Many Malwares installed on my pc

gabriel soliva

New Member
Thread author
Apr 14, 2017
1
Tried to use Malwarebytes, found more than 1500 threads, but every second i went using chrome it appeared an annoying popup.

Downloaded Farbar Recovery Scan tool, but did not find anything, there is the log:

Resultado do exame Adicional Farbar Recovery Scan Tool (x64) Versão: 15-03-2017
Executado por socer (14-04-2017 19:46:53)
Executando a partir de C:\Users\socer\Downloads
Windows 10 Home Single Language Versão 1703 (X64) (2017-04-14 07:55:41)
Modo da Inicialização: Normal
==========================================================


==================== Contas: =============================

Administrador (S-1-5-21-2673395217-1231913305-2213340989-500 - Administrator - Disabled)
Convidado (S-1-5-21-2673395217-1231913305-2213340989-501 - Limited - Disabled)
DefaultAccount (S-1-5-21-2673395217-1231913305-2213340989-503 - Limited - Disabled)
defaultuser0 (S-1-5-21-2673395217-1231913305-2213340989-1000 - Limited - Disabled) => C:\Users\defaultuser0
socer (S-1-5-21-2673395217-1231913305-2213340989-1001 - Administrator - Enabled) => C:\Users\socer

==================== Central de Segurança ========================

(Se uma entrada for incluída na fixlist, será removida.)

AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AV: McAfee VirusScan (Enabled - Up to date) {8BCDACFA-D264-3528-5EF8-E94FD0BC1FBC}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: McAfee VirusScan (Enabled - Up to date) {30AC4D1E-F45E-3AA6-6448-D23DAB3B5501}

==================== Programas Instalados ======================

(Somente os programas adwares com a indicação "Oculto" podem ser adicionados à fixlist para desocultá-los. Os programas adwares devem ser desinstalados manualmente.)

µTorrent (HKU\S-1-5-21-2673395217-1231913305-2213340989-1001\...\uTorrent) (Version: 3.4.9.43295 - BitTorrent Inc.)
Adobe Flash Player 25 PPAPI (HKLM-x32\...\Adobe Flash Player PPAPI) (Version: 25.0.0.148 - Adobe Systems Incorporated)
Ajuda e Suporte da Dell (HKLM-x32\...\InstallShield_{7E780845-303D-4B46-9746-9D49D94D16AB}) (Version: 2.3.22.0 - Dell Inc.)
Ajuda e Suporte da Dell (Version: 2.3.22.0 - Dell Inc.) Hidden
Ansel (Version: 381.65 - NVIDIA Corporation) Hidden
Atualizações da NVIDIA 23.23.30.0 (Version: 23.23.30.0 - NVIDIA Corporation) Hidden
Battle.net (HKLM-x32\...\Battle.net) (Version: - Blizzard Entertainment)
Dell Customer Connect (HKLM-x32\...\{4FA72FF9-DD64-43A8-8704-6380A11F11D5}) (Version: 1.4.15.0 - Dell Inc.)
Dell Data Vault (Version: 4.4.0.0 - Dell Inc.) Hidden
Dell Digital Delivery (HKLM-x32\...\{99B7C4B5-DC14-441D-A5B6-7340F682BC81}) (Version: 3.1.1117.0 - Dell Products, LP)
Dell Foundation Services (HKLM\...\{BDB50421-E961-42F3-B803-6DAC6F173834}) (Version: 3.4.16100.0 - Dell Inc.)
Dell SupportAssist (HKLM\...\PC-Doctor for Windows) (Version: 1.3.6855.72 - Dell)
Dell SupportAssist Remediation (HKLM-x32\...\{56e3476e-a4e0-418b-926c-8be09f6c37ce}) (Version: 2.0.2.1818 - Dell Inc.)
Dell SupportAssist Remediation (Version: 2.0.2.1818 - Dell Inc.) Hidden
Dell SupportAssistAgent (HKLM-x32\...\{CD2DF2B3-01E7-47FF-AF9C-725FC5FF6409}) (Version: 1.3.2.3 - Dell)
Dell Update - SupportAssist Update Plugin (HKLM\...\{92F651D9-4431-469E-9B11-299D007AF656}) (Version: 2.0.2.1835 - Dell Inc.)
Dell Update (HKLM-x32\...\{49655877-33CF-4C8A-B07C-9694935431E4}) (Version: 1.9.7.0 - Dell Inc.)
Discord (HKU\S-1-5-21-2673395217-1231913305-2213340989-1001\...\Discord) (Version: 0.0.297 - Hammer & Chisel, Inc.)
Dropbox (HKLM-x32\...\Dropbox) (Version: 23.4.19 - Dropbox, Inc.)
Dropbox 20 GB (HKLM-x32\...\{84D8451D-2ED6-3A59-ABA5-2A447F7C6310}) (Version: 4.1.2.0 - Dropbox, Inc.)
Dropbox Update Helper (x32 Version: 1.3.65.1 - Dropbox, Inc.) Hidden
FINAL FANTASY XIV - A Realm Reborn (HKLM-x32\...\{2B41E132-07DF-4925-A3D3-F2D1765CCDFE}) (Version: 1.0.0000 - SQUARE ENIX CO., LTD.)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 57.0.2987.133 - Google Inc.)
Google Update Helper (x32 Version: 1.3.33.3 - Google Inc.) Hidden
Hearthstone (HKLM-x32\...\Hearthstone) (Version: - Blizzard Entertainment)
Intel(R) Management Engine Components (HKLM\...\{1CEAC85D-2590-4760-800F-8DE5E91F3700}) (Version: 11.0.0.1173 - Intel Corporation)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 21.20.16.4590 - Intel Corporation)
Intel(R) Rapid Storage Technology (HKLM\...\{409CB30E-E457-4008-9B1A-ED1B9EA21140}) (Version: 14.8.9.1053 - Intel Corporation)
Intel(R) Serial IO (HKLM\...\{9FD91C5C-44AE-4D9D-85BE-AE52816B0294}) (Version: 30.100.1519.7 - Intel Corporation)
Intel® Security Assist (HKLM-x32\...\{4B230374-6475-4A73-BA6E-41015E9C5013}) (Version: 1.0.0.532 - Intel Corporation)
League of Legends (HKLM-x32\...\League of Legends 4.1.2) (Version: 4.1.2 - Riot Games)
League of Legends (x32 Version: 4.1.2 - Riot Games) Hidden
Maxx Audio Installer (x64) (Version: 2.6.8627.1 - Waves Audio Ltd.) Hidden
McAfee AntiVirus (HKLM-x32\...\MSC) (Version: 14.0 R13 - McAfee, Inc.)
McAfee WebAdvisor (HKLM-x32\...\{35ED3F83-4BDC-4c44-8EC6-6A8301C7413A}) (Version: 4.0.124 - McAfee, Inc.)
Microsoft Office 365 - pt-br (HKLM\...\O365HomePremRetail - pt-br) (Version: 16.0.7870.2031 - Microsoft Corporation)
Microsoft Office Home and Student 2016 - pt-br (HKLM\...\HomeStudentRetail - pt-br) (Version: 16.0.7870.2031 - Microsoft Corporation)
Microsoft OneDrive (HKU\S-1-5-21-2673395217-1231913305-2213340989-1001\...\OneDriveSetup.exe) (Version: 17.3.6816.0313 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}) (Version: 8.0.59192 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x64) - 14.0.23506 (HKLM-x32\...\{3ee5e5bb-b7cc-4556-8861-a00a82977d6c}) (Version: 14.0.23506.0 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.24215 (HKLM-x32\...\{e2803110-78b3-4664-a479-3611a381656a}) (Version: 14.0.24215.1 - Microsoft Corporation)
Mozilla Firefox 52.0.2 (x86 pt-BR) (HKLM-x32\...\Mozilla Firefox 52.0.2 (x86 pt-BR)) (Version: 52.0.2 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 52.0.2.6291 - Mozilla)
NVIDIA Driver de gráficos 381.65 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 381.65 - NVIDIA Corporation)
NVIDIA Driver do 3D Vision 381.65 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 381.65 - NVIDIA Corporation)
NVIDIA GeForce Experience 3.4.0.70 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 3.4.0.70 - NVIDIA Corporation)
NVIDIA Software do sistema PhysX 9.17.0329 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.17.0329 - NVIDIA Corporation)
NvNodejs (Version: 3.4.0.70 - NVIDIA Corporation) Hidden
NvTelemetry (Version: 2.4.5.0 - NVIDIA Corporation) Hidden
NvvHci (Version: 2.02.0.5 - NVIDIA Corporation) Hidden
Office 16 Click-to-Run Extensibility Component (x32 Version: 16.0.7870.2024 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Extensibility Component 64-bit Registration (Version: 16.0.7830.1018 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Licensing Component (Version: 16.0.7870.2024 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Localization Component (x32 Version: 16.0.7668.2066 - Microsoft Corporation) Hidden
Overwatch (HKLM-x32\...\Overwatch) (Version: - Blizzard Entertainment)
Painel de controle da NVIDIA 381.65 (Version: 381.65 - NVIDIA Corporation) Hidden
PCSX2 - Playstation 2 Emulator (HKLM-x32\...\pcsx2) (Version: - )
Qualcomm Atheros 61x4 Wireless LAN&Bluetooth Installer (HKLM-x32\...\{E7086B15-806E-4519-A876-DBA9FDDE9A13}) (Version: 11.0.0.0055 - Qualcomm Atheros)
Quickset64 (HKLM\...\{87CF757E-C1F1-4D22-865C-00C6950B5258}) (Version: 10.17.008 - Dell Inc.)
Razer Synapse (HKLM-x32\...\{0D78BEE2-F8FF-4498-AF1A-3FF81CED8AC6}) (Version: 2.20.17.302 - Nome de sua empresa:)
Realtek Card Reader (HKLM-x32\...\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}) (Version: 10.0.10586.31225 - Realtek Semiconduct Corp.)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7908 - Realtek Semiconductor Corp.)
Registro de produto (Version: 3.0.123.0 - Dell Inc.) Hidden
Registro de produto Dell (HKLM-x32\...\InstallShield_{85B14AE3-1624-45BE-942B-A528DF6F1CCE}) (Version: 3.0.123.0 - Dell Inc.)
SHIELD Streaming (Version: 7.1.0351 - NVIDIA Corporation) Hidden
SHIELD Wireless Controller Driver (Version: 3.4.0.70 - NVIDIA Corporation) Hidden
Skype™ 7.33 (HKLM-x32\...\{3B7E914A-93D5-4A29-92BB-AF8C3F66C431}) (Version: 7.33.105 - Skype Technologies S.A.)
Software de dispositivo do Chipset Intel® (x32 Version: 10.1.1.7 - Intel(R) Corporation) Hidden
Spotify (HKU\S-1-5-21-2673395217-1231913305-2213340989-1001\...\Spotify) (Version: 1.0.52.725.g943b26a8 - Spotify AB)
TeamSpeak 3 Client (HKLM\...\TeamSpeak 3 Client) (Version: 3.1.1 - TeamSpeak Systems GmbH)
Windows 10 Update and Privacy Settings (HKLM\...\{293F2009-0145-450B-B4AA-063D43FB368C}) (Version: 1.0.13.0 - Microsoft Corporation)
WinRAR 5.40 (32-bit) (HKLM-x32\...\WinRAR archiver) (Version: 5.40.0 - win.rar GmbH)

==================== Exame Personalizado CLSID (Whitelisted): ==========================

(Se uma entrada for incluída na fixlist, será removida do Registro. O arquivo não será movido, a menos que seja colocado separadamente.)


==================== Tarefas Agendadas (Whitelisted) =============

(Se uma entrada for incluída na fixlist, será removida do Registro. O arquivo não será movido, a menos que seja colocado separadamente.)

Task: {0983848A-664C-4388-8E21-227B9B9BCAFF} - System32\Tasks\SystemToolsDailyTest => uaclauncher.exe
Task: {1BA1CAE4-F055-487C-BDCD-185DFD7BE6E0} - System32\Tasks\Microsoft\Office\Office Automatic Updates => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [2017-03-26] (Microsoft Corporation)
Task: {273956DD-0345-49D9-A3D8-B3A161D1C223} - System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [2017-02-23] (NVIDIA Corporation)
Task: {28FC5046-8704-4357-8802-E9D475C161D2} - System32\Tasks\PCDDataUploadTask => uaclauncher.exe
Task: {2BB59E86-EC55-4208-93EB-A2CB7B9F9914} - System32\Tasks\{B62F2D05-9CCB-8077-D5AA-D3B448BDAB1B} => Regsvr32.exe /s /n /i:"/rt" "C:\PROGRA~3\2f2dbe2\51e50ad8.dll" <==== ATENÇÃO
Task: {2E6A867A-816E-4979-BBFC-1DA6E457268F} - System32\Tasks\NvTmRep_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmRep.exe [2017-02-23] (NVIDIA Corporation)
Task: {316905EA-A6B5-451F-9A01-AC688699C747} - System32\Tasks\Adobe Flash Player PPAPI Notifier => C:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_25_0_0_148_pepper.exe [2017-04-11] (Adobe Systems Incorporated)
Task: {31BC773F-2083-47E8-96F6-7B2C348B64C5} - System32\Tasks\McAfee\McAfee Auto Maintenance Task Agent
Task: {380AE6E7-5E4E-461F-87A8-E130066F883C} - System32\Tasks\Dell SupportAssistAgent AutoUpdate => C:\Program Files (x86)\Dell\SupportAssistAgent\bin\SupportAssist.exe [2016-10-24] (Dell Inc.)
Task: {394DB385-FDEA-4819-9AD1-87A30CF948C1} - System32\Tasks\Microsoft\Windows\Subscription\EnableLicenseAcquisition => C:\WINDOWS\system32\ClipRenew.exe [2017-03-20] (Microsoft Corporation)
Task: {453A40A8-E7A1-4143-8096-0404F9F34596} - System32\Tasks\PCDoctorBackgroundMonitorTask => C:\Program Files\Dell\SupportAssist\uaclauncher.exe [2017-02-17] (PC-Doctor, Inc.)
Task: {46D9074A-A629-4360-A2F2-735D3B7BE738} - System32\Tasks\Microsoft\Windows\UNP\RunCampaignManager => C:\WINDOWS\System32\UNP\UNPCampaignManager.exe [2017-04-02] (Microsoft Corporation) <==== ATENÇÃO
Task: {4F0651E9-74DA-472A-B6EF-A29487D5EA89} - System32\Tasks\NvDriverUpdateCheckDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [2017-02-23] (NVIDIA Corporation)
Task: {51B97139-D307-41BB-A4D1-D6EDEE5106CD} - System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [2017-02-23] (NVIDIA Corporation)
Task: {64D227A1-CAF2-4F62-893C-CB71B7F5593F} - System32\Tasks\Microsoft\Windows\EDP\EDP Inaccessible Credentials Task
Task: {66D54AD0-44E9-41B1-8BD1-B7E214085E27} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [2017-03-26] (Microsoft Corporation)
Task: {693F02EA-12F7-4661-8730-A5DF1AFD642F} - System32\Tasks\Microsoft\Windows\BitLocker\BitLocker MDM policy Refresh
Task: {6BD9FDA3-C8EE-4C02-95CB-1B221BF24F79} - System32\Tasks\Microsoft\Windows\DeviceDirectoryClient\RegisterDeviceProtectionStateChanged
Task: {74636CD1-4C8D-4966-B793-D90583CA9E10} - System32\Tasks\RtHDVBg_PushButton => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [2016-08-16] (Realtek Semiconductor)
Task: {7E48EB16-2459-437A-B3B5-DD91866302CC} - System32\Tasks\Microsoft\Windows\EDP\StorageCardEncryption Task
Task: {85322B96-631E-49BD-9C68-902414B88E0C} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWoW64\Macromed\Flash\FlashPlayerUpdateService.exe [2017-04-11] (Adobe Systems Incorporated)
Task: {8986B566-F62E-45DD-BDC7-36ADC7DA8841} - \{0E0A7E47-0E7A-0C78-0911-057F7F7E1104} -> Nenhum Arquivo <==== ATENÇÃO
Task: {8A8CBC0F-3B85-47AE-BEF7-D86570A1FAEB} - System32\Tasks\NvTmMon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmMon.exe [2017-02-23] (NVIDIA Corporation)
Task: {9012427F-08A9-4EBE-95EC-489BFA49A597} - System32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\NvNode\nvnodejslauncher.exe [2017-02-23] (NVIDIA Corporation)
Task: {95061B7E-8FA4-44F8-9615-9D4657403248} - System32\Tasks\Microsoft\Windows\Subscription\LicenseAcquisition => C:\WINDOWS\system32\ClipRenew.exe [2017-03-20] (Microsoft Corporation)
Task: {96B6CC3C-3F1D-4892-9628-B013246C7CBA} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2017-02-14] (Google Inc.)
Task: {97525474-692E-413A-BDA3-F8B3FD778ED5} - System32\Tasks\McAfeeLogon => C:\Program Files\Common Files\McAfee\platform\McUICnt.exe [2017-02-22] (McAfee, Inc.)
Task: {991C1705-01EB-4AF4-85E1-C4744DF6FEB9} - System32\Tasks\DropboxUpdateTaskMachineUA => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [2017-02-06] (Dropbox, Inc.)
Task: {9BFBFF63-27D1-4C7C-ADFA-AE5B98B90F78} - System32\Tasks\Microsoft\Windows\BrokerInfrastructure\BgTaskRegistrationMaintenanceTask
Task: {9CCA48B5-B88C-440F-9B9F-3E8B741347C4} - System32\Tasks\DropboxOEM => C:\Program Files (x86)\Dropbox\DropboxOEM\DropboxOEM.exe [2016-11-30] (DropboxOEM)
Task: {A25D498F-B8FF-4F37-857F-A981109C6E3F} - System32\Tasks\Microsoft\Office\Office Subscription Maintenance => C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonx86\Microsoft Shared\Office16\OLicenseHeartbeat.exe [2017-03-26] (Microsoft Corporation)
Task: {A9236B54-CFC3-4CF2-A8CD-3297D0B29365} - System32\Tasks\Intel Security DAT Reputation (AMCore) Post DAT update endpoint safety pulse => C:\Program Files\Common Files\McAfee\AMContent\scanners\x86_64\datrep\1.50.1291.1\mcdatrep.exe [2017-02-08] (McAfee, Inc.)
Task: {B0CD1232-B852-4671-BD59-7DD9A85FFE7B} - System32\Tasks\NvTmRepOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmRep.exe [2017-02-23] (NVIDIA Corporation)
Task: {B79BABF2-D6FC-47EF-BAC4-90EE0818473F} - System32\Tasks\Dell Cleanup => c:\windows\system32\oem\startmenufix.vbs [2016-09-14] ()
Task: {B7E1DFD5-9405-4892-B1CB-F246ACAEACBA} - System32\Tasks\{351EEC6E-82B5-5BC5-01D8-ECAA8E9886E6} => C:\ProgramData\{DC910B18-6B3A-BCB3-FB18-015290FE3EA5}\D7AFA5C7-6004-126C-2B67-D525BEE2715C.exe <==== ATENÇÃO
Task: {BFA82F68-86F2-4852-B753-0C5B93EB34EA} - System32\Tasks\McAfee\McAfee Idle Detection Task
Task: {E34B2B4A-74EB-4A0D-AF54-44047629DCF6} - System32\Tasks\DropboxUpdateTaskMachineCore => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [2017-02-06] (Dropbox, Inc.)
Task: {F1A0311E-05F4-49D5-AEEF-40B9BF82DF77} - System32\Tasks\PCDEventLauncherTask => C:\Program Files\Dell\SupportAssist\sessionchecker.exe [2017-02-17] (PC-Doctor, Inc.)
Task: {F8754329-3D61-4E38-A971-E6799376CBC3} - System32\Tasks\Intel Security DAT Reputation (AMCore) periodic endpoint safety pulse => C:\Program Files\Common Files\McAfee\AMContent\scanners\x86_64\datrep\1.50.1291.1\mcdatrep.exe [2017-02-08] (McAfee, Inc.)
Task: {FA865EDE-C2C6-4108-A8C4-7DFC6DA47AAB} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2017-02-14] (Google Inc.)

(Se uma entrada for incluída na fixlist, o arquivo da tarefa (.job) será movido. O arquivo que está sendo executado pela tarefa não será movido.)

Task: C:\WINDOWS\Tasks\DropboxUpdateTaskMachineCore.job => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe
Task: C:\WINDOWS\Tasks\DropboxUpdateTaskMachineUA.job => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe
Task: C:\WINDOWS\Tasks\RunDLC.job => cmd /c sc start Dell Help Support WORKGROUP DESKTOP JEE8QGE

==================== Atalhos =============================

(As entradas podem ser listadas para serem restauradas ou removidas.)

ShortcutWithArgument: C:\Users\socer\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\ImplicitAppShortcuts\360c22b137d62ce9\Google Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> --profile-directory=ChromeDefaultData

==================== Módulos Carregados (Whitelisted) ==============

2015-05-19 08:11 - 2015-05-19 08:11 - 00007680 _____ () C:\Program Files (x86)\Intel\Intel(R) Security Assist\isaHelperService.exe
2016-09-24 19:20 - 2016-09-24 19:21 - 00189264 _____ () C:\Program Files (x86)\Razer\Razer Services\GSS\GameScannerService.exe
2017-02-06 09:32 - 2017-02-23 15:35 - 04489152 _____ () C:\Program Files\NVIDIA Corporation\NvContainer\Poco.dll
2017-02-06 09:32 - 2017-02-23 15:35 - 01147328 _____ () C:\Program Files\NVIDIA Corporation\NvContainer\libprotobuf.dll
2017-03-18 17:58 - 2017-03-18 17:58 - 00138000 _____ () C:\WINDOWS\SYSTEM32\inputhost.dll
2017-03-18 17:59 - 2017-03-20 01:02 - 01731072 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll
2017-04-04 10:42 - 2017-03-29 05:47 - 02885464 _____ () C:\Program Files (x86)\Google\Chrome\Application\57.0.2987.133\libglesv2.dll
2017-04-04 10:42 - 2017-03-29 05:47 - 00099672 _____ () C:\Program Files (x86)\Google\Chrome\Application\57.0.2987.133\libegl.dll
2017-01-19 00:22 - 2017-01-19 00:22 - 00298448 _____ () C:\ProgramData\Razer\Synapse\RzStats\RzStats.Manager.exe
2016-12-21 09:24 - 2016-12-21 09:24 - 00134008 _____ () C:\Program Files (x86)\Dell Customer Connect\ServiceTagPlusPlus.dll
2016-09-22 07:56 - 2016-09-22 07:56 - 00133992 _____ () C:\Program Files (x86)\Dell Update\ServiceTagPlusPlus.dll
2015-10-16 05:14 - 2015-10-16 05:14 - 01243936 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\ACE.dll
2017-02-06 09:32 - 2017-02-23 15:35 - 00018880 _____ () C:\Program Files (x86)\NVIDIA Corporation\Update Core\detoured.dll
2017-02-06 09:32 - 2017-02-23 15:35 - 00900032 _____ () C:\Program Files (x86)\NVIDIA Corporation\NvContainer\libprotobuf.dll
2017-02-06 09:32 - 2017-02-23 15:35 - 03774400 _____ () C:\Program Files (x86)\NVIDIA Corporation\NvContainer\Poco.dll
2017-01-16 08:40 - 2017-01-16 08:40 - 00143824 _____ () C:\ProgramData\Razer\Synapse\CrashReporter\CrashRpt1402.dll
2017-03-09 19:51 - 2016-10-08 04:13 - 50656768 _____ () C:\Users\socer\AppData\Local\razer\InGameEngine\cache\RzStats.Manager\cef\libcef.dll
2017-03-09 19:51 - 2016-10-08 04:13 - 01874944 _____ () C:\Users\socer\AppData\Local\razer\InGameEngine\cache\RzStats.Manager\cef\libglesv2.dll
2017-03-09 19:51 - 2016-10-08 04:13 - 00075264 _____ () C:\Users\socer\AppData\Local\razer\InGameEngine\cache\RzStats.Manager\cef\libegl.dll
2017-02-06 09:32 - 2017-02-23 11:30 - 00338488 _____ () \\?\C:\Program Files (x86)\NVIDIA Corporation\NvNode\NVAccountAPINode.node
2017-02-06 09:32 - 2017-02-23 11:30 - 00252352 _____ () \\?\C:\Program Files (x86)\NVIDIA Corporation\NvNode\DriverInstall.node
2017-02-06 09:32 - 2017-02-23 11:30 - 02443320 _____ () \\?\C:\Program Files (x86)\NVIDIA Corporation\NvNode\Downloader.node
2017-02-06 09:32 - 2017-02-23 11:30 - 00385592 _____ () \\?\C:\Program Files (x86)\NVIDIA Corporation\NvNode\NvGameShareAPINode.node
2017-02-06 09:32 - 2017-02-23 11:30 - 00543288 _____ () \\?\C:\Program Files (x86)\NVIDIA Corporation\NvNode\NvSpCapsAPINode.node
2017-02-06 09:32 - 2017-02-23 11:30 - 00468536 _____ () \\?\C:\Program Files (x86)\NVIDIA Corporation\NvNode\NvGalleryAPINode.node

==================== Alternate Data Streams (Whitelisted) =========

(Se uma entrada for incluída na fixlist, somente o ADS será removido.)


==================== Modo de Segurança (Whitelisted) ===================

(Se uma entrada for incluída na fixlist, será removida do Registro. O valor "AlternateShell" será restaurado.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\mcpltsvc => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMService => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\McMPFSvc => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MCODS => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mcpltsvc => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\NetSetupSvc => ""="Service"

==================== Associação (Whitelisted) ===============

(Se uma entrada for incluída na fixlist, o ítem no Registro será restaurado para o padrão ou removido.)


==================== Internet Explorer confiável/restrito ===============

(Se uma entrada for incluída na fixlist, será removida do Registro.)


==================== Hosts Conteúdo: ===============================

(Se necessário, a diretiva Hosts: pode ser incluída na fixlist para redefinir o Hosts.)

2016-07-16 08:47 - 2016-07-16 08:45 - 00000824 ____A C:\WINDOWS\system32\Drivers\etc\hosts


==================== Outras Áreas ============================

(Atualmente não há nenhuma correção automática para esta seção.)

HKU\S-1-5-21-2673395217-1231913305-2213340989-1001\Control Panel\Desktop\\Wallpaper -> C:\Windows\web\wallpaper\Dell\Win LTBLUE 1920x1200.jpg
DNS Servers: 8.8.8.8
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Firewall do Windows está habilitado.

==================== MSCONFIG/TASK MANAGER ítens desabilitados ==

HKLM\...\StartupApproved\Run: => "SecurityHealth"
HKLM\...\StartupApproved\Run32: => "Dropbox"
HKU\S-1-5-21-2673395217-1231913305-2213340989-1001\...\StartupApproved\StartupFolder: => "Curse.lnk"
HKU\S-1-5-21-2673395217-1231913305-2213340989-1001\...\StartupApproved\Run: => "OneDrive"
HKU\S-1-5-21-2673395217-1231913305-2213340989-1001\...\StartupApproved\Run: => "Skype"
HKU\S-1-5-21-2673395217-1231913305-2213340989-1001\...\StartupApproved\Run: => "Spotify"
HKU\S-1-5-21-2673395217-1231913305-2213340989-1001\...\StartupApproved\Run: => "Spotify Web Helper"
HKU\S-1-5-21-2673395217-1231913305-2213340989-1001\...\StartupApproved\Run: => "BlueStacks Agent"
HKU\S-1-5-21-2673395217-1231913305-2213340989-1001\...\StartupApproved\Run: => "Discord"

==================== Regras do Firewall (Whitelisted) ===============

(Se uma entrada for incluída na fixlist, será removida do Registro. O arquivo não será movido, a menos que seja colocado separadamente.)

FirewallRules: [vm-monitoring-nb-session] => (Allow) LPort=139
FirewallRules: [{EAC5CFEE-BADF-44BA-8B25-8FCC9827CF37}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
FirewallRules: [{FBF1898A-9F38-4E4C-9E36-184AC6BDCB94}] => (Allow) C:\Program Files (x86)\Microsoft Office\root\Office16\outlook.exe
FirewallRules: [{A189F115-8438-42B8-8D79-B4459E11923E}] => (Allow) C:\Users\socer\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{6FE7C3B6-255D-4B10-894E-9C15B36DE765}] => (Allow) C:\Users\socer\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{405AE310-B843-4BF6-9765-C380754B3751}] => (Allow) C:\Users\socer\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{7BA08570-C3B6-421E-8923-AAB4CFA837EC}] => (Allow) C:\Users\socer\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{CCF8D01F-AA56-49C9-B118-D0E8CCCA4B08}] => (Allow) C:\Users\socer\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{01280FEC-91AE-4AF4-9D74-9618DBB3E27E}] => (Allow) C:\Users\socer\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{9F70CC47-B463-417B-B622-872F4A3F6FF8}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{D30461AD-C130-45C2-9531-AA2CEA943921}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [UDP Query User{5EA3EAF8-148F-433B-9919-2924FEF90708}C:\users\socer\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\socer\appdata\roaming\spotify\spotify.exe
FirewallRules: [TCP Query User{5A897F05-D9A2-4164-97EE-465990492C4A}C:\users\socer\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\socer\appdata\roaming\spotify\spotify.exe
FirewallRules: [UDP Query User{326DCC21-FFE9-4AD7-A9AC-5E72982587E0}C:\program files (x86)\overwatch\overwatch.exe] => (Allow) C:\program files (x86)\overwatch\overwatch.exe
FirewallRules: [TCP Query User{A4BB856A-26FA-4969-9066-5CD9F9FAF05C}C:\program files (x86)\overwatch\overwatch.exe] => (Allow) C:\program files (x86)\overwatch\overwatch.exe
FirewallRules: [{95F5571C-F0A2-4DFE-9F08-100C5564899B}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{082A025D-BA6C-42E2-B907-F0CF07090702}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{5CBCB14B-C956-44EE-B06D-5ABB114EBFC4}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{4AF6B681-08DE-4D62-9F67-85627D98D042}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe
FirewallRules: [{6CEDB281-D5E5-499C-A04D-934DD2598541}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\NvContainer.exe
FirewallRules: [{D4EAA8A5-5C8E-45EA-BC81-065F51BFAECA}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\NvContainer.exe
FirewallRules: [{E69470D0-7BBD-458D-ACA8-CA490689537A}] => (Allow) C:\Program Files (x86)\SquareEnix\FINAL FANTASY XIV - A Realm Reborn\boot\ffxivlauncher.exe
FirewallRules: [{A1FFC7D4-43FD-4B46-9A79-44B95761FC50}] => (Allow) C:\Program Files (x86)\SquareEnix\FINAL FANTASY XIV - A Realm Reborn\boot\ffxivlauncher.exe
FirewallRules: [{1CC6F598-4E60-4AED-BCFB-57B846AE141D}] => (Allow) C:\Program Files (x86)\SquareEnix\FINAL FANTASY XIV - A Realm Reborn\boot\ffxivboot.exe
FirewallRules: [{ACA253D2-550D-4DE7-813D-CB580D172058}] => (Allow) C:\Program Files (x86)\SquareEnix\FINAL FANTASY XIV - A Realm Reborn\boot\ffxivboot.exe
FirewallRules: [{4CE28A75-B398-49AC-B25D-382A505BC75B}] => (Allow) C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe
FirewallRules: [{53D9DEA3-0E76-4487-A343-888ECD1F89A3}] => (Allow) C:\Program Files (x86)\Dropbox\Client\Dropbox.exe

==================== Pontos de Restauração =========================

14-04-2017 12:08:55 Windows Update

==================== Dispositivos Apresentando Falhas No Gerenciador =============


==================== Erros no Log de eventos: =========================

Erros em Aplicativos:
==================
Error: (04/14/2017 07:25:29 PM) (Source: Dell System Detect) (EventID: 0) (User: )
Description: <Exception><Type>System.Xml.XmlException</Type><Message><![CDATA[O caractere '/', valor hexadecimal 0x2F, não pode ser incluído em um nome.]]></Message><Source><![CDATA[System.Xml]]></Source><StackTrace><![CDATA[ em System.Xml.XmlDocument.CheckName(String name)
em System.Xml.XmlElement..ctor(XmlName name, Boolean empty, XmlDocument doc)
em System.Xml.XmlDocument.CreateElement(String prefix, String localName, String namespaceURI)
em System.Xml.XmlDocument.CreateElement(String name)
em eSupport.Common.Client.Core.LastUpdatedHelper.SetLastUpdatedValue(String type, String value)]]></StackTrace><SysInfo STag="3WRZ1H2" SMBIOSMajVer="2" SMBIOSMinVer="8" SMBIOSBIOSVer="1.1.9" SMBIOSPresent="True" Rel_Date="20160425000000.000000+000" DSDVersion="" Vendor="Dell Inc." PName="Inspiron 5457" Ident_Num="DESKTOP-JEE8QGE" TimeZone="(UTC-03:00) Brasília" OSName="Microsoft Windows 10 Home Single Language"/><Method>UpdateLastUpdatedConfig</Method><HostIP>192.168.0.15</HostIP></Exception>

Error: (04/14/2017 07:25:29 PM) (Source: Dell System Detect) (EventID: 0) (User: )
Description: <Exception><Type>System.Xml.XmlException</Type><Message><![CDATA[O caractere '/', valor hexadecimal 0x2F, não pode ser incluído em um nome.]]></Message><Source><![CDATA[System.Xml]]></Source><StackTrace><![CDATA[ em System.Xml.XmlDocument.CheckName(String name)
em System.Xml.XmlElement..ctor(XmlName name, Boolean empty, XmlDocument doc)
em System.Xml.XmlDocument.CreateElement(String prefix, String localName, String namespaceURI)
em System.Xml.XmlDocument.CreateElement(String name)
em eSupport.Common.Client.Core.LastUpdatedHelper.SetLastUpdatedValue(String type, String value)]]></StackTrace><SysInfo STag="3WRZ1H2" SMBIOSMajVer="2" SMBIOSMinVer="8" SMBIOSBIOSVer="1.1.9" SMBIOSPresent="True" Rel_Date="20160425000000.000000+000" DSDVersion="" Vendor="Dell Inc." PName="Inspiron 5457" Ident_Num="DESKTOP-JEE8QGE" TimeZone="(UTC-03:00) Brasília" OSName="Microsoft Windows 10 Home Single Language"/><Method>UpdateLastUpdatedConfig</Method><HostIP>192.168.0.15</HostIP></Exception>

Error: (04/14/2017 07:25:29 PM) (Source: Dell System Detect) (EventID: 0) (User: )
Description: <Exception><Type>System.Xml.XmlException</Type><Message><![CDATA[O caractere '/', valor hexadecimal 0x2F, não pode ser incluído em um nome.]]></Message><Source><![CDATA[System.Xml]]></Source><StackTrace><![CDATA[ em System.Xml.XmlDocument.CheckName(String name)
em System.Xml.XmlElement..ctor(XmlName name, Boolean empty, XmlDocument doc)
em System.Xml.XmlDocument.CreateElement(String prefix, String localName, String namespaceURI)
em System.Xml.XmlDocument.CreateElement(String name)
em eSupport.Common.Client.Core.LastUpdatedHelper.SetLastUpdatedValue(String type, String value)]]></StackTrace><SysInfo STag="3WRZ1H2" SMBIOSMajVer="2" SMBIOSMinVer="8" SMBIOSBIOSVer="1.1.9" SMBIOSPresent="True" Rel_Date="20160425000000.000000+000" DSDVersion="" Vendor="Dell Inc." PName="Inspiron 5457" Ident_Num="DESKTOP-JEE8QGE" TimeZone="(UTC-03:00) Brasília" OSName="Microsoft Windows 10 Home Single Language"/><Method>UpdateLastUpdatedConfig</Method><HostIP>192.168.0.15</HostIP></Exception>

Error: (04/14/2017 07:25:28 PM) (Source: Dell System Detect) (EventID: 0) (User: )
Description: <Exception><Type>System.Xml.XmlException</Type><Message><![CDATA[O caractere '/', valor hexadecimal 0x2F, não pode ser incluído em um nome.]]></Message><Source><![CDATA[System.Xml]]></Source><StackTrace><![CDATA[ em System.Xml.XmlDocument.CheckName(String name)
em System.Xml.XmlElement..ctor(XmlName name, Boolean empty, XmlDocument doc)
em System.Xml.XmlDocument.CreateElement(String prefix, String localName, String namespaceURI)
em System.Xml.XmlDocument.CreateElement(String name)
em eSupport.Common.Client.Core.LastUpdatedHelper.SetLastUpdatedValue(String type, String value)]]></StackTrace><SysInfo STag="3WRZ1H2" SMBIOSMajVer="2" SMBIOSMinVer="8" SMBIOSBIOSVer="1.1.9" SMBIOSPresent="True" Rel_Date="20160425000000.000000+000" DSDVersion="" Vendor="Dell Inc." PName="Inspiron 5457" Ident_Num="DESKTOP-JEE8QGE" TimeZone="(UTC-03:00) Brasília" OSName="Microsoft Windows 10 Home Single Language"/><Method>UpdateLastUpdatedConfig</Method><HostIP>192.168.0.15</HostIP></Exception>

Error: (04/14/2017 07:06:22 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Nome do aplicativo com falha: SDUpdSvc.exe, versão: 2.5.44.79, carimbo de data/hora: 0x57e24e33
Nome do módulo com falha: rtl150.bpl, versão: 15.0.3953.35171, carimbo de data/hora: 0x4cca139f
Código de exceção: 0xc0000005
Deslocamento da falha: 0x0000a116
ID do processo com falha: 0xfb0
Hora de início do aplicativo com falha: 0x01d2b4f2dc5fed70
Caminho do aplicativo com falha: C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe
Caminho do módulo com falha: C:\Program Files (x86)\Spybot - Search & Destroy 2\rtl150.bpl
ID do Relatório: e9915b7f-bff7-4a1c-8e00-7ae2715b3ab3
Nome completo do pacote com falha:
ID do aplicativo relativo ao pacote com falha:

Error: (04/14/2017 12:09:08 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: Falha dos Serviços de Criptografia ao processar a chamada de OnIdentity() no Objeto de Gravador do Sistema..

Details:
AddWin32ServiceFiles: Unable to back up image of service Razer Wizard Service since OpenService API failed

System Error:
O serviço especificado não existe como serviço instalado.
.

Error: (04/14/2017 09:12:05 AM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: DESKTOP-JEE8QGE)
Description: Falha na ativação do aplicativo Microsoft.Windows.Cortana_cw5n1h2txyewy!CortanaUI com o erro: -2144927148. Veja o log Microsoft-Windows-TWinUI/Operational para obter informações adicionais.

Error: (04/14/2017 08:52:06 AM) (Source: DellSupportAssistRemedationService.exe) (EventID: 0) (User: )
Description: [10] ERROR- Failed to create user process to collect profile from Service. Exception:System.Exception: ProcessUtilities->CreateUIProcessFromLocalSystem->An unhandled exception was caught spawning the process, the exception was: Can't create user process since no one logged in! WTSQueryUserToken() failed
em utilities.ProcessHelper.CreateUIProcessFromLocalSystem(String in_strTarget, String in_strArguments, Boolean createOnlyForActiveUser, Boolean shouldHidden)
em MailboxAgent.OSProfileCollector.collectProfiles() #StackInfo#

Error: (04/14/2017 08:52:06 AM) (Source: DellSupportAssistRemedationService.exe) (EventID: 0) (User: )
Description: [10] ERROR- ProcessUtilities.CreateUIProcessFromLocalSystem() exception:System.Exception: Can't create user process since no one logged in! WTSQueryUserToken() failed
em utilities.ProcessHelper.CreateUIProcessFromLocalSystem(String in_strTarget, String in_strArguments, Boolean createOnlyForActiveUser, Boolean shouldHidden) #StackInfo#

Error: (04/14/2017 06:52:06 AM) (Source: DellSupportAssistRemedationService.exe) (EventID: 0) (User: )
Description: [10] ERROR- Failed to create user process to collect profile from Service. Exception:System.Exception: ProcessUtilities->CreateUIProcessFromLocalSystem->An unhandled exception was caught spawning the process, the exception was: Can't create user process since no one logged in! WTSQueryUserToken() failed
em utilities.ProcessHelper.CreateUIProcessFromLocalSystem(String in_strTarget, String in_strArguments, Boolean createOnlyForActiveUser, Boolean shouldHidden)
em MailboxAgent.OSProfileCollector.collectProfiles() #StackInfo#


Erros de Sistema:
=============
Error: (04/14/2017 07:30:45 PM) (Source: DCOM) (EventID: 10016) (User: AUTORIDADE NT)
Description: As configurações de permissão específico do aplicativo não concedem permissão Local Ativação para o aplicativo de Servidor COM com CLSID
{6B3B8D23-FA8D-40B9-8DBD-B950333E2C52}
e APPID
{4839DDB7-58C2-48F5-8283-E1D1807D0D7D}
ao usuário AUTORIDADE NT\SERVIÇO LOCAL SID (S-1-5-19) do endereço LocalHost (Usando LRPC) que está sendo executado no contêiner de aplicativos Não Disponível SID (Não Disponível). Essa permissão de segurança pode ser modificada com a ferramenta administrativa Serviços de Componentes.

Error: (04/14/2017 07:30:45 PM) (Source: DCOM) (EventID: 10016) (User: AUTORIDADE NT)
Description: As configurações de permissão específico do aplicativo não concedem permissão Local Ativação para o aplicativo de Servidor COM com CLSID
{6B3B8D23-FA8D-40B9-8DBD-B950333E2C52}
e APPID
{4839DDB7-58C2-48F5-8283-E1D1807D0D7D}
ao usuário AUTORIDADE NT\SERVIÇO LOCAL SID (S-1-5-19) do endereço LocalHost (Usando LRPC) que está sendo executado no contêiner de aplicativos Não Disponível SID (Não Disponível). Essa permissão de segurança pode ser modificada com a ferramenta administrativa Serviços de Componentes.

Error: (04/14/2017 07:27:28 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Não foi possível iniciar o serviço CldFlt devido ao seguinte erro:
Não há suporte para o pedido.

Error: (04/14/2017 07:25:41 PM) (Source: DCOM) (EventID: 10010) (User: DESKTOP-JEE8QGE)
Description: O servidor {4AA0A5C4-1B9B-4F2E-99D7-99C6AEC83474} não se registrou no DCOM dentro do tempo limite necessário.

Error: (04/14/2017 07:25:40 PM) (Source: DCOM) (EventID: 10010) (User: DESKTOP-JEE8QGE)
Description: O servidor {4AA0A5C4-1B9B-4F2E-99D7-99C6AEC83474} não se registrou no DCOM dentro do tempo limite necessário.

Error: (04/14/2017 07:03:26 PM) (Source: DCOM) (EventID: 10016) (User: AUTORIDADE NT)
Description: As configurações de permissão específico do aplicativo não concedem permissão Local Ativação para o aplicativo de Servidor COM com CLSID
{D63B10C5-BB46-4990-A94F-E40B9D520160}
e APPID
{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}
ao usuário AUTORIDADE NT\SISTEMA SID (S-1-5-18) do endereço LocalHost (Usando LRPC) que está sendo executado no contêiner de aplicativos Não Disponível SID (Não Disponível). Essa permissão de segurança pode ser modificada com a ferramenta administrativa Serviços de Componentes.

Error: (04/14/2017 07:03:10 PM) (Source: DCOM) (EventID: 10016) (User: AUTORIDADE NT)
Description: As configurações de permissão específico do aplicativo não concedem permissão Local Ativação para o aplicativo de Servidor COM com CLSID
{D63B10C5-BB46-4990-A94F-E40B9D520160}
e APPID
{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}
ao usuário AUTORIDADE NT\SISTEMA SID (S-1-5-18) do endereço LocalHost (Usando LRPC) que está sendo executado no contêiner de aplicativos Não Disponível SID (Não Disponível). Essa permissão de segurança pode ser modificada com a ferramenta administrativa Serviços de Componentes.

Error: (04/14/2017 05:29:29 PM) (Source: DCOM) (EventID: 10016) (User: AUTORIDADE NT)
Description: As configurações de permissão específico do aplicativo não concedem permissão Local Ativação para o aplicativo de Servidor COM com CLSID
{D63B10C5-BB46-4990-A94F-E40B9D520160}
e APPID
{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}
ao usuário AUTORIDADE NT\SISTEMA SID (S-1-5-18) do endereço LocalHost (Usando LRPC) que está sendo executado no contêiner de aplicativos Não Disponível SID (Não Disponível). Essa permissão de segurança pode ser modificada com a ferramenta administrativa Serviços de Componentes.

Error: (04/14/2017 12:49:24 PM) (Source: DCOM) (EventID: 10016) (User: AUTORIDADE NT)
Description: As configurações de permissão específico do aplicativo não concedem permissão Local Ativação para o aplicativo de Servidor COM com CLSID
{D63B10C5-BB46-4990-A94F-E40B9D520160}
e APPID
{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}
ao usuário AUTORIDADE NT\SISTEMA SID (S-1-5-18) do endereço LocalHost (Usando LRPC) que está sendo executado no contêiner de aplicativos Não Disponível SID (Não Disponível). Essa permissão de segurança pode ser modificada com a ferramenta administrativa Serviços de Componentes.

Error: (04/14/2017 12:48:48 PM) (Source: DCOM) (EventID: 10016) (User: AUTORIDADE NT)
Description: As configurações de permissão específico do aplicativo não concedem permissão Local Ativação para o aplicativo de Servidor COM com CLSID
{D63B10C5-BB46-4990-A94F-E40B9D520160}
e APPID
{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}
ao usuário AUTORIDADE NT\SISTEMA SID (S-1-5-18) do endereço LocalHost (Usando LRPC) que está sendo executado no contêiner de aplicativos Não Disponível SID (Não Disponível). Essa permissão de segurança pode ser modificada com a ferramenta administrativa Serviços de Componentes.


==================== Informações da Memória ===========================

Processador: Intel(R) Core(TM) i7-6500U CPU @ 2.50GHz
Percentagem de memória em uso: 25%
RAM física total: 16275.82 MB
RAM física disponível: 12203.18 MB
Virtual Total: 19219.82 MB
Virtual disponível: 15016.77 MB

==================== Drives ================================

Drive c: (OS) (Fixed) (Total:918.55 GB) (Free:806.16 GB) NTFS

==================== MBR & Tabela de Partições ==================

========================================================
Disk: 0 (Size: 931.5 GB) (Disk ID: B4C0C1FE)

Partition: GPT.

==================== Fim de Addition.txt ============================
 

Nuno

Level 2
Verified
Feb 26, 2016
98
Oh dear!
I'd say try Zemana and if the issue persists, run a check with ComboFix, download it from bleepingcomputer.
Let me know how it went, good luck with that!
 

Nuno

Level 2
Verified
Feb 26, 2016
98
Oh dear!
I'd say try Zemana and if the issue persists, run a check with ComboFix, download it from bleepingcomputer.
Let me know how it went, good luck with that!
 

TwinHeadedEagle

Level 41
Verified
Mar 8, 2013
22,627
Hello,


FRST.gif
Scan with Farbar Recovery Scan Tool

Please re-run Farbar Recovery Scan Tool to give me a fresh look at your system.
  • Right-click on
    FRST.gif
    icon and select
    RunAsAdmin.jpg
    Run as Administrator to start the tool.
    (XP users click run after receipt of Windows Security Warning - Open File).
  • Make sure that Addition.txt option is checked.

    2873ryc.png

  • Press Scan button and wait.
  • The tool will produce two logfiles on your desktop: FRST.txt and Addition.txt.
Please attach report into your next reply.
 

About us

  • MalwareTips is a community-driven platform providing the latest information and resources on malware and cyber threats. Our team of experienced professionals and passionate volunteers work to keep the internet safe and secure. We provide accurate, up-to-date information and strive to build a strong and supportive community dedicated to cybersecurity.

User Menu

Follow us

Follow us on Facebook or Twitter to know first about the latest cybersecurity incidents and malware threats.

Top