Resultado da Correção pela Farbar Recovery Scan Tool (x64) Versão: 15-08-2022 02 Executado por OS PVTS (15-08-2022 13:28:03) Run:1 Executando a partir de D:\OneDrive\Área de Trabalho Perfis Carregados: OS PVTS Modo da Inicialização: Normal ============================================== fixlist Conteúdo: ***************** Start:: SystemRestore: On CreateRestorePoint: CloseProcesses: HKLM\SOFTWARE\Microsoft\Windows Defender: [DisableAntiSpyware] Restrição <==== ATENÇÃO HKLM\SOFTWARE\Microsoft\Windows Defender: [DisableAntiVirus] Restrição <==== ATENÇÃO HKU\S-1-5-21-2991122402-1895833276-4253020033-1001\...\Run: [PlanetVPN] => D:\Program Files\PlanetVPN\PlanetVPN.exe (Nenhum Arquivo) Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\SPDriverInstall.lnk [2022-07-26] ShortcutTarget: SPDriverInstall.lnk -> D:\Program Files\MediaTek\SP Driver\SPDriverInstall (Nenhum Arquivo) GroupPolicy: Restrição ? <==== ATENÇÃO Policies: C:\ProgramData\NTUSER.pol: Restrição <==== ATENÇÃO Task: {6DF1B5E4-6EB2-4F51-8CF2-BF6D813B32EB} - System32\Tasks\update-sys => C:\Program Files (x86)\Skillbrains\Updater\Updater.exe -runmode=checkupdate (Nenhum Arquivo) Task: {9DF462FA-763A-4FC5-B9F4-7A55F9C3F05B} - System32\Tasks\Opera scheduled Autoupdate 1614742641 => C:\Users\OS PVTS\AppData\Local\Programs\Opera\launcher.exe --scheduledautoupdate $(Arg0) (Nenhum Arquivo) S3 BraveElevationService; "C:\Program Files\BraveSoftware\Brave-Browser\Application\104.1.42.88\elevation_service.exe" [X] S4 Red Giant Service; C:\Program Files\Red Giant\Services\Red Giant Service.exe [X] S1 grzpmsdm; \??\C:\Windows\system32\drivers\grzpmsdm.sys [X] S1 ihajnoke; \??\C:\Windows\system32\drivers\ihajnoke.sys [X] CustomCLSID: HKU\S-1-5-21-2991122402-1895833276-4253020033-1001_Classes\CLSID\{66d7c868-b22d-c2f9-ef63-90654392c6da}\localserver32 -> "D:\Voicemod Desktop\VoicemodDesktop.exe" -ToastActivated => Nenhum Arquivo FirewallRules: [TCP Query User{86A53E8F-FFE3-4178-B4C8-CEFD3A651BB1}C:\users\os pvts\appdata\roaming\utorrent\updates\3.5.5_46038.exe] => (Allow) C:\users\os pvts\appdata\roaming\utorrent\updates\3.5.5_46038.exe => Nenhum Arquivo FirewallRules: [UDP Query User{A70C178E-F70C-4B41-91B5-201C68996CB0}C:\users\os pvts\appdata\roaming\utorrent\updates\3.5.5_46038.exe] => (Allow) C:\users\os pvts\appdata\roaming\utorrent\updates\3.5.5_46038.exe => Nenhum Arquivo FirewallRules: [TCP Query User{194A59DE-22DD-4C29-9C7E-3C7ED0CEAA03}D:\games\mortal kombat 11\binaries\retail\mk11.exe] => (Block) D:\games\mortal kombat 11\binaries\retail\mk11.exe => Nenhum Arquivo FirewallRules: [UDP Query User{92E38726-F9ED-4599-A39B-70C8E2AE86D9}D:\games\mortal kombat 11\binaries\retail\mk11.exe] => (Block) D:\games\mortal kombat 11\binaries\retail\mk11.exe => Nenhum Arquivo FirewallRules: [{7A13787C-F6EF-4DA7-82C9-48427ADBEC85}] => (Allow) C:\Users\OS PVTS\AppData\Roaming\Zoom\bin\Zoom.exe => Nenhum Arquivo FirewallRules: [TCP Query User{A3793E76-CCCA-4682-99BB-1544D41A3AB3}D:\games\mortal kombat 11\binaries\retail\mk11.exe] => (Block) D:\games\mortal kombat 11\binaries\retail\mk11.exe => Nenhum Arquivo FirewallRules: [UDP Query User{23E15799-D164-4574-9A4F-1B60442DF3CD}D:\games\mortal kombat 11\binaries\retail\mk11.exe] => (Block) D:\games\mortal kombat 11\binaries\retail\mk11.exe => Nenhum Arquivo FirewallRules: [TCP Query User{B72B2776-4432-4E20-A402-37225C49B38D}D:\program files (x86)\ubisoft\ubisoft game launcher\games\far cry 3\bin\farcry3.exe] => (Allow) D:\program files (x86)\ubisoft\ubisoft game launcher\games\far cry 3\bin\farcry3.exe => Nenhum Arquivo FirewallRules: [UDP Query User{4B73CB5D-2280-41D1-BEB6-BD9D63929219}D:\program files (x86)\ubisoft\ubisoft game launcher\games\far cry 3\bin\farcry3.exe] => (Allow) D:\program files (x86)\ubisoft\ubisoft game launcher\games\far cry 3\bin\farcry3.exe => Nenhum Arquivo FirewallRules: [{3AABBB73-93AD-499F-8E1F-13D1E8A9B7FB}] => (Block) D:\program files (x86)\ubisoft\ubisoft game launcher\games\far cry 3\bin\farcry3.exe => Nenhum Arquivo FirewallRules: [{356E5981-45F9-4C89-A01C-9CA0211F7356}] => (Block) D:\program files (x86)\ubisoft\ubisoft game launcher\games\far cry 3\bin\farcry3.exe => Nenhum Arquivo FirewallRules: [TCP Query User{67D6AAF4-5F76-4BBD-8B2E-CB4525472D4B}D:\program files (x86)\ubisoft\ubisoft game launcher\games\far cry 3\bin\farcry3_d3d11.exe] => (Allow) D:\program files (x86)\ubisoft\ubisoft game launcher\games\far cry 3\bin\farcry3_d3d11.exe => Nenhum Arquivo FirewallRules: [UDP Query User{3903ABD1-01F3-4BBD-B3E0-E95FF68E9716}D:\program files (x86)\ubisoft\ubisoft game launcher\games\far cry 3\bin\farcry3_d3d11.exe] => (Allow) D:\program files (x86)\ubisoft\ubisoft game launcher\games\far cry 3\bin\farcry3_d3d11.exe => Nenhum Arquivo FirewallRules: [{D74C8A24-B20B-4ABC-AFBE-8E1B33C0D612}] => (Block) D:\program files (x86)\ubisoft\ubisoft game launcher\games\far cry 3\bin\farcry3_d3d11.exe => Nenhum Arquivo FirewallRules: [{CC84E4FC-14C5-4615-B159-E79C0890CE05}] => (Block) D:\program files (x86)\ubisoft\ubisoft game launcher\games\far cry 3\bin\farcry3_d3d11.exe => Nenhum Arquivo FirewallRules: [TCP Query User{9DF33719-FDAB-448E-BE04-0A7471B0CA15}D:\program files\Steam\steamapps\common\rogue company\roguecompany\binaries\win64\roguecompany.exe] => (Allow) D:\program files\Steam\steamapps\common\rogue company\roguecompany\binaries\win64\roguecompany.exe => Nenhum Arquivo FirewallRules: [UDP Query User{67888DA7-A3F7-48CA-B2EE-D778488AC621}D:\program files\Steam\steamapps\common\rogue company\roguecompany\binaries\win64\roguecompany.exe] => (Allow) D:\program files\Steam\steamapps\common\rogue company\roguecompany\binaries\win64\roguecompany.exe => Nenhum Arquivo FirewallRules: [TCP Query User{B91AD807-70F8-4DC7-A6FD-91B828EEF094}D:\games\battlefield 4\bf4.exe] => (Allow) D:\games\battlefield 4\bf4.exe => Nenhum Arquivo FirewallRules: [UDP Query User{C390867F-3B9B-493E-A1C5-0E886349B6C0}D:\games\battlefield 4\bf4.exe] => (Allow) D:\games\battlefield 4\bf4.exe => Nenhum Arquivo FirewallRules: [{6FAC47FB-F58E-4093-86E7-6FE317BDE9B4}] => (Block) D:\games\battlefield 4\bf4.exe => Nenhum Arquivo FirewallRules: [{EA5544FB-D450-4F41-BB87-F30952892264}] => (Block) D:\games\battlefield 4\bf4.exe => Nenhum Arquivo FirewallRules: [TCP Query User{3DB81B27-2E41-4123-BF81-137B35529F28}D:\program files\Steam\steamapps\common\paladins\binaries\win64\paladins.exe] => (Allow) D:\program files\Steam\steamapps\common\paladins\binaries\win64\paladins.exe => Nenhum Arquivo FirewallRules: [UDP Query User{0D0660C8-0B24-4C11-99E8-2A984D9F858C}D:\program files\Steam\steamapps\common\paladins\binaries\win64\paladins.exe] => (Allow) D:\program files\Steam\steamapps\common\paladins\binaries\win64\paladins.exe => Nenhum Arquivo FirewallRules: [TCP Query User{92E56120-3A09-41B2-9F8A-5AC73C88DD05}C:\users\os pvts\appdata\local\discord\app-1.0.9004\discord.exe] => (Allow) C:\users\os pvts\appdata\local\discord\app-1.0.9004\discord.exe => Nenhum Arquivo FirewallRules: [UDP Query User{DF5A89D6-BE38-4AE9-AC1E-71798E8EF04A}C:\users\os pvts\appdata\local\discord\app-1.0.9004\discord.exe] => (Allow) C:\users\os pvts\appdata\local\discord\app-1.0.9004\discord.exe => Nenhum Arquivo FirewallRules: [TCP Query User{8AE61438-8CDF-406F-8C41-73814788F4F3}D:\program files\Steam\steamapps\common\pubg\tslgame\binaries\win64\tslgame.exe] => (Allow) D:\program files\Steam\steamapps\common\pubg\tslgame\binaries\win64\tslgame.exe => Nenhum Arquivo FirewallRules: [UDP Query User{215AB180-EEF4-452D-A9AE-8E581890D710}D:\program files\Steam\steamapps\common\pubg\tslgame\binaries\win64\tslgame.exe] => (Allow) D:\program files\Steam\steamapps\common\pubg\tslgame\binaries\win64\tslgame.exe => Nenhum Arquivo FirewallRules: [{4891C4F4-23BE-4ED4-91A3-B47137058AEB}] => (Block) D:\program files\Steam\steamapps\common\pubg\tslgame\binaries\win64\tslgame.exe => Nenhum Arquivo FirewallRules: [{CC8846F9-8392-494C-BD5F-EBD9402AF359}] => (Block) D:\program files\Steam\steamapps\common\pubg\tslgame\binaries\win64\tslgame.exe => Nenhum Arquivo FirewallRules: [TCP Query User{94B6EA08-A27D-4EC6-B12C-9A4E21247597}D:\program files\Steam\steamapps\common\cry of fear\cof.exe] => (Allow) D:\program files\Steam\steamapps\common\cry of fear\cof.exe => Nenhum Arquivo FirewallRules: [UDP Query User{3594A457-96E1-4AFA-A109-64E79458792F}D:\program files\Steam\steamapps\common\cry of fear\cof.exe] => (Allow) D:\program files\Steam\steamapps\common\cry of fear\cof.exe => Nenhum Arquivo FirewallRules: [{AC710C25-395D-4CDC-B020-3B2345C6C54F}] => (Block) D:\program files\Steam\steamapps\common\cry of fear\cof.exe => Nenhum Arquivo FirewallRules: [{7D966D05-FDD4-475F-A5EC-9FD4057FDE25}] => (Block) D:\program files\Steam\steamapps\common\cry of fear\cof.exe => Nenhum Arquivo FirewallRules: [TCP Query User{54DA5DBE-F4DE-4C47-87A9-42EA2F7FCC7B}C:\users\os pvts\appdata\local\discord\app-1.0.9005\discord.exe] => (Allow) C:\users\os pvts\appdata\local\discord\app-1.0.9005\discord.exe => Nenhum Arquivo FirewallRules: [UDP Query User{4918912A-686A-4557-9E41-E35406903E95}C:\users\os pvts\appdata\local\discord\app-1.0.9005\discord.exe] => (Allow) C:\users\os pvts\appdata\local\discord\app-1.0.9005\discord.exe => Nenhum Arquivo FirewallRules: [{45B8B4F8-5436-4070-8545-8A0BF9F36AB2}] => (Block) C:\users\os pvts\appdata\local\discord\app-1.0.9005\discord.exe => Nenhum Arquivo FirewallRules: [{73C61D99-793A-43E5-80B1-406E2E713DA9}] => (Block) C:\users\os pvts\appdata\local\discord\app-1.0.9005\discord.exe => Nenhum Arquivo FirewallRules: [TCP Query User{5BDECBDE-F44D-414B-ABA0-D6B33B5DB76E}D:\xboxgames\motogp20 - microsoft store\content\motogp20\binaries\wingdk\motogp20-wingdk-shipping.exe] => (Allow) D:\xboxgames\motogp20 - microsoft store\content\motogp20\binaries\wingdk\motogp20-wingdk-shipping.exe => Nenhum Arquivo FirewallRules: [UDP Query User{733516D8-3982-4256-A1A0-FFB8065819D1}D:\xboxgames\motogp20 - microsoft store\content\motogp20\binaries\wingdk\motogp20-wingdk-shipping.exe] => (Allow) D:\xboxgames\motogp20 - microsoft store\content\motogp20\binaries\wingdk\motogp20-wingdk-shipping.exe => Nenhum Arquivo FirewallRules: [{74BEE839-3EF2-448D-AA81-7A1DFCBF9DF3}] => (Block) D:\xboxgames\motogp20 - microsoft store\content\motogp20\binaries\wingdk\motogp20-wingdk-shipping.exe => Nenhum Arquivo FirewallRules: [{3F1AD8E4-8EB5-424A-8CB8-73916D782AA0}] => (Block) D:\xboxgames\motogp20 - microsoft store\content\motogp20\binaries\wingdk\motogp20-wingdk-shipping.exe => Nenhum Arquivo FirewallRules: [TCP Query User{EE318F81-11D1-41F4-A397-9ADEE5603B40}D:\xboxgames\dragon ball fighterz\content\red\binaries\win64\dragon_ball_fighterz.exe] => (Allow) D:\xboxgames\dragon ball fighterz\content\red\binaries\win64\dragon_ball_fighterz.exe => Nenhum Arquivo FirewallRules: [UDP Query User{416C906C-BA60-47B5-BAE9-B9E4A9887269}D:\xboxgames\dragon ball fighterz\content\red\binaries\win64\dragon_ball_fighterz.exe] => (Allow) D:\xboxgames\dragon ball fighterz\content\red\binaries\win64\dragon_ball_fighterz.exe => Nenhum Arquivo FirewallRules: [TCP Query User{57190724-4B10-48D9-AE9D-FC4D83CE1655}D:\xboxgames\dragon ball fighterz\content\red\binaries\win64\dragon_ball_fighterz.exe] => (Block) D:\xboxgames\dragon ball fighterz\content\red\binaries\win64\dragon_ball_fighterz.exe => Nenhum Arquivo FirewallRules: [UDP Query User{B3478001-A3FA-4304-AB76-A1C3F2600411}D:\xboxgames\dragon ball fighterz\content\red\binaries\win64\dragon_ball_fighterz.exe] => (Block) D:\xboxgames\dragon ball fighterz\content\red\binaries\win64\dragon_ball_fighterz.exe => Nenhum Arquivo FirewallRules: [TCP Query User{76FBD9C1-ED22-4465-AC6D-4C416D55EE70}D:\xboxgames\world war z\content\wwzretail.exe] => (Block) D:\xboxgames\world war z\content\wwzretail.exe => Nenhum Arquivo FirewallRules: [UDP Query User{4AA99BBF-AF78-4A3B-A1D3-E102C3E581AB}D:\xboxgames\world war z\content\wwzretail.exe] => (Block) D:\xboxgames\world war z\content\wwzretail.exe => Nenhum Arquivo FirewallRules: [{BB64B8F2-628B-4339-ABBC-89B12BB99E50}] => (Allow) C:\Program Files\Voicemod Desktop\VoicemodDesktop.exe => Nenhum Arquivo FirewallRules: [{DE5E109A-B7F4-4200-B095-AA89F8B1094F}] => (Allow) D:\Voicemod Desktop\VoicemodDesktop.exe => Nenhum Arquivo Folder: C:\ProgramData\WnHqYU0nH4 CMD: ipconfig /flushdns CMD: netsh winsock reset catalog CMD: netsh advfirewall reset CMD: netsh advfirewall set allprofiles state ON CMD: netsh winhttp reset proxy CMD: Bitsadmin /Reset /Allusers CMD: Winmgmt /salvagerepository CMD: Winmgmt /resetrepository CMD: winmgmt /resyncperf CMD: "%WINDIR%\SYSTEM32\lodctr.exe" /R CMD: "%WINDIR%\SysWOW64\lodctr.exe" /R CMD: "%WINDIR%\SYSTEM32\lodctr.exe" /R CMD: "%WINDIR%\SysWOW64\lodctr.exe" /R C:\WINDOWS\SysWOW64\*.tmp C:\WINDOWS\System32\*.tmp C:\Windows\SystemTemp\*.tmp EmptyTemp: End:: ***************** SystemRestore: On => Erro -> 9% Ponto de Restauração criado com sucesso. Processos fechados com sucesso. HKLM\SOFTWARE\Microsoft\Windows Defender\\"DisableAntiSpyware"="0" => valor restaurado com sucesso HKLM\SOFTWARE\Microsoft\Windows Defender\\"DisableAntiVirus"="0" => valor restaurado com sucesso "HKU\S-1-5-21-2991122402-1895833276-4253020033-1001\Software\Microsoft\Windows\CurrentVersion\Run\\PlanetVPN" => removido (a) com sucesso. C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\SPDriverInstall.lnk => movido com sucesso "D:\Program Files\MediaTek\SP Driver\SPDriverInstall" => não encontrado (a) C:\Windows\system32\GroupPolicy\Machine => movido com sucesso C:\Windows\system32\GroupPolicy\GPT.ini => movido com sucesso C:\Windows\SysWOW64\GroupPolicy\GPT.ini => movido com sucesso C:\ProgramData\NTUSER.pol => movido com sucesso "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{6DF1B5E4-6EB2-4F51-8CF2-BF6D813B32EB}" => removido (a) com sucesso. "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{6DF1B5E4-6EB2-4F51-8CF2-BF6D813B32EB}" => removido (a) com sucesso. C:\Windows\System32\Tasks\update-sys => movido com sucesso "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\update-sys" => removido (a) com sucesso. "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{9DF462FA-763A-4FC5-B9F4-7A55F9C3F05B}" => removido (a) com sucesso. "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{9DF462FA-763A-4FC5-B9F4-7A55F9C3F05B}" => removido (a) com sucesso. C:\Windows\System32\Tasks\Opera scheduled Autoupdate 1614742641 => movido com sucesso "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Opera scheduled Autoupdate 1614742641" => removido (a) com sucesso. HKLM\System\CurrentControlSet\Services\BraveElevationService => removido (a) com sucesso. BraveElevationService => o serviço removido (a) com sucesso. HKLM\System\CurrentControlSet\Services\Red Giant Service => removido (a) com sucesso. Red Giant Service => o serviço removido (a) com sucesso. HKLM\System\CurrentControlSet\Services\grzpmsdm => removido (a) com sucesso. grzpmsdm => o serviço removido (a) com sucesso. HKLM\System\CurrentControlSet\Services\ihajnoke => removido (a) com sucesso. ihajnoke => o serviço removido (a) com sucesso. HKU\S-1-5-21-2991122402-1895833276-4253020033-1001_Classes\CLSID\{66d7c868-b22d-c2f9-ef63-90654392c6da} => removido (a) com sucesso. "HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{86A53E8F-FFE3-4178-B4C8-CEFD3A651BB1}C:\users\os pvts\appdata\roaming\utorrent\updates\3.5.5_46038.exe" => removido (a) com sucesso. "HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{A70C178E-F70C-4B41-91B5-201C68996CB0}C:\users\os pvts\appdata\roaming\utorrent\updates\3.5.5_46038.exe" => removido (a) com sucesso. "HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{194A59DE-22DD-4C29-9C7E-3C7ED0CEAA03}D:\games\mortal kombat 11\binaries\retail\mk11.exe" => removido (a) com sucesso. "HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{92E38726-F9ED-4599-A39B-70C8E2AE86D9}D:\games\mortal kombat 11\binaries\retail\mk11.exe" => removido (a) com sucesso. "HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{7A13787C-F6EF-4DA7-82C9-48427ADBEC85}" => removido (a) com sucesso. "HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{A3793E76-CCCA-4682-99BB-1544D41A3AB3}D:\games\mortal kombat 11\binaries\retail\mk11.exe" => removido (a) com sucesso. "HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{23E15799-D164-4574-9A4F-1B60442DF3CD}D:\games\mortal kombat 11\binaries\retail\mk11.exe" => removido (a) com sucesso. "HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{B72B2776-4432-4E20-A402-37225C49B38D}D:\program files (x86)\ubisoft\ubisoft game launcher\games\far cry 3\bin\farcry3.exe" => removido (a) com sucesso. "HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{4B73CB5D-2280-41D1-BEB6-BD9D63929219}D:\program files (x86)\ubisoft\ubisoft game launcher\games\far cry 3\bin\farcry3.exe" => removido (a) com sucesso. "HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{3AABBB73-93AD-499F-8E1F-13D1E8A9B7FB}" => removido (a) com sucesso. "HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{356E5981-45F9-4C89-A01C-9CA0211F7356}" => removido (a) com sucesso. "HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{67D6AAF4-5F76-4BBD-8B2E-CB4525472D4B}D:\program files (x86)\ubisoft\ubisoft game launcher\games\far cry 3\bin\farcry3_d3d11.exe" => removido (a) com sucesso. "HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{3903ABD1-01F3-4BBD-B3E0-E95FF68E9716}D:\program files (x86)\ubisoft\ubisoft game launcher\games\far cry 3\bin\farcry3_d3d11.exe" => removido (a) com sucesso. "HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{D74C8A24-B20B-4ABC-AFBE-8E1B33C0D612}" => removido (a) com sucesso. "HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{CC84E4FC-14C5-4615-B159-E79C0890CE05}" => removido (a) com sucesso. "HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{9DF33719-FDAB-448E-BE04-0A7471B0CA15}D:\program files\Steam\steamapps\common\rogue company\roguecompany\binaries\win64\roguecompany.exe" => removido (a) com sucesso. "HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{67888DA7-A3F7-48CA-B2EE-D778488AC621}D:\program files\Steam\steamapps\common\rogue company\roguecompany\binaries\win64\roguecompany.exe" => removido (a) com sucesso. "HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{B91AD807-70F8-4DC7-A6FD-91B828EEF094}D:\games\battlefield 4\bf4.exe" => removido (a) com sucesso. "HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{C390867F-3B9B-493E-A1C5-0E886349B6C0}D:\games\battlefield 4\bf4.exe" => removido (a) com sucesso. "HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{6FAC47FB-F58E-4093-86E7-6FE317BDE9B4}" => removido (a) com sucesso. "HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{EA5544FB-D450-4F41-BB87-F30952892264}" => removido (a) com sucesso. "HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{3DB81B27-2E41-4123-BF81-137B35529F28}D:\program files\Steam\steamapps\common\paladins\binaries\win64\paladins.exe" => removido (a) com sucesso. "HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{0D0660C8-0B24-4C11-99E8-2A984D9F858C}D:\program files\Steam\steamapps\common\paladins\binaries\win64\paladins.exe" => removido (a) com sucesso. "HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{92E56120-3A09-41B2-9F8A-5AC73C88DD05}C:\users\os pvts\appdata\local\discord\app-1.0.9004\discord.exe" => removido (a) com sucesso. "HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{DF5A89D6-BE38-4AE9-AC1E-71798E8EF04A}C:\users\os pvts\appdata\local\discord\app-1.0.9004\discord.exe" => removido (a) com sucesso. "HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{8AE61438-8CDF-406F-8C41-73814788F4F3}D:\program files\Steam\steamapps\common\pubg\tslgame\binaries\win64\tslgame.exe" => removido (a) com sucesso. "HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{215AB180-EEF4-452D-A9AE-8E581890D710}D:\program files\Steam\steamapps\common\pubg\tslgame\binaries\win64\tslgame.exe" => removido (a) com sucesso. "HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{4891C4F4-23BE-4ED4-91A3-B47137058AEB}" => removido (a) com sucesso. "HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{CC8846F9-8392-494C-BD5F-EBD9402AF359}" => removido (a) com sucesso. "HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{94B6EA08-A27D-4EC6-B12C-9A4E21247597}D:\program files\Steam\steamapps\common\cry of fear\cof.exe" => removido (a) com sucesso. "HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{3594A457-96E1-4AFA-A109-64E79458792F}D:\program files\Steam\steamapps\common\cry of fear\cof.exe" => removido (a) com sucesso. "HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{AC710C25-395D-4CDC-B020-3B2345C6C54F}" => removido (a) com sucesso. "HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{7D966D05-FDD4-475F-A5EC-9FD4057FDE25}" => removido (a) com sucesso. "HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{54DA5DBE-F4DE-4C47-87A9-42EA2F7FCC7B}C:\users\os pvts\appdata\local\discord\app-1.0.9005\discord.exe" => removido (a) com sucesso. "HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{4918912A-686A-4557-9E41-E35406903E95}C:\users\os pvts\appdata\local\discord\app-1.0.9005\discord.exe" => removido (a) com sucesso. "HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{45B8B4F8-5436-4070-8545-8A0BF9F36AB2}" => removido (a) com sucesso. "HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{73C61D99-793A-43E5-80B1-406E2E713DA9}" => removido (a) com sucesso. "HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{5BDECBDE-F44D-414B-ABA0-D6B33B5DB76E}D:\xboxgames\motogp20 - microsoft store\content\motogp20\binaries\wingdk\motogp20-wingdk-shipping.exe" => removido (a) com sucesso. "HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{733516D8-3982-4256-A1A0-FFB8065819D1}D:\xboxgames\motogp20 - microsoft store\content\motogp20\binaries\wingdk\motogp20-wingdk-shipping.exe" => removido (a) com sucesso. "HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{74BEE839-3EF2-448D-AA81-7A1DFCBF9DF3}" => removido (a) com sucesso. "HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{3F1AD8E4-8EB5-424A-8CB8-73916D782AA0}" => removido (a) com sucesso. "HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{EE318F81-11D1-41F4-A397-9ADEE5603B40}D:\xboxgames\dragon ball fighterz\content\red\binaries\win64\dragon_ball_fighterz.exe" => removido (a) com sucesso. "HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{416C906C-BA60-47B5-BAE9-B9E4A9887269}D:\xboxgames\dragon ball fighterz\content\red\binaries\win64\dragon_ball_fighterz.exe" => removido (a) com sucesso. "HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{57190724-4B10-48D9-AE9D-FC4D83CE1655}D:\xboxgames\dragon ball fighterz\content\red\binaries\win64\dragon_ball_fighterz.exe" => removido (a) com sucesso. "HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{B3478001-A3FA-4304-AB76-A1C3F2600411}D:\xboxgames\dragon ball fighterz\content\red\binaries\win64\dragon_ball_fighterz.exe" => removido (a) com sucesso. "HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{76FBD9C1-ED22-4465-AC6D-4C416D55EE70}D:\xboxgames\world war z\content\wwzretail.exe" => removido (a) com sucesso. "HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{4AA99BBF-AF78-4A3B-A1D3-E102C3E581AB}D:\xboxgames\world war z\content\wwzretail.exe" => removido (a) com sucesso. "HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{BB64B8F2-628B-4339-ABBC-89B12BB99E50}" => removido (a) com sucesso. "HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{DE5E109A-B7F4-4200-B095-AA89F8B1094F}" => removido (a) com sucesso. ========================= Folder: C:\ProgramData\WnHqYU0nH4 ======================== C:\ProgramData\WnHqYU0nH4 = Arquivo ====== Fim de Folder: ====== ========= ipconfig /flushdns ========= Configura‡Æo de IP do Windows Libera‡Æo do Cache do DNS Resolver bem-sucedida. ========= Fim de CMD: ========= ========= netsh winsock reset catalog ========= Cat logo Winsock redefinido com ˆxito. Reinicie o computador para concluir a redefini‡Æo. ========= Fim de CMD: ========= ========= netsh advfirewall reset ========= Ok. ========= Fim de CMD: ========= ========= netsh advfirewall set allprofiles state ON ========= Ok. ========= Fim de CMD: ========= ========= netsh winhttp reset proxy ========= Configura‡äes do proxy WinHTTP atuais: Acesso direto (nenhum servidor proxy). ========= Fim de CMD: ========= ========= Bitsadmin /Reset /Allusers ========= BITSADMIN version 3.0 BITS administration utility. (C) Copyright Microsoft Corp. {0993FC3E-CBF9-40B5-8F20-8A8CFD66C0D0} canceled. {5FE9EF91-460C-47ED-9924-2A0CA37B0720} canceled. 2 out of 2 jobs canceled. ========= Fim de CMD: ========= ========= Winmgmt /salvagerepository ========= O reposit¢rio WMI est  consistente ========= Fim de CMD: ========= ========= Winmgmt /resetrepository ========= O reposit¢rio WMI foi redefinido ========= Fim de CMD: ========= ========= winmgmt /resyncperf ========= 0 ========= Fim de CMD: ========= ========= "%WINDIR%\SYSTEM32\lodctr.exe" /R ========= Info: Configura‡Æo do contador de desempenho reconstru¡da com sucesso a partir do reposit¢rio de backup do sistema ========= Fim de CMD: ========= ========= "%WINDIR%\SysWOW64\lodctr.exe" /R ========= Info: Configura‡Æo do contador de desempenho reconstru¡da com sucesso a partir do reposit¢rio de backup do sistema ========= Fim de CMD: ========= ========= "%WINDIR%\SYSTEM32\lodctr.exe" /R ========= Info: Configura‡Æo do contador de desempenho reconstru¡da com sucesso a partir do reposit¢rio de backup do sistema ========= Fim de CMD: ========= ========= "%WINDIR%\SysWOW64\lodctr.exe" /R ========= Info: Configura‡Æo do contador de desempenho reconstru¡da com sucesso a partir do reposit¢rio de backup do sistema ========= Fim de CMD: ========= =========== "C:\WINDOWS\SysWOW64\*.tmp" ========== não encontrado (a) ========= Fim -> "C:\WINDOWS\SysWOW64\*.tmp" ======== =========== "C:\WINDOWS\System32\*.tmp" ========== não encontrado (a) ========= Fim -> "C:\WINDOWS\System32\*.tmp" ======== =========== "C:\Windows\SystemTemp\*.tmp" ========== não encontrado (a) ========= Fim -> "C:\Windows\SystemTemp\*.tmp" ======== =========== EmptyTemp: ========== FlushDNS => completado BITS transfer queue => 3670016 B DOMStore, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 17005535 B Java, Discord, Steam htmlcache => 582357914 B Windows/system/drivers => 19738206 B Edge => 0 B Chrome => 126698369 B Brave => 2042064 B Firefox => 46364145 B Opera => 0 B Temp, IE cache, history, cookies, recent: Default => 0 B ProgramData => 0 B Public => 0 B systemprofile => 0 B systemprofile32 => 99169 B LocalService => 195229 B NetworkService => 660049 B OS PVTS => 32944714 B DefaultAppPool => 32944714 B RecycleBin => 0 B EmptyTemp: => 824.7 MB de dados temporários Removidos. ================================ O sistema precisou ser reiniciado. ==== Fim de Fixlog 13:29:03 ====