OTL Extras logfile created on: 26/09/2015 21:14:14 - Run 1
OTL by OldTimer - Version 3.2.69.0     Folder = C:\Users\HAMMER\Desktop
 Professional  (Version = 6.1.7600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.7600.16385)
Locale: 00000416 | Country: Brasil | Language: PTB | Date Format: dd/MM/yyyy

1,87 Gb Total Physical Memory | 1,18 Gb Available Physical Memory | 63,14% Memory free
3,75 Gb Paging File | 3,02 Gb Available in Paging File | 80,55% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 74,43 Gb Total Space | 57,07 Gb Free Space | 76,67% Space Free | Partition Type: NTFS
Drive D: | 465,76 Gb Total Space | 177,55 Gb Free Space | 38,12% Space Free | Partition Type: NTFS

Computer Name: HAMMER-PC | User Name: HAMMER | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users
Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days

[color=#E56717]========== Extra Registry (SafeList) ==========[/color]


[color=#E56717]========== File Associations ==========[/color]

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- C:\Windows\System32\control.exe (Microsoft Corporation)
.hlp [@ = hlpfile] -- C:\Windows\winhlp32.exe (Microsoft Corporation)

[color=#E56717]========== Shell Spawning ==========[/color]

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
hlpfile [open] -- %SystemRoot%\winhlp32.exe %1 (Microsoft Corporation)
htmlfile [edit] -- Reg Error: Key error.
http [open] -- Reg Error: Key error.
https [open] -- Reg Error: Key error.
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [MinhaBox.Upload] -- "C:\Program Files\Minhateca.com.br Box\\MinhaBox.exe" -u"%1" ()
Directory [mplayerc.enqueue] -- "C:\Program Files\K-Lite Codec Pack\MPC-HC\mpc-hc.exe" /add "%1" (MPC-HC Team)
Directory [mplayerc.play] -- "C:\Program Files\K-Lite Codec Pack\MPC-HC\mpc-hc.exe" "%1" (MPC-HC Team)
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

[color=#E56717]========== Security Center Settings ==========[/color]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 1

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"VistaSp1" = Reg Error: Unknown registry data type -- File not found
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol]

[color=#E56717]========== Firewall Settings ==========[/color]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1

[color=#E56717]========== Authorized Applications List ==========[/color]


[color=#E56717]========== Vista Active Open Ports Exception List ==========[/color]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{16643228-0F03-459F-9F9F-D20485E23693}" = lport=10243 | protocol=6 | dir=in | app=system |
"{257A92D6-6FCB-4E4E-A964-52AAED0A7F47}" = lport=5355 | protocol=17 | dir=in | svc=dnscache | app=%systemroot%\system32\svchost.exe |
"{4D0FE5BC-53C7-472B-9735-4FFE85161386}" = lport=445 | protocol=6 | dir=in | app=system |
"{4F320B0F-0EB8-4F1D-8A34-F0C54132B642}" = rport=137 | protocol=17 | dir=out | app=system |
"{55EE76B3-3667-4706-B8C7-66FCDCF81DC8}" = lport=5353 | protocol=17 | dir=in | app=c:\program files\google\chrome\application\chrome.exe |
"{5ABDD333-2AD6-4728-B48C-B77E6CEFD0E1}" = lport=2177 | protocol=6 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{5C566925-CBBA-47A2-873F-2E1A5A4F1C2C}" = rport=1900 | protocol=17 | dir=out | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
"{60F2E1EB-7E90-4706-A3D5-3CEE717C91EB}" = rport=445 | protocol=6 | dir=out | app=system |
"{6A497985-87CB-4D80-9C94-13981D6D8227}" = rport=2177 | protocol=17 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{6F72B195-EF5D-46F3-9552-463CADEADF34}" = lport=rpc-epmap | protocol=6 | dir=in | svc=rpcss | name=@firewallapi.dll,-28539 |
"{8DDDA249-0F95-4F90-8D8E-8DDC7F9F730D}" = lport=139 | protocol=6 | dir=in | app=system |
"{9CCBA554-A52E-4268-AB0E-9CC2B09A617F}" = lport=137 | protocol=17 | dir=in | app=system |
"{9CF4B075-13B6-4F9F-8ADE-A44AB9D1B8EE}" = rport=2177 | protocol=6 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{AA312912-2A5B-4248-A939-EB602ABD23C9}" = rport=5355 | protocol=17 | dir=out | svc=dnscache | app=%systemroot%\system32\svchost.exe |
"{B9E998C0-B72C-48CB-B585-036AD285CF00}" = lport=2869 | protocol=6 | dir=in | app=system |
"{BA031B30-D8FA-4B0E-B51D-EC125C7324B8}" = lport=2177 | protocol=17 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{C67D650E-3E19-4847-9416-89429A8E7678}" = rport=138 | protocol=17 | dir=out | app=system |
"{D0FA6F7A-C070-4312-A7BC-4A0A89DDC89B}" = rport=139 | protocol=6 | dir=out | app=system |
"{D5807530-D3CD-4D00-9C10-1671CC2BABC1}" = lport=5357 | protocol=6 | dir=in | name=ws-eventing tcp port 5357 |
"{E54314D5-CCD7-418C-BEFB-3DCBEB07E643}" = lport=rpc | protocol=6 | dir=in | svc=spooler | app=%systemroot%\system32\spoolsv.exe |
"{EC29B0CC-A4A0-4DCA-98D2-D7F94406137C}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
"{EF04EC4A-1BEA-4754-BC5F-DD0BA950F05B}" = lport=138 | protocol=17 | dir=in | app=system |
"{FB56B19B-D5D4-4EEB-AF18-0A0677EF6160}" = rport=10243 | protocol=6 | dir=out | app=system |

[color=#E56717]========== Vista Active Application Exception List ==========[/color]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{0A363F5D-5BA0-43EE-B532-44B8DEF99401}" = protocol=6 | dir=in | app=c:\users\hammer\appdata\roaming\utorrent\utorrent.exe |
"{0F74A1B5-1E46-4B29-97F2-3E1080E88723}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe |
"{12165388-603E-437D-9292-84E411818B1B}" = protocol=6 | dir=out | app=c:\users\hammer\appdata\roaming\utorrent\utorrent.exe |
"{1556CF25-4B4F-413A-BCBF-E82C9EA65D1F}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{17EC0E38-9AB9-4A72-9D31-99139B86A257}" = protocol=6 | dir=in | app=c:\users\hammer\appdata\roaming\utorrent\utorrent.exe |
"{1BB22BAB-8F25-472E-B019-A87CB6DB4676}" = protocol=17 | dir=in | app=c:\users\hammer\appdata\roaming\utorrent\utorrent.exe |
"{21C943BC-8BBB-4A44-96B3-41C10B465D00}" = protocol=1 | dir=out | name=@firewallapi.dll,-28544 |
"{325EFAD4-756F-4855-A85A-8AF0A672BA99}" = protocol=6 | dir=out | svc=upnphost | app=%systemroot%\system32\svchost.exe |
"{3BBD0A2C-310B-4034-83CF-3630FE5AADA4}" = protocol=17 | dir=out | app=c:\users\hammer\appdata\roaming\utorrent\utorrent.exe |
"{41E27CC8-E025-4483-AB7F-6E37E33A8B6C}" = protocol=58 | dir=out | name=@firewallapi.dll,-28546 |
"{47B09ACD-F524-4A4E-96B5-4552E41BDBFC}" = protocol=6 | dir=in | app=c:\users\hammer\downloads\utorrent.exe |
"{5B32883E-4CBB-42FB-B12A-8BE88548BECC}" = dir=in | app=c:\program files\hp\hp deskjet 2540 series\bin\devicesetup.exe |
"{6E59CC6F-AE3F-4376-8AA0-E4D46E717300}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe |
"{7F357DDF-FE52-47C9-BF71-F7BBC8FD6D82}" = protocol=58 | dir=in | name=@firewallapi.dll,-28545 |
"{80EF6E2C-51A9-48E4-A6F3-4D0631AAA055}" = protocol=17 | dir=in | app=c:\program files\teamviewer\teamviewer_service.exe |
"{83A47D9C-0A5F-490A-AA07-2E4DA9141D20}" = protocol=6 | dir=in | app=c:\program files\teamviewer\teamviewer_service.exe |
"{97663434-2E7C-4F6A-B7AB-A5F8C4734A74}" = protocol=17 | dir=in | app=c:\users\hammer\appdata\roaming\utorrent\utorrent.exe |
"{A0678065-381C-4986-A397-61D81230A17D}" = protocol=6 | dir=in | app=c:\program files\teamviewer\teamviewer.exe |
"{A30789CE-BA62-4E40-8479-E8A290CE83EC}" = protocol=17 | dir=in | app=c:\users\hammer\downloads\utorrent.exe |
"{B2FD0A44-08B4-4836-8888-A9126D37FDFA}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{B3531665-7053-4A26-8B1B-7C22B28E7500}" = protocol=6 | dir=out | app=system |
"{B4494062-943A-4844-B448-75D99EBB7CC5}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe |
"{CD26C231-B2CA-4CE5-94B1-E3B0E5A0A721}" = protocol=6 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe |
"{D1DF373B-4B10-473B-A1D3-074B8EDAE32F}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{DAEA3DEC-0C67-43C4-B718-AA9343E5BCEE}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{E0E58272-2797-4193-A684-7F832B0A277E}" = protocol=17 | dir=in | app=c:\program files\teamviewer\teamviewer.exe |
"{E6AC24A1-01CF-4866-9C7D-A77AABFBC4CB}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe |
"{EBF46354-FC42-4263-9650-FB13DB74CE93}" = protocol=1 | dir=in | name=@firewallapi.dll,-28543 |
"{ECE51EFD-4387-4717-B66C-124AC4104FA0}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe |
"{F2F1D951-ED7F-4085-9715-AAD1D991AD2F}" = dir=in | app=c:\program files\hp\hp deskjet 2540 series\bin\hpnetworkcommunicatorcom.exe |
"TCP Query User{2FDB4441-A47E-4DDC-8F64-3CD98F80EB75}C:\program files\freetime\formatfactory\formatfactory.exe" = protocol=6 | dir=in | app=c:\program files\freetime\formatfactory\formatfactory.exe |
"TCP Query User{EFD809CE-495B-4D24-A8F5-DA9F54DF2B4D}C:\program files\spacialaudio\sambc\sambc.exe" = protocol=6 | dir=in | app=c:\program files\spacialaudio\sambc\sambc.exe |
"UDP Query User{1883416F-D4E6-4527-BA12-61381D48E27D}C:\program files\freetime\formatfactory\formatfactory.exe" = protocol=17 | dir=in | app=c:\program files\freetime\formatfactory\formatfactory.exe |
"UDP Query User{FA24EDDC-5E0A-4DB4-BC8A-B9578EA1198B}C:\program files\spacialaudio\sambc\sambc.exe" = protocol=17 | dir=in | app=c:\program files\spacialaudio\sambc\sambc.exe |

[color=#E56717]========== HKEY_LOCAL_MACHINE Uninstall List ==========[/color]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}" = Google Update Helper
"{6A22B145-83AD-4320-946C-73E04E4D3E90}" = Minhateca.com.br Box
"{6E3939AE-9996-4D07-9A30-14C78AE93576}" = Microsoft Security Client
"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
"{A8D93648-9F7F-407D-915C-62044644C3DA}" = MSI to redistribute MS VS2005 CRT libraries
"{AF549236-6258-4AC6-A043-5B5B89C6EB61}" = SpyHunter
"{D2FD81AC-3A24-40B1-882A-D6369E264D7F}" = HP Deskjet 2540 series Software básico do dispositivo
"{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver
"Adobe Flash Player PPAPI" = Adobe Flash Player 19 PPAPI
"Advanced SystemCare 8_is1" = Advanced SystemCare 8
"Everything" = Everything 1.2.1.371
"FBDBServer_2_5_is1" = Firebird 2.5.2.26540 (Win32)
"FormatFactory" = FormatFactory 3.6.0.0
"Google Chrome" = Google Chrome
"IObit Surfing Protection_is1" = Surfing Protection
"IObitUninstall" = IObit Uninstaller
"KLiteCodecPack_is1" = K-Lite Mega Codec Pack 11.3.0
"Microsoft Security Client" = Microsoft Security Essentials
"SAM3" = SAM Broadcaster 2013
"TeamViewer" = TeamViewer 10
"WinPcapInst" = WinPcap 4.1.1
"WinRAR archiver" = WinRAR 5.20 (32-bit)
"Wondershare Streaming Audio Recorder_is1" = Wondershare Streaming Audio Recorder(Build 2.2.4)

[color=#E56717]========== HKEY_USERS Uninstall List ==========[/color]

[HKEY_USERS\S-1-5-21-1425229123-4006759160-522371315-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"uTorrent" = µTorrent

[color=#E56717]========== Last 20 Event Log Errors ==========[/color]

[ Application Events ]
Error - 23/09/2015 21:50:12 | Computer Name = HAMMER-PC | Source = AdvancedSystemCareService8 | ID = 0
Description =

Error - 24/09/2015 21:13:24 | Computer Name = HAMMER-PC | Source = AdvancedSystemCareService8 | ID = 0
Description =

Error - 24/09/2015 21:13:24 | Computer Name = HAMMER-PC | Source = AdvancedSystemCareService8 | ID = 0
Description =

Error - 25/09/2015 08:55:49 | Computer Name = HAMMER-PC | Source = AdvancedSystemCareService8 | ID = 0
Description =

Error - 25/09/2015 08:55:49 | Computer Name = HAMMER-PC | Source = AdvancedSystemCareService8 | ID = 0
Description =

Error - 25/09/2015 12:27:57 | Computer Name = HAMMER-PC | Source = Application Hang | ID = 1002
Description = O programa Spyhunter4.exe versão 4.17.6.4336 parou de interagir com
 o Windows e foi fechado. Para ver se há mais informações disponíveis sobre o problema,
 verifique o histórico de problemas no painel de controle da Central de Ações.    ID
 de Processo: 8f8    Hora de Início: 01d0f7af0be35b32    Hora de Término: 0    Caminho do Aplicativo:
 C:\Program Files\Enigma Software Group\SpyHunter\Spyhunter4.exe    Id do Relatório:
 5b04c2c2-63a2-11e5-b682-001a4b0260e8

Error - 25/09/2015 21:12:28 | Computer Name = HAMMER-PC | Source = AdvancedSystemCareService8 | ID = 0
Description =

Error - 26/09/2015 11:40:46 | Computer Name = HAMMER-PC | Source = AdvancedSystemCareService8 | ID = 0
Description =

Error - 26/09/2015 11:40:46 | Computer Name = HAMMER-PC | Source = AdvancedSystemCareService8 | ID = 0
Description =

Error - 26/09/2015 20:02:19 | Computer Name = HAMMER-PC | Source = Application Hang | ID = 1002
Description = O programa uTorrent.exe versão 3.4.5.41162 parou de interagir com
o Windows e foi fechado. Para ver se há mais informações disponíveis sobre o problema,
 verifique o histórico de problemas no painel de controle da Central de Ações.    ID
 de Processo: 138    Hora de Início: 01d0f8b7788d0246    Hora de Término: 31    Caminho do Aplicativo:
 C:\Users\HAMMER\AppData\Roaming\uTorrent\uTorrent.exe    Id do Relatório: f3701037-64aa-11e5-b766-001a4b0260e8


[ System Events ]
Error - 24/09/2015 07:20:46 | Computer Name = HAMMER-PC | Source = DCOM | ID = 10016
Description =

Error - 24/09/2015 07:20:46 | Computer Name = HAMMER-PC | Source = DCOM | ID = 10016
Description =

Error - 25/09/2015 08:22:11 | Computer Name = HAMMER-PC | Source = DCOM | ID = 10016
Description =

Error - 25/09/2015 08:22:12 | Computer Name = HAMMER-PC | Source = DCOM | ID = 10016
Description =

Error - 25/09/2015 12:28:03 | Computer Name = HAMMER-PC | Source = DCOM | ID = 10016
Description =

Error - 25/09/2015 12:28:04 | Computer Name = HAMMER-PC | Source = DCOM | ID = 10016
Description =

Error - 26/09/2015 09:06:09 | Computer Name = HAMMER-PC | Source = DCOM | ID = 10016
Description =

Error - 26/09/2015 09:06:09 | Computer Name = HAMMER-PC | Source = DCOM | ID = 10016
Description =

Error - 26/09/2015 11:51:16 | Computer Name = HAMMER-PC | Source = DCOM | ID = 10016
Description =

Error - 26/09/2015 11:51:16 | Computer Name = HAMMER-PC | Source = DCOM | ID = 10016
Description =


< End of report >