Resultado do exame Adicional Farbar Recovery Scan Tool (x64) Versão: 20-11-2016 01
Executado por DAVID (22-11-2016 11:05:50)
Executando a partir de C:\Users\DAVID\Downloads
Windows 10 Pro Versão 1607 (X64) (2016-11-22 12:49:43)
Modo da Inicialização: Normal
==========================================================


==================== Contas: =============================

Administrador (S-1-5-21-4019351913-3247115389-2039848797-500 - Administrator - Disabled)
Convidado (S-1-5-21-4019351913-3247115389-2039848797-501 - Limited - Disabled)
DAVID (S-1-5-21-4019351913-3247115389-2039848797-1000 - Administrator - Enabled) => C:\Users\DAVID
DefaultAccount (S-1-5-21-4019351913-3247115389-2039848797-503 - Limited - Disabled)

==================== Central de Segurança ========================

(Se uma entrada for incluída na fixlist, será removida.)

AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Programas Instalados ======================

(Somente os programas adwares com a indicação "Oculto" podem ser adicionados à fixlist para desocultá-los. Os programas adwares devem ser desinstalados manualmente.)

µTorrent (HKU\S-1-5-21-4019351913-3247115389-2039848797-1000\...\uTorrent) (Version: 3.4.4.40911 - BitTorrent Inc.)
Adobe Acrobat Reader DC - Português (HKLM-x32\...\{AC76BA86-7AD7-1046-7B44-AC0F074E4100}) (Version: 15.020.20042 - Adobe Systems Incorporated)
Adobe Digital Editions 2.0 (HKLM-x32\...\Adobe Digital Editions 2.0) (Version: 2.0 - Adobe Systems Incorporated)
ALPS Touch Pad Driver (HKLM\...\{9F72EF8B-AEC9-4CA5-B483-143980AFD6FD}) (Version: 8.100.1623.127 - Alps Electric)
ArcSoft TotalMedia 3.5 (HKLM-x32\...\{29E44E9D-ACB2-4D2D-849F-5361C941B7E1}) (Version: 3.5.7.307 - ArcSoft)
Ashampoo Burning Studio 15 v.15.0.0 (HKLM-x32\...\{91B33C97-5B38-0A92-D04A-A0F26F3F87D4}_is1) (Version: 15.0.0 - Ashampoo GmbH & Co. KG)
Atheros Communications Inc.(R) AR81Family Gigabit/Fast Ethernet Driver (HKLM-x32\...\{3108C217-BE83-42E4-AE9E-A56A2A92E549}) (Version: 2.0.14.15 - Atheros Communications Inc.)
Atheros WLAN Client Installation Program (HKLM-x32\...\{28006915-2739-4EBE-B5E8-49B25D32EB33}) (Version: 9.0 - Atheros)
ChromecastApp (HKU\S-1-5-21-4019351913-3247115389-2039848797-1000\...\{079ede36-133d-44b0-8053-c7c1fa8d2e0d}_is1) (Version: 1.5.1693.0 - Google Inc.)
Claro (HKLM-x32\...\Claro) (Version: 23.009.05.05.150 - Huawei Technologies Co.,Ltd)
Claro 4GMax Hostless Modem (HKLM-x32\...\{AEFF9E60-3E93-41EE-9895-311F7D1C5FFD}) (Version: 1.0.0.2 - ZTE Corporation)
Conexant HD Audio (HKLM\...\CNXT_AUDIO_HDA) (Version: 8.66.16.50 - Conexant)
Dolby Digital Plus Advanced Audio (HKLM\...\{B0BFC63F-EA07-419E-960B-3FB2ED5DD0B2}) (Version: 7.6.5.1 - Dolby Laboratories Inc)
do-search uninstall (HKLM-x32\...\do-search uninstall) (Version: - do-search) <==== ATENÇÃO
ELAN Touchpad 11.15.0.18_X64 (HKLM\...\Elantech) (Version: 11.15.0.18 - ELAN Microelectronic Corp.)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 54.0.2840.99 - Google Inc.)
Google Update Helper (x32 Version: 1.3.24.15 - Google Inc.) Hidden
Google Update Helper (x32 Version: 1.3.31.5 - Google Inc.) Hidden
HP Deskjet 2050 J510 series Ajuda (HKLM-x32\...\{7A3DF2E2-CF13-44FB-A93E-F71D5381DB3F}) (Version: 140.0.61.61 - Hewlett Packard)
HP Deskjet 2050 J510 series Estudo de aprimoramento de produtos (HKLM\...\{8D71EFB0-B1EF-4478-92D2-A65DB23AC460}) (Version: 28.0.1313.0 - Hewlett-Packard Co.)
HP Deskjet 2050 J510 series Software básico do dispositivo (HKLM\...\{2DCBB45E-AA03-4089-87E7-EC17E606D738}) (Version: 28.0.1313.0 - Hewlett-Packard Co.)
HP Photo Creations (HKLM-x32\...\HP Photo Creations) (Version: 1.0.0.7702 - HP)
HP Update (HKLM-x32\...\{912D30CF-F39E-4B31-AD9A-123C6B794EE2}) (Version: 5.005.002.002 - Hewlett-Packard)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 9.17.10.3517 - Intel Corporation)
Java 8 Update 60 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86418060F0}) (Version: 8.0.600.27 - Oracle Corporation)
K-Lite Mega Codec Pack 10.6.5 (HKLM-x32\...\KLiteCodecPack_is1) (Version: 10.6.5 - )
Lenovo EasyCamera (HKLM-x32\...\{E0A7ED39-8CD6-4351-93C3-69CCA00D12B4}) (Version: 6.2.9200.10279 - Realtek Semiconductor Corp.)
Microsoft Office Professional Plus 2013 (HKLM-x32\...\Office15.PROPLUS) (Version: 15.0.4420.1017 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}) (Version: 8.0.59192 - Microsoft Corporation)
MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
Revisores de Texto do Microsoft Office 2013 – Português do Brasil (x32 Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 16.6.4.19 - Synaptics Incorporated)
TeamViewer 10 (HKLM-x32\...\TeamViewer) (Version: 10.0.47484 - TeamViewer)
Tv IR (HKLM-x32\...\InstallShield_{9B2F5A60-B69E-4BD4-A457-1A1009CAC017}) (Version: 1.00.0000 - Your Company Name)
Tv IR (x32 Version: 1.00.0000 - Your Company Name) Hidden
Warsaw 1.12.4.14 64 bits (HKLM\...\{20E60725-16C8-4FB9-8BC2-AF92C5F8D06D}_is1) (Version: 1.12.4.14 - GAS Tecnologia)
WinRAR 5.21 (32-bit) (HKLM-x32\...\WinRAR archiver) (Version: 5.21.0 - win.rar GmbH)

==================== Exame Personalizado CLSID (Whitelisted): ==========================

(Se uma entrada for incluída na fixlist, será removida do Registro. O arquivo não será movido, a menos que seja colocado separadamente.)

CustomCLSID: HKU\S-1-5-21-4019351913-3247115389-2039848797-1000_Classes\CLSID\{590C4387-5EBD-4D46-8A84-CD0BA2EF2856}\InprocServer32 -> C:\Users\DAVID\AppData\Local\Google\Update\1.3.30.3\psuser_64.dll => Nenhum Arquivo
CustomCLSID: HKU\S-1-5-21-4019351913-3247115389-2039848797-1000_Classes\CLSID\{59B55F04-DE14-4BB8-92FF-C4A22EF2E5F4}\InprocServer32 -> C:\Users\DAVID\AppData\Local\Google\Update\1.3.31.5\psuser_64.dll (Google Inc.)
CustomCLSID: HKU\S-1-5-21-4019351913-3247115389-2039848797-1000_Classes\CLSID\{793EE463-1304-471C-ADF1-68C2FFB01247}\InprocServer32 -> C:\Users\DAVID\AppData\Local\Google\Update\1.3.29.5\psuser_64.dll => Nenhum Arquivo
CustomCLSID: HKU\S-1-5-21-4019351913-3247115389-2039848797-1000_Classes\CLSID\{E8CF3E55-F919-49D9-ABC0-948E6CB34B9F}\InprocServer32 -> C:\Users\DAVID\AppData\Local\Google\Update\1.3.31.5\psuser_64.dll (Google Inc.)

==================== Tarefas Agendadas (Whitelisted) =============

(Se uma entrada for incluída na fixlist, será removida do Registro. O arquivo não será movido, a menos que seja colocado separadamente.)

Task: {013681BA-FFCD-4149-A906-B0083D1A96DA} - System32\Tasks\Microsoft\Windows\Media Center\ehDRMInit => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {05E8E209-CC37-483B-8586-02BF3386B67E} - \Microsoft\Windows\Setup\GWXTriggers\Logon-5d -> Nenhum Arquivo <==== ATENÇÃO
Task: {0CC9F9D4-70FD-4031-ABF1-37E4C1F34E82} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscovery => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {0E48E341-638C-4D9E-9B7E-564BA3BC13F6} - System32\Tasks\Microsoft\Windows\Media Center\RegisterSearch => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {1474C3C1-6D48-4B0B-B93A-C46BDD14A914} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscoveryW1 => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {16E239DC-CA7E-4B32-867F-31D2B9EAE99E} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-30] (Google Inc.)
Task: {1FF95230-9227-45F0-8508-A6AAEB0C2556} - System32\Tasks\Microsoft\Windows\Media Center\ActivateWindowsSearch => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {3A95828F-6E0E-4448-898C-37559D136AC5} - System32\Tasks\Microsoft\Windows\Media Center\PvrScheduleTask => C:\WINDOWS\ehome\mcupdate.exe
Task: {3FFD3EAB-A11B-415A-B586-046E2CAB9AFB} - System32\Tasks\Microsoft\Windows\Media Center\mcupdate_scheduled => C:\WINDOWS\ehome\mcupdate.exe
Task: {41789631-E8F1-4779-94F1-DE36F64EB260} - \Microsoft\Windows\Setup\GWXTriggers\OutOfIdle-5d -> Nenhum Arquivo <==== ATENÇÃO
Task: {4B8A6EA9-7780-4E0D-A818-846EF757E78C} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-4019351913-3247115389-2039848797-1000UA => C:\Users\DAVID\AppData\Local\Google\Update\GoogleUpdate.exe [2016-02-15] (Google Inc.)
Task: {6263C011-B877-48F0-AD46-3F5A856A9207} - System32\Tasks\LaunchPreSignup => C:\Program Files (x86)\OLBPre\OLBPre.exe [2015-05-21] () <==== ATENÇÃO
Task: {63DE98C7-58D4-4AE2-AE87-05561B4AECAC} - \Microsoft\Windows\Setup\gwx\refreshgwxconfig -> Nenhum Arquivo <==== ATENÇÃO
Task: {653D2BEF-2D6C-4903-8671-6C00F0ECE7D0} - System32\Tasks\Microsoft\Windows\Media Center\SqlLiteRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe
Task: {6B07911C-E87A-41F6-BC16-8881B8E5926C} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack => C:\Program Files\Microsoft Office\Office15\msoia.exe [2012-10-01] (Microsoft Corporation)
Task: {733312D8-4A4C-4C71-8C48-DD3FDAD45AE1} - System32\Tasks\Microsoft\Windows\Media Center\ObjectStoreRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe
Task: {7653F8C1-3A68-4785-AEA2-AB5A70385114} - \Microsoft\Windows\Setup\gwx\launchtrayprocess -> Nenhum Arquivo <==== ATENÇÃO
Task: {78459370-4E43-482C-8067-DA64CE0C95E2} - \Microsoft\Windows\Setup\GWXTriggers\OutOfSleep-5d -> Nenhum Arquivo <==== ATENÇÃO
Task: {7A2EDC87-354E-4D4F-8683-481B52EC884B} - System32\Tasks\Microsoft\Windows\Windows Activation Technologies\OatTask =>
Task: {7E8F7611-E52A-46AB-9ECE-1301AB61BB14} - \Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B -> Nenhum Arquivo <==== ATENÇÃO
Task: {80F179DF-9B60-4CA1-9984-E5FE45237256} - System32\Tasks\Microsoft\Windows\Media Center\DispatchRecoveryTasks => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {8136208F-0769-4544-8D3B-AB7E98426E78} - System32\Tasks\Microsoft\Windows\Media Center\OCURDiscovery => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {847A0E86-FCFB-46CF-B367-8B77FBC9EB81} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn => C:\Program Files\Microsoft Office\Office15\msoia.exe [2012-10-01] (Microsoft Corporation)
Task: {8D2168AF-EC44-45B0-9580-E21F477A63D9} - \Microsoft\Windows\Setup\gwx\refreshgwxconfigandcontent -> Nenhum Arquivo <==== ATENÇÃO
Task: {9A3B0FA8-A828-4CAC-A5DD-D3BC827252EC} - \OfficeSoftwareProtectionPlatform\SvcRestartTask -> Nenhum Arquivo <==== ATENÇÃO
Task: {9C980584-C396-4770-BBF4-BB837BEF7FCF} - \Microsoft\Windows\Setup\GWXTriggers\Time-5d -> Nenhum Arquivo <==== ATENÇÃO
Task: {A3764A8E-8584-4B0A-A35C-D8B8C1D9142C} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-30] (Google Inc.)
Task: {AD9D5274-4548-43CB-A152-36D2443452CC} - System32\Tasks\OneDrive Standalone Update Task => C:\Users\TEMP\AppData\Local\Microsoft\OneDrive\17.3.6517.0809\OneDriveStandaloneUpdater.exe <==== ATENÇÃO
Task: {AEACCCF0-BE6F-4C95-89DF-0AFA33704018} - System32\Tasks\Microsoft\Windows\Media Center\RecordingRestart => C:\WINDOWS\ehome\ehrec.exe
Task: {AF342F77-57A3-47A3-BC98-61D3DFA57841} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscoveryW2 => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {B000F75C-BE8E-4E4B-B894-10104C9FCCB2} - System32\Tasks\Microsoft\Windows\Media Center\MediaCenterRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe
Task: {B54150FD-0D60-4D05-8090-3F45CD86F12A} - System32\Tasks\Microsoft\Windows\Media Center\mcupdate => C:\WINDOWS\ehome\mcupdate.exe
Task: {B623F190-F840-4A47-B22E-B4441FDFF0C1} - System32\Tasks\Microsoft\Windows\Media Center\ReindexSearchRoot => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {BCCA0A23-2327-4573-947C-2BED70C3DBD7} - System32\Tasks\Microsoft\Windows\Media Center\InstallPlayReady => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {C26F23A8-38B3-4D57-AB01-68726A65E9B2} - System32\Tasks\Microsoft\Windows\Media Center\ConfigureInternetTimeService => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {C9F33100-4D3A-4E71-AB09-A0E3FE5B898C} - \Microsoft\Windows\Setup\GWXTriggers\MachineUnlock-5d -> Nenhum Arquivo <==== ATENÇÃO
Task: {CB16DAB0-BBD0-4741-BC61-2C5FC6251258} - System32\Tasks\Microsoft\Windows\Media Center\UpdateRecordPath => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {D426196A-5BA8-43E3-ABC1-F5E5A0F5BF48} - System32\Tasks\Microsoft\Windows\Media Center\PvrRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe
Task: {D7D19BA9-FB83-4782-B51B-91FF89AD0C8D} - \Microsoft\Windows\Setup\GWXTriggers\Telemetry-4xd -> Nenhum Arquivo <==== ATENÇÃO
Task: {DA0A29D0-518B-414F-B622-D50380B7A471} - System32\Tasks\Microsoft\Windows\Media Center\OCURActivate => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {DB54DD17-08AB-4D26-90D7-C01D5A21543D} - \Microsoft\Windows\Setup\gwx\refreshgwxcontent -> Nenhum Arquivo <==== ATENÇÃO
Task: {E21037CA-7E79-4281-8C10-B6941F31E6B3} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2016-10-21] (Adobe Systems Incorporated)
Task: {F8B8574C-7DB9-4348-BF09-BB87A9024356} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-4019351913-3247115389-2039848797-1000Core => C:\Users\DAVID\AppData\Local\Google\Update\GoogleUpdate.exe [2016-02-15] (Google Inc.)
Task: {F9D2DF6A-EB54-4D83-9FB2-C7AE9E15E8C8} - System32\Tasks\Microsoft\Windows\Media Center\PeriodicScanRetry => C:\WINDOWS\ehome\MCUpdate.exe
Task: {FF5EB8C5-C429-4186-8FF0-BFB718536CA1} - System32\Tasks\HPCustParticipation HP Deskjet 2050 J510 series => C:\Program Files\HP\HP Deskjet 2050 J510 series\Bin\HPCustPartic.exe [2012-10-02] (Hewlett-Packard Co.)

(Se uma entrada for incluída na fixlist, o arquivo da tarefa (.job) será movido. O arquivo que está sendo executado pela tarefa não será movido.)

Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-4019351913-3247115389-2039848797-1000Core.job => C:\Users\DAVID\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-4019351913-3247115389-2039848797-1000UA.job => C:\Users\DAVID\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\Trend Micro Inspect of Platinum.job => C:\Program Files\Trend Micro\Titanium\plugin\Pt\win32\Inspect\Inspect.exe

==================== Atalhos =============================

(As entradas podem ser listadas para serem restauradas ou removidas.)

ShortcutWithArgument: C:\Users\DAVID\Desktop\Inicializador de aplicativos do Google Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> --show-app-list
ShortcutWithArgument: C:\Users\DAVID\Desktop\Pessoa 2 - Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> --disable-quic
ShortcutWithArgument: C:\Users\DAVID\Desktop\fotos\Google Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> --disable-quic
ShortcutWithArgument: C:\Users\DAVID\AppData\Local\Google\Chrome\User Data\Inicializador de aplicativos do Google Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> --show-app-list
ShortcutWithArgument: C:\Users\DAVID\AppData\Local\Google\Chrome\User Data\Profile 4\Web Applications\_crx_coobgpohoikkiipiblmjeljniedjpjpf\Google Search.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> --profile-directory="Profile 4" --app-id=coobgpohoikkiipiblmjeljniedjpjpf
ShortcutWithArgument: C:\Users\DAVID\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google Chrome\Inicializador de aplicativos do Google Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> --show-app-list
ShortcutWithArgument: C:\Users\DAVID\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Aplicativos do Google Chrome\Videostream for Google Chromecast™.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> --profile-directory="Profile 5" --app-id=cnciopoikihiagdjbjpnocolokfelagl
ShortcutWithArgument: C:\Users\DAVID\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) ->
ShortcutWithArgument: C:\Users\DAVID\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Google Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) ->
ShortcutWithArgument: C:\Users\DAVID\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\ImplicitAppShortcuts\ff13ca23fee04978\Pessoa 2 - Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> --profile-directory="Profile 5"
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) ->
ShortcutWithArgument: C:\Users\Public\Desktop\Claro 4GMax.lnk -> C:\Program Files (x86)\4G Hostless Modem\Claro 4GMax\LaunchWebUI.exe () -> hxxp://m.home

==================== Módulos Carregados (Whitelisted) ==============

2016-07-16 07:42 - 2016-07-16 07:42 - 00231424 _____ () C:\WINDOWS\SYSTEM32\ism32k.dll
2016-11-22 06:49 - 2016-11-22 06:49 - 02681200 _____ () C:\WINDOWS\system32\CoreUIComponents.dll
2011-03-14 11:27 - 2011-03-14 11:27 - 00346976 _____ () C:\ProgramData\DatacardService\HWDeviceService64.exe
2016-02-15 22:36 - 2013-01-21 04:46 - 00657504 _____ () C:\ProgramData\Claro\OnlineUpdate\ouc.exe
2015-06-01 21:00 - 2015-06-01 21:00 - 00102912 _____ () C:\Windows\System32\IccLibDll_x64.dll
2015-04-21 10:49 - 2013-07-09 14:26 - 00455424 _____ () C:\Program Files (x86)\4G Hostless Modem\Claro 4GMax\CheckNDISPort_df.exe
2015-04-21 10:49 - 2013-07-09 14:09 - 00446208 _____ () C:\Program Files (x86)\4G Hostless Modem\Claro 4GMax\CancelAutoPlay_df.exe
2010-04-21 11:40 - 2010-04-21 11:40 - 00692296 _____ () C:\Program Files (x86)\TV IR\TV IR.exe
2016-11-22 10:51 - 2015-03-31 07:08 - 00026408 _____ () C:\Program Files\Trend Micro\AMSP\boost_system-vc110-mt-1_57.dll
2016-11-22 10:51 - 2015-03-31 07:08 - 00058320 _____ () C:\Program Files\Trend Micro\AMSP\boost_date_time-vc110-mt-1_57.dll
2016-11-22 10:51 - 2015-03-31 07:09 - 00686608 _____ () C:\Program Files\Trend Micro\AMSP\sqlite3.dll
2016-11-22 10:51 - 2015-03-31 07:08 - 00110320 _____ () C:\Program Files\Trend Micro\AMSP\boost_thread-vc110-mt-1_57.dll
2016-11-22 10:51 - 2015-03-31 07:08 - 00036160 _____ () C:\Program Files\Trend Micro\AMSP\boost_chrono-vc110-mt-1_57.dll
2016-11-22 10:51 - 2015-03-31 07:09 - 01314920 _____ () C:\Program Files\Trend Micro\AMSP\libprotobuf.dll
2016-11-22 06:49 - 2016-11-22 06:49 - 02681200 _____ () C:\WINDOWS\SYSTEM32\CoreUIComponents.dll
2016-11-22 08:54 - 2016-11-22 08:54 - 01864384 _____ () C:\Users\DAVID\AppData\Local\Microsoft\OneDrive\17.3.6517.0809_1\amd64\ClientTelemetry.dll
2016-11-22 07:06 - 2016-11-22 07:06 - 09760768 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CortanaApi.dll
2016-11-22 07:06 - 2016-11-22 07:06 - 01401856 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll
2016-11-22 07:06 - 2016-11-22 07:06 - 00757248 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CSGSuggestLib.dll
2016-11-22 07:06 - 2016-11-22 07:06 - 01033216 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Actions.dll
2016-11-22 07:06 - 2016-11-22 07:06 - 02424320 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.BackgroundTask.dll
2016-11-22 07:06 - 2016-11-22 07:06 - 04853760 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\RemindersUI.dll
2016-11-22 09:45 - 2016-07-24 13:44 - 00110320 _____ () C:\ProgramData\Trend Micro Installer\TrendMicro_Download_1479822322\SupportTool\64bit\boost_thread-vc110-mt-1_57.dll
2016-11-22 09:45 - 2016-07-24 13:44 - 00058320 _____ () C:\ProgramData\Trend Micro Installer\TrendMicro_Download_1479822322\SupportTool\64bit\boost_date_time-vc110-mt-1_57.dll
2016-11-22 09:45 - 2016-07-24 13:44 - 00026408 _____ () C:\ProgramData\Trend Micro Installer\TrendMicro_Download_1479822322\SupportTool\64bit\boost_system-vc110-mt-1_57.dll
2016-11-22 09:45 - 2016-07-24 13:44 - 00036160 _____ () C:\ProgramData\Trend Micro Installer\TrendMicro_Download_1479822322\SupportTool\64bit\boost_chrono-vc110-mt-1_57.dll
2016-11-22 06:49 - 2016-11-22 06:49 - 00134656 _____ () C:\Windows\ShellExperiences\Windows.UI.Shell.SharedUtilities.dll
2016-11-22 07:06 - 2016-11-22 07:06 - 00474112 _____ () C:\Windows\ShellExperiences\QuickActions.dll
2016-02-15 22:36 - 2012-09-18 06:08 - 00011362 _____ () C:\ProgramData\Claro\OnlineUpdate\mingwm10.dll
2016-02-15 22:36 - 2013-01-21 04:46 - 02417152 _____ () C:\ProgramData\Claro\OnlineUpdate\QtCore4.dll
2016-02-15 22:36 - 2012-09-18 06:08 - 00043008 _____ () C:\ProgramData\Claro\OnlineUpdate\libgcc_s_dw2-1.dll
2016-02-15 22:36 - 2013-01-21 04:46 - 01148416 _____ () C:\ProgramData\Claro\OnlineUpdate\QtNetwork4.dll
2016-02-15 22:36 - 2013-01-21 04:46 - 00843264 _____ () C:\ProgramData\Claro\OnlineUpdate\QueryStrategy.dll
2016-02-15 22:36 - 2013-01-21 04:46 - 00398336 _____ () C:\ProgramData\Claro\OnlineUpdate\QtXml4.dll
2016-11-22 08:54 - 2016-11-22 08:54 - 01383616 _____ () C:\Users\DAVID\AppData\Local\Microsoft\OneDrive\17.3.6517.0809_1\ClientTelemetry.dll
2016-11-22 08:54 - 2016-11-22 08:54 - 00118976 _____ () C:\Users\DAVID\AppData\Local\Microsoft\OneDrive\17.3.6517.0809_1\FileSyncViews.dll
2015-05-01 11:48 - 2007-04-19 09:33 - 00035584 _____ () C:\Program Files (x86)\ArcSoft\TotalMedia 3.5\uPiApi.dll
2015-05-01 11:48 - 2007-04-19 09:29 - 00273216 _____ () C:\Program Files (x86)\ArcSoft\TotalMedia 3.5\magengin.dll
2015-05-01 11:48 - 2007-04-19 09:39 - 00436992 _____ () C:\Program Files (x86)\ArcSoft\TotalMedia 3.5\fpxlib.dll
2015-05-01 11:48 - 2007-04-19 09:29 - 00187136 _____ () C:\Program Files (x86)\ArcSoft\TotalMedia 3.5\kgl.dll
2016-11-14 19:14 - 2016-11-08 16:29 - 01819240 _____ () C:\Program Files (x86)\Google\Chrome\Application\54.0.2840.99\libglesv2.dll
2016-11-14 19:14 - 2016-11-08 16:29 - 00093288 _____ () C:\Program Files (x86)\Google\Chrome\Application\54.0.2840.99\libegl.dll
2010-04-21 11:08 - 2010-04-21 11:08 - 00159744 _____ () C:\Program Files (x86)\TV IR\RmCard.dll
2008-01-15 00:40 - 2008-01-15 00:40 - 00053248 _____ () C:\Program Files (x86)\TV IR\LWExt.dll
2009-03-09 11:52 - 2009-03-09 11:52 - 00053248 _____ () C:\Program Files (x86)\TV IR\tmir.dll

==================== Alternate Data Streams (Whitelisted) =========

(Se uma entrada for incluída na fixlist, somente o ADS será removido.)

AlternateDataStreams: C:\Program Files (x86)\GbPlugin:IncompleteStartProcessProtection.cnt [10]
AlternateDataStreams: C:\Program Files (x86)\GbPlugin:u6eBQrM0Z2K3FKLVBMG8dY3IkKT2rqFO+Sf68h8fDg== [32]
AlternateDataStreams: C:\WINDOWS\system32\Drivers\wsddfac.sys:X5ZN8aGXs4 [1198]
AlternateDataStreams: C:\ProgramData\GbPlugin:IncompleteStartGbprcm.cnt [10]
AlternateDataStreams: C:\Users\Todos os Usuários\GbPlugin:IncompleteStartGbprcm.cnt [10]

==================== Modo de Segurança (Whitelisted) ===================

(Se uma entrada for incluída na fixlist, será removida do Registro. O valor "AlternateShell" será restaurado.)


==================== Associação (Whitelisted) ===============

(Se uma entrada for incluída na fixlist, o ítem no Registro será restaurado para o padrão ou removido.)


==================== Internet Explorer confiável/restrito ===============

(Se uma entrada for incluída na fixlist, será removida do Registro.)

IE trusted site: HKU\S-1-5-21-4019351913-3247115389-2039848797-1000\...\caixa.gov.br -> hxxps://imagem.caixa.gov.br
IE trusted site: HKU\S-1-5-21-4019351913-3247115389-2039848797-1000\...\trendmicro.com -> hxxps://pwm.trendmicro.com

==================== Hosts Conteúdo: ===============================

(Se necessário, a diretiva Hosts: pode ser incluída na fixlist para redefinir o Hosts.)

2009-07-13 22:34 - 2009-06-10 17:00 - 00000824 ____N C:\WINDOWS\system32\Drivers\etc\hosts


==================== Outras Áreas ============================

(Atualmente não há nenhuma correção automática para esta seção.)

HKU\S-1-5-21-4019351913-3247115389-2039848797-1000\Control Panel\Desktop\\Wallpaper -> C:\Windows\web\wallpaper\WALLPAPER.jpg
DNS Servers: 192.168.1.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 0) (ConsentPromptBehaviorUser: 1) (EnableLUA: 1)
Firewall do Windows está habilitado.

==================== MSCONFIG/TASK MANAGER ítens desabilitados ==


==================== Regras do Firewall (Whitelisted) ===============

(Se uma entrada for incluída na fixlist, será removida do Registro. O arquivo não será movido, a menos que seja colocado separadamente.)

FirewallRules: [vm-monitoring-nb-session] => (Allow) LPort=139
FirewallRules: [MSMQ-In-TCP] => (Allow) %systemroot%\system32\mqsvc.exe
FirewallRules: [MSMQ-Out-TCP] => (Allow) %systemroot%\system32\mqsvc.exe
FirewallRules: [MSMQ-In-UDP] => (Allow) %systemroot%\system32\mqsvc.exe
FirewallRules: [MSMQ-Out-UDP] => (Allow) %systemroot%\system32\mqsvc.exe
FirewallRules: [WCF-NetTcpActivator-In-TCP-64bit] => (Allow) LPort=808
FirewallRules: [{24E8C5A4-393E-4C86-A271-53C80FC1B875}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
FirewallRules: [{F2204960-6BC5-4684-9703-94DF673D50EB}] => (Allow) C:\Program Files\Diebold\Warsaw\core.exe
FirewallRules: [{AF005C4A-7DC4-4BF1-99C0-E4D438F8F015}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
FirewallRules: [{70D12C43-933C-4F0D-9DF4-6B966EEB29B7}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
FirewallRules: [{6CAE3736-CEE1-49E9-B26C-4B3F1555EB96}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe
FirewallRules: [{330948E4-BE6B-4A13-8792-9BDD1CC82712}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe
FirewallRules: [{5E1F4E1C-F7B8-4023-9317-3BEFD253ADBD}] => (Allow) C:\Program Files (x86)\ArcSoft\TotalMedia 3.5\TotalMedia.exe
FirewallRules: [{1F9CE445-E72E-4B97-9E5F-2DCA7C463438}] => (Allow) C:\Program Files (x86)\ArcSoft\TotalMedia 3.5\TotalMedia.exe
FirewallRules: [{E768E9A9-BB2D-4B9E-A8F9-EC0129B59387}] => (Allow) C:\Program Files\HP\HP Deskjet 2050 J510 series\Bin\USBSetup.exe
FirewallRules: [{0E9548C0-30F3-4030-A013-EAF0A6BFA7FD}] => (Allow) C:\Users\DAVID\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{0C629628-6AB9-4C62-92F1-F428CA89ABA8}] => (Allow) C:\Users\DAVID\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{32693436-CB8E-4E36-87CC-07EE706824A4}] => (Allow) C:\Users\DAVID\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{57F31CAE-4D35-4B71-9720-E48DB7193F1A}] => (Allow) C:\Users\DAVID\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{853E0441-E74B-4BE4-8597-0BDF2FBBF4BC}] => (Allow) C:\Users\DAVID\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{404DD47C-9A7A-4BAF-B4F8-DFECE7119F6F}] => (Allow) C:\Users\DAVID\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{0A4AD0CA-31D4-4298-B939-FBC558848873}] => (Allow) LPort=5556
FirewallRules: [{B1567C14-F45D-4CFC-BE74-992AFAC9024B}] => (Allow) LPort=5558
FirewallRules: [TCP Query User{DCB4F118-F004-409E-8E07-765C4B7B8B06}C:\users\david\appdata\local\temp\showmypc\smpc3160\smpcph.exe] => (Allow) C:\users\david\appdata\local\temp\showmypc\smpc3160\smpcph.exe
FirewallRules: [UDP Query User{21E80516-56A9-48E0-9127-5BC43B439180}C:\users\david\appdata\local\temp\showmypc\smpc3160\smpcph.exe] => (Allow) C:\users\david\appdata\local\temp\showmypc\smpc3160\smpcph.exe

==================== Pontos de Restauração =========================

22-11-2016 10:40:02 Removed TotalMedia Setup

==================== Dispositivos Apresentando Falhas No Gerenciador =============


==================== Erros no Log de eventos: =========================

Erros em Aplicativos:
==================
Error: (11/22/2016 11:01:54 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Nome do aplicativo com falha: jucheck.exe, versão: 2.8.60.27, carimbo de data/hora: 0x55c116b1
Nome do módulo com falha: jucheck.exe, versão: 2.8.60.27, carimbo de data/hora: 0x55c116b1
Código de exceção: 0x40000015
Deslocamento da falha: 0x00052d24
ID do processo com falha: 0x1890
Hora de início do aplicativo com falha: 0x01d244d152dc406e
Caminho do aplicativo com falha: C:\Program Files (x86)\Common Files\Java\Java Update\jucheck.exe
Caminho do módulo com falha: C:\Program Files (x86)\Common Files\Java\Java Update\jucheck.exe
ID do Relatório: ca9d7932-8116-4c87-90f9-470b9f30c77a
Nome completo do pacote com falha:
ID do aplicativo relativo ao pacote com falha:

Error: (11/22/2016 10:53:04 AM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: LIRO)
Description: Falha na ativação do aplicativo Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy!App com o erro: -2144927141. Veja o log Microsoft-Windows-TWinUI/Operational para obter informações adicionais.

Error: (11/22/2016 10:53:04 AM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: LIRO)
Description: Falha na ativação do aplicativo Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy!App com o erro: -2144927141. Veja o log Microsoft-Windows-TWinUI/Operational para obter informações adicionais.

Error: (11/22/2016 10:49:13 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Nome do aplicativo com falha: Explorer.EXE, versão: 10.0.14393.447, carimbo de data/hora: 0x5819bde0
Nome do módulo com falha: windows.immersiveshell.serviceprovider.dll, versão: 10.0.14393.0, carimbo de data/hora: 0x57899873
Código de exceção: 0x80270233
Deslocamento da falha: 0x0000000000033c25
ID do processo com falha: 0xff4
Hora de início do aplicativo com falha: 0x01d244cf82496a00
Caminho do aplicativo com falha: C:\WINDOWS\Explorer.EXE
Caminho do módulo com falha: C:\Windows\System32\windows.immersiveshell.serviceprovider.dll
ID do Relatório: ac632117-5bb3-4634-bbe4-4fbf21ffcc4d
Nome completo do pacote com falha:
ID do aplicativo relativo ao pacote com falha:

Error: (11/22/2016 10:40:13 AM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: Falha dos Serviços de Criptografia ao processar a chamada de OnIdentity() no Objeto de Gravador do Sistema..

Details:
AddLegacyDriverFiles: Unable to back up image of binary Protocolo Microsoft LLDP.

System Error:
Acesso negado.
.

Error: (11/22/2016 10:34:28 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Nome do aplicativo com falha: Explorer.EXE, versão: 10.0.14393.447, carimbo de data/hora: 0x5819bde0
Nome do módulo com falha: windows.immersiveshell.serviceprovider.dll, versão: 10.0.14393.0, carimbo de data/hora: 0x57899873
Código de exceção: 0x80270233
Deslocamento da falha: 0x0000000000033c25
ID do processo com falha: 0xf88
Hora de início do aplicativo com falha: 0x01d244cd760dc7f4
Caminho do aplicativo com falha: C:\WINDOWS\Explorer.EXE
Caminho do módulo com falha: C:\Windows\System32\windows.immersiveshell.serviceprovider.dll
ID do Relatório: 7cdc3ece-2ff9-4c89-a635-0319657472a7
Nome completo do pacote com falha:
ID do aplicativo relativo ao pacote com falha:

Error: (11/22/2016 10:26:24 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Nome do aplicativo com falha: Explorer.EXE, versão: 10.0.14393.447, carimbo de data/hora: 0x5819bde0
Nome do módulo com falha: windows.immersiveshell.serviceprovider.dll, versão: 10.0.14393.0, carimbo de data/hora: 0x57899873
Código de exceção: 0x80270233
Deslocamento da falha: 0x0000000000033c25
ID do processo com falha: 0xe58
Hora de início do aplicativo com falha: 0x01d244cc53357f92
Caminho do aplicativo com falha: C:\WINDOWS\Explorer.EXE
Caminho do módulo com falha: C:\Windows\System32\windows.immersiveshell.serviceprovider.dll
ID do Relatório: 5246fdd3-1d8c-449f-9b51-be485e81edc4
Nome completo do pacote com falha:
ID do aplicativo relativo ao pacote com falha:

Error: (11/22/2016 10:08:52 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Nome do aplicativo com falha: Explorer.EXE, versão: 10.0.14393.447, carimbo de data/hora: 0x5819bde0
Nome do módulo com falha: windows.immersiveshell.serviceprovider.dll, versão: 10.0.14393.0, carimbo de data/hora: 0x57899873
Código de exceção: 0x80270233
Deslocamento da falha: 0x0000000000033c25
ID do processo com falha: 0xfbc
Hora de início do aplicativo com falha: 0x01d244c9d812976c
Caminho do aplicativo com falha: C:\WINDOWS\Explorer.EXE
Caminho do módulo com falha: C:\Windows\System32\windows.immersiveshell.serviceprovider.dll
ID do Relatório: 6565c92b-738f-4257-b0ae-e33d37e38434
Nome completo do pacote com falha:
ID do aplicativo relativo ao pacote com falha:

Error: (11/22/2016 09:38:10 AM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: LIRO)
Description: Falha na ativação do aplicativo Microsoft.WindowsMaps_8wekyb3d8bbwe!App com o erro: -2144927148. Veja o log Microsoft-Windows-TWinUI/Operational para obter informações adicionais.

Error: (11/22/2016 09:33:07 AM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: LIRO)
Description: Falha na ativação do aplicativo Microsoft.WindowsMaps_8wekyb3d8bbwe!App com o erro: -2144927148. Veja o log Microsoft-Windows-TWinUI/Operational para obter informações adicionais.


Erros de Sistema:
=============
Error: (11/22/2016 10:53:04 AM) (Source: DCOM) (EventID: 10010) (User: LIRO)
Description: O servidor App não se registrou no DCOM dentro do tempo limite necessário.

Error: (11/22/2016 10:53:03 AM) (Source: DCOM) (EventID: 10010) (User: LIRO)
Description: O servidor App não se registrou no DCOM dentro do tempo limite necessário.

Error: (11/22/2016 10:49:49 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Não foi possível iniciar o serviço Gbpddreg svc devido ao seguinte erro:
O sistema não pode encontrar o arquivo especificado.

Error: (11/22/2016 10:49:49 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Não foi possível iniciar o serviço Warsaw File Access svc devido ao seguinte erro:
O sistema não pode encontrar o arquivo especificado.

Error: (11/22/2016 10:49:49 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Não foi possível iniciar o serviço Warsaw File Access svc devido ao seguinte erro:
O sistema não pode encontrar o arquivo especificado.

Error: (11/22/2016 10:49:15 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Não foi possível iniciar o serviço Gbpddreg svc devido ao seguinte erro:
O sistema não pode encontrar o arquivo especificado.

Error: (11/22/2016 10:49:11 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Não foi possível iniciar o serviço Warsaw File Access svc devido ao seguinte erro:
O sistema não pode encontrar o arquivo especificado.

Error: (11/22/2016 10:49:10 AM) (Source: DCOM) (EventID: 10016) (User: AUTORIDADE NT)
Description: As configurações de permissão específico do aplicativo não concedem permissão Local Ativação para o aplicativo de Servidor COM com CLSID
{8D8F4F83-3594-4F07-8369-FC3C3CAE4919}
e APPID
{F72671A9-012C-4725-9D2F-2A4D32D65169}
ao usuário AUTORIDADE NT\SISTEMA SID (S-1-5-18) do endereço LocalHost (Usando LRPC) que está sendo executado no contêiner de aplicativos Não Disponível SID (Não Disponível). Essa permissão de segurança pode ser modificada com a ferramenta administrativa Serviços de Componentes.

Error: (11/22/2016 10:48:49 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Não foi possível iniciar o serviço NetMsmqActivator devido ao seguinte erro:
O serviço não respondeu à requisição de início ou controle em tempo hábil.

Error: (11/22/2016 10:48:49 AM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Tempo limite esgotado (30000 milissegundos) ao aguardar a conexão do serviço NetMsmqActivator.


CodeIntegrity:
===================================
Date: 2016-11-22 08:22:02.429
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe because the set of per-page image hashes could not be found on the system.

Date: 2016-11-22 08:22:02.407
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe because the set of per-page image hashes could not be found on the system.

Date: 2016-11-22 08:22:02.388
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe because the set of per-page image hashes could not be found on the system.

Date: 2016-11-22 08:22:02.368
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe because the set of per-page image hashes could not be found on the system.


==================== Informações da Memória ===========================

Processador: Intel(R) Core(TM) i3-2328M CPU @ 2.20GHz
Percentagem de memória em uso: 58%
RAM física total: 3962.85 MB
RAM física disponível: 1628.42 MB
Virtual Total: 7930.85 MB
Virtual disponível: 5479.77 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:238.43 GB) (Free:169.91 GB) NTFS ==>[drive com componentes de inicialização (obtido através de BCD)]
Drive e: (BACKUP) (Fixed) (Total:227.33 GB) (Free:227.21 GB) NTFS

==================== MBR & Tabela de Partições ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 465.8 GB) (Disk ID: 889EB720)
Partition 1: (Active) - (Size=238.4 GB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=227.3 GB) - (Type=07 NTFS)

==================== Fim de Addition.txt ============================