relatório: Nox.exe3
Error: (08/04/2016 02:29:28 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Nome de aplicativo com falha: Nox.exe, versão: 3.7.1.0, carimbo de hora: 0x084d7480
Nome do módulo de falhas: Qt5WebKit.dll, versão: 5.4.1.0, carimbo de hora: 0x6537746e
Código de exceção: 0xc0000005
Deslocamento com falha: 0x00d81a10
Identificação do processo com falha: 0x834
Hora de início do aplicativo com falha: 0xNox.exe0
Caminho do aplicativo com falha: Nox.exe1
FCaminho do módulo de falhas: Nox.exe2
Identificação do Relatório: Nox.exe3
Error: (08/04/2016 02:06:45 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Nome de aplicativo com falha: Nox.exe, versão: 3.7.1.0, carimbo de hora: 0x084d7480
Nome do módulo de falhas: ntdll.dll, versão: 6.1.7600.16385, carimbo de hora: 0x4a5bdb3b
Código de exceção: 0xc0000005
Deslocamento com falha: 0x00033bd6
Identificação do processo com falha: 0x17c0
Hora de início do aplicativo com falha: 0xNox.exe0
Caminho do aplicativo com falha: Nox.exe1
FCaminho do módulo de falhas: Nox.exe2
Identificação do Relatório: Nox.exe3
Error: (08/04/2016 01:56:28 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Nome de aplicativo com falha: Nox.exe, versão: 3.7.1.0, carimbo de hora: 0x084d7480
Nome do módulo de falhas: Qt5Gui.dll, versão: 5.4.1.0, carimbo de hora: 0x0003f9bb
Código de exceção: 0xc0000005
Deslocamento com falha: 0x00053f20
Identificação do processo com falha: 0x18b4
Hora de início do aplicativo com falha: 0xNox.exe0
Caminho do aplicativo com falha: Nox.exe1
FCaminho do módulo de falhas: Nox.exe2
Identificação do Relatório: Nox.exe3
Error: (08/01/2016 07:28:30 PM) (Source: Adobe Reader) (EventID: 16) (User: )
Description:
Error: (08/01/2016 07:28:23 PM) (Source: Adobe Reader) (EventID: 16) (User: )
Description:
Error: (08/01/2016 07:28:16 PM) (Source: Adobe Reader) (EventID: 16) (User: )
Description:
Error: (08/01/2016 07:28:08 PM) (Source: Adobe Reader) (EventID: 16) (User: )
Description:
Error: (08/01/2016 07:27:49 PM) (Source: Adobe Reader) (EventID: 16) (User: )
Description:
Error: (07/24/2016 01:40:16 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Nome de aplicativo com falha: jogar.exe, versão: 1.0.0.217, carimbo de hora: 0x577f435a
Nome do módulo de falhas: unknown, versão: 0.0.0.0, carimbo de hora: 0x00000000
Código de exceção: 0xc0000005
Deslocamento com falha: 0x00638620
Identificação do processo com falha: 0x10bc
Hora de início do aplicativo com falha: 0xjogar.exe0
Caminho do aplicativo com falha: jogar.exe1
FCaminho do módulo de falhas: jogar.exe2
Identificação do Relatório: jogar.exe3
Erros de Sistema:
=============
Error: (08/09/2016 08:46:17 PM) (Source: ipnathlp) (EventID: 30013) (User: )
Description: 192.168.25.5192.168.137.0255.255.255.0
Error: (08/09/2016 08:46:17 PM) (Source: ipnathlp) (EventID: 1233) (User: )
Description:
Error: (08/09/2016 08:46:06 PM) (Source: Service Control Manager) (EventID: 7026) (User: )
Description: Falha ao carregar o(s) seguinte(s) driver(s) de início do sistema ou de inicialização:
Teefer
wpsdrvnt
Error: (08/09/2016 08:46:06 PM) (Source: Service Control Manager) (EventID: 7022) (User: )
Description: Serviço Intel(R) Biometric and Context Agent Service suspenso ao iniciar.
Error: (08/09/2016 08:44:32 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Não foi possível iniciar o serviço Service Installer TrueKey devido ao seguinte erro:
%%2 = O sistema não pode encontrar o arquivo especificado.
Error: (08/09/2016 08:44:26 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Não foi possível iniciar o serviço SyGate for NT, wg6n devido ao seguinte erro:
%%1275 = O carregamento deste driver foi bloqueado
Error: (08/09/2016 08:44:26 PM) (Source: Application Popup) (EventID: 1060) (User: )
Description: \SystemRoot\SysWow64\Drivers\wg6n.sys foi impedido de carregar devido a uma incompatibilidade com este sistema. Contate o fornecedor do software para obter uma versão compatível do driver.
Error: (08/09/2016 08:44:26 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Não foi possível iniciar o serviço SyGate for NT, wg5n devido ao seguinte erro:
%%1275 = O carregamento deste driver foi bloqueado
Error: (08/09/2016 08:44:26 PM) (Source: Application Popup) (EventID: 1060) (User: )
Description: \SystemRoot\SysWow64\Drivers\wg5n.sys foi impedido de carregar devido a uma incompatibilidade com este sistema. Contate o fornecedor do software para obter uma versão compatível do driver.
Error: (08/09/2016 08:44:26 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Não foi possível iniciar o serviço SyGate for NT, wg4n devido ao seguinte erro:
%%1275 = O carregamento deste driver foi bloqueado
==================== Informações da Memória ===========================
Processador: Intel(R) Core(TM) i3 CPU M 350 @ 2.27GHz
Percentagem de memória em uso: 55%
RAM física total: 3892.54 MB
RAM física disponível: 1736.83 MB
Virtual Total: 7783.23 MB
Virtual disponível: 5387.77 MB
==================== Drives ================================
Drive c: () (Fixed) (Total:241.05 GB) (Free:148.65 GB) NTFS
Drive d: () (Fixed) (Total:224.61 GB) (Free:223.37 GB) NTFS
Drive g: () (Removable) (Total:14.83 GB) (Free:14.82 GB) FAT32
==================== MBR & Tabela de Partições ==================
========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 465.8 GB) (Disk ID: 91E7F7A0)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=241.1 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=224.6 GB) - (Type=07 NTFS)
========================================================
Disk: 1 (Size: 14.8 GB) (Disk ID: 00000000)
Partition: GPT.
==================== Fim de Addition.txt ============================