Publicité
Publicité
Format du document : text/plain
Prévisualisation
Resultado do exame Adicional Farbar Recovery Scan Tool (x64) Versão: 06-06-2019
Executado por Fran (06-06-2019 18:44:47)
Executando a partir de D:\Downloads
Windows 10 Pro Versão 1803 17134.765 (X64) (2018-06-07 13:59:29)
Modo da Inicialização: Normal
==========================================================
==================== Contas: =============================
Administrador (S-1-5-21-1737901907-2937910466-1665796672-500 - Administrator - Disabled)
Convidado (S-1-5-21-1737901907-2937910466-1665796672-501 - Limited - Disabled)
DefaultAccount (S-1-5-21-1737901907-2937910466-1665796672-503 - Limited - Disabled)
Fran (S-1-5-21-1737901907-2937910466-1665796672-1001 - Administrator - Enabled) => C:\Users\Fran
HomeGroupUser$ (S-1-5-21-1737901907-2937910466-1665796672-1003 - Limited - Enabled)
WDAGUtilityAccount (S-1-5-21-1737901907-2937910466-1665796672-504 - Limited - Disabled)
==================== Central de Segurança ========================
(Se uma entrada for incluída na fixlist, será removida.)
AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
==================== Programas Instalados ======================
(Somente os programas adwares com a indicação "Oculto" podem ser adicionados à fixlist para desocultá-los. Os programas adwares devem ser desinstalados manualmente.)
Adobe Acrobat Reader DC - Português (HKLM-x32\...\{AC76BA86-7AD7-1046-7B44-AC0F074E4100}) (Version: 19.012.20034 - Adobe Systems Incorporated)
Adobe Flash Player 32 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 32.0.0.192 - Adobe)
Adobe Photoshop CC 2015 (HKLM-x32\...\{793C2BF7-A4FE-4608-91C9-9282C5801C21}) (Version: 16.0 - Adobe Systems Incorporated)
ANDY OS (HKLM-x32\...\ANDY OS) (Version: 1.1 - andyroid.net)
Anki (HKLM-x32\...\Anki) (Version: - )
Apple Mobile Device Support (HKLM\...\{5FA8C4BE-8C74-4B9C-9B49-EBF759230189}) (Version: 12.1.0.25 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{A30EA700-5515-48F0-88B0-9E99DC356B88}) (Version: 2.6.0.1 - Apple Inc.)
Backup and Sync from Google (HKLM\...\{F9EEDE46-6409-4ECC-8AB6-7062464987A4}) (Version: 3.43.4275.9540 - Google, Inc.)
Bizagi Modeler (HKLM\...\{320aa076-e1e6-426a-900a-569593672e62}) (Version: 3.3.2033 - Bizagi Limited) Hidden
Bizagi Modeler (HKLM-x32\...\InstallShield_{320aa076-e1e6-426a-900a-569593672e62}) (Version: 3.3.2033 - Bizagi Limited)
Bonjour (HKLM\...\{56DDDFB8-7F79-4480-89D5-25E1F52AB28F}) (Version: 3.1.0.1 - Apple Inc.)
Broadcom NetLink Controller (HKLM\...\{7FBA83D7-D58E-4B70-9B9B-12E95B183B22}) (Version: 16.6.1.3 - Broadcom Corporation)
CGS17_Setup_x64 (HKLM\...\{83646B67-A878-4E95-BB4B-AF4A6E61F28C}) (Version: 17.0 - Corel Corporation) Hidden
Code42 CrashPlan (HKLM\...\{F4BB4CD5-B9BC-4D5D-81A9-24B0C4EBF5C1}) (Version: 6.7.1.4615 - Code 42 Software)
Core FTP LE (x64) (HKLM-x32\...\CoreFTP(x64)) (Version: - )
Corel Graphics - Windows Shell Extension (HKLM\...\_{4AB916EE-ABA8-4079-9889-745798B6D809}) (Version: 17.0.0.491 - Corel Corporation)
Corel Graphics - Windows Shell Extension (HKLM\...\{4AB916EE-ABA8-4079-9889-745798B6D809}) (Version: 17.0.491 - Corel Corporation) Hidden
Corel Graphics - Windows Shell Extension 32 Bit (HKLM\...\{FD4A43CE-ABAE-4161-83AC-314A3C804F42}) (Version: 17.0.491 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X7 - BR (x64) (HKLM\...\{FC41DFBE-6C39-4C84-949B-7CB1E6460C7A}) (Version: 17.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X7 - Capture (x64) (HKLM\...\{2C91CB9D-323D-43E5-A433-229B71CFB773}) (Version: 17.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X7 - Common (x64) (HKLM\...\{9178F0A8-B6F6-4DA7-AD63-317CC4875F4B}) (Version: 17.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X7 - Connect (x64) (HKLM\...\{BD036E95-A9CD-4DED-B744-95AB1DCAFF0C}) (Version: 17.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X7 - Custom Data (x64) (HKLM\...\{5162E418-BB43-4C8F-ACD6-069645EF98C3}) (Version: 17.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X7 - Draw (x64) (HKLM\...\{2C0DDC74-5234-43DD-BB5A-0645B8FE5289}) (Version: 17.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X7 - Filters (x64) (HKLM\...\{D10A5CFA-FE33-4F06-AE37-554604F00A52}) (Version: 17.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X7 - FontNav (x64) (HKLM\...\{5406029B-67AD-4F8E-9F2D-F1959CD9CD86}) (Version: 17.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X7 - IPM Content (x64) (HKLM\...\{EF44BCCD-13F9-4974-862C-CCFAF43EE082}) (Version: 17.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X7 - IPM T (x64) (HKLM\...\{13179AB2-69FD-459B-800F-81865A501AD4}) (Version: 17.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X7 - PHOTO-PAINT (x64) (HKLM\...\{C922F325-DD52-4E22-B204-431A06E63E51}) (Version: 17.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X7 - Photozoom Plugin (x64) (HKLM\...\{1A73168F-5983-46A6-AAAB-FD83BC231E02}) (Version: 17.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X7 - Redist (x64) (HKLM\...\{C57EDB5A-AC8E-4E03-9F1A-DC013A2BB9B2}) (Version: 17.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X7 - Setup Files (x64) (HKLM\...\{5CB73140-806C-42C6-A05A-1AFD0E92DEB5}) (Version: 17.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X7 - VBA (x64) (HKLM\...\{5672E0DC-7489-4EAC-8CFD-E01B3868FCB5}) (Version: 17.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X7 - VideoBrowser (x64) (HKLM\...\{966996DC-D67C-40E3-8BD4-31FA0F093571}) (Version: 17.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X7 - Writing Tools (x64) (HKLM\...\{D63404AC-C2F1-4B3D-96EA-9727AC9D994C}) (Version: 17.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X7 (64-Bit) (HKLM\...\_{5CB73140-806C-42C6-A05A-1AFD0E92DEB5}) (Version: 17.0.0.491 - Corel Corporation)
D3DX10 (HKLM-x32\...\{E09C4DB7-630C-4F06-A631-8EA7239923AF}) (Version: 15.4.2368.0902 - Microsoft) Hidden
D-Book 6.7.1 (HKLM-x32\...\D-Book) (Version: - )
FileZilla Client 3.35.2 (HKLM-x32\...\FileZilla Client) (Version: 3.35.2 - Tim Kosse)
Galeria de Fotos (HKLM-x32\...\{9EE1AE8B-4872-41CA-8C9A-C33D899523E0}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
GBBD Caixa Economica Federal (HKLM-x32\...\{5d01f486-f32d-462e-8830-cc1d116e8ece}_is1) (Version: 3.12.0.2 - )
GlanceGuest version 3.9.0.1 (HKLM-x32\...\{F5AC5408-CC29-47C0-AD53-1BBBF268B364}_is1) (Version: 3.9.0.1 - Glance Networks, Inc.)
GoLabel (HKLM-x32\...\{E90E3277-C17B-4BD6-9EE5-76B7B4C8CB79}) (Version: 1.0.290 - GoDEX)
Google Chrome (HKLM-x32\...\{C3FF5ACB-174A-3E07-AE2A-62063FBCC9B1}) (Version: 74.0.3729.169 - Google, Inc.)
Google Earth (HKLM-x32\...\{4D2A6330-2F8B-11E3-9C40-B8AC6F97B88E}) (Version: 7.1.2.2041 - Google)
Google Earth Pro (HKLM\...\{F914BC59-918A-498F-B2E3-B274C9CB48A8}) (Version: 7.3.2.5491 - Google)
Google Earth Pro (HKLM-x32\...\{44FC61F0-2F8A-11E3-8CAE-B8AC6F97B88E}) (Version: 7.1.2.2041 - Google)
Google Update Helper (HKLM-x32\...\{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.34.11 - Google LLC) Hidden
Google Update Helper (HKLM-x32\...\{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}) (Version: 1.3.25.11 - Google Inc.) Hidden
GoTo Opener (HKLM-x32\...\{2C183CF0-3077-43D0-B001-F93AC5E68942}) (Version: 1.0.487 - LogMeIn, Inc.)
GoToMeeting 8.45.2.13190 (HKU\S-1-5-21-1737901907-2937910466-1665796672-1001\...\GoToMeeting) (Version: 8.45.2.13190 - LogMeIn, Inc.)
HD Webcam (HKLM-x32\...\{E0A7ED39-8CD6-4351-93C3-69CCA00D12B4}) (Version: 6.2.9200.10275 - Realtek Semiconductor Corp.)
HP LaserJet Pro MFP M127-M128 (HKLM-x32\...\{3b050369-8d19-413d-9dec-84ff278472eb}) (Version: 8.0.13171.943 - Hewlett-Packard)
HP Update (HKLM-x32\...\{2EFA4E4C-7B5F-48F7-A1C0-1AA882B7A9C3}) (Version: 5.003.002.004 - Hewlett-Packard)
hpbDSService (HKLM-x32\...\{62022DCB-BA92-4EC2-AE03-9B946E4DBF12}) (Version: 002.002.07399 - Hewlett-Packard) Hidden
hpbM128DSService (HKLM-x32\...\{F08687B3-BB9A-4CBC-AE6B-BDF4B642E7BA}) (Version: 001.001.08254 - Hewlett-Packard) Hidden
HPLJDXPHelper (HKLM-x32\...\{010788AB-706E-4604-A46B-6785EAB64B5E}) (Version: 140.069.007 - HP) Hidden
HPLJUTCore (HKLM-x32\...\{B445502B-2F83-4873-90F1-06059F71A46A}) (Version: 014.000.0001 - HP) Hidden
hppLaserJetService (HKLM-x32\...\{0C4C3664-157A-4D69-B474-31EBF2EE1AE3}) (Version: 009.033.00926 - Hewlett-Packard) Hidden
hppM125LaserJetService (HKLM-x32\...\{18D5B189-DBDD-4E57-A84B-58C7700E9BB0}) (Version: 001.032.00682 - Hewlett-Packard) Hidden
hpStatusAlerts (HKLM-x32\...\{E35D0ED5-716B-4E1F-8477-54DD746DF527}) (Version: 140.040.00231 - Hewlett Packard) Hidden
iCloud (HKLM\...\{05D97028-FD26-4A3D-BADC-D1CA2E9F1214}) (Version: 7.10.0.9 - Apple Inc.)
Intel(R) C++ Redistributables for Windows* on Intel(R) 64 (HKLM-x32\...\{D2437C5C-2D8C-40D2-8059-689AD7239FA3}) (Version: 11.1.048 - Intel Corporation)
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 9.5.23.1766 - Intel Corporation)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 10.18.10.4358 - Intel Corporation)
iTunes (HKLM\...\{148C9B53-4D35-4D0C-B7C4-5431AB750CD7}) (Version: 12.9.3.3 - Apple Inc.)
Java 8 Update 66 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86418066F0}) (Version: 8.0.660.17 - Oracle Corporation)
Kaspersky Internet Security (HKLM-x32\...\{E27B1D7B-3B34-43A2-9FC0-9828D5DF46E2}) (Version: 17.0.0.611 - Kaspersky Lab) Hidden
K-Lite Codec Pack 10.9.0 Full (HKLM-x32\...\KLiteCodecPack_is1) (Version: 10.9.0 - )
LJDXPHelperUI (HKLM-x32\...\{DEB23FB1-04FF-44AC-98B5-EEB243D65A28}) (Version: 140.069.007 - HP) Hidden
Microsoft Mouse and Keyboard Center (HKLM\...\Microsoft Mouse and Keyboard Center) (Version: 2.3.188.0 - Microsoft Corporation)
Microsoft Office Access database engine 2007 (English) (HKLM-x32\...\{90120000-00D1-0409-0000-0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft Corporation)
Microsoft Office Professional Plus 2013 (HKLM\...\Office15.PROPLUS) (Version: 15.0.4569.1506 - Microsoft Corporation)
Microsoft OneDrive (HKU\S-1-5-21-1737901907-2937910466-1665796672-1001\...\OneDriveSetup.exe) (Version: 19.070.0410.0007 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4048 (HKLM-x32\...\{5B1F2843-B379-3FF2-B0D3-64DD143ED53A}) (Version: 9.0.30729.4048 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.50903 - Microsoft Corporation)
Microsoft Visual Studio Tools for Applications 2012 (HKLM-x32\...\{89ca2a32-2b52-4595-8dfd-6fe4757958d0}) (Version: 11.0.51108 - Microsoft Corporation)
Microsoft XNA Framework Redistributable 4.0 Refresh (HKLM-x32\...\{D69C8EDE-BBC5-436B-8E0E-C5A6D311CF4F}) (Version: 4.0.30901.0 - Microsoft Corporation)
Mobile Broadband HL Service (HKLM-x32\...\Mobile Broadband HL Service) (Version: 22.001.20.00.03 - Huawei Technologies Co.,Ltd)
Movie Maker (HKLM-x32\...\{C05F4139-CB6B-4272-A0BF-861FEB667F27}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Movie Maker (HKLM-x32\...\{DD67BE4B-7E62-4215-AFA3-F123A800A389}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
MPC-HC 1.7.9 (HKLM-x32\...\{2624B969-7135-4EB1-B0F6-2D8C397B45F7}_is1) (Version: 1.7.9 - MPC-HC Team)
My Picture Book (HKU\S-1-5-21-1737901907-2937910466-1665796672-1001\...\My Picture Book) (Version: My Picture Book 2015.2.0 - MyPicturebook)
Notepad++ (32-bit x86) (HKLM-x32\...\Notepad++) (Version: 7.5.8 - Notepad++ Team)
Nox APP Player (HKLM-x32\...\Nox) (Version: 3.7.1.0 - Duodian Technology Co. Ltd.)
nutraCoster (HKLM-x32\...\nutraCoster) (Version: - )
Pacote de Idiomas do Microsoft Visual Studio 2010 Tools for Office Runtime (x64) - Português (Brasil) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64) Language Pack - PTB) (Version: 10.0.50903 - Microsoft Corporation)
Pacote de Idiomas do Microsoft Visual Studio Tools for Applications 2012 x64 Hosting Support - PTB (HKLM\...\{E237254B-36A1-3D27-815E-B37C13BE0796}) (Version: 11.0.51108 - Microsoft Corporation) Hidden
Pacote de Idiomas do Microsoft Visual Studio Tools for Applications 2012 x86 Hosting Support - PTB (HKLM-x32\...\{03077B58-6ACF-32CA-B42A-EAA458C295A1}) (Version: 11.0.51108 - Microsoft Corporation) Hidden
PDF Architect 3 (HKLM-x32\...\PDF Architect 3) (Version: 3.0.45.22485 - pdfforge GmbH)
PDF Architect 3 Create Module (HKLM-x32\...\{38BA288B-C4F4-4C62-9237-4BFAB374F966}) (Version: 3.0.13.22993 - pdfforge GmbH) Hidden
PDF Architect 3 Edit Module (HKLM-x32\...\{5183F03D-90FA-493B-A074-F0F78B8486AD}) (Version: 3.0.13.22993 - pdfforge GmbH) Hidden
PDF Architect 3 View Module (HKLM-x32\...\{EB24E9E7-4BC1-4FD7-BF86-BDE07A7A03D7}) (Version: 3.0.13.22993 - pdfforge GmbH) Hidden
PDFCreator (HKLM\...\{0001B4FD-9EA3-4D90-A79E-FD14BA3AB01D}) (Version: 2.1.1 - pdfforge)
Photobook Designer (HKU\S-1-5-21-1737901907-2937910466-1665796672-1001\...\Photobook Designer) (Version: Photobook Designer 2016.2.0 - Photobook Worldwide)
Realtek Card Reader (HKLM-x32\...\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}) (Version: 6.3.370.70 - Realtek Semiconductor Corp.)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7535 - Realtek Semiconductor Corp.)
Revisores de Texto do Microsoft Office 2013 – Português do Brasil (HKLM\...\{90150000-001F-0416-1000-0000000FF1CE}) (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Revo Uninstaller 2.0.5 (HKLM\...\{A28DBDA2-3CC7-4ADC-8BFE-66D7743C6C97}_is1) (Version: 2.0.5 - VS Revo Group, Ltd.)
Rockstar Games Social Club (HKLM-x32\...\Rockstar Games Social Club) (Version: 1.2.1.0 - Rockstar Games)
SAMSUNG USB Driver for Mobile Phones (HKLM\...\{D0795B21-0CDA-4a92-AB9E-6E92D8111E44}) (Version: 1.5.49.0 - SAMSUNG Electronics Co., Ltd.)
Scan To (HKLM\...\{E8A34AC8-0137-4515-A94B-0A0946DDC251}) (Version: 1.0.1 - HP)
Service Pack 1 for Microsoft Office 2013 (KB2850036) 64-Bit Edition (HKLM\...\{90150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUS_{D82063A8-7C8C-4C3B-A9BB-95138CA55D26}) (Version: - Microsoft)
Skype™ 7.21 (HKLM-x32\...\{FC965A47-4839-40CA-B618-18F486F042C6}) (Version: 7.21.100 - Skype Technologies S.A.)
Smilebox (HKU\S-1-5-21-1737901907-2937910466-1665796672-1001\...\Smilebox) (Version: 1.0.0.31483 - Smilebox, Inc.)
Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)
StudioTax 2016 (HKLM-x32\...\{7848E1ED-9B3C-4AF1-9BEB-FF01C38A41CE}) (Version: 12.0.4.0 - BHOK IT Consulting)
Suporte para Aplicativos Apple (32-bit) (HKLM-x32\...\{5A659BE5-849B-484E-A83B-DCB78407F3A4}) (Version: 7.3 - Apple Inc.)
Suporte para Aplicativos Apple Apple (64-bit) (HKLM\...\{F8060941-C0AB-4BCE-88AC-F2FDA2E9F286}) (Version: 7.3 - Apple Inc.)
Sweet Home 3D version 3.3 (HKLM-x32\...\Sweet Home 3D_is1) (Version: - eTeks)
Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 19.0.9.4 - Synaptics Incorporated)
TAP-Windows 9.9.2 (HKLM\...\TAP-Windows) (Version: 9.9.2 - )
TeamViewer 13 (HKLM-x32\...\TeamViewer) (Version: 13.2.14327 - TeamViewer)
Tibia (HKU\S-1-5-21-1737901907-2937910466-1665796672-1001\...\Tibia) (Version: - CipSoft GmbH)
Unity Web Player (HKU\S-1-5-21-1737901907-2937910466-1665796672-1001\...\UnityWebPlayer) (Version: 5.1.3f1 - Unity Technologies ApS)
Update for Skype for Business 2015 (KB3039776) 64-Bit Edition (HKLM\...\{90150000-012B-0416-1000-0000000FF1CE}_Office15.PROPLUS_{2BA6245D-FBB9-42F6-AFD9-C0DC52763AD5}) (Version: - Microsoft)
Update for Windows 10 for x64-based Systems (KB4023057) (HKLM\...\{C3ACFCEA-240F-4DCC-A0C3-DD55FEE6C3C2}) (Version: 2.58.0.0 - Microsoft Corporation)
Warsaw 2.8.2.1 64 bits (HKLM\...\{20E60725-16C8-4FB9-8BC2-AF92C5F8D06D}_is1) (Version: 2.8.2.1 - GAS Tecnologia)
WinDirStat 1.1.2 (HKU\S-1-5-21-1737901907-2937910466-1665796672-1001\...\WinDirStat) (Version: - )
Windows Driver Package - BigNox Corporation (VBoxUSB) USB (09/16/2015 4.3.12) (HKLM\...\76B144D15273552931249392EDB13C0BBD52C84E) (Version: 09/16/2015 4.3.12 - BigNox Corporation)
Windows Driver Package - BigNox Corporation VBoxUSBMon System (09/16/2015 4.3.12) (HKLM\...\39F54A37125643D2E1E90FA7D81F36ACC9441510) (Version: 09/16/2015 4.3.12 - BigNox Corporation)
Windows Driver Package - BigNox Corporation XQHDrv System (09/16/2015 4.3.12) (HKLM\...\0147813640F7AF69F569581EE672B6BE1E71798E) (Version: 09/16/2015 4.3.12 - BigNox Corporation)
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3528.0331 - Microsoft Corporation)
WinRAR 5.50 (64-bit) (HKLM\...\WinRAR archiver) (Version: 5.50.0 - win.rar GmbH)
Языковой пакет для поддержки размещения набора средств Microsoft Visual Studio Tools для работы с приложениями 2012 (x64) - RUS (HKLM\...\{25FB53C5-BE4C-3B6C-A0C9-D49A39227E1E}) (Version: 11.0.51108 - Microsoft Corporation) Hidden
Языковой пакет для поддержки размещения набора средств Microsoft Visual Studio Tools для работы с приложениями 2012 (x86) - RUS (HKLM-x32\...\{68DC347D-C1C0-3DE2-A53E-CCC71DA53E57}) (Version: 11.0.51108 - Microsoft Corporation) Hidden
Packages:
=========
Acer Explorer -> C:\Program Files\WindowsApps\AcerIncorporated.AcerExplorer_2.0.3007.0_x86__48frkmn4z8aw4 [2018-01-01] (Acer Incorporated)
HP Smart -> C:\Program Files\WindowsApps\AD2F1837.HPPrinterControl_95.1.531.0_x64__v10z8vjag6ke6 [2019-03-20] (HP Inc.)
Mail and Calendar -> C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20174.0_x64__8wekyb3d8bbwe [2019-05-30] (Microsoft Corporation) [MS Ad]
Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1811.1.0_x64__8wekyb3d8bbwe [2019-01-20] (Microsoft Corporation) [MS Ad]
Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1811.1.0_x86__8wekyb3d8bbwe [2019-01-20] (Microsoft Corporation) [MS Ad]
Microsoft News -> C:\Program Files\WindowsApps\Microsoft.BingNews_4.30.10924.0_x64__8wekyb3d8bbwe [2019-04-03] (Microsoft Corporation) [MS Ad]
Microsoft Phone -> C:\Program Files\WindowsApps\Microsoft.CommsPhone_3.43.20002.1000_x64__8wekyb3d8bbwe [2018-09-08] (Microsoft Corporation)
Microsoft Phone Companion -> C:\Program Files\WindowsApps\Microsoft.WindowsPhone_10.1802.311.0_x64__8wekyb3d8bbwe [2018-02-12] (Microsoft Corporation)
Microsoft Solitaire Collection -> C:\Program Files\WindowsApps\Microsoft.MicrosoftSolitaireCollection_4.3.4032.0_x86__8wekyb3d8bbwe [2019-04-12] (Microsoft Studios) [MS Ad]
MSN Food & Drink -> C:\Program Files\WindowsApps\Microsoft.BingFoodAndDrink_3.0.4.336_x64__8wekyb3d8bbwe [2018-01-01] (Microsoft Corporation) [MS Ad]
MSN Health & Fitness -> C:\Program Files\WindowsApps\Microsoft.BingHealthAndFitness_3.0.4.336_x64__8wekyb3d8bbwe [2018-01-01] (Microsoft Corporation) [MS Ad]
MSN Money -> C:\Program Files\WindowsApps\Microsoft.BingFinance_4.29.10701.0_x64__8wekyb3d8bbwe [2019-03-22] (Microsoft Corporation) [MS Ad]
MSN Sports -> C:\Program Files\WindowsApps\Microsoft.BingSports_4.28.3242.0_x64__8wekyb3d8bbwe [2018-12-14] (Microsoft Corporation) [MS Ad]
MSN Travel -> C:\Program Files\WindowsApps\Microsoft.BingTravel_3.0.4.336_x64__8wekyb3d8bbwe [2018-01-01] (Microsoft Corporation) [MS Ad]
MSN Weather -> C:\Program Files\WindowsApps\Microsoft.BingWeather_4.28.10351.0_x64__8wekyb3d8bbwe [2019-02-12] (Microsoft Corporation) [MS Ad]
Reader Notification Client -> C:\Program Files\WindowsApps\ReaderNotificationClient_1.0.4.0_x86__e1rzdqpraam7r [2019-01-03] (Adobe Systems Incorporated)
Xbox 360 SmartGlass -> C:\Program Files\WindowsApps\Microsoft.XboxCompanion_1.4.3.0_x64__8wekyb3d8bbwe [2018-07-07] (Microsoft Corporation) [MS Ad]
==================== Exame Personalizado CLSID (Whitelisted): ==========================
(Se uma entrada for incluída na fixlist, será removida do Registro. O arquivo não será movido, a menos que seja colocado separadamente.)
CustomCLSID: HKU\S-1-5-21-1737901907-2937910466-1665796672-1001_Classes\CLSID\{0783EB25-59F8-4F02-B6B0-F1D4349F0007}\InprocServer32 -> C:\Users\Fran\AppData\Local\GAS Tecnologia\GBBD\npsf_cef_64.dll (Caixa Econômica Federal -> GAS Tecnologia)
CustomCLSID: HKU\S-1-5-21-1737901907-2937910466-1665796672-1001_Classes\CLSID\{0783EB25-59F8-4F02-B6B1-F1D4349F0007}\InprocServer32 -> C:\Users\Fran\AppData\Local\GAS Tecnologia\GBBD\npsf_cef_64.dll (Caixa Econômica Federal -> GAS Tecnologia)
CustomCLSID: HKU\S-1-5-21-1737901907-2937910466-1665796672-1001_Classes\CLSID\{820D63D5-8CFF-46DE-86AF-4997DEDD6DB5}\localserver32 -> C:\WINDOWS\system32\igfxEM.exe (Intel(R) pGFX -> Intel Corporation)
CustomCLSID: HKU\S-1-5-21-1737901907-2937910466-1665796672-1001_Classes\CLSID\{84B5A313-CD5D-4904-8BA2-AFDC81C1B309}\InprocServer32 -> C:\Users\Fran\AppData\Local\GoToMeeting\10996\G2MOutlookAddin64.dll => Nenhum Arquivo
CustomCLSID: HKU\S-1-5-21-1737901907-2937910466-1665796672-1001_Classes\CLSID\{D9AC5E73-BB10-467b-B884-AA1E475C51F5}\Shell\Open\Command -> C:\Program Files\Synaptics\SynTP\SynTPCpl.dll (Synaptics Incorporated -> Synaptics Incorporated)
ShellIconOverlayIdentifiers: [ GoogleDriveBlacklisted] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D42} => C:\Program Files\Google\Drive\googledrivesync64.dll [2019-04-09] (Google LLC -> Google)
ShellIconOverlayIdentifiers: [ GoogleDriveSynced] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D40} => C:\Program Files\Google\Drive\googledrivesync64.dll [2019-04-09] (Google LLC -> Google)
ShellIconOverlayIdentifiers: [ GoogleDriveSyncing] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D41} => C:\Program Files\Google\Drive\googledrivesync64.dll [2019-04-09] (Google LLC -> Google)
ContextMenuHandlers1: [ANotepad++64] -> {B298D29A-A6ED-11DE-BA8C-A68E55D89593} => C:\Program Files (x86)\Notepad++\NppShell_06.dll [2018-07-22] (Notepad++ -> )
ContextMenuHandlers1: [GDContextMenu] -> {BB02B294-8425-42E5-983F-41A1FA970CD6} => C:\Program Files\Google\Drive\contextmenu64.dll [2019-04-09] (Google LLC -> Google)
ContextMenuHandlers1-x32: [PDFArchitect3_PDFManagerExt] -> {7519DD38-AA6F-4250-8E81-F1576DA1A05E} => C:\Program Files (x86)\PDF Architect 3\creator-context-menu.dll [2015-04-24] (pdfforge GmbH -> pdfforge GmbH)
ContextMenuHandlers1: [PhotoStreamsExt] -> {89D984B3-813B-406A-8298-118AFA3A22AE} => C:\Program Files\Common Files\Apple\Internet Services\ShellStreams64.dll [2019-01-15] (Apple Inc. -> Apple Inc.)
ContextMenuHandlers1: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2017-08-11] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers1-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2017-08-11] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers4: [GDContextMenu] -> {BB02B294-8425-42E5-983F-41A1FA970CD6} => C:\Program Files\Google\Drive\contextmenu64.dll [2019-04-09] (Google LLC -> Google)
ContextMenuHandlers5: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} => -> Nenhum Arquivo
ContextMenuHandlers5: [igfxDTCM] -> {9B5F5829-A529-4B12-814A-E81BCB8D93FC} => C:\WINDOWS\system32\igfxDTCM.dll [2016-05-03] (Microsoft Windows Hardware Compatibility Publisher -> Intel Corporation)
ContextMenuHandlers6: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2017-08-11] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers6-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2017-08-11] (win.rar GmbH -> Alexander Roshal)
==================== Atalhos & WMI ========================
(As entradas podem ser listadas para serem restauradas ou removidas.)
==================== Módulos Carregados (Whitelisted) ==============
2019-06-05 17:46 - 2019-06-05 17:46 - 000113664 _____ () [Arquivo não assinado] C:\Users\Fran\AppData\Local\Temp\_MEI88642\_ctypes.pyd
2019-06-05 17:46 - 2019-06-05 17:46 - 000173568 _____ () [Arquivo não assinado] C:\Users\Fran\AppData\Local\Temp\_MEI88642\_elementtree.pyd
2019-06-05 17:46 - 2019-06-05 17:46 - 001792512 _____ () [Arquivo não assinado] C:\Users\Fran\AppData\Local\Temp\_MEI88642\_hashlib.pyd
2019-06-05 17:46 - 2019-06-05 17:47 - 000032256 _____ () [Arquivo não assinado] C:\Users\Fran\AppData\Local\Temp\_MEI88642\_multiprocessing.pyd
2019-06-05 17:47 - 2019-06-05 17:47 - 000046080 _____ () [Arquivo não assinado] C:\Users\Fran\AppData\Local\Temp\_MEI88642\_psutil_windows.pyd
2019-06-05 17:47 - 2019-06-05 17:47 - 000047616 _____ () [Arquivo não assinado] C:\Users\Fran\AppData\Local\Temp\_MEI88642\_socket.pyd
2019-06-05 17:47 - 2019-06-05 17:47 - 002224640 _____ () [Arquivo não assinado] C:\Users\Fran\AppData\Local\Temp\_MEI88642\_ssl.pyd
2019-06-05 17:47 - 2019-06-05 17:47 - 000026112 _____ () [Arquivo não assinado] C:\Users\Fran\AppData\Local\Temp\_MEI88642\_yappi.pyd
2019-06-05 17:47 - 2019-06-05 17:47 - 000080896 _____ () [Arquivo não assinado] C:\Users\Fran\AppData\Local\Temp\_MEI88642\bz2.pyd
2019-06-05 17:47 - 2019-06-05 17:47 - 005752320 _____ () [Arquivo não assinado] C:\Users\Fran\AppData\Local\Temp\_MEI88642\cello.pyd
2019-06-05 17:47 - 2019-06-05 17:47 - 000014848 _____ () [Arquivo não assinado] C:\Users\Fran\AppData\Local\Temp\_MEI88642\common.time34.pyd
2019-06-05 17:47 - 2019-06-05 17:47 - 000007680 _____ () [Arquivo não assinado] C:\Users\Fran\AppData\Local\Temp\_MEI88642\hashobjs_ext.pyd
2019-06-05 17:46 - 2019-06-05 17:46 - 000301568 _____ () [Arquivo não assinado] C:\Users\Fran\AppData\Local\Temp\_MEI88642\PIL._imaging.pyd
2019-06-05 17:47 - 2019-06-05 17:47 - 000169472 _____ () [Arquivo não assinado] C:\Users\Fran\AppData\Local\Temp\_MEI88642\pyexpat.pyd
2019-06-05 17:47 - 2019-06-05 17:47 - 001084416 _____ () [Arquivo não assinado] C:\Users\Fran\AppData\Local\Temp\_MEI88642\pysqlite2._sqlite.pyd
2019-06-05 17:47 - 2019-06-05 17:47 - 000548864 _____ () [Arquivo não assinado] C:\Users\Fran\AppData\Local\Temp\_MEI88642\pythoncom27.dll
2019-06-05 17:47 - 2019-06-05 17:47 - 000137728 _____ () [Arquivo não assinado] C:\Users\Fran\AppData\Local\Temp\_MEI88642\pywintypes27.dll
2019-06-05 17:47 - 2019-06-05 17:47 - 000010752 _____ () [Arquivo não assinado] C:\Users\Fran\AppData\Local\Temp\_MEI88642\select.pyd
2019-06-05 17:47 - 2019-06-05 17:47 - 000020992 _____ () [Arquivo não assinado] C:\Users\Fran\AppData\Local\Temp\_MEI88642\thumbnails_ext.pyd
2019-06-05 17:47 - 2019-06-05 17:47 - 000689664 _____ () [Arquivo não assinado] C:\Users\Fran\AppData\Local\Temp\_MEI88642\unicodedata.pyd
2019-06-05 17:47 - 2019-06-05 17:47 - 000118784 _____ () [Arquivo não assinado] C:\Users\Fran\AppData\Local\Temp\_MEI88642\usb_ext.pyd
2019-06-05 17:47 - 2019-06-05 17:47 - 000128512 _____ () [Arquivo não assinado] C:\Users\Fran\AppData\Local\Temp\_MEI88642\win32api.pyd
2019-06-05 17:47 - 2019-06-05 17:47 - 000438784 _____ () [Arquivo não assinado] C:\Users\Fran\AppData\Local\Temp\_MEI88642\win32com.shell.shell.pyd
2019-06-05 17:47 - 2019-06-05 17:47 - 000011776 _____ () [Arquivo não assinado] C:\Users\Fran\AppData\Local\Temp\_MEI88642\win32crypt.pyd
2019-06-05 17:47 - 2019-06-05 17:47 - 000023040 _____ () [Arquivo não assinado] C:\Users\Fran\AppData\Local\Temp\_MEI88642\win32event.pyd
2019-06-05 17:47 - 2019-06-05 17:47 - 000149504 _____ () [Arquivo não assinado] C:\Users\Fran\AppData\Local\Temp\_MEI88642\win32file.pyd
2019-06-05 17:47 - 2019-06-05 17:47 - 000223232 _____ () [Arquivo não assinado] C:\Users\Fran\AppData\Local\Temp\_MEI88642\win32gui.pyd
2019-06-05 17:47 - 2019-06-05 17:47 - 000048128 _____ () [Arquivo não assinado] C:\Users\Fran\AppData\Local\Temp\_MEI88642\win32inet.pyd
2019-06-05 17:47 - 2019-06-05 17:47 - 000029696 _____ () [Arquivo não assinado] C:\Users\Fran\AppData\Local\Temp\_MEI88642\win32pdh.pyd
2019-06-05 17:47 - 2019-06-05 17:47 - 000027648 _____ () [Arquivo não assinado] C:\Users\Fran\AppData\Local\Temp\_MEI88642\win32pipe.pyd
2019-06-05 17:47 - 2019-06-05 17:47 - 000044032 _____ () [Arquivo não assinado] C:\Users\Fran\AppData\Local\Temp\_MEI88642\win32process.pyd
2019-06-05 17:47 - 2019-06-05 17:47 - 000020480 _____ () [Arquivo não assinado] C:\Users\Fran\AppData\Local\Temp\_MEI88642\win32profile.pyd
2019-06-05 17:47 - 2019-06-05 17:47 - 000136192 _____ () [Arquivo não assinado] C:\Users\Fran\AppData\Local\Temp\_MEI88642\win32security.pyd
2019-06-05 17:47 - 2019-06-05 17:47 - 000026624 _____ () [Arquivo não assinado] C:\Users\Fran\AppData\Local\Temp\_MEI88642\win32ts.pyd
2019-06-05 17:47 - 2019-06-05 17:47 - 000034304 _____ () [Arquivo não assinado] C:\Users\Fran\AppData\Local\Temp\_MEI88642\windows.conditional.pyd
2019-06-05 17:47 - 2019-06-05 17:47 - 000038400 _____ () [Arquivo não assinado] C:\Users\Fran\AppData\Local\Temp\_MEI88642\windows.connectivity.pyd
2019-06-05 17:47 - 2019-06-05 17:47 - 000073216 _____ () [Arquivo não assinado] C:\Users\Fran\AppData\Local\Temp\_MEI88642\windows.device_monitor.pyd
2019-06-05 17:47 - 2019-06-05 17:47 - 000110080 _____ () [Arquivo não assinado] C:\Users\Fran\AppData\Local\Temp\_MEI88642\windows.volumes.pyd
2019-06-05 17:47 - 2019-06-05 17:47 - 000020480 _____ () [Arquivo não assinado] C:\Users\Fran\AppData\Local\Temp\_MEI88642\windows.winwrap.pyd
2019-06-05 17:47 - 2019-06-05 17:47 - 001325056 _____ () [Arquivo não assinado] C:\Users\Fran\AppData\Local\Temp\_MEI88642\wx._controls_.pyd
2019-06-05 17:47 - 2019-06-05 17:47 - 001489408 _____ () [Arquivo não assinado] C:\Users\Fran\AppData\Local\Temp\_MEI88642\wx._core_.pyd
2019-06-05 17:47 - 2019-06-05 17:47 - 001007104 _____ () [Arquivo não assinado] C:\Users\Fran\AppData\Local\Temp\_MEI88642\wx._gdi_.pyd
2019-06-05 17:47 - 2019-06-05 17:47 - 000103424 _____ () [Arquivo não assinado] C:\Users\Fran\AppData\Local\Temp\_MEI88642\wx._html2.pyd
2019-06-05 17:48 - 2019-06-05 17:48 - 000916992 _____ () [Arquivo não assinado] C:\Users\Fran\AppData\Local\Temp\_MEI88642\wx._misc_.pyd
2019-06-05 17:48 - 2019-06-05 17:48 - 001039872 _____ () [Arquivo não assinado] C:\Users\Fran\AppData\Local\Temp\_MEI88642\wx._windows_.pyd
2015-02-16 07:56 - 2013-06-21 07:35 - 000135168 _____ () [Arquivo não assinado] C:\Windows\SysWOW64\ChgService.exe
2009-09-16 18:44 - 2009-09-16 18:44 - 000153088 _____ (Hewlett Packard) [Arquivo não assinado] C:\WINDOWS\System32\hptcpmib.dll
2009-09-16 18:45 - 2009-09-16 18:45 - 000331264 _____ (Hewlett Packard) [Arquivo não assinado] C:\WINDOWS\System32\HpTcpMon.dll
2009-09-16 11:44 - 2009-09-16 11:44 - 000132096 _____ (Hewlett Packard) [Arquivo não assinado] C:\WINDOWS\System32\hpzjrd01.dll
2011-10-17 16:51 - 2011-10-17 16:51 - 000013824 _____ (Hewlett-Packard Company) [Arquivo não assinado] C:\Program Files (x86)\HP\HPBDSService\HPBDSService.exe
2013-08-27 09:32 - 2013-08-27 09:32 - 000747520 _____ (Intel(R) Corporation) [Arquivo não assinado] C:\Program Files\Intel\iCLS Client\HeciServer.exe
2009-09-16 18:45 - 2009-09-16 18:45 - 000317440 _____ (Microsoft Corporation) [Arquivo não assinado] C:\WINDOWS\System32\HPTcpMUI.dll
2019-06-05 17:47 - 2019-06-05 17:47 - 003042304 _____ (Python Software Foundation) [Arquivo não assinado] C:\Users\Fran\AppData\Local\Temp\_MEI88642\python27.dll
2019-06-05 17:48 - 2019-06-05 17:48 - 000202240 _____ (wxWidgets development team) [Arquivo não assinado] C:\Users\Fran\AppData\Local\Temp\_MEI88642\wxbase30u_net_vc90_x64.dll
2019-06-05 17:48 - 2019-06-05 17:48 - 002831872 _____ (wxWidgets development team) [Arquivo não assinado] C:\Users\Fran\AppData\Local\Temp\_MEI88642\wxbase30u_vc90_x64.dll
2019-06-05 17:48 - 2019-06-05 17:48 - 001654784 _____ (wxWidgets development team) [Arquivo não assinado] C:\Users\Fran\AppData\Local\Temp\_MEI88642\wxmsw30u_adv_vc90_x64.dll
2019-06-05 17:48 - 2019-06-05 17:48 - 006542336 _____ (wxWidgets development team) [Arquivo não assinado] C:\Users\Fran\AppData\Local\Temp\_MEI88642\wxmsw30u_core_vc90_x64.dll
2019-06-05 17:48 - 2019-06-05 17:48 - 000773632 _____ (wxWidgets development team) [Arquivo não assinado] C:\Users\Fran\AppData\Local\Temp\_MEI88642\wxmsw30u_html_vc90_x64.dll
2019-06-05 17:48 - 2019-06-05 17:48 - 000137216 _____ (wxWidgets development team) [Arquivo não assinado] C:\Users\Fran\AppData\Local\Temp\_MEI88642\wxmsw30u_webview_vc90_x64.dll
==================== Alternate Data Streams (Whitelisted) =========
(Se uma entrada for incluída na fixlist, somente o ADS será removido.)
AlternateDataStreams: C:\WINDOWS\system32\Drivers\wsddfac.sys:X5ZN8aGXs4 [2410]
==================== Modo de Segurança (Whitelisted) ===================
(Se uma entrada for incluída na fixlist, será removida do Registro. O valor "AlternateShell" será restaurado.)
==================== Associação (Whitelisted) ===============
(Se uma entrada for incluída na fixlist, o ítem no Registro será restaurado para o padrão ou removido.)
==================== Internet Explorer confiável/restrito ===============
(Se uma entrada for incluída na fixlist, será removida do Registro.)
IE trusted site: HKU\S-1-5-21-1737901907-2937910466-1665796672-1001\...\bancobrasil.com.br -> www.bancobrasil.com.br
IE trusted site: HKU\S-1-5-21-1737901907-2937910466-1665796672-1001\...\bb.com.br -> aapj.bb.com.br
IE trusted site: HKU\S-1-5-21-1737901907-2937910466-1665796672-1001\...\caixa.gov.br -> hxxps://imagem.caixa.gov.br
IE trusted site: HKU\S-1-5-21-1737901907-2937910466-1665796672-1001\...\caixa.gov.br -> imagem.caixa.gov.br
IE trusted site: HKU\S-1-5-21-1737901907-2937910466-1665796672-1001\...\gastecnologia.com.br -> cloud.gastecnologia.com.br
IE restricted site: HKU\S-1-5-21-1737901907-2937910466-1665796672-1001\...\008i.com -> 008i.com
IE restricted site: HKU\S-1-5-21-1737901907-2937910466-1665796672-1001\...\008k.com -> 008k.com
IE restricted site: HKU\S-1-5-21-1737901907-2937910466-1665796672-1001\...\00hq.com -> 00hq.com
IE restricted site: HKU\S-1-5-21-1737901907-2937910466-1665796672-1001\...\0190-dialers.com -> 0190-dialers.com
IE restricted site: HKU\S-1-5-21-1737901907-2937910466-1665796672-1001\...\01i.info -> 01i.info
IE restricted site: HKU\S-1-5-21-1737901907-2937910466-1665796672-1001\...\02pmnzy5eo29bfk4.com -> 02pmnzy5eo29bfk4.com
IE restricted site: HKU\S-1-5-21-1737901907-2937910466-1665796672-1001\...\05p.com -> 05p.com
IE restricted site: HKU\S-1-5-21-1737901907-2937910466-1665796672-1001\...\07ic5do2myz3vzpk.com -> 07ic5do2myz3vzpk.com
IE restricted site: HKU\S-1-5-21-1737901907-2937910466-1665796672-1001\...\08nigbmwk43i01y6.com -> 08nigbmwk43i01y6.com
IE restricted site: HKU\S-1-5-21-1737901907-2937910466-1665796672-1001\...\093qpeuqpmz6ebfa.com -> 093qpeuqpmz6ebfa.com
IE restricted site: HKU\S-1-5-21-1737901907-2937910466-1665796672-1001\...\0calories.net -> 0calories.net
IE restricted site: HKU\S-1-5-21-1737901907-2937910466-1665796672-1001\...\0cj.net -> 0cj.net
IE restricted site: HKU\S-1-5-21-1737901907-2937910466-1665796672-1001\...\0scan.com -> 0scan.com
IE restricted site: HKU\S-1-5-21-1737901907-2937910466-1665796672-1001\...\1-britney-spears-nude.com -> 1-britney-spears-nude.com
IE restricted site: HKU\S-1-5-21-1737901907-2937910466-1665796672-1001\...\1-domains-registrations.com -> 1-domains-registrations.com
IE restricted site: HKU\S-1-5-21-1737901907-2937910466-1665796672-1001\...\1-se.com -> 1-se.com
IE restricted site: HKU\S-1-5-21-1737901907-2937910466-1665796672-1001\...\1001movie.com -> 1001movie.com
IE restricted site: HKU\S-1-5-21-1737901907-2937910466-1665796672-1001\...\1001night.biz -> 1001night.biz
IE restricted site: HKU\S-1-5-21-1737901907-2937910466-1665796672-1001\...\100gal.net -> 100gal.net
IE restricted site: HKU\S-1-5-21-1737901907-2937910466-1665796672-1001\...\100sexlinks.com -> 100sexlinks.com
Existem ainda 4788 sites a mais.
==================== Hosts Conteúdo: ===============================
(Se necessário, a diretiva Hosts: pode ser incluída na fixlist para redefinir o Hosts.)
2013-08-22 06:25 - 2018-02-19 22:14 - 000000046 _____ C:\WINDOWS\system32\drivers\etc\hosts
127.0.0.1 localhost
2015-03-23 07:23 - 2015-03-23 07:23 - 000000502 _____ C:\WINDOWS\system32\drivers\etc\hosts.ics
192.168.173.83 iPhonedrancisco.mshome.net # 2015 3 1 30 14 23 41 767
192.168.173.1 Note.mshome.net # 2020 3 6 21 14 23 41 767
==================== Outras Áreas ============================
(Atualmente não há nenhuma correção automática para esta seção.)
HKLM\System\CurrentControlSet\Control\Session Manager\Environment\\Path -> %C_EM64T_REDIST11%bin\Intel64;C:\Program Files (x86)\Intel\iCLS Client\;C:\Program Files\Intel\iCLS Client\;C:\ProgramData\Oracle\Java\javapath;%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;%SYSTEMROOT%\System32\WindowsPowerShell\v1.0\;C:\Program Files\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files\VDownloader;C:\Program Files (x86)\Skype\Phone\;C:\Program Files (x86)\Windows Live\Shared;%SYSTEMROOT%\System32\OpenSSH\
HKU\S-1-5-21-1737901907-2937910466-1665796672-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\Fran\AppData\Local\Packages\Microsoft.Windows.Photos_8wekyb3d8bbwe\LocalState\PhotosAppBackground\IMG_1163.JPG
DNS Servers: 192.168.0.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: Off)
Firewall do Windows está habilitado.
==================== MSCONFIG/TASK MANAGER ítens desabilitados ==
Se uma entrada for incluída na fixlist, será removida.
HKLM\...\StartupApproved\Run: => "Classic Start Menu"
HKLM\...\StartupApproved\Run: => "VDownloader"
HKLM\...\StartupApproved\Run: => "AdobeAAMUpdater-1.0"
HKLM\...\StartupApproved\Run: => "iTunesHelper"
HKLM\...\StartupApproved\Run32: => "SunJavaUpdateSched"
HKLM\...\StartupApproved\Run32: => "iTunesHelper"
HKLM\...\StartupApproved\Run32: => "VDownloader"
HKLM\...\StartupApproved\Run32: => "AdobeAAMUpdater-1.0"
HKLM\...\StartupApproved\Run32: => "BlueStacks Agent"
HKLM\...\StartupApproved\Run32: => "StatusAlerts"
HKLM\...\StartupApproved\Run32: => "HP Software Update"
HKU\S-1-5-21-1737901907-2937910466-1665796672-1001\...\StartupApproved\Run: => "iCloudServices"
HKU\S-1-5-21-1737901907-2937910466-1665796672-1001\...\StartupApproved\Run: => "iCloudDrive"
HKU\S-1-5-21-1737901907-2937910466-1665796672-1001\...\StartupApproved\Run: => "ApplePhotoStreams"
HKU\S-1-5-21-1737901907-2937910466-1665796672-1001\...\StartupApproved\Run: => "CCleaner Monitoring"
HKU\S-1-5-21-1737901907-2937910466-1665796672-1001\...\StartupApproved\Run: => "OneDrive"
HKU\S-1-5-21-1737901907-2937910466-1665796672-1001\...\StartupApproved\Run: => "Skype"
HKU\S-1-5-21-1737901907-2937910466-1665796672-1001\...\StartupApproved\Run: => "iCloudPhotos"
HKU\S-1-5-21-1737901907-2937910466-1665796672-1001\...\StartupApproved\Run: => "Steam"
==================== Regras do Firewall (Whitelisted) ===============
(Se uma entrada for incluída na fixlist, será removida do Registro. O arquivo não será movido, a menos que seja colocado separadamente.)
FirewallRules: [{097C4D88-B651-47DB-8CBE-6A9CF2CEC45A}] => (Allow) C:\Program Files\CrashPlan\CrashPlanService.exe (Code42 Software, Inc. -> Code42)
FirewallRules: [{252B134E-8A37-4332-B4B1-C2C24BB003E5}] => (Allow) C:\Program Files (x86)\HP\csiInstaller\3b050369-8d19-413d-9dec-84ff278472eb\Installer\hpbcsiInstaller.exe (Hewlett-Packard Company -> Hewlett-Packard Company)
FirewallRules: [{2A13C16D-4A82-4EBC-8945-EFB006E8DAA4}] => (Allow) C:\Program Files (x86)\HP\csiInstaller\3b050369-8d19-413d-9dec-84ff278472eb\Installer\hpbcsiInstaller.exe (Hewlett-Packard Company -> Hewlett-Packard Company)
FirewallRules: [{50F9032E-ADD5-4146-B92C-34BFED4B5B79}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{D4073316-3B11-418C-BCE0-9E925ACFE9D9}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{4A8CBB56-43C1-4C4F-AC4D-C91027B29198}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{F9855A38-D99F-4BDE-A088-787E1886DFD7}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{A74FFB65-A37E-4303-8634-5D287448D7EB}] => (Allow) C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{4DDF70A8-416B-40B8-906F-9389537F2F03}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\SpeedRunners\SpeedRunners.exe (DoubleDutch Games) [Arquivo não assinado]
FirewallRules: [{6FABD275-7EEB-416D-B414-E2C3851B4D36}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\SpeedRunners\SpeedRunners.exe (DoubleDutch Games) [Arquivo não assinado]
FirewallRules: [{8A1F8FA5-D4F4-4D9D-9A0E-4B340B1B6D20}] => (Allow) C:\Program Files\Diebold\Warsaw\core.exe (Gas Informatica Ltda -> GAS Tecnologia LTDA)
FirewallRules: [{E23CA071-2E55-4798-A178-BE988DE67663}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe (Valve -> Valve Corporation)
FirewallRules: [{C4CAD836-0583-4E8B-89D3-84A56B70E07C}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe (Valve -> Valve Corporation)
FirewallRules: [{6F63516D-6816-43F6-96AA-19D5B4E4EE4B}] => (Allow) F:\SteamLibrary\steamapps\common\Grand Theft Auto V\GTAVLauncher.exe Nenhum Arquivo
FirewallRules: [{4C2A4FB3-FBAA-43C7-BFBB-32EF861F8ED8}] => (Allow) F:\SteamLibrary\steamapps\common\Grand Theft Auto V\GTAVLauncher.exe Nenhum Arquivo
FirewallRules: [{012C1569-6744-4CB6-BF21-5A5B94A424B3}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe Nenhum Arquivo
FirewallRules: [{4DCD4CF1-FF11-48F2-AA7D-98CC5E530F92}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe Nenhum Arquivo
FirewallRules: [{BFAE5984-F1C1-44F8-90AA-ABB7FFBD55FE}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe (Valve -> Valve Corporation)
FirewallRules: [{5AAC531E-4DFA-4A9C-B574-E9A0A5023D2A}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe (Valve -> Valve Corporation)
FirewallRules: [{3EB78A69-4634-4522-8511-BA008E3773D1}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe Nenhum Arquivo
FirewallRules: [{F80D707A-E438-493D-9C2A-A13E6783DD8E}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe Nenhum Arquivo
FirewallRules: [{F7AB0B0D-7A55-4CA9-8C44-A7BBAABF1D3F}] => (Block) c:\Program Files\Corel\CorelDRAW Graphics Suite X7\Programs64\CorelPP.exe (Corel Corporation -> Corel Corporation)
FirewallRules: [{8AB68059-B9A4-44B4-9874-59A752B34784}] => (Block) c:\Program Files\Corel\CorelDRAW Graphics Suite X7\Programs64\CorelDrw.exe (Corel Corporation -> Corel Corporation)
FirewallRules: [{7BB74257-76FF-4166-BA2E-96CD24E6C3C7}] => (Allow) C:\Program Files (x86)\TeamViewer\Version8\TeamViewer.exe Nenhum Arquivo
FirewallRules: [{D215905B-BB9F-4133-8E4A-6ECCE87CA7D6}] => (Allow) C:\Program Files (x86)\TeamViewer\Version8\TeamViewer.exe Nenhum Arquivo
FirewallRules: [{8A003FE0-12FA-419A-B61A-B65284C342E8}] => (Allow) C:\Program Files (x86)\TeamViewer\Version8\TeamViewer_Service.exe Nenhum Arquivo
FirewallRules: [{8C6FDE46-BCE0-4623-BA4D-09D76FC4898D}] => (Allow) C:\Program Files (x86)\TeamViewer\Version8\TeamViewer_Service.exe Nenhum Arquivo
FirewallRules: [{63DEC453-7A99-4013-A841-1B7712350A9F}] => (Allow) C:\Program Files\Microsoft Office\Office15\lync.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{A56569DD-DC20-4FD9-AB4A-C0E1EB8204AE}] => (Allow) C:\Program Files\Microsoft Office\Office15\lync.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{FDB9673C-F422-4C66-B08C-4D70078BFF96}] => (Allow) C:\Program Files\Microsoft Office\Office15\UcMapi.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{C83DFC3F-4123-458D-B04B-38DE29FAA95A}] => (Allow) C:\Program Files\Microsoft Office\Office15\UcMapi.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{BF2B22D4-5299-47D2-824A-4222181180B8}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe Nenhum Arquivo
FirewallRules: [{86EC42F2-FC86-4B8B-AB19-8A577861CFA8}] => (Allow) C:\Program Files\Microsoft Office\Office15\lync.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{75F522CF-BFB1-4A27-8589-E5D83BF4CDB7}] => (Allow) C:\Program Files\Microsoft Office\Office15\lync.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{7DB0E421-2BC3-4C96-8054-3F39EEC4C3E9}] => (Allow) C:\Program Files\Microsoft Office\Office15\UcMapi.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{56A2BCC2-722A-407D-BB8A-DA56501AC1B2}] => (Allow) C:\Program Files\Microsoft Office\Office15\UcMapi.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{269E147A-DF86-456B-87A2-26307F11FE5E}] => (Allow) C:\Windows\SysWOW64\muzapp.exe (Musiccity Co.Ltd.) [Arquivo não assinado]
FirewallRules: [{DEDEC2F0-07B8-41B6-9F29-90220FA46834}] => (Allow) C:\Windows\SysWOW64\muzapp.exe (Musiccity Co.Ltd.) [Arquivo não assinado]
FirewallRules: [{BEE9A5C0-5981-4FCA-9BE9-1B58811E8C2B}] => (Allow) LPort=1688
FirewallRules: [{C0DDB4A3-7CE8-4F21-A127-628DDCD15B76}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [TCP Query User{2049C73B-8438-4B06-BEBC-B5A59B078E0C}C:\program files\java\jre1.8.0_66\bin\javaw.exe] => (Allow) C:\program files\java\jre1.8.0_66\bin\javaw.exe
FirewallRules: [UDP Query User{21CB6132-8EEA-48D8-B0EA-4F2036388A4A}C:\program files\java\jre1.8.0_66\bin\javaw.exe] => (Allow) C:\program files\java\jre1.8.0_66\bin\javaw.exe
FirewallRules: [{706F74B5-4813-420D-92E2-9B4841FDDA42}] => (Allow) C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{D9A745DA-B27D-4F0C-A823-166F7E008591}] => (Allow) LPort=2869
FirewallRules: [{E97F26B9-613D-45F7-9085-CADF023B2515}] => (Allow) LPort=1900
FirewallRules: [{2DCB2972-099E-4043-9A82-021245AE098E}] => (Allow) C:\Users\Fran\AppData\Roaming\Nox\bin\Nox.exe (Duodian Online Technology Co. Ltd. -> Duodian Technology Co. Ltd.)
FirewallRules: [{4393268F-2C7D-4D1F-B53B-851CF981F5E0}] => (Allow) C:\Program Files\Bignox\BigNoxVM\RTNoxVMHandle.exe Nenhum Arquivo
FirewallRules: [{59A8AB3F-2660-47D4-B1DF-8832586504CD}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Magicka 2 beta\engine\Magicka2.exe () [Arquivo não assinado]
FirewallRules: [{981BC11D-F354-4873-9B61-93536D0C2AC4}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Magicka 2 beta\engine\Magicka2.exe () [Arquivo não assinado]
FirewallRules: [{57E1A3DB-6D30-40B2-95CC-29D81711CB9F}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Magicka 2\engine\Magicka2.exe () [Arquivo não assinado]
FirewallRules: [{EF2167F9-B8B7-4232-99B9-D71AF78541C9}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Magicka 2\engine\Magicka2.exe () [Arquivo não assinado]
FirewallRules: [{B7F79CFC-2498-4A41-9664-79EA4634FDAC}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe (TeamViewer GmbH -> TeamViewer GmbH)
FirewallRules: [{3566D107-65BA-4C92-8C7D-ABAF695774E4}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe (TeamViewer GmbH -> TeamViewer GmbH)
FirewallRules: [{6A44696F-8808-405E-A300-7444B32B1111}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe (TeamViewer GmbH -> TeamViewer GmbH)
FirewallRules: [{615D3752-F34E-41C8-BD2A-38177221B4C2}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe (TeamViewer GmbH -> TeamViewer GmbH)
FirewallRules: [TCP Query User{6F63373C-C920-4328-847A-E3D62B4C6A5F}C:\program files (x86)\godex\golabel\golabel.exe] => (Allow) C:\program files (x86)\godex\golabel\golabel.exe (GoDEX) [Arquivo não assinado]
FirewallRules: [UDP Query User{F2DE3F9B-C936-4294-B08F-D2832B487E85}C:\program files (x86)\godex\golabel\golabel.exe] => (Allow) C:\program files (x86)\godex\golabel\golabel.exe (GoDEX) [Arquivo não assinado]
FirewallRules: [{5180ED35-7448-4EEE-92D4-5EE728BF3C24}] => (Block) C:\program files (x86)\godex\golabel\golabel.exe (GoDEX) [Arquivo não assinado]
FirewallRules: [{16563CD9-4417-4092-BDB4-25BACA90F549}] => (Block) C:\program files (x86)\godex\golabel\golabel.exe (GoDEX) [Arquivo não assinado]
FirewallRules: [{C62FF934-A42A-4B92-86F9-CC4F642F26C6}] => (Allow) C:\Program Files\iTunes\iTunes.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{48A8E0A0-D283-42D4-BFCB-709057D3F67D}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google Inc.)
==================== Pontos de Restauração =========================
ATENÇÃO: A Restauração do Sistema está desabilitada
==================== Dispositivos Apresentando Falhas No Gerenciador =============
==================== Erros no Log de eventos: =========================
Erros em Aplicativos:
==================
Error: (06/06/2019 08:02:38 AM) (Source: Office 2013 Licensing Service) (EventID: 0) (User: )
Description: Event-ID 0
Error: (06/05/2019 09:51:28 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 4469
Error: (06/05/2019 09:51:28 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 4469
Error: (06/05/2019 09:51:28 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second
Error: (06/05/2019 09:51:27 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 3125
Error: (06/05/2019 09:51:27 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 3125
Error: (06/05/2019 09:51:27 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second
Error: (06/05/2019 09:51:26 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 1750
Erros de Sistema:
=============
Error: (06/06/2019 04:46:52 PM) (Source: DCOM) (EventID: 10016) (User: FRANCISCOPARDO)
Description: As configurações de permissão específico do aplicativo não concedem permissão Local Ativação para o aplicativo de Servidor COM com CLSID
{8BC3F05E-D86B-11D0-A075-00C04FB68820}
e APPID
{8BC3F05E-D86B-11D0-A075-00C04FB68820}
ao usuário FRANCISCOPARDO\Fran SID (S-1-5-21-1737901907-2937910466-1665796672-1001) do endereço LocalHost (Usando LRPC) que está sendo executado no contêiner de aplicativos Microsoft.Windows.ContentDeliveryManager_10.0.17134.1_neutral_neutral_cw5n1h2txyewy SID (S-1-15-2-350187224-1905355452-1037786396-3028148496-2624191407-3283318427-1255436723). Essa permissão de segurança pode ser modificada com a ferramenta administrativa Serviços de Componentes.
Error: (06/06/2019 04:46:45 PM) (Source: DCOM) (EventID: 10016) (User: FRANCISCOPARDO)
Description: As configurações de permissão específico do aplicativo não concedem permissão Local Ativação para o aplicativo de Servidor COM com CLSID
{8BC3F05E-D86B-11D0-A075-00C04FB68820}
e APPID
{8BC3F05E-D86B-11D0-A075-00C04FB68820}
ao usuário FRANCISCOPARDO\Fran SID (S-1-5-21-1737901907-2937910466-1665796672-1001) do endereço LocalHost (Usando LRPC) que está sendo executado no contêiner de aplicativos Microsoft.Windows.ContentDeliveryManager_10.0.17134.1_neutral_neutral_cw5n1h2txyewy SID (S-1-15-2-350187224-1905355452-1037786396-3028148496-2624191407-3283318427-1255436723). Essa permissão de segurança pode ser modificada com a ferramenta administrativa Serviços de Componentes.
Error: (06/06/2019 12:25:47 PM) (Source: DCOM) (EventID: 10016) (User: FRANCISCOPARDO)
Description: As configurações de permissão específico do aplicativo não concedem permissão Local Ativação para o aplicativo de Servidor COM com CLSID
{8BC3F05E-D86B-11D0-A075-00C04FB68820}
e APPID
{8BC3F05E-D86B-11D0-A075-00C04FB68820}
ao usuário FRANCISCOPARDO\Fran SID (S-1-5-21-1737901907-2937910466-1665796672-1001) do endereço LocalHost (Usando LRPC) que está sendo executado no contêiner de aplicativos Microsoft.Windows.ContentDeliveryManager_10.0.17134.1_neutral_neutral_cw5n1h2txyewy SID (S-1-15-2-350187224-1905355452-1037786396-3028148496-2624191407-3283318427-1255436723). Essa permissão de segurança pode ser modificada com a ferramenta administrativa Serviços de Componentes.
Error: (06/06/2019 12:25:45 PM) (Source: DCOM) (EventID: 10016) (User: FRANCISCOPARDO)
Description: As configurações de permissão específico do aplicativo não concedem permissão Local Ativação para o aplicativo de Servidor COM com CLSID
{8BC3F05E-D86B-11D0-A075-00C04FB68820}
e APPID
{8BC3F05E-D86B-11D0-A075-00C04FB68820}
ao usuário FRANCISCOPARDO\Fran SID (S-1-5-21-1737901907-2937910466-1665796672-1001) do endereço LocalHost (Usando LRPC) que está sendo executado no contêiner de aplicativos Microsoft.Windows.ContentDeliveryManager_10.0.17134.1_neutral_neutral_cw5n1h2txyewy SID (S-1-15-2-350187224-1905355452-1037786396-3028148496-2624191407-3283318427-1255436723). Essa permissão de segurança pode ser modificada com a ferramenta administrativa Serviços de Componentes.
Error: (06/06/2019 09:44:39 AM) (Source: DCOM) (EventID: 10016) (User: FRANCISCOPARDO)
Description: As configurações de permissão específico do aplicativo não concedem permissão Local Ativação para o aplicativo de Servidor COM com CLSID
{8BC3F05E-D86B-11D0-A075-00C04FB68820}
e APPID
{8BC3F05E-D86B-11D0-A075-00C04FB68820}
ao usuário FRANCISCOPARDO\Fran SID (S-1-5-21-1737901907-2937910466-1665796672-1001) do endereço LocalHost (Usando LRPC) que está sendo executado no contêiner de aplicativos Microsoft.Windows.ContentDeliveryManager_10.0.17134.1_neutral_neutral_cw5n1h2txyewy SID (S-1-15-2-350187224-1905355452-1037786396-3028148496-2624191407-3283318427-1255436723). Essa permissão de segurança pode ser modificada com a ferramenta administrativa Serviços de Componentes.
Error: (06/06/2019 09:44:36 AM) (Source: DCOM) (EventID: 10016) (User: FRANCISCOPARDO)
Description: As configurações de permissão específico do aplicativo não concedem permissão Local Ativação para o aplicativo de Servidor COM com CLSID
{8BC3F05E-D86B-11D0-A075-00C04FB68820}
e APPID
{8BC3F05E-D86B-11D0-A075-00C04FB68820}
ao usuário FRANCISCOPARDO\Fran SID (S-1-5-21-1737901907-2937910466-1665796672-1001) do endereço LocalHost (Usando LRPC) que está sendo executado no contêiner de aplicativos Microsoft.Windows.ContentDeliveryManager_10.0.17134.1_neutral_neutral_cw5n1h2txyewy SID (S-1-15-2-350187224-1905355452-1037786396-3028148496-2624191407-3283318427-1255436723). Essa permissão de segurança pode ser modificada com a ferramenta administrativa Serviços de Componentes.
Error: (06/05/2019 07:56:31 PM) (Source: DCOM) (EventID: 10016) (User: FRANCISCOPARDO)
Description: As configurações de permissão específico do aplicativo não concedem permissão Local Ativação para o aplicativo de Servidor COM com CLSID
{8BC3F05E-D86B-11D0-A075-00C04FB68820}
e APPID
{8BC3F05E-D86B-11D0-A075-00C04FB68820}
ao usuário FRANCISCOPARDO\Fran SID (S-1-5-21-1737901907-2937910466-1665796672-1001) do endereço LocalHost (Usando LRPC) que está sendo executado no contêiner de aplicativos Microsoft.Windows.ContentDeliveryManager_10.0.17134.1_neutral_neutral_cw5n1h2txyewy SID (S-1-15-2-350187224-1905355452-1037786396-3028148496-2624191407-3283318427-1255436723). Essa permissão de segurança pode ser modificada com a ferramenta administrativa Serviços de Componentes.
Error: (06/05/2019 05:50:35 PM) (Source: DCOM) (EventID: 10016) (User: AUTORIDADE NT)
Description: As configurações de permissão específico do aplicativo não concedem permissão Local Ativação para o aplicativo de Servidor COM com CLSID
{D63B10C5-BB46-4990-A94F-E40B9D520160}
e APPID
{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}
ao usuário AUTORIDADE NT\SERVIÇO LOCAL SID (S-1-5-19) do endereço LocalHost (Usando LRPC) que está sendo executado no contêiner de aplicativos Não Disponível SID (Não Disponível). Essa permissão de segurança pode ser modificada com a ferramenta administrativa Serviços de Componentes.
Windows Defender:
===================================
Date: 2019-05-17 20:46:36.375
Description:
O exame do Windows Defender Antivirus foi interrompido antes da conclusão.
ID do Exame: {B589F9FD-6439-45F7-B401-C0AC465033F5}
Tipo de Exame: Antimalware
Parâmetros do Exame: Verificação Rápida
Usuário: AUTORIDADE NT\SISTEMA
Date: 2019-05-17 20:17:51.451
Description:
O exame do Windows Defender Antivirus foi interrompido antes da conclusão.
ID do Exame: {ADB557D7-FCE9-433C-90FB-EFAEEAC0C132}
Tipo de Exame: Antimalware
Parâmetros do Exame: Verificação Rápida
Usuário: AUTORIDADE NT\SISTEMA
Date: 2019-05-16 15:11:10.038
Description:
O exame do Windows Defender Antivirus foi interrompido antes da conclusão.
ID do Exame: {B563E61D-969B-4854-95F7-54992B020875}
Tipo de Exame: Antimalware
Parâmetros do Exame: Verificação Rápida
Usuário: AUTORIDADE NT\SISTEMA
Date: 2019-05-16 14:56:12.198
Description:
O exame do Windows Defender Antivirus foi interrompido antes da conclusão.
ID do Exame: {DC6EB7A7-B869-432C-87E5-63B1BAA43BED}
Tipo de Exame: Antimalware
Parâmetros do Exame: Verificação Rápida
Usuário: AUTORIDADE NT\SISTEMA
Date: 2019-05-16 14:50:20.909
Description:
O exame do Windows Defender Antivirus foi interrompido antes da conclusão.
ID do Exame: {07858B8A-3219-4395-9DE8-22330D78FF60}
Tipo de Exame: Antimalware
Parâmetros do Exame: Verificação Rápida
Usuário: AUTORIDADE NT\SISTEMA
CodeIntegrity:
===================================
Date: 2019-06-06 18:40:15.433
Description:
Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume2\Program Files\Diebold\Warsaw\wslbscrwh64.dll that did not meet the Windows signing level requirements.
Date: 2019-06-06 18:40:15.320
Description:
Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume2\Program Files\Diebold\Warsaw\wslbscr64.dll that did not meet the Windows signing level requirements.
Date: 2019-06-06 17:45:10.823
Description:
Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume2\Program Files\Diebold\Warsaw\wslbscrwh64.dll that did not meet the Windows signing level requirements.
Date: 2019-06-06 17:45:10.784
Description:
Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume2\Program Files\Diebold\Warsaw\wslbscr64.dll that did not meet the Windows signing level requirements.
Date: 2019-06-06 16:49:47.552
Description:
Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files (x86)\Google\Chrome\Application\chrome.exe) attempted to load \Device\HarddiskVolume2\Program Files\Diebold\Warsaw\wslbscrwh64.dll that did not meet the Microsoft signing level requirements.
Date: 2019-06-06 16:48:44.893
Description:
Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\System32\dllhost.exe) attempted to load \Device\HarddiskVolume2\Program Files\Diebold\Warsaw\wslbscrwh64.dll that did not meet the Microsoft signing level requirements.
Date: 2019-06-06 16:48:44.888
Description:
Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\System32\dllhost.exe) attempted to load \Device\HarddiskVolume2\Program Files\Diebold\Warsaw\wslbscrwh64.dll that did not meet the Microsoft signing level requirements.
Date: 2019-06-06 16:48:44.777
Description:
Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\System32\dllhost.exe) attempted to load \Device\HarddiskVolume2\Program Files\Diebold\Warsaw\wslbscr64.dll that did not meet the Microsoft signing level requirements.
==================== Informações da Memória ===========================
BIOS: Insyde Corp. V2.04 03/15/2013
Motherboard: Acer MA52_CX
Processador: Intel(R) Core(TM) i5-3337U CPU @ 1.80GHz
Percentagem de memória em uso: 90%
RAM física total: 5959.35 MB
RAM física disponível: 562.68 MB
Virtual Total: 8647.35 MB
Virtual disponível: 2547.07 MB
==================== Drives ================================
Drive c: () (Fixed) (Total:116.16 GB) (Free:42.64 GB) NTFS
Drive d: (Novo volume) (Fixed) (Total:348.57 GB) (Free:70.73 GB) NTFS
\\?\Volume{b79a4d37-8a34-11e4-824c-806e6f6e6963}\ (Reservado pelo Sistema) (Fixed) (Total:0.1 GB) (Free:0.06 GB) NTFS
\\?\Volume{a64fe949-0000-0000-0000-70101d000000}\ () (Fixed) (Total:0.93 GB) (Free:0.46 GB) NTFS
==================== MBR & Tabela de Partições ==================
========================================================
Disk: 0 (MBR Code: Windows 7/8/10) (Size: 465.8 GB) (Disk ID: A64FE949)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=116.2 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=953 MB) - (Type=27)
Partition 4: (Not Active) - (Size=348.6 GB) - (Type=07 NTFS)
==================== Fim de Addition.txt ============================
Executado por Fran (06-06-2019 18:44:47)
Executando a partir de D:\Downloads
Windows 10 Pro Versão 1803 17134.765 (X64) (2018-06-07 13:59:29)
Modo da Inicialização: Normal
==========================================================
==================== Contas: =============================
Administrador (S-1-5-21-1737901907-2937910466-1665796672-500 - Administrator - Disabled)
Convidado (S-1-5-21-1737901907-2937910466-1665796672-501 - Limited - Disabled)
DefaultAccount (S-1-5-21-1737901907-2937910466-1665796672-503 - Limited - Disabled)
Fran (S-1-5-21-1737901907-2937910466-1665796672-1001 - Administrator - Enabled) => C:\Users\Fran
HomeGroupUser$ (S-1-5-21-1737901907-2937910466-1665796672-1003 - Limited - Enabled)
WDAGUtilityAccount (S-1-5-21-1737901907-2937910466-1665796672-504 - Limited - Disabled)
==================== Central de Segurança ========================
(Se uma entrada for incluída na fixlist, será removida.)
AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
==================== Programas Instalados ======================
(Somente os programas adwares com a indicação "Oculto" podem ser adicionados à fixlist para desocultá-los. Os programas adwares devem ser desinstalados manualmente.)
Adobe Acrobat Reader DC - Português (HKLM-x32\...\{AC76BA86-7AD7-1046-7B44-AC0F074E4100}) (Version: 19.012.20034 - Adobe Systems Incorporated)
Adobe Flash Player 32 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 32.0.0.192 - Adobe)
Adobe Photoshop CC 2015 (HKLM-x32\...\{793C2BF7-A4FE-4608-91C9-9282C5801C21}) (Version: 16.0 - Adobe Systems Incorporated)
ANDY OS (HKLM-x32\...\ANDY OS) (Version: 1.1 - andyroid.net)
Anki (HKLM-x32\...\Anki) (Version: - )
Apple Mobile Device Support (HKLM\...\{5FA8C4BE-8C74-4B9C-9B49-EBF759230189}) (Version: 12.1.0.25 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{A30EA700-5515-48F0-88B0-9E99DC356B88}) (Version: 2.6.0.1 - Apple Inc.)
Backup and Sync from Google (HKLM\...\{F9EEDE46-6409-4ECC-8AB6-7062464987A4}) (Version: 3.43.4275.9540 - Google, Inc.)
Bizagi Modeler (HKLM\...\{320aa076-e1e6-426a-900a-569593672e62}) (Version: 3.3.2033 - Bizagi Limited) Hidden
Bizagi Modeler (HKLM-x32\...\InstallShield_{320aa076-e1e6-426a-900a-569593672e62}) (Version: 3.3.2033 - Bizagi Limited)
Bonjour (HKLM\...\{56DDDFB8-7F79-4480-89D5-25E1F52AB28F}) (Version: 3.1.0.1 - Apple Inc.)
Broadcom NetLink Controller (HKLM\...\{7FBA83D7-D58E-4B70-9B9B-12E95B183B22}) (Version: 16.6.1.3 - Broadcom Corporation)
CGS17_Setup_x64 (HKLM\...\{83646B67-A878-4E95-BB4B-AF4A6E61F28C}) (Version: 17.0 - Corel Corporation) Hidden
Code42 CrashPlan (HKLM\...\{F4BB4CD5-B9BC-4D5D-81A9-24B0C4EBF5C1}) (Version: 6.7.1.4615 - Code 42 Software)
Core FTP LE (x64) (HKLM-x32\...\CoreFTP(x64)) (Version: - )
Corel Graphics - Windows Shell Extension (HKLM\...\_{4AB916EE-ABA8-4079-9889-745798B6D809}) (Version: 17.0.0.491 - Corel Corporation)
Corel Graphics - Windows Shell Extension (HKLM\...\{4AB916EE-ABA8-4079-9889-745798B6D809}) (Version: 17.0.491 - Corel Corporation) Hidden
Corel Graphics - Windows Shell Extension 32 Bit (HKLM\...\{FD4A43CE-ABAE-4161-83AC-314A3C804F42}) (Version: 17.0.491 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X7 - BR (x64) (HKLM\...\{FC41DFBE-6C39-4C84-949B-7CB1E6460C7A}) (Version: 17.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X7 - Capture (x64) (HKLM\...\{2C91CB9D-323D-43E5-A433-229B71CFB773}) (Version: 17.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X7 - Common (x64) (HKLM\...\{9178F0A8-B6F6-4DA7-AD63-317CC4875F4B}) (Version: 17.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X7 - Connect (x64) (HKLM\...\{BD036E95-A9CD-4DED-B744-95AB1DCAFF0C}) (Version: 17.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X7 - Custom Data (x64) (HKLM\...\{5162E418-BB43-4C8F-ACD6-069645EF98C3}) (Version: 17.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X7 - Draw (x64) (HKLM\...\{2C0DDC74-5234-43DD-BB5A-0645B8FE5289}) (Version: 17.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X7 - Filters (x64) (HKLM\...\{D10A5CFA-FE33-4F06-AE37-554604F00A52}) (Version: 17.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X7 - FontNav (x64) (HKLM\...\{5406029B-67AD-4F8E-9F2D-F1959CD9CD86}) (Version: 17.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X7 - IPM Content (x64) (HKLM\...\{EF44BCCD-13F9-4974-862C-CCFAF43EE082}) (Version: 17.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X7 - IPM T (x64) (HKLM\...\{13179AB2-69FD-459B-800F-81865A501AD4}) (Version: 17.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X7 - PHOTO-PAINT (x64) (HKLM\...\{C922F325-DD52-4E22-B204-431A06E63E51}) (Version: 17.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X7 - Photozoom Plugin (x64) (HKLM\...\{1A73168F-5983-46A6-AAAB-FD83BC231E02}) (Version: 17.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X7 - Redist (x64) (HKLM\...\{C57EDB5A-AC8E-4E03-9F1A-DC013A2BB9B2}) (Version: 17.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X7 - Setup Files (x64) (HKLM\...\{5CB73140-806C-42C6-A05A-1AFD0E92DEB5}) (Version: 17.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X7 - VBA (x64) (HKLM\...\{5672E0DC-7489-4EAC-8CFD-E01B3868FCB5}) (Version: 17.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X7 - VideoBrowser (x64) (HKLM\...\{966996DC-D67C-40E3-8BD4-31FA0F093571}) (Version: 17.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X7 - Writing Tools (x64) (HKLM\...\{D63404AC-C2F1-4B3D-96EA-9727AC9D994C}) (Version: 17.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X7 (64-Bit) (HKLM\...\_{5CB73140-806C-42C6-A05A-1AFD0E92DEB5}) (Version: 17.0.0.491 - Corel Corporation)
D3DX10 (HKLM-x32\...\{E09C4DB7-630C-4F06-A631-8EA7239923AF}) (Version: 15.4.2368.0902 - Microsoft) Hidden
D-Book 6.7.1 (HKLM-x32\...\D-Book) (Version: - )
FileZilla Client 3.35.2 (HKLM-x32\...\FileZilla Client) (Version: 3.35.2 - Tim Kosse)
Galeria de Fotos (HKLM-x32\...\{9EE1AE8B-4872-41CA-8C9A-C33D899523E0}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
GBBD Caixa Economica Federal (HKLM-x32\...\{5d01f486-f32d-462e-8830-cc1d116e8ece}_is1) (Version: 3.12.0.2 - )
GlanceGuest version 3.9.0.1 (HKLM-x32\...\{F5AC5408-CC29-47C0-AD53-1BBBF268B364}_is1) (Version: 3.9.0.1 - Glance Networks, Inc.)
GoLabel (HKLM-x32\...\{E90E3277-C17B-4BD6-9EE5-76B7B4C8CB79}) (Version: 1.0.290 - GoDEX)
Google Chrome (HKLM-x32\...\{C3FF5ACB-174A-3E07-AE2A-62063FBCC9B1}) (Version: 74.0.3729.169 - Google, Inc.)
Google Earth (HKLM-x32\...\{4D2A6330-2F8B-11E3-9C40-B8AC6F97B88E}) (Version: 7.1.2.2041 - Google)
Google Earth Pro (HKLM\...\{F914BC59-918A-498F-B2E3-B274C9CB48A8}) (Version: 7.3.2.5491 - Google)
Google Earth Pro (HKLM-x32\...\{44FC61F0-2F8A-11E3-8CAE-B8AC6F97B88E}) (Version: 7.1.2.2041 - Google)
Google Update Helper (HKLM-x32\...\{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.34.11 - Google LLC) Hidden
Google Update Helper (HKLM-x32\...\{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}) (Version: 1.3.25.11 - Google Inc.) Hidden
GoTo Opener (HKLM-x32\...\{2C183CF0-3077-43D0-B001-F93AC5E68942}) (Version: 1.0.487 - LogMeIn, Inc.)
GoToMeeting 8.45.2.13190 (HKU\S-1-5-21-1737901907-2937910466-1665796672-1001\...\GoToMeeting) (Version: 8.45.2.13190 - LogMeIn, Inc.)
HD Webcam (HKLM-x32\...\{E0A7ED39-8CD6-4351-93C3-69CCA00D12B4}) (Version: 6.2.9200.10275 - Realtek Semiconductor Corp.)
HP LaserJet Pro MFP M127-M128 (HKLM-x32\...\{3b050369-8d19-413d-9dec-84ff278472eb}) (Version: 8.0.13171.943 - Hewlett-Packard)
HP Update (HKLM-x32\...\{2EFA4E4C-7B5F-48F7-A1C0-1AA882B7A9C3}) (Version: 5.003.002.004 - Hewlett-Packard)
hpbDSService (HKLM-x32\...\{62022DCB-BA92-4EC2-AE03-9B946E4DBF12}) (Version: 002.002.07399 - Hewlett-Packard) Hidden
hpbM128DSService (HKLM-x32\...\{F08687B3-BB9A-4CBC-AE6B-BDF4B642E7BA}) (Version: 001.001.08254 - Hewlett-Packard) Hidden
HPLJDXPHelper (HKLM-x32\...\{010788AB-706E-4604-A46B-6785EAB64B5E}) (Version: 140.069.007 - HP) Hidden
HPLJUTCore (HKLM-x32\...\{B445502B-2F83-4873-90F1-06059F71A46A}) (Version: 014.000.0001 - HP) Hidden
hppLaserJetService (HKLM-x32\...\{0C4C3664-157A-4D69-B474-31EBF2EE1AE3}) (Version: 009.033.00926 - Hewlett-Packard) Hidden
hppM125LaserJetService (HKLM-x32\...\{18D5B189-DBDD-4E57-A84B-58C7700E9BB0}) (Version: 001.032.00682 - Hewlett-Packard) Hidden
hpStatusAlerts (HKLM-x32\...\{E35D0ED5-716B-4E1F-8477-54DD746DF527}) (Version: 140.040.00231 - Hewlett Packard) Hidden
iCloud (HKLM\...\{05D97028-FD26-4A3D-BADC-D1CA2E9F1214}) (Version: 7.10.0.9 - Apple Inc.)
Intel(R) C++ Redistributables for Windows* on Intel(R) 64 (HKLM-x32\...\{D2437C5C-2D8C-40D2-8059-689AD7239FA3}) (Version: 11.1.048 - Intel Corporation)
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 9.5.23.1766 - Intel Corporation)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 10.18.10.4358 - Intel Corporation)
iTunes (HKLM\...\{148C9B53-4D35-4D0C-B7C4-5431AB750CD7}) (Version: 12.9.3.3 - Apple Inc.)
Java 8 Update 66 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86418066F0}) (Version: 8.0.660.17 - Oracle Corporation)
Kaspersky Internet Security (HKLM-x32\...\{E27B1D7B-3B34-43A2-9FC0-9828D5DF46E2}) (Version: 17.0.0.611 - Kaspersky Lab) Hidden
K-Lite Codec Pack 10.9.0 Full (HKLM-x32\...\KLiteCodecPack_is1) (Version: 10.9.0 - )
LJDXPHelperUI (HKLM-x32\...\{DEB23FB1-04FF-44AC-98B5-EEB243D65A28}) (Version: 140.069.007 - HP) Hidden
Microsoft Mouse and Keyboard Center (HKLM\...\Microsoft Mouse and Keyboard Center) (Version: 2.3.188.0 - Microsoft Corporation)
Microsoft Office Access database engine 2007 (English) (HKLM-x32\...\{90120000-00D1-0409-0000-0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft Corporation)
Microsoft Office Professional Plus 2013 (HKLM\...\Office15.PROPLUS) (Version: 15.0.4569.1506 - Microsoft Corporation)
Microsoft OneDrive (HKU\S-1-5-21-1737901907-2937910466-1665796672-1001\...\OneDriveSetup.exe) (Version: 19.070.0410.0007 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4048 (HKLM-x32\...\{5B1F2843-B379-3FF2-B0D3-64DD143ED53A}) (Version: 9.0.30729.4048 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.50903 - Microsoft Corporation)
Microsoft Visual Studio Tools for Applications 2012 (HKLM-x32\...\{89ca2a32-2b52-4595-8dfd-6fe4757958d0}) (Version: 11.0.51108 - Microsoft Corporation)
Microsoft XNA Framework Redistributable 4.0 Refresh (HKLM-x32\...\{D69C8EDE-BBC5-436B-8E0E-C5A6D311CF4F}) (Version: 4.0.30901.0 - Microsoft Corporation)
Mobile Broadband HL Service (HKLM-x32\...\Mobile Broadband HL Service) (Version: 22.001.20.00.03 - Huawei Technologies Co.,Ltd)
Movie Maker (HKLM-x32\...\{C05F4139-CB6B-4272-A0BF-861FEB667F27}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Movie Maker (HKLM-x32\...\{DD67BE4B-7E62-4215-AFA3-F123A800A389}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
MPC-HC 1.7.9 (HKLM-x32\...\{2624B969-7135-4EB1-B0F6-2D8C397B45F7}_is1) (Version: 1.7.9 - MPC-HC Team)
My Picture Book (HKU\S-1-5-21-1737901907-2937910466-1665796672-1001\...\My Picture Book) (Version: My Picture Book 2015.2.0 - MyPicturebook)
Notepad++ (32-bit x86) (HKLM-x32\...\Notepad++) (Version: 7.5.8 - Notepad++ Team)
Nox APP Player (HKLM-x32\...\Nox) (Version: 3.7.1.0 - Duodian Technology Co. Ltd.)
nutraCoster (HKLM-x32\...\nutraCoster) (Version: - )
Pacote de Idiomas do Microsoft Visual Studio 2010 Tools for Office Runtime (x64) - Português (Brasil) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64) Language Pack - PTB) (Version: 10.0.50903 - Microsoft Corporation)
Pacote de Idiomas do Microsoft Visual Studio Tools for Applications 2012 x64 Hosting Support - PTB (HKLM\...\{E237254B-36A1-3D27-815E-B37C13BE0796}) (Version: 11.0.51108 - Microsoft Corporation) Hidden
Pacote de Idiomas do Microsoft Visual Studio Tools for Applications 2012 x86 Hosting Support - PTB (HKLM-x32\...\{03077B58-6ACF-32CA-B42A-EAA458C295A1}) (Version: 11.0.51108 - Microsoft Corporation) Hidden
PDF Architect 3 (HKLM-x32\...\PDF Architect 3) (Version: 3.0.45.22485 - pdfforge GmbH)
PDF Architect 3 Create Module (HKLM-x32\...\{38BA288B-C4F4-4C62-9237-4BFAB374F966}) (Version: 3.0.13.22993 - pdfforge GmbH) Hidden
PDF Architect 3 Edit Module (HKLM-x32\...\{5183F03D-90FA-493B-A074-F0F78B8486AD}) (Version: 3.0.13.22993 - pdfforge GmbH) Hidden
PDF Architect 3 View Module (HKLM-x32\...\{EB24E9E7-4BC1-4FD7-BF86-BDE07A7A03D7}) (Version: 3.0.13.22993 - pdfforge GmbH) Hidden
PDFCreator (HKLM\...\{0001B4FD-9EA3-4D90-A79E-FD14BA3AB01D}) (Version: 2.1.1 - pdfforge)
Photobook Designer (HKU\S-1-5-21-1737901907-2937910466-1665796672-1001\...\Photobook Designer) (Version: Photobook Designer 2016.2.0 - Photobook Worldwide)
Realtek Card Reader (HKLM-x32\...\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}) (Version: 6.3.370.70 - Realtek Semiconductor Corp.)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7535 - Realtek Semiconductor Corp.)
Revisores de Texto do Microsoft Office 2013 – Português do Brasil (HKLM\...\{90150000-001F-0416-1000-0000000FF1CE}) (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Revo Uninstaller 2.0.5 (HKLM\...\{A28DBDA2-3CC7-4ADC-8BFE-66D7743C6C97}_is1) (Version: 2.0.5 - VS Revo Group, Ltd.)
Rockstar Games Social Club (HKLM-x32\...\Rockstar Games Social Club) (Version: 1.2.1.0 - Rockstar Games)
SAMSUNG USB Driver for Mobile Phones (HKLM\...\{D0795B21-0CDA-4a92-AB9E-6E92D8111E44}) (Version: 1.5.49.0 - SAMSUNG Electronics Co., Ltd.)
Scan To (HKLM\...\{E8A34AC8-0137-4515-A94B-0A0946DDC251}) (Version: 1.0.1 - HP)
Service Pack 1 for Microsoft Office 2013 (KB2850036) 64-Bit Edition (HKLM\...\{90150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUS_{D82063A8-7C8C-4C3B-A9BB-95138CA55D26}) (Version: - Microsoft)
Skype™ 7.21 (HKLM-x32\...\{FC965A47-4839-40CA-B618-18F486F042C6}) (Version: 7.21.100 - Skype Technologies S.A.)
Smilebox (HKU\S-1-5-21-1737901907-2937910466-1665796672-1001\...\Smilebox) (Version: 1.0.0.31483 - Smilebox, Inc.)
Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)
StudioTax 2016 (HKLM-x32\...\{7848E1ED-9B3C-4AF1-9BEB-FF01C38A41CE}) (Version: 12.0.4.0 - BHOK IT Consulting)
Suporte para Aplicativos Apple (32-bit) (HKLM-x32\...\{5A659BE5-849B-484E-A83B-DCB78407F3A4}) (Version: 7.3 - Apple Inc.)
Suporte para Aplicativos Apple Apple (64-bit) (HKLM\...\{F8060941-C0AB-4BCE-88AC-F2FDA2E9F286}) (Version: 7.3 - Apple Inc.)
Sweet Home 3D version 3.3 (HKLM-x32\...\Sweet Home 3D_is1) (Version: - eTeks)
Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 19.0.9.4 - Synaptics Incorporated)
TAP-Windows 9.9.2 (HKLM\...\TAP-Windows) (Version: 9.9.2 - )
TeamViewer 13 (HKLM-x32\...\TeamViewer) (Version: 13.2.14327 - TeamViewer)
Tibia (HKU\S-1-5-21-1737901907-2937910466-1665796672-1001\...\Tibia) (Version: - CipSoft GmbH)
Unity Web Player (HKU\S-1-5-21-1737901907-2937910466-1665796672-1001\...\UnityWebPlayer) (Version: 5.1.3f1 - Unity Technologies ApS)
Update for Skype for Business 2015 (KB3039776) 64-Bit Edition (HKLM\...\{90150000-012B-0416-1000-0000000FF1CE}_Office15.PROPLUS_{2BA6245D-FBB9-42F6-AFD9-C0DC52763AD5}) (Version: - Microsoft)
Update for Windows 10 for x64-based Systems (KB4023057) (HKLM\...\{C3ACFCEA-240F-4DCC-A0C3-DD55FEE6C3C2}) (Version: 2.58.0.0 - Microsoft Corporation)
Warsaw 2.8.2.1 64 bits (HKLM\...\{20E60725-16C8-4FB9-8BC2-AF92C5F8D06D}_is1) (Version: 2.8.2.1 - GAS Tecnologia)
WinDirStat 1.1.2 (HKU\S-1-5-21-1737901907-2937910466-1665796672-1001\...\WinDirStat) (Version: - )
Windows Driver Package - BigNox Corporation (VBoxUSB) USB (09/16/2015 4.3.12) (HKLM\...\76B144D15273552931249392EDB13C0BBD52C84E) (Version: 09/16/2015 4.3.12 - BigNox Corporation)
Windows Driver Package - BigNox Corporation VBoxUSBMon System (09/16/2015 4.3.12) (HKLM\...\39F54A37125643D2E1E90FA7D81F36ACC9441510) (Version: 09/16/2015 4.3.12 - BigNox Corporation)
Windows Driver Package - BigNox Corporation XQHDrv System (09/16/2015 4.3.12) (HKLM\...\0147813640F7AF69F569581EE672B6BE1E71798E) (Version: 09/16/2015 4.3.12 - BigNox Corporation)
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3528.0331 - Microsoft Corporation)
WinRAR 5.50 (64-bit) (HKLM\...\WinRAR archiver) (Version: 5.50.0 - win.rar GmbH)
Языковой пакет для поддержки размещения набора средств Microsoft Visual Studio Tools для работы с приложениями 2012 (x64) - RUS (HKLM\...\{25FB53C5-BE4C-3B6C-A0C9-D49A39227E1E}) (Version: 11.0.51108 - Microsoft Corporation) Hidden
Языковой пакет для поддержки размещения набора средств Microsoft Visual Studio Tools для работы с приложениями 2012 (x86) - RUS (HKLM-x32\...\{68DC347D-C1C0-3DE2-A53E-CCC71DA53E57}) (Version: 11.0.51108 - Microsoft Corporation) Hidden
Packages:
=========
Acer Explorer -> C:\Program Files\WindowsApps\AcerIncorporated.AcerExplorer_2.0.3007.0_x86__48frkmn4z8aw4 [2018-01-01] (Acer Incorporated)
HP Smart -> C:\Program Files\WindowsApps\AD2F1837.HPPrinterControl_95.1.531.0_x64__v10z8vjag6ke6 [2019-03-20] (HP Inc.)
Mail and Calendar -> C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20174.0_x64__8wekyb3d8bbwe [2019-05-30] (Microsoft Corporation) [MS Ad]
Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1811.1.0_x64__8wekyb3d8bbwe [2019-01-20] (Microsoft Corporation) [MS Ad]
Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1811.1.0_x86__8wekyb3d8bbwe [2019-01-20] (Microsoft Corporation) [MS Ad]
Microsoft News -> C:\Program Files\WindowsApps\Microsoft.BingNews_4.30.10924.0_x64__8wekyb3d8bbwe [2019-04-03] (Microsoft Corporation) [MS Ad]
Microsoft Phone -> C:\Program Files\WindowsApps\Microsoft.CommsPhone_3.43.20002.1000_x64__8wekyb3d8bbwe [2018-09-08] (Microsoft Corporation)
Microsoft Phone Companion -> C:\Program Files\WindowsApps\Microsoft.WindowsPhone_10.1802.311.0_x64__8wekyb3d8bbwe [2018-02-12] (Microsoft Corporation)
Microsoft Solitaire Collection -> C:\Program Files\WindowsApps\Microsoft.MicrosoftSolitaireCollection_4.3.4032.0_x86__8wekyb3d8bbwe [2019-04-12] (Microsoft Studios) [MS Ad]
MSN Food & Drink -> C:\Program Files\WindowsApps\Microsoft.BingFoodAndDrink_3.0.4.336_x64__8wekyb3d8bbwe [2018-01-01] (Microsoft Corporation) [MS Ad]
MSN Health & Fitness -> C:\Program Files\WindowsApps\Microsoft.BingHealthAndFitness_3.0.4.336_x64__8wekyb3d8bbwe [2018-01-01] (Microsoft Corporation) [MS Ad]
MSN Money -> C:\Program Files\WindowsApps\Microsoft.BingFinance_4.29.10701.0_x64__8wekyb3d8bbwe [2019-03-22] (Microsoft Corporation) [MS Ad]
MSN Sports -> C:\Program Files\WindowsApps\Microsoft.BingSports_4.28.3242.0_x64__8wekyb3d8bbwe [2018-12-14] (Microsoft Corporation) [MS Ad]
MSN Travel -> C:\Program Files\WindowsApps\Microsoft.BingTravel_3.0.4.336_x64__8wekyb3d8bbwe [2018-01-01] (Microsoft Corporation) [MS Ad]
MSN Weather -> C:\Program Files\WindowsApps\Microsoft.BingWeather_4.28.10351.0_x64__8wekyb3d8bbwe [2019-02-12] (Microsoft Corporation) [MS Ad]
Reader Notification Client -> C:\Program Files\WindowsApps\ReaderNotificationClient_1.0.4.0_x86__e1rzdqpraam7r [2019-01-03] (Adobe Systems Incorporated)
Xbox 360 SmartGlass -> C:\Program Files\WindowsApps\Microsoft.XboxCompanion_1.4.3.0_x64__8wekyb3d8bbwe [2018-07-07] (Microsoft Corporation) [MS Ad]
==================== Exame Personalizado CLSID (Whitelisted): ==========================
(Se uma entrada for incluída na fixlist, será removida do Registro. O arquivo não será movido, a menos que seja colocado separadamente.)
CustomCLSID: HKU\S-1-5-21-1737901907-2937910466-1665796672-1001_Classes\CLSID\{0783EB25-59F8-4F02-B6B0-F1D4349F0007}\InprocServer32 -> C:\Users\Fran\AppData\Local\GAS Tecnologia\GBBD\npsf_cef_64.dll (Caixa Econômica Federal -> GAS Tecnologia)
CustomCLSID: HKU\S-1-5-21-1737901907-2937910466-1665796672-1001_Classes\CLSID\{0783EB25-59F8-4F02-B6B1-F1D4349F0007}\InprocServer32 -> C:\Users\Fran\AppData\Local\GAS Tecnologia\GBBD\npsf_cef_64.dll (Caixa Econômica Federal -> GAS Tecnologia)
CustomCLSID: HKU\S-1-5-21-1737901907-2937910466-1665796672-1001_Classes\CLSID\{820D63D5-8CFF-46DE-86AF-4997DEDD6DB5}\localserver32 -> C:\WINDOWS\system32\igfxEM.exe (Intel(R) pGFX -> Intel Corporation)
CustomCLSID: HKU\S-1-5-21-1737901907-2937910466-1665796672-1001_Classes\CLSID\{84B5A313-CD5D-4904-8BA2-AFDC81C1B309}\InprocServer32 -> C:\Users\Fran\AppData\Local\GoToMeeting\10996\G2MOutlookAddin64.dll => Nenhum Arquivo
CustomCLSID: HKU\S-1-5-21-1737901907-2937910466-1665796672-1001_Classes\CLSID\{D9AC5E73-BB10-467b-B884-AA1E475C51F5}\Shell\Open\Command -> C:\Program Files\Synaptics\SynTP\SynTPCpl.dll (Synaptics Incorporated -> Synaptics Incorporated)
ShellIconOverlayIdentifiers: [ GoogleDriveBlacklisted] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D42} => C:\Program Files\Google\Drive\googledrivesync64.dll [2019-04-09] (Google LLC -> Google)
ShellIconOverlayIdentifiers: [ GoogleDriveSynced] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D40} => C:\Program Files\Google\Drive\googledrivesync64.dll [2019-04-09] (Google LLC -> Google)
ShellIconOverlayIdentifiers: [ GoogleDriveSyncing] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D41} => C:\Program Files\Google\Drive\googledrivesync64.dll [2019-04-09] (Google LLC -> Google)
ContextMenuHandlers1: [ANotepad++64] -> {B298D29A-A6ED-11DE-BA8C-A68E55D89593} => C:\Program Files (x86)\Notepad++\NppShell_06.dll [2018-07-22] (Notepad++ -> )
ContextMenuHandlers1: [GDContextMenu] -> {BB02B294-8425-42E5-983F-41A1FA970CD6} => C:\Program Files\Google\Drive\contextmenu64.dll [2019-04-09] (Google LLC -> Google)
ContextMenuHandlers1-x32: [PDFArchitect3_PDFManagerExt] -> {7519DD38-AA6F-4250-8E81-F1576DA1A05E} => C:\Program Files (x86)\PDF Architect 3\creator-context-menu.dll [2015-04-24] (pdfforge GmbH -> pdfforge GmbH)
ContextMenuHandlers1: [PhotoStreamsExt] -> {89D984B3-813B-406A-8298-118AFA3A22AE} => C:\Program Files\Common Files\Apple\Internet Services\ShellStreams64.dll [2019-01-15] (Apple Inc. -> Apple Inc.)
ContextMenuHandlers1: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2017-08-11] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers1-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2017-08-11] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers4: [GDContextMenu] -> {BB02B294-8425-42E5-983F-41A1FA970CD6} => C:\Program Files\Google\Drive\contextmenu64.dll [2019-04-09] (Google LLC -> Google)
ContextMenuHandlers5: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} => -> Nenhum Arquivo
ContextMenuHandlers5: [igfxDTCM] -> {9B5F5829-A529-4B12-814A-E81BCB8D93FC} => C:\WINDOWS\system32\igfxDTCM.dll [2016-05-03] (Microsoft Windows Hardware Compatibility Publisher -> Intel Corporation)
ContextMenuHandlers6: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2017-08-11] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers6-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2017-08-11] (win.rar GmbH -> Alexander Roshal)
==================== Atalhos & WMI ========================
(As entradas podem ser listadas para serem restauradas ou removidas.)
==================== Módulos Carregados (Whitelisted) ==============
2019-06-05 17:46 - 2019-06-05 17:46 - 000113664 _____ () [Arquivo não assinado] C:\Users\Fran\AppData\Local\Temp\_MEI88642\_ctypes.pyd
2019-06-05 17:46 - 2019-06-05 17:46 - 000173568 _____ () [Arquivo não assinado] C:\Users\Fran\AppData\Local\Temp\_MEI88642\_elementtree.pyd
2019-06-05 17:46 - 2019-06-05 17:46 - 001792512 _____ () [Arquivo não assinado] C:\Users\Fran\AppData\Local\Temp\_MEI88642\_hashlib.pyd
2019-06-05 17:46 - 2019-06-05 17:47 - 000032256 _____ () [Arquivo não assinado] C:\Users\Fran\AppData\Local\Temp\_MEI88642\_multiprocessing.pyd
2019-06-05 17:47 - 2019-06-05 17:47 - 000046080 _____ () [Arquivo não assinado] C:\Users\Fran\AppData\Local\Temp\_MEI88642\_psutil_windows.pyd
2019-06-05 17:47 - 2019-06-05 17:47 - 000047616 _____ () [Arquivo não assinado] C:\Users\Fran\AppData\Local\Temp\_MEI88642\_socket.pyd
2019-06-05 17:47 - 2019-06-05 17:47 - 002224640 _____ () [Arquivo não assinado] C:\Users\Fran\AppData\Local\Temp\_MEI88642\_ssl.pyd
2019-06-05 17:47 - 2019-06-05 17:47 - 000026112 _____ () [Arquivo não assinado] C:\Users\Fran\AppData\Local\Temp\_MEI88642\_yappi.pyd
2019-06-05 17:47 - 2019-06-05 17:47 - 000080896 _____ () [Arquivo não assinado] C:\Users\Fran\AppData\Local\Temp\_MEI88642\bz2.pyd
2019-06-05 17:47 - 2019-06-05 17:47 - 005752320 _____ () [Arquivo não assinado] C:\Users\Fran\AppData\Local\Temp\_MEI88642\cello.pyd
2019-06-05 17:47 - 2019-06-05 17:47 - 000014848 _____ () [Arquivo não assinado] C:\Users\Fran\AppData\Local\Temp\_MEI88642\common.time34.pyd
2019-06-05 17:47 - 2019-06-05 17:47 - 000007680 _____ () [Arquivo não assinado] C:\Users\Fran\AppData\Local\Temp\_MEI88642\hashobjs_ext.pyd
2019-06-05 17:46 - 2019-06-05 17:46 - 000301568 _____ () [Arquivo não assinado] C:\Users\Fran\AppData\Local\Temp\_MEI88642\PIL._imaging.pyd
2019-06-05 17:47 - 2019-06-05 17:47 - 000169472 _____ () [Arquivo não assinado] C:\Users\Fran\AppData\Local\Temp\_MEI88642\pyexpat.pyd
2019-06-05 17:47 - 2019-06-05 17:47 - 001084416 _____ () [Arquivo não assinado] C:\Users\Fran\AppData\Local\Temp\_MEI88642\pysqlite2._sqlite.pyd
2019-06-05 17:47 - 2019-06-05 17:47 - 000548864 _____ () [Arquivo não assinado] C:\Users\Fran\AppData\Local\Temp\_MEI88642\pythoncom27.dll
2019-06-05 17:47 - 2019-06-05 17:47 - 000137728 _____ () [Arquivo não assinado] C:\Users\Fran\AppData\Local\Temp\_MEI88642\pywintypes27.dll
2019-06-05 17:47 - 2019-06-05 17:47 - 000010752 _____ () [Arquivo não assinado] C:\Users\Fran\AppData\Local\Temp\_MEI88642\select.pyd
2019-06-05 17:47 - 2019-06-05 17:47 - 000020992 _____ () [Arquivo não assinado] C:\Users\Fran\AppData\Local\Temp\_MEI88642\thumbnails_ext.pyd
2019-06-05 17:47 - 2019-06-05 17:47 - 000689664 _____ () [Arquivo não assinado] C:\Users\Fran\AppData\Local\Temp\_MEI88642\unicodedata.pyd
2019-06-05 17:47 - 2019-06-05 17:47 - 000118784 _____ () [Arquivo não assinado] C:\Users\Fran\AppData\Local\Temp\_MEI88642\usb_ext.pyd
2019-06-05 17:47 - 2019-06-05 17:47 - 000128512 _____ () [Arquivo não assinado] C:\Users\Fran\AppData\Local\Temp\_MEI88642\win32api.pyd
2019-06-05 17:47 - 2019-06-05 17:47 - 000438784 _____ () [Arquivo não assinado] C:\Users\Fran\AppData\Local\Temp\_MEI88642\win32com.shell.shell.pyd
2019-06-05 17:47 - 2019-06-05 17:47 - 000011776 _____ () [Arquivo não assinado] C:\Users\Fran\AppData\Local\Temp\_MEI88642\win32crypt.pyd
2019-06-05 17:47 - 2019-06-05 17:47 - 000023040 _____ () [Arquivo não assinado] C:\Users\Fran\AppData\Local\Temp\_MEI88642\win32event.pyd
2019-06-05 17:47 - 2019-06-05 17:47 - 000149504 _____ () [Arquivo não assinado] C:\Users\Fran\AppData\Local\Temp\_MEI88642\win32file.pyd
2019-06-05 17:47 - 2019-06-05 17:47 - 000223232 _____ () [Arquivo não assinado] C:\Users\Fran\AppData\Local\Temp\_MEI88642\win32gui.pyd
2019-06-05 17:47 - 2019-06-05 17:47 - 000048128 _____ () [Arquivo não assinado] C:\Users\Fran\AppData\Local\Temp\_MEI88642\win32inet.pyd
2019-06-05 17:47 - 2019-06-05 17:47 - 000029696 _____ () [Arquivo não assinado] C:\Users\Fran\AppData\Local\Temp\_MEI88642\win32pdh.pyd
2019-06-05 17:47 - 2019-06-05 17:47 - 000027648 _____ () [Arquivo não assinado] C:\Users\Fran\AppData\Local\Temp\_MEI88642\win32pipe.pyd
2019-06-05 17:47 - 2019-06-05 17:47 - 000044032 _____ () [Arquivo não assinado] C:\Users\Fran\AppData\Local\Temp\_MEI88642\win32process.pyd
2019-06-05 17:47 - 2019-06-05 17:47 - 000020480 _____ () [Arquivo não assinado] C:\Users\Fran\AppData\Local\Temp\_MEI88642\win32profile.pyd
2019-06-05 17:47 - 2019-06-05 17:47 - 000136192 _____ () [Arquivo não assinado] C:\Users\Fran\AppData\Local\Temp\_MEI88642\win32security.pyd
2019-06-05 17:47 - 2019-06-05 17:47 - 000026624 _____ () [Arquivo não assinado] C:\Users\Fran\AppData\Local\Temp\_MEI88642\win32ts.pyd
2019-06-05 17:47 - 2019-06-05 17:47 - 000034304 _____ () [Arquivo não assinado] C:\Users\Fran\AppData\Local\Temp\_MEI88642\windows.conditional.pyd
2019-06-05 17:47 - 2019-06-05 17:47 - 000038400 _____ () [Arquivo não assinado] C:\Users\Fran\AppData\Local\Temp\_MEI88642\windows.connectivity.pyd
2019-06-05 17:47 - 2019-06-05 17:47 - 000073216 _____ () [Arquivo não assinado] C:\Users\Fran\AppData\Local\Temp\_MEI88642\windows.device_monitor.pyd
2019-06-05 17:47 - 2019-06-05 17:47 - 000110080 _____ () [Arquivo não assinado] C:\Users\Fran\AppData\Local\Temp\_MEI88642\windows.volumes.pyd
2019-06-05 17:47 - 2019-06-05 17:47 - 000020480 _____ () [Arquivo não assinado] C:\Users\Fran\AppData\Local\Temp\_MEI88642\windows.winwrap.pyd
2019-06-05 17:47 - 2019-06-05 17:47 - 001325056 _____ () [Arquivo não assinado] C:\Users\Fran\AppData\Local\Temp\_MEI88642\wx._controls_.pyd
2019-06-05 17:47 - 2019-06-05 17:47 - 001489408 _____ () [Arquivo não assinado] C:\Users\Fran\AppData\Local\Temp\_MEI88642\wx._core_.pyd
2019-06-05 17:47 - 2019-06-05 17:47 - 001007104 _____ () [Arquivo não assinado] C:\Users\Fran\AppData\Local\Temp\_MEI88642\wx._gdi_.pyd
2019-06-05 17:47 - 2019-06-05 17:47 - 000103424 _____ () [Arquivo não assinado] C:\Users\Fran\AppData\Local\Temp\_MEI88642\wx._html2.pyd
2019-06-05 17:48 - 2019-06-05 17:48 - 000916992 _____ () [Arquivo não assinado] C:\Users\Fran\AppData\Local\Temp\_MEI88642\wx._misc_.pyd
2019-06-05 17:48 - 2019-06-05 17:48 - 001039872 _____ () [Arquivo não assinado] C:\Users\Fran\AppData\Local\Temp\_MEI88642\wx._windows_.pyd
2015-02-16 07:56 - 2013-06-21 07:35 - 000135168 _____ () [Arquivo não assinado] C:\Windows\SysWOW64\ChgService.exe
2009-09-16 18:44 - 2009-09-16 18:44 - 000153088 _____ (Hewlett Packard) [Arquivo não assinado] C:\WINDOWS\System32\hptcpmib.dll
2009-09-16 18:45 - 2009-09-16 18:45 - 000331264 _____ (Hewlett Packard) [Arquivo não assinado] C:\WINDOWS\System32\HpTcpMon.dll
2009-09-16 11:44 - 2009-09-16 11:44 - 000132096 _____ (Hewlett Packard) [Arquivo não assinado] C:\WINDOWS\System32\hpzjrd01.dll
2011-10-17 16:51 - 2011-10-17 16:51 - 000013824 _____ (Hewlett-Packard Company) [Arquivo não assinado] C:\Program Files (x86)\HP\HPBDSService\HPBDSService.exe
2013-08-27 09:32 - 2013-08-27 09:32 - 000747520 _____ (Intel(R) Corporation) [Arquivo não assinado] C:\Program Files\Intel\iCLS Client\HeciServer.exe
2009-09-16 18:45 - 2009-09-16 18:45 - 000317440 _____ (Microsoft Corporation) [Arquivo não assinado] C:\WINDOWS\System32\HPTcpMUI.dll
2019-06-05 17:47 - 2019-06-05 17:47 - 003042304 _____ (Python Software Foundation) [Arquivo não assinado] C:\Users\Fran\AppData\Local\Temp\_MEI88642\python27.dll
2019-06-05 17:48 - 2019-06-05 17:48 - 000202240 _____ (wxWidgets development team) [Arquivo não assinado] C:\Users\Fran\AppData\Local\Temp\_MEI88642\wxbase30u_net_vc90_x64.dll
2019-06-05 17:48 - 2019-06-05 17:48 - 002831872 _____ (wxWidgets development team) [Arquivo não assinado] C:\Users\Fran\AppData\Local\Temp\_MEI88642\wxbase30u_vc90_x64.dll
2019-06-05 17:48 - 2019-06-05 17:48 - 001654784 _____ (wxWidgets development team) [Arquivo não assinado] C:\Users\Fran\AppData\Local\Temp\_MEI88642\wxmsw30u_adv_vc90_x64.dll
2019-06-05 17:48 - 2019-06-05 17:48 - 006542336 _____ (wxWidgets development team) [Arquivo não assinado] C:\Users\Fran\AppData\Local\Temp\_MEI88642\wxmsw30u_core_vc90_x64.dll
2019-06-05 17:48 - 2019-06-05 17:48 - 000773632 _____ (wxWidgets development team) [Arquivo não assinado] C:\Users\Fran\AppData\Local\Temp\_MEI88642\wxmsw30u_html_vc90_x64.dll
2019-06-05 17:48 - 2019-06-05 17:48 - 000137216 _____ (wxWidgets development team) [Arquivo não assinado] C:\Users\Fran\AppData\Local\Temp\_MEI88642\wxmsw30u_webview_vc90_x64.dll
==================== Alternate Data Streams (Whitelisted) =========
(Se uma entrada for incluída na fixlist, somente o ADS será removido.)
AlternateDataStreams: C:\WINDOWS\system32\Drivers\wsddfac.sys:X5ZN8aGXs4 [2410]
==================== Modo de Segurança (Whitelisted) ===================
(Se uma entrada for incluída na fixlist, será removida do Registro. O valor "AlternateShell" será restaurado.)
==================== Associação (Whitelisted) ===============
(Se uma entrada for incluída na fixlist, o ítem no Registro será restaurado para o padrão ou removido.)
==================== Internet Explorer confiável/restrito ===============
(Se uma entrada for incluída na fixlist, será removida do Registro.)
IE trusted site: HKU\S-1-5-21-1737901907-2937910466-1665796672-1001\...\bancobrasil.com.br -> www.bancobrasil.com.br
IE trusted site: HKU\S-1-5-21-1737901907-2937910466-1665796672-1001\...\bb.com.br -> aapj.bb.com.br
IE trusted site: HKU\S-1-5-21-1737901907-2937910466-1665796672-1001\...\caixa.gov.br -> hxxps://imagem.caixa.gov.br
IE trusted site: HKU\S-1-5-21-1737901907-2937910466-1665796672-1001\...\caixa.gov.br -> imagem.caixa.gov.br
IE trusted site: HKU\S-1-5-21-1737901907-2937910466-1665796672-1001\...\gastecnologia.com.br -> cloud.gastecnologia.com.br
IE restricted site: HKU\S-1-5-21-1737901907-2937910466-1665796672-1001\...\008i.com -> 008i.com
IE restricted site: HKU\S-1-5-21-1737901907-2937910466-1665796672-1001\...\008k.com -> 008k.com
IE restricted site: HKU\S-1-5-21-1737901907-2937910466-1665796672-1001\...\00hq.com -> 00hq.com
IE restricted site: HKU\S-1-5-21-1737901907-2937910466-1665796672-1001\...\0190-dialers.com -> 0190-dialers.com
IE restricted site: HKU\S-1-5-21-1737901907-2937910466-1665796672-1001\...\01i.info -> 01i.info
IE restricted site: HKU\S-1-5-21-1737901907-2937910466-1665796672-1001\...\02pmnzy5eo29bfk4.com -> 02pmnzy5eo29bfk4.com
IE restricted site: HKU\S-1-5-21-1737901907-2937910466-1665796672-1001\...\05p.com -> 05p.com
IE restricted site: HKU\S-1-5-21-1737901907-2937910466-1665796672-1001\...\07ic5do2myz3vzpk.com -> 07ic5do2myz3vzpk.com
IE restricted site: HKU\S-1-5-21-1737901907-2937910466-1665796672-1001\...\08nigbmwk43i01y6.com -> 08nigbmwk43i01y6.com
IE restricted site: HKU\S-1-5-21-1737901907-2937910466-1665796672-1001\...\093qpeuqpmz6ebfa.com -> 093qpeuqpmz6ebfa.com
IE restricted site: HKU\S-1-5-21-1737901907-2937910466-1665796672-1001\...\0calories.net -> 0calories.net
IE restricted site: HKU\S-1-5-21-1737901907-2937910466-1665796672-1001\...\0cj.net -> 0cj.net
IE restricted site: HKU\S-1-5-21-1737901907-2937910466-1665796672-1001\...\0scan.com -> 0scan.com
IE restricted site: HKU\S-1-5-21-1737901907-2937910466-1665796672-1001\...\1-britney-spears-nude.com -> 1-britney-spears-nude.com
IE restricted site: HKU\S-1-5-21-1737901907-2937910466-1665796672-1001\...\1-domains-registrations.com -> 1-domains-registrations.com
IE restricted site: HKU\S-1-5-21-1737901907-2937910466-1665796672-1001\...\1-se.com -> 1-se.com
IE restricted site: HKU\S-1-5-21-1737901907-2937910466-1665796672-1001\...\1001movie.com -> 1001movie.com
IE restricted site: HKU\S-1-5-21-1737901907-2937910466-1665796672-1001\...\1001night.biz -> 1001night.biz
IE restricted site: HKU\S-1-5-21-1737901907-2937910466-1665796672-1001\...\100gal.net -> 100gal.net
IE restricted site: HKU\S-1-5-21-1737901907-2937910466-1665796672-1001\...\100sexlinks.com -> 100sexlinks.com
Existem ainda 4788 sites a mais.
==================== Hosts Conteúdo: ===============================
(Se necessário, a diretiva Hosts: pode ser incluída na fixlist para redefinir o Hosts.)
2013-08-22 06:25 - 2018-02-19 22:14 - 000000046 _____ C:\WINDOWS\system32\drivers\etc\hosts
127.0.0.1 localhost
2015-03-23 07:23 - 2015-03-23 07:23 - 000000502 _____ C:\WINDOWS\system32\drivers\etc\hosts.ics
192.168.173.83 iPhonedrancisco.mshome.net # 2015 3 1 30 14 23 41 767
192.168.173.1 Note.mshome.net # 2020 3 6 21 14 23 41 767
==================== Outras Áreas ============================
(Atualmente não há nenhuma correção automática para esta seção.)
HKLM\System\CurrentControlSet\Control\Session Manager\Environment\\Path -> %C_EM64T_REDIST11%bin\Intel64;C:\Program Files (x86)\Intel\iCLS Client\;C:\Program Files\Intel\iCLS Client\;C:\ProgramData\Oracle\Java\javapath;%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;%SYSTEMROOT%\System32\WindowsPowerShell\v1.0\;C:\Program Files\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files\VDownloader;C:\Program Files (x86)\Skype\Phone\;C:\Program Files (x86)\Windows Live\Shared;%SYSTEMROOT%\System32\OpenSSH\
HKU\S-1-5-21-1737901907-2937910466-1665796672-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\Fran\AppData\Local\Packages\Microsoft.Windows.Photos_8wekyb3d8bbwe\LocalState\PhotosAppBackground\IMG_1163.JPG
DNS Servers: 192.168.0.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: Off)
Firewall do Windows está habilitado.
==================== MSCONFIG/TASK MANAGER ítens desabilitados ==
Se uma entrada for incluída na fixlist, será removida.
HKLM\...\StartupApproved\Run: => "Classic Start Menu"
HKLM\...\StartupApproved\Run: => "VDownloader"
HKLM\...\StartupApproved\Run: => "AdobeAAMUpdater-1.0"
HKLM\...\StartupApproved\Run: => "iTunesHelper"
HKLM\...\StartupApproved\Run32: => "SunJavaUpdateSched"
HKLM\...\StartupApproved\Run32: => "iTunesHelper"
HKLM\...\StartupApproved\Run32: => "VDownloader"
HKLM\...\StartupApproved\Run32: => "AdobeAAMUpdater-1.0"
HKLM\...\StartupApproved\Run32: => "BlueStacks Agent"
HKLM\...\StartupApproved\Run32: => "StatusAlerts"
HKLM\...\StartupApproved\Run32: => "HP Software Update"
HKU\S-1-5-21-1737901907-2937910466-1665796672-1001\...\StartupApproved\Run: => "iCloudServices"
HKU\S-1-5-21-1737901907-2937910466-1665796672-1001\...\StartupApproved\Run: => "iCloudDrive"
HKU\S-1-5-21-1737901907-2937910466-1665796672-1001\...\StartupApproved\Run: => "ApplePhotoStreams"
HKU\S-1-5-21-1737901907-2937910466-1665796672-1001\...\StartupApproved\Run: => "CCleaner Monitoring"
HKU\S-1-5-21-1737901907-2937910466-1665796672-1001\...\StartupApproved\Run: => "OneDrive"
HKU\S-1-5-21-1737901907-2937910466-1665796672-1001\...\StartupApproved\Run: => "Skype"
HKU\S-1-5-21-1737901907-2937910466-1665796672-1001\...\StartupApproved\Run: => "iCloudPhotos"
HKU\S-1-5-21-1737901907-2937910466-1665796672-1001\...\StartupApproved\Run: => "Steam"
==================== Regras do Firewall (Whitelisted) ===============
(Se uma entrada for incluída na fixlist, será removida do Registro. O arquivo não será movido, a menos que seja colocado separadamente.)
FirewallRules: [{097C4D88-B651-47DB-8CBE-6A9CF2CEC45A}] => (Allow) C:\Program Files\CrashPlan\CrashPlanService.exe (Code42 Software, Inc. -> Code42)
FirewallRules: [{252B134E-8A37-4332-B4B1-C2C24BB003E5}] => (Allow) C:\Program Files (x86)\HP\csiInstaller\3b050369-8d19-413d-9dec-84ff278472eb\Installer\hpbcsiInstaller.exe (Hewlett-Packard Company -> Hewlett-Packard Company)
FirewallRules: [{2A13C16D-4A82-4EBC-8945-EFB006E8DAA4}] => (Allow) C:\Program Files (x86)\HP\csiInstaller\3b050369-8d19-413d-9dec-84ff278472eb\Installer\hpbcsiInstaller.exe (Hewlett-Packard Company -> Hewlett-Packard Company)
FirewallRules: [{50F9032E-ADD5-4146-B92C-34BFED4B5B79}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{D4073316-3B11-418C-BCE0-9E925ACFE9D9}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{4A8CBB56-43C1-4C4F-AC4D-C91027B29198}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{F9855A38-D99F-4BDE-A088-787E1886DFD7}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{A74FFB65-A37E-4303-8634-5D287448D7EB}] => (Allow) C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{4DDF70A8-416B-40B8-906F-9389537F2F03}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\SpeedRunners\SpeedRunners.exe (DoubleDutch Games) [Arquivo não assinado]
FirewallRules: [{6FABD275-7EEB-416D-B414-E2C3851B4D36}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\SpeedRunners\SpeedRunners.exe (DoubleDutch Games) [Arquivo não assinado]
FirewallRules: [{8A1F8FA5-D4F4-4D9D-9A0E-4B340B1B6D20}] => (Allow) C:\Program Files\Diebold\Warsaw\core.exe (Gas Informatica Ltda -> GAS Tecnologia LTDA)
FirewallRules: [{E23CA071-2E55-4798-A178-BE988DE67663}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe (Valve -> Valve Corporation)
FirewallRules: [{C4CAD836-0583-4E8B-89D3-84A56B70E07C}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe (Valve -> Valve Corporation)
FirewallRules: [{6F63516D-6816-43F6-96AA-19D5B4E4EE4B}] => (Allow) F:\SteamLibrary\steamapps\common\Grand Theft Auto V\GTAVLauncher.exe Nenhum Arquivo
FirewallRules: [{4C2A4FB3-FBAA-43C7-BFBB-32EF861F8ED8}] => (Allow) F:\SteamLibrary\steamapps\common\Grand Theft Auto V\GTAVLauncher.exe Nenhum Arquivo
FirewallRules: [{012C1569-6744-4CB6-BF21-5A5B94A424B3}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe Nenhum Arquivo
FirewallRules: [{4DCD4CF1-FF11-48F2-AA7D-98CC5E530F92}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe Nenhum Arquivo
FirewallRules: [{BFAE5984-F1C1-44F8-90AA-ABB7FFBD55FE}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe (Valve -> Valve Corporation)
FirewallRules: [{5AAC531E-4DFA-4A9C-B574-E9A0A5023D2A}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe (Valve -> Valve Corporation)
FirewallRules: [{3EB78A69-4634-4522-8511-BA008E3773D1}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe Nenhum Arquivo
FirewallRules: [{F80D707A-E438-493D-9C2A-A13E6783DD8E}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe Nenhum Arquivo
FirewallRules: [{F7AB0B0D-7A55-4CA9-8C44-A7BBAABF1D3F}] => (Block) c:\Program Files\Corel\CorelDRAW Graphics Suite X7\Programs64\CorelPP.exe (Corel Corporation -> Corel Corporation)
FirewallRules: [{8AB68059-B9A4-44B4-9874-59A752B34784}] => (Block) c:\Program Files\Corel\CorelDRAW Graphics Suite X7\Programs64\CorelDrw.exe (Corel Corporation -> Corel Corporation)
FirewallRules: [{7BB74257-76FF-4166-BA2E-96CD24E6C3C7}] => (Allow) C:\Program Files (x86)\TeamViewer\Version8\TeamViewer.exe Nenhum Arquivo
FirewallRules: [{D215905B-BB9F-4133-8E4A-6ECCE87CA7D6}] => (Allow) C:\Program Files (x86)\TeamViewer\Version8\TeamViewer.exe Nenhum Arquivo
FirewallRules: [{8A003FE0-12FA-419A-B61A-B65284C342E8}] => (Allow) C:\Program Files (x86)\TeamViewer\Version8\TeamViewer_Service.exe Nenhum Arquivo
FirewallRules: [{8C6FDE46-BCE0-4623-BA4D-09D76FC4898D}] => (Allow) C:\Program Files (x86)\TeamViewer\Version8\TeamViewer_Service.exe Nenhum Arquivo
FirewallRules: [{63DEC453-7A99-4013-A841-1B7712350A9F}] => (Allow) C:\Program Files\Microsoft Office\Office15\lync.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{A56569DD-DC20-4FD9-AB4A-C0E1EB8204AE}] => (Allow) C:\Program Files\Microsoft Office\Office15\lync.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{FDB9673C-F422-4C66-B08C-4D70078BFF96}] => (Allow) C:\Program Files\Microsoft Office\Office15\UcMapi.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{C83DFC3F-4123-458D-B04B-38DE29FAA95A}] => (Allow) C:\Program Files\Microsoft Office\Office15\UcMapi.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{BF2B22D4-5299-47D2-824A-4222181180B8}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe Nenhum Arquivo
FirewallRules: [{86EC42F2-FC86-4B8B-AB19-8A577861CFA8}] => (Allow) C:\Program Files\Microsoft Office\Office15\lync.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{75F522CF-BFB1-4A27-8589-E5D83BF4CDB7}] => (Allow) C:\Program Files\Microsoft Office\Office15\lync.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{7DB0E421-2BC3-4C96-8054-3F39EEC4C3E9}] => (Allow) C:\Program Files\Microsoft Office\Office15\UcMapi.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{56A2BCC2-722A-407D-BB8A-DA56501AC1B2}] => (Allow) C:\Program Files\Microsoft Office\Office15\UcMapi.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{269E147A-DF86-456B-87A2-26307F11FE5E}] => (Allow) C:\Windows\SysWOW64\muzapp.exe (Musiccity Co.Ltd.) [Arquivo não assinado]
FirewallRules: [{DEDEC2F0-07B8-41B6-9F29-90220FA46834}] => (Allow) C:\Windows\SysWOW64\muzapp.exe (Musiccity Co.Ltd.) [Arquivo não assinado]
FirewallRules: [{BEE9A5C0-5981-4FCA-9BE9-1B58811E8C2B}] => (Allow) LPort=1688
FirewallRules: [{C0DDB4A3-7CE8-4F21-A127-628DDCD15B76}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [TCP Query User{2049C73B-8438-4B06-BEBC-B5A59B078E0C}C:\program files\java\jre1.8.0_66\bin\javaw.exe] => (Allow) C:\program files\java\jre1.8.0_66\bin\javaw.exe
FirewallRules: [UDP Query User{21CB6132-8EEA-48D8-B0EA-4F2036388A4A}C:\program files\java\jre1.8.0_66\bin\javaw.exe] => (Allow) C:\program files\java\jre1.8.0_66\bin\javaw.exe
FirewallRules: [{706F74B5-4813-420D-92E2-9B4841FDDA42}] => (Allow) C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{D9A745DA-B27D-4F0C-A823-166F7E008591}] => (Allow) LPort=2869
FirewallRules: [{E97F26B9-613D-45F7-9085-CADF023B2515}] => (Allow) LPort=1900
FirewallRules: [{2DCB2972-099E-4043-9A82-021245AE098E}] => (Allow) C:\Users\Fran\AppData\Roaming\Nox\bin\Nox.exe (Duodian Online Technology Co. Ltd. -> Duodian Technology Co. Ltd.)
FirewallRules: [{4393268F-2C7D-4D1F-B53B-851CF981F5E0}] => (Allow) C:\Program Files\Bignox\BigNoxVM\RTNoxVMHandle.exe Nenhum Arquivo
FirewallRules: [{59A8AB3F-2660-47D4-B1DF-8832586504CD}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Magicka 2 beta\engine\Magicka2.exe () [Arquivo não assinado]
FirewallRules: [{981BC11D-F354-4873-9B61-93536D0C2AC4}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Magicka 2 beta\engine\Magicka2.exe () [Arquivo não assinado]
FirewallRules: [{57E1A3DB-6D30-40B2-95CC-29D81711CB9F}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Magicka 2\engine\Magicka2.exe () [Arquivo não assinado]
FirewallRules: [{EF2167F9-B8B7-4232-99B9-D71AF78541C9}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Magicka 2\engine\Magicka2.exe () [Arquivo não assinado]
FirewallRules: [{B7F79CFC-2498-4A41-9664-79EA4634FDAC}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe (TeamViewer GmbH -> TeamViewer GmbH)
FirewallRules: [{3566D107-65BA-4C92-8C7D-ABAF695774E4}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe (TeamViewer GmbH -> TeamViewer GmbH)
FirewallRules: [{6A44696F-8808-405E-A300-7444B32B1111}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe (TeamViewer GmbH -> TeamViewer GmbH)
FirewallRules: [{615D3752-F34E-41C8-BD2A-38177221B4C2}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe (TeamViewer GmbH -> TeamViewer GmbH)
FirewallRules: [TCP Query User{6F63373C-C920-4328-847A-E3D62B4C6A5F}C:\program files (x86)\godex\golabel\golabel.exe] => (Allow) C:\program files (x86)\godex\golabel\golabel.exe (GoDEX) [Arquivo não assinado]
FirewallRules: [UDP Query User{F2DE3F9B-C936-4294-B08F-D2832B487E85}C:\program files (x86)\godex\golabel\golabel.exe] => (Allow) C:\program files (x86)\godex\golabel\golabel.exe (GoDEX) [Arquivo não assinado]
FirewallRules: [{5180ED35-7448-4EEE-92D4-5EE728BF3C24}] => (Block) C:\program files (x86)\godex\golabel\golabel.exe (GoDEX) [Arquivo não assinado]
FirewallRules: [{16563CD9-4417-4092-BDB4-25BACA90F549}] => (Block) C:\program files (x86)\godex\golabel\golabel.exe (GoDEX) [Arquivo não assinado]
FirewallRules: [{C62FF934-A42A-4B92-86F9-CC4F642F26C6}] => (Allow) C:\Program Files\iTunes\iTunes.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{48A8E0A0-D283-42D4-BFCB-709057D3F67D}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google Inc.)
==================== Pontos de Restauração =========================
ATENÇÃO: A Restauração do Sistema está desabilitada
==================== Dispositivos Apresentando Falhas No Gerenciador =============
==================== Erros no Log de eventos: =========================
Erros em Aplicativos:
==================
Error: (06/06/2019 08:02:38 AM) (Source: Office 2013 Licensing Service) (EventID: 0) (User: )
Description: Event-ID 0
Error: (06/05/2019 09:51:28 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 4469
Error: (06/05/2019 09:51:28 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 4469
Error: (06/05/2019 09:51:28 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second
Error: (06/05/2019 09:51:27 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 3125
Error: (06/05/2019 09:51:27 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 3125
Error: (06/05/2019 09:51:27 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second
Error: (06/05/2019 09:51:26 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 1750
Erros de Sistema:
=============
Error: (06/06/2019 04:46:52 PM) (Source: DCOM) (EventID: 10016) (User: FRANCISCOPARDO)
Description: As configurações de permissão específico do aplicativo não concedem permissão Local Ativação para o aplicativo de Servidor COM com CLSID
{8BC3F05E-D86B-11D0-A075-00C04FB68820}
e APPID
{8BC3F05E-D86B-11D0-A075-00C04FB68820}
ao usuário FRANCISCOPARDO\Fran SID (S-1-5-21-1737901907-2937910466-1665796672-1001) do endereço LocalHost (Usando LRPC) que está sendo executado no contêiner de aplicativos Microsoft.Windows.ContentDeliveryManager_10.0.17134.1_neutral_neutral_cw5n1h2txyewy SID (S-1-15-2-350187224-1905355452-1037786396-3028148496-2624191407-3283318427-1255436723). Essa permissão de segurança pode ser modificada com a ferramenta administrativa Serviços de Componentes.
Error: (06/06/2019 04:46:45 PM) (Source: DCOM) (EventID: 10016) (User: FRANCISCOPARDO)
Description: As configurações de permissão específico do aplicativo não concedem permissão Local Ativação para o aplicativo de Servidor COM com CLSID
{8BC3F05E-D86B-11D0-A075-00C04FB68820}
e APPID
{8BC3F05E-D86B-11D0-A075-00C04FB68820}
ao usuário FRANCISCOPARDO\Fran SID (S-1-5-21-1737901907-2937910466-1665796672-1001) do endereço LocalHost (Usando LRPC) que está sendo executado no contêiner de aplicativos Microsoft.Windows.ContentDeliveryManager_10.0.17134.1_neutral_neutral_cw5n1h2txyewy SID (S-1-15-2-350187224-1905355452-1037786396-3028148496-2624191407-3283318427-1255436723). Essa permissão de segurança pode ser modificada com a ferramenta administrativa Serviços de Componentes.
Error: (06/06/2019 12:25:47 PM) (Source: DCOM) (EventID: 10016) (User: FRANCISCOPARDO)
Description: As configurações de permissão específico do aplicativo não concedem permissão Local Ativação para o aplicativo de Servidor COM com CLSID
{8BC3F05E-D86B-11D0-A075-00C04FB68820}
e APPID
{8BC3F05E-D86B-11D0-A075-00C04FB68820}
ao usuário FRANCISCOPARDO\Fran SID (S-1-5-21-1737901907-2937910466-1665796672-1001) do endereço LocalHost (Usando LRPC) que está sendo executado no contêiner de aplicativos Microsoft.Windows.ContentDeliveryManager_10.0.17134.1_neutral_neutral_cw5n1h2txyewy SID (S-1-15-2-350187224-1905355452-1037786396-3028148496-2624191407-3283318427-1255436723). Essa permissão de segurança pode ser modificada com a ferramenta administrativa Serviços de Componentes.
Error: (06/06/2019 12:25:45 PM) (Source: DCOM) (EventID: 10016) (User: FRANCISCOPARDO)
Description: As configurações de permissão específico do aplicativo não concedem permissão Local Ativação para o aplicativo de Servidor COM com CLSID
{8BC3F05E-D86B-11D0-A075-00C04FB68820}
e APPID
{8BC3F05E-D86B-11D0-A075-00C04FB68820}
ao usuário FRANCISCOPARDO\Fran SID (S-1-5-21-1737901907-2937910466-1665796672-1001) do endereço LocalHost (Usando LRPC) que está sendo executado no contêiner de aplicativos Microsoft.Windows.ContentDeliveryManager_10.0.17134.1_neutral_neutral_cw5n1h2txyewy SID (S-1-15-2-350187224-1905355452-1037786396-3028148496-2624191407-3283318427-1255436723). Essa permissão de segurança pode ser modificada com a ferramenta administrativa Serviços de Componentes.
Error: (06/06/2019 09:44:39 AM) (Source: DCOM) (EventID: 10016) (User: FRANCISCOPARDO)
Description: As configurações de permissão específico do aplicativo não concedem permissão Local Ativação para o aplicativo de Servidor COM com CLSID
{8BC3F05E-D86B-11D0-A075-00C04FB68820}
e APPID
{8BC3F05E-D86B-11D0-A075-00C04FB68820}
ao usuário FRANCISCOPARDO\Fran SID (S-1-5-21-1737901907-2937910466-1665796672-1001) do endereço LocalHost (Usando LRPC) que está sendo executado no contêiner de aplicativos Microsoft.Windows.ContentDeliveryManager_10.0.17134.1_neutral_neutral_cw5n1h2txyewy SID (S-1-15-2-350187224-1905355452-1037786396-3028148496-2624191407-3283318427-1255436723). Essa permissão de segurança pode ser modificada com a ferramenta administrativa Serviços de Componentes.
Error: (06/06/2019 09:44:36 AM) (Source: DCOM) (EventID: 10016) (User: FRANCISCOPARDO)
Description: As configurações de permissão específico do aplicativo não concedem permissão Local Ativação para o aplicativo de Servidor COM com CLSID
{8BC3F05E-D86B-11D0-A075-00C04FB68820}
e APPID
{8BC3F05E-D86B-11D0-A075-00C04FB68820}
ao usuário FRANCISCOPARDO\Fran SID (S-1-5-21-1737901907-2937910466-1665796672-1001) do endereço LocalHost (Usando LRPC) que está sendo executado no contêiner de aplicativos Microsoft.Windows.ContentDeliveryManager_10.0.17134.1_neutral_neutral_cw5n1h2txyewy SID (S-1-15-2-350187224-1905355452-1037786396-3028148496-2624191407-3283318427-1255436723). Essa permissão de segurança pode ser modificada com a ferramenta administrativa Serviços de Componentes.
Error: (06/05/2019 07:56:31 PM) (Source: DCOM) (EventID: 10016) (User: FRANCISCOPARDO)
Description: As configurações de permissão específico do aplicativo não concedem permissão Local Ativação para o aplicativo de Servidor COM com CLSID
{8BC3F05E-D86B-11D0-A075-00C04FB68820}
e APPID
{8BC3F05E-D86B-11D0-A075-00C04FB68820}
ao usuário FRANCISCOPARDO\Fran SID (S-1-5-21-1737901907-2937910466-1665796672-1001) do endereço LocalHost (Usando LRPC) que está sendo executado no contêiner de aplicativos Microsoft.Windows.ContentDeliveryManager_10.0.17134.1_neutral_neutral_cw5n1h2txyewy SID (S-1-15-2-350187224-1905355452-1037786396-3028148496-2624191407-3283318427-1255436723). Essa permissão de segurança pode ser modificada com a ferramenta administrativa Serviços de Componentes.
Error: (06/05/2019 05:50:35 PM) (Source: DCOM) (EventID: 10016) (User: AUTORIDADE NT)
Description: As configurações de permissão específico do aplicativo não concedem permissão Local Ativação para o aplicativo de Servidor COM com CLSID
{D63B10C5-BB46-4990-A94F-E40B9D520160}
e APPID
{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}
ao usuário AUTORIDADE NT\SERVIÇO LOCAL SID (S-1-5-19) do endereço LocalHost (Usando LRPC) que está sendo executado no contêiner de aplicativos Não Disponível SID (Não Disponível). Essa permissão de segurança pode ser modificada com a ferramenta administrativa Serviços de Componentes.
Windows Defender:
===================================
Date: 2019-05-17 20:46:36.375
Description:
O exame do Windows Defender Antivirus foi interrompido antes da conclusão.
ID do Exame: {B589F9FD-6439-45F7-B401-C0AC465033F5}
Tipo de Exame: Antimalware
Parâmetros do Exame: Verificação Rápida
Usuário: AUTORIDADE NT\SISTEMA
Date: 2019-05-17 20:17:51.451
Description:
O exame do Windows Defender Antivirus foi interrompido antes da conclusão.
ID do Exame: {ADB557D7-FCE9-433C-90FB-EFAEEAC0C132}
Tipo de Exame: Antimalware
Parâmetros do Exame: Verificação Rápida
Usuário: AUTORIDADE NT\SISTEMA
Date: 2019-05-16 15:11:10.038
Description:
O exame do Windows Defender Antivirus foi interrompido antes da conclusão.
ID do Exame: {B563E61D-969B-4854-95F7-54992B020875}
Tipo de Exame: Antimalware
Parâmetros do Exame: Verificação Rápida
Usuário: AUTORIDADE NT\SISTEMA
Date: 2019-05-16 14:56:12.198
Description:
O exame do Windows Defender Antivirus foi interrompido antes da conclusão.
ID do Exame: {DC6EB7A7-B869-432C-87E5-63B1BAA43BED}
Tipo de Exame: Antimalware
Parâmetros do Exame: Verificação Rápida
Usuário: AUTORIDADE NT\SISTEMA
Date: 2019-05-16 14:50:20.909
Description:
O exame do Windows Defender Antivirus foi interrompido antes da conclusão.
ID do Exame: {07858B8A-3219-4395-9DE8-22330D78FF60}
Tipo de Exame: Antimalware
Parâmetros do Exame: Verificação Rápida
Usuário: AUTORIDADE NT\SISTEMA
CodeIntegrity:
===================================
Date: 2019-06-06 18:40:15.433
Description:
Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume2\Program Files\Diebold\Warsaw\wslbscrwh64.dll that did not meet the Windows signing level requirements.
Date: 2019-06-06 18:40:15.320
Description:
Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume2\Program Files\Diebold\Warsaw\wslbscr64.dll that did not meet the Windows signing level requirements.
Date: 2019-06-06 17:45:10.823
Description:
Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume2\Program Files\Diebold\Warsaw\wslbscrwh64.dll that did not meet the Windows signing level requirements.
Date: 2019-06-06 17:45:10.784
Description:
Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume2\Program Files\Diebold\Warsaw\wslbscr64.dll that did not meet the Windows signing level requirements.
Date: 2019-06-06 16:49:47.552
Description:
Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files (x86)\Google\Chrome\Application\chrome.exe) attempted to load \Device\HarddiskVolume2\Program Files\Diebold\Warsaw\wslbscrwh64.dll that did not meet the Microsoft signing level requirements.
Date: 2019-06-06 16:48:44.893
Description:
Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\System32\dllhost.exe) attempted to load \Device\HarddiskVolume2\Program Files\Diebold\Warsaw\wslbscrwh64.dll that did not meet the Microsoft signing level requirements.
Date: 2019-06-06 16:48:44.888
Description:
Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\System32\dllhost.exe) attempted to load \Device\HarddiskVolume2\Program Files\Diebold\Warsaw\wslbscrwh64.dll that did not meet the Microsoft signing level requirements.
Date: 2019-06-06 16:48:44.777
Description:
Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\System32\dllhost.exe) attempted to load \Device\HarddiskVolume2\Program Files\Diebold\Warsaw\wslbscr64.dll that did not meet the Microsoft signing level requirements.
==================== Informações da Memória ===========================
BIOS: Insyde Corp. V2.04 03/15/2013
Motherboard: Acer MA52_CX
Processador: Intel(R) Core(TM) i5-3337U CPU @ 1.80GHz
Percentagem de memória em uso: 90%
RAM física total: 5959.35 MB
RAM física disponível: 562.68 MB
Virtual Total: 8647.35 MB
Virtual disponível: 2547.07 MB
==================== Drives ================================
Drive c: () (Fixed) (Total:116.16 GB) (Free:42.64 GB) NTFS
Drive d: (Novo volume) (Fixed) (Total:348.57 GB) (Free:70.73 GB) NTFS
\\?\Volume{b79a4d37-8a34-11e4-824c-806e6f6e6963}\ (Reservado pelo Sistema) (Fixed) (Total:0.1 GB) (Free:0.06 GB) NTFS
\\?\Volume{a64fe949-0000-0000-0000-70101d000000}\ () (Fixed) (Total:0.93 GB) (Free:0.46 GB) NTFS
==================== MBR & Tabela de Partições ==================
========================================================
Disk: 0 (MBR Code: Windows 7/8/10) (Size: 465.8 GB) (Disk ID: A64FE949)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=116.2 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=953 MB) - (Type=27)
Partition 4: (Not Active) - (Size=348.6 GB) - (Type=07 NTFS)
==================== Fim de Addition.txt ============================