Resultado da análise adicional Farbar Recovery Scan Tool (x64) Versão: 14-11-2021 Executado por Alexandre (21-11-2021 22:53:11) Executando a partir de C:\Users\alexa\Downloads Microsoft Windows 10 Pro Versão 21H1 19043.1110 (X64) (2021-04-25 21:23:45) Modo da Inicialização: Normal ========================================================== ==================== Contas: ============================= (Se uma entrada for incluída na fixlist, será removida.) Administrador (S-1-5-21-523605641-1958518922-2786968805-500 - Administrator - Disabled) Alexandre (S-1-5-21-523605641-1958518922-2786968805-1001 - Administrator - Enabled) => C:\Users\alexa Convidado (S-1-5-21-523605641-1958518922-2786968805-501 - Limited - Disabled) DefaultAccount (S-1-5-21-523605641-1958518922-2786968805-503 - Limited - Disabled) WDAGUtilityAccount (S-1-5-21-523605641-1958518922-2786968805-504 - Limited - Disabled) ==================== Central de Segurança ======================== (Se uma entrada for incluída na fixlist, será removida.) AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} ==================== Programas Instalados ====================== (Somente os programas adwares com a indicação "Oculto" podem ser adicionados à fixlist para desocultá-los. Os programas adwares devem ser desinstalados manualmente.) Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 32.0.0.125 - Adobe) Air Explorer (HKLM\...\Air Explorer) (Version: 4.0.1 - hxxp://www.airexplorer.net) Assinador Digital ARISP versão 1.8.12 (HKLM-x32\...\{5223C5A2-8543-4ABE-B0E5-4C8949077F8B}_is1) (Version: 1.8.12 - ARISP - Associação dos Registradores Imobiliários de São Paulo) Core Temp 1.17.1 (HKLM\...\{086D343F-8E78-4AFC-81AC-D6D414AFD8AC}_is1) (Version: 1.17.1 - ALCPU) CORSAIR iCUE 4 Software (HKLM\...\{F279D1AB-F87E-4F28-8EDA-8D81B14F07B7}) (Version: 4.16.194 - Corsair) Discord (HKU\S-1-5-21-523605641-1958518922-2786968805-1001\...\Discord) (Version: 1.0.9002 - Discord Inc.) Emby Server (HKU\S-1-5-21-523605641-1958518922-2786968805-1001\...\Emby Server) (Version: 4.6 - Emby Team) Google Chrome (HKLM-x32\...\Google Chrome) (Version: 96.0.4664.45 - Google LLC) Java 8 Update 311 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F64180311F0}) (Version: 8.0.3110.11 - Oracle Corporation) Lightshot-5.5.0.7 (HKLM-x32\...\{30A5B3C9-2084-4063-A32A-628A98DE512B}_is1) (Version: 5.5.0.7 - Skillbrains) Logitech G HUB (HKLM\...\{521c89be-637f-4274-a840-baaf7460c2b2}) (Version: 2021.12.4779 - Logitech) Mavis Hub 1.3.0 (HKU\S-1-5-21-523605641-1958518922-2786968805-1001\...\{cc9e8b63-ffef-5371-bb50-2dfd3e6be1f2}) (Version: 1.3.0 - ) Microsoft Edge (HKLM-x32\...\Microsoft Edge) (Version: 96.0.1054.29 - Microsoft Corporation) Microsoft Office Professional Plus 2019 - pt-br (HKLM\...\ProPlus2019Retail - pt-br) (Version: 16.0.14527.20276 - Microsoft Corporation) Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.50918.0 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation) Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.40660 (HKLM-x32\...\{ef6b00ec-13e1-4c25-9064-b2f383cb8412}) (Version: 12.0.40660.0 - Microsoft Corporation) Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.40660 (HKLM-x32\...\{61087a79-ac85-455c-934d-1fa22cc64f36}) (Version: 12.0.40660.0 - Microsoft Corporation) Microsoft Visual C++ 2015-2019 Redistributable (x64) - 14.29.30040 (HKLM-x32\...\{5c6cccca-61ec-4667-a8d9-e133a59a5a73}) (Version: 14.29.30040.0 - Microsoft Corporation) Microsoft Visual C++ 2015-2019 Redistributable (x86) - 14.29.30040 (HKLM-x32\...\{a8968509-65be-4c09-a460-fd1584b1cdbf}) (Version: 14.29.30040.0 - Microsoft Corporation) Microsoft XNA Framework Redistributable 4.0 Refresh (HKLM-x32\...\{D69C8EDE-BBC5-436B-8E0E-C5A6D311CF4F}) (Version: 4.0.30901.0 - Microsoft Corporation) Nelogica ProfitPro (HKU\S-1-5-21-523605641-1958518922-2786968805-1001\...\Profit) (Version: 5.0.0.218 - Nelogica) NoPing (HKLM\...\{E02BF8B3-81A8-43A4-A2AF-D283C12D9FA1}) (Version: 4.0.3.3 - NoPing) NVIDIA Driver de gráficos 457.51 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 457.51 - NVIDIA Corporation) NVIDIA Software do sistema PhysX 9.19.0218 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.19.0218 - NVIDIA Corporation) OBS Studio (HKLM-x32\...\OBS Studio) (Version: 26.1.1 - OBS Project) Office 16 Click-to-Run Extensibility Component (HKLM-x32\...\{90160000-008C-0000-0000-0000000FF1CE}) (Version: 16.0.14527.20276 - Microsoft Corporation) Hidden Office 16 Click-to-Run Extensibility Component 64-bit Registration (HKLM\...\{90160000-00DD-0000-1000-0000000FF1CE}) (Version: 16.0.14527.20234 - Microsoft Corporation) Hidden Office 16 Click-to-Run Licensing Component (HKLM\...\{90160000-008F-0000-1000-0000000FF1CE}) (Version: 16.0.14527.20276 - Microsoft Corporation) Hidden Office 16 Click-to-Run Localization Component (HKLM-x32\...\{90160000-008C-0416-0000-0000000FF1CE}) (Version: 16.0.14527.20234 - Microsoft Corporation) Hidden OpenAL (HKLM-x32\...\OpenAL) (Version: - ) qBittorrent 4.3.9 (HKLM-x32\...\qBittorrent) (Version: 4.3.9 - The qBittorrent project) RaiDrive (HKLM\...\{C5AD09FA-560C-44CB-95B4-EA2B31D53BA4}) (Version: 2019.12.20 - OpenBoxLab) Hidden RaiDrive (HKLM\...\RaiDrive 2019.12.20) (Version: 2019.12.20 - OpenBoxLab) Rainmeter (HKLM-x32\...\Rainmeter) (Version: 4.3.1 r3321 - Rainmeter) SportZone (HKLM-x32\...\{5AE24741-DE0F-6E31-203E-160CBE9F475B}) (Version: 1.5.1 - UNKNOWN) Hidden SportZone (HKLM-x32\...\com.sportplanet.sportzone) (Version: 1.5.1 - UNKNOWN) Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation) StreamElements OBS.Live (HKLM-x32\...\StreamElements OBS.Live) (Version: 21.7.25.759 - StreamElements) TeamSpeak 3 Client (HKLM\...\TeamSpeak 3 Client) (Version: 3.5.3 - TeamSpeak Systems GmbH) Telegram Desktop version 3.2.5 (HKU\S-1-5-21-523605641-1958518922-2786968805-1001\...\{53F49750-6209-4FBF-9CA8-7A333C87D1ED}_is1) (Version: 3.2.5 - Telegram FZ-LLC) VLC media player (HKLM\...\VLC media player) (Version: 3.0.16 - VideoLAN) Wagertool (HKLM-x32\...\{61DA86AA-ECB3-4B01-BC84-FA399AF0F586}) (Version: 1.1.2660 - KeepItSoft, Lda) WhatsApp (HKU\S-1-5-21-523605641-1958518922-2786968805-1001\...\WhatsApp) (Version: 2.2144.11 - WhatsApp) Windows Packet Filter (64 bit) (HKLM\...\{6B811A29-2FB9-46D6-88D7-1275AC7AAE01}) (Version: 3.2.20.3 - NT Kernel Resources) WinRAR 6.01 (64-bit) (HKLM\...\WinRAR archiver) (Version: 6.01.0 - win.rar GmbH) Zoom (HKU\S-1-5-21-523605641-1958518922-2786968805-1001\...\ZoomUMX) (Version: 5.7.7 (1105) - Zoom Video Communications, Inc.) Packages: ========= Complemento do Mecanismo de Mídia de Fotos -> C:\Program Files\WindowsApps\Microsoft.Photos.MediaEngineDLC_1.0.0.0_x64__8wekyb3d8bbwe [2021-11-08] (Microsoft Corporation) NVIDIA Control Panel -> C:\Program Files\WindowsApps\NVIDIACorp.NVIDIAControlPanel_8.1.961.0_x64__56jybvy8sckqj [2021-07-19] (NVIDIA Corp.) ==================== Análise Personalizada CLSID (Whitelisted): ============== (Se uma entrada for incluída na fixlist, será removida do Registro. O arquivo não será movido, a menos que seja colocado separadamente.) CustomCLSID: HKU\S-1-5-21-523605641-1958518922-2786968805-1001_Classes\CLSID\{272D2E65-05FB-4500-BD7B-5905D5B0A1B8}\localserver32 -> C:\Users\alexa\AppData\Roaming\Nelogica\Profit\profitchart.exe (Nelogica Sistemas de Software Ltda. -> Nelogica) SSODL: EldosMountNotificator-cbfs6 - {995B1DCB-0C8C-4E09-8AD3-9688773B07D1} - C:\Windows\system32\cbfsMntNtf6.dll (EldoS Corporation -> /n software, Inc.) SSODL-x32: EldosMountNotificator-cbfs6 - {995B1DCB-0C8C-4E09-8AD3-9688773B07D1} - C:\Windows\SysWOW64\cbfsMntNtf6.dll (EldoS Corporation -> /n software, Inc.) ShellServiceObjects: Virtual Storage Mount Notification -> {995B1DCB-0C8C-4E09-8AD3-9688773B07D1} => C:\Windows\system32\cbfsMntNtf6.dll [2016-09-21] (EldoS Corporation -> /n software, Inc.) ShellServiceObjects-x32: Virtual Storage Mount Notification -> {995B1DCB-0C8C-4E09-8AD3-9688773B07D1} => C:\Windows\SysWOW64\cbfsMntNtf6.dll [2016-09-21] (EldoS Corporation -> /n software, Inc.) ShellIconOverlayIdentifiers: [EldosIconOverlay-cbfs6] -> {593FA2FB-EFDF-4524-8D2F-308AA854FCBD} => C:\Windows\system32\cbfsMntNtf6.dll [2016-09-21] (EldoS Corporation -> /n software, Inc.) ShellIconOverlayIdentifiers-x32: [EldosIconOverlay-cbfs6] -> {593FA2FB-EFDF-4524-8D2F-308AA854FCBD} => C:\Windows\system32\cbfsMntNtf6.dll [2016-09-21] (EldoS Corporation -> /n software, Inc.) ContextMenuHandlers1: [RaiDrive.CopyMove] -> {7031db56-aef0-4a42-b4c9-bfdf2abe4765} => C:\Program Files\OpenBoxLab\RaiDrive\RaiDrive.ShellExtension.x64.dll [2019-12-18] (OpenBoxLab -> OpenBoxLab) ContextMenuHandlers1: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2021-04-07] (win.rar GmbH -> Alexander Roshal) ContextMenuHandlers1-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2021-04-07] (win.rar GmbH -> Alexander Roshal) ContextMenuHandlers2: [RaiDrive.CopyMove] -> {7031db56-aef0-4a42-b4c9-bfdf2abe4765} => C:\Program Files\OpenBoxLab\RaiDrive\RaiDrive.ShellExtension.x64.dll [2019-12-18] (OpenBoxLab -> OpenBoxLab) ContextMenuHandlers4: [RaiDrive.CopyMove] -> {7031db56-aef0-4a42-b4c9-bfdf2abe4765} => C:\Program Files\OpenBoxLab\RaiDrive\RaiDrive.ShellExtension.x64.dll [2019-12-18] (OpenBoxLab -> OpenBoxLab) ContextMenuHandlers5: [NvCplDesktopContext] -> {3D1975AF-48C6-4f8e-A182-BE0E08FA86A9} => C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_dfe0347ef8af4743\nvshext.dll [2020-11-30] (NVIDIA Corporation -> NVIDIA Corporation) ContextMenuHandlers5: [RaiDrive.CopyMove] -> {7031db56-aef0-4a42-b4c9-bfdf2abe4765} => C:\Program Files\OpenBoxLab\RaiDrive\RaiDrive.ShellExtension.x64.dll [2019-12-18] (OpenBoxLab -> OpenBoxLab) ContextMenuHandlers6: [RaiDrive.CopyMove] -> {7031db56-aef0-4a42-b4c9-bfdf2abe4765} => C:\Program Files\OpenBoxLab\RaiDrive\RaiDrive.ShellExtension.x64.dll [2019-12-18] (OpenBoxLab -> OpenBoxLab) ContextMenuHandlers6: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2021-04-07] (win.rar GmbH -> Alexander Roshal) ContextMenuHandlers6-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2021-04-07] (win.rar GmbH -> Alexander Roshal) ==================== Codecs (Whitelisted) ==================== ==================== Atalhos & WMI ======================== (As entradas podem ser listadas para serem restauradas ou removidas.) Shortcut: C:\Users\alexa\AppData\Roaming\Microsoft\Windows\Start Menu\Emby\Emby Server Dashboard.lnk -> hxxp://localhost:8096/web/dashboard.htm ShortcutWithArgument: C:\Users\alexa\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\apps do Chrome\Axie management.lnk -> C:\Program Files\Google\Chrome\Application\chrome_proxy.exe (Google LLC) -> --profile-directory=Default --app-id=ocofmcfammbcngmjlgebhaggdejogmlb ShortcutWithArgument: C:\Users\alexa\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Axie management.lnk -> C:\Program Files\Google\Chrome\Application\chrome_proxy.exe (Google LLC) -> --profile-directory=Default --app-id=ocofmcfammbcngmjlgebhaggdejogmlb ==================== Módulos Carregados (Whitelisted) ============= 2021-07-24 20:45 - 2021-07-24 20:45 - 000085504 _____ () [Arquivo não assinado] C:\Windows\SYSTEM32\ZLIB1.dll 2021-11-21 22:15 - 2021-11-21 22:15 - 000319488 _____ (/n software, Inc.) [Arquivo não assinado] [O arquivo está em uso] C:\Windows\TEMP\b0494a1f-4bd3-owMQN5swJPTJH+ixLIcd2g==\CBFS6Net.dll 2021-08-17 12:43 - 2021-08-17 12:43 - 000090112 _____ (Silicon Laboratories, Inc.) [Arquivo não assinado] C:\Program Files\Corsair\CORSAIR iCUE 4 Software\SiUSBXp.dll 2021-07-24 20:45 - 2021-07-24 20:45 - 000466944 _____ (The curl library, hxxps://curl.haxx.se/) [Arquivo não assinado] C:\Windows\system32\libcurl.dll ==================== Alternate Data Streams (Whitelisted) ======== ==================== Modo de Segurança (Whitelisted) ================== ==================== Associação (Whitelisted) ================= ==================== Internet Explorer (Whitelisted) ========== HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Local Page = SearchScopes: HKLM -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&FORM=IE8SRC SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&FORM=IE8SRC SearchScopes: HKLM-x32 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&FORM=IE8SRC SearchScopes: HKLM-x32 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&FORM=IE8SRC BHO: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX64\Microsoft Office\Office16\OCHelper.dll [2021-11-09] (Microsoft Corporation -> Microsoft Corporation) BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_311\bin\ssv.dll [2021-10-23] (Oracle America, Inc. -> Oracle Corporation) BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_311\bin\jp2ssv.dll [2021-10-23] (Oracle America, Inc. -> Oracle Corporation) BHO-x32: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\root\Office16\OCHelper.dll [2021-11-09] (Microsoft Corporation -> Microsoft Corporation) Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2021-11-09] (Microsoft Corporation -> Microsoft Corporation) Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2021-11-09] (Microsoft Corporation -> Microsoft Corporation) Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2021-11-09] (Microsoft Corporation -> Microsoft Corporation) Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2021-11-09] (Microsoft Corporation -> Microsoft Corporation) ==================== Hosts Conteúdo: ========================= (Se necessário, a diretiva Hosts: pode ser incluída na fixlist para redefinir o Hosts.) 2019-12-07 06:14 - 2019-12-07 06:12 - 000000824 _____ C:\Windows\system32\drivers\etc\hosts ==================== Outras Áreas =========================== (Atualmente não há nenhuma correção automática para esta seção.) HKLM\System\CurrentControlSet\Control\Session Manager\Environment\\Path -> C:\Program Files (x86)\Common Files\Oracle\Java\javapath;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Windows\System32\OpenSSH\;C:\Program Files (x86)\NVIDIA Corporation\PhysX\Common HKU\S-1-5-21-523605641-1958518922-2786968805-1001\Control Panel\Desktop\\Wallpaper -> DNS Servers: 192.168.1.254 HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 0) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1) HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: ) Firewall do Windows está habilitado. Network Binding: ============= Ethernet: WinpkFilter LightWeight Filter -> nt_ndisrd (enabled) ==================== MSCONFIG/TASK MANAGER ítens desabilitados == (Se uma entrada for incluída na fixlist, será removida.) MSCONFIG\Services: WSearch => 2 MSCONFIG\Services: wuauserv => 3 HKLM\...\StartupApproved\Run: => "SecurityHealth" HKU\S-1-5-21-523605641-1958518922-2786968805-1001\...\StartupApproved\Run: => "OneDrive" HKU\S-1-5-21-523605641-1958518922-2786968805-1001\...\StartupApproved\Run: => "Discord" ==================== Regras do Firewall (Whitelisted) ================ (Se uma entrada for incluída na fixlist, será removida do Registro. O arquivo não será movido, a menos que seja colocado separadamente.) FirewallRules: [TCP Query User{1AC66CB0-848F-4DAD-98E6-717B96F26B4C}C:\program files\lghub\lghub_agent.exe] => (Allow) C:\program files\lghub\lghub_agent.exe (Logitech Inc -> Logitech, Inc.) FirewallRules: [UDP Query User{82403C25-75E9-44D9-979D-72739B44C1A8}C:\program files\lghub\lghub_agent.exe] => (Allow) C:\program files\lghub\lghub_agent.exe (Logitech Inc -> Logitech, Inc.) FirewallRules: [{F04FDA4C-1724-4441-AFEC-18FF7B0308EE}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.73.124.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.) FirewallRules: [{E7026B84-005B-4EC4-BF0B-3BE1BB9E9242}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.73.124.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.) FirewallRules: [{D5A40864-F3D2-4A9B-A7E2-C28F1C55E4C6}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.73.124.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.) FirewallRules: [{1951FE23-6DDD-4426-A311-E625715FF3D1}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.73.124.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.) FirewallRules: [{041657E7-45FA-4E6E-8BDA-7FA342B0AB98}] => (Allow) C:\Users\alexa\AppData\Roaming\Zoom\bin\Zoom.exe (Zoom Video Communications, Inc. -> Zoom Video Communications, Inc.) FirewallRules: [{A3745C59-B7D8-4B22-B5BB-224C2C3DB9FA}] => (Allow) C:\Users\alexa\AppData\Roaming\Zoom\bin\airhost.exe => Nenhum Arquivo FirewallRules: [{73AD9730-249B-401A-8D3F-77A4F27E4748}] => (Allow) C:\Users\alexa\AppData\Roaming\Zoom\bin\airhost.exe => Nenhum Arquivo FirewallRules: [{82A2E8C0-ADBC-4631-8ED1-963F7EE5C197}] => (Allow) C:\Program Files\OpenBoxLab\RaiDrive\RaiDrive.Service.x64.exe (OpenBoxLab -> OpenBoxLab) FirewallRules: [{9DB4A8AE-9AAE-4360-83EB-B6399ED27EA7}] => (Allow) C:\Program Files\NoPing\NoPing.exe (1ncrivel Sistemas LTDA -> ) FirewallRules: [{885A63D9-3760-43B9-8B8F-79DCD3FE9B8E}] => (Allow) C:\Program Files\NoPing\QtWinExtras\service.notification.updater.exe (1ncrivel Sistemas LTDA -> ) FirewallRules: [{46CA2B1C-3006-4C36-9F10-4FBFADDC3A15}] => (Allow) C:\Program Files\NoPing\service.routing.wind.exe (1ncrivel Sistemas LTDA -> ) FirewallRules: [{E28CE539-DFE3-4670-8B2E-71425C21DB45}] => (Allow) C:\Program Files\NoPing\service.routing.exe (1ncrivel Sistemas LTDA -> ) FirewallRules: [{D1823F66-9463-41F0-92AE-EB7B7D6C6A4D}] => (Allow) C:\Program Files\NoPing\NoPingUpdater.exe (1ncrivel Sistemas LTDA -> ) FirewallRules: [TCP Query User{5F6190E8-9CF2-4392-89F2-B15AE8B2099A}C:\program files\plex\plex\plex.exe] => (Allow) C:\program files\plex\plex\plex.exe => Nenhum Arquivo FirewallRules: [UDP Query User{2C741386-DB71-403A-BA96-9270C3EDBDBF}C:\program files\plex\plex\plex.exe] => (Allow) C:\program files\plex\plex\plex.exe => Nenhum Arquivo FirewallRules: [TCP Query User{68DB9C6D-2215-4BB6-BC52-E974C8BFF873}C:\users\alexa\downloads\noping\noping\service.routing.exe] => (Allow) C:\users\alexa\downloads\noping\noping\service.routing.exe => Nenhum Arquivo FirewallRules: [UDP Query User{19AFE3C8-4815-4DCF-BBB8-5ABE9C72088F}C:\users\alexa\downloads\noping\noping\service.routing.exe] => (Allow) C:\users\alexa\downloads\noping\noping\service.routing.exe => Nenhum Arquivo FirewallRules: [{7009276D-D62F-434E-BC86-E9554E059DB5}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe (Valve -> Valve Corporation) FirewallRules: [{64A66A70-F248-47FD-98DE-AC8D9804B4F8}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe (Valve -> Valve Corporation) FirewallRules: [TCP Query User{91CF59F8-27AF-4576-8EE6-5D864DB7B383}C:\program files (x86)\innova\4game2.0\bin\cefsharp.browsersubprocess.exe] => (Allow) C:\program files (x86)\innova\4game2.0\bin\cefsharp.browsersubprocess.exe => Nenhum Arquivo FirewallRules: [UDP Query User{E4938925-9E71-4801-A5E0-471EDEC159FC}C:\program files (x86)\innova\4game2.0\bin\cefsharp.browsersubprocess.exe] => (Allow) C:\program files (x86)\innova\4game2.0\bin\cefsharp.browsersubprocess.exe => Nenhum Arquivo FirewallRules: [{87079250-F767-4FAF-B85D-155AA6C0F939}] => (Block) C:\Program Files (x86)\Microsoft Office\root\Office16\GRAPH.EXE (Microsoft Corporation -> Microsoft Corporation) FirewallRules: [{5E802E73-C9EE-4407-AE96-29C834FDA508}] => (Block) C:\Program Files (x86)\Microsoft Office\root\Office16\GRAPH.EXE (Microsoft Corporation -> Microsoft Corporation) FirewallRules: [{A6412425-83CB-4C41-8294-B38A8695F9D7}] => (Block) C:\Program Files (x86)\Microsoft Office\root\Office16\IEContentService.exe (Microsoft Corporation -> Microsoft Corporation) FirewallRules: [{BBCAE3D0-CFEA-4044-A2AA-6D04B9F8D4EA}] => (Block) C:\Program Files (x86)\Microsoft Office\root\Office16\IEContentService.exe (Microsoft Corporation -> Microsoft Corporation) FirewallRules: [{34E05AE2-E585-4679-A453-9D2057ECF4F2}] => (Block) C:\Program Files (x86)\Microsoft Office\root\Office16\lync.exe (Microsoft Corporation -> Microsoft Corporation) FirewallRules: [{93A9907D-5B6C-4610-AC61-7764BB4BFDC7}] => (Block) C:\Program Files (x86)\Microsoft Office\root\Office16\lync.exe (Microsoft Corporation -> Microsoft Corporation) FirewallRules: [{B82E2C23-BC3B-4559-83B3-9729469A159C}] => (Block) C:\Program Files (x86)\Microsoft Office\root\Office16\lync99.exe (Microsoft Corporation -> Microsoft Corporation) FirewallRules: [{E3844C93-4242-4E75-9276-3F8DBC8D619D}] => (Block) C:\Program Files (x86)\Microsoft Office\root\Office16\lync99.exe (Microsoft Corporation -> Microsoft Corporation) FirewallRules: [{16BC7B74-F5E2-4EC7-82ED-7C034846663A}] => (Block) C:\Program Files (x86)\Microsoft Office\root\Office16\lynchtmlconv.exe (Microsoft Corporation -> Microsoft Corporation) FirewallRules: [{9C0C2706-2430-4A37-A6D7-8536EA807E63}] => (Block) C:\Program Files (x86)\Microsoft Office\root\Office16\lynchtmlconv.exe (Microsoft Corporation -> Microsoft Corporation) FirewallRules: [{B68346E9-EC50-4B21-9BEC-4CF3F153E246}] => (Block) C:\Program Files (x86)\Microsoft Office\root\Office16\misc.exe (Microsoft Corporation -> Microsoft Corporation) FirewallRules: [{E43DE0D7-06AD-4502-B1C4-BAA7F7FA412F}] => (Block) C:\Program Files (x86)\Microsoft Office\root\Office16\misc.exe (Microsoft Corporation -> Microsoft Corporation) FirewallRules: [{426B7C04-B920-4973-97B4-0BF8AEE3E25E}] => (Block) C:\Program Files (x86)\Microsoft Office\root\Office16\MSACCESS.EXE (Microsoft Corporation -> Microsoft Corporation) FirewallRules: [{250FF938-B303-4B28-B35C-331CC43F54FA}] => (Block) C:\Program Files (x86)\Microsoft Office\root\Office16\MSACCESS.EXE (Microsoft Corporation -> Microsoft Corporation) FirewallRules: [{4E283D58-993C-4992-B05A-5E525872B95B}] => (Block) C:\Program Files (x86)\Microsoft Office\root\Office16\msoadfsb.exe (Microsoft Corporation -> Microsoft Corporation) FirewallRules: [{DDC86CF7-1B13-4960-9843-A19407238128}] => (Block) C:\Program Files (x86)\Microsoft Office\root\Office16\msoadfsb.exe (Microsoft Corporation -> Microsoft Corporation) FirewallRules: [{BDA5B3E2-A286-4676-BEA6-9EB24B481D88}] => (Block) C:\Program Files (x86)\Microsoft Office\root\Office16\msoasb.exe (Microsoft Corporation -> Microsoft Corporation) FirewallRules: [{01E7ECD0-E872-471D-808F-C9E4D3282047}] => (Block) C:\Program Files (x86)\Microsoft Office\root\Office16\msoasb.exe (Microsoft Corporation -> Microsoft Corporation) FirewallRules: [{9746AB18-4C9A-45F2-9651-7580A900C9E8}] => (Block) C:\Program Files (x86)\Microsoft Office\root\Office16\ACCICONS.EXE (Microsoft Corporation -> Microsoft Corporation) FirewallRules: [{F801B908-9E9C-44A4-89C9-AF8B2C8D45C7}] => (Block) C:\Program Files (x86)\Microsoft Office\root\Office16\ACCICONS.EXE (Microsoft Corporation -> Microsoft Corporation) FirewallRules: [{F448EBB0-B647-4B0B-BDB0-08FF5243D21C}] => (Block) C:\Program Files (x86)\Microsoft Office\root\Office16\AppSharingHookController.exe (Microsoft Corporation -> Microsoft Corporation) FirewallRules: [{FFFC70CF-E18E-49DB-AE3C-0CC96B8CEC73}] => (Block) C:\Program Files (x86)\Microsoft Office\root\Office16\AppSharingHookController.exe (Microsoft Corporation -> Microsoft Corporation) FirewallRules: [{E83CEA14-AD00-4E54-A23D-95FC94A94EF2}] => (Block) C:\Program Files (x86)\Microsoft Office\root\Office16\CLVIEW.EXE (Microsoft Corporation -> Microsoft Corporation) FirewallRules: [{DD39890A-3306-4A6F-A5B4-0EAE1E037E18}] => (Block) C:\Program Files (x86)\Microsoft Office\root\Office16\CLVIEW.EXE (Microsoft Corporation -> Microsoft Corporation) FirewallRules: [{429A5831-8288-487F-8220-8377684E16F8}] => (Block) C:\Program Files (x86)\Microsoft Office\root\Office16\CNFNOT32.EXE (Microsoft Corporation -> Microsoft Corporation) FirewallRules: [{97FB00C8-951A-406C-84ED-94E807D3A666}] => (Block) C:\Program Files (x86)\Microsoft Office\root\Office16\CNFNOT32.EXE (Microsoft Corporation -> Microsoft Corporation) FirewallRules: [{8A0E4B2A-F697-4A70-AC61-16324DD77BAC}] => (Block) C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE (Microsoft Corporation -> Microsoft Corporation) FirewallRules: [{EA445450-9FB3-4227-BAD6-D6B37037FEB2}] => (Block) C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE (Microsoft Corporation -> Microsoft Corporation) FirewallRules: [{887F2ED9-D4FA-401F-97D9-B0414635BD1C}] => (Block) C:\Program Files (x86)\Microsoft Office\root\Office16\excelcnv.exe (Microsoft Corporation -> Microsoft Corporation) FirewallRules: [{ABBBA2FC-DFCF-4EAE-8F86-B3C30050A230}] => (Block) C:\Program Files (x86)\Microsoft Office\root\Office16\excelcnv.exe (Microsoft Corporation -> Microsoft Corporation) FirewallRules: [{CC32859D-E19B-487B-A630-18E531A807E1}] => (Block) C:\Program Files (x86)\Microsoft Office\root\Office16\MSQRY32.EXE (Microsoft Corporation -> Microsoft Corporation) FirewallRules: [{8DD668E5-6142-4FAF-9B0E-5A78AC86D2F2}] => (Block) C:\Program Files (x86)\Microsoft Office\root\Office16\MSQRY32.EXE (Microsoft Corporation -> Microsoft Corporation) FirewallRules: [{D0CF6E70-B460-4134-B1B9-4A31AAED7443}] => (Block) C:\Program Files (x86)\Microsoft Office\root\Office16\NAMECONTROLSERVER.EXE (Microsoft Corporation -> Microsoft Corporation) FirewallRules: [{153C3436-F26F-4461-A2D7-F52E1FA2D9C9}] => (Block) C:\Program Files (x86)\Microsoft Office\root\Office16\NAMECONTROLSERVER.EXE (Microsoft Corporation -> Microsoft Corporation) FirewallRules: [{C6861DA6-0B58-4D31-BEB1-1535897838C8}] => (Block) C:\Program Files (x86)\Microsoft Office\root\Office16\OcPubMgr.exe (Microsoft Corporation -> Microsoft Corporation) FirewallRules: [{2A3E8C30-FE99-4016-A80C-61CAD573A383}] => (Block) C:\Program Files (x86)\Microsoft Office\root\Office16\OcPubMgr.exe (Microsoft Corporation -> Microsoft Corporation) FirewallRules: [{15ED05F8-B638-4A54-8534-326F28DBA0CA}] => (Block) C:\Program Files (x86)\Microsoft Office\root\Office16\officeappguardwin32.exe (Microsoft Corporation -> Microsoft Corporation) FirewallRules: [{FE7164A6-FE40-49F8-960D-DE9898E2C718}] => (Block) C:\Program Files (x86)\Microsoft Office\root\Office16\officeappguardwin32.exe (Microsoft Corporation -> Microsoft Corporation) FirewallRules: [{C6C93A2E-8F77-4800-9193-216D83599FB7}] => (Block) C:\Program Files (x86)\Microsoft Office\root\Office16\OLCFG.EXE (Microsoft Corporation -> Microsoft Corporation) FirewallRules: [{9735370F-B977-4AF0-B198-63BD2F98A411}] => (Block) C:\Program Files (x86)\Microsoft Office\root\Office16\OLCFG.EXE (Microsoft Corporation -> Microsoft Corporation) FirewallRules: [{1758DB51-A2D9-4E7D-81D3-8A1796DFF6FE}] => (Block) C:\Program Files (x86)\Microsoft Office\root\Office16\ONENOTE.EXE (Microsoft Corporation -> Microsoft Corporation) FirewallRules: [{2A8C09C1-756A-4800-A13F-B951CB669FC7}] => (Block) C:\Program Files (x86)\Microsoft Office\root\Office16\ONENOTE.EXE (Microsoft Corporation -> Microsoft Corporation) FirewallRules: [{8EF35AFF-9C2C-4B94-A5CD-3C0ADB798EE7}] => (Block) C:\Program Files (x86)\Microsoft Office\root\Office16\ONENOTEM.EXE (Microsoft Corporation -> Microsoft Corporation) FirewallRules: [{2F141DF7-B7C7-4765-9273-1AEC41C6BEB1}] => (Block) C:\Program Files (x86)\Microsoft Office\root\Office16\ONENOTEM.EXE (Microsoft Corporation -> Microsoft Corporation) FirewallRules: [{4E280390-ED4B-42A1-8C5C-693FF18A4685}] => (Block) C:\Program Files (x86)\Microsoft Office\root\Office16\ORGCHART.EXE (Microsoft Corporation -> Microsoft Corporation) FirewallRules: [{8ACFAE67-6669-404F-BB68-12BE508C4F9A}] => (Block) C:\Program Files (x86)\Microsoft Office\root\Office16\ORGCHART.EXE (Microsoft Corporation -> Microsoft Corporation) FirewallRules: [{60AA76AE-C407-4E2B-80D9-BF0B9B950F09}] => (Block) C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE (Microsoft Corporation -> Microsoft Corporation) FirewallRules: [{3EF160B1-C43C-49A8-BA90-B40F9A679372}] => (Block) C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE (Microsoft Corporation -> Microsoft Corporation) FirewallRules: [{0AC3C727-CDF9-4DD6-87EA-00108C72FEC1}] => (Block) C:\Program Files (x86)\Microsoft Office\root\Office16\msoev.exe (Microsoft Corporation -> Microsoft Corporation) FirewallRules: [{60A0AF79-53EC-4AD3-956D-0D62D7C30FA6}] => (Block) C:\Program Files (x86)\Microsoft Office\root\Office16\msoev.exe (Microsoft Corporation -> Microsoft Corporation) FirewallRules: [{57C1DE1A-089C-4D0F-AD94-4D0FAEA309AF}] => (Block) C:\Program Files (x86)\Microsoft Office\root\Office16\MSOHTMED.EXE (Microsoft Corporation -> Microsoft Corporation) FirewallRules: [{1BC5AB6E-E4B4-4C35-9495-E2626CA8EF69}] => (Block) C:\Program Files (x86)\Microsoft Office\root\Office16\MSOHTMED.EXE (Microsoft Corporation -> Microsoft Corporation) FirewallRules: [{F1EB600C-E78E-4F31-A3C9-607842D80179}] => (Block) C:\Program Files (x86)\Microsoft Office\root\Office16\msoia.exe (Microsoft Corporation -> Microsoft Corporation) FirewallRules: [{6DF47EA2-4256-4E3A-9195-EF0374ABD3BD}] => (Block) C:\Program Files (x86)\Microsoft Office\root\Office16\msoia.exe (Microsoft Corporation -> Microsoft Corporation) FirewallRules: [{A19B9B3F-5D5A-4C79-B134-6B1913A99129}] => (Block) C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSREC.EXE (Microsoft Corporation -> Microsoft Corporation) FirewallRules: [{086CDCD6-E12A-483F-8055-F912564DEC53}] => (Block) C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSREC.EXE (Microsoft Corporation -> Microsoft Corporation) FirewallRules: [{61B403F5-11AA-4D9E-A155-72B93CF689A8}] => (Block) C:\Program Files (x86)\Microsoft Office\root\Office16\msotd.exe (Microsoft Corporation -> Microsoft Corporation) FirewallRules: [{86C599CC-8354-4FDF-B6E2-8BC9C5E91CE7}] => (Block) C:\Program Files (x86)\Microsoft Office\root\Office16\msotd.exe (Microsoft Corporation -> Microsoft Corporation) FirewallRules: [{FA50F4BE-2071-4103-8820-72EB242FAA80}] => (Block) C:\Program Files (x86)\Microsoft Office\root\Office16\MSPUB.EXE (Microsoft Corporation -> Microsoft Corporation) FirewallRules: [{D3C5E4E0-4FE0-488D-BBBA-55C939A811D5}] => (Block) C:\Program Files (x86)\Microsoft Office\root\Office16\MSPUB.EXE (Microsoft Corporation -> Microsoft Corporation) FirewallRules: [{E9822BCF-723C-4CA3-8D4C-B9DD1EBDC8FE}] => (Block) C:\Program Files (x86)\Microsoft Office\root\Office16\protocolhandler.exe (Microsoft Corporation -> Microsoft Corporation) FirewallRules: [{885555D9-F000-4484-97B0-8497876B0C83}] => (Block) C:\Program Files (x86)\Microsoft Office\root\Office16\protocolhandler.exe (Microsoft Corporation -> Microsoft Corporation) FirewallRules: [{E0FFB1AB-2114-4418-B1D6-765D05499D2D}] => (Block) C:\Program Files (x86)\Microsoft Office\root\Office16\SCANPST.EXE (Microsoft Corporation -> Microsoft Corporation) FirewallRules: [{270EA5D8-EDE9-40D0-9493-21F21A8D397D}] => (Block) C:\Program Files (x86)\Microsoft Office\root\Office16\SCANPST.EXE (Microsoft Corporation -> Microsoft Corporation) FirewallRules: [{9AA178AB-C693-4D73-965B-77B804DF7F24}] => (Block) C:\Program Files (x86)\Microsoft Office\root\Office16\SDXHelper.exe (Microsoft Corporation -> Microsoft Corporation) FirewallRules: [{A02F9CE8-84D2-4373-8EED-4B1350252E76}] => (Block) C:\Program Files (x86)\Microsoft Office\root\Office16\SDXHelper.exe (Microsoft Corporation -> Microsoft Corporation) FirewallRules: [{4329FB31-FA5F-4684-A066-B8DEAAE8B78B}] => (Block) C:\Program Files (x86)\Microsoft Office\root\Office16\SDXHelperBgt.exe (Microsoft Corporation -> Microsoft Corporation) FirewallRules: [{290E3F24-BE12-4B07-A1F1-5CF26F3B2493}] => (Block) C:\Program Files (x86)\Microsoft Office\root\Office16\SDXHelperBgt.exe (Microsoft Corporation -> Microsoft Corporation) FirewallRules: [{1E64895E-0DFC-4A29-91EA-45E3D3DC2EF7}] => (Block) C:\Program Files (x86)\Microsoft Office\root\Office16\SELFCERT.EXE (Microsoft Corporation -> Microsoft Corporation) FirewallRules: [{CA1C30B5-69AE-4F48-804F-BDCE9B9A050D}] => (Block) C:\Program Files (x86)\Microsoft Office\root\Office16\SELFCERT.EXE (Microsoft Corporation -> Microsoft Corporation) FirewallRules: [{796B06E0-C94C-4B86-9D6B-F66AF2CF7676}] => (Block) C:\Program Files (x86)\Microsoft Office\root\Office16\SETLANG.EXE (Microsoft Corporation -> Microsoft Corporation) FirewallRules: [{2ED26675-D68F-4133-B33B-964BF44D2164}] => (Block) C:\Program Files (x86)\Microsoft Office\root\Office16\SETLANG.EXE (Microsoft Corporation -> Microsoft Corporation) FirewallRules: [{A3AAD997-92E8-453B-B56C-67BBDCA144F3}] => (Block) C:\Program Files (x86)\Microsoft Office\root\Office16\UcMapi.exe (Microsoft Corporation -> Microsoft Corporation) FirewallRules: [{9D816391-CC9F-412C-B290-168EAFEF1632}] => (Block) C:\Program Files (x86)\Microsoft Office\root\Office16\UcMapi.exe (Microsoft Corporation -> Microsoft Corporation) FirewallRules: [{5D8903C7-3DB2-416C-BBB7-47E23FE2641F}] => (Block) C:\Program Files (x86)\Microsoft Office\root\Office16\VPREVIEW.EXE (Microsoft Corporation -> Microsoft Corporation) FirewallRules: [{B83A292E-1F23-4883-853C-0D7C12F5F409}] => (Block) C:\Program Files (x86)\Microsoft Office\root\Office16\VPREVIEW.EXE (Microsoft Corporation -> Microsoft Corporation) FirewallRules: [{37150773-7F49-4CAC-9904-94C920EA0C00}] => (Block) C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE (Microsoft Corporation -> Microsoft Corporation) FirewallRules: [{6D947EF5-0C23-4BA8-832D-E2C0E8E3D1B5}] => (Block) C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE (Microsoft Corporation -> Microsoft Corporation) FirewallRules: [{22780934-61FE-4E0A-882F-4E6D795C7939}] => (Block) C:\Program Files (x86)\Microsoft Office\root\Office16\Wordconv.exe (Microsoft Corporation -> Microsoft Corporation) FirewallRules: [{5B6D1CF3-DFB5-4883-9A9F-BB70B091BBBC}] => (Block) C:\Program Files (x86)\Microsoft Office\root\Office16\Wordconv.exe (Microsoft Corporation -> Microsoft Corporation) FirewallRules: [{AE64ECD9-5FD6-4D63-8641-A6980A0F45A9}] => (Block) C:\Program Files (x86)\Microsoft Office\root\Office16\WORDICON.EXE (Microsoft Corporation -> Microsoft Corporation) FirewallRules: [{3D133C81-C11E-448C-B8B7-64187EDDEFC2}] => (Block) C:\Program Files (x86)\Microsoft Office\root\Office16\WORDICON.EXE (Microsoft Corporation -> Microsoft Corporation) FirewallRules: [{198E4461-192B-44E9-A5F7-DFB667431978}] => (Block) C:\Program Files (x86)\Microsoft Office\root\Office16\PDFREFLOW.EXE (Microsoft Corporation -> Microsoft Corporation) FirewallRules: [{AACE8EA3-406B-48B2-B4A1-C567EE31F218}] => (Block) C:\Program Files (x86)\Microsoft Office\root\Office16\PDFREFLOW.EXE (Microsoft Corporation -> Microsoft Corporation) FirewallRules: [{2A921F80-CD12-4F2C-A783-38554481CB34}] => (Block) C:\Program Files (x86)\Microsoft Office\root\Office16\PerfBoost.exe (Microsoft Corporation -> Microsoft Corporation) FirewallRules: [{7D7E86F7-CC1A-4698-B00E-22AAF80460EC}] => (Block) C:\Program Files (x86)\Microsoft Office\root\Office16\PerfBoost.exe (Microsoft Corporation -> Microsoft Corporation) FirewallRules: [{D27EE541-BFBF-4E05-A01B-0F1C532C51E2}] => (Block) C:\Program Files (x86)\Microsoft Office\root\Office16\POWERPNT.EXE (Microsoft Corporation -> Microsoft Corporation) FirewallRules: [{CCF26169-3C90-4283-983F-08154B0CE021}] => (Block) C:\Program Files (x86)\Microsoft Office\root\Office16\POWERPNT.EXE (Microsoft Corporation -> Microsoft Corporation) FirewallRules: [{3D37D87A-2AD6-4F3A-92D3-9FE49148C68D}] => (Block) C:\Program Files (x86)\Microsoft Office\root\Office16\PPTICO.EXE (Microsoft Corporation -> Microsoft Corporation) FirewallRules: [{796462D2-3442-46B9-891D-E9361CF3AE1B}] => (Block) C:\Program Files (x86)\Microsoft Office\root\Office16\PPTICO.EXE (Microsoft Corporation -> Microsoft Corporation) FirewallRules: [{5A6C900C-80D1-4E3A-8D27-48289BB3750D}] => (Block) C:\Program Files (x86)\Microsoft Office\root\Office16\XLICONS.EXE (Microsoft Corporation -> Microsoft Corporation) FirewallRules: [{1584622B-A8F2-4BD8-A6C3-16DAE0313553}] => (Block) C:\Program Files (x86)\Microsoft Office\root\Office16\XLICONS.EXE (Microsoft Corporation -> Microsoft Corporation) FirewallRules: [{2A005A31-CF96-41F6-B7C4-129B7CF13761}] => (Allow) C:\Program Files (x86)\Microsoft Office\root\Office16\outlook.exe (Microsoft Corporation -> Microsoft Corporation) FirewallRules: [{C41F5AC2-B7A9-42A8-9ABF-DE1DB6C1B5CF}] => (Allow) C:\Program Files (x86)\Microsoft Office\root\Office16\Lync.exe (Microsoft Corporation -> Microsoft Corporation) FirewallRules: [{0B868B7A-3741-4A33-B4E3-ADF3FB320C87}] => (Allow) C:\Program Files (x86)\Microsoft Office\root\Office16\Lync.exe (Microsoft Corporation -> Microsoft Corporation) FirewallRules: [{2E3D8F74-5B04-48CB-B3B1-20BEFF393EC1}] => (Allow) C:\Program Files (x86)\Microsoft Office\root\Office16\UcMapi.exe (Microsoft Corporation -> Microsoft Corporation) FirewallRules: [{E241E313-5567-4398-A72C-5BF77F3D07D2}] => (Allow) C:\Program Files (x86)\Microsoft Office\root\Office16\UcMapi.exe (Microsoft Corporation -> Microsoft Corporation) FirewallRules: [{AE6F92DC-B3AA-49DF-BAC4-B77BB78AE8BD}] => (Allow) LPort=7359 FirewallRules: [{F20CAEF3-8AB2-490C-B158-667465621AAF}] => (Allow) LPort=8096 FirewallRules: [{7ED11DAC-F7C2-42FB-A58F-1F2E5EEB2690}] => (Allow) LPort=8920 FirewallRules: [{73184806-7972-4DBE-84FF-82236E5B61CE}] => (Allow) C:\Users\alexa\AppData\Roaming\Emby-Server\system\EmbyServer.dll (Emby) [Arquivo não assinado] FirewallRules: [{A8DB7340-C414-4024-BE3A-02671977C707}] => (Allow) C:\Users\alexa\AppData\Roaming\Emby-Server\system\EmbyServer.dll (Emby) [Arquivo não assinado] FirewallRules: [{F33054FE-857C-4E0B-967C-004128F8F8C4}] => (Allow) C:\Users\alexa\AppData\Roaming\Emby-Server\system\EmbyServer.dll (Emby) [Arquivo não assinado] FirewallRules: [{74B3C162-6089-469C-9E23-2C952A904F69}] => (Allow) C:\Users\alexa\AppData\Roaming\Emby-Server\system\EmbyServer.dll (Emby) [Arquivo não assinado] FirewallRules: [TCP Query User{A278DC77-11CC-4CF9-8D5D-F1BE49AD1E66}C:\users\alexa\appdata\roaming\emby-server\system\embyserver.exe] => (Allow) C:\users\alexa\appdata\roaming\emby-server\system\embyserver.exe (EMBY LLC -> Emby) FirewallRules: [UDP Query User{5F964DBF-4467-4B79-8A32-D8038844F8FC}C:\users\alexa\appdata\roaming\emby-server\system\embyserver.exe] => (Allow) C:\users\alexa\appdata\roaming\emby-server\system\embyserver.exe (EMBY LLC -> Emby) FirewallRules: [{58A3F40F-0C80-4923-8471-33538B420592}] => (Allow) C:\Program Files\qBittorrent\qbittorrent.exe (The qBittorrent Project) [Arquivo não assinado] FirewallRules: [{69E65CE3-2EAD-43D4-BB8D-3464F0631E97}] => (Allow) C:\Program Files\qBittorrent\qbittorrent.exe (The qBittorrent Project) [Arquivo não assinado] FirewallRules: [{C82B8362-C256-4BE1-A6A0-A4B83E71569B}] => (Allow) C:\Program Files\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC) ==================== Pontos de Restauração ========================= 30-10-2021 06:52:07 Ponto de Verificação Agendado 08-11-2021 00:47:35 Ponto de Verificação Agendado 17-11-2021 04:01:38 Ponto de Verificação Agendado 21-11-2021 22:47:08 Instalador de Módulos do Windows ==================== Dispositivos Apresentando Falhas No Gerenciador ============ Name: Teclado Padrão PS/2 Description: Teclado Padrão PS/2 Class Guid: {4d36e96b-e325-11ce-bfc1-08002be10318} Manufacturer: (teclados padrões) Service: i8042prt Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24) Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed. Devices stay in this state if they have been prepared for removal. After you remove the device, this error disappears.Remove the device, and this error should be resolved. Name: Microsoft PS/2 Mouse Description: Microsoft PS/2 Mouse Class Guid: {4d36e96f-e325-11ce-bfc1-08002be10318} Manufacturer: Microsoft Service: i8042prt Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24) Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed. Devices stay in this state if they have been prepared for removal. After you remove the device, this error disappears.Remove the device, and this error should be resolved. ==================== Erros no Log de eventos: ======================== Erros em Aplicativos: ================== Error: (11/21/2021 10:14:04 PM) (Source: VSS) (EventID: 8193) (User: ) Description: Erro do serviço de cópias de sombra de volume: erro inesperado ao chamar a rotina QueryFullProcessImageNameW. hr = 0x8007001f, Um dispositivo conectado ao sistema não está funcionando. . Operação: Executando Operação Assíncrona Contexto: Estado Atual: DoSnapshotSet Error: (11/21/2021 10:13:55 PM) (Source: VSS) (EventID: 8194) (User: ) Description: Erro do Serviço de Cópias de Sombra de Volume: erro inesperado ao consultar a interface IVssWriterCallback. hr = 0x80070005, Acesso negado. . Muitas vezes, isso é causado por configurações de segurança incorretas no processo gravador ou solicitante. Operação: Obtendo Dados do Gravador Contexto: Id de Classe de Gravador: {e8132975-6f93-4464-a53e-1050253ae220} Nome do Gravador: System Writer ID de Instância de Gravador: {8c1b46e7-01cc-41b3-b943-efbd0c3382e4} Error: (11/17/2021 04:46:08 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Nome do aplicativo com falha: chrome_proxy.exe, versão: 96.0.4664.45, carimbo de data/hora: 0x618c663c Nome do módulo com falha: chrome_proxy.exe, versão: 96.0.4664.45, carimbo de data/hora: 0x618c663c Código de exceção: 0x80000003 Deslocamento da falha: 0x000000000001aec1 ID do processo com falha: 0x3948 Hora de início do aplicativo com falha: 0x01d7dbebc455a585 Caminho do aplicativo com falha: C:\Program Files\Google\Chrome\Application\chrome_proxy.exe Caminho do módulo com falha: C:\Program Files\Google\Chrome\Application\chrome_proxy.exe ID do Relatório: f8fe638f-1ddc-4c3f-8e5f-4e1007415fba Nome completo do pacote com falha: ID do aplicativo relativo ao pacote com falha: Error: (11/12/2021 11:50:21 PM) (Source: SideBySide) (EventID: 33) (User: ) Description: Falha na geração de contexto de ativação para "C:\Program Files\Adobe\Adobe Photoshop 2020\Required\Linguistics\\Providers\Plugins2\WRLiloPlugin.bundle\plugin.X.manifest". Assembly dependente comdll.X,type="win32",version="1.3.5.1" não pôde ser localizado. Use o arquivo sxstrace.exe para obter um diagnóstico detalhado. Error: (11/12/2021 11:50:21 PM) (Source: SideBySide) (EventID: 33) (User: ) Description: Falha na geração de contexto de ativação para "C:\Program Files\Adobe\Adobe Photoshop 2020\Required\Linguistics\\Providers\Plugins2\AdobeHunspellPlugin\plugin.X.manifest". Assembly dependente comdll.X,type="win64",version="14.0.0.24275" não pôde ser localizado. Use o arquivo sxstrace.exe para obter um diagnóstico detalhado. Error: (11/08/2021 11:32:28 PM) (Source: Application Hang) (EventID: 1002) (User: ) Description: O programa ts3client_win64.exe versão 3.5.6.0 parou de interagir com o Windows e foi fechado. Para ver se mais informações sobre o problema estão disponíveis, verifique o histórico de problemas no painel de controle Segurança e Manutenção. ID do Processo: 1a138 Hora de Início: 01d7d511dccd3fc5 Hora de Término: 4294967295 Caminho do Aplicativo: C:\Program Files\TeamSpeak 3 Client\ts3client_win64.exe ID do Relatório: ae551c59-9353-4072-afde-c8af05e91d76 Nome completo do pacote com falha: ID do aplicativo relativo ao pacote com falha: Tipo com falha: Top level window is idle Error: (10/12/2021 11:17:37 AM) (Source: Application Error) (EventID: 1000) (User: ) Description: Nome do aplicativo com falha: iCUE.exe, versão: 4.10.273.0, carimbo de data/hora: 0x60707cb1 Nome do módulo com falha: Qt5Gui.dll, versão: 5.15.2.0, carimbo de data/hora: 0x5fa4ddbb Código de exceção: 0xc0000005 Deslocamento da falha: 0x000000000004e192 ID do processo com falha: 0xa94 Hora de início do aplicativo com falha: 0x01d7ba52445563e7 Caminho do aplicativo com falha: C:\Program Files\Corsair\CORSAIR iCUE 4 Software\iCUE.exe Caminho do módulo com falha: C:\Program Files\Corsair\CORSAIR iCUE 4 Software\Qt5Gui.dll ID do Relatório: 7a5d6c6f-33cf-4672-8646-1e87db9e209b Nome completo do pacote com falha: ID do aplicativo relativo ao pacote com falha: Error: (09/23/2021 04:50:52 PM) (Source: SideBySide) (EventID: 35) (User: ) Description: Falha na geração de contexto de ativação para "C:\Program Files (x86)\Microsoft Office\root\Office16\lync.exe.Manifest". Erro no arquivo de manifesto ou de política C:\Program Files (x86)\Microsoft Office\root\Office16\UccApi.DLL", na linha 1. Identidade do componente localizado no manifesto não corresponde à identidade do componente solicitado. A referência é UccApi,processorArchitecture="AMD64",type="win32",version="16.0.0.0". A definição é UccApi,processorArchitecture="x86",type="win32",version="16.0.0.0". Use o arquivo sxstrace.exe para obter um dignóstico detalhado. Erros de Sistema: ============= Error: (11/21/2021 10:16:03 PM) (Source: Service Control Manager) (EventID: 7023) (User: ) Description: O serviço SysMain terminou com o erro: Parâmetro incorreto. Error: (11/21/2021 10:14:02 PM) (Source: Service Control Manager) (EventID: 7031) (User: ) Description: O serviço LGHUB Updater Service foi finalizado inesperadamente. Isto aconteceu 1 vez(es). A seguinte ação corretiva será tomada em 5000 milissegundos: Reiniciar o serviço. Error: (11/21/2021 10:14:02 PM) (Source: Service Control Manager) (EventID: 7031) (User: ) Description: O serviço Serviço Clique para Executar do Microsoft Office foi finalizado inesperadamente. Isto aconteceu 1 vez(es). A seguinte ação corretiva será tomada em 0 milissegundos: Reiniciar o serviço. Error: (11/21/2021 10:14:02 PM) (Source: Service Control Manager) (EventID: 7031) (User: ) Description: O serviço RaiDrive Filesystem Service foi finalizado inesperadamente. Isto aconteceu 1 vez(es). A seguinte ação corretiva será tomada em 60000 milissegundos: Reiniciar o serviço. Error: (11/21/2021 10:14:02 PM) (Source: Service Control Manager) (EventID: 7031) (User: ) Description: O serviço Corsair Service foi finalizado inesperadamente. Isto aconteceu 1 vez(es). A seguinte ação corretiva será tomada em 60000 milissegundos: Reiniciar o serviço. Error: (11/21/2021 10:14:02 PM) (Source: Service Control Manager) (EventID: 7031) (User: ) Description: O serviço Corsair MSI Plugin Service foi finalizado inesperadamente. Isto aconteceu 1 vez(es). A seguinte ação corretiva será tomada em 60000 milissegundos: Reiniciar o serviço. Error: (11/21/2021 10:14:02 PM) (Source: Service Control Manager) (EventID: 7031) (User: ) Description: O serviço Corsair LLA Service foi finalizado inesperadamente. Isto aconteceu 1 vez(es). A seguinte ação corretiva será tomada em 60000 milissegundos: Reiniciar o serviço. Error: (11/21/2021 10:14:02 PM) (Source: Service Control Manager) (EventID: 7031) (User: ) Description: O serviço NVIDIA Display Container LS foi finalizado inesperadamente. Isto aconteceu 1 vez(es). A seguinte ação corretiva será tomada em 6000 milissegundos: Reiniciar o serviço. Windows Defender: ================ Date: 2021-07-21 20:07:00 Description: O exame do Microsoft Defender Antivírus foi interrompido antes da conclusão. ID do Exame: {F8F1FB14-6E2E-4B33-B0AF-536B9558817C} Tipo de Exame: Antimalware Parâmetros do Exame: Verificação Rápida Usuário: AUTORIDADE NT\SISTEMA Date: 2021-07-21 19:47:48 Description: Microsoft Defender Antivírus detectou malware ou outro software potencialmente indesejado. Para obter mais informações, veja a seguir: https://go.microsoft.com/fwlink/?linkid=37020&name=Backdoor:Win32/Bladabindi!ml&threatid=2147748148&enterprise=0 Nome: Backdoor:Win32/Bladabindi!ml Gravidade: Grave Categoria: Backdoor Caminho: file:_C:\Users\alexa\Downloads\Air Explorer Pro 4.0.1 Multilingual\Crack\AirExplorerCmd.exe Origem da Detecção: Computador local Tipo da Detecção: FastPath Fonte da Detecção: Proteção em Tempo Real Usuário: DESKTOP-USL7V84\Alexandre Nome do Processo: C:\Windows\explorer.exe Versão da Inteligência de Segurança: AV: 1.343.1390.0, AS: 1.343.1390.0, NIS: 1.343.1390.0 Versão do Mecanismo: AM: 1.1.18300.4, NIS: 1.1.18300.4 Date: 2021-07-21 19:47:44 Description: Microsoft Defender Antivírus detectou malware ou outro software potencialmente indesejado. Para obter mais informações, veja a seguir: https://go.microsoft.com/fwlink/?linkid=37020&name=Backdoor:Win32/Bladabindi!ml&threatid=2147748148&enterprise=0 Nome: Backdoor:Win32/Bladabindi!ml Gravidade: Grave Categoria: Backdoor Caminho: file:_C:\Users\alexa\Downloads\Air Explorer Pro 4.0.1 Multilingual\Crack\AirExplorerCmd.exe Origem da Detecção: Computador local Tipo da Detecção: FastPath Fonte da Detecção: Proteção em Tempo Real Usuário: DESKTOP-USL7V84\Alexandre Nome do Processo: C:\Windows\explorer.exe Versão da Inteligência de Segurança: AV: 1.343.1390.0, AS: 1.343.1390.0, NIS: 1.343.1390.0 Versão do Mecanismo: AM: 1.1.18300.4, NIS: 1.1.18300.4 Date: 2021-07-21 19:47:31 Description: Microsoft Defender Antivírus detectou malware ou outro software potencialmente indesejado. Para obter mais informações, veja a seguir: https://go.microsoft.com/fwlink/?linkid=37020&name=Backdoor:Win32/Bladabindi!ml&threatid=2147748148&enterprise=0 Nome: Backdoor:Win32/Bladabindi!ml Gravidade: Grave Categoria: Backdoor Caminho: file:_C:\Users\alexa\Downloads\Air Explorer Pro 4.0.1 Multilingual\Crack\AirExplorerCmd.exe Origem da Detecção: Computador local Tipo da Detecção: FastPath Fonte da Detecção: Proteção em Tempo Real Usuário: DESKTOP-USL7V84\Alexandre Nome do Processo: C:\Program Files\qBittorrent\qbittorrent.exe Versão da Inteligência de Segurança: AV: 1.343.1390.0, AS: 1.343.1390.0, NIS: 1.343.1390.0 Versão do Mecanismo: AM: 1.1.18300.4, NIS: 1.1.18300.4 Date: 2021-07-21 19:29:47 Description: Microsoft Defender Antivírus detectou malware ou outro software potencialmente indesejado. Para obter mais informações, veja a seguir: https://go.microsoft.com/fwlink/?linkid=37020&name=Backdoor:Win32/Bladabindi!ml&threatid=2147748148&enterprise=0 Nome: Backdoor:Win32/Bladabindi!ml Gravidade: Grave Categoria: Backdoor Caminho: file:_C:\Program Files\AirExplorer\AirExplorerCmd.exe Origem da Detecção: Computador local Tipo da Detecção: FastPath Fonte da Detecção: Proteção em Tempo Real Usuário: DESKTOP-USL7V84\Alexandre Nome do Processo: C:\Windows\explorer.exe Versão da Inteligência de Segurança: AV: 1.343.1390.0, AS: 1.343.1390.0, NIS: 1.343.1390.0 Versão do Mecanismo: AM: 1.1.18300.4, NIS: 1.1.18300.4 Event[0]: Date: 2021-07-13 19:37:43 Description: Microsoft Defender Antivírus encontrou um erro ao tentar atualizar a inteligência de segurança. Nova Versão da Inteligência de Segurança: Versão da Inteligência de Segurança anterior: 1.335.1735.0 Fonte da Atualização: Centro de Proteção contra Malware da Microsoft Tipo da Inteligência de Segurança: Antivírus Tipo da atualização: Completa Usuário: AUTORIDADE NT\SISTEMA Versão Atual do Mecanismo: Versão Anterior do Mecanismo: 1.1.18000.5 Código de Erro: 0x80090305 Descrição do Erro: O pacote de segurança necessário não existe Date: 2021-07-13 19:37:43 Description: Microsoft Defender Antivírus encontrou um erro ao tentar atualizar a inteligência de segurança. Nova Versão da Inteligência de Segurança: Versão da Inteligência de Segurança anterior: 1.335.1735.0 Fonte da Atualização: Centro de Proteção contra Malware da Microsoft Tipo da Inteligência de Segurança: Anti-spyware Tipo da atualização: Completa Usuário: AUTORIDADE NT\SISTEMA Versão Atual do Mecanismo: Versão Anterior do Mecanismo: 1.1.18000.5 Código de Erro: 0x80090305 Descrição do Erro: O pacote de segurança necessário não existe Date: 2021-07-13 19:37:43 Description: Microsoft Defender Antivírus encontrou um erro ao tentar atualizar a inteligência de segurança. Nova Versão da Inteligência de Segurança: Versão da Inteligência de Segurança anterior: 1.335.1735.0 Fonte da Atualização: Centro de Proteção contra Malware da Microsoft Tipo da Inteligência de Segurança: Antivírus Tipo da atualização: Completa Usuário: AUTORIDADE NT\SISTEMA Versão Atual do Mecanismo: Versão Anterior do Mecanismo: 1.1.18000.5 Código de Erro: 0x80090305 Descrição do Erro: O pacote de segurança necessário não existe Date: 2021-07-13 19:37:43 Description: Microsoft Defender Antivírus encontrou um erro ao tentar atualizar a inteligência de segurança. Nova Versão da Inteligência de Segurança: Versão da Inteligência de Segurança anterior: 1.335.1735.0 Fonte da Atualização: Centro de Proteção contra Malware da Microsoft Tipo da Inteligência de Segurança: Antivírus Tipo da atualização: Completa Usuário: AUTORIDADE NT\SISTEMA Versão Atual do Mecanismo: Versão Anterior do Mecanismo: 1.1.18000.5 Código de Erro: 0x80090305 Descrição do Erro: O pacote de segurança necessário não existe Date: 2021-07-13 19:37:43 Description: Microsoft Defender Antivírus encontrou um erro ao tentar atualizar a inteligência de segurança. Nova Versão da Inteligência de Segurança: Versão da Inteligência de Segurança anterior: 1.335.1735.0 Fonte da Atualização: Centro de Proteção contra Malware da Microsoft Tipo da Inteligência de Segurança: Anti-spyware Tipo da atualização: Completa Usuário: AUTORIDADE NT\SISTEMA Versão Atual do Mecanismo: Versão Anterior do Mecanismo: 1.1.18000.5 Código de Erro: 0x80090305 Descrição do Erro: O pacote de segurança necessário não existe ==================== Informações da Memória =========================== BIOS: American Megatrends Inc. 5.11 08/17/2020 placa-mãe: HUANANZHI X99-TF Processador: Intel(R) Xeon(R) CPU E5-2678 v3 @ 2.50GHz Percentagem de memória em uso: 7% RAM física total: 65438.47 MB RAM física disponível: 60574.71 MB Virtual Total: 75166.47 MB Virtual disponível: 68854.62 MB ==================== Drives ================================ Drive c: () (Fixed) (Total:953.26 GB) (Free:428.79 GB) NTFS Drive y: (SpradaTrader1) (Network) (Total:8589934592 GB) (Free:8589934592 GB) NTFS Drive z: (Sprada) (Network) (Total:8589934592 GB) (Free:8589934592 GB) NTFS \\?\Volume{44ba0de7-3f6f-447c-9cac-856abdf494f4}\ () (Fixed) (Total:0.5 GB) (Free:0.08 GB) NTFS \\?\Volume{676dddb8-48af-45f2-8932-dd4bf2309609}\ () (Fixed) (Total:0.09 GB) (Free:0.07 GB) FAT32 \\?\Volume{e89e073f-e9b3-11eb-9f5d-0ae0afd4000e}\ (Sprada) (Removable) (Total:8589934592 GB) (Free:8589934592 GB) NTFS \\?\Volume{9af8b445-0908-11ec-9f7b-0ae0afd4000e}\ (SpradaTrader1) (Removable) (Total:8589934592 GB) (Free:8589934592 GB) NTFS ==================== MBR & Tabela de Partições ==================== ========================================================== Disk: 0 (Protective MBR) (Size: 953.9 GB) (Disk ID: 00000000) Partition: GPT. ==================== Fim de Addition.txt =======================