Publicité
Publicité
Format du document : text/plain
Prévisualisation
Resultado do exame Adicional Farbar Recovery Scan Tool (x64) Versão: 31-08-2016
Executado por Paul_rodrigues (01-09-2016 10:27:48)
Executando a partir de C:\Users\Paul_rodrigues\Desktop
Windows 7 Professional Service Pack 1 (X64) (2016-06-20 20:27:28)
Modo da Inicialização: Normal
==========================================================
==================== Contas: =============================
1 (S-1-5-21-53648705-1422202379-1495276300-1001 - Administrator - Enabled) => C:\Users\1
2 (S-1-5-21-53648705-1422202379-1495276300-1002 - Administrator - Enabled) => C:\Users\2
3 (S-1-5-21-53648705-1422202379-1495276300-1003 - Limited - Enabled) => C:\Users\3
Administrador (S-1-5-21-53648705-1422202379-1495276300-500 - Administrator - Disabled)
Convidado (S-1-5-21-53648705-1422202379-1495276300-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-53648705-1422202379-1495276300-1005 - Limited - Enabled)
Paul_rodrigues (S-1-5-21-53648705-1422202379-1495276300-1006 - Administrator - Enabled) => C:\Users\Paul_rodrigues
==================== Central de Segurança ========================
(Se uma entrada for incluída na fixlist, será removida.)
AV: Avast Antivirus (Enabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B}
AS: Windows Defender (Disabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Avast Antivirus (Enabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}
==================== Programas Instalados ======================
(Somente os programas adwares com a indicação "Oculto" podem ser adicionados à fixlist para desocultá-los. Os programas adwares devem ser desinstalados manualmente.)
µTorrent (HKU\S-1-5-21-53648705-1422202379-1495276300-1006\...\uTorrent) (Version: 3.4.8.42501 - BitTorrent Inc.)
Avast Free Antivirus (HKLM-x32\...\Avast) (Version: 12.3.2280 - AVAST Software)
CCleaner (HKLM\...\CCleaner) (Version: 5.19 - Piriform)
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
Galeria de Fotos (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 52.0.2743.116 - Google Inc.)
Google Update Helper (x32 Version: 1.3.31.5 - Google Inc.) Hidden
Intel(R) Control Center (HKLM-x32\...\{F8A9085D-4C7A-41a9-8A77-C8998A96C421}) (Version: 1.2.1.1008 - Intel Corporation)
Intel(R) Manageability Engine Firmware Recovery Agent (HKLM-x32\...\{A6C48A9F-694A-4234-B3AA-62590B668927}) (Version: 1.0.0.36354 - Intel Corporation)
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 8.1.0.1252 - Intel Corporation)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 9.17.10.2828 - Intel Corporation)
Intel(R) Rapid Storage Technology (HKLM-x32\...\{3E29EE6C-963A-4aae-86C1-DC237C4A49FC}) (Version: 11.5.0.1207 - Intel Corporation)
Intel(R) SDK for OpenCL - CPU Only Runtime Package (HKLM-x32\...\{FCB3772C-B7D0-4933-B1A9-3707EBACC573}) (Version: 2.0.0.37149 - Intel Corporation)
Intel(R) USB 3.0 eXtensible Host Controller Driver (HKLM-x32\...\{240C3DDD-C5E9-4029-9DF7-95650D040CF2}) (Version: 1.0.5.235 - Intel Corporation)
Java 8 Update 101 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F64180101F0}) (Version: 8.0.1010.13 - Oracle Corporation)
JMicron Ethernet Adapter NDIS Driver (HKLM-x32\...\{96DCEE2F-98EE-4F80-8C0F-7C04D1FB9D7F}) (Version: 6.0.33.3 - JMicron Technology Corp.)
JMicron Flash Media Controller Driver (HKLM-x32\...\{26604C7E-A313-4D12-867F-7C6E7820BE4C}) (Version: 1.0.70.3 - JMicron Technology Corp.)
MEGAsync (HKLM-x32\...\MEGAsync) (Version: - Mega Limited)
Microsoft .NET Framework 4.5.2 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.51209 - Microsoft Corporation)
Microsoft Office 365 ProPlus - pt-br (HKLM\...\O365ProPlusRetail - pt-br) (Version: 16.0.6965.2076 - Microsoft Corporation)
Microsoft OneDrive (HKU\S-1-5-21-53648705-1422202379-1495276300-1006\...\OneDriveSetup.exe) (Version: 17.3.6390.0509 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Minimal ADB and Fastboot version 1.3 (HKLM-x32\...\{FB7E6E10-9DAA-476F-9876-078D40F6D233}_is1) (Version: 1.3 - Sam Rodberg)
Motorola Device Manager (HKLM-x32\...\{28DB8373-C1BB-444F-A427-A55585A12ED7}) (Version: 2.5.4 - Motorola Mobility)
Motorola Device Software Update (x32 Version: 13.09.3001 - Motorola Mobility) Hidden
Motorola Mobile Drivers Installation 6.4.0 (HKLM\...\{27986EDD-C9EC-4B52-B92F-06D073F0AA52}) (Version: 6.4.0 - Motorola Mobility LLC)
Movie Maker (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Mozilla Firefox 47.0.1 (x86 pt-BR) (HKLM-x32\...\Mozilla Firefox 47.0.1 (x86 pt-BR)) (Version: 47.0.1 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 47.0.1 - Mozilla)
MSXML 4.0 SP3 Parser (HKLM-x32\...\{196467F1-C11F-4F76-858B-5812ADC83B94}) (Version: 4.30.2100.0 - Microsoft Corporation)
Office 16 Click-to-Run Extensibility Component (Version: 16.0.6925.1031 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Licensing Component (Version: 16.0.6925.1031 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Localization Component (Version: 16.0.6925.1031 - Microsoft Corporation) Hidden
OSD 1.15.5 (HKLM-x32\...\{5A9C96FE-1376-45E1-8556-C81255F0B5A7}) (Version: 1.15.5 - OEM)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6668 - Realtek Semiconductor Corp.)
REALTEK Wireless LAN Driver (HKLM-x32\...\{9D3D8C60-A55F-4123-B2B9-173F09590E16}) (Version: 1.00.0180 - REALTEK Semiconductor Corp.)
SafeZone Stable 1.51.2220.53 (x32 Version: 1.51.2220.53 - Avast Software) Hidden
Setup versão 1.5 (HKLM-x32\...\{009476EE-71CA-4629-9823-FBB0616E4C9C}_is1) (Version: 1.5 - Microsoft, Inc.)
Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 15.2.6.0 - Synaptics Incorporated)
Teoma Shopping App (HKLM-x32\...\{41545533-2D54-5347-00A7-A758B70C2806}) (Version: 12.40.6.634 - APN, LLC)
UltraISO Premium V9.62 (HKLM-x32\...\UltraISO_is1) (Version: - )
VLC media player (HKLM-x32\...\VLC media player) (Version: 2.2.4 - VideoLAN)
Warsaw 1.12.4.14 64 bits (HKLM\...\{20E60725-16C8-4FB9-8BC2-AF92C5F8D06D}_is1) (Version: 1.12.4.14 - GAS Tecnologia)
Webcam 1.5 (HKLM-x32\...\{39B78651-6FD2-4752-BE68-C3BDB6F2D9EE}) (Version: 1.5 - OEM)
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3528.0331 - Microsoft Corporation)
WinRAR 5.31 (64-bit) (HKLM\...\WinRAR archiver) (Version: 5.31.0 - win.rar GmbH)
==================== Exame Personalizado CLSID (Whitelisted): ==========================
(Se uma entrada for incluída na fixlist, será removida do Registro. O arquivo não será movido, a menos que seja colocado separadamente.)
CustomCLSID: HKU\S-1-5-21-53648705-1422202379-1495276300-1006_Classes\CLSID\{162C6FB5-44D3-435B-903D-E613FA093FB5}\InprocServer32 -> C:\Users\Paul_rodrigues\AppData\Local\Microsoft\OneDrive\17.3.6390.0509\amd64\FileCoAuthLib64.dll ()
CustomCLSID: HKU\S-1-5-21-53648705-1422202379-1495276300-1006_Classes\CLSID\{71DCE5D6-4B57-496B-AC21-CD5B54EB93FD}\localserver32 -> C:\Users\Paul_rodrigues\AppData\Local\Microsoft\OneDrive\17.3.6390.0509\FileCoAuth.exe (Microsoft Corporation)
==================== Tarefas Agendadas (Whitelisted) =============
(Se uma entrada for incluída na fixlist, será removida do Registro. O arquivo não será movido, a menos que seja colocado separadamente.)
Task: {2339DF4B-9F63-42A5-9C5B-F6280213C351} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack2016 => C:\Program Files\Microsoft Office\root\Office16\msoia.exe [2016-08-14] (Microsoft Corporation)
Task: {2F7D091E-9BBB-41CE-A31A-9F66962A28B9} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [2016-07-31] (Microsoft Corporation)
Task: {3354615E-2A1A-4322-A051-54CFE2FA23CF} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn2016 => C:\Program Files\Microsoft Office\root\Office16\msoia.exe [2016-08-14] (Microsoft Corporation)
Task: {36ADE586-5975-4A42-AA37-06A58B418760} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2016-06-20] (Google Inc.)
Task: {48FE957D-A8C6-427B-B8C9-7C7EA0EC70F3} - System32\Tasks\Motorola Device Manager Update => C:\Program Files (x86)\Motorola Mobility\Motorola Device Manager\MotorolaDeviceManagerUpdate.exe [2014-10-30] ()
Task: {58DAF597-FB46-4341-9F9D-AF93D761F294} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2016-06-15] (Piriform Ltd)
Task: {8682EF2A-536E-4AC8-B1F5-192D74A66BFB} - System32\Tasks\avast! Emergency Update => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [2016-08-21] (AVAST Software)
Task: {88700A09-68E9-4EDB-B0B1-B260F1E46237} - System32\Tasks\SafeZone scheduled Autoupdate 1471831413 => C:\Program Files\AVAST Software\SZBrowser\launcher.exe [2016-08-09] (Avast Software)
Task: {89671950-A016-4254-B29B-54AF13796A41} - System32\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d => C:\Program Files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\Bootstrap.exe [2012-04-16] (Intel Corporation)
Task: {898AC356-A617-4A46-A857-9245115EA40F} - System32\Tasks\Motorola Device Manager Initial Update => C:\Program Files (x86)\Motorola Mobility\Motorola Device Manager\MotorolaDeviceManagerUpdate.exe [2014-10-30] ()
Task: {C6CFB893-10F6-4C81-B693-F25AF12BA60A} - System32\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d-Logon => C:\Program Files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\Bootstrap.exe [2012-04-16] (Intel Corporation)
Task: {C79531AC-C6AC-4F2A-A55D-E72B3B5CF2E5} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2016-06-20] (Google Inc.)
Task: {C7A24C13-DF61-4FE2-853A-7D04E842C89B} - System32\Tasks\AVAST Software\Avast settings backup => C:\Program Files\Common Files\AV\avast! Antivirus\backup.exe [2016-08-21] (AVAST Software)
Task: {F2862F7F-6B0E-4176-BFEA-5A34097E864D} - System32\Tasks\OneDrive Standalone Update Task => C:\Users\1\AppData\Local\Microsoft\OneDrive\17.3.6517.0809\OneDriveStandaloneUpdater.exe [2016-08-28] (Microsoft Corporation)
Task: {F34903CB-6371-4A15-8B87-6C9E4F6A9CD4} - System32\Tasks\Microsoft\Office\Office Subscription Maintenance => C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonx64\Microsoft Shared\Office16\OLicenseHeartbeat.exe [2016-08-14] (Microsoft Corporation)
Task: {F4725AB5-D590-4627-BBE3-9B29191C795F} - System32\Tasks\Microsoft\Office\Office Automatic Updates => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [2016-07-31] (Microsoft Corporation)
(Se uma entrada for incluída na fixlist, o arquivo da tarefa (.job) será movido. O arquivo que está sendo executado pela tarefa não será movido.)
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d-Logon.job => C:\Program Files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\Bootstrap.exe
Task: C:\Windows\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d.job => C:\Program Files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\Bootstrap.exe
==================== Atalhos =============================
(As entradas podem ser listadas para serem restauradas ou removidas.)
==================== Módulos Carregados (Whitelisted) ==============
2016-06-30 05:23 - 2016-06-30 05:23 - 00592384 _____ () C:\Users\Home_51\AppData\Local\MEGAsync\ShellExtX64.dll
2016-08-17 17:54 - 2016-08-17 17:54 - 00959168 _____ () C:\Users\Paul_rodrigues\AppData\Local\Microsoft\OneDrive\17.3.6390.0509\amd64\ClientTelemetry.dll
2016-06-20 21:32 - 2012-08-03 13:34 - 00094208 _____ () C:\Windows\System32\IccLibDll_x64.dll
2016-08-08 16:22 - 2016-08-02 20:41 - 02366280 _____ () C:\Program Files (x86)\Google\Chrome\Application\52.0.2743.116\libglesv2.dll
2016-08-08 16:22 - 2016-08-02 20:40 - 00107848 _____ () C:\Program Files (x86)\Google\Chrome\Application\52.0.2743.116\libegl.dll
2016-08-08 16:21 - 2016-08-02 20:04 - 31541952 _____ () C:\Program Files (x86)\Google\Chrome\Application\52.0.2743.116\PepperFlash\pepflashplayer.dll
2016-08-21 22:55 - 2016-08-21 22:55 - 00169064 _____ () C:\Program Files\AVAST Software\Avast\JsonRpcServer.dll
2016-08-21 22:55 - 2016-08-21 22:55 - 00482928 _____ () C:\Program Files\AVAST Software\Avast\ffl2.dll
2016-09-01 08:40 - 2016-09-01 08:40 - 03017728 _____ () C:\Program Files\AVAST Software\Avast\defs\16090102\algo.dll
2014-04-07 11:31 - 2014-04-07 11:31 - 00172032 _____ () C:\Program Files (x86)\Motorola Mobility\Motorola Device Manager\css_core.dll
2016-08-21 22:55 - 2016-08-21 22:55 - 48936448 _____ () C:\Program Files\AVAST Software\Avast\libcef.dll
2016-06-29 00:51 - 2016-06-29 00:51 - 00016384 _____ () C:\Windows\assembly\NativeImages_v4.0.30319_32\PSIClient\23ae651b7c58816ab7e53f2165c92fac\PSIClient.ni.dll
2016-06-21 07:57 - 2012-06-25 09:41 - 01198912 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\ACE.dll
==================== Alternate Data Streams (Whitelisted) =========
(Se uma entrada for incluída na fixlist, somente o ADS será removido.)
AlternateDataStreams: C:\3590F75ABA9E485486C100C1A9D4FF06ZZZ..Z.....ZZZZZ:1 [882]
AlternateDataStreams: C:\Windows\system32\Drivers\wsddfac.sys:X5ZN8aGXs4 [1198]
==================== Modo de Segurança (Whitelisted) ===================
(Se uma entrada for incluída na fixlist, será removida do Registro. O valor "AlternateShell" será restaurado.)
==================== Associação (Whitelisted) ===============
(Se uma entrada for incluída na fixlist, o ítem no Registro será restaurado para o padrão ou removido.)
==================== Internet Explorer confiável/restrito ===============
(Se uma entrada for incluída na fixlist, será removida do Registro.)
==================== Hosts Conteúdo: ===============================
(Se necessário, a diretiva Hosts: pode ser incluída na fixlist para redefinir o Hosts.)
2009-07-13 23:34 - 2009-06-10 18:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts
==================== Outras Áreas ============================
(Atualmente não há nenhuma correção automática para esta seção.)
HKU\S-1-5-21-53648705-1422202379-1495276300-1006\Control Panel\Desktop\\Wallpaper -> C:\Users\Paul_rodrigues\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
DNS Servers: 187.122.127.61 - 187.122.127.37
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 0)
Firewall do Windows está desabilitado.
==================== MSCONFIG/TASK MANAGER ítens desabilitados ==
(Atualmente não há nenhuma correção automática para esta seção.)
MSCONFIG\startupreg: CCleaner Monitoring => "C:\Program Files\CCleaner\CCleaner64.exe" /MONITOR
==================== Regras do Firewall (Whitelisted) ===============
(Se uma entrada for incluída na fixlist, será removida do Registro. O arquivo não será movido, a menos que seja colocado separadamente.)
FirewallRules: [SPPSVC-In-TCP-NoScope] => (Allow) %SystemRoot%\system32\sppsvc.exe
FirewallRules: [SPPSVC-In-TCP] => (Allow) %SystemRoot%\system32\sppsvc.exe
FirewallRules: [TCP Query User{347E7EEA-BB5C-49BA-A0E1-7C0902C11A57}C:\program files (x86)\google\chrome\application\chrome.exe] => (Allow) C:\program files (x86)\google\chrome\application\chrome.exe
FirewallRules: [UDP Query User{680D7068-D4C7-4836-AF29-8D3B507B27A2}C:\program files (x86)\google\chrome\application\chrome.exe] => (Allow) C:\program files (x86)\google\chrome\application\chrome.exe
FirewallRules: [{6AC77676-B7D8-414E-BCFB-01CB0D9C59C2}] => (Block) C:\program files (x86)\google\chrome\application\chrome.exe
FirewallRules: [{945E8512-F467-4661-9EA3-84D5487672B5}] => (Block) C:\program files (x86)\google\chrome\application\chrome.exe
FirewallRules: [TCP Query User{24179FE4-7F1E-4697-AC9C-1E03C9502312}C:\users\paul_rodrigues\appdata\roaming\utorrent\utorrent.exe] => (Allow) C:\users\paul_rodrigues\appdata\roaming\utorrent\utorrent.exe
FirewallRules: [UDP Query User{C6E6E3BB-4DAF-4D54-84C8-F5515CFC2B40}C:\users\paul_rodrigues\appdata\roaming\utorrent\utorrent.exe] => (Allow) C:\users\paul_rodrigues\appdata\roaming\utorrent\utorrent.exe
==================== Pontos de Restauração =========================
26-08-2016 07:44:57 Ponto de Verificação Agendado
==================== Dispositivos Apresentando Falhas No Gerenciador =============
Name: JMicron PCI Express Gigabit Ethernet Adapter
Description: JMicron PCI Express Gigabit Ethernet Adapter
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: JMicron Technology Corp.
Service: JME
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.
==================== Erros no Log de eventos: =========================
Erros em Aplicativos:
==================
Error: (09/01/2016 07:35:20 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Nome de aplicativo com falha: SYSHOME_51-PC.exe, versão: 0.0.0.0, carimbo de hora: 0x578bac9c
Nome do módulo de falhas: KERNELBASE.dll, versão: 6.1.7601.23418, carimbo de hora: 0x5708a89c
Código de exceção: 0xe053534f
Deslocamento com falha: 0x000000000001a06d
Identificação do processo com falha: 0x%9
Hora de início do aplicativo com falha: 0xSYSHOME_51-PC.exe0
Caminho do aplicativo com falha: SYSHOME_51-PC.exe1
FCaminho do módulo de falhas: SYSHOME_51-PC.exe2
Identificação do Relatório: SYSHOME_51-PC.exe3
Error: (09/01/2016 07:23:50 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected.
Error: (09/01/2016 06:12:34 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Nome de aplicativo com falha: SYSHOME_51-PC.exe, versão: 0.0.0.0, carimbo de hora: 0x578bac9c
Nome do módulo de falhas: KERNELBASE.dll, versão: 6.1.7601.23418, carimbo de hora: 0x5708a89c
Código de exceção: 0xe053534f
Deslocamento com falha: 0x000000000001a06d
Identificação do processo com falha: 0x%9
Hora de início do aplicativo com falha: 0xSYSHOME_51-PC.exe0
Caminho do aplicativo com falha: SYSHOME_51-PC.exe1
FCaminho do módulo de falhas: SYSHOME_51-PC.exe2
Identificação do Relatório: SYSHOME_51-PC.exe3
Error: (09/01/2016 05:35:19 AM) (Source: Office 2016 Licensing Service) (EventID: 0) (User: )
Description: Event-ID 0
Error: (09/01/2016 05:35:19 AM) (Source: Microsoft Office 16) (EventID: 2011) (User: )
Description: Office Subscription licensing exception: Error Code: 0x803D0010; CorrelationId: {E8FDF63B-6E44-438B-8BDA-54DB52FE25A6}
Error: (09/01/2016 05:35:08 AM) (Source: Microsoft Office 16) (EventID: 2011) (User: )
Description: Office Subscription licensing exception: Error Code: 0x803D0010; CorrelationId: {E8FDF63B-6E44-438B-8BDA-54DB52FE25A6}
Error: (08/31/2016 01:26:25 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected.
Error: (08/31/2016 01:12:32 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected.
Error: (08/31/2016 11:05:15 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected.
Error: (08/31/2016 09:19:02 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected.
Erros de Sistema:
=============
Error: (09/01/2016 10:21:38 AM) (Source: ipnathlp) (EventID: 30013) (User: )
Description: O alocador DHCP se desabilitou sozinho no endereço IP 192.168.0.5, porque o endereço IP está fora do escopo 192.168.137.0/255.255.255.0 do qual os endereços estão sendo alocados para clientes DHCP. Para habilitar o alocador DHCP neste endereço IP, altere o escopo para que inclua o endereço IP ou altere o endereço IP para que ele se encaixe no escopo.
Error: (09/01/2016 10:21:36 AM) (Source: ipnathlp) (EventID: 31004) (User: )
Description: O agente proxy DNS não pôde alocar 0 byte(s) de memória. Talvez isso indique que o sistema esteja com memória virtual insuficiente ou que o gerenciador de memória encontrou um erro interno.
Error: (09/01/2016 10:20:48 AM) (Source: ipnathlp) (EventID: 30013) (User: )
Description: O alocador DHCP se desabilitou sozinho no endereço IP 192.168.0.5, porque o endereço IP está fora do escopo 192.168.137.0/255.255.255.0 do qual os endereços estão sendo alocados para clientes DHCP. Para habilitar o alocador DHCP neste endereço IP, altere o escopo para que inclua o endereço IP ou altere o endereço IP para que ele se encaixe no escopo.
Error: (09/01/2016 10:20:48 AM) (Source: ipnathlp) (EventID: 31004) (User: )
Description: O agente proxy DNS não pôde alocar 0 byte(s) de memória. Talvez isso indique que o sistema esteja com memória virtual insuficiente ou que o gerenciador de memória encontrou um erro interno.
Error: (09/01/2016 09:31:31 AM) (Source: ipnathlp) (EventID: 30013) (User: )
Description: O alocador DHCP se desabilitou sozinho no endereço IP 192.168.0.5, porque o endereço IP está fora do escopo 192.168.137.0/255.255.255.0 do qual os endereços estão sendo alocados para clientes DHCP. Para habilitar o alocador DHCP neste endereço IP, altere o escopo para que inclua o endereço IP ou altere o endereço IP para que ele se encaixe no escopo.
Error: (09/01/2016 09:31:31 AM) (Source: ipnathlp) (EventID: 31004) (User: )
Description: O agente proxy DNS não pôde alocar 0 byte(s) de memória. Talvez isso indique que o sistema esteja com memória virtual insuficiente ou que o gerenciador de memória encontrou um erro interno.
Error: (09/01/2016 08:39:41 AM) (Source: ipnathlp) (EventID: 30013) (User: )
Description: O alocador DHCP se desabilitou sozinho no endereço IP 192.168.0.5, porque o endereço IP está fora do escopo 192.168.137.0/255.255.255.0 do qual os endereços estão sendo alocados para clientes DHCP. Para habilitar o alocador DHCP neste endereço IP, altere o escopo para que inclua o endereço IP ou altere o endereço IP para que ele se encaixe no escopo.
Error: (09/01/2016 08:39:41 AM) (Source: ipnathlp) (EventID: 31004) (User: )
Description: O agente proxy DNS não pôde alocar 0 byte(s) de memória. Talvez isso indique que o sistema esteja com memória virtual insuficiente ou que o gerenciador de memória encontrou um erro interno.
Error: (09/01/2016 08:39:39 AM) (Source: ipnathlp) (EventID: 30013) (User: )
Description: O alocador DHCP se desabilitou sozinho no endereço IP 169.254.49.137, porque o endereço IP está fora do escopo 192.168.137.0/255.255.255.0 do qual os endereços estão sendo alocados para clientes DHCP. Para habilitar o alocador DHCP neste endereço IP, altere o escopo para que inclua o endereço IP ou altere o endereço IP para que ele se encaixe no escopo.
Error: (09/01/2016 07:36:04 AM) (Source: ipnathlp) (EventID: 1233) (User: )
Description: O ICS_IPV6 não configurou a pilha do IPv6.
==================== Informações da Memória ===========================
Processador: Intel(R) Pentium(R) CPU B950 @ 2.10GHz
Percentagem de memória em uso: 63%
RAM física total: 3536.79 MB
RAM física disponível: 1276.34 MB
Virtual Total: 7071.76 MB
Virtual disponível: 4839.43 MB
==================== Drives ================================
Drive c: () (Fixed) (Total:297.99 GB) (Free:104.84 GB) NTFS
==================== MBR & Tabela de Partições ==================
========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 298.1 GB) (Disk ID: 655EACFC)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=298 GB) - (Type=07 NTFS)
==================== Fim de Addition.txt ============================
Executado por Paul_rodrigues (01-09-2016 10:27:48)
Executando a partir de C:\Users\Paul_rodrigues\Desktop
Windows 7 Professional Service Pack 1 (X64) (2016-06-20 20:27:28)
Modo da Inicialização: Normal
==========================================================
==================== Contas: =============================
1 (S-1-5-21-53648705-1422202379-1495276300-1001 - Administrator - Enabled) => C:\Users\1
2 (S-1-5-21-53648705-1422202379-1495276300-1002 - Administrator - Enabled) => C:\Users\2
3 (S-1-5-21-53648705-1422202379-1495276300-1003 - Limited - Enabled) => C:\Users\3
Administrador (S-1-5-21-53648705-1422202379-1495276300-500 - Administrator - Disabled)
Convidado (S-1-5-21-53648705-1422202379-1495276300-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-53648705-1422202379-1495276300-1005 - Limited - Enabled)
Paul_rodrigues (S-1-5-21-53648705-1422202379-1495276300-1006 - Administrator - Enabled) => C:\Users\Paul_rodrigues
==================== Central de Segurança ========================
(Se uma entrada for incluída na fixlist, será removida.)
AV: Avast Antivirus (Enabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B}
AS: Windows Defender (Disabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Avast Antivirus (Enabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}
==================== Programas Instalados ======================
(Somente os programas adwares com a indicação "Oculto" podem ser adicionados à fixlist para desocultá-los. Os programas adwares devem ser desinstalados manualmente.)
µTorrent (HKU\S-1-5-21-53648705-1422202379-1495276300-1006\...\uTorrent) (Version: 3.4.8.42501 - BitTorrent Inc.)
Avast Free Antivirus (HKLM-x32\...\Avast) (Version: 12.3.2280 - AVAST Software)
CCleaner (HKLM\...\CCleaner) (Version: 5.19 - Piriform)
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
Galeria de Fotos (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 52.0.2743.116 - Google Inc.)
Google Update Helper (x32 Version: 1.3.31.5 - Google Inc.) Hidden
Intel(R) Control Center (HKLM-x32\...\{F8A9085D-4C7A-41a9-8A77-C8998A96C421}) (Version: 1.2.1.1008 - Intel Corporation)
Intel(R) Manageability Engine Firmware Recovery Agent (HKLM-x32\...\{A6C48A9F-694A-4234-B3AA-62590B668927}) (Version: 1.0.0.36354 - Intel Corporation)
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 8.1.0.1252 - Intel Corporation)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 9.17.10.2828 - Intel Corporation)
Intel(R) Rapid Storage Technology (HKLM-x32\...\{3E29EE6C-963A-4aae-86C1-DC237C4A49FC}) (Version: 11.5.0.1207 - Intel Corporation)
Intel(R) SDK for OpenCL - CPU Only Runtime Package (HKLM-x32\...\{FCB3772C-B7D0-4933-B1A9-3707EBACC573}) (Version: 2.0.0.37149 - Intel Corporation)
Intel(R) USB 3.0 eXtensible Host Controller Driver (HKLM-x32\...\{240C3DDD-C5E9-4029-9DF7-95650D040CF2}) (Version: 1.0.5.235 - Intel Corporation)
Java 8 Update 101 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F64180101F0}) (Version: 8.0.1010.13 - Oracle Corporation)
JMicron Ethernet Adapter NDIS Driver (HKLM-x32\...\{96DCEE2F-98EE-4F80-8C0F-7C04D1FB9D7F}) (Version: 6.0.33.3 - JMicron Technology Corp.)
JMicron Flash Media Controller Driver (HKLM-x32\...\{26604C7E-A313-4D12-867F-7C6E7820BE4C}) (Version: 1.0.70.3 - JMicron Technology Corp.)
MEGAsync (HKLM-x32\...\MEGAsync) (Version: - Mega Limited)
Microsoft .NET Framework 4.5.2 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.51209 - Microsoft Corporation)
Microsoft Office 365 ProPlus - pt-br (HKLM\...\O365ProPlusRetail - pt-br) (Version: 16.0.6965.2076 - Microsoft Corporation)
Microsoft OneDrive (HKU\S-1-5-21-53648705-1422202379-1495276300-1006\...\OneDriveSetup.exe) (Version: 17.3.6390.0509 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Minimal ADB and Fastboot version 1.3 (HKLM-x32\...\{FB7E6E10-9DAA-476F-9876-078D40F6D233}_is1) (Version: 1.3 - Sam Rodberg)
Motorola Device Manager (HKLM-x32\...\{28DB8373-C1BB-444F-A427-A55585A12ED7}) (Version: 2.5.4 - Motorola Mobility)
Motorola Device Software Update (x32 Version: 13.09.3001 - Motorola Mobility) Hidden
Motorola Mobile Drivers Installation 6.4.0 (HKLM\...\{27986EDD-C9EC-4B52-B92F-06D073F0AA52}) (Version: 6.4.0 - Motorola Mobility LLC)
Movie Maker (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Mozilla Firefox 47.0.1 (x86 pt-BR) (HKLM-x32\...\Mozilla Firefox 47.0.1 (x86 pt-BR)) (Version: 47.0.1 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 47.0.1 - Mozilla)
MSXML 4.0 SP3 Parser (HKLM-x32\...\{196467F1-C11F-4F76-858B-5812ADC83B94}) (Version: 4.30.2100.0 - Microsoft Corporation)
Office 16 Click-to-Run Extensibility Component (Version: 16.0.6925.1031 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Licensing Component (Version: 16.0.6925.1031 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Localization Component (Version: 16.0.6925.1031 - Microsoft Corporation) Hidden
OSD 1.15.5 (HKLM-x32\...\{5A9C96FE-1376-45E1-8556-C81255F0B5A7}) (Version: 1.15.5 - OEM)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6668 - Realtek Semiconductor Corp.)
REALTEK Wireless LAN Driver (HKLM-x32\...\{9D3D8C60-A55F-4123-B2B9-173F09590E16}) (Version: 1.00.0180 - REALTEK Semiconductor Corp.)
SafeZone Stable 1.51.2220.53 (x32 Version: 1.51.2220.53 - Avast Software) Hidden
Setup versão 1.5 (HKLM-x32\...\{009476EE-71CA-4629-9823-FBB0616E4C9C}_is1) (Version: 1.5 - Microsoft, Inc.)
Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 15.2.6.0 - Synaptics Incorporated)
Teoma Shopping App (HKLM-x32\...\{41545533-2D54-5347-00A7-A758B70C2806}) (Version: 12.40.6.634 - APN, LLC)
UltraISO Premium V9.62 (HKLM-x32\...\UltraISO_is1) (Version: - )
VLC media player (HKLM-x32\...\VLC media player) (Version: 2.2.4 - VideoLAN)
Warsaw 1.12.4.14 64 bits (HKLM\...\{20E60725-16C8-4FB9-8BC2-AF92C5F8D06D}_is1) (Version: 1.12.4.14 - GAS Tecnologia)
Webcam 1.5 (HKLM-x32\...\{39B78651-6FD2-4752-BE68-C3BDB6F2D9EE}) (Version: 1.5 - OEM)
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3528.0331 - Microsoft Corporation)
WinRAR 5.31 (64-bit) (HKLM\...\WinRAR archiver) (Version: 5.31.0 - win.rar GmbH)
==================== Exame Personalizado CLSID (Whitelisted): ==========================
(Se uma entrada for incluída na fixlist, será removida do Registro. O arquivo não será movido, a menos que seja colocado separadamente.)
CustomCLSID: HKU\S-1-5-21-53648705-1422202379-1495276300-1006_Classes\CLSID\{162C6FB5-44D3-435B-903D-E613FA093FB5}\InprocServer32 -> C:\Users\Paul_rodrigues\AppData\Local\Microsoft\OneDrive\17.3.6390.0509\amd64\FileCoAuthLib64.dll ()
CustomCLSID: HKU\S-1-5-21-53648705-1422202379-1495276300-1006_Classes\CLSID\{71DCE5D6-4B57-496B-AC21-CD5B54EB93FD}\localserver32 -> C:\Users\Paul_rodrigues\AppData\Local\Microsoft\OneDrive\17.3.6390.0509\FileCoAuth.exe (Microsoft Corporation)
==================== Tarefas Agendadas (Whitelisted) =============
(Se uma entrada for incluída na fixlist, será removida do Registro. O arquivo não será movido, a menos que seja colocado separadamente.)
Task: {2339DF4B-9F63-42A5-9C5B-F6280213C351} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack2016 => C:\Program Files\Microsoft Office\root\Office16\msoia.exe [2016-08-14] (Microsoft Corporation)
Task: {2F7D091E-9BBB-41CE-A31A-9F66962A28B9} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [2016-07-31] (Microsoft Corporation)
Task: {3354615E-2A1A-4322-A051-54CFE2FA23CF} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn2016 => C:\Program Files\Microsoft Office\root\Office16\msoia.exe [2016-08-14] (Microsoft Corporation)
Task: {36ADE586-5975-4A42-AA37-06A58B418760} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2016-06-20] (Google Inc.)
Task: {48FE957D-A8C6-427B-B8C9-7C7EA0EC70F3} - System32\Tasks\Motorola Device Manager Update => C:\Program Files (x86)\Motorola Mobility\Motorola Device Manager\MotorolaDeviceManagerUpdate.exe [2014-10-30] ()
Task: {58DAF597-FB46-4341-9F9D-AF93D761F294} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2016-06-15] (Piriform Ltd)
Task: {8682EF2A-536E-4AC8-B1F5-192D74A66BFB} - System32\Tasks\avast! Emergency Update => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [2016-08-21] (AVAST Software)
Task: {88700A09-68E9-4EDB-B0B1-B260F1E46237} - System32\Tasks\SafeZone scheduled Autoupdate 1471831413 => C:\Program Files\AVAST Software\SZBrowser\launcher.exe [2016-08-09] (Avast Software)
Task: {89671950-A016-4254-B29B-54AF13796A41} - System32\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d => C:\Program Files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\Bootstrap.exe [2012-04-16] (Intel Corporation)
Task: {898AC356-A617-4A46-A857-9245115EA40F} - System32\Tasks\Motorola Device Manager Initial Update => C:\Program Files (x86)\Motorola Mobility\Motorola Device Manager\MotorolaDeviceManagerUpdate.exe [2014-10-30] ()
Task: {C6CFB893-10F6-4C81-B693-F25AF12BA60A} - System32\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d-Logon => C:\Program Files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\Bootstrap.exe [2012-04-16] (Intel Corporation)
Task: {C79531AC-C6AC-4F2A-A55D-E72B3B5CF2E5} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2016-06-20] (Google Inc.)
Task: {C7A24C13-DF61-4FE2-853A-7D04E842C89B} - System32\Tasks\AVAST Software\Avast settings backup => C:\Program Files\Common Files\AV\avast! Antivirus\backup.exe [2016-08-21] (AVAST Software)
Task: {F2862F7F-6B0E-4176-BFEA-5A34097E864D} - System32\Tasks\OneDrive Standalone Update Task => C:\Users\1\AppData\Local\Microsoft\OneDrive\17.3.6517.0809\OneDriveStandaloneUpdater.exe [2016-08-28] (Microsoft Corporation)
Task: {F34903CB-6371-4A15-8B87-6C9E4F6A9CD4} - System32\Tasks\Microsoft\Office\Office Subscription Maintenance => C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonx64\Microsoft Shared\Office16\OLicenseHeartbeat.exe [2016-08-14] (Microsoft Corporation)
Task: {F4725AB5-D590-4627-BBE3-9B29191C795F} - System32\Tasks\Microsoft\Office\Office Automatic Updates => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [2016-07-31] (Microsoft Corporation)
(Se uma entrada for incluída na fixlist, o arquivo da tarefa (.job) será movido. O arquivo que está sendo executado pela tarefa não será movido.)
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d-Logon.job => C:\Program Files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\Bootstrap.exe
Task: C:\Windows\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d.job => C:\Program Files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\Bootstrap.exe
==================== Atalhos =============================
(As entradas podem ser listadas para serem restauradas ou removidas.)
==================== Módulos Carregados (Whitelisted) ==============
2016-06-30 05:23 - 2016-06-30 05:23 - 00592384 _____ () C:\Users\Home_51\AppData\Local\MEGAsync\ShellExtX64.dll
2016-08-17 17:54 - 2016-08-17 17:54 - 00959168 _____ () C:\Users\Paul_rodrigues\AppData\Local\Microsoft\OneDrive\17.3.6390.0509\amd64\ClientTelemetry.dll
2016-06-20 21:32 - 2012-08-03 13:34 - 00094208 _____ () C:\Windows\System32\IccLibDll_x64.dll
2016-08-08 16:22 - 2016-08-02 20:41 - 02366280 _____ () C:\Program Files (x86)\Google\Chrome\Application\52.0.2743.116\libglesv2.dll
2016-08-08 16:22 - 2016-08-02 20:40 - 00107848 _____ () C:\Program Files (x86)\Google\Chrome\Application\52.0.2743.116\libegl.dll
2016-08-08 16:21 - 2016-08-02 20:04 - 31541952 _____ () C:\Program Files (x86)\Google\Chrome\Application\52.0.2743.116\PepperFlash\pepflashplayer.dll
2016-08-21 22:55 - 2016-08-21 22:55 - 00169064 _____ () C:\Program Files\AVAST Software\Avast\JsonRpcServer.dll
2016-08-21 22:55 - 2016-08-21 22:55 - 00482928 _____ () C:\Program Files\AVAST Software\Avast\ffl2.dll
2016-09-01 08:40 - 2016-09-01 08:40 - 03017728 _____ () C:\Program Files\AVAST Software\Avast\defs\16090102\algo.dll
2014-04-07 11:31 - 2014-04-07 11:31 - 00172032 _____ () C:\Program Files (x86)\Motorola Mobility\Motorola Device Manager\css_core.dll
2016-08-21 22:55 - 2016-08-21 22:55 - 48936448 _____ () C:\Program Files\AVAST Software\Avast\libcef.dll
2016-06-29 00:51 - 2016-06-29 00:51 - 00016384 _____ () C:\Windows\assembly\NativeImages_v4.0.30319_32\PSIClient\23ae651b7c58816ab7e53f2165c92fac\PSIClient.ni.dll
2016-06-21 07:57 - 2012-06-25 09:41 - 01198912 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\ACE.dll
==================== Alternate Data Streams (Whitelisted) =========
(Se uma entrada for incluída na fixlist, somente o ADS será removido.)
AlternateDataStreams: C:\3590F75ABA9E485486C100C1A9D4FF06ZZZ..Z.....ZZZZZ:1 [882]
AlternateDataStreams: C:\Windows\system32\Drivers\wsddfac.sys:X5ZN8aGXs4 [1198]
==================== Modo de Segurança (Whitelisted) ===================
(Se uma entrada for incluída na fixlist, será removida do Registro. O valor "AlternateShell" será restaurado.)
==================== Associação (Whitelisted) ===============
(Se uma entrada for incluída na fixlist, o ítem no Registro será restaurado para o padrão ou removido.)
==================== Internet Explorer confiável/restrito ===============
(Se uma entrada for incluída na fixlist, será removida do Registro.)
==================== Hosts Conteúdo: ===============================
(Se necessário, a diretiva Hosts: pode ser incluída na fixlist para redefinir o Hosts.)
2009-07-13 23:34 - 2009-06-10 18:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts
==================== Outras Áreas ============================
(Atualmente não há nenhuma correção automática para esta seção.)
HKU\S-1-5-21-53648705-1422202379-1495276300-1006\Control Panel\Desktop\\Wallpaper -> C:\Users\Paul_rodrigues\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
DNS Servers: 187.122.127.61 - 187.122.127.37
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 0)
Firewall do Windows está desabilitado.
==================== MSCONFIG/TASK MANAGER ítens desabilitados ==
(Atualmente não há nenhuma correção automática para esta seção.)
MSCONFIG\startupreg: CCleaner Monitoring => "C:\Program Files\CCleaner\CCleaner64.exe" /MONITOR
==================== Regras do Firewall (Whitelisted) ===============
(Se uma entrada for incluída na fixlist, será removida do Registro. O arquivo não será movido, a menos que seja colocado separadamente.)
FirewallRules: [SPPSVC-In-TCP-NoScope] => (Allow) %SystemRoot%\system32\sppsvc.exe
FirewallRules: [SPPSVC-In-TCP] => (Allow) %SystemRoot%\system32\sppsvc.exe
FirewallRules: [TCP Query User{347E7EEA-BB5C-49BA-A0E1-7C0902C11A57}C:\program files (x86)\google\chrome\application\chrome.exe] => (Allow) C:\program files (x86)\google\chrome\application\chrome.exe
FirewallRules: [UDP Query User{680D7068-D4C7-4836-AF29-8D3B507B27A2}C:\program files (x86)\google\chrome\application\chrome.exe] => (Allow) C:\program files (x86)\google\chrome\application\chrome.exe
FirewallRules: [{6AC77676-B7D8-414E-BCFB-01CB0D9C59C2}] => (Block) C:\program files (x86)\google\chrome\application\chrome.exe
FirewallRules: [{945E8512-F467-4661-9EA3-84D5487672B5}] => (Block) C:\program files (x86)\google\chrome\application\chrome.exe
FirewallRules: [TCP Query User{24179FE4-7F1E-4697-AC9C-1E03C9502312}C:\users\paul_rodrigues\appdata\roaming\utorrent\utorrent.exe] => (Allow) C:\users\paul_rodrigues\appdata\roaming\utorrent\utorrent.exe
FirewallRules: [UDP Query User{C6E6E3BB-4DAF-4D54-84C8-F5515CFC2B40}C:\users\paul_rodrigues\appdata\roaming\utorrent\utorrent.exe] => (Allow) C:\users\paul_rodrigues\appdata\roaming\utorrent\utorrent.exe
==================== Pontos de Restauração =========================
26-08-2016 07:44:57 Ponto de Verificação Agendado
==================== Dispositivos Apresentando Falhas No Gerenciador =============
Name: JMicron PCI Express Gigabit Ethernet Adapter
Description: JMicron PCI Express Gigabit Ethernet Adapter
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: JMicron Technology Corp.
Service: JME
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.
==================== Erros no Log de eventos: =========================
Erros em Aplicativos:
==================
Error: (09/01/2016 07:35:20 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Nome de aplicativo com falha: SYSHOME_51-PC.exe, versão: 0.0.0.0, carimbo de hora: 0x578bac9c
Nome do módulo de falhas: KERNELBASE.dll, versão: 6.1.7601.23418, carimbo de hora: 0x5708a89c
Código de exceção: 0xe053534f
Deslocamento com falha: 0x000000000001a06d
Identificação do processo com falha: 0x%9
Hora de início do aplicativo com falha: 0xSYSHOME_51-PC.exe0
Caminho do aplicativo com falha: SYSHOME_51-PC.exe1
FCaminho do módulo de falhas: SYSHOME_51-PC.exe2
Identificação do Relatório: SYSHOME_51-PC.exe3
Error: (09/01/2016 07:23:50 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected.
Error: (09/01/2016 06:12:34 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Nome de aplicativo com falha: SYSHOME_51-PC.exe, versão: 0.0.0.0, carimbo de hora: 0x578bac9c
Nome do módulo de falhas: KERNELBASE.dll, versão: 6.1.7601.23418, carimbo de hora: 0x5708a89c
Código de exceção: 0xe053534f
Deslocamento com falha: 0x000000000001a06d
Identificação do processo com falha: 0x%9
Hora de início do aplicativo com falha: 0xSYSHOME_51-PC.exe0
Caminho do aplicativo com falha: SYSHOME_51-PC.exe1
FCaminho do módulo de falhas: SYSHOME_51-PC.exe2
Identificação do Relatório: SYSHOME_51-PC.exe3
Error: (09/01/2016 05:35:19 AM) (Source: Office 2016 Licensing Service) (EventID: 0) (User: )
Description: Event-ID 0
Error: (09/01/2016 05:35:19 AM) (Source: Microsoft Office 16) (EventID: 2011) (User: )
Description: Office Subscription licensing exception: Error Code: 0x803D0010; CorrelationId: {E8FDF63B-6E44-438B-8BDA-54DB52FE25A6}
Error: (09/01/2016 05:35:08 AM) (Source: Microsoft Office 16) (EventID: 2011) (User: )
Description: Office Subscription licensing exception: Error Code: 0x803D0010; CorrelationId: {E8FDF63B-6E44-438B-8BDA-54DB52FE25A6}
Error: (08/31/2016 01:26:25 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected.
Error: (08/31/2016 01:12:32 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected.
Error: (08/31/2016 11:05:15 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected.
Error: (08/31/2016 09:19:02 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected.
Erros de Sistema:
=============
Error: (09/01/2016 10:21:38 AM) (Source: ipnathlp) (EventID: 30013) (User: )
Description: O alocador DHCP se desabilitou sozinho no endereço IP 192.168.0.5, porque o endereço IP está fora do escopo 192.168.137.0/255.255.255.0 do qual os endereços estão sendo alocados para clientes DHCP. Para habilitar o alocador DHCP neste endereço IP, altere o escopo para que inclua o endereço IP ou altere o endereço IP para que ele se encaixe no escopo.
Error: (09/01/2016 10:21:36 AM) (Source: ipnathlp) (EventID: 31004) (User: )
Description: O agente proxy DNS não pôde alocar 0 byte(s) de memória. Talvez isso indique que o sistema esteja com memória virtual insuficiente ou que o gerenciador de memória encontrou um erro interno.
Error: (09/01/2016 10:20:48 AM) (Source: ipnathlp) (EventID: 30013) (User: )
Description: O alocador DHCP se desabilitou sozinho no endereço IP 192.168.0.5, porque o endereço IP está fora do escopo 192.168.137.0/255.255.255.0 do qual os endereços estão sendo alocados para clientes DHCP. Para habilitar o alocador DHCP neste endereço IP, altere o escopo para que inclua o endereço IP ou altere o endereço IP para que ele se encaixe no escopo.
Error: (09/01/2016 10:20:48 AM) (Source: ipnathlp) (EventID: 31004) (User: )
Description: O agente proxy DNS não pôde alocar 0 byte(s) de memória. Talvez isso indique que o sistema esteja com memória virtual insuficiente ou que o gerenciador de memória encontrou um erro interno.
Error: (09/01/2016 09:31:31 AM) (Source: ipnathlp) (EventID: 30013) (User: )
Description: O alocador DHCP se desabilitou sozinho no endereço IP 192.168.0.5, porque o endereço IP está fora do escopo 192.168.137.0/255.255.255.0 do qual os endereços estão sendo alocados para clientes DHCP. Para habilitar o alocador DHCP neste endereço IP, altere o escopo para que inclua o endereço IP ou altere o endereço IP para que ele se encaixe no escopo.
Error: (09/01/2016 09:31:31 AM) (Source: ipnathlp) (EventID: 31004) (User: )
Description: O agente proxy DNS não pôde alocar 0 byte(s) de memória. Talvez isso indique que o sistema esteja com memória virtual insuficiente ou que o gerenciador de memória encontrou um erro interno.
Error: (09/01/2016 08:39:41 AM) (Source: ipnathlp) (EventID: 30013) (User: )
Description: O alocador DHCP se desabilitou sozinho no endereço IP 192.168.0.5, porque o endereço IP está fora do escopo 192.168.137.0/255.255.255.0 do qual os endereços estão sendo alocados para clientes DHCP. Para habilitar o alocador DHCP neste endereço IP, altere o escopo para que inclua o endereço IP ou altere o endereço IP para que ele se encaixe no escopo.
Error: (09/01/2016 08:39:41 AM) (Source: ipnathlp) (EventID: 31004) (User: )
Description: O agente proxy DNS não pôde alocar 0 byte(s) de memória. Talvez isso indique que o sistema esteja com memória virtual insuficiente ou que o gerenciador de memória encontrou um erro interno.
Error: (09/01/2016 08:39:39 AM) (Source: ipnathlp) (EventID: 30013) (User: )
Description: O alocador DHCP se desabilitou sozinho no endereço IP 169.254.49.137, porque o endereço IP está fora do escopo 192.168.137.0/255.255.255.0 do qual os endereços estão sendo alocados para clientes DHCP. Para habilitar o alocador DHCP neste endereço IP, altere o escopo para que inclua o endereço IP ou altere o endereço IP para que ele se encaixe no escopo.
Error: (09/01/2016 07:36:04 AM) (Source: ipnathlp) (EventID: 1233) (User: )
Description: O ICS_IPV6 não configurou a pilha do IPv6.
==================== Informações da Memória ===========================
Processador: Intel(R) Pentium(R) CPU B950 @ 2.10GHz
Percentagem de memória em uso: 63%
RAM física total: 3536.79 MB
RAM física disponível: 1276.34 MB
Virtual Total: 7071.76 MB
Virtual disponível: 4839.43 MB
==================== Drives ================================
Drive c: () (Fixed) (Total:297.99 GB) (Free:104.84 GB) NTFS
==================== MBR & Tabela de Partições ==================
========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 298.1 GB) (Disk ID: 655EACFC)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=298 GB) - (Type=07 NTFS)
==================== Fim de Addition.txt ============================