Máquina lenta e infectada

Daniel_San01 · 14 de maio de 2024

Olá a todos! Desde já, agradecido.... Segue os LOGS...

# -------------------------------
# Malwarebytes AdwCleaner 8.4.2.0
# -------------------------------
# Build: 03-04-2024
# Database: 2024-03-04.1 (Cloud)
# Support: https://www.malwarebytes.com/support
#
# -------------------------------
# Mode: Clean
# -------------------------------
# Start: 05-14-2024
# Duration: 00:00:01
# OS: Windows 10 (Build 19045.3803)
# Cleaned: 0
# Failed: 0

***** [ Services ] *****

No malicious services cleaned.

***** [ Folders ] *****

No malicious folders cleaned.

***** [ Files ] *****

No malicious files cleaned.

***** [ DLL ] *****

No malicious DLLs cleaned.

***** [ WMI ] *****

No malicious WMI cleaned.

***** [ Shortcuts ] *****

No malicious shortcuts cleaned.

***** [ Tasks ] *****

No malicious tasks cleaned.

***** [ Registry ] *****

No malicious registry entries cleaned.

***** [ Chromium (and derivatives) ] *****

No malicious Chromium entries cleaned.

***** [ Chromium URLs ] *****

No malicious Chromium URLs cleaned.

***** [ Firefox (and derivatives) ] *****

No malicious Firefox entries cleaned.

***** [ Firefox URLs ] *****

No malicious Firefox URLs cleaned.

***** [ Hosts File Entries ] *****

No malicious hosts file entries cleaned.

***** [ Preinstalled Software ] *****

No Preinstalled Software cleaned.

*************************

[+] Delete Tracing Keys
[+] Reset Winsock

*************************

AdwCleaner[S00].txt - [1420 octets] - [14/05/2024 08:46:09]

########## EOF - C:\AdwCleaner\Logs\AdwCleaner[C00].txt ##########

ZHPCleaner v2024.5.6.15 by Nicolas Coolman (2024/05/06) ~ Run by Daniel (Administrator) (14/05/2024 08:48:43) ~ Web: https://www.nicolascoolman.com ~ Blog: https://nicolascoolman.eu/ ~ Facebook : https://www.facebook.com/nicolascoolman1 ~ State version : Version OK ~ Certificate ZHPCleaner: Illegal ~ Type : Scan ~ Report : C:\Users\Daniel\Desktop\ZHPCleaner (S).txt ~ Quarantine : C:\Users\Daniel\AppData\Roaming\ZHP\ZHPCleaner_Reg.txt ~ UAC : Activate ~ Boot Mode : Normal (Normal boot) Windows 10 Home Single Language, 64-bit (Build 19045) ---\ Alternate Data Stream (ADS). (0) ~ No malicious or unnecessary items found. (ADS) ---\ Services (0) ~ No malicious or unnecessary items found. (Service) ---\ Browser internet (2) FOUND file: C:\Users\Daniel\AppData\Local\Microsoft\Edge\User Data\Default\History =>.SUP.BrowserHistoric FOUND folder: C:\Users\Daniel\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data =>.SUP.BrowserCache ---\ Hosts file (1) ~ The hosts file is legitimate (20) ---\ Scheduled automatic tasks. (0) ~ No malicious or unnecessary items found. (Task) ---\ Explorer ( File, Folder) (2) FOUND file: C:\Users\Daniel\AppData\Local\Google\Chrome\User Data\Default\Preferences =>ChromiumPreference FOUND file: C:\Users\Daniel\AppData\Local\Microsoft\Edge\User Data\Default\Preferences =>ChromiumPreference ---\ Registry ( Key, Value, Data) (0) ~ No malicious or unnecessary items found. (Registry) ---\ Summary of the elements found (3) https://nicolascoolman.eu/2023/07/18/les-caches-et-historiques-de-navigateurs/ =>.SUP.BrowserHistoric https://nicolascoolman.eu/2023/07/18/les-caches-et-historiques-de-navigateurs/ =>.SUP.BrowserCache https://nicolascoolman.eu/2020/10/01/preferences-navigateurs-chromium/ =>ChromiumPreference ---\ Result of repair ~ Any repair made ~ Microsoft Edge OK ~ Microsoft Internet Explorer OK ---\ Statistics ~ Items scanned : 107031 ~ Items found : 4 ~ Items cancelled : 0 ~ Space saving (bytes) : 0 ~ Items options : 10/18 ---\ OPTIONS NOT ACTIVES ~ Temporary file analysis ~ Temporary folder analysis ~ Empty Folder CLSID Analysis ~ Empty Other Folder Analysis ~ Empty LocalLow Folder Analysis ~ Empty Local Folder Analysis ~ Obsolete Installer File Analysis ~ Start browsers with extensions removed ~ End of search in 00h27mn53s ---\ Reports (0) ZHPCleaner-[S]-14052024-09_16_36.txt]]]]]]

Resultado do análise da Farbar Recovery Scan Tool (FRST) (x64) Versão: 19.04.2024 01
Executado por Daniel (administrador) em DESKTOP-KD1RKIN (Dell Inc. Inspiron 3442) (14-05-2024 09:32:01)
Executando a partir de C:\Users\Daniel\Desktop\FRST64.exe
Perfis Carregados: Daniel
Plataforma: Microsoft Windows 10 Home Single Language Versão 22H2 19045.3803 (X64) Idioma: Português (Brasil)
Navegador padrão: Edge
Modo da Inicialização: Normal

==================== Processos (Whitelisted) =================

(Se uma entrada for incluída na fixlist, o processo será fechado. O arquivo não será movido.)

(explorer.exe ->) (Google LLC -> Google LLC) C:\Program Files\Google\Chrome\Application\chrome.exe <31>
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe <5>
(services.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe
(services.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24030.9-0\MpDefenderCoreService.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24030.9-0\MsMpEng.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24030.9-0\NisSrv.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(svchost.exe ->) (Skype Software Sarl -> ) C:\Program Files\WindowsApps\Microsoft.SkypeApp_14.53.77.0_x64__kzf8qxf38zg5c\SkypeBackgroundHost.exe
(svchost.exe ->) (Skype Software Sarl -> Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.SkypeApp_14.53.77.0_x64__kzf8qxf38zg5c\SkypeApp.exe

==================== Registro (Whitelisted) ===================

(Se uma entrada for incluída na fixlist, o ítem no Registro será restaurado para o padrão ou removido. O arquivo não será movido.)

HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [646776 2020-03-12] (Oracle America, Inc. -> Oracle Corporation)
HKLM-x32\...\Run: [VirtualCloneDrive] => C:\Program Files (x86)\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe [105280 2020-02-23] (Elaborate Bytes AG -> Elaborate Bytes AG)
HKU\S-1-5-21-336356994-3803797036-487031319-1001\...\Run: [MicrosoftEdgeAutoLaunch_CA39946F614AD7FFFC070BF82DF8A22E] => "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --win-session-start [4081208 2024-05-10] (Microsoft Corporation -> Microsoft Corporation)
HKU\S-1-5-21-336356994-3803797036-487031319-1001\...\Run: [EpicGamesLauncher] => C:\Program Files (x86)\Epic Games\Launcher\Portal\Binaries\Win64\EpicGamesLauncher.exe [37495272 2024-05-13] (Epic Games Inc. -> Epic Games, Inc.)
HKU\S-1-5-21-336356994-3803797036-487031319-1001\...\RunOnce: [Uninstall 21.220.1024.0005\amd64] => C:\Windows\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Daniel\AppData\Local\Microsoft\OneDrive\21.220.1024.0005\amd64" [0 2024-05-13] () <==== ATENÇÃO [zero byte Arquivo/Pasta]
HKU\S-1-5-21-336356994-3803797036-487031319-1001\...\RunOnce: [Uninstall 21.220.1024.0005] => C:\Windows\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Daniel\AppData\Local\Microsoft\OneDrive\21.220.1024.0005" [0 2024-05-13] () <==== ATENÇÃO [zero byte Arquivo/Pasta]
HKU\S-1-5-21-336356994-3803797036-487031319-1001\...\RunOnce: [Delete Cached Update Binary] => C:\Windows\system32\cmd.exe /q /c del /q "C:\Users\Daniel\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exe" [67803552 2024-05-13] (Microsoft Corporation -> Microsoft Corporation)
HKU\S-1-5-21-336356994-3803797036-487031319-1001\...\RunOnce: [Delete Cached Standalone Update Binary] => C:\Windows\system32\cmd.exe /q /c del /q "C:\Users\Daniel\AppData\Local\Microsoft\OneDrive\StandaloneUpdater\OneDriveSetup.exe" (Nenhum Arquivo)
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files\Google\Chrome\Application\124.0.6367.202\Installer\chrmstp.exe [2024-05-13] (Google LLC -> Google LLC)
IFEO\EOSnotify.exe: [Debugger] /
IFEO\InstallAgent.exe: [Debugger] /
IFEO\MoNotificationUx.exe: [Debugger] /
IFEO\MusNotification.exe: [Debugger] /
IFEO\MusNotificationUx.exe: [Debugger] /
IFEO\osppsvc.exe: [VerifierDlls] SppExtComObjHook.dll
IFEO\remsh.exe: [Debugger] /
IFEO\SihClient.exe: [Debugger] /
IFEO\SppExtComObj.exe: [VerifierDlls] SppExtComObjHook.dll
IFEO\UpdateAssistant.exe: [Debugger] /
IFEO\UsoClient.exe: [Debugger] /
IFEO\WaaSMedic.exe: [Debugger] /
IFEO\WaasMedicAgent.exe: [Debugger] /
IFEO\Windows10Upgrade.exe: [Debugger] /
IFEO\Windows10UpgraderApp.exe: [Debugger] /

==================== Tarefas Agendadas (Whitelisted) =================

(Se uma entrada for incluída na fixlist, será removida do Registro. O arquivo não será movido, a menos que seja colocado separadamente.)

Task: {2B680331-D53B-4BB1-A46B-40160928713B} - System32\Tasks\GoogleSystem\GoogleUpdater\GoogleUpdaterTaskSystem126.0.6462.0{FA2453F7-738A-4D12-A11A-0CF502AFAF90} => C:\Program Files (x86)\Google\GoogleUpdater\126.0.6462.0\updater.exe [4794656 2024-05-06] (Google LLC -> Google LLC)
Task: {04CC5E89-8D35-4252-932A-581CAA9919A6} - System32\Tasks\Microsoft\Office\Office Automatic Updates => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [5967976 2015-08-16] (Microsoft Corporation -> Microsoft Corporation)
Task: {203022A5-137B-4B47-B9BB-518E43132964} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [5967976 2015-08-16] (Microsoft Corporation -> Microsoft Corporation)
Task: {E056C7BA-6C8D-4E35-804D-94293C79E410} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack2016 => C:\Program Files (x86)\Microsoft Office\root\Office16\msoia.exe [315056 2024-05-13] (Microsoft Corporation -> Microsoft Corporation)
Task: {0E61D9E8-0719-49DC-BF38-0D99A3FF0B9B} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn2016 => C:\Program Files (x86)\Microsoft Office\root\Office16\msoia.exe [315056 2024-05-13] (Microsoft Corporation -> Microsoft Corporation)
Task: {2C187D6F-0AFD-441A-9704-97D42E74933A} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24030.9-0\MpCmdRun.exe [1654168 2024-05-13] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {BB8CA3BD-1C77-4B18-9617-DAA48F0C6715} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24030.9-0\MpCmdRun.exe [1654168 2024-05-13] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {B5DFE2D8-0796-4838-B825-CD00003F0A16} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24030.9-0\MpCmdRun.exe [1654168 2024-05-13] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {9D092637-1A01-4FA0-BABB-40495C1CC800} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24030.9-0\MpCmdRun.exe [1654168 2024-05-13] (Microsoft Windows Publisher -> Microsoft Corporation)

(Se uma entrada for incluída na fixlist, o arquivo da tarefa (.job) será movido. O arquivo que está sendo executado pela tarefa não será movido.)

==================== Internet (Whitelisted) ====================

(Se um ítem for incluído na fixlist, sendo um ítem do Registro, será removido ou restaurado para o padrão.)

Tcpip\Parameters: [DhcpNameServer] 192.168.1.254
Tcpip\..\Interfaces\{da84ae6e-b27e-405e-8bd9-5beb0792b20e}: [DhcpNameServer] 192.168.1.254
HKU\S-1-5-21-336356994-3803797036-487031319-1001\SOFTWARE\Policies\Microsoft\Internet Explorer: Restrição <==== ATENÇÃO

Edge:
=======
Edge DefaultProfile: Default
Edge Profile: C:\Users\Daniel\AppData\Local\Microsoft\Edge\User Data\Default [2024-05-14]
Edge Extension: (Documentos Google off-line) - C:\Users\Daniel\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2024-05-13]
Edge Extension: (Edge relevant text changes) - C:\Users\Daniel\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\jmjflgjpcpepeafmmgdpfkogkghcpiha [2024-05-13]

FireFox:
========
FF Plugin: @java.com/DTPlugin,version=11.251.2 -> C:\Program Files\Java\jre1.8.0_251\bin\dtplugin\npDeployJava1.dll [2024-05-13] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.251.2 -> C:\Program Files\Java\jre1.8.0_251\bin\plugin2\npjp2.dll [2024-05-13] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.50918.0\npctrl.dll [2018-10-23] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin: @videolan.org/vlc,version=3.0.20 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2023-10-30] (VideoLAN -> VideoLAN)
FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/pdf -> C:\Program Files (x86)\Foxit Software\Foxit PDF Reader\plugins\npFoxitPDFReaderPlugin.dll [2024-04-11] (FOXIT SOFTWARE INC. -> Foxit Corporation)
FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.cpdf -> C:\Program Files (x86)\Foxit Software\Foxit PDF Reader\plugins\npFoxitPDFReaderPlugin.dll [2024-04-11] (FOXIT SOFTWARE INC. -> Foxit Corporation)
FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.fdf -> C:\Program Files (x86)\Foxit Software\Foxit PDF Reader\plugins\npFoxitPDFReaderPlugin.dll [2024-04-11] (FOXIT SOFTWARE INC. -> Foxit Corporation)
FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.xdp -> C:\Program Files (x86)\Foxit Software\Foxit PDF Reader\plugins\npFoxitPDFReaderPlugin.dll [2024-04-11] (FOXIT SOFTWARE INC. -> Foxit Corporation)
FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.xfdf -> C:\Program Files (x86)\Foxit Software\Foxit PDF Reader\plugins\npFoxitPDFReaderPlugin.dll [2024-04-11] (FOXIT SOFTWARE INC. -> Foxit Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=11.251.2 -> C:\Program Files (x86)\Java\jre1.8.0_251\bin\dtplugin\npDeployJava1.dll [2024-05-13] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.251.2 -> C:\Program Files (x86)\Java\jre1.8.0_251\bin\plugin2\npjp2.dll [2024-05-13] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX86\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2024-05-13] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.50918.0\npctrl.dll [2018-10-23] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files (x86)\Microsoft Office\root\Office16\NPSPWRAP.DLL [2024-05-13] (Microsoft Corporation -> Microsoft Corporation)

Chrome:
=======
CHR Profile: C:\Users\Daniel\AppData\Local\Google\Chrome\User Data\Default [2024-05-14]
CHR Extension: (Documentos Google off-line) - C:\Users\Daniel\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2024-05-13]
CHR Extension: (Pagamentos da Chrome Web Store) - C:\Users\Daniel\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2024-05-13]

==================== Serviços (Whitelisted) ===================

(Se uma entrada for incluída na fixlist, será removida do Registro. O arquivo não será movido, a menos que seja colocado separadamente.)

R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [2776664 2015-08-16] (Microsoft Corporation -> Microsoft Corporation)
S3 EpicOnlineServices; C:\Program Files (x86)\Epic Games\Epic Online Services\service\EpicOnlineServicesHost.exe [934352 2023-08-02] (Epic Games Inc. -> Epic Games, Inc.)
S2 FoxitReaderUpdateService; C:\Program Files (x86)\Common Files\Foxit\Foxit PDF Reader\FoxitPDFReaderUpdateService.exe [2433528 2024-04-11] (FOXIT SOFTWARE INC. -> Foxit Software Inc.)
S2 GoogleUpdaterInternalService126.0.6462.0; C:\Program Files (x86)\Google\GoogleUpdater\126.0.6462.0\updater.exe [4794656 2024-05-06] (Google LLC -> Google LLC)
S2 GoogleUpdaterService126.0.6462.0; C:\Program Files (x86)\Google\GoogleUpdater\126.0.6462.0\updater.exe [4794656 2024-05-06] (Google LLC -> Google LLC)
R2 MDCoreSvc; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.24030.9-0\MpDefenderCoreService.exe [1459968 2024-05-13] (Microsoft Windows Publisher -> Microsoft Corporation)
R3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.24030.9-0\NisSrv.exe [3199648 2024-05-13] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.24030.9-0\MsMpEng.exe [133576 2024-05-13] (Microsoft Windows Publisher -> Microsoft Corporation)

===================== Drivers (Whitelisted) ===================

(Se uma entrada for incluída na fixlist, será removida do Registro. O arquivo não será movido, a menos que seja colocado separadamente.)

R3 DellRbtn; C:\Windows\System32\drivers\DellRbtn.sys [35792 2020-05-12] (Dell Inc -> OSR Open Systems Resources, Inc.)
R1 ElbyCDIO; C:\Windows\System32\Drivers\ElbyCDIO.sys [42616 2017-05-14] (Microsoft Windows Hardware Compatibility Publisher -> Elaborate Bytes AG)
R2 Ld9BoxSup; C:\Program Files\ldplayer9box\Ld9BoxSup.sys [376144 2024-05-13] (Shanghai Chang Zhi Network Technology Co,. Ltd. -> Oracle Corporation)
R3 VClone; C:\Windows\System32\drivers\VClone.sys [44544 2020-02-22] (Microsoft Windows Hardware Compatibility Publisher -> Elaborate Bytes AG)
S0 WdBoot; C:\Windows\System32\drivers\wd\WdBoot.sys [20936 2024-05-13] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
R0 WdFilter; C:\Windows\System32\drivers\wd\WdFilter.sys [601376 2024-05-13] (Microsoft Windows -> Microsoft Corporation)
R3 WdNisDrv; C:\Windows\System32\drivers\wd\WdNisDrv.sys [105760 2024-05-13] (Microsoft Windows -> Microsoft Corporation)

==================== NetSvcs (Whitelisted) ===================

(Se uma entrada for incluída na fixlist, será removida do Registro. O arquivo não será movido, a menos que seja colocado separadamente.)

==================== Um mês (criados) (Whitelisted) =========

(Se uma entrada for incluída na fixlist, o arquivo/pasta será movido.)

2024-05-14 09:32 - 2024-05-14 09:34 - 000015037 _____ C:\Users\Daniel\Desktop\FRST.txt
2024-05-14 09:27 - 2024-05-14 09:33 - 000000000 ____D C:\FRST
2024-05-14 09:26 - 2024-05-14 09:26 - 002394112 _____ (Farbar) C:\Users\Daniel\Desktop\FRST64.exe
2024-05-14 09:16 - 2024-05-14 09:16 - 000002444 _____ C:\Users\Daniel\Desktop\ZHPCleaner (S).txt
2024-05-14 08:47 - 2024-05-14 09:28 - 000000000 ____D C:\Users\Daniel\AppData\Roaming\ZHP
2024-05-14 08:47 - 2024-05-14 08:47 - 000000876 _____ C:\Users\Daniel\Desktop\ZHPCleaner.lnk
2024-05-14 08:47 - 2024-05-14 08:47 - 000000000 ____D C:\Users\Daniel\AppData\Local\ZHP
2024-05-14 08:46 - 2024-05-14 08:46 - 000001610 _____ C:\Users\Daniel\Desktop\AdwCleaner[C00].txt
2024-05-14 08:45 - 2024-05-14 08:46 - 000000000 ____D C:\AdwCleaner
2024-05-14 08:44 - 2024-05-14 08:44 - 003364512 _____ (Nicolas Coolman) C:\Users\Daniel\Desktop\ZHPCleaner (1).exe
2024-05-14 08:43 - 2024-05-14 08:43 - 003364512 _____ (Nicolas Coolman) C:\Users\Daniel\Desktop\ZHPCleaner.exe
2024-05-14 08:42 - 2024-05-14 08:42 - 008790880 _____ (Malwarebytes) C:\Users\Daniel\Desktop\adwcleaner.exe
2024-05-14 08:20 - 2024-05-14 08:20 - 000000193 _____ C:\Windows\Airplanelog_ダꠈ㈰᧎ú.txt
2024-05-13 22:28 - 2024-05-13 22:28 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Elaborate Bytes
2024-05-13 22:28 - 2024-05-13 22:28 - 000000000 ____D C:\Program Files (x86)\Elaborate Bytes
2024-05-13 22:26 - 2024-05-14 08:43 - 000000000 ____D C:\Windows\system32\MRT
2024-05-13 22:26 - 2024-05-14 00:55 - 000000000 ____D C:\ProgramData\Ultra Adware Killer
2024-05-13 22:22 - 2024-05-13 22:22 - 008790880 _____ (Malwarebytes) C:\Users\Daniel\Downloads\adwcleaner_8.4.2.exe
2024-05-13 22:22 - 2024-05-13 22:22 - 000000000 ____D C:\Users\Daniel\AppData\Local\NVIDIA Corporation
2024-05-13 22:21 - 2024-05-13 22:21 - 000000000 ____D C:\Users\Daniel\AppData\Local\CEF
2024-05-13 22:15 - 2024-05-13 22:16 - 001804880 _____ C:\Users\Daniel\Downloads\SetupVCD5520.exe
2024-05-13 22:08 - 2024-05-13 22:09 - 000000000 ____D C:\Users\Daniel\.Ld9VirtualBox
2024-05-13 22:08 - 2024-05-13 22:08 - 000000867 _____ C:\Users\Daniel\AppData\Roaming\Microsoft\Windows\Start Menu\LDMultiPlayer.lnk
2024-05-13 22:08 - 2024-05-13 22:08 - 000000000 ____D C:\Users\Daniel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\LDMultiPlayer
2024-05-13 22:08 - 2024-05-13 22:08 - 000000000 ____D C:\Users\Daniel\AppData\Roaming\changzhi2
2024-05-13 22:08 - 2024-05-13 22:08 - 000000000 ____D C:\Users\Daniel\AppData\Local\UnrealEngineLauncher
2024-05-13 22:07 - 2024-05-13 22:07 - 000000000 ____D C:\Users\Daniel\AppData\Local\UnrealEngine
2024-05-13 22:07 - 2024-05-13 22:07 - 000000000 ____D C:\Users\Daniel\AppData\Local\EpicGamesLauncher
2024-05-13 22:07 - 2024-05-13 22:07 - 000000000 ____D C:\Users\Daniel\AppData\Local\Epic Games
2024-05-13 22:06 - 2024-05-13 22:06 - 001214416 _____ C:\Users\Daniel\Downloads\install-antimalware.exe
2024-05-13 22:05 - 2024-05-13 22:05 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\UCheck
2024-05-13 22:05 - 2024-05-13 22:05 - 000000000 ____D C:\Program Files\UCheck
2024-05-13 22:04 - 2024-05-13 22:06 - 000000000 ____D C:\ProgramData\UCheck
2024-05-13 22:03 - 2024-05-13 22:08 - 000000811 _____ C:\Users\Daniel\AppData\Roaming\Microsoft\Windows\Start Menu\LDPlayer9.lnk
2024-05-13 22:03 - 2024-05-13 22:03 - 000000000 ____D C:\Users\Daniel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\LDPlayer9
2024-05-13 22:02 - 2024-05-13 22:02 - 000000000 ____D C:\Users\Daniel\Documents\XuanZhi9
2024-05-13 22:02 - 2024-05-13 22:02 - 000000000 ____D C:\Program Files\ldplayer9box
2024-05-13 22:01 - 2024-05-13 22:09 - 000000000 ____D C:\Users\Daniel\AppData\Roaming\XuanZhi9
2024-05-13 22:01 - 2024-05-13 22:01 - 000001292 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Epic Games Launcher.lnk
2024-05-13 22:01 - 2024-05-13 22:01 - 000000000 ____D C:\Users\Daniel\AppData\Roaming\XuanZhi
2024-05-13 22:01 - 2024-05-13 22:01 - 000000000 ____D C:\Users\Daniel\AppData\Roaming\lddownloader
2024-05-13 22:00 - 2024-05-13 22:22 - 000000000 ____D C:\ProgramData\Epic
2024-05-13 22:00 - 2024-05-13 22:04 - 000000000 ____D C:\Program Files (x86)\Epic Games
2024-05-13 21:57 - 2024-05-13 21:57 - 000000000 ____D C:\Users\Daniel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Tixati
2024-05-13 21:57 - 2024-05-13 21:57 - 000000000 ____D C:\Program Files\tixati
2024-05-13 21:55 - 2024-05-13 22:03 - 000000000 ____D C:\LDPlayer
2024-05-13 21:55 - 2024-05-13 21:55 - 000000000 ____D C:\Users\Daniel\AppData\Roaming\czdownloader
2024-05-13 21:49 - 2024-05-13 21:51 - 185073664 _____ C:\Users\Daniel\Downloads\EpicInstaller-15.17.1-22bbfd52a83042ef841527fc041fac4b.msi
2024-05-13 21:47 - 2024-05-13 21:47 - 003461368 _____ C:\Users\Daniel\Downloads\LDPlayer9_pt_1008_ld.exe
2024-05-13 21:28 - 2024-05-13 22:01 - 000001379 _____ C:\Users\Daniel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\ESET Online Scanner.lnk
2024-05-13 21:28 - 2024-05-13 21:28 - 000000000 ____D C:\Users\Daniel\AppData\Local\ESET
2024-05-13 21:28 - 2024-05-13 21:28 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\RocketDock
2024-05-13 21:28 - 2024-05-13 21:28 - 000000000 ____D C:\Program Files (x86)\RocketDock
2024-05-13 21:27 - 2024-05-13 21:27 - 008389496 _____ (ESET) C:\Users\Daniel\Downloads\esetonlinescanner.exe
2024-05-13 21:27 - 2024-05-13 21:27 - 006463660 _____ (Punk Software ) C:\Users\Daniel\Downloads\rocketdock.exe
2024-05-13 21:19 - 2024-05-13 21:19 - 000000193 _____ C:\Windows\Airplanelog_눰닐눰￰潯䔀.txt
2024-05-13 17:42 - 2024-05-13 17:56 - 000000193 _____ C:\Windows\Airplanelog_ꂀ者.txt
2024-05-13 17:42 - 2024-05-13 17:42 - 000000000 ____D C:\Users\Daniel\AppData\Local\Google
2024-05-13 17:40 - 2024-05-13 17:40 - 000000000 ____D C:\Users\Public\Foxit Software
2024-05-13 17:40 - 2024-05-13 17:40 - 000000000 ____D C:\Users\Daniel\AppData\Roaming\Foxit Software
2024-05-13 17:40 - 2024-05-13 17:40 - 000000000 ____D C:\Users\Daniel\AppData\Roaming\Foxit AgentInformation
2024-05-13 17:40 - 2024-05-13 17:40 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Foxit PDF Reader
2024-05-13 17:40 - 2024-05-13 17:40 - 000000000 ____D C:\ProgramData\Foxit Software
2024-05-13 17:40 - 2024-05-13 17:40 - 000000000 ____D C:\ProgramData\Foxit ContentPlatform
2024-05-13 17:39 - 2024-05-13 17:39 - 000000000 ____D C:\Program Files (x86)\Foxit Software
2024-05-13 17:38 - 2024-05-13 17:38 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN
2024-05-13 17:38 - 2024-05-13 17:38 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\K-Lite Codec Pack
2024-05-13 17:38 - 2024-05-13 17:38 - 000000000 ____D C:\Program Files\VideoLAN
2024-05-13 17:38 - 2024-05-13 17:38 - 000000000 ____D C:\Program Files (x86)\K-Lite Codec Pack
2024-05-13 17:37 - 2024-05-13 17:37 - 000002245 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2024-05-13 17:37 - 2024-05-13 17:37 - 000001164 _____ C:\Users\Public\Desktop\WinRAR.lnk
2024-05-13 17:37 - 2024-05-13 17:37 - 000000000 ____D C:\Windows\system32\Tasks\GoogleSystem
2024-05-13 17:37 - 2024-05-13 17:37 - 000000000 ____D C:\Users\Daniel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
2024-05-13 17:37 - 2024-05-13 17:37 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
2024-05-13 17:37 - 2024-05-13 17:37 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\7-Zip
2024-05-13 17:37 - 2024-05-13 17:37 - 000000000 ____D C:\Program Files\WinRAR
2024-05-13 17:37 - 2024-05-13 17:37 - 000000000 ____D C:\Program Files\Google
2024-05-13 17:37 - 2024-05-13 17:37 - 000000000 ____D C:\Program Files\7-Zip
2024-05-13 17:37 - 2024-05-13 17:37 - 000000000 ____D C:\Program Files (x86)\Google
2024-05-13 17:35 - 2024-05-13 17:35 - 000425304 _____ (Secure By Design Inc.) C:\Users\Daniel\Downloads\Ninite 7Zip Chrome Foxit Reader KLite Codecs VLC Installer.exe
2024-05-13 17:27 - 2024-05-13 17:27 - 000000000 ____D C:\Users\Daniel\AppData\Local\PlaceholderTileLogoFolder
2024-05-13 17:23 - 2024-05-13 17:23 - 000000000 ____D C:\Users\Daniel\AppData\Local\Comms
2024-05-13 17:22 - 2024-05-13 17:22 - 000000193 _____ C:\Windows\Airplanelog_爰镊횉狐镊횉爰镊횉￰潯䔀.txt
2024-05-13 17:22 - 2024-05-13 17:22 - 000000000 ____D C:\ProgramData\Intel
2024-05-13 17:20 - 2024-05-13 17:20 - 000019968 _____ C:\Windows\system32\SppExtComObjHook.dll
2024-05-13 17:19 - 2024-05-13 17:22 - 000000000 ____D C:\Program Files\NVIDIA Corporation
2024-05-13 17:19 - 2024-05-13 17:19 - 000000000 ____D C:\Windows\system32\Drivers\NVIDIA Corporation
2024-05-13 17:19 - 2018-03-23 22:19 - 000048407 _____ C:\Windows\system32\nvinfo.pb
2024-05-13 17:18 - 2019-02-04 05:21 - 019855144 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll
2024-05-13 17:18 - 2019-02-04 05:21 - 016496776 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll
2024-05-13 17:18 - 2019-02-04 05:21 - 013571520 _____ (NVIDIA Corporation) C:\Windows\system32\nvptxJitCompiler.dll
2024-05-13 17:18 - 2019-02-04 05:21 - 011132384 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvptxJitCompiler.dll
2024-05-13 17:18 - 2019-02-04 05:21 - 001138720 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll
2024-05-13 17:18 - 2019-02-04 05:21 - 000998424 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll
2024-05-13 17:18 - 2019-02-04 05:21 - 000950016 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll
2024-05-13 17:17 - 2019-02-04 05:21 - 040278608 _____ (NVIDIA Corporation) C:\Windows\system32\nvcompiler.dll
2024-05-13 17:17 - 2019-02-04 05:21 - 035188992 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcompiler.dll
2024-05-13 17:17 - 2019-02-04 05:21 - 012967056 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll
2024-05-13 17:17 - 2019-02-04 05:21 - 011001504 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll
2024-05-13 17:17 - 2019-02-04 05:21 - 004633920 _____ (NVIDIA Corporation) C:\Windows\system32\nvapi64.dll
2024-05-13 17:17 - 2019-02-04 05:21 - 004318112 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll
2024-05-13 17:17 - 2019-02-04 05:21 - 003939624 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvapi.dll
2024-05-13 17:17 - 2019-02-04 05:21 - 003719096 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll
2024-05-13 17:17 - 2019-02-04 05:21 - 001153744 _____ (NVIDIA Corporation) C:\Windows\system32\nvfatbinaryLoader.dll
2024-05-13 17:17 - 2019-02-04 05:21 - 001065888 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll
2024-05-13 17:17 - 2019-02-04 05:21 - 000902096 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvfatbinaryLoader.dll
2024-05-13 17:17 - 2018-03-25 13:14 - 001985112 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6439135.dll
2024-05-13 17:17 - 2018-03-25 13:14 - 001683712 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6439135.dll
2024-05-13 17:16 - 2024-05-13 22:16 - 000000000 ____D C:\Users\Daniel\AppData\Roaming\Microsoft\Spelling
2024-05-13 17:16 - 2024-05-13 21:19 - 000000180 _____ C:\Windows\system32\{A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat
2024-05-13 17:16 - 2024-05-13 17:22 - 000000000 __SHD C:\Users\Daniel\IntelGraphicsProfiles
2024-05-13 17:16 - 2024-05-13 17:16 - 000000200 _____ C:\Windows\system32\{EC94D02F-D200-4428-9531-05AF7F9799CB}.bat
2024-05-13 17:16 - 2024-05-13 17:16 - 000000000 ____D C:\Program Files\Intel
2024-05-13 17:16 - 2024-05-13 17:16 - 000000000 ____D C:\Program Files (x86)\Intel
2024-05-13 17:16 - 2024-05-13 17:16 - 000000000 ____D C:\Intel
2024-05-13 17:16 - 2024-05-13 17:16 - 000000000 _____ C:\Windows\system32\GfxValDisplayLog.bin
2024-05-13 17:15 - 2020-12-01 22:17 - 007968624 _____ (Intel Corporation) C:\Windows\system32\Drivers\igdkmd64.sys
2024-05-13 17:15 - 2020-12-01 21:27 - 000044194 _____ C:\Windows\system32\iglhxc64.vp
2024-05-13 17:15 - 2020-12-01 21:27 - 000043760 _____ C:\Windows\system32\iglhxg64.vp
2024-05-13 17:15 - 2020-12-01 21:27 - 000043732 _____ C:\Windows\system32\iglhxg64_dev.vp
2024-05-13 17:15 - 2020-12-01 21:27 - 000043214 _____ C:\Windows\system32\iglhxc64_dev.vp
2024-05-13 17:15 - 2020-12-01 21:27 - 000043143 _____ C:\Windows\system32\iglhxo64_dev.vp
2024-05-13 17:15 - 2020-12-01 21:27 - 000042513 _____ C:\Windows\system32\iglhxo64.vp
2024-05-13 17:15 - 2020-12-01 21:27 - 000004858 _____ C:\Windows\system32\iglhxs64.vp
2024-05-13 17:15 - 2020-12-01 21:27 - 000001125 _____ C:\Windows\system32\iglhxa64.vp
2024-05-13 17:15 - 2020-12-01 21:27 - 000000935 _____ C:\Windows\system32\Gfxv4_0.exe.config
2024-05-13 17:15 - 2020-12-01 21:27 - 000000935 _____ C:\Windows\system32\DPTopologyApp.exe.config
2024-05-13 17:15 - 2020-12-01 21:27 - 000000895 _____ C:\Windows\system32\Gfxv2_0.exe.config
2024-05-13 17:15 - 2020-12-01 21:27 - 000000895 _____ C:\Windows\system32\DPTopologyAppv2_0.exe.config
2024-05-13 17:14 - 2020-12-01 22:17 - 039497192 _____ (Intel Corporation) C:\Windows\system32\igdumdim64.dll
2024-05-13 17:14 - 2020-12-01 22:17 - 038552184 _____ (Intel Corporation) C:\Windows\SysWOW64\igdumdim32.dll
2024-05-13 17:14 - 2020-12-01 22:17 - 006627360 _____ (Intel Corporation) C:\Windows\system32\igdusc64.dll
2024-05-13 17:14 - 2020-12-01 22:17 - 005083880 _____ (Intel Corporation) C:\Windows\SysWOW64\igdusc32.dll
2024-05-13 17:14 - 2020-12-01 22:17 - 002363808 _____ (Intel Corporation) C:\Windows\system32\igdmd64.dll
2024-05-13 17:14 - 2020-12-01 22:17 - 001833888 _____ (Intel Corporation) C:\Windows\SysWOW64\igdmd32.dll
2024-05-13 17:14 - 2020-12-01 22:17 - 001792328 _____ (Intel Corporation) C:\Windows\system32\iglhsip64.dll
2024-05-13 17:14 - 2020-12-01 22:17 - 001789704 _____ (Intel Corporation) C:\Windows\SysWOW64\iglhsip32.dll
2024-05-13 17:14 - 2020-12-01 22:17 - 000231264 _____ (Intel Corporation) C:\Windows\system32\iglhcp64.dll
2024-05-13 17:14 - 2020-12-01 22:17 - 000212024 _____ (Intel Corporation) C:\Windows\system32\igdde64.dll
2024-05-13 17:14 - 2020-12-01 22:17 - 000194824 _____ (Intel Corporation) C:\Windows\SysWOW64\iglhcp32.dll
2024-05-13 17:14 - 2020-12-01 22:17 - 000173592 _____ (Intel Corporation) C:\Windows\system32\igfxcmrt64.dll
2024-05-13 17:14 - 2020-12-01 22:17 - 000172568 _____ (Intel Corporation) C:\Windows\system32\igfx11cmrt64.dll
2024-05-13 17:14 - 2020-12-01 22:17 - 000150136 _____ (Intel Corporation) C:\Windows\SysWOW64\igfxcmrt32.dll
2024-05-13 17:14 - 2020-12-01 22:17 - 000150136 _____ (Intel Corporation) C:\Windows\SysWOW64\igfx11cmrt32.dll
2024-05-13 17:14 - 2020-12-01 22:17 - 000045904 _____ (Intel Corporation) C:\Windows\system32\igfxexps.dll
2024-05-13 17:14 - 2020-12-01 22:16 - 034518696 _____ (Intel Corporation) C:\Windows\SysWOW64\igd11dxva32.dll
2024-05-13 17:14 - 2020-12-01 22:16 - 033176816 _____ (Intel Corporation) C:\Windows\system32\igd11dxva64.dll
2024-05-13 17:14 - 2020-12-01 22:16 - 016285360 _____ (Intel Corporation) C:\Windows\system32\igd10iumd64.dll
2024-05-13 17:14 - 2020-12-01 22:16 - 015336256 _____ (Intel Corporation) C:\Windows\system32\igc64.dll
2024-05-13 17:14 - 2020-12-01 22:16 - 013358568 _____ (Intel Corporation) C:\Windows\SysWOW64\igc32.dll
2024-05-13 17:14 - 2020-12-01 22:16 - 012929928 _____ (Intel Corporation) C:\Windows\SysWOW64\igd10iumd32.dll
2024-05-13 17:14 - 2020-12-01 22:16 - 004211632 _____ (Intel Corporation) C:\Windows\system32\igd12umd64.dll
2024-05-13 17:14 - 2020-12-01 22:16 - 004186696 _____ (Intel Corporation) C:\Windows\SysWOW64\igd12umd32.dll
2024-05-13 17:14 - 2020-12-01 22:16 - 000300832 _____ (Intel Corporation) C:\Windows\system32\igd10idpp64.dll
2024-05-13 17:14 - 2020-12-01 22:16 - 000285808 _____ (Intel Corporation) C:\Windows\SysWOW64\igd10idpp32.dll
2024-05-13 17:14 - 2020-12-01 22:16 - 000171488 _____ (Intel Corporation) C:\Windows\SysWOW64\igdde32.dll
2024-05-13 17:13 - 2023-07-14 05:17 - 010088776 _____ (Realtek Semiconductor Corp.) C:\Windows\SysWOW64\RsCRIcon.dll
2024-05-13 17:13 - 2023-07-14 05:17 - 000814368 _____ (Realsil Semiconductor Corporation) C:\Windows\system32\Drivers\RtsUer.sys
2024-05-13 17:13 - 2020-12-01 22:17 - 001013616 _____ C:\Windows\system32\igfxSDK.exe
2024-05-13 17:13 - 2020-12-01 22:17 - 000957808 _____ (Intel Corporation) C:\Windows\system32\Gfxv4_0.exe
2024-05-13 17:13 - 2020-12-01 22:17 - 000954224 _____ (Intel Corporation) C:\Windows\system32\Gfxv2_0.exe
2024-05-13 17:13 - 2020-12-01 22:17 - 000409456 _____ (Intel Corporation) C:\Windows\system32\IntelCpHDCPSvc.exe
2024-05-13 17:13 - 2020-12-01 22:17 - 000397680 _____ (Intel Corporation) C:\Windows\SysWOW64\IntelCpHeciSvc.exe
2024-05-13 17:13 - 2020-12-01 22:17 - 000391536 _____ C:\Windows\system32\igfxTray.exe
2024-05-13 17:13 - 2020-12-01 22:17 - 000363376 _____ (Intel Corporation) C:\Windows\system32\igfxCUIService.exe
2024-05-13 17:13 - 2020-12-01 22:17 - 000344944 _____ (Intel Corporation) C:\Windows\system32\igfxEM.exe
2024-05-13 17:13 - 2020-12-01 22:17 - 000257904 _____ (Intel Corporation) C:\Windows\system32\igfxHK.exe
2024-05-13 17:13 - 2020-12-01 22:17 - 000226160 _____ (Intel Corporation) C:\Windows\system32\igfxext.exe
2024-05-13 17:13 - 2020-12-01 22:16 - 000456560 _____ (Intel Corporation) C:\Windows\system32\GfxUIEx.exe
2024-05-13 17:13 - 2020-12-01 22:16 - 000262512 _____ (Intel Corporation) C:\Windows\system32\difx64.exe
2024-05-13 17:13 - 2020-12-01 22:16 - 000222064 _____ (Intel Corporation) C:\Windows\system32\DPTopologyApp.exe
2024-05-13 17:13 - 2020-12-01 22:16 - 000221552 _____ (Intel Corporation) C:\Windows\system32\DPTopologyAppv2_0.exe
2024-05-13 17:13 - 2020-05-12 20:22 - 000035792 _____ (OSR Open Systems Resources, Inc.) C:\Windows\system32\Drivers\DellRbtn.sys
2024-05-13 17:13 - 2017-11-28 00:27 - 000206488 _____ (Intel Corporation) C:\Windows\system32\Drivers\TeeDriverW8x64.sys
2024-05-13 17:12 - 2018-06-29 13:21 - 000416064 _____ (Windows (R) Win 7 DDK provider) C:\Windows\system32\Drivers\AdminService.exe
2024-05-13 17:12 - 2018-06-29 13:21 - 000069440 _____ (Qualcomm) C:\Windows\system32\Drivers\btfilter.sys
2024-05-13 17:10 - 2024-05-13 17:10 - 001207319 _____ C:\Windows\unins000.exe
2024-05-13 17:10 - 2024-05-13 17:10 - 001199175 _____ C:\Windows\unins001.exe
2024-05-13 17:10 - 2024-05-13 17:10 - 000021743 _____ C:\Windows\unins001.dat
2024-05-13 17:10 - 2024-05-13 17:10 - 000010834 _____ C:\Windows\unins000.dat
2024-05-13 17:10 - 2024-05-13 17:10 - 000002277 _____ C:\AiOLog.txt
2024-05-13 17:10 - 2024-05-13 17:10 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
2024-05-13 17:10 - 2017-04-01 20:44 - 003450616 _____ (Red Hat) C:\Windows\system32\cygwin1.dll
2024-05-13 17:10 - 2017-01-26 07:25 - 001265664 _____ (The OpenSSL Project, hxxp://www.openssl.org/) C:\Windows\system32\libeay32.dll
2024-05-13 17:10 - 2017-01-26 07:25 - 000274944 _____ (The OpenSSL Project, hxxp://www.openssl.org/) C:\Windows\system32\ssleay32.dll
2024-05-13 17:10 - 2017-01-26 07:25 - 000274944 _____ (The OpenSSL Project, hxxp://www.openssl.org/) C:\Windows\system32\libssl32.dll
2024-05-13 17:10 - 2015-07-10 11:51 - 000456008 _____ (AutoIt Team) C:\Windows\system32\autoitx3.dll
2024-05-13 17:10 - 2014-01-31 03:14 - 001055676 _____ (Free Software Foundation) C:\Windows\system32\libiconv2.dll
2024-05-13 17:10 - 2014-01-25 14:30 - 000131072 _____ (Sereby Corporation) C:\Windows\system32\AiORuntimes.dll
2024-05-13 17:10 - 2012-06-14 15:36 - 000107520 _____ C:\Windows\system32\zlib1.dll
2024-05-13 17:10 - 2012-04-03 17:11 - 000138752 _____ C:\Windows\system32\libpng15.dll
2024-05-13 17:10 - 2011-10-12 04:09 - 004033440 _____ (Intel Corporation) C:\Windows\system32\libmmd.dll
2024-05-13 17:10 - 2011-10-01 09:16 - 000445016 _____ (Creative Labs) C:\Windows\system32\wrap_oal.dll
2024-05-13 17:10 - 2011-10-01 09:16 - 000109144 _____ (Portions (C) Creative Labs Inc. and NVIDIA Corp.) C:\Windows\system32\openal32.dll
2024-05-13 17:10 - 2011-01-12 14:36 - 001054208 _____ (Microsoft Corporation) C:\Windows\system32\mfc71u.dll
2024-05-13 17:10 - 2011-01-12 14:25 - 000065536 _____ (Microsoft Corporation) C:\Windows\system32\mfc71DEU.dll
2024-05-13 17:10 - 2011-01-12 14:25 - 000061440 _____ (Microsoft Corporation) C:\Windows\system32\mfc71ITA.dll
2024-05-13 17:10 - 2011-01-12 14:25 - 000061440 _____ (Microsoft Corporation) C:\Windows\system32\mfc71FRA.dll
2024-05-13 17:10 - 2011-01-12 14:25 - 000061440 _____ (Microsoft Corporation) C:\Windows\system32\mfc71ESP.dll
2024-05-13 17:10 - 2011-01-12 14:25 - 000057344 _____ (Microsoft Corporation) C:\Windows\system32\mfc71ENU.dll
2024-05-13 17:10 - 2011-01-12 14:25 - 000049152 _____ (Microsoft Corporation) C:\Windows\system32\mfc71KOR.dll
2024-05-13 17:10 - 2011-01-12 14:25 - 000049152 _____ (Microsoft Corporation) C:\Windows\system32\mfc71JPN.dll
2024-05-13 17:10 - 2011-01-12 14:25 - 000045056 _____ (Microsoft Corporation) C:\Windows\system32\mfc71CHT.dll
2024-05-13 17:10 - 2011-01-12 14:25 - 000040960 _____ (Microsoft Corporation) C:\Windows\system32\mfc71CHS.dll
2024-05-13 17:10 - 2011-01-12 14:19 - 001060864 _____ (Microsoft Corporation) C:\Windows\system32\mfc71.dll
2024-05-13 17:10 - 2011-01-12 13:53 - 000090112 _____ (Microsoft Corporation) C:\Windows\system32\atl71.dll
2024-05-13 17:10 - 2008-08-26 07:40 - 000162304 _____ C:\Windows\system32\libpng13.dll
2024-05-13 17:10 - 2007-02-01 23:13 - 000503808 _____ (Microsoft Corporation) C:\Windows\system32\msvcp71.dll
2024-05-13 17:10 - 2007-02-01 20:11 - 000344064 _____ (Microsoft Corporation) C:\Windows\system32\msvcr71.dll
2024-05-13 17:10 - 2007-01-30 23:04 - 000339968 _____ (Microsoft Corporation) C:\Windows\system32\msvcr70.dll
2024-05-13 17:10 - 2006-08-26 01:28 - 001017344 _____ (Microsoft Corporation) C:\Windows\system32\mfc70u.dll
2024-05-13 17:10 - 2006-08-26 01:15 - 000061440 _____ (Microsoft Corporation) C:\Windows\system32\mfc70ITA.dll
2024-05-13 17:10 - 2006-08-26 01:15 - 000061440 _____ (Microsoft Corporation) C:\Windows\system32\mfc70FRA.dll
2024-05-13 17:10 - 2006-08-26 01:15 - 000061440 _____ (Microsoft Corporation) C:\Windows\system32\mfc70ESP.dll
2024-05-13 17:10 - 2006-08-26 01:15 - 000061440 _____ (Microsoft Corporation) C:\Windows\system32\mfc70DEU.dll
2024-05-13 17:10 - 2006-08-26 01:15 - 000057344 _____ (Microsoft Corporation) C:\Windows\system32\mfc70ENU.dll
2024-05-13 17:10 - 2006-08-26 01:15 - 000049152 _____ (Microsoft Corporation) C:\Windows\system32\mfc70KOR.dll
2024-05-13 17:10 - 2006-08-26 01:15 - 000049152 _____ (Microsoft Corporation) C:\Windows\system32\mfc70JPN.dll
2024-05-13 17:10 - 2006-08-26 01:15 - 000045056 _____ (Microsoft Corporation) C:\Windows\system32\mfc70CHT.dll
2024-05-13 17:10 - 2006-08-26 01:15 - 000040960 _____ (Microsoft Corporation) C:\Windows\system32\mfc70CHS.dll
2024-05-13 17:10 - 2006-08-26 01:07 - 001024000 _____ (Microsoft Corporation) C:\Windows\system32\mfc70.dll
2024-05-13 17:10 - 2006-08-26 00:17 - 000086016 _____ (Microsoft Corporation) C:\Windows\system32\atl70.dll
2024-05-13 17:10 - 2005-05-06 14:52 - 000103424 _____ (GNU <www.gnu.org>) C:\Windows\system32\libintl3.dll
2024-05-13 17:10 - 2005-01-20 20:25 - 000054784 _____ (Microsoft Corporation) C:\Windows\system32\msvci70.dll
2024-05-13 17:10 - 2002-01-05 06:40 - 000487424 _____ (Microsoft Corporation) C:\Windows\system32\msvcp70.dll
2024-05-13 17:10 - 1996-01-12 04:00 - 000722192 _____ (Microsoft Corporation) C:\Windows\system32\vb40032.dll
2024-05-13 17:09 - 2024-05-13 17:09 - 000000000 ____D C:\Program Files\Microsoft Silverlight
2024-05-13 17:09 - 2024-05-13 17:09 - 000000000 ____D C:\Program Files (x86)\Microsoft Silverlight
2024-05-13 17:08 - 2024-05-13 22:19 - 000000000 ____D C:\ProgramData\Package Cache
2024-05-13 17:07 - 2024-05-13 17:07 - 000129192 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge-64.dll
2024-05-13 17:07 - 2024-05-13 17:07 - 000000000 ____D C:\Program Files\Java
2024-05-13 17:06 - 2024-05-13 17:07 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2024-05-13 17:06 - 2024-05-13 17:06 - 000114344 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2024-05-13 17:06 - 2024-05-13 17:06 - 000000000 ____D C:\Users\Daniel\AppData\Roaming\Sun
2024-05-13 17:06 - 2024-05-13 17:06 - 000000000 ____D C:\Users\Daniel\AppData\LocalLow\Sun
2024-05-13 17:05 - 2024-05-13 17:05 - 000000000 ____D C:\ProgramData\Oracle
2024-05-13 17:05 - 2024-05-13 17:05 - 000000000 ____D C:\Program Files (x86)\Java
2024-05-13 17:04 - 2024-05-13 17:04 - 000002578 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OneDrive for Business.lnk
2024-05-13 17:04 - 2024-05-13 17:04 - 000002536 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype for Business 2016.lnk
2024-05-13 17:04 - 2024-05-13 17:04 - 000002525 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Word 2016.lnk
2024-05-13 17:04 - 2024-05-13 17:04 - 000002490 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Access 2016.lnk
2024-05-13 17:04 - 2024-05-13 17:04 - 000002474 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PowerPoint 2016.lnk
2024-05-13 17:04 - 2024-05-13 17:04 - 000002471 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Excel 2016.lnk
2024-05-13 17:04 - 2024-05-13 17:04 - 000002461 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OneNote 2016.lnk
2024-05-13 17:04 - 2024-05-13 17:04 - 000002457 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Outlook 2016.lnk
2024-05-13 17:04 - 2024-05-13 17:04 - 000002441 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Publisher 2016.lnk
2024-05-13 17:04 - 2024-05-13 17:04 - 000000000 ____D C:\Windows\SysWOW64\XPSViewer
2024-05-13 17:04 - 2024-05-13 17:04 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Ferramentas do Microsoft Office 2016
2024-05-13 17:04 - 2024-05-13 17:04 - 000000000 ____D C:\Program Files\Reference Assemblies
2024-05-13 17:04 - 2024-05-13 17:04 - 000000000 ____D C:\Program Files\MSBuild
2024-05-13 17:04 - 2024-05-13 17:04 - 000000000 ____D C:\Program Files (x86)\Reference Assemblies
2024-05-13 17:04 - 2024-05-13 17:04 - 000000000 ____D C:\Program Files (x86)\MSBuild
2024-05-13 17:03 - 2024-05-13 17:03 - 000000000 ___RD C:\Users\Daniel\OneDrive
2024-05-13 17:01 - 2024-05-13 17:11 - 000000000 ____D C:\AiO-Files
2024-05-13 17:01 - 2024-05-13 17:03 - 000000000 ____D C:\Program Files (x86)\Microsoft Office
2024-05-13 17:01 - 2024-05-13 17:01 - 000000000 ____D C:\ProgramData\Microsoft OneDrive
2024-05-13 17:01 - 2024-05-13 17:01 - 000000000 ____D C:\Program Files\Microsoft Office 15
2024-05-13 16:59 - 2024-05-13 17:16 - 000000000 ____D C:\Users\Daniel\AppData\Local\Packages
2024-05-13 16:59 - 2024-05-13 17:16 - 000000000 ____D C:\ProgramData\Packages
2024-05-13 16:59 - 2024-05-13 16:59 - 000000000 __RHD C:\Users\Public\AccountPictures
2024-05-13 16:59 - 2024-05-13 16:59 - 000000000 ___SD C:\Users\Daniel\AppData\Roaming\Microsoft\SystemCertificates
2024-05-13 16:59 - 2024-05-13 16:59 - 000000000 ___SD C:\Users\Daniel\AppData\Roaming\Microsoft\Protect
2024-05-13 16:59 - 2024-05-13 16:59 - 000000000 ___SD C:\Users\Daniel\AppData\Roaming\Microsoft\Crypto
2024-05-13 16:59 - 2024-05-13 16:59 - 000000000 ___SD C:\Users\Daniel\AppData\Roaming\Microsoft\Credentials
2024-05-13 16:59 - 2024-05-13 16:59 - 000000000 ___RD C:\Users\Daniel\3D Objects
2024-05-13 16:59 - 2024-05-13 16:59 - 000000000 ____D C:\Users\Daniel\AppData\Roaming\Microsoft\Vault
2024-05-13 16:59 - 2024-05-13 16:59 - 000000000 ____D C:\Users\Daniel\AppData\Roaming\Microsoft\Network
2024-05-13 16:59 - 2024-05-13 16:59 - 000000000 ____D C:\Users\Daniel\AppData\Roaming\Adobe
2024-05-13 16:59 - 2024-05-13 16:59 - 000000000 ____D C:\Users\Daniel\AppData\Local\VirtualStore
2024-05-13 16:59 - 2024-05-13 16:59 - 000000000 ____D C:\Users\Daniel\AppData\Local\Publishers
2024-05-13 16:59 - 2024-05-13 16:59 - 000000000 ____D C:\Users\Daniel\AppData\Local\ConnectedDevicesPlatform
2024-05-13 16:57 - 2024-05-13 22:23 - 000002388 _____ C:\Users\Daniel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2024-05-13 16:57 - 2024-05-13 22:08 - 000000000 ____D C:\Users\Daniel
2024-05-13 16:57 - 2024-05-13 21:24 - 001741852 _____ C:\Windows\system32\PerfStringBackup.INI
2024-05-13 16:57 - 2024-05-13 16:59 - 000000000 ____D C:\Users\Daniel\AppData\Roaming\Microsoft\Windows
2024-05-13 16:57 - 2024-05-13 16:57 - 000000020 ___SH C:\Users\Daniel\ntuser.ini
2024-05-13 16:57 - 2024-05-13 16:57 - 000000000 _SHDL C:\Users\Daniel\Modelos
2024-05-13 16:57 - 2024-05-13 16:57 - 000000000 _SHDL C:\Users\Daniel\Meus Documentos
2024-05-13 16:57 - 2024-05-13 16:57 - 000000000 _SHDL C:\Users\Daniel\Menu Iniciar
2024-05-13 16:57 - 2024-05-13 16:57 - 000000000 _SHDL C:\Users\Daniel\Documents\Minhas Músicas
2024-05-13 16:57 - 2024-05-13 16:57 - 000000000 _SHDL C:\Users\Daniel\Documents\Minhas Imagens
2024-05-13 16:57 - 2024-05-13 16:57 - 000000000 _SHDL C:\Users\Daniel\Documents\Meus Vídeos
2024-05-13 16:57 - 2024-05-13 16:57 - 000000000 _SHDL C:\Users\Daniel\Dados de Aplicativos
2024-05-13 16:57 - 2024-05-13 16:57 - 000000000 _SHDL C:\Users\Daniel\Configurações Locais
2024-05-13 16:57 - 2024-05-13 16:57 - 000000000 _SHDL C:\Users\Daniel\AppData\Roaming\Microsoft\Windows\Start Menu\Programas
2024-05-13 16:57 - 2024-05-13 16:57 - 000000000 _SHDL C:\Users\Daniel\AppData\Local\Histórico
2024-05-13 16:57 - 2024-05-13 16:57 - 000000000 _SHDL C:\Users\Daniel\AppData\Local\Dados de Aplicativos
2024-05-13 16:57 - 2024-05-13 16:57 - 000000000 _SHDL C:\Users\Daniel\Ambiente de Rede
2024-05-13 16:57 - 2024-05-13 16:57 - 000000000 _SHDL C:\Users\Daniel\Ambiente de Impressão
2024-05-13 16:53 - 2024-05-13 16:53 - 000000000 _SHDL C:\Users\Usuário Padrão
2024-05-13 16:53 - 2024-05-13 16:53 - 000000000 _SHDL C:\Users\Todos os Usuários
2024-05-13 16:53 - 2024-05-13 16:53 - 000000000 _SHDL C:\Users\Public\Documents\Minhas Músicas
2024-05-13 16:53 - 2024-05-13 16:53 - 000000000 _SHDL C:\Users\Public\Documents\Minhas Imagens
2024-05-13 16:53 - 2024-05-13 16:53 - 000000000 _SHDL C:\Users\Public\Documents\Meus Vídeos
2024-05-13 16:53 - 2024-05-13 16:53 - 000000000 _SHDL C:\Users\Default\Modelos
2024-05-13 16:53 - 2024-05-13 16:53 - 000000000 _SHDL C:\Users\Default\Meus Documentos
2024-05-13 16:53 - 2024-05-13 16:53 - 000000000 _SHDL C:\Users\Default\Menu Iniciar
2024-05-13 16:53 - 2024-05-13 16:53 - 000000000 _SHDL C:\Users\Default\Documents\Minhas Músicas
2024-05-13 16:53 - 2024-05-13 16:53 - 000000000 _SHDL C:\Users\Default\Documents\Minhas Imagens
2024-05-13 16:53 - 2024-05-13 16:53 - 000000000 _SHDL C:\Users\Default\Documents\Meus Vídeos
2024-05-13 16:53 - 2024-05-13 16:53 - 000000000 _SHDL C:\Users\Default\Dados de Aplicativos
2024-05-13 16:53 - 2024-05-13 16:53 - 000000000 _SHDL C:\Users\Default\Configurações Locais
2024-05-13 16:53 - 2024-05-13 16:53 - 000000000 _SHDL C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programas
2024-05-13 16:53 - 2024-05-13 16:53 - 000000000 _SHDL C:\Users\Default\AppData\Local\Histórico
2024-05-13 16:53 - 2024-05-13 16:53 - 000000000 _SHDL C:\Users\Default\AppData\Local\Dados de Aplicativos
2024-05-13 16:53 - 2024-05-13 16:53 - 000000000 _SHDL C:\Users\Default\Ambiente de Rede
2024-05-13 16:53 - 2024-05-13 16:53 - 000000000 _SHDL C:\Users\Default\Ambiente de Impressão
2024-05-13 16:53 - 2024-05-13 16:53 - 000000000 _SHDL C:\ProgramData\Modelos
2024-05-13 16:53 - 2024-05-13 16:53 - 000000000 _SHDL C:\ProgramData\Microsoft\Windows\Start Menu\Programas
2024-05-13 16:53 - 2024-05-13 16:53 - 000000000 _SHDL C:\ProgramData\Menu Iniciar
2024-05-13 16:53 - 2024-05-13 16:53 - 000000000 _SHDL C:\ProgramData\Documentos
2024-05-13 16:53 - 2024-05-13 16:53 - 000000000 _SHDL C:\ProgramData\Dados de Aplicativos
2024-05-13 16:53 - 2024-05-13 16:53 - 000000000 _SHDL C:\Program Files\Common Files\Sistema
2024-05-13 16:53 - 2024-05-13 16:53 - 000000000 _SHDL C:\Program Files\Arquivos Comuns
2024-05-13 16:53 - 2024-05-13 16:53 - 000000000 _SHDL C:\Documents and Settings
2024-05-13 16:53 - 2024-05-13 16:53 - 000000000 _SHDL C:\Arquivos de Programas
2024-05-13 16:51 - 2024-05-14 09:22 - 000000000 ____D C:\Windows\system32\SleepStudy
2024-05-13 16:51 - 2024-05-13 22:15 - 000002510 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk
2024-05-13 16:51 - 2024-05-13 21:34 - 000000000 ____D C:\Windows\system32\Drivers\wd
2024-05-13 16:51 - 2024-05-13 21:19 - 000008192 ___SH C:\DumpStack.log.tmp
2024-05-13 16:51 - 2024-05-13 21:19 - 000000006 ____H C:\Windows\Tasks\SA.DAT
2024-05-13 16:51 - 2024-05-13 17:22 - 000436024 _____ C:\Windows\system32\FNTCACHE.DAT
2024-05-13 16:51 - 2024-05-13 16:51 - 000000000 ____H C:\Windows\system32\Drivers\Msft_User_WpdFs_01_11_00.Wdf
2024-05-13 16:51 - 2024-05-13 16:51 - 000000000 ____D C:\Windows\ServiceProfiles
2024-05-13 16:50 - 2024-05-13 16:52 - 000000000 ____D C:\Windows\Panther

==================== Um mês (modificados) ==================

(Se uma entrada for incluída na fixlist, o arquivo/pasta será movido.)

2024-05-14 08:32 - 2019-12-07 06:14 - 000000000 ____D C:\Windows\AppReadiness
2024-05-14 08:23 - 2019-12-07 06:14 - 000000000 ____D C:\Windows\appcompat
2024-05-14 08:23 - 2019-12-07 06:14 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2024-05-13 23:44 - 2019-12-07 06:14 - 000000000 __RHD C:\Users\Public\Libraries
2024-05-13 23:39 - 2019-12-07 06:13 - 000000000 ____D C:\Windows\INF
2024-05-13 23:38 - 2019-12-07 06:03 - 000000000 ____D C:\Windows\CbsTemp
2024-05-13 22:51 - 2023-12-03 23:53 - 000000000 ____D C:\Windows\SystemTemp
2024-05-13 22:16 - 2019-12-07 06:14 - 000000000 ___HD C:\Program Files\WindowsApps
2024-05-13 21:34 - 2019-12-07 06:14 - 000000000 ____D C:\Program Files\Windows Defender
2024-05-13 21:33 - 2019-12-07 06:03 - 000032768 _____ C:\Windows\system32\config\ELAM
2024-05-13 21:24 - 2019-12-07 11:54 - 000752652 _____ C:\Windows\system32\prfh0416.dat
2024-05-13 21:24 - 2019-12-07 11:54 - 000148766 _____ C:\Windows\system32\prfc0416.dat
2024-05-13 17:22 - 2019-12-07 06:03 - 000262144 _____ C:\Windows\system32\config\BBI
2024-05-13 17:17 - 2019-12-07 06:14 - 000000000 ____D C:\Windows\system32\GroupPolicy
2024-05-13 17:16 - 2019-12-07 06:14 - 000000000 ____D C:\Windows\ServiceState
2024-05-13 17:15 - 2019-12-07 06:14 - 000000000 ___RD C:\Windows\PrintDialog
2024-05-13 17:10 - 2019-12-07 06:14 - 000000000 ____D C:\Windows\System
2024-05-13 17:08 - 2019-12-07 06:14 - 000000000 ____D C:\Program Files\Common Files\microsoft shared
2024-05-13 17:04 - 2019-12-07 06:14 - 000000000 ____D C:\Windows\SysWOW64\MUI
2024-05-13 17:04 - 2019-12-07 06:14 - 000000000 ____D C:\Windows\system32\MUI
2024-05-13 16:59 - 2019-12-07 06:14 - 000000000 ___RD C:\Windows\ImmersiveControlPanel
2024-05-13 16:59 - 2019-12-07 06:14 - 000000000 ____D C:\ProgramData\USOPrivate
2024-05-13 16:55 - 2019-12-07 11:55 - 000000000 ____D C:\Windows\system32\FxsTmp
2024-05-13 16:55 - 2019-12-07 06:14 - 000000000 ____D C:\Windows\system32\spool
2024-05-13 16:54 - 2019-12-07 06:14 - 000000000 ____D C:\Windows\system32\WinBioDatabase
2024-05-13 16:53 - 2019-12-07 06:14 - 000000000 ____D C:\Program Files\Windows NT
2024-05-13 16:50 - 2019-12-07 06:14 - 000028672 _____ C:\Windows\system32\config\BCD-Template

==================== SigCheck ============================

(Não há correção automática para arquivos que não passaram na verificação.)

==================== Fim de FRST.txt ========================

Resultado da análise adicional Farbar Recovery Scan Tool (x64) Versão: 19.04.2024 01
Executado por Daniel (14-05-2024 09:36:35)
Executando a partir de C:\Users\Daniel\Desktop
Microsoft Windows 10 Home Single Language Versão 22H2 19045.3803 (X64) (2024-05-13 19:53:19)
Modo da Inicialização: Normal
==========================================================

==================== Contas: =============================

(Se uma entrada for incluída na fixlist, será removida.)

Administrador (S-1-5-21-336356994-3803797036-487031319-500 - Administrator - Disabled)
Convidado (S-1-5-21-336356994-3803797036-487031319-501 - Limited - Disabled)
Daniel (S-1-5-21-336356994-3803797036-487031319-1001 - Administrator - Enabled) => C:\Users\Daniel
DefaultAccount (S-1-5-21-336356994-3803797036-487031319-503 - Limited - Disabled)
WDAGUtilityAccount (S-1-5-21-336356994-3803797036-487031319-504 - Limited - Disabled)

==================== Central de Segurança ========================

(Se uma entrada for incluída na fixlist, será removida.)

AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Programas Instalados ======================

(Somente os programas adwares com a indicação "Oculto" podem ser adicionados à fixlist para desocultá-los. Os programas adwares devem ser desinstalados manualmente.)

7-Zip 23.01 (x64) (HKLM\...\7-Zip) (Version: 23.01 - Igor Pavlov)
Allgemeine Runtime Files (x86) (HKLM\...\{1F6D1DB5-82B5-41A4-85A2-0A382C142A35}_is1) (Version: 1.0.5.1 - Sereby Corporation)
DirectX 9.0c Extra Files (x86, x64) (HKLM\...\{8729E65B-8C12-4A42-B1FE-E4DA7ED52855}_is1) (Version: 1.10.06.0 - Sereby Corporation)
Epic Games Launcher (HKLM-x32\...\{2F1303E1-450D-4C17-86F8-CBE1F8F1A683}) (Version: 1.3.93.0 - Epic Games, Inc.)
Epic Games Launcher Prerequisites (x64) (HKLM\...\{F9C5C994-F6B9-4D75-B3E7-AD01B84073E9}) (Version: 1.0.0.0 - Epic Games, Inc.) Hidden
Epic Online Services (HKLM-x32\...\{57A956AB-4BCC-45C6-9B40-957E4E125568}) (Version: 2.0.44.0 - Epic Games, Inc.)
Foxit PDF Reader (HKLM-x32\...\Foxit Reader_is1) (Version: 2024.2.0.25138 - Foxit Software Inc.)
Google Chrome (HKLM\...\{637280F0-4D28-3090-9DFD-C85640BD9252}) (Version: 124.0.6367.202 - Google LLC)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 20.19.15.5171 - Intel Corporation)
Java 8 Update 251 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F64180251F0}) (Version: 8.0.2510.8 - Oracle Corporation)
Java 8 Update 251 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F32180251F0}) (Version: 8.0.2510.8 - Oracle Corporation)
K-Lite Codec Pack 18.3.0 Full (HKLM-x32\...\KLiteCodecPack_is1) (Version: 18.3.0 - KLCP)
Launcher Prerequisites (x64) (HKLM-x32\...\{43a03b9c-4770-409c-a999-587b60700b63}) (Version: 1.0.0.0 - Epic Games, Inc.) Hidden
LDPlayer (HKLM-x32\...\LDPlayer9) (Version: 9.0.69 - XUANZHI INTERNATIONAL CO., LIMITED)
Microsoft Edge (HKLM-x32\...\Microsoft Edge) (Version: 124.0.2478.97 - Microsoft Corporation)
Microsoft Edge WebView2 Runtime (HKLM-x32\...\Microsoft EdgeWebView) (Version: 124.0.2478.97 - Microsoft Corporation)
Microsoft Office Professional Plus 2016 - pt-br (HKLM\...\ProPlusRetail - pt-br) (Version: 16.0.4266.1003 - Microsoft Corporation)
Microsoft OneDrive (HKU\S-1-5-21-336356994-3803797036-487031319-1001\...\OneDriveSetup.exe) (Version: 24.081.0421.0003 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.50918.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61187 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61186 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.7523 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.7523 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.7523 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.7523 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.61135 (HKLM\...\{37B8F9C7-03FB-3253-8781-2517C99D7C00}) (Version: 11.0.61135 - Microsoft Corporation)
Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.61135 (HKLM\...\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}) (Version: 11.0.61135 - Microsoft Corporation)
Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.61135 (HKLM-x32\...\{B175520C-86A2-35A7-8619-86DC379688B9}) (Version: 11.0.61135 - Microsoft Corporation)
Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.61135 (HKLM-x32\...\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}) (Version: 11.0.61135 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.40664 (HKLM-x32\...\{4ffaf7b8-a84a-4813-840c-8b1f1343ae54}) (Version: 12.0.40664.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.40664 (HKLM-x32\...\{dd1e9bde-2ad6-4e92-8c07-7d4723eab8b8}) (Version: 12.0.40664.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 x64 Additional Runtime - 12.0.40664 (HKLM\...\{010792BA-551A-3AC0-A7EF-0FAB4156C382}) (Version: 12.0.40664 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 x64 Minimum Runtime - 12.0.40664 (HKLM\...\{53CF6934-A98D-3D84-9146-FC4EDF3D5641}) (Version: 12.0.40664 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 x86 Additional Runtime - 12.0.40664 (HKLM-x32\...\{D401961D-3A20-3AC7-943B-6139D5BD490A}) (Version: 12.0.40664 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 x86 Minimum Runtime - 12.0.40664 (HKLM-x32\...\{8122DAB1-ED4D-3676-BB0A-CA368196543E}) (Version: 12.0.40664 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2015-2019 Redistributable (x64) - 14.25.28508 (HKLM-x32\...\{6913e92a-b64e-41c9-a5e6-cef39207fe89}) (Version: 14.25.28508.3 - Microsoft Corporation)
Microsoft Visual C++ 2015-2019 Redistributable (x86) - 14.25.28508 (HKLM-x32\...\{65e650ff-30be-469d-b63a-418d71ea1765}) (Version: 14.25.28508.3 - Microsoft Corporation)
Microsoft Visual C++ 2019 X64 Additional Runtime - 14.25.28508 (HKLM\...\{7D0B74C2-C3F8-4AF1-940F-CD79AB4B2DCE}) (Version: 14.25.28508 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.25.28508 (HKLM\...\{EEA66967-97E2-4561-A999-5C22E3CDE428}) (Version: 14.25.28508 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2019 X86 Additional Runtime - 14.25.28508 (HKLM-x32\...\{0FA68574-690B-4B00-89AA-B28946231449}) (Version: 14.25.28508 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.25.28508 (HKLM-x32\...\{2BC3BD4D-FABA-4394-93C7-9AC82A263FE2}) (Version: 14.25.28508 - Microsoft Corporation) Hidden
Microsoft Visual J# 2.0 Redistributable Package - SE (x64) (HKLM\...\Microsoft Visual J# 2.0 Redistributable Package - SE (x64)) (Version: - Microsoft Corporation)
Office 16 Click-to-Run Extensibility Component (HKLM-x32\...\{90160000-008C-0000-0000-0000000FF1CE}) (Version: 16.0.4266.1003 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Licensing Component (HKLM\...\{90160000-008F-0000-1000-0000000FF1CE}) (Version: 16.0.4266.1003 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Localization Component (HKLM-x32\...\{90160000-008C-0416-0000-0000000FF1CE}) (Version: 16.0.4266.1003 - Microsoft Corporation) Hidden
RocketDock 1.3.5 (HKLM-x32\...\RocketDock_is1) (Version: - Punk Software)
Tixati (HKLM-x32\...\tixati) (Version: - )
UCheck version 4.1.3.0 (HKLM\...\C4E7EE54-826F-41C4-BE3C-375CC70DC1D8_is1) (Version: 4.1.3.0 - Adlice Software)
VirtualCloneDrive (HKLM-x32\...\VirtualCloneDrive) (Version: 5.5.2.0 - Elaborate Bytes)
VLC media player (HKLM\...\VLC media player) (Version: 3.0.20 - VideoLAN)
WinRAR 7.00 (64-bit) (HKLM\...\WinRAR archiver) (Version: 7.00.0 - win.rar GmbH)

Packages:
=========

Email e Calendário -> C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe [2024-05-13] (Microsoft Corporation) [MS Ad]
Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1808.3.0_x64__8wekyb3d8bbwe [2024-05-13] (Microsoft Corporation) [MS Ad]
Microsoft Solitaire Collection -> C:\Program Files\WindowsApps\Microsoft.MicrosoftSolitaireCollection_4.4.8204.0_x64__8wekyb3d8bbwe [2024-05-13] (Microsoft Studios) [MS Ad]
MSN Clima -> C:\Program Files\WindowsApps\Microsoft.BingWeather_4.25.20211.0_x64__8wekyb3d8bbwe [2024-05-13] (Microsoft Corporation) [MS Ad]
Skype -> C:\Program Files\WindowsApps\Microsoft.SkypeApp_14.53.77.0_x64__kzf8qxf38zg5c [2024-05-13] (Skype)

==================== Análise Personalizada CLSID (Whitelisted): ==============

(Se uma entrada for incluída na fixlist, será removida do Registro. O arquivo não será movido, a menos que seja colocado separadamente.)

ContextMenuHandlers1: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2023-06-20] (Igor Pavlov) [Arquivo não assinado]
ContextMenuHandlers1: [VirtualCloneDrive] -> {B7056B8E-4F99-44f8-8CBD-282390FE5428} => C:\Program Files (x86)\Elaborate Bytes\VirtualCloneDrive\ElbyVCDShell.dll [2020-02-23] (Elaborate Bytes AG -> Elaborate Bytes AG)
ContextMenuHandlers1: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2024-02-26] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers1-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2024-02-26] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers2: [VirtualCloneDrive] -> {B7056B8E-4F99-44f8-8CBD-282390FE5428} => C:\Program Files (x86)\Elaborate Bytes\VirtualCloneDrive\ElbyVCDShell.dll [2020-02-23] (Elaborate Bytes AG -> Elaborate Bytes AG)
ContextMenuHandlers4: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2023-06-20] (Igor Pavlov) [Arquivo não assinado]
ContextMenuHandlers5: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} => -> Nenhum Arquivo
ContextMenuHandlers5: [igfxDTCM] -> {9B5F5829-A529-4B12-814A-E81BCB8D93FC} => C:\Windows\system32\igfxDTCM.dll [2020-12-01] (Microsoft Windows Hardware Compatibility Publisher -> Intel Corporation)
ContextMenuHandlers6: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2023-06-20] (Igor Pavlov) [Arquivo não assinado]
ContextMenuHandlers6: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2024-02-26] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers6-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2024-02-26] (win.rar GmbH -> Alexander Roshal)

==================== Codecs (Whitelisted) ====================

==================== Atalhos & WMI ========================

==================== Módulos Carregados (Whitelisted) =============

2024-05-13 17:37 - 2023-06-20 05:00 - 000101376 _____ (Igor Pavlov) [Arquivo não assinado] C:\Program Files\7-Zip\7-zip.dll

==================== Alternate Data Streams (Whitelisted) ========

==================== Modo de Segurança (Whitelisted) ==================

==================== Associação (Whitelisted) =================

==================== Internet Explorer (Whitelisted) ==========

BHO: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX64\Microsoft Office\Office16\OCHelper.dll [2024-05-13] (Microsoft Corporation -> Microsoft Corporation)
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_251\bin\ssv.dll [2024-05-13] (Oracle America, Inc. -> Oracle Corporation)
BHO: Microsoft OneDrive for Business Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX64\Microsoft Office\Office16\GROOVEEX.DLL [2024-05-13] (Microsoft Corporation -> Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_251\bin\jp2ssv.dll [2024-05-13] (Oracle America, Inc. -> Oracle Corporation)
BHO-x32: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\root\Office16\OCHelper.dll [2024-05-13] (Microsoft Corporation -> Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_251\bin\ssv.dll [2024-05-13] (Oracle America, Inc. -> Oracle Corporation)
BHO-x32: Microsoft OneDrive for Business Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\root\Office16\GROOVEEX.DLL [2024-05-13] (Microsoft Corporation -> Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_251\bin\jp2ssv.dll [2024-05-13] (Oracle America, Inc. -> Oracle Corporation)
Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2024-05-13] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2024-05-13] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2024-05-13] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2024-05-13] (Microsoft Corporation -> Microsoft Corporation)

==================== Hosts Conteúdo: =========================

(Se necessário, a diretiva Hosts: pode ser incluída na fixlist para redefinir o Hosts.)

2019-12-07 06:14 - 2024-05-13 23:38 - 000000795 _____ C:\Windows\system32\drivers\etc\hosts
127.0.0.1 localhost

==================== Outras Áreas ===========================

(Atualmente não há nenhuma correção automática para esta seção.)

HKLM\System\CurrentControlSet\Control\Session Manager\Environment\\Path -> C:\Program Files (x86)\Common Files\Oracle\Java\javapath;%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;%SYSTEMROOT%\System32\WindowsPowerShell\v1.0\;%SYSTEMROOT%\System32\OpenSSH\
HKU\DefaultUser\Control Panel\Desktop\\Wallpaper -> C:\Windows\Web\Wallpaper\Windows\img0.jpg
HKU\S-1-5-21-336356994-3803797036-487031319-1001\Control Panel\Desktop\\Wallpaper -> C:\Windows\web\wallpaper\Windows\img0.jpg
DNS Servers: 192.168.1.254
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Firewall do Windows está habilitado.

==================== MSCONFIG/TASK MANAGER ítens desabilitados ==

==================== Regras do Firewall (Whitelisted) ================

(Se uma entrada for incluída na fixlist, será removida do Registro. O arquivo não será movido, a menos que seja colocado separadamente.)

FirewallRules: [TCP Query User{C6E847DF-47AE-4CC8-B62D-19BEC28D7108}C:\program files\google\chrome\application\chrome.exe] => (Allow) C:\program files\google\chrome\application\chrome.exe (Google LLC -> Google LLC)
FirewallRules: [UDP Query User{AE4F09F2-0666-499E-92C0-0FAB891587F3}C:\program files\google\chrome\application\chrome.exe] => (Allow) C:\program files\google\chrome\application\chrome.exe (Google LLC -> Google LLC)

==================== Pontos de Restauração =========================

14-05-2024 09:27:16 ZHPcleaner

==================== Dispositivos Apresentando Falhas No Gerenciador ============

==================== Erros no Log de eventos: ========================

Erros em Aplicativos:
==================
Error: (05/13/2024 10:18:49 PM) (Source: SideBySide) (EventID: 35) (User: )
Description: Falha na geração de contexto de ativação para "C:\Program Files (x86)\Microsoft Office\root\Office16\lync.exe.Manifest". Erro no arquivo de manifesto ou de política C:\Program Files (x86)\Microsoft Office\root\Office16\UccApi.DLL", na linha 1.
Identidade do componente localizado no manifesto não corresponde à identidade do componente solicitado.
A referência é UccApi,processorArchitecture="AMD64",type="win32",version="16.0.0.0".
A definição é UccApi,processorArchitecture="x86",type="win32",version="16.0.0.0".
Use o arquivo sxstrace.exe para obter um dignóstico detalhado.

Error: (05/13/2024 10:00:40 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Nome do aplicativo com falha: ESETOnlineScanner.exe, versão: 10.34.8.0, carimbo de data/hora: 0x65f09154
Nome do módulo com falha: WININET.dll, versão: 11.0.19041.3636, carimbo de data/hora: 0x5ccf5c78
Código de exceção: 0xc0000005
Deslocamento da falha: 0x00313a68
ID do processo com falha: 0x1b54
Hora de início do aplicativo com falha: 0x01daa59a114ea231
Caminho do aplicativo com falha: C:\Users\Daniel\AppData\Local\ESET\ESETOnlineScanner\ESETOnlineScanner.exe
Caminho do módulo com falha: C:\Windows\SYSTEM32\WININET.dll
ID do Relatório: 2b293ab8-300d-4aa1-9625-ad10039c0fd8
Nome completo do pacote com falha:
ID do aplicativo relativo ao pacote com falha:

Error: (05/13/2024 09:56:33 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Nome do aplicativo com falha: ESETOnlineScanner.exe, versão: 10.34.8.0, carimbo de data/hora: 0x65f09154
Nome do módulo com falha: esdkW.dll, versão: 10.33.8.0, carimbo de data/hora: 0x637f77ec
Código de exceção: 0xc0000005
Deslocamento da falha: 0x000ae383
ID do processo com falha: 0x1ad4
Hora de início do aplicativo com falha: 0x01daa598e161b644
Caminho do aplicativo com falha: C:\Users\Daniel\AppData\Local\ESET\ESETOnlineScanner\ESETOnlineScanner.exe
Caminho do módulo com falha: C:\Users\Daniel\AppData\Local\ESET\ESETOnlineScanner\esdkW.dll
ID do Relatório: c7c6969e-cb29-4099-926a-3775564b69d1
Nome completo do pacote com falha:
ID do aplicativo relativo ao pacote com falha:

Error: (05/13/2024 09:54:19 PM) (Source: SideBySide) (EventID: 35) (User: )
Description: Falha na geração de contexto de ativação para "C:\Program Files (x86)\Microsoft Office\root\Office16\lync.exe.Manifest". Erro no arquivo de manifesto ou de política C:\Program Files (x86)\Microsoft Office\root\Office16\UccApi.DLL", na linha 1.
Identidade do componente localizado no manifesto não corresponde à identidade do componente solicitado.
A referência é UccApi,processorArchitecture="AMD64",type="win32",version="16.0.0.0".
A definição é UccApi,processorArchitecture="x86",type="win32",version="16.0.0.0".
Use o arquivo sxstrace.exe para obter um dignóstico detalhado.

Error: (05/13/2024 09:39:22 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Nome do aplicativo com falha: ESETOnlineScanner.exe, versão: 10.34.8.0, carimbo de data/hora: 0x65f09154
Nome do módulo com falha: ntdll.dll, versão: 10.0.19041.3693, carimbo de data/hora: 0x3ab9e7d5
Código de exceção: 0xc0000005
Deslocamento da falha: 0x0005f603
ID do processo com falha: 0x1688
Hora de início do aplicativo com falha: 0x01daa595a80e9b84
Caminho do aplicativo com falha: C:\Users\Daniel\AppData\Local\ESET\ESETOnlineScanner\ESETOnlineScanner.exe
Caminho do módulo com falha: C:\Windows\SYSTEM32\ntdll.dll
ID do Relatório: 8acc9563-0c86-4e3b-926d-cdd01461691d
Nome completo do pacote com falha:
ID do aplicativo relativo ao pacote com falha:

Error: (05/13/2024 05:04:16 PM) (Source: SideBySide) (EventID: 35) (User: )
Description: Falha na geração de contexto de ativação para "C:\Program Files (x86)\Microsoft Office\root\Office16\lync.exe.Manifest". Erro no arquivo de manifesto ou de política C:\Program Files (x86)\Microsoft Office\root\Office16\UccApi.DLL", na linha 1.
Identidade do componente localizado no manifesto não corresponde à identidade do componente solicitado.
A referência é UccApi,processorArchitecture="AMD64",type="win32",version="16.0.0.0".
A definição é UccApi,processorArchitecture="x86",type="win32",version="16.0.0.0".
Use o arquivo sxstrace.exe para obter um dignóstico detalhado.

Error: (05/13/2024 05:01:02 PM) (Source: Software Protection Platform Service) (EventID: 8198) (User: )
Description: Falha na Ativação de Licença (slui.exe). Código de erro:
hr=0x80072EE7
Argumento de linha de comando:
RuleId=31e71c49-8da7-4a2f-ad92-45d98a1c79ba;Action=AutoActivate;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=ed799377-74b8-4989-a244-14d082e65972;NotificationInterval=1440;Trigger=UserLogon;SessionId=2

Error: (05/13/2024 05:01:01 PM) (Source: Software Protection Platform Service) (EventID: 1014) (User: )
Description: Falha na aquisição da Licença de Usuário Final. hr=0x80072EE7
Sku Id=ed799377-74b8-4989-a244-14d082e65972

Erros de Sistema:
=============
Error: (05/14/2024 08:46:20 AM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: O serviço Serviço Clique para Executar do Microsoft Office foi finalizado inesperadamente. Isto aconteceu 1 vez(es). A seguinte ação corretiva será tomada em 0 milissegundos: Reiniciar o serviço.

Error: (05/14/2024 08:46:20 AM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: O serviço Foxit PDF Reader Update Service foi encerrado inesperadamente. Isso aconteceu 1 vez(es).

Error: (05/14/2024 08:46:20 AM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: O serviço AtherosSvc foi encerrado inesperadamente. Isso aconteceu 1 vez(es).

Error: (05/14/2024 08:46:20 AM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: O serviço Intel(R) HD Graphics Control Panel Service foi encerrado inesperadamente. Isso aconteceu 1 vez(es).

Error: (05/13/2024 11:40:23 PM) (Source: Service Control Manager) (EventID: 7011) (User: )
Description: Tempo limite esgotado (30000 milissegundos) ao aguardar a resposta de uma transação do serviço Dnscache.

Error: (05/13/2024 11:39:53 PM) (Source: Service Control Manager) (EventID: 7011) (User: )
Description: Tempo limite esgotado (30000 milissegundos) ao aguardar a resposta de uma transação do serviço Dnscache.

Error: (05/13/2024 09:19:37 PM) (Source: EventLog) (EventID: 6008) (User: )
Description: O desligamento do sistema que ocorreu às 17:22:33 do dia ‎13/‎05/‎2024 não era esperado.

Error: (05/13/2024 05:42:47 PM) (Source: disk) (EventID: 11) (User: )
Description: O driver detectou um erro de controlador em \Device\Harddisk1\DR2.

Windows Defender:
================Event[0]:

Date: 2024-05-13 21:29:53
Description:
Microsoft Defender Antivírus encontrou um erro ao tentar atualizar a inteligência de segurança.
Nova Versão da Inteligência de Segurança:
Versão da Inteligência de Segurança anterior: 1.303.25.0
Fonte da Atualização: Servidor do Microsoft Update
Tipo da Inteligência de Segurança: Antivírus
Tipo da atualização: Completa
Usuário: AUTORIDADE NT\SISTEMA
Versão Atual do Mecanismo:
Versão Anterior do Mecanismo: 1.1.16400.2
Código de Erro: 0x80070005
Descrição do Erro: Acesso negado.

==================== Informações da Memória ===========================

BIOS: Dell Inc. A10 11/03/2015
placa-mãe: Dell Inc. 0C1F3F
Processador: Intel(R) Core(TM) i5-4210U CPU @ 1.70GHz
Percentagem de memória em uso: 52%
RAM física total: 8056.14 MB
RAM física disponível: 3860.26 MB
Virtual Total: 9976.14 MB
Virtual disponível: 5430.01 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:222.91 GB) (Free:183.43 GB) (Model: ADATA SU630) NTFS
Drive d: () (Fixed) (Total:465.12 GB) (Free:154.34 GB) (Model: Innostor Ext. HDD USB Device) NTFS
Drive e: (Audio CD) (CDROM) (Total:0 GB) (Free:0 GB) CDFS
Drive g: (Expansion) (Fixed) (Total:931.48 GB) (Free:700.09 GB) (Model: Seagate Expansion HDD SCSI Disk Device) exFAT

\\?\Volume{34c4a6ef-3a92-4704-a649-98352d031178}\ () (Fixed) (Total:0.54 GB) (Free:0.08 GB) NTFS
\\?\Volume{1b79e453-2144-45d0-bd97-49188cb0a330}\ () (Fixed) (Total:0.53 GB) (Free:0.08 GB) NTFS
\\?\Volume{2d31be8b-4491-4a25-ad54-c72b2f08127d}\ () (Fixed) (Total:0.09 GB) (Free:0.07 GB) FAT32
\\?\Volume{1b6cf7e5-9f58-4d7c-add7-c572138d3f44}\ () (Fixed) (Total:0.09 GB) (Free:0.07 GB) FAT32

==================== MBR & Tabela de Partições ====================

==========================================================
Disk: 0 (Size: 223.6 GB) (Disk ID: 7A25E592)

Partition: GPT.

==========================================================
Disk: 1 (Size: 465.8 GB) (Disk ID: C47B838A)

Partition: GPT.

==========================================================
Disk: 2 (Size: 931.5 GB) (Disk ID: 012A3705)
Partition 1: (Not Active) - (Size=931.5 GB) - (Type=07 NTFS)

==================== Fim de Addition.txt =======================