Publicité
Publicité
Format du document : text/plain
Prévisualisation
Resultado do exame Adicional Farbar Recovery Scan Tool (x64) Versão: 21-12-2016
Executado por THELMA (29-12-2016 12:39:59)
Executando a partir de C:\Users\THELMA\Desktop
Windows 10 Pro Versão 1607 (X64) (2016-10-04 13:10:32)
Modo da Inicialização: Normal
==========================================================
==================== Contas: =============================
Administrador (S-1-5-21-859808900-955868838-1426738782-500 - Administrator - Disabled)
Convidado (S-1-5-21-859808900-955868838-1426738782-501 - Limited - Disabled)
DefaultAccount (S-1-5-21-859808900-955868838-1426738782-503 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-859808900-955868838-1426738782-1057 - Limited - Enabled)
THELMA (S-1-5-21-859808900-955868838-1426738782-1000 - Administrator - Enabled) => C:\Users\THELMA
==================== Central de Segurança ========================
(Se uma entrada for incluÃda na fixlist, será removida.)
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AV: avast! Antivirus (Enabled - Out of date) {17AD7D40-BA12-9C46-7131-94903A54AD8B}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: avast! Antivirus (Enabled - Out of date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}
FW: avast! Antivirus (Disabled) {2F96FC65-F07D-9D1E-5A6E-3DA5C487EAF0}
==================== Programas Instalados ======================
(Somente os programas adwares com a indicação "Oculto" podem ser adicionados à fixlist para desocultá-los. Os programas adwares devem ser desinstalados manualmente.)
µTorrent (HKU\S-1-5-21-859808900-955868838-1426738782-1000\...\uTorrent) (Version: 3.4.9.43057 - BitTorrent Inc.)
Adobe Flash Player 24 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 24.0.0.186 - Adobe Systems Incorporated)
Adobe Reader XI (11.0.18) - Português (HKLM-x32\...\{AC76BA86-7AD7-1046-7B44-AB0000000001}) (Version: 11.0.18 - Adobe Systems Incorporated)
AMD Catalyst Control Center (HKLM-x32\...\WUCCCApp) (Version: 1.00.0000 - AMD)
Assistente de Instalação Certisign (HKLM-x32\...\{6FBA74BD-149F-4521-B921-FFCC84876864}) (Version: 3.13.0.1 - CERTISIGN)
aTube Catcher (HKLM-x32\...\aTube Catcher) (Version: 3.8.7971 - DsNET Corp)
Audacity 2.0.5 (HKLM-x32\...\Audacity_is1) (Version: 2.0.5 - Audacity Team)
Avast Free Antivirus (HKLM-x32\...\avast) (Version: 12.1.2272 - AVAST Software)
CBR Reader (HKLM-x32\...\{EDAAC216-AC73-4152-9654-E12FE5A69F5D}_is1) (Version: - cbrreader.com)
Cities XXL (HKLM-x32\...\Q2l0aWVzWFhM_is1) (Version: 1 - )
Claro 3G (HKLM-x32\...\{93D34EE3-99B3-4DB1-8B0A-0A657466F90D}) (Version: 1.0.0.1 - )
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
DAEMON Tools Lite (HKLM-x32\...\DAEMON Tools Lite) (Version: 4.48.1.0347 - Disc Soft Ltd)
Dev-C++ (HKLM-x32\...\Dev-C++) (Version: 5.11 - Bloodshed Software)
Epson Easy Photo Print 2 (HKLM-x32\...\{922E2D91-9314-45AA-9AEF-E585F93B59A9}) (Version: 2.6.1.0 - Seiko Epson Corporation)
Epson Event Manager (HKLM-x32\...\{4B22C430-7EA8-4534-8358-376FD900B953}) (Version: 3.10.0042 - Seiko Epson Corporation)
EPSON L375 Series Printer Uninstall (HKLM\...\EPSON L375 Series) (Version: - SEIKO EPSON Corporation)
EPSON Scan (HKLM-x32\...\EPSON Scanner) (Version: - Seiko Epson Corporation)
EpsonNet Print (HKLM\...\{15A0F113-BF2C-4C12-8AA8-42AE0D9AE1C9}) (Version: 3.1.2.0 - SEIKO EPSON Corporation)
FBReader for Windows (HKLM-x32\...\FBReader for Windows) (Version: - )
FlashPeak Slimjet (HKLM-x32\...\Slimjet) (Version: 9.0.4.0 - FlashPeak Inc.)
FLV Player (HKU\S-1-5-21-859808900-955868838-1426738782-1000\...\FLV Player) (Version: 1.1 - Somoto Ltd.) <==== ATENÃÃO
FormatFactory 3.3.1.0 (HKLM-x32\...\FormatFactory) (Version: 3.3.1.0 - Format Factory)
Galeria de Fotos (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
GBBD Caixa Economica Federal (HKLM-x32\...\{5d01f486-f32d-462e-8830-cc1d116e8ece}_is1) (Version: 3.12.0.2 - )
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 55.0.2883.87 - Google Inc.)
Google Update Helper (x32 Version: 1.3.25.5 - Google Inc.) Hidden
Google Update Helper (x32 Version: 1.3.32.7 - Google Inc.) Hidden
Java 7 Update 79 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F06417079FF}) (Version: 7.0.790 - Oracle)
Java SE Development Kit 7 Update 79 (64-bit) (HKLM\...\{64A3A4F4-B792-11D6-A78A-00B0D0170790}) (Version: 1.7.0.790 - Oracle)
JetBrains PyCharm Community Edition 2016.2.3 (HKLM-x32\...\PyCharm Community Edition 2016.2.3) (Version: 162.1967.10 - JetBrains s.r.o.)
JetBrains WebStorm 2016.2.4 (HKLM-x32\...\WebStorm 2016.2.4) (Version: 162.2228.20 - JetBrains s.r.o.)
JPG to PDF Pro version 4.0 (HKLM-x32\...\{7C3870C0-067D-4D7F-A56C-68537090AFB2}_is1) (Version: 4.0 - HANSoft, Inc.)
Manual Epson L375 versão 1.0 (HKLM-x32\...\UsersGuideManual Epson L375_is1) (Version: 1.0 - )
Medieval II - Total War (HKLM-x32\...\Medieval II - Total War_is1) (Version: - )
Medieval II Total War (HKLM-x32\...\{C0698BDA-0D29-40EE-8570-A31106DF9AB1}) (Version: 1.02.001 - SEGA)
Microsoft .NET Framework 1.1 (HKLM-x32\...\{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}) (Version: 1.1.4322 - Microsoft)
Microsoft Office Enterprise 2007 (HKLM-x32\...\ENTERPRISE) (Version: 12.0.4518.1014 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{071c9b48-7c32-4621-a0ac-3f809523288f}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 Redistributable - x64 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 Redistributable - x86 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2015 RC Redistributable (x86) - 14.0.22816 (HKLM-x32\...\{714692fa-709b-4925-8170-821d51135f42}) (Version: 14.0.22816.0 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x64) - 14.0.23918 (HKLM-x32\...\{dab68466-3a7d-41a8-a5cf-415e3ff8ef71}) (Version: 14.0.23918.0 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.23918 (HKLM-x32\...\{2e085fd2-a3e4-4b39-8e10-6b8d35f55244}) (Version: 14.0.23918.0 - Microsoft Corporation)
Microsoft Visual J# .NET Redistributable Package 1.1 (HKLM-x32\...\{1A655D51-1423-48A3-B748-8F5A0BE294C8}) (Version: 1.1.4322 - Microsoft)
Microsoft WSE 3.0 Runtime (HKLM-x32\...\{E3E71D07-CD27-46CB-8448-16D4FB29AA13}) (Version: 3.0.5305.0 - Microsoft Corp.)
Movie Maker (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
MPC-HC 1.7.0 (HKLM-x32\...\{2624B969-7135-4EB1-B0F6-2D8C397B45F7}_is1) (Version: 1.7.0.7858 - MPC-HC Team)
MPC-HC 1.7.10 (64-bit) (HKLM\...\{2ACBF1FA-F5C3-4B19-A774-B22A31F231B9}_is1) (Version: 1.7.10 - MPC-HC Team)
MSVC80_x64_v2 (Version: 1.0.3.0 - Nokia) Hidden
MSVC80_x86_v2 (x32 Version: 1.0.3.0 - Nokia) Hidden
MSVC90_x64 (Version: 1.0.1.2 - Nokia) Hidden
MSVC90_x86 (x32 Version: 1.0.1.2 - Nokia) Hidden
MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
Navegador PJe versão 1.0 (HKLM-x32\...\{46F4A182-9233-411B-9D0C-6D2C417A87E1}_is1) (Version: 1.0 - Conselho Nacional de Justiça - CNJ)
Need for Speed⢠Most Wanted (HKLM-x32\...\{ADE91A13-434D-4229-00BC-182BAD607303}) (Version: - )
Nokia Connectivity Cable Driver (HKLM-x32\...\{29373274-977E-413C-A4DE-DC0F8E80C429}) (Version: 7.1.172.0 - Nokia)
Oracle Database 11g Express Edition (HKLM-x32\...\InstallShield_{05A7B662-80A3-4EB9-AE1D-89A62449431C}) (Version: 11.2.0 - Oracle Corporation)
Oracle Database 11g Express Edition (Version: 11.2.0 - Oracle Corporation) Hidden
PokedexBW by 4Dialga2 version 1.00 (HKLM-x32\...\{5B8184CC-BE86-415B-926A-7E948B18D1BF}_is1) (Version: 1.00 - 4Dialga2)
PowerISO (HKLM-x32\...\PowerISO) (Version: 5.8 - Power Software Ltd)
Python 3.5.2 (32-bit) (HKU\S-1-5-21-859808900-955868838-1426738782-1000\...\{cf72a2ab-2f1d-49fd-a0d7-1065e6357e1e}) (Version: 3.5.2150.0 - Python Software Foundation)
Python 3.5.2 Core Interpreter (32-bit) (x32 Version: 3.5.2150.0 - Python Software Foundation) Hidden
Python 3.5.2 Development Libraries (32-bit) (x32 Version: 3.5.2150.0 - Python Software Foundation) Hidden
Python 3.5.2 Documentation (32-bit) (x32 Version: 3.5.2150.0 - Python Software Foundation) Hidden
Python 3.5.2 Executables (32-bit) (x32 Version: 3.5.2150.0 - Python Software Foundation) Hidden
Python 3.5.2 pip Bootstrap (32-bit) (x32 Version: 3.5.2150.0 - Python Software Foundation) Hidden
Python 3.5.2 Standard Library (32-bit) (x32 Version: 3.5.2150.0 - Python Software Foundation) Hidden
Python 3.5.2 Tcl/Tk Support (32-bit) (x32 Version: 3.5.2150.0 - Python Software Foundation) Hidden
Python 3.5.2 Test Suite (32-bit) (x32 Version: 3.5.2150.0 - Python Software Foundation) Hidden
Python 3.5.2 Utility Scripts (32-bit) (x32 Version: 3.5.2150.0 - Python Software Foundation) Hidden
Python Launcher (HKLM-x32\...\{963ECCDD-F09F-4C24-9367-8B5D748AA7C8}) (Version: 3.5.2121.0 - Python Software Foundation)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7040 - Realtek Semiconductor Corp.)
Requerimento de Empresário (HKU\S-1-5-21-859808900-955868838-1426738782-1000\...\Requerimento de Empresário) (Version: - )
SafeZone Stable 1.51.2220.62 (x32 Version: 1.51.2220.62 - Avast Software) Hidden
Sid Meiers Civilization VI (HKLM-x32\...\Sid Meiers Civilization VI_is1) (Version: - )
Skype⢠7.30 (HKLM-x32\...\{FC965A47-4839-40CA-B618-18F486F042C6}) (Version: 7.30.105 - Skype Technologies S.A.)
Software Updater (HKLM-x32\...\{8DBC5A0A-31C4-46C7-B252-6B593EA11A87}) (Version: 4.3.7 - SEIKO EPSON CORPORATION)
Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)
Suplemento Microsoft Salvar como PDF ou XPS para programas do Microsoft Office 2007 (HKLM-x32\...\{90120000-00B2-0416-0000-0000000FF1CE}) (Version: 12.0.4518.1019 - Microsoft Corporation)
The Sims 4 (HKLM-x32\...\The Sims 4_R.G. Mechanics_is1) (Version: - R.G. Mechanics, ProZorg_tm)
The Sims 4 Get Together Addon Pack (HKLM-x32\...\VGhlU2ltczQ=_is1) (Version: 1 - )
Unity Web Player (HKU\S-1-5-21-859808900-955868838-1426738782-1000\...\UnityWebPlayer) (Version: 5.3.5f1 - Unity Technologies ApS)
Warsaw 1.13.0.525 64 bits (HKLM\...\{20E60725-16C8-4FB9-8BC2-AF92C5F8D06D}_is1) (Version: 1.13.0.525 - GAS Tecnologia)
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3528.0331 - Microsoft Corporation)
WinDS PRO 2015.10.09 (HKLM\...\{4237FF56-4BD0-481E-BD44-C1A8DDA9C753}_is1) (Version: 2015.10.09 - WinDS PRO Central)
WinRAR 5.31 (64-bit) (HKLM\...\WinRAR archiver) (Version: 5.31.0 - win.rar GmbH)
Yahoo! Powered (HKLM-x32\...\{5E21B6E1-0EA1-6761-BF21-17E16FA1C461}) (Version: - )
==================== Exame Personalizado CLSID (Whitelisted): ==========================
(Se uma entrada for incluÃda na fixlist, será removida do Registro. O arquivo não será movido, a menos que seja colocado separadamente.)
CustomCLSID: HKU\S-1-5-21-859808900-955868838-1426738782-1000_Classes\CLSID\{0783EB25-59F8-4F02-B6B0-F1D4349F0000}\InprocServer32 -> C:\Users\THELMA\AppData\Local\GAS Tecnologia\GBBD\npsf_bb_64.dll => Nenhum Arquivo
CustomCLSID: HKU\S-1-5-21-859808900-955868838-1426738782-1000_Classes\CLSID\{0783EB25-59F8-4F02-B6B0-F1D4349F0007}\InprocServer32 -> C:\Users\THELMA\AppData\Local\GAS Tecnologia\GBBD\npsf_cef_64.dll (GAS Tecnologia)
CustomCLSID: HKU\S-1-5-21-859808900-955868838-1426738782-1000_Classes\CLSID\{0783EB25-59F8-4F02-B6B1-F1D4349F0000}\InprocServer32 -> C:\Users\THELMA\AppData\Local\GAS Tecnologia\GBBD\npsf_bb_64.dll => Nenhum Arquivo
CustomCLSID: HKU\S-1-5-21-859808900-955868838-1426738782-1000_Classes\CLSID\{0783EB25-59F8-4F02-B6B1-F1D4349F0007}\InprocServer32 -> C:\Users\THELMA\AppData\Local\GAS Tecnologia\GBBD\npsf_cef_64.dll (GAS Tecnologia)
==================== Tarefas Agendadas (Whitelisted) =============
(Se uma entrada for incluÃda na fixlist, será removida do Registro. O arquivo não será movido, a menos que seja colocado separadamente.)
Task: {00A85B12-BFCD-459D-ACA1-BE1D0284BDF6} - \Microsoft\Windows\Setup\gwx\launchtrayprocess -> Nenhum Arquivo <==== ATENÃÃO
Task: {03CFC9FB-9802-4DE6-B1A2-A8F24CE4A8B3} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2016-12-14] (Adobe Systems Incorporated)
Task: {07510D2D-CE95-4640-94A1-9074811C8326} - \Microsoft\Windows\Setup\EOONotify -> Nenhum Arquivo <==== ATENÃÃO
Task: {095E7759-B7D8-4F34-A211-97019B25B29A} - \Microsoft\Windows\Setup\gwx\rundetector -> Nenhum Arquivo <==== ATENÃÃO
Task: {0E6F6A33-EC75-4B7C-B7EF-311C490AF502} - \Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeTime -> Nenhum Arquivo <==== ATENÃÃO
Task: {1C36818B-0F44-4BB2-B6DE-66B64A96ECAB} - \Microsoft\Windows\Setup\gwx\refreshgwxconfig -> Nenhum Arquivo <==== ATENÃÃO
Task: {1FE73DEF-4D88-482D-9809-3A3C0F102998} - System32\Tasks\AdobeAAMUpdater-1.0-TH-PC-AIO-THELMA => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe
Task: {246533C9-D3C6-4E4B-9BFD-1CF403890D50} - System32\Tasks\EPSON L375 Series Update {90583929-0414-440C-8F8C-162C7BDA4705} => C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_YTSN8E.EXE [2013-11-21] (SEIKO EPSON CORPORATION)
Task: {2A509C10-CD61-45DC-919E-FABF43960216} - System32\Tasks\Microsoft\Windows\Media Center\OCURDiscovery => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {2A6E908D-0BA8-4A5E-8DE1-D08EC3C14548} - System32\Tasks\Microsoft\Windows\Media Center\InstallPlayReady => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {2D139EAE-1733-4B06-B6DE-A78C084AE6CC} - \Microsoft\Windows\Setup\GWXTriggers\Logon-5d -> Nenhum Arquivo <==== ATENÃÃO
Task: {30F4F8CA-4F9C-46F1-93DD-CDE84FCC616B} - System32\Tasks\{4884198F-E592-408F-9323-7459C02BB9C9} => pcalua.exe -a F:\Windows\Data\setup.exe -d F:\Windows\Data
Task: {33290EB8-5DF2-4B4F-8BB0-C5C85F811723} - System32\Tasks\{85BD3015-5C6B-46AF-B2B5-4745A4903E41} => pcalua.exe -a C:\Users\THELMA\AppData\Local\Akamai\uninstall.exe
Task: {34B92F9E-CB9A-42A4-9EDB-1EDE49E824FC} - \Microsoft\Windows\Setup\GWXTriggers\OnIdle-5d -> Nenhum Arquivo <==== ATENÃÃO
Task: {3527FD3B-3F59-40CF-BA35-030FCFEB75C0} - System32\Tasks\mans-find => Chrome.exe hxxp://mans-find.org/glamesm
Task: {35EE1452-B2F6-43CB-859B-41D2F5A25442} - System32\Tasks\{978E02BB-845B-40C6-A8C8-C6409718AA60} => pcalua.exe -a "C:\Sim City\OUT OF GAME TOOLS\MAXIS TRANSPORTATION\setup.exe" -d "C:\Sim City\OUT OF GAME TOOLS\MAXIS TRANSPORTATION"
Task: {37E05CB0-67BC-45DB-A39C-4D5E5E5E3DA7} - System32\Tasks\Microsoft\Windows\Media Center\ehDRMInit => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {38A80BD2-DE84-4634-846F-5B660D3E673A} - System32\Tasks\avast! Emergency Update => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [2016-07-11] (AVAST Software)
Task: {395C2CBA-B717-44BA-AF9F-27C7E9C4B25D} - System32\Tasks\SaveSenseLiveUpdateTaskMachineUA => C:\Program Files (x86)\SaveSenseLive\Update\SaveSenseLive.exe <==== ATENÃÃO
Task: {397F539E-C058-46B7-8FE5-CA440AF0F0DD} - System32\Tasks\Microsoft\Windows\Media Center\UpdateRecordPath => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {3B5DB108-9306-4340-A87A-A94BEE30B66C} - System32\Tasks\Microsoft\Windows\Media Center\PeriodicScanRetry => C:\WINDOWS\ehome\MCUpdate.exe
Task: {403E644C-C8D2-43DE-97A7-C57CEF334427} - \Microsoft\Windows\Setup\GWXTriggers\MachineUnlock-5d -> Nenhum Arquivo <==== ATENÃÃO
Task: {41EA73D8-9F39-4A27-BA68-7FF6EDF624C9} - \Microsoft\Windows\Setup\gwx\refreshgwxcontent -> Nenhum Arquivo <==== ATENÃÃO
Task: {4266A574-DFE8-41F4-992C-C10E5499535D} - System32\Tasks\Microsoft\Windows\Media Center\mcupdate_scheduled => C:\WINDOWS\ehome\mcupdate.exe
Task: {457A6ADC-5C28-44C7-8F49-6A3125FEA960} - System32\Tasks\{158330A1-B48C-47F9-8D41-B01EB0A4D70C} => pcalua.exe -a "C:\Program Files (x86)\InstallShield Installation Information\{C0698BDA-0D29-40EE-8570-A31106DF9AB1}\setup.exe" -c -runfromtemp -l0x0009 -removeonly
Task: {463FAC49-EA4F-4480-88DA-AA85E510830B} - System32\Tasks\Microsoft\Windows\Media Center\mcupdate => C:\WINDOWS\ehome\mcupdate.exe
Task: {47DB72CF-F63E-4295-B4DF-3FE93CCDCBB2} - System32\Tasks\Microsoft\Windows\Media Center\RegisterSearch => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {4873C2E8-A85B-4695-B4E1-3C608955CDF5} - System32\Tasks\Microsoft\Windows\Media Center\DispatchRecoveryTasks => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {49B86101-1572-4148-B4C6-296368F45CE5} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-09-01] (Google Inc.)
Task: {4B00A099-276C-4448-8383-AA263282ACED} - System32\Tasks\SaveSense => C:\Users\THELMA\AppData\Roaming\SAVESE~1\UPDATE~1\UPDATE~1.EXE <==== ATENÃÃO
Task: {4E29458D-BBB3-4E63-A043-DD1DACD6C384} - \Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B -> Nenhum Arquivo <==== ATENÃÃO
Task: {50865E48-3EC1-4FFD-A4D0-E8962DA73F1B} - System32\Tasks\{F7CAF778-ED6A-440D-B29A-58F4D981EFA9} => pcalua.exe -a "C:\Sim City\OUT OF GAME TOOLS\SC4 LOT EDITOR INSTALLER.exe" -d "C:\Sim City\OUT OF GAME TOOLS"
Task: {5815C6A8-504D-489D-A751-AF68A3FB9870} - System32\Tasks\{9E42CD3E-5D0D-4DE5-84D4-013AF7098CFE} => pcalua.exe -a C:\Users\THELMA\Videos\Torrents\Sims3EP05Setup.exe -d C:\Users\THELMA\Videos\Torrents
Task: {5938B1E4-6E63-4921-BFDD-55165D8F32E0} - \Microsoft\Windows\Setup\GWXTriggers\Time-Weekend -> Nenhum Arquivo <==== ATENÃÃO
Task: {5EF4DC5F-3997-42BF-B793-D4F0DAA8FB9F} - System32\Tasks\Microsoft\Windows\Media Center\RecordingRestart => C:\WINDOWS\ehome\ehrec.exe
Task: {6772B76C-8B1D-4354-81DA-8467B6B84F4C} - System32\Tasks\Microsoft\Windows\Media Center\OCURActivate => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {6E0B9D27-9CA1-4D69-A830-EA5EE74F5315} - System32\Tasks\Microsoft\Windows\Media Center\ObjectStoreRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe
Task: {6EE5C7B5-46C7-4FC4-9FB4-54A6023CF5A0} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscoveryW2 => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {7B4BFEB8-E6F7-4572-BB1B-A6FD67B2CACD} - System32\Tasks\Microsoft\Windows\Media Center\SqlLiteRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe
Task: {88BE6C91-762C-41A1-A668-A7D70104B301} - System32\Tasks\Microsoft\Windows\Media Center\PvrScheduleTask => C:\WINDOWS\ehome\mcupdate.exe
Task: {900E6DE1-107B-48E2-8C1E-604E4713510F} - \Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeReminderTime -> Nenhum Arquivo <==== ATENÃÃO
Task: {951AFD20-9B0F-423F-A184-5EB7C4771DCA} - System32\Tasks\Microsoft\Windows\Media Center\ReindexSearchRoot => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {9C33EFB8-1D39-44CD-86F7-8D42BC43700A} - System32\Tasks\Microsoft\Windows\Media Center\StartRecording => C:\WINDOWS\ehome\ehrec.exe
Task: {9C468DC2-BFA4-455C-82D2-8B3C92D9E2F9} - System32\Tasks\{EC1594D1-C5ED-4A10-8CEB-E90AD0837FE7} => pcalua.exe -a "C:\Users\THELMA\Documents\SimCity 4\Plugins\TEXTURES\LBT_MegaTexturePack_En\Install_LBT_MegaTexturePack_vol02.exe" -d "C:\Users\THELMA\Documents\SimCity 4\Plugins\TEXTURES\LBT_MegaTexturePack_En"
Task: {9DE58555-9362-418F-99EF-E8E88CCD0652} - \Microsoft\Windows\Setup\GWXTriggers\Time-5d -> Nenhum Arquivo <==== ATENÃÃO
Task: {AA9E8EA2-328B-466D-B909-4966C9AB7F62} - System32\Tasks\EPSON L375 Series Update {F9DE211B-BF7D-4F2B-8730-8D5D8097A5CF} => C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_YTSN8E.EXE [2013-11-21] (SEIKO EPSON CORPORATION)
Task: {B16DE8DC-8E1B-466A-AF78-283F2383D906} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscoveryW1 => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {B4016298-1CB0-4C2F-9CE4-F3D87B20BBE0} - System32\Tasks\Microsoft\Windows\Media Center\MediaCenterRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe
Task: {B9601927-CAA0-4550-BB16-6ECB506875B2} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-09-01] (Google Inc.)
Task: {BBEA04E5-10A2-4453-B7D7-E28E5AEB1A3C} - System32\Tasks\{CA3C83D3-5B2E-431B-AE4B-C65DC09F49AA} => pcalua.exe -a C:\Users\THELMA\AppData\Local\{ABCB9D97-8F63-F12F-E2FB-D4C7C693285F}\uninst.exe -c -FN=""-P=/Uninstall /s /noun /DelSelfDir
Task: {C426D007-E2C5-4A40-9D83-6374EF6C4211} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscovery => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {CD04673E-9D5D-4370-A7B5-1D92BF6B4B2D} - System32\Tasks\Baidu Antivirus Update => C:\Program Files (x86)\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus\BavUpdater.exe
Task: {D09E8806-A52C-45E5-828E-38603B07A0BB} - System32\Tasks\SafeZone scheduled Autoupdate 1468366191 => C:\Program Files\AVAST Software\SZBrowser\launcher.exe [2016-09-06] (Avast Software)
Task: {D0F72223-5119-4894-89FF-AEA273D420BB} - System32\Tasks\Microsoft\Windows\Media Center\PvrRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe
Task: {D146931A-38FB-4F76-A487-F50FABB6D4E6} - \Microsoft\Windows\Setup\GWXTriggers\OutOfSleep-5d -> Nenhum Arquivo <==== ATENÃÃO
Task: {D1B6295C-B874-4A71-B873-9963FFCAA957} - \Update\winRPX -> Nenhum Arquivo <==== ATENÃÃO
Task: {DE44D3C9-F7B0-433B-BD30-963FA7C8FD0D} - \Microsoft\Windows\Setup\GWXTriggers\OutOfIdle-5d -> Nenhum Arquivo <==== ATENÃÃO
Task: {DEB0B577-962B-4DD6-AEC1-BC451FBF031B} - System32\Tasks\Microsoft\Windows\Media Center\ActivateWindowsSearch => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {DECD8253-5D13-4220-A62B-78F253481CE4} - System32\Tasks\Microsoft\Windows\Media Center\ConfigureInternetTimeService => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {E235F205-915C-435C-9262-18FB027F4225} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2016-10-21] (Adobe Systems Incorporated)
Task: {E6BB9979-4D29-455B-BB62-A96A2DC04324} - System32\Tasks\SaveSenseLiveUpdateTaskMachineCore => C:\Program Files (x86)\SaveSenseLive\Update\SaveSenseLive.exe <==== ATENÃÃO
Task: {FD04C7A5-9D2A-4C20-84C2-BB6556DA8310} - \Microsoft\Windows\Setup\gwx\refreshgwxconfigandcontent -> Nenhum Arquivo <==== ATENÃÃO
(Se uma entrada for incluÃda na fixlist, o arquivo da tarefa (.job) será movido. O arquivo que está sendo executado pela tarefa não será movido.)
Task: C:\WINDOWS\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\WINDOWS\Tasks\EPSON L375 Series Update {3B870492-4EF2-4A5B-834E-0DEC3E87F963}.job => C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_YTSN8E.EXE:/EXE:{3B870492-4EF2-4A5B-834E-0DEC3E87F963} /F:UpdateTH\TH-PC-AIO$
Searches for EPSON software updates, and notifies you when updates are available.If this task is disabled or stopped, your EPSON software will not be automatically kept up to date.Thi
Task: C:\WINDOWS\Tasks\EPSON L375 Series Update {90583929-0414-440C-8F8C-162C7BDA4705}.job => C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_YTSN8E.EXE:/EXE:{90583929-0414-440C-8F8C-162C7BDA4705} /F:Update TH\TH-PC-AIO$ÄSearches for EPSON software updates, and notifies you when updates are available.If this task is disabled or stopped, your EPSON software will not be automatically kept up to date.Thi
Task: C:\WINDOWS\Tasks\EPSON L375 Series Update {F9DE211B-BF7D-4F2B-8730-8D5D8097A5CF}.job => C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_YTSN8E.EXE:/EXE:{F9DE211B-BF7D-4F2B-8730-8D5D8097A5CF} /F:Update TH\TH-PC-AIO$ÄSearches for EPSON software updates, and notifies you when updates are available.If this task is disabled or stopped, your EPSON software will not be automatically kept up to date.Thi
Task: C:\WINDOWS\Tasks\SaveSense.job => C:\Users\THELMA\AppData\Roaming\SAVESE~1\UPDATE~1\UPDATE~1.EXE <==== ATENÃÃO
Task: C:\WINDOWS\Tasks\SaveSenseLiveUpdateTaskMachineCore.job => C:\Program Files (x86)\SaveSenseLive\Update\SaveSenseLive.exe <==== ATENÃÃO
Task: C:\WINDOWS\Tasks\SaveSenseLiveUpdateTaskMachineUA.job => C:\Program Files (x86)\SaveSenseLive\Update\SaveSenseLive.exe <==== ATENÃÃO
==================== Atalhos =============================
(As entradas podem ser listadas para serem restauradas ou removidas.)
ShortcutWithArgument: C:\Users\THELMA\Desktop\Slimjet.lnk -> C:\Program Files (x86)\Slimjet\slimjet.exe (FlashPeak Inc.) -> --profile-directory=Default
ShortcutWithArgument: C:\Users\THELMA\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Mail.Ru.lnk -> C:\Windows\System32\rundll32.exe (Microsoft Corporation) -> url,FileProtocolHandler "hxxp://www.mail.ru/cnt/20775012?gp=811035"
ShortcutWithArgument: C:\Users\THELMA\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\ImplicitAppShortcuts\ff13ca23fee04978\Google Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> --profile-directory="Profile 5"
ShortcutWithArgument: C:\Users\THELMA\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\ImplicitAppShortcuts\69639df789022856\Google Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> --profile-directory="Profile 1"
ShortcutWithArgument: C:\Users\THELMA\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\ImplicitAppShortcuts\4242a155fcc27c2b\FlashPeak Slimjet.lnk -> C:\Program Files (x86)\Slimjet\slimjet.exe (FlashPeak Inc.) -> --profile-directory=Default
==================== Módulos Carregados (Whitelisted) ==============
2016-07-16 08:42 - 2016-07-16 08:42 - 00231424 _____ () C:\WINDOWS\SYSTEM32\ism32k.dll
2016-12-15 09:09 - 2016-12-09 07:29 - 02681200 _____ () C:\WINDOWS\system32\CoreUIComponents.dll
2016-12-15 09:09 - 2016-12-09 07:29 - 02681200 _____ () C:\WINDOWS\SYSTEM32\CoreUIComponents.dll
2016-10-04 10:35 - 2016-10-04 10:35 - 01864384 _____ () C:\Users\THELMA\AppData\Local\Microsoft\OneDrive\17.3.6517.0809_1\amd64\ClientTelemetry.dll
2015-08-21 22:09 - 2015-08-21 22:09 - 00127488 _____ () C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Container.Wlan.dll
2016-10-04 08:57 - 2016-10-04 08:57 - 00134656 _____ () C:\Windows\ShellExperiences\Windows.UI.Shell.SharedUtilities.dll
2016-12-15 09:11 - 2016-12-09 06:41 - 00474112 _____ () C:\Windows\ShellExperiences\QuickActions.dll
2016-11-09 01:11 - 2016-11-02 07:21 - 09760768 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CortanaApi.dll
2016-11-09 01:11 - 2016-11-02 07:15 - 01401856 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll
2016-11-09 01:11 - 2016-11-02 07:14 - 00757248 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CSGSuggestLib.dll
2016-11-09 01:11 - 2016-11-02 07:15 - 01033216 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Actions.dll
2016-11-09 01:11 - 2016-11-02 07:16 - 02424320 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.BackgroundTask.dll
2016-11-09 01:11 - 2016-11-02 07:17 - 04853760 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\RemindersUI.dll
2016-12-14 19:48 - 2016-12-14 20:04 - 00072192 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.10.145.0_x64__kzf8qxf38zg5c\SkypeHost.exe
2016-12-14 19:48 - 2016-12-14 20:04 - 00179712 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.10.145.0_x64__kzf8qxf38zg5c\SkypeBackgroundTasks.dll
2016-12-14 19:48 - 2016-12-14 20:04 - 42130432 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.10.145.0_x64__kzf8qxf38zg5c\SkyWrap.dll
2016-12-14 19:48 - 2016-12-14 20:04 - 02216448 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.10.145.0_x64__kzf8qxf38zg5c\roottools.dll
2016-07-11 20:11 - 2016-07-11 20:11 - 00146232 _____ () C:\Program Files\AVAST Software\Avast\JsonRpcServer.dll
2016-12-29 07:00 - 2016-12-29 07:00 - 03131344 _____ () C:\Program Files\AVAST Software\Avast\defs\16122900\algo.dll
2016-07-11 20:11 - 2016-07-11 20:11 - 00479288 _____ () C:\Program Files\AVAST Software\Avast\ffl2.dll
2016-07-11 20:12 - 2016-07-11 20:12 - 48936448 _____ () C:\Program Files\AVAST Software\Avast\libcef.dll
2016-10-04 10:25 - 2016-10-04 10:26 - 01383616 _____ () C:\Users\THELMA\AppData\Local\Microsoft\OneDrive\17.3.6517.0809_1\ClientTelemetry.dll
2016-09-22 10:30 - 2016-09-06 12:00 - 05197312 _____ () C:\Users\THELMA\AppData\Local\Google\Chrome\User Data\SwiftShader\3.3.0.1\libglesv2.dll
2016-09-22 10:30 - 2016-09-06 12:00 - 00147456 _____ () C:\Users\THELMA\AppData\Local\Google\Chrome\User Data\SwiftShader\3.3.0.1\libegl.dll
==================== Alternate Data Streams (Whitelisted) =========
(Se uma entrada for incluÃda na fixlist, somente o ADS será removido.)
AlternateDataStreams: C:\Program Files (x86)\GbPlugin:IncompleteStartProcessProtection.cnt [10]
AlternateDataStreams: C:\WINDOWS\System32:54DF3B62_Cef.gbp [2]
AlternateDataStreams: C:\WINDOWS\system32\Drivers\gbpddfac64.sys:X5ZN8aGvT4 [2010]
AlternateDataStreams: C:\WINDOWS\system32\Drivers\gbpddreg64.sys:X5ZN8aGvT4 [686]
AlternateDataStreams: C:\WINDOWS\system32\Drivers\wsddfac.sys:X5ZN8aGXs4 [2166]
AlternateDataStreams: C:\ProgramData\GbPlugin:IncompleteStartGbprcm.cnt [10]
AlternateDataStreams: C:\Users\Todos os Usuários\GbPlugin:IncompleteStartGbprcm.cnt [10]
==================== Modo de Segurança (Whitelisted) ===================
(Se uma entrada for incluÃda na fixlist, será removida do Registro. O valor "AlternateShell" será restaurado.)
==================== Associação (Whitelisted) ===============
(Se uma entrada for incluÃda na fixlist, o Ãtem no Registro será restaurado para o padrão ou removido.)
==================== Internet Explorer confiável/restrito ===============
(Se uma entrada for incluÃda na fixlist, será removida do Registro.)
IE trusted site: HKU\S-1-5-21-859808900-955868838-1426738782-1000\...\bancobrasil.com.br -> www.bancobrasil.com.br
IE trusted site: HKU\S-1-5-21-859808900-955868838-1426738782-1000\...\bb.com.br -> hxxps://seg.bb.com.br
IE trusted site: HKU\S-1-5-21-859808900-955868838-1426738782-1000\...\caixa.gov.br -> imagem.caixa.gov.br
IE trusted site: HKU\S-1-5-21-859808900-955868838-1426738782-1000\...\caixa.gov.br -> hxxps://imagem.caixa.gov.br
==================== Hosts Conteúdo: ==========================
(Se necessário, a diretiva Hosts: pode ser incluÃda na fixlist para redefinir o Hosts.)
2009-07-13 23:34 - 2016-12-28 09:56 - 00001006 ____N C:\WINDOWS\system32\Drivers\etc\hosts
127.0.0.1 down.baidu2016.com
127.0.0.1 123.sogou.com
127.0.0.1 www.czzsyzgm.com
127.0.0.1 www.czzsyzxl.com
127.0.0.1 union.baidu2019.com
==================== Outras Ãreas ============================
(Atualmente não há nenhuma correção automática para esta seção.)
HKU\S-1-5-21-859808900-955868838-1426738782-1000\Control Panel\Desktop\\Wallpaper -> c:\windows\web\wallpaper\theme1\img1.jpg
DNS Servers: 192.168.15.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Firewall do Windows está desabilitado.
==================== MSCONFIG/TASK MANAGER Ãtens desabilitados ==
MSCONFIG\Services: wuauserv => 2
HKLM\...\StartupApproved\Run: => "Diebold - Warsaw"
HKLM\...\StartupApproved\Run32: => "StartCCC"
HKLM\...\StartupApproved\Run32: => "Baidu Antivirus"
HKLM\...\StartupApproved\Run32: => "BlueStacks Agent"
HKLM\...\StartupApproved\Run32: => "IminentMessenger"
HKLM\...\StartupApproved\Run32: => "Iminent"
HKLM\...\StartupApproved\Run32: => "mobilegeni daemon"
HKU\S-1-5-21-859808900-955868838-1426738782-1000\...\StartupApproved\Run: => "OneDrive"
HKU\S-1-5-21-859808900-955868838-1426738782-1000\...\StartupApproved\Run: => "Steam"
==================== Regras do Firewall (Whitelisted) ===============
(Se uma entrada for incluÃda na fixlist, será removida do Registro. O arquivo não será movido, a menos que seja colocado separadamente.)
FirewallRules: [vm-monitoring-nb-session] => LPort=139
FirewallRules: [MSMQ-In-TCP] => %systemroot%\system32\mqsvc.exe
FirewallRules: [MSMQ-Out-TCP] => %systemroot%\system32\mqsvc.exe
FirewallRules: [MSMQ-In-UDP] => %systemroot%\system32\mqsvc.exe
FirewallRules: [MSMQ-Out-UDP] => %systemroot%\system32\mqsvc.exe
FirewallRules: [WCF-NetTcpActivator-In-TCP-64bit] => LPort=808
FirewallRules: [{083B956D-58DF-43DD-A63D-B089F7D77F45}] => C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
FirewallRules: [{73491728-C13D-48BB-970F-6789B737E605}] => C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
FirewallRules: [{38FF9CE5-CA32-4222-82B0-A23443A819CB}] => C:\Program Files (x86)\TeamViewer\TeamViewer.exe
FirewallRules: [{5B652112-F7CD-48FC-857B-38C3ECA2AE01}] => C:\Program Files (x86)\TeamViewer\TeamViewer.exe
FirewallRules: [{810625B5-5836-4B4C-BB34-6B3B64599800}] => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe
FirewallRules: [{76806FBE-B3E7-4E26-BCAA-AB9B55C06343}] => C:\Program Files\AVAST Software\Avast\Setup\instup.exe
FirewallRules: [UDP Query User{E3E283ED-655A-476B-A258-7C70FD56D786}C:\program files (x86)\slimjet\slimjet.exe] => C:\program files (x86)\slimjet\slimjet.exe
FirewallRules: [TCP Query User{FB86A5EB-D7EA-4895-ACC8-E27933E2A77D}C:\program files (x86)\slimjet\slimjet.exe] => C:\program files (x86)\slimjet\slimjet.exe
FirewallRules: [UDP Query User{CE34AB4C-73DC-4FD6-B133-56E620C779B6}C:\program files (x86)\epson software\event manager\eeventmanager.exe] => C:\program files (x86)\epson software\event manager\eeventmanager.exe
FirewallRules: [TCP Query User{30795E7A-875E-45D9-92CC-3773033BA2F4}C:\program files (x86)\epson software\event manager\eeventmanager.exe] => C:\program files (x86)\epson software\event manager\eeventmanager.exe
FirewallRules: [{D0C86E37-C253-4A69-A494-ED776307C223}] => C:\Program Files (x86)\EPSON Software\Event Manager\EEventManager.exe
FirewallRules: [{4CAC6621-D6C2-4338-8857-DCE4C05B43AB}] => C:\Program Files (x86)\EPSON Software\Event Manager\EEventManager.exe
FirewallRules: [{27281BFB-5037-4B0B-8BEA-4FFAC375A929}] => C:\Users\THELMA\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{671D0370-CC00-49B9-B036-EADE8C514165}] => C:\Users\THELMA\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [TCP Query User{145CE701-8228-4FC5-84FD-2EA2494FFAE9}C:\users\thelma\downloads\utorrent (1).exe] => C:\users\thelma\downloads\utorrent (1).exe
FirewallRules: [UDP Query User{4A9AE008-4655-4049-9B44-5304E28A09FC}C:\users\thelma\downloads\utorrent (1).exe] => C:\users\thelma\downloads\utorrent (1).exe
FirewallRules: [TCP Query User{249E7E90-1C40-48D7-B2AA-8F7D67921917}C:\game\fifa 11\game\fifa.exe] => C:\game\fifa 11\game\fifa.exe
FirewallRules: [UDP Query User{F34414C4-224E-4EC4-BD1D-079DFFC1B3B7}C:\game\fifa 11\game\fifa.exe] => C:\game\fifa 11\game\fifa.exe
FirewallRules: [TCP Query User{62507A52-8743-405F-951C-AA279938201D}C:\game\fifa 11\game\fifa.exe] => C:\game\fifa 11\game\fifa.exe
FirewallRules: [UDP Query User{A90AAC93-B4D3-422F-A4A4-141E2621FBAB}C:\game\fifa 11\game\fifa.exe] => C:\game\fifa 11\game\fifa.exe
FirewallRules: [TCP Query User{16133CD3-60C5-42FC-87EC-D2145B0E0D1B}C:\program files (x86)\psafe\pssmartup.exe] => C:\program files (x86)\psafe\pssmartup.exe
FirewallRules: [UDP Query User{B1B8B6C4-0D2C-409A-84E9-9417B82E928E}C:\program files (x86)\psafe\pssmartup.exe] => C:\program files (x86)\psafe\pssmartup.exe
FirewallRules: [TCP Query User{2791E46F-3BE7-42B4-9025-CA9DE188B247}C:\program files (x86)\konami\pro evolution soccer 2012\pes2012.exe] => C:\program files (x86)\konami\pro evolution soccer 2012\pes2012.exe
FirewallRules: [UDP Query User{40AB34C2-F5EB-4AFF-9714-042C1A78FD19}C:\program files (x86)\konami\pro evolution soccer 2012\pes2012.exe] => C:\program files (x86)\konami\pro evolution soccer 2012\pes2012.exe
FirewallRules: [TCP Query User{7336358B-73A7-41FA-9349-C0ECBD944436}C:\game\fifa 11\game\fifa11.exe] => C:\game\fifa 11\game\fifa11.exe
FirewallRules: [UDP Query User{B0ABFA58-4BB7-4204-9CCB-2E6A9ED1DDB3}C:\game\fifa 11\game\fifa11.exe] => C:\game\fifa 11\game\fifa11.exe
FirewallRules: [{1EDCDD57-F5F4-45AD-AD3A-7A2359A05FA5}] => C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [TCP Query User{883C0205-72C1-492A-B500-ECD704A03572}C:\game\fifa 11\game\fifa11.exe] => C:\game\fifa 11\game\fifa11.exe
FirewallRules: [UDP Query User{A83F70D7-4632-4032-B520-2B5572C88011}C:\game\fifa 11\game\fifa11.exe] => C:\game\fifa 11\game\fifa11.exe
FirewallRules: [TCP Query User{846B1CB7-5AB2-439B-96AA-50983AD45F36}C:\users\thelma\downloads\exe's\eclipse\eclipse.exe] => C:\users\thelma\downloads\exe's\eclipse\eclipse.exe
FirewallRules: [UDP Query User{5CE09FD6-9A3A-4FDD-B668-D28A2952A547}C:\users\thelma\downloads\exe's\eclipse\eclipse.exe] => C:\users\thelma\downloads\exe's\eclipse\eclipse.exe
FirewallRules: [{495414BA-BC0E-44BB-B770-99834FD91CBD}] => C:\Program Files (x86)\Sports Interactive\Football Manager 2010\fm.exe
FirewallRules: [{23716399-7E3D-46D2-A0EC-F28BA54F1324}] => C:\Program Files (x86)\Sports Interactive\Football Manager 2010\fm.exe
FirewallRules: [{B8427E5D-A3C5-4364-8BDE-45DCD3D9F3D7}] => C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{EA1C95A0-A0D1-47E3-90C9-3514C348CD4D}] => C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{37413469-B1CC-404C-A748-796C04B18334}] => C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{65E119F5-B11D-43F8-BC9E-EA779A1FA21C}] => C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{3159157F-48EA-41B3-AF36-09B3117D8ECE}] => C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{BAFD925A-E39B-4D6E-B70D-27DC69DE39ED}] => C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{F1454FB0-BF7D-45D6-9E5E-E6B9F5A028F0}] => C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{EDB12A07-1806-4BB7-8B8F-E4B781FFAC0B}] => C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{D5852FBF-9FC9-41D4-970B-EC106DA34381}] => C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{0604C235-E42B-4202-9117-D60CB8B7CFB2}] => C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{3BD7E688-CDE2-4ED2-9DBB-3D8919649F7C}] => C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{4F501A6A-AD7B-4F95-BA78-52D296000B24}] => C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{D8422C66-728F-431D-903F-FFAB20EB1150}] => C:\Program Files\AVAST Software\Avast\Setup\instup.exe
FirewallRules: [{0BC82083-5268-478F-8D1F-F122C1FBD8FC}] => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe
FirewallRules: [TCP Query User{9D925F5A-858B-4826-8DED-AC81AEFBD54C}C:\program files (x86)\jetbrains\webstorm 2016.2.4\bin\webstorm.exe] => C:\program files (x86)\jetbrains\webstorm 2016.2.4\bin\webstorm.exe
FirewallRules: [UDP Query User{E8118F7B-CC6D-4C49-A69B-105B1129F6A2}C:\program files (x86)\jetbrains\webstorm 2016.2.4\bin\webstorm.exe] => C:\program files (x86)\jetbrains\webstorm 2016.2.4\bin\webstorm.exe
FirewallRules: [{67E8F657-92B7-4BEC-89DE-C3E31D43E082}] => C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe
FirewallRules: [{5EF6049C-4476-4C1F-964A-A31839D5D988}] => LPort=2869
FirewallRules: [{87705817-B48A-4395-958D-41ECB871E1D4}] => LPort=1900
FirewallRules: [TCP Query User{1A7DE0D1-282E-4833-AD75-D41D03C42EDC}C:\users\thelma\videos\torrents\nfs.most.wanted.2012.rich_jc\need for speed most wanted 2\nfs13.exe] => C:\users\thelma\videos\torrents\nfs.most.wanted.2012.rich_jc\need for speed most wanted 2\nfs13.exe
FirewallRules: [UDP Query User{6DEC2F55-4FF6-46A9-A83E-BE2CEF757809}C:\users\thelma\videos\torrents\nfs.most.wanted.2012.rich_jc\need for speed most wanted 2\nfs13.exe] => C:\users\thelma\videos\torrents\nfs.most.wanted.2012.rich_jc\need for speed most wanted 2\nfs13.exe
FirewallRules: [TCP Query User{65AACBD7-455C-4E1E-9CAF-A355F8FBE723}C:\users\thelma\appdata\local\akamai\netsession_win.exe] => C:\users\thelma\appdata\local\akamai\netsession_win.exe
FirewallRules: [UDP Query User{C9FBC057-08A4-47D2-80A3-21CB39762CF2}C:\users\thelma\appdata\local\akamai\netsession_win.exe] => C:\users\thelma\appdata\local\akamai\netsession_win.exe
FirewallRules: [TCP Query User{80E16136-34CB-4275-8A27-FDC4EFB74DB0}C:\program files (x86)\turbine\the lord of the rings online\lotroclient.exe] => C:\program files (x86)\turbine\the lord of the rings online\lotroclient.exe
FirewallRules: [UDP Query User{83D56A4D-26E9-4980-A826-59133F5E2E5D}C:\program files (x86)\turbine\the lord of the rings online\lotroclient.exe] => C:\program files (x86)\turbine\the lord of the rings online\lotroclient.exe
FirewallRules: [{409D9674-413C-4AE5-9F58-03982AFA1AB3}] => C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
FirewallRules: [{81C24FA6-ACF8-4AC3-BEC3-020FF4FEEB8F}] => C:\Program Files\Diebold\Warsaw\core.exe
FirewallRules: [TCP Query User{C8CA92B3-D584-4C17-A2ED-9DAFAD051C50}C:\users\thelma\appdata\roaming\utorrent\updates\3.4.9_43057.exe] => C:\users\thelma\appdata\roaming\utorrent\updates\3.4.9_43057.exe
FirewallRules: [UDP Query User{22D5E18B-B525-4AFB-AA8E-3C3E7502C3A2}C:\users\thelma\appdata\roaming\utorrent\updates\3.4.9_43057.exe] => C:\users\thelma\appdata\roaming\utorrent\updates\3.4.9_43057.exe
FirewallRules: [{EFB38A64-15DC-4D85-8AAA-959848B64C23}] => C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{ED779B75-BE26-4B92-BCA7-3D0EA5598503}] => C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{68227BF5-73AA-49AF-880F-22AD0EC05E76}] => C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe
FirewallRules: [{01143B9B-91F3-4D16-84A8-4AB846D7B81B}] => C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe
FirewallRules: [{DDEED285-EA16-427A-9ABB-C282271B371A}] => C:\Users\THELMA\AppData\Local\Amigo\Application\amigo.exe
FirewallRules: [{A61EEDF8-3C2F-4823-8C5C-CCEC7DDA60BE}] => C:\ProgramData\Microsoft\Network\Dsq\network\sysnetwk.exe
==================== Pontos de Restauração =========================
27-12-2016 10:45:10 Ponto de Verificação Agendado
==================== Dispositivos Apresentando Falhas No Gerenciador =============
==================== Erros no Log de eventos: =========================
Erros em Aplicativos:
==================
Error: (12/29/2016 11:24:31 AM) (Source: Application Hang) (EventID: 1002) (User: )
Description: O programa chrome.exe versão 55.0.2883.87 parou de interagir com o Windows e foi fechado. Para ver se há mais informações disponÃveis sobre o problema, verifique o histórico de problemas no painel de controle Segurança e Manutenção.
ID do Processo: 156c
Hora de InÃcio: 01d261d6ad66fb0b
Hora de Término: 6402
Caminho do Aplicativo: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
ID do Relatório: 2eef1e27-cdd2-11e6-be93-0025ab09e2b7
Nome completo do pacote com falha:
ID do aplicativo relativo ao pacote com falha:
Error: (12/29/2016 07:03:00 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Nome do aplicativo com falha: svchost.exe_MapsBroker, versão: 10.0.14393.0, carimbo de data/hora: 0x57899b1c
Nome do módulo com falha: unknown, versão: 0.0.0.0, carimbo de data/hora: 0x00000000
Código de exceção: 0x8400000e
Deslocamento da falha: 0x0000000000000000
ID do processo com falha: 0x2228
Hora de inÃcio do aplicativo com falha: 0x01d261ba9f1aef9c
Caminho do aplicativo com falha: C:\WINDOWS\System32\svchost.exe
Caminho do módulo com falha: unknown
ID do Relatório: 075ba4c7-2009-48fa-93e3-7be696a25ecf
Nome completo do pacote com falha:
ID do aplicativo relativo ao pacote com falha:
Error: (12/28/2016 05:35:44 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: O programa ShellExperienceHost.exe versão 10.0.14393.447 parou de interagir com o Windows e foi fechado. Para ver se há mais informações disponÃveis sobre o problema, verifique o histórico de problemas no painel de controle Segurança e Manutenção.
ID do Processo: c64
Hora de InÃcio: 01d26149cfb92e97
Hora de Término: 4294967295
Caminho do Aplicativo: C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\ShellExperienceHost.exe
ID do Relatório: 19a9bbb5-cd3d-11e6-be93-0025ab09e2b7
Nome completo do pacote com falha: Microsoft.Windows.ShellExperienceHost_10.0.14393.576_neutral_neutral_cw5n1h2txyewy
ID do aplicativo relativo ao pacote com falha: App
Error: (12/28/2016 05:35:28 PM) (Source: Winlogon) (EventID: 4005) (User: )
Description: O processo de logon do Windows foi encerrado inesperadamente.
Error: (12/28/2016 05:35:06 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: TH-PC-AIO)
Description: Falha na ativação do aplicativo Microsoft.WindowsCalculator_8wekyb3d8bbwe!App com o erro: -2144927141. Veja o log Microsoft-Windows-TWinUI/Operational para obter informações adicionais.
Error: (12/28/2016 05:34:56 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 2486) (User: TH-PC-AIO)
Description: O aplicativo Microsoft.Windows.ShellExperienceHost_10.0.14393.576_neutral_neutral_cw5n1h2txyewy+App não foi iniciado dentro do tempo alocado.
Error: (12/28/2016 05:08:45 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: O programa ShellExperienceHost.exe versão 10.0.14393.447 parou de interagir com o Windows e foi fechado. Para ver se há mais informações disponÃveis sobre o problema, verifique o histórico de problemas no painel de controle Segurança e Manutenção.
ID do Processo: e0
Hora de InÃcio: 01d26145db4be2eb
Hora de Término: 4294967295
Caminho do Aplicativo: C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\ShellExperienceHost.exe
ID do Relatório: 610fd215-cd39-11e6-be93-0025ab09e2b7
Nome completo do pacote com falha: Microsoft.Windows.ShellExperienceHost_10.0.14393.576_neutral_neutral_cw5n1h2txyewy
ID do aplicativo relativo ao pacote com falha: App
Error: (12/28/2016 05:08:20 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 2486) (User: TH-PC-AIO)
Description: O aplicativo Microsoft.Windows.ShellExperienceHost_10.0.14393.576_neutral_neutral_cw5n1h2txyewy+App não foi iniciado dentro do tempo alocado.
Error: (12/28/2016 04:14:00 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 2484) (User: TH-PC-AIO)
Description: O pacote Microsoft.Windows.Photos_16.1118.10000.0_x64__8wekyb3d8bbwe+App foi terminado porque levou muito tempo para ser suspenso.
Error: (12/28/2016 03:52:26 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 2484) (User: TH-PC-AIO)
Description: O pacote Microsoft.Windows.Cortana_1.7.0.14393_neutral_neutral_cw5n1h2txyewy+CortanaUI foi terminado porque levou muito tempo para ser suspenso.
Erros de Sistema:
=============
Error: (12/29/2016 12:08:02 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Não foi possÃvel iniciar o serviço XBox devido ao seguinte erro:
Acesso negado.
Error: (12/29/2016 12:08:02 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Não foi possÃvel iniciar o serviço WindowsSecurity devido ao seguinte erro:
Acesso negado.
Error: (12/29/2016 12:04:07 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Não foi possÃvel iniciar o serviço Listener Adapter do Net.Pipe devido ao seguinte erro:
O serviço não respondeu à requisição de inÃcio ou controle em tempo hábil.
Error: (12/29/2016 12:04:07 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Não foi possÃvel iniciar o serviço Listener Adapter do Net.Msmq devido ao seguinte erro:
O serviço não respondeu à requisição de inÃcio ou controle em tempo hábil.
Error: (12/29/2016 12:04:07 PM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Tempo limite esgotado (30000 milissegundos) ao aguardar a conexão do serviço NetMsmqActivator.
Error: (12/29/2016 12:04:07 PM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Tempo limite esgotado (30000 milissegundos) ao aguardar a conexão do serviço NetPipeActivator.
Error: (12/29/2016 12:03:16 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: O serviço NetTcpActivator depende do serviço NetTcpPortSharing, mas não foi possÃvel iniciá-lo devido ao seguinte erro:
O serviço não pode ser iniciado porque está desativado ou não tem dispositivos ativados associados.
Error: (12/29/2016 12:03:12 PM) (Source: DCOM) (EventID: 10016) (User: AUTORIDADE NT)
Description: As configurações de permissão padrão-computador não concedem permissão Local Ativação para o aplicativo de Servidor COM com CLSID
{C2F03A33-21F5-47FA-B4BB-156362A2F239}
e APPID
{316CDED5-E4AE-4B15-9113-7055D84DCC97}
ao usuário AUTORIDADE NT\SERVIÃO LOCAL SID (S-1-5-19) do endereço LocalHost (Usando LRPC) que está sendo executado no contêiner de aplicativos Não DisponÃvel SID (Não DisponÃvel). Essa permissão de segurança pode ser modificada com a ferramenta administrativa Serviços de Componentes.
Error: (12/29/2016 12:03:12 PM) (Source: DCOM) (EventID: 10016) (User: AUTORIDADE NT)
Description: As configurações de permissão especÃfico do aplicativo não concedem permissão Local Ativação para o aplicativo de Servidor COM com CLSID
{6B3B8D23-FA8D-40B9-8DBD-B950333E2C52}
e APPID
{4839DDB7-58C2-48F5-8283-E1D1807D0D7D}
ao usuário AUTORIDADE NT\SERVIÃO LOCAL SID (S-1-5-19) do endereço LocalHost (Usando LRPC) que está sendo executado no contêiner de aplicativos Não DisponÃvel SID (Não DisponÃvel). Essa permissão de segurança pode ser modificada com a ferramenta administrativa Serviços de Componentes.
Error: (12/29/2016 12:03:12 PM) (Source: DCOM) (EventID: 10016) (User: AUTORIDADE NT)
Description: As configurações de permissão padrão-computador não concedem permissão Local Ativação para o aplicativo de Servidor COM com CLSID
{C2F03A33-21F5-47FA-B4BB-156362A2F239}
e APPID
{316CDED5-E4AE-4B15-9113-7055D84DCC97}
ao usuário AUTORIDADE NT\SERVIÃO LOCAL SID (S-1-5-19) do endereço LocalHost (Usando LRPC) que está sendo executado no contêiner de aplicativos Não DisponÃvel SID (Não DisponÃvel). Essa permissão de segurança pode ser modificada com a ferramenta administrativa Serviços de Componentes.
CodeIntegrity:
===================================
Date: 2016-12-17 10:00:51.461
Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume2\Windows\assembly\GAC\Microsoft.StdFormat\7.0.3300.0__b03f5f7f11d50a3a\Microsoft.StdFormat.dll that did not meet the Microsoft signing level requirements.
Date: 2016-12-17 10:00:51.336
Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume2\Windows\assembly\GAC\ADODB\7.0.3300.0__b03f5f7f11d50a3a\ADODB.dll that did not meet the Microsoft signing level requirements.
Date: 2016-12-17 10:00:51.035
Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume2\Windows\assembly\GAC\MSDATASRC\7.0.3300.0__b03f5f7f11d50a3a\MSDATASRC.dll that did not meet the Microsoft signing level requirements.
Date: 2016-12-17 10:00:50.367
Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume2\Windows\assembly\GAC\Microsoft.StdFormat\7.0.3300.0__b03f5f7f11d50a3a\Microsoft.StdFormat.dll that did not meet the Microsoft signing level requirements.
Date: 2016-12-17 10:00:49.942
Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume2\Windows\assembly\GAC\ADODB\7.0.3300.0__b03f5f7f11d50a3a\ADODB.dll that did not meet the Microsoft signing level requirements.
Date: 2016-12-17 10:00:49.659
Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume2\Windows\assembly\GAC\MSDATASRC\7.0.3300.0__b03f5f7f11d50a3a\MSDATASRC.dll that did not meet the Microsoft signing level requirements.
Date: 2016-12-17 10:00:43.349
Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume2\Windows\assembly\GAC\stdole\7.0.3300.0__b03f5f7f11d50a3a\stdole.dll that did not meet the Microsoft signing level requirements.
Date: 2016-12-17 10:00:41.446
Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume2\Windows\assembly\GAC\stdole\7.0.3300.0__b03f5f7f11d50a3a\stdole.dll that did not meet the Microsoft signing level requirements.
Date: 2016-12-13 13:24:43.173
Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume2\Windows\assembly\GAC\Microsoft.StdFormat\7.0.3300.0__b03f5f7f11d50a3a\Microsoft.StdFormat.dll that did not meet the Microsoft signing level requirements.
Date: 2016-12-13 13:24:42.931
Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume2\Windows\assembly\GAC\ADODB\7.0.3300.0__b03f5f7f11d50a3a\ADODB.dll that did not meet the Microsoft signing level requirements.
==================== Informações da Memória ===========================
Processador: AMD E-350 Processor
Percentagem de memória em uso: 80%
RAM física total: 1645.62 MB
RAM física disponível: 317.74 MB
Virtual Total: 3847.62 MB
Virtual disponível: 1544.42 MB
==================== Drives ================================
Drive c: () (Fixed) (Total:219.19 GB) (Free:13.31 GB) NTFS
Drive d: () (Fixed) (Total:246.03 GB) (Free:47.28 GB) NTFS
Drive f: (THULIO) (Removable) (Total:3.72 GB) (Free:0.01 GB) FAT32
==================== MBR & Tabela de Partições ==================
========================================================
Disk: 1 (Size: 3.7 GB) (Disk ID: 00000000)
Partition: GPT.
==================== Fim de Addition.txt ============================
Executado por THELMA (29-12-2016 12:39:59)
Executando a partir de C:\Users\THELMA\Desktop
Windows 10 Pro Versão 1607 (X64) (2016-10-04 13:10:32)
Modo da Inicialização: Normal
==========================================================
==================== Contas: =============================
Administrador (S-1-5-21-859808900-955868838-1426738782-500 - Administrator - Disabled)
Convidado (S-1-5-21-859808900-955868838-1426738782-501 - Limited - Disabled)
DefaultAccount (S-1-5-21-859808900-955868838-1426738782-503 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-859808900-955868838-1426738782-1057 - Limited - Enabled)
THELMA (S-1-5-21-859808900-955868838-1426738782-1000 - Administrator - Enabled) => C:\Users\THELMA
==================== Central de Segurança ========================
(Se uma entrada for incluÃda na fixlist, será removida.)
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AV: avast! Antivirus (Enabled - Out of date) {17AD7D40-BA12-9C46-7131-94903A54AD8B}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: avast! Antivirus (Enabled - Out of date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}
FW: avast! Antivirus (Disabled) {2F96FC65-F07D-9D1E-5A6E-3DA5C487EAF0}
==================== Programas Instalados ======================
(Somente os programas adwares com a indicação "Oculto" podem ser adicionados à fixlist para desocultá-los. Os programas adwares devem ser desinstalados manualmente.)
µTorrent (HKU\S-1-5-21-859808900-955868838-1426738782-1000\...\uTorrent) (Version: 3.4.9.43057 - BitTorrent Inc.)
Adobe Flash Player 24 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 24.0.0.186 - Adobe Systems Incorporated)
Adobe Reader XI (11.0.18) - Português (HKLM-x32\...\{AC76BA86-7AD7-1046-7B44-AB0000000001}) (Version: 11.0.18 - Adobe Systems Incorporated)
AMD Catalyst Control Center (HKLM-x32\...\WUCCCApp) (Version: 1.00.0000 - AMD)
Assistente de Instalação Certisign (HKLM-x32\...\{6FBA74BD-149F-4521-B921-FFCC84876864}) (Version: 3.13.0.1 - CERTISIGN)
aTube Catcher (HKLM-x32\...\aTube Catcher) (Version: 3.8.7971 - DsNET Corp)
Audacity 2.0.5 (HKLM-x32\...\Audacity_is1) (Version: 2.0.5 - Audacity Team)
Avast Free Antivirus (HKLM-x32\...\avast) (Version: 12.1.2272 - AVAST Software)
CBR Reader (HKLM-x32\...\{EDAAC216-AC73-4152-9654-E12FE5A69F5D}_is1) (Version: - cbrreader.com)
Cities XXL (HKLM-x32\...\Q2l0aWVzWFhM_is1) (Version: 1 - )
Claro 3G (HKLM-x32\...\{93D34EE3-99B3-4DB1-8B0A-0A657466F90D}) (Version: 1.0.0.1 - )
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
DAEMON Tools Lite (HKLM-x32\...\DAEMON Tools Lite) (Version: 4.48.1.0347 - Disc Soft Ltd)
Dev-C++ (HKLM-x32\...\Dev-C++) (Version: 5.11 - Bloodshed Software)
Epson Easy Photo Print 2 (HKLM-x32\...\{922E2D91-9314-45AA-9AEF-E585F93B59A9}) (Version: 2.6.1.0 - Seiko Epson Corporation)
Epson Event Manager (HKLM-x32\...\{4B22C430-7EA8-4534-8358-376FD900B953}) (Version: 3.10.0042 - Seiko Epson Corporation)
EPSON L375 Series Printer Uninstall (HKLM\...\EPSON L375 Series) (Version: - SEIKO EPSON Corporation)
EPSON Scan (HKLM-x32\...\EPSON Scanner) (Version: - Seiko Epson Corporation)
EpsonNet Print (HKLM\...\{15A0F113-BF2C-4C12-8AA8-42AE0D9AE1C9}) (Version: 3.1.2.0 - SEIKO EPSON Corporation)
FBReader for Windows (HKLM-x32\...\FBReader for Windows) (Version: - )
FlashPeak Slimjet (HKLM-x32\...\Slimjet) (Version: 9.0.4.0 - FlashPeak Inc.)
FLV Player (HKU\S-1-5-21-859808900-955868838-1426738782-1000\...\FLV Player) (Version: 1.1 - Somoto Ltd.) <==== ATENÃÃO
FormatFactory 3.3.1.0 (HKLM-x32\...\FormatFactory) (Version: 3.3.1.0 - Format Factory)
Galeria de Fotos (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
GBBD Caixa Economica Federal (HKLM-x32\...\{5d01f486-f32d-462e-8830-cc1d116e8ece}_is1) (Version: 3.12.0.2 - )
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 55.0.2883.87 - Google Inc.)
Google Update Helper (x32 Version: 1.3.25.5 - Google Inc.) Hidden
Google Update Helper (x32 Version: 1.3.32.7 - Google Inc.) Hidden
Java 7 Update 79 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F06417079FF}) (Version: 7.0.790 - Oracle)
Java SE Development Kit 7 Update 79 (64-bit) (HKLM\...\{64A3A4F4-B792-11D6-A78A-00B0D0170790}) (Version: 1.7.0.790 - Oracle)
JetBrains PyCharm Community Edition 2016.2.3 (HKLM-x32\...\PyCharm Community Edition 2016.2.3) (Version: 162.1967.10 - JetBrains s.r.o.)
JetBrains WebStorm 2016.2.4 (HKLM-x32\...\WebStorm 2016.2.4) (Version: 162.2228.20 - JetBrains s.r.o.)
JPG to PDF Pro version 4.0 (HKLM-x32\...\{7C3870C0-067D-4D7F-A56C-68537090AFB2}_is1) (Version: 4.0 - HANSoft, Inc.)
Manual Epson L375 versão 1.0 (HKLM-x32\...\UsersGuideManual Epson L375_is1) (Version: 1.0 - )
Medieval II - Total War (HKLM-x32\...\Medieval II - Total War_is1) (Version: - )
Medieval II Total War (HKLM-x32\...\{C0698BDA-0D29-40EE-8570-A31106DF9AB1}) (Version: 1.02.001 - SEGA)
Microsoft .NET Framework 1.1 (HKLM-x32\...\{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}) (Version: 1.1.4322 - Microsoft)
Microsoft Office Enterprise 2007 (HKLM-x32\...\ENTERPRISE) (Version: 12.0.4518.1014 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{071c9b48-7c32-4621-a0ac-3f809523288f}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 Redistributable - x64 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 Redistributable - x86 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2015 RC Redistributable (x86) - 14.0.22816 (HKLM-x32\...\{714692fa-709b-4925-8170-821d51135f42}) (Version: 14.0.22816.0 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x64) - 14.0.23918 (HKLM-x32\...\{dab68466-3a7d-41a8-a5cf-415e3ff8ef71}) (Version: 14.0.23918.0 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.23918 (HKLM-x32\...\{2e085fd2-a3e4-4b39-8e10-6b8d35f55244}) (Version: 14.0.23918.0 - Microsoft Corporation)
Microsoft Visual J# .NET Redistributable Package 1.1 (HKLM-x32\...\{1A655D51-1423-48A3-B748-8F5A0BE294C8}) (Version: 1.1.4322 - Microsoft)
Microsoft WSE 3.0 Runtime (HKLM-x32\...\{E3E71D07-CD27-46CB-8448-16D4FB29AA13}) (Version: 3.0.5305.0 - Microsoft Corp.)
Movie Maker (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
MPC-HC 1.7.0 (HKLM-x32\...\{2624B969-7135-4EB1-B0F6-2D8C397B45F7}_is1) (Version: 1.7.0.7858 - MPC-HC Team)
MPC-HC 1.7.10 (64-bit) (HKLM\...\{2ACBF1FA-F5C3-4B19-A774-B22A31F231B9}_is1) (Version: 1.7.10 - MPC-HC Team)
MSVC80_x64_v2 (Version: 1.0.3.0 - Nokia) Hidden
MSVC80_x86_v2 (x32 Version: 1.0.3.0 - Nokia) Hidden
MSVC90_x64 (Version: 1.0.1.2 - Nokia) Hidden
MSVC90_x86 (x32 Version: 1.0.1.2 - Nokia) Hidden
MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
Navegador PJe versão 1.0 (HKLM-x32\...\{46F4A182-9233-411B-9D0C-6D2C417A87E1}_is1) (Version: 1.0 - Conselho Nacional de Justiça - CNJ)
Need for Speed⢠Most Wanted (HKLM-x32\...\{ADE91A13-434D-4229-00BC-182BAD607303}) (Version: - )
Nokia Connectivity Cable Driver (HKLM-x32\...\{29373274-977E-413C-A4DE-DC0F8E80C429}) (Version: 7.1.172.0 - Nokia)
Oracle Database 11g Express Edition (HKLM-x32\...\InstallShield_{05A7B662-80A3-4EB9-AE1D-89A62449431C}) (Version: 11.2.0 - Oracle Corporation)
Oracle Database 11g Express Edition (Version: 11.2.0 - Oracle Corporation) Hidden
PokedexBW by 4Dialga2 version 1.00 (HKLM-x32\...\{5B8184CC-BE86-415B-926A-7E948B18D1BF}_is1) (Version: 1.00 - 4Dialga2)
PowerISO (HKLM-x32\...\PowerISO) (Version: 5.8 - Power Software Ltd)
Python 3.5.2 (32-bit) (HKU\S-1-5-21-859808900-955868838-1426738782-1000\...\{cf72a2ab-2f1d-49fd-a0d7-1065e6357e1e}) (Version: 3.5.2150.0 - Python Software Foundation)
Python 3.5.2 Core Interpreter (32-bit) (x32 Version: 3.5.2150.0 - Python Software Foundation) Hidden
Python 3.5.2 Development Libraries (32-bit) (x32 Version: 3.5.2150.0 - Python Software Foundation) Hidden
Python 3.5.2 Documentation (32-bit) (x32 Version: 3.5.2150.0 - Python Software Foundation) Hidden
Python 3.5.2 Executables (32-bit) (x32 Version: 3.5.2150.0 - Python Software Foundation) Hidden
Python 3.5.2 pip Bootstrap (32-bit) (x32 Version: 3.5.2150.0 - Python Software Foundation) Hidden
Python 3.5.2 Standard Library (32-bit) (x32 Version: 3.5.2150.0 - Python Software Foundation) Hidden
Python 3.5.2 Tcl/Tk Support (32-bit) (x32 Version: 3.5.2150.0 - Python Software Foundation) Hidden
Python 3.5.2 Test Suite (32-bit) (x32 Version: 3.5.2150.0 - Python Software Foundation) Hidden
Python 3.5.2 Utility Scripts (32-bit) (x32 Version: 3.5.2150.0 - Python Software Foundation) Hidden
Python Launcher (HKLM-x32\...\{963ECCDD-F09F-4C24-9367-8B5D748AA7C8}) (Version: 3.5.2121.0 - Python Software Foundation)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7040 - Realtek Semiconductor Corp.)
Requerimento de Empresário (HKU\S-1-5-21-859808900-955868838-1426738782-1000\...\Requerimento de Empresário) (Version: - )
SafeZone Stable 1.51.2220.62 (x32 Version: 1.51.2220.62 - Avast Software) Hidden
Sid Meiers Civilization VI (HKLM-x32\...\Sid Meiers Civilization VI_is1) (Version: - )
Skype⢠7.30 (HKLM-x32\...\{FC965A47-4839-40CA-B618-18F486F042C6}) (Version: 7.30.105 - Skype Technologies S.A.)
Software Updater (HKLM-x32\...\{8DBC5A0A-31C4-46C7-B252-6B593EA11A87}) (Version: 4.3.7 - SEIKO EPSON CORPORATION)
Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)
Suplemento Microsoft Salvar como PDF ou XPS para programas do Microsoft Office 2007 (HKLM-x32\...\{90120000-00B2-0416-0000-0000000FF1CE}) (Version: 12.0.4518.1019 - Microsoft Corporation)
The Sims 4 (HKLM-x32\...\The Sims 4_R.G. Mechanics_is1) (Version: - R.G. Mechanics, ProZorg_tm)
The Sims 4 Get Together Addon Pack (HKLM-x32\...\VGhlU2ltczQ=_is1) (Version: 1 - )
Unity Web Player (HKU\S-1-5-21-859808900-955868838-1426738782-1000\...\UnityWebPlayer) (Version: 5.3.5f1 - Unity Technologies ApS)
Warsaw 1.13.0.525 64 bits (HKLM\...\{20E60725-16C8-4FB9-8BC2-AF92C5F8D06D}_is1) (Version: 1.13.0.525 - GAS Tecnologia)
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3528.0331 - Microsoft Corporation)
WinDS PRO 2015.10.09 (HKLM\...\{4237FF56-4BD0-481E-BD44-C1A8DDA9C753}_is1) (Version: 2015.10.09 - WinDS PRO Central)
WinRAR 5.31 (64-bit) (HKLM\...\WinRAR archiver) (Version: 5.31.0 - win.rar GmbH)
Yahoo! Powered (HKLM-x32\...\{5E21B6E1-0EA1-6761-BF21-17E16FA1C461}) (Version: - )
==================== Exame Personalizado CLSID (Whitelisted): ==========================
(Se uma entrada for incluÃda na fixlist, será removida do Registro. O arquivo não será movido, a menos que seja colocado separadamente.)
CustomCLSID: HKU\S-1-5-21-859808900-955868838-1426738782-1000_Classes\CLSID\{0783EB25-59F8-4F02-B6B0-F1D4349F0000}\InprocServer32 -> C:\Users\THELMA\AppData\Local\GAS Tecnologia\GBBD\npsf_bb_64.dll => Nenhum Arquivo
CustomCLSID: HKU\S-1-5-21-859808900-955868838-1426738782-1000_Classes\CLSID\{0783EB25-59F8-4F02-B6B0-F1D4349F0007}\InprocServer32 -> C:\Users\THELMA\AppData\Local\GAS Tecnologia\GBBD\npsf_cef_64.dll (GAS Tecnologia)
CustomCLSID: HKU\S-1-5-21-859808900-955868838-1426738782-1000_Classes\CLSID\{0783EB25-59F8-4F02-B6B1-F1D4349F0000}\InprocServer32 -> C:\Users\THELMA\AppData\Local\GAS Tecnologia\GBBD\npsf_bb_64.dll => Nenhum Arquivo
CustomCLSID: HKU\S-1-5-21-859808900-955868838-1426738782-1000_Classes\CLSID\{0783EB25-59F8-4F02-B6B1-F1D4349F0007}\InprocServer32 -> C:\Users\THELMA\AppData\Local\GAS Tecnologia\GBBD\npsf_cef_64.dll (GAS Tecnologia)
==================== Tarefas Agendadas (Whitelisted) =============
(Se uma entrada for incluÃda na fixlist, será removida do Registro. O arquivo não será movido, a menos que seja colocado separadamente.)
Task: {00A85B12-BFCD-459D-ACA1-BE1D0284BDF6} - \Microsoft\Windows\Setup\gwx\launchtrayprocess -> Nenhum Arquivo <==== ATENÃÃO
Task: {03CFC9FB-9802-4DE6-B1A2-A8F24CE4A8B3} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2016-12-14] (Adobe Systems Incorporated)
Task: {07510D2D-CE95-4640-94A1-9074811C8326} - \Microsoft\Windows\Setup\EOONotify -> Nenhum Arquivo <==== ATENÃÃO
Task: {095E7759-B7D8-4F34-A211-97019B25B29A} - \Microsoft\Windows\Setup\gwx\rundetector -> Nenhum Arquivo <==== ATENÃÃO
Task: {0E6F6A33-EC75-4B7C-B7EF-311C490AF502} - \Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeTime -> Nenhum Arquivo <==== ATENÃÃO
Task: {1C36818B-0F44-4BB2-B6DE-66B64A96ECAB} - \Microsoft\Windows\Setup\gwx\refreshgwxconfig -> Nenhum Arquivo <==== ATENÃÃO
Task: {1FE73DEF-4D88-482D-9809-3A3C0F102998} - System32\Tasks\AdobeAAMUpdater-1.0-TH-PC-AIO-THELMA => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe
Task: {246533C9-D3C6-4E4B-9BFD-1CF403890D50} - System32\Tasks\EPSON L375 Series Update {90583929-0414-440C-8F8C-162C7BDA4705} => C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_YTSN8E.EXE [2013-11-21] (SEIKO EPSON CORPORATION)
Task: {2A509C10-CD61-45DC-919E-FABF43960216} - System32\Tasks\Microsoft\Windows\Media Center\OCURDiscovery => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {2A6E908D-0BA8-4A5E-8DE1-D08EC3C14548} - System32\Tasks\Microsoft\Windows\Media Center\InstallPlayReady => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {2D139EAE-1733-4B06-B6DE-A78C084AE6CC} - \Microsoft\Windows\Setup\GWXTriggers\Logon-5d -> Nenhum Arquivo <==== ATENÃÃO
Task: {30F4F8CA-4F9C-46F1-93DD-CDE84FCC616B} - System32\Tasks\{4884198F-E592-408F-9323-7459C02BB9C9} => pcalua.exe -a F:\Windows\Data\setup.exe -d F:\Windows\Data
Task: {33290EB8-5DF2-4B4F-8BB0-C5C85F811723} - System32\Tasks\{85BD3015-5C6B-46AF-B2B5-4745A4903E41} => pcalua.exe -a C:\Users\THELMA\AppData\Local\Akamai\uninstall.exe
Task: {34B92F9E-CB9A-42A4-9EDB-1EDE49E824FC} - \Microsoft\Windows\Setup\GWXTriggers\OnIdle-5d -> Nenhum Arquivo <==== ATENÃÃO
Task: {3527FD3B-3F59-40CF-BA35-030FCFEB75C0} - System32\Tasks\mans-find => Chrome.exe hxxp://mans-find.org/glamesm
Task: {35EE1452-B2F6-43CB-859B-41D2F5A25442} - System32\Tasks\{978E02BB-845B-40C6-A8C8-C6409718AA60} => pcalua.exe -a "C:\Sim City\OUT OF GAME TOOLS\MAXIS TRANSPORTATION\setup.exe" -d "C:\Sim City\OUT OF GAME TOOLS\MAXIS TRANSPORTATION"
Task: {37E05CB0-67BC-45DB-A39C-4D5E5E5E3DA7} - System32\Tasks\Microsoft\Windows\Media Center\ehDRMInit => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {38A80BD2-DE84-4634-846F-5B660D3E673A} - System32\Tasks\avast! Emergency Update => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [2016-07-11] (AVAST Software)
Task: {395C2CBA-B717-44BA-AF9F-27C7E9C4B25D} - System32\Tasks\SaveSenseLiveUpdateTaskMachineUA => C:\Program Files (x86)\SaveSenseLive\Update\SaveSenseLive.exe <==== ATENÃÃO
Task: {397F539E-C058-46B7-8FE5-CA440AF0F0DD} - System32\Tasks\Microsoft\Windows\Media Center\UpdateRecordPath => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {3B5DB108-9306-4340-A87A-A94BEE30B66C} - System32\Tasks\Microsoft\Windows\Media Center\PeriodicScanRetry => C:\WINDOWS\ehome\MCUpdate.exe
Task: {403E644C-C8D2-43DE-97A7-C57CEF334427} - \Microsoft\Windows\Setup\GWXTriggers\MachineUnlock-5d -> Nenhum Arquivo <==== ATENÃÃO
Task: {41EA73D8-9F39-4A27-BA68-7FF6EDF624C9} - \Microsoft\Windows\Setup\gwx\refreshgwxcontent -> Nenhum Arquivo <==== ATENÃÃO
Task: {4266A574-DFE8-41F4-992C-C10E5499535D} - System32\Tasks\Microsoft\Windows\Media Center\mcupdate_scheduled => C:\WINDOWS\ehome\mcupdate.exe
Task: {457A6ADC-5C28-44C7-8F49-6A3125FEA960} - System32\Tasks\{158330A1-B48C-47F9-8D41-B01EB0A4D70C} => pcalua.exe -a "C:\Program Files (x86)\InstallShield Installation Information\{C0698BDA-0D29-40EE-8570-A31106DF9AB1}\setup.exe" -c -runfromtemp -l0x0009 -removeonly
Task: {463FAC49-EA4F-4480-88DA-AA85E510830B} - System32\Tasks\Microsoft\Windows\Media Center\mcupdate => C:\WINDOWS\ehome\mcupdate.exe
Task: {47DB72CF-F63E-4295-B4DF-3FE93CCDCBB2} - System32\Tasks\Microsoft\Windows\Media Center\RegisterSearch => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {4873C2E8-A85B-4695-B4E1-3C608955CDF5} - System32\Tasks\Microsoft\Windows\Media Center\DispatchRecoveryTasks => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {49B86101-1572-4148-B4C6-296368F45CE5} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-09-01] (Google Inc.)
Task: {4B00A099-276C-4448-8383-AA263282ACED} - System32\Tasks\SaveSense => C:\Users\THELMA\AppData\Roaming\SAVESE~1\UPDATE~1\UPDATE~1.EXE <==== ATENÃÃO
Task: {4E29458D-BBB3-4E63-A043-DD1DACD6C384} - \Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B -> Nenhum Arquivo <==== ATENÃÃO
Task: {50865E48-3EC1-4FFD-A4D0-E8962DA73F1B} - System32\Tasks\{F7CAF778-ED6A-440D-B29A-58F4D981EFA9} => pcalua.exe -a "C:\Sim City\OUT OF GAME TOOLS\SC4 LOT EDITOR INSTALLER.exe" -d "C:\Sim City\OUT OF GAME TOOLS"
Task: {5815C6A8-504D-489D-A751-AF68A3FB9870} - System32\Tasks\{9E42CD3E-5D0D-4DE5-84D4-013AF7098CFE} => pcalua.exe -a C:\Users\THELMA\Videos\Torrents\Sims3EP05Setup.exe -d C:\Users\THELMA\Videos\Torrents
Task: {5938B1E4-6E63-4921-BFDD-55165D8F32E0} - \Microsoft\Windows\Setup\GWXTriggers\Time-Weekend -> Nenhum Arquivo <==== ATENÃÃO
Task: {5EF4DC5F-3997-42BF-B793-D4F0DAA8FB9F} - System32\Tasks\Microsoft\Windows\Media Center\RecordingRestart => C:\WINDOWS\ehome\ehrec.exe
Task: {6772B76C-8B1D-4354-81DA-8467B6B84F4C} - System32\Tasks\Microsoft\Windows\Media Center\OCURActivate => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {6E0B9D27-9CA1-4D69-A830-EA5EE74F5315} - System32\Tasks\Microsoft\Windows\Media Center\ObjectStoreRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe
Task: {6EE5C7B5-46C7-4FC4-9FB4-54A6023CF5A0} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscoveryW2 => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {7B4BFEB8-E6F7-4572-BB1B-A6FD67B2CACD} - System32\Tasks\Microsoft\Windows\Media Center\SqlLiteRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe
Task: {88BE6C91-762C-41A1-A668-A7D70104B301} - System32\Tasks\Microsoft\Windows\Media Center\PvrScheduleTask => C:\WINDOWS\ehome\mcupdate.exe
Task: {900E6DE1-107B-48E2-8C1E-604E4713510F} - \Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeReminderTime -> Nenhum Arquivo <==== ATENÃÃO
Task: {951AFD20-9B0F-423F-A184-5EB7C4771DCA} - System32\Tasks\Microsoft\Windows\Media Center\ReindexSearchRoot => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {9C33EFB8-1D39-44CD-86F7-8D42BC43700A} - System32\Tasks\Microsoft\Windows\Media Center\StartRecording => C:\WINDOWS\ehome\ehrec.exe
Task: {9C468DC2-BFA4-455C-82D2-8B3C92D9E2F9} - System32\Tasks\{EC1594D1-C5ED-4A10-8CEB-E90AD0837FE7} => pcalua.exe -a "C:\Users\THELMA\Documents\SimCity 4\Plugins\TEXTURES\LBT_MegaTexturePack_En\Install_LBT_MegaTexturePack_vol02.exe" -d "C:\Users\THELMA\Documents\SimCity 4\Plugins\TEXTURES\LBT_MegaTexturePack_En"
Task: {9DE58555-9362-418F-99EF-E8E88CCD0652} - \Microsoft\Windows\Setup\GWXTriggers\Time-5d -> Nenhum Arquivo <==== ATENÃÃO
Task: {AA9E8EA2-328B-466D-B909-4966C9AB7F62} - System32\Tasks\EPSON L375 Series Update {F9DE211B-BF7D-4F2B-8730-8D5D8097A5CF} => C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_YTSN8E.EXE [2013-11-21] (SEIKO EPSON CORPORATION)
Task: {B16DE8DC-8E1B-466A-AF78-283F2383D906} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscoveryW1 => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {B4016298-1CB0-4C2F-9CE4-F3D87B20BBE0} - System32\Tasks\Microsoft\Windows\Media Center\MediaCenterRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe
Task: {B9601927-CAA0-4550-BB16-6ECB506875B2} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-09-01] (Google Inc.)
Task: {BBEA04E5-10A2-4453-B7D7-E28E5AEB1A3C} - System32\Tasks\{CA3C83D3-5B2E-431B-AE4B-C65DC09F49AA} => pcalua.exe -a C:\Users\THELMA\AppData\Local\{ABCB9D97-8F63-F12F-E2FB-D4C7C693285F}\uninst.exe -c -FN=""-P=/Uninstall /s /noun /DelSelfDir
Task: {C426D007-E2C5-4A40-9D83-6374EF6C4211} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscovery => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {CD04673E-9D5D-4370-A7B5-1D92BF6B4B2D} - System32\Tasks\Baidu Antivirus Update => C:\Program Files (x86)\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus\BavUpdater.exe
Task: {D09E8806-A52C-45E5-828E-38603B07A0BB} - System32\Tasks\SafeZone scheduled Autoupdate 1468366191 => C:\Program Files\AVAST Software\SZBrowser\launcher.exe [2016-09-06] (Avast Software)
Task: {D0F72223-5119-4894-89FF-AEA273D420BB} - System32\Tasks\Microsoft\Windows\Media Center\PvrRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe
Task: {D146931A-38FB-4F76-A487-F50FABB6D4E6} - \Microsoft\Windows\Setup\GWXTriggers\OutOfSleep-5d -> Nenhum Arquivo <==== ATENÃÃO
Task: {D1B6295C-B874-4A71-B873-9963FFCAA957} - \Update\winRPX -> Nenhum Arquivo <==== ATENÃÃO
Task: {DE44D3C9-F7B0-433B-BD30-963FA7C8FD0D} - \Microsoft\Windows\Setup\GWXTriggers\OutOfIdle-5d -> Nenhum Arquivo <==== ATENÃÃO
Task: {DEB0B577-962B-4DD6-AEC1-BC451FBF031B} - System32\Tasks\Microsoft\Windows\Media Center\ActivateWindowsSearch => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {DECD8253-5D13-4220-A62B-78F253481CE4} - System32\Tasks\Microsoft\Windows\Media Center\ConfigureInternetTimeService => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {E235F205-915C-435C-9262-18FB027F4225} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2016-10-21] (Adobe Systems Incorporated)
Task: {E6BB9979-4D29-455B-BB62-A96A2DC04324} - System32\Tasks\SaveSenseLiveUpdateTaskMachineCore => C:\Program Files (x86)\SaveSenseLive\Update\SaveSenseLive.exe <==== ATENÃÃO
Task: {FD04C7A5-9D2A-4C20-84C2-BB6556DA8310} - \Microsoft\Windows\Setup\gwx\refreshgwxconfigandcontent -> Nenhum Arquivo <==== ATENÃÃO
(Se uma entrada for incluÃda na fixlist, o arquivo da tarefa (.job) será movido. O arquivo que está sendo executado pela tarefa não será movido.)
Task: C:\WINDOWS\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\WINDOWS\Tasks\EPSON L375 Series Update {3B870492-4EF2-4A5B-834E-0DEC3E87F963}.job => C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_YTSN8E.EXE:/EXE:{3B870492-4EF2-4A5B-834E-0DEC3E87F963} /F:UpdateTH\TH-PC-AIO$
Searches for EPSON software updates, and notifies you when updates are available.If this task is disabled or stopped, your EPSON software will not be automatically kept up to date.Thi
Task: C:\WINDOWS\Tasks\EPSON L375 Series Update {90583929-0414-440C-8F8C-162C7BDA4705}.job => C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_YTSN8E.EXE:/EXE:{90583929-0414-440C-8F8C-162C7BDA4705} /F:Update TH\TH-PC-AIO$ÄSearches for EPSON software updates, and notifies you when updates are available.If this task is disabled or stopped, your EPSON software will not be automatically kept up to date.Thi
Task: C:\WINDOWS\Tasks\EPSON L375 Series Update {F9DE211B-BF7D-4F2B-8730-8D5D8097A5CF}.job => C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_YTSN8E.EXE:/EXE:{F9DE211B-BF7D-4F2B-8730-8D5D8097A5CF} /F:Update TH\TH-PC-AIO$ÄSearches for EPSON software updates, and notifies you when updates are available.If this task is disabled or stopped, your EPSON software will not be automatically kept up to date.Thi
Task: C:\WINDOWS\Tasks\SaveSense.job => C:\Users\THELMA\AppData\Roaming\SAVESE~1\UPDATE~1\UPDATE~1.EXE <==== ATENÃÃO
Task: C:\WINDOWS\Tasks\SaveSenseLiveUpdateTaskMachineCore.job => C:\Program Files (x86)\SaveSenseLive\Update\SaveSenseLive.exe <==== ATENÃÃO
Task: C:\WINDOWS\Tasks\SaveSenseLiveUpdateTaskMachineUA.job => C:\Program Files (x86)\SaveSenseLive\Update\SaveSenseLive.exe <==== ATENÃÃO
==================== Atalhos =============================
(As entradas podem ser listadas para serem restauradas ou removidas.)
ShortcutWithArgument: C:\Users\THELMA\Desktop\Slimjet.lnk -> C:\Program Files (x86)\Slimjet\slimjet.exe (FlashPeak Inc.) -> --profile-directory=Default
ShortcutWithArgument: C:\Users\THELMA\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Mail.Ru.lnk -> C:\Windows\System32\rundll32.exe (Microsoft Corporation) -> url,FileProtocolHandler "hxxp://www.mail.ru/cnt/20775012?gp=811035"
ShortcutWithArgument: C:\Users\THELMA\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\ImplicitAppShortcuts\ff13ca23fee04978\Google Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> --profile-directory="Profile 5"
ShortcutWithArgument: C:\Users\THELMA\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\ImplicitAppShortcuts\69639df789022856\Google Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> --profile-directory="Profile 1"
ShortcutWithArgument: C:\Users\THELMA\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\ImplicitAppShortcuts\4242a155fcc27c2b\FlashPeak Slimjet.lnk -> C:\Program Files (x86)\Slimjet\slimjet.exe (FlashPeak Inc.) -> --profile-directory=Default
==================== Módulos Carregados (Whitelisted) ==============
2016-07-16 08:42 - 2016-07-16 08:42 - 00231424 _____ () C:\WINDOWS\SYSTEM32\ism32k.dll
2016-12-15 09:09 - 2016-12-09 07:29 - 02681200 _____ () C:\WINDOWS\system32\CoreUIComponents.dll
2016-12-15 09:09 - 2016-12-09 07:29 - 02681200 _____ () C:\WINDOWS\SYSTEM32\CoreUIComponents.dll
2016-10-04 10:35 - 2016-10-04 10:35 - 01864384 _____ () C:\Users\THELMA\AppData\Local\Microsoft\OneDrive\17.3.6517.0809_1\amd64\ClientTelemetry.dll
2015-08-21 22:09 - 2015-08-21 22:09 - 00127488 _____ () C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Container.Wlan.dll
2016-10-04 08:57 - 2016-10-04 08:57 - 00134656 _____ () C:\Windows\ShellExperiences\Windows.UI.Shell.SharedUtilities.dll
2016-12-15 09:11 - 2016-12-09 06:41 - 00474112 _____ () C:\Windows\ShellExperiences\QuickActions.dll
2016-11-09 01:11 - 2016-11-02 07:21 - 09760768 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CortanaApi.dll
2016-11-09 01:11 - 2016-11-02 07:15 - 01401856 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll
2016-11-09 01:11 - 2016-11-02 07:14 - 00757248 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CSGSuggestLib.dll
2016-11-09 01:11 - 2016-11-02 07:15 - 01033216 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Actions.dll
2016-11-09 01:11 - 2016-11-02 07:16 - 02424320 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.BackgroundTask.dll
2016-11-09 01:11 - 2016-11-02 07:17 - 04853760 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\RemindersUI.dll
2016-12-14 19:48 - 2016-12-14 20:04 - 00072192 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.10.145.0_x64__kzf8qxf38zg5c\SkypeHost.exe
2016-12-14 19:48 - 2016-12-14 20:04 - 00179712 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.10.145.0_x64__kzf8qxf38zg5c\SkypeBackgroundTasks.dll
2016-12-14 19:48 - 2016-12-14 20:04 - 42130432 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.10.145.0_x64__kzf8qxf38zg5c\SkyWrap.dll
2016-12-14 19:48 - 2016-12-14 20:04 - 02216448 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.10.145.0_x64__kzf8qxf38zg5c\roottools.dll
2016-07-11 20:11 - 2016-07-11 20:11 - 00146232 _____ () C:\Program Files\AVAST Software\Avast\JsonRpcServer.dll
2016-12-29 07:00 - 2016-12-29 07:00 - 03131344 _____ () C:\Program Files\AVAST Software\Avast\defs\16122900\algo.dll
2016-07-11 20:11 - 2016-07-11 20:11 - 00479288 _____ () C:\Program Files\AVAST Software\Avast\ffl2.dll
2016-07-11 20:12 - 2016-07-11 20:12 - 48936448 _____ () C:\Program Files\AVAST Software\Avast\libcef.dll
2016-10-04 10:25 - 2016-10-04 10:26 - 01383616 _____ () C:\Users\THELMA\AppData\Local\Microsoft\OneDrive\17.3.6517.0809_1\ClientTelemetry.dll
2016-09-22 10:30 - 2016-09-06 12:00 - 05197312 _____ () C:\Users\THELMA\AppData\Local\Google\Chrome\User Data\SwiftShader\3.3.0.1\libglesv2.dll
2016-09-22 10:30 - 2016-09-06 12:00 - 00147456 _____ () C:\Users\THELMA\AppData\Local\Google\Chrome\User Data\SwiftShader\3.3.0.1\libegl.dll
==================== Alternate Data Streams (Whitelisted) =========
(Se uma entrada for incluÃda na fixlist, somente o ADS será removido.)
AlternateDataStreams: C:\Program Files (x86)\GbPlugin:IncompleteStartProcessProtection.cnt [10]
AlternateDataStreams: C:\WINDOWS\System32:54DF3B62_Cef.gbp [2]
AlternateDataStreams: C:\WINDOWS\system32\Drivers\gbpddfac64.sys:X5ZN8aGvT4 [2010]
AlternateDataStreams: C:\WINDOWS\system32\Drivers\gbpddreg64.sys:X5ZN8aGvT4 [686]
AlternateDataStreams: C:\WINDOWS\system32\Drivers\wsddfac.sys:X5ZN8aGXs4 [2166]
AlternateDataStreams: C:\ProgramData\GbPlugin:IncompleteStartGbprcm.cnt [10]
AlternateDataStreams: C:\Users\Todos os Usuários\GbPlugin:IncompleteStartGbprcm.cnt [10]
==================== Modo de Segurança (Whitelisted) ===================
(Se uma entrada for incluÃda na fixlist, será removida do Registro. O valor "AlternateShell" será restaurado.)
==================== Associação (Whitelisted) ===============
(Se uma entrada for incluÃda na fixlist, o Ãtem no Registro será restaurado para o padrão ou removido.)
==================== Internet Explorer confiável/restrito ===============
(Se uma entrada for incluÃda na fixlist, será removida do Registro.)
IE trusted site: HKU\S-1-5-21-859808900-955868838-1426738782-1000\...\bancobrasil.com.br -> www.bancobrasil.com.br
IE trusted site: HKU\S-1-5-21-859808900-955868838-1426738782-1000\...\bb.com.br -> hxxps://seg.bb.com.br
IE trusted site: HKU\S-1-5-21-859808900-955868838-1426738782-1000\...\caixa.gov.br -> imagem.caixa.gov.br
IE trusted site: HKU\S-1-5-21-859808900-955868838-1426738782-1000\...\caixa.gov.br -> hxxps://imagem.caixa.gov.br
==================== Hosts Conteúdo: ==========================
(Se necessário, a diretiva Hosts: pode ser incluÃda na fixlist para redefinir o Hosts.)
2009-07-13 23:34 - 2016-12-28 09:56 - 00001006 ____N C:\WINDOWS\system32\Drivers\etc\hosts
127.0.0.1 down.baidu2016.com
127.0.0.1 123.sogou.com
127.0.0.1 www.czzsyzgm.com
127.0.0.1 www.czzsyzxl.com
127.0.0.1 union.baidu2019.com
==================== Outras Ãreas ============================
(Atualmente não há nenhuma correção automática para esta seção.)
HKU\S-1-5-21-859808900-955868838-1426738782-1000\Control Panel\Desktop\\Wallpaper -> c:\windows\web\wallpaper\theme1\img1.jpg
DNS Servers: 192.168.15.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Firewall do Windows está desabilitado.
==================== MSCONFIG/TASK MANAGER Ãtens desabilitados ==
MSCONFIG\Services: wuauserv => 2
HKLM\...\StartupApproved\Run: => "Diebold - Warsaw"
HKLM\...\StartupApproved\Run32: => "StartCCC"
HKLM\...\StartupApproved\Run32: => "Baidu Antivirus"
HKLM\...\StartupApproved\Run32: => "BlueStacks Agent"
HKLM\...\StartupApproved\Run32: => "IminentMessenger"
HKLM\...\StartupApproved\Run32: => "Iminent"
HKLM\...\StartupApproved\Run32: => "mobilegeni daemon"
HKU\S-1-5-21-859808900-955868838-1426738782-1000\...\StartupApproved\Run: => "OneDrive"
HKU\S-1-5-21-859808900-955868838-1426738782-1000\...\StartupApproved\Run: => "Steam"
==================== Regras do Firewall (Whitelisted) ===============
(Se uma entrada for incluÃda na fixlist, será removida do Registro. O arquivo não será movido, a menos que seja colocado separadamente.)
FirewallRules: [vm-monitoring-nb-session] => LPort=139
FirewallRules: [MSMQ-In-TCP] => %systemroot%\system32\mqsvc.exe
FirewallRules: [MSMQ-Out-TCP] => %systemroot%\system32\mqsvc.exe
FirewallRules: [MSMQ-In-UDP] => %systemroot%\system32\mqsvc.exe
FirewallRules: [MSMQ-Out-UDP] => %systemroot%\system32\mqsvc.exe
FirewallRules: [WCF-NetTcpActivator-In-TCP-64bit] => LPort=808
FirewallRules: [{083B956D-58DF-43DD-A63D-B089F7D77F45}] => C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
FirewallRules: [{73491728-C13D-48BB-970F-6789B737E605}] => C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
FirewallRules: [{38FF9CE5-CA32-4222-82B0-A23443A819CB}] => C:\Program Files (x86)\TeamViewer\TeamViewer.exe
FirewallRules: [{5B652112-F7CD-48FC-857B-38C3ECA2AE01}] => C:\Program Files (x86)\TeamViewer\TeamViewer.exe
FirewallRules: [{810625B5-5836-4B4C-BB34-6B3B64599800}] => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe
FirewallRules: [{76806FBE-B3E7-4E26-BCAA-AB9B55C06343}] => C:\Program Files\AVAST Software\Avast\Setup\instup.exe
FirewallRules: [UDP Query User{E3E283ED-655A-476B-A258-7C70FD56D786}C:\program files (x86)\slimjet\slimjet.exe] => C:\program files (x86)\slimjet\slimjet.exe
FirewallRules: [TCP Query User{FB86A5EB-D7EA-4895-ACC8-E27933E2A77D}C:\program files (x86)\slimjet\slimjet.exe] => C:\program files (x86)\slimjet\slimjet.exe
FirewallRules: [UDP Query User{CE34AB4C-73DC-4FD6-B133-56E620C779B6}C:\program files (x86)\epson software\event manager\eeventmanager.exe] => C:\program files (x86)\epson software\event manager\eeventmanager.exe
FirewallRules: [TCP Query User{30795E7A-875E-45D9-92CC-3773033BA2F4}C:\program files (x86)\epson software\event manager\eeventmanager.exe] => C:\program files (x86)\epson software\event manager\eeventmanager.exe
FirewallRules: [{D0C86E37-C253-4A69-A494-ED776307C223}] => C:\Program Files (x86)\EPSON Software\Event Manager\EEventManager.exe
FirewallRules: [{4CAC6621-D6C2-4338-8857-DCE4C05B43AB}] => C:\Program Files (x86)\EPSON Software\Event Manager\EEventManager.exe
FirewallRules: [{27281BFB-5037-4B0B-8BEA-4FFAC375A929}] => C:\Users\THELMA\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{671D0370-CC00-49B9-B036-EADE8C514165}] => C:\Users\THELMA\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [TCP Query User{145CE701-8228-4FC5-84FD-2EA2494FFAE9}C:\users\thelma\downloads\utorrent (1).exe] => C:\users\thelma\downloads\utorrent (1).exe
FirewallRules: [UDP Query User{4A9AE008-4655-4049-9B44-5304E28A09FC}C:\users\thelma\downloads\utorrent (1).exe] => C:\users\thelma\downloads\utorrent (1).exe
FirewallRules: [TCP Query User{249E7E90-1C40-48D7-B2AA-8F7D67921917}C:\game\fifa 11\game\fifa.exe] => C:\game\fifa 11\game\fifa.exe
FirewallRules: [UDP Query User{F34414C4-224E-4EC4-BD1D-079DFFC1B3B7}C:\game\fifa 11\game\fifa.exe] => C:\game\fifa 11\game\fifa.exe
FirewallRules: [TCP Query User{62507A52-8743-405F-951C-AA279938201D}C:\game\fifa 11\game\fifa.exe] => C:\game\fifa 11\game\fifa.exe
FirewallRules: [UDP Query User{A90AAC93-B4D3-422F-A4A4-141E2621FBAB}C:\game\fifa 11\game\fifa.exe] => C:\game\fifa 11\game\fifa.exe
FirewallRules: [TCP Query User{16133CD3-60C5-42FC-87EC-D2145B0E0D1B}C:\program files (x86)\psafe\pssmartup.exe] => C:\program files (x86)\psafe\pssmartup.exe
FirewallRules: [UDP Query User{B1B8B6C4-0D2C-409A-84E9-9417B82E928E}C:\program files (x86)\psafe\pssmartup.exe] => C:\program files (x86)\psafe\pssmartup.exe
FirewallRules: [TCP Query User{2791E46F-3BE7-42B4-9025-CA9DE188B247}C:\program files (x86)\konami\pro evolution soccer 2012\pes2012.exe] => C:\program files (x86)\konami\pro evolution soccer 2012\pes2012.exe
FirewallRules: [UDP Query User{40AB34C2-F5EB-4AFF-9714-042C1A78FD19}C:\program files (x86)\konami\pro evolution soccer 2012\pes2012.exe] => C:\program files (x86)\konami\pro evolution soccer 2012\pes2012.exe
FirewallRules: [TCP Query User{7336358B-73A7-41FA-9349-C0ECBD944436}C:\game\fifa 11\game\fifa11.exe] => C:\game\fifa 11\game\fifa11.exe
FirewallRules: [UDP Query User{B0ABFA58-4BB7-4204-9CCB-2E6A9ED1DDB3}C:\game\fifa 11\game\fifa11.exe] => C:\game\fifa 11\game\fifa11.exe
FirewallRules: [{1EDCDD57-F5F4-45AD-AD3A-7A2359A05FA5}] => C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [TCP Query User{883C0205-72C1-492A-B500-ECD704A03572}C:\game\fifa 11\game\fifa11.exe] => C:\game\fifa 11\game\fifa11.exe
FirewallRules: [UDP Query User{A83F70D7-4632-4032-B520-2B5572C88011}C:\game\fifa 11\game\fifa11.exe] => C:\game\fifa 11\game\fifa11.exe
FirewallRules: [TCP Query User{846B1CB7-5AB2-439B-96AA-50983AD45F36}C:\users\thelma\downloads\exe's\eclipse\eclipse.exe] => C:\users\thelma\downloads\exe's\eclipse\eclipse.exe
FirewallRules: [UDP Query User{5CE09FD6-9A3A-4FDD-B668-D28A2952A547}C:\users\thelma\downloads\exe's\eclipse\eclipse.exe] => C:\users\thelma\downloads\exe's\eclipse\eclipse.exe
FirewallRules: [{495414BA-BC0E-44BB-B770-99834FD91CBD}] => C:\Program Files (x86)\Sports Interactive\Football Manager 2010\fm.exe
FirewallRules: [{23716399-7E3D-46D2-A0EC-F28BA54F1324}] => C:\Program Files (x86)\Sports Interactive\Football Manager 2010\fm.exe
FirewallRules: [{B8427E5D-A3C5-4364-8BDE-45DCD3D9F3D7}] => C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{EA1C95A0-A0D1-47E3-90C9-3514C348CD4D}] => C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{37413469-B1CC-404C-A748-796C04B18334}] => C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{65E119F5-B11D-43F8-BC9E-EA779A1FA21C}] => C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{3159157F-48EA-41B3-AF36-09B3117D8ECE}] => C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{BAFD925A-E39B-4D6E-B70D-27DC69DE39ED}] => C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{F1454FB0-BF7D-45D6-9E5E-E6B9F5A028F0}] => C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{EDB12A07-1806-4BB7-8B8F-E4B781FFAC0B}] => C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{D5852FBF-9FC9-41D4-970B-EC106DA34381}] => C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{0604C235-E42B-4202-9117-D60CB8B7CFB2}] => C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{3BD7E688-CDE2-4ED2-9DBB-3D8919649F7C}] => C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{4F501A6A-AD7B-4F95-BA78-52D296000B24}] => C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{D8422C66-728F-431D-903F-FFAB20EB1150}] => C:\Program Files\AVAST Software\Avast\Setup\instup.exe
FirewallRules: [{0BC82083-5268-478F-8D1F-F122C1FBD8FC}] => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe
FirewallRules: [TCP Query User{9D925F5A-858B-4826-8DED-AC81AEFBD54C}C:\program files (x86)\jetbrains\webstorm 2016.2.4\bin\webstorm.exe] => C:\program files (x86)\jetbrains\webstorm 2016.2.4\bin\webstorm.exe
FirewallRules: [UDP Query User{E8118F7B-CC6D-4C49-A69B-105B1129F6A2}C:\program files (x86)\jetbrains\webstorm 2016.2.4\bin\webstorm.exe] => C:\program files (x86)\jetbrains\webstorm 2016.2.4\bin\webstorm.exe
FirewallRules: [{67E8F657-92B7-4BEC-89DE-C3E31D43E082}] => C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe
FirewallRules: [{5EF6049C-4476-4C1F-964A-A31839D5D988}] => LPort=2869
FirewallRules: [{87705817-B48A-4395-958D-41ECB871E1D4}] => LPort=1900
FirewallRules: [TCP Query User{1A7DE0D1-282E-4833-AD75-D41D03C42EDC}C:\users\thelma\videos\torrents\nfs.most.wanted.2012.rich_jc\need for speed most wanted 2\nfs13.exe] => C:\users\thelma\videos\torrents\nfs.most.wanted.2012.rich_jc\need for speed most wanted 2\nfs13.exe
FirewallRules: [UDP Query User{6DEC2F55-4FF6-46A9-A83E-BE2CEF757809}C:\users\thelma\videos\torrents\nfs.most.wanted.2012.rich_jc\need for speed most wanted 2\nfs13.exe] => C:\users\thelma\videos\torrents\nfs.most.wanted.2012.rich_jc\need for speed most wanted 2\nfs13.exe
FirewallRules: [TCP Query User{65AACBD7-455C-4E1E-9CAF-A355F8FBE723}C:\users\thelma\appdata\local\akamai\netsession_win.exe] => C:\users\thelma\appdata\local\akamai\netsession_win.exe
FirewallRules: [UDP Query User{C9FBC057-08A4-47D2-80A3-21CB39762CF2}C:\users\thelma\appdata\local\akamai\netsession_win.exe] => C:\users\thelma\appdata\local\akamai\netsession_win.exe
FirewallRules: [TCP Query User{80E16136-34CB-4275-8A27-FDC4EFB74DB0}C:\program files (x86)\turbine\the lord of the rings online\lotroclient.exe] => C:\program files (x86)\turbine\the lord of the rings online\lotroclient.exe
FirewallRules: [UDP Query User{83D56A4D-26E9-4980-A826-59133F5E2E5D}C:\program files (x86)\turbine\the lord of the rings online\lotroclient.exe] => C:\program files (x86)\turbine\the lord of the rings online\lotroclient.exe
FirewallRules: [{409D9674-413C-4AE5-9F58-03982AFA1AB3}] => C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
FirewallRules: [{81C24FA6-ACF8-4AC3-BEC3-020FF4FEEB8F}] => C:\Program Files\Diebold\Warsaw\core.exe
FirewallRules: [TCP Query User{C8CA92B3-D584-4C17-A2ED-9DAFAD051C50}C:\users\thelma\appdata\roaming\utorrent\updates\3.4.9_43057.exe] => C:\users\thelma\appdata\roaming\utorrent\updates\3.4.9_43057.exe
FirewallRules: [UDP Query User{22D5E18B-B525-4AFB-AA8E-3C3E7502C3A2}C:\users\thelma\appdata\roaming\utorrent\updates\3.4.9_43057.exe] => C:\users\thelma\appdata\roaming\utorrent\updates\3.4.9_43057.exe
FirewallRules: [{EFB38A64-15DC-4D85-8AAA-959848B64C23}] => C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{ED779B75-BE26-4B92-BCA7-3D0EA5598503}] => C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{68227BF5-73AA-49AF-880F-22AD0EC05E76}] => C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe
FirewallRules: [{01143B9B-91F3-4D16-84A8-4AB846D7B81B}] => C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe
FirewallRules: [{DDEED285-EA16-427A-9ABB-C282271B371A}] => C:\Users\THELMA\AppData\Local\Amigo\Application\amigo.exe
FirewallRules: [{A61EEDF8-3C2F-4823-8C5C-CCEC7DDA60BE}] => C:\ProgramData\Microsoft\Network\Dsq\network\sysnetwk.exe
==================== Pontos de Restauração =========================
27-12-2016 10:45:10 Ponto de Verificação Agendado
==================== Dispositivos Apresentando Falhas No Gerenciador =============
==================== Erros no Log de eventos: =========================
Erros em Aplicativos:
==================
Error: (12/29/2016 11:24:31 AM) (Source: Application Hang) (EventID: 1002) (User: )
Description: O programa chrome.exe versão 55.0.2883.87 parou de interagir com o Windows e foi fechado. Para ver se há mais informações disponÃveis sobre o problema, verifique o histórico de problemas no painel de controle Segurança e Manutenção.
ID do Processo: 156c
Hora de InÃcio: 01d261d6ad66fb0b
Hora de Término: 6402
Caminho do Aplicativo: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
ID do Relatório: 2eef1e27-cdd2-11e6-be93-0025ab09e2b7
Nome completo do pacote com falha:
ID do aplicativo relativo ao pacote com falha:
Error: (12/29/2016 07:03:00 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Nome do aplicativo com falha: svchost.exe_MapsBroker, versão: 10.0.14393.0, carimbo de data/hora: 0x57899b1c
Nome do módulo com falha: unknown, versão: 0.0.0.0, carimbo de data/hora: 0x00000000
Código de exceção: 0x8400000e
Deslocamento da falha: 0x0000000000000000
ID do processo com falha: 0x2228
Hora de inÃcio do aplicativo com falha: 0x01d261ba9f1aef9c
Caminho do aplicativo com falha: C:\WINDOWS\System32\svchost.exe
Caminho do módulo com falha: unknown
ID do Relatório: 075ba4c7-2009-48fa-93e3-7be696a25ecf
Nome completo do pacote com falha:
ID do aplicativo relativo ao pacote com falha:
Error: (12/28/2016 05:35:44 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: O programa ShellExperienceHost.exe versão 10.0.14393.447 parou de interagir com o Windows e foi fechado. Para ver se há mais informações disponÃveis sobre o problema, verifique o histórico de problemas no painel de controle Segurança e Manutenção.
ID do Processo: c64
Hora de InÃcio: 01d26149cfb92e97
Hora de Término: 4294967295
Caminho do Aplicativo: C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\ShellExperienceHost.exe
ID do Relatório: 19a9bbb5-cd3d-11e6-be93-0025ab09e2b7
Nome completo do pacote com falha: Microsoft.Windows.ShellExperienceHost_10.0.14393.576_neutral_neutral_cw5n1h2txyewy
ID do aplicativo relativo ao pacote com falha: App
Error: (12/28/2016 05:35:28 PM) (Source: Winlogon) (EventID: 4005) (User: )
Description: O processo de logon do Windows foi encerrado inesperadamente.
Error: (12/28/2016 05:35:06 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: TH-PC-AIO)
Description: Falha na ativação do aplicativo Microsoft.WindowsCalculator_8wekyb3d8bbwe!App com o erro: -2144927141. Veja o log Microsoft-Windows-TWinUI/Operational para obter informações adicionais.
Error: (12/28/2016 05:34:56 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 2486) (User: TH-PC-AIO)
Description: O aplicativo Microsoft.Windows.ShellExperienceHost_10.0.14393.576_neutral_neutral_cw5n1h2txyewy+App não foi iniciado dentro do tempo alocado.
Error: (12/28/2016 05:08:45 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: O programa ShellExperienceHost.exe versão 10.0.14393.447 parou de interagir com o Windows e foi fechado. Para ver se há mais informações disponÃveis sobre o problema, verifique o histórico de problemas no painel de controle Segurança e Manutenção.
ID do Processo: e0
Hora de InÃcio: 01d26145db4be2eb
Hora de Término: 4294967295
Caminho do Aplicativo: C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\ShellExperienceHost.exe
ID do Relatório: 610fd215-cd39-11e6-be93-0025ab09e2b7
Nome completo do pacote com falha: Microsoft.Windows.ShellExperienceHost_10.0.14393.576_neutral_neutral_cw5n1h2txyewy
ID do aplicativo relativo ao pacote com falha: App
Error: (12/28/2016 05:08:20 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 2486) (User: TH-PC-AIO)
Description: O aplicativo Microsoft.Windows.ShellExperienceHost_10.0.14393.576_neutral_neutral_cw5n1h2txyewy+App não foi iniciado dentro do tempo alocado.
Error: (12/28/2016 04:14:00 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 2484) (User: TH-PC-AIO)
Description: O pacote Microsoft.Windows.Photos_16.1118.10000.0_x64__8wekyb3d8bbwe+App foi terminado porque levou muito tempo para ser suspenso.
Error: (12/28/2016 03:52:26 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 2484) (User: TH-PC-AIO)
Description: O pacote Microsoft.Windows.Cortana_1.7.0.14393_neutral_neutral_cw5n1h2txyewy+CortanaUI foi terminado porque levou muito tempo para ser suspenso.
Erros de Sistema:
=============
Error: (12/29/2016 12:08:02 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Não foi possÃvel iniciar o serviço XBox devido ao seguinte erro:
Acesso negado.
Error: (12/29/2016 12:08:02 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Não foi possÃvel iniciar o serviço WindowsSecurity devido ao seguinte erro:
Acesso negado.
Error: (12/29/2016 12:04:07 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Não foi possÃvel iniciar o serviço Listener Adapter do Net.Pipe devido ao seguinte erro:
O serviço não respondeu à requisição de inÃcio ou controle em tempo hábil.
Error: (12/29/2016 12:04:07 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Não foi possÃvel iniciar o serviço Listener Adapter do Net.Msmq devido ao seguinte erro:
O serviço não respondeu à requisição de inÃcio ou controle em tempo hábil.
Error: (12/29/2016 12:04:07 PM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Tempo limite esgotado (30000 milissegundos) ao aguardar a conexão do serviço NetMsmqActivator.
Error: (12/29/2016 12:04:07 PM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Tempo limite esgotado (30000 milissegundos) ao aguardar a conexão do serviço NetPipeActivator.
Error: (12/29/2016 12:03:16 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: O serviço NetTcpActivator depende do serviço NetTcpPortSharing, mas não foi possÃvel iniciá-lo devido ao seguinte erro:
O serviço não pode ser iniciado porque está desativado ou não tem dispositivos ativados associados.
Error: (12/29/2016 12:03:12 PM) (Source: DCOM) (EventID: 10016) (User: AUTORIDADE NT)
Description: As configurações de permissão padrão-computador não concedem permissão Local Ativação para o aplicativo de Servidor COM com CLSID
{C2F03A33-21F5-47FA-B4BB-156362A2F239}
e APPID
{316CDED5-E4AE-4B15-9113-7055D84DCC97}
ao usuário AUTORIDADE NT\SERVIÃO LOCAL SID (S-1-5-19) do endereço LocalHost (Usando LRPC) que está sendo executado no contêiner de aplicativos Não DisponÃvel SID (Não DisponÃvel). Essa permissão de segurança pode ser modificada com a ferramenta administrativa Serviços de Componentes.
Error: (12/29/2016 12:03:12 PM) (Source: DCOM) (EventID: 10016) (User: AUTORIDADE NT)
Description: As configurações de permissão especÃfico do aplicativo não concedem permissão Local Ativação para o aplicativo de Servidor COM com CLSID
{6B3B8D23-FA8D-40B9-8DBD-B950333E2C52}
e APPID
{4839DDB7-58C2-48F5-8283-E1D1807D0D7D}
ao usuário AUTORIDADE NT\SERVIÃO LOCAL SID (S-1-5-19) do endereço LocalHost (Usando LRPC) que está sendo executado no contêiner de aplicativos Não DisponÃvel SID (Não DisponÃvel). Essa permissão de segurança pode ser modificada com a ferramenta administrativa Serviços de Componentes.
Error: (12/29/2016 12:03:12 PM) (Source: DCOM) (EventID: 10016) (User: AUTORIDADE NT)
Description: As configurações de permissão padrão-computador não concedem permissão Local Ativação para o aplicativo de Servidor COM com CLSID
{C2F03A33-21F5-47FA-B4BB-156362A2F239}
e APPID
{316CDED5-E4AE-4B15-9113-7055D84DCC97}
ao usuário AUTORIDADE NT\SERVIÃO LOCAL SID (S-1-5-19) do endereço LocalHost (Usando LRPC) que está sendo executado no contêiner de aplicativos Não DisponÃvel SID (Não DisponÃvel). Essa permissão de segurança pode ser modificada com a ferramenta administrativa Serviços de Componentes.
CodeIntegrity:
===================================
Date: 2016-12-17 10:00:51.461
Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume2\Windows\assembly\GAC\Microsoft.StdFormat\7.0.3300.0__b03f5f7f11d50a3a\Microsoft.StdFormat.dll that did not meet the Microsoft signing level requirements.
Date: 2016-12-17 10:00:51.336
Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume2\Windows\assembly\GAC\ADODB\7.0.3300.0__b03f5f7f11d50a3a\ADODB.dll that did not meet the Microsoft signing level requirements.
Date: 2016-12-17 10:00:51.035
Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume2\Windows\assembly\GAC\MSDATASRC\7.0.3300.0__b03f5f7f11d50a3a\MSDATASRC.dll that did not meet the Microsoft signing level requirements.
Date: 2016-12-17 10:00:50.367
Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume2\Windows\assembly\GAC\Microsoft.StdFormat\7.0.3300.0__b03f5f7f11d50a3a\Microsoft.StdFormat.dll that did not meet the Microsoft signing level requirements.
Date: 2016-12-17 10:00:49.942
Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume2\Windows\assembly\GAC\ADODB\7.0.3300.0__b03f5f7f11d50a3a\ADODB.dll that did not meet the Microsoft signing level requirements.
Date: 2016-12-17 10:00:49.659
Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume2\Windows\assembly\GAC\MSDATASRC\7.0.3300.0__b03f5f7f11d50a3a\MSDATASRC.dll that did not meet the Microsoft signing level requirements.
Date: 2016-12-17 10:00:43.349
Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume2\Windows\assembly\GAC\stdole\7.0.3300.0__b03f5f7f11d50a3a\stdole.dll that did not meet the Microsoft signing level requirements.
Date: 2016-12-17 10:00:41.446
Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume2\Windows\assembly\GAC\stdole\7.0.3300.0__b03f5f7f11d50a3a\stdole.dll that did not meet the Microsoft signing level requirements.
Date: 2016-12-13 13:24:43.173
Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume2\Windows\assembly\GAC\Microsoft.StdFormat\7.0.3300.0__b03f5f7f11d50a3a\Microsoft.StdFormat.dll that did not meet the Microsoft signing level requirements.
Date: 2016-12-13 13:24:42.931
Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume2\Windows\assembly\GAC\ADODB\7.0.3300.0__b03f5f7f11d50a3a\ADODB.dll that did not meet the Microsoft signing level requirements.
==================== Informações da Memória ===========================
Processador: AMD E-350 Processor
Percentagem de memória em uso: 80%
RAM física total: 1645.62 MB
RAM física disponível: 317.74 MB
Virtual Total: 3847.62 MB
Virtual disponível: 1544.42 MB
==================== Drives ================================
Drive c: () (Fixed) (Total:219.19 GB) (Free:13.31 GB) NTFS
Drive d: () (Fixed) (Total:246.03 GB) (Free:47.28 GB) NTFS
Drive f: (THULIO) (Removable) (Total:3.72 GB) (Free:0.01 GB) FAT32
==================== MBR & Tabela de Partições ==================
========================================================
Disk: 1 (Size: 3.7 GB) (Disk ID: 00000000)
Partition: GPT.
==================== Fim de Addition.txt ============================