Resultado do exame Adicional Farbar Recovery Scan Tool (x86) Versão:09-12-2015
Executado por rosa maria (2015-12-09 20:58:05)
Executando a partir de C:\Users\rosa maria\Desktop
Microsoft Windows 7 Starter Service Pack 1 (X86) (2012-04-17 00:54:35)
Modo da Inicialização: Normal
==========================================================


==================== Contas: =============================

Administrador (S-1-5-21-3521617747-3582639055-3673487234-500 - Administrator - Disabled)
Convidado (S-1-5-21-3521617747-3582639055-3673487234-501 - Limited - Disabled)
rosa maria (S-1-5-21-3521617747-3582639055-3673487234-1000 - Administrator - Enabled) => C:\Users\rosa maria

==================== Central de Segurança ========================

(Se uma entrada for incluída na fixlist, será removida.)

AV: avast! Antivirus (Disabled - Out of date) {17AD7D40-BA12-9C46-7131-94903A54AD8B}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: avast! Antivirus (Disabled - Out of date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}

==================== Programas Instalados ======================

(Somente os programas adwares com a indicação "Oculto" podem ser adicionados à fixlist para desocultá-los. Os programas adwares devem ser desinstalados manualmente.)

Adobe AIR (HKLM\...\Adobe AIR) (Version: 3.1.0.4880 - Adobe Systems Incorporated)
Adobe Flash Player 19 ActiveX (HKLM\...\Adobe Flash Player ActiveX) (Version: 19.0.0.226 - Adobe Systems Incorporated)
Adobe Help Manager (HKLM\...\chc.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1) (Version: 4.0.244 - Adobe Systems Incorporated)
Adobe Illustrator CS6 (HKLM\...\{4869414E-7AEA-4C8E-BE1C-8D40977FD517}) (Version: 16.0 - Adobe Systems Incorporated)
Adobe InDesign CC 2014 (32-bit) (HKLM\...\{37BEE0A4-72B9-1014-A77C-C46F3F2C3207}) (Version: 10.0 - Adobe Systems Incorporated)
Adobe Photoshop CS6 (HKLM\...\{74EB3499-8B95-4B5C-96EB-7B342F3FD0C6}) (Version: 13.0 - Adobe Systems Incorporated)
Adobe Photoshop Lightroom 5.4 (HKLM\...\{7182A38E-73C7-460A-AD87-DCD52DE7556C}) (Version: 5.4.0 - Adobe Systems Incorporated)
Adobe Reader X (10.1.12) - Português (HKLM\...\{AC76BA86-7AD7-1046-7B44-AA1000000001}) (Version: 10.1.12 - Adobe Systems Incorporated)
Adobe Shockwave Player 12.1 (HKLM\...\Adobe Shockwave Player) (Version: 12.1.3.153 - Adobe Systems, Inc.)
Angry Birds Rio (HKLM\...\{A409B55C-DD9B-4157-86D7-FD6F4F0F2C1A}) (Version: 1.4.2 - Rovio)
Atualização do produto Microsoft Office Excel 2007 Help (KB963678) (HKLM\...\{90120000-0016-0416-0000-0000000FF1CE}_ENTERPRISE_{717C9095-8AAE-41CB-B046-BD6E8399F4F3}) (Version: - Microsoft)
Atualização do produto Microsoft Office Outlook 2007 Help (KB963677) (HKLM\...\{90120000-001A-0416-0000-0000000FF1CE}_ENTERPRISE_{5016CB22-B9A7-44FB-AA72-AF28B27B15EA}) (Version: - Microsoft)
Atualização do produto Microsoft Office Powerpoint 2007 Help (KB963669) (HKLM\...\{90120000-0018-0416-0000-0000000FF1CE}_ENTERPRISE_{BE3A7C0C-0081-4694-B5F9-980DD66BDDF8}) (Version: - Microsoft)
Atualização do produto Microsoft Office Word 2007 Help (KB963665) (HKLM\...\{90120000-001B-0416-0000-0000000FF1CE}_ENTERPRISE_{7297E3A9-FCD4-4E0E-A306-7A90359E50E3}) (Version: - Microsoft)
aTube Catcher versão 3.8 (HKLM\...\{D43B360E-722D-421B-BC77-20B9E0F8B6CD}_is1) (Version: 3.8 - DsNET Corp)
Avast Free Antivirus (HKLM\...\Avast) (Version: 11.1.2241 - AVAST Software)
Biblia Eletrônica 3.8.0 (HKLM\...\Biblia Eletrônica_is1) (Version: - RkSoft Softwares Ltda)
Canal Positivo (HKLM\...\Canal Positivo_is1) (Version: 1.0 - Positivo Informática)
Cisco EAP-FAST Module (HKLM\...\{64BF0187-F3D2-498B-99EA-163AF9AE6EC9}) (Version: 2.2.14 - Cisco Systems, Inc.)
Cisco LEAP Module (HKLM\...\{51C7AD07-C3F6-4635-8E8A-231306D810FE}) (Version: 1.0.19 - Cisco Systems, Inc.)
Cisco PEAP Module (HKLM\...\{ED5776D5-59B4-46B7-AF81-5F2D94D7C640}) (Version: 1.1.6 - Cisco Systems, Inc.)
Corel Graphics - Windows Shell Extension (HKLM\...\_{B865FDD4-E96E-4166-BB69-6E8C207E3E29}) (Version: 17.0.0.491 - Corel Corporation)
Corel Graphics - Windows Shell Extension (Version: 17.0.491 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X7 - BR (Version: 17.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X7 - Capture (Version: 17.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X7 - Common (Version: 17.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X7 - Connect (Version: 17.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X7 - Custom Data (Version: 17.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X7 - Draw (Version: 17.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X7 - Filters (Version: 17.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X7 - FontNav (Version: 17.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X7 - IPM Content (Version: 17.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X7 - IPM T (Version: 17.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X7 - PHOTO-PAINT (Version: 17.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X7 - Photozoom Plugin (Version: 17.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X7 - Redist (Version: 17.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X7 - Setup Files (Version: 17.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X7 - VBA (Version: 17.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X7 - VideoBrowser (Version: 17.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X7 - Writing Tools (Version: 17.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X7 (HKLM\...\_{C5D9CECB-A66F-473F-B406-5C8C2DCA4DF0}) (Version: 17.0.0.491 - Corel Corporation)
CorelDRAW Graphics Suite X7 (Version: 17.0 - Corel Corporation) Hidden
D3DX10 (Version: 15.4.2368.0902 - Microsoft) Hidden
Driver 1.2 (HKLM\...\{BA56CD60-1D9F-4BE6-AC2F-B7C4A5437C35}) (Version: 1.2 - OEM)
EasiSlides Brasil Grátis (HKU\S-1-5-21-3521617747-3582639055-3673487234-1000\...\EasiSlides Brasil Grátis) (Version: - )
EasyWorship 2009 (HKLM\...\{A92509EA-B526-4869-B8B3-A39E20DBBE7A}_is1) (Version: 2009.01.04 - Softouch Development, Inc.)
Facebook Video Calling 3.1.0.521 (HKLM\...\{2091F234-EB58-4B80-8C96-8EB78C808CF7}) (Version: 3.1.521 - Skype Limited)
FormatFactory 3.8.0.0 (HKLM\...\FormatFactory) (Version: 3.8.0.0 - Free Time)
FORTE 7 - Premium Edition (HKLM\...\FORTE 7 Premium_is1) (Version: 7.0.1.1 - Lugert Verlag)
Freemake Video Converter versão 4.1.4 (HKLM\...\Freemake Video Converter_is1) (Version: 4.1.4 - Ellora Assets Corporation)
Galeria de Fotos (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Gerenciador de Inicialização Positivo (HKLM\...\{E365D4D7-BD51-4A7F-8ECA-0B6C0C42D3CF}_is1) (Version: 1.0.16.0 - Positivo Informática S.A.)
Google Chrome (HKU\S-1-5-21-3521617747-3582639055-3673487234-1000\...\Google Chrome) (Version: 47.0.2526.73 - Google Inc.)
Google Drive (HKLM\...\{1C3D2F92-D25E-4D98-B810-3F3B0857BF26}) (Version: 1.26.0707.2863 - Google, Inc.)
Google Update Helper (Version: 1.3.25.11 - Google Inc.) Hidden
Google Update Helper (Version: 1.3.29.1 - Google Inc.) Hidden
IDT Audio (HKLM\...\{E3A5A8AB-58F6-45FF-AFCB-C9AE18C05001}) (Version: 1.0.6289.0 - IDT)
Intel Driver Update Utility (HKLM\...\{fe92d390-13ee-4660-a2f8-39a066fdffe0}) (Version: 2.2.0.5 - Intel)
Intel(R) Control Center (HKLM\...\{F8A9085D-4C7A-41a9-8A77-C8998A96C421}) (Version: 1.2.1.1007 - Intel Corporation)
Intel(R) Graphics Media Accelerator Driver (HKLM\...\HDMI) (Version: 8.14.10.2117 - Intel Corporation)
Intel(R) Rapid Storage Technology (HKLM\...\{3E29EE6C-963A-4aae-86C1-DC237C4A49FC}) (Version: 9.6.0.1014 - Intel Corporation)
IPM 1.5 (HKLM\...\{AADF4228-0772-4D43-92EB-B245E3A17B00}) (Version: 1.5 - OEM)
Java 7 Update 80 (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F03217080FF}) (Version: 7.0.800 - Oracle)
Java(TM) 6 Update 31 (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F83216031FF}) (Version: 6.0.310 - Oracle)
JMicron Ethernet Adapter NDIS Driver (HKLM\...\{96DCEE2F-98EE-4F80-8C0F-7C04D1FB9D7F}) (Version: 6.0.33.3 - JMicron Technology Corp.)
JMicron Flash Media Controller Driver (HKLM\...\{26604C7E-A313-4D12-867F-7C6E7820BE4C}) (Version: 1.0.45.0 - JMicron Technology Corp.)
Junk Mail filter update (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
LG Mobile Driver (HKLM\...\{3F490D0E-3131-438C-BCF9-7549CB88DF41}) (Version: 4.0.3 - LG Electronics)
Microsoft .NET Framework 4.5.2 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.51209 - Microsoft Corporation)
Microsoft .NET Framework 4.5.2 (Português do Brasil) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1046) (Version: 4.5.51209 - Microsoft Corporation)
Microsoft Office 2007 Service Pack 3 (SP3) (HKLM\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}) (Version: - Microsoft)
Microsoft Office Enterprise 2007 (HKLM\...\ENTERPRISE) (Version: 12.0.6612.1000 - Microsoft Corporation)
Microsoft OneDrive (HKU\S-1-5-21-3521617747-3582639055-3673487234-1000\...\OneDriveSetup.exe) (Version: 17.0.4035.0328 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.40728.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.23026 (HKLM\...\{74d0e5db-b326-4dae-a6b2-445b9de1836e}) (Version: 14.0.23026.0 - Microsoft Corporation)
Microsoft Visual Studio Tools for Applications 2012 (HKLM\...\{89ca2a32-2b52-4595-8dfd-6fe4757958d0}) (Version: 11.0.51108 - Microsoft Corporation)
Microsoft XNA Framework Redistributable 4.0 (HKLM\...\{2BFC7AA0-544C-4E3A-8796-67F3BE655BE9}) (Version: 4.0.20823.0 - Microsoft Corporation)
Movie Maker (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
MSXML 4.0 SP2 (KB954430) (HKLM\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
MultiSync versão 1.2 (HKLM\...\{0EEBB9D7-8544-4AB9-B1AB-B98ECE94308B}_is1) (Version: 1.2 - Multilaser SA)
OSD 1.7 (HKLM\...\{5A9C96FE-1376-45E1-8556-C81255F0B5A7}) (Version: 1.7 - OEM)
Pacote de Idiomas do Microsoft Visual Studio Tools for Applications 2012 x86 Hosting Support - PTB (Version: 11.0.51108 - Microsoft Corporation) Hidden
PDF Settings CS6 (Version: 11.0 - Adobe Systems Incorporated) Hidden
Picasa 3 (HKLM\...\Picasa 3) (Version: 3.9.141.259 - Google, Inc.)
Positivo 3D Incrível (HKLM\...\{137637BF-F32A-48B3-A5FE-D677FCB1A80B}_is1) (Version: 1.0.0.4 - Positivo Informática S.A.)
Positivo Aplicativos (HKLM\...\{AAB13E97-449B-4D5B-BDE2-AB47B938B722}_is1) (Version: 1.3.10.4 - Positivo Informática S.A.)
Positivo Áudio (HKLM\...\{D00FA097-5115-400D-84AD-4ADEF3EBDB5E}_is1) (Version: 1.3.2.1 - Positivo Informática S.A.)
Positivo Backup (HKLM\...\{387B3DFA-BB12-45E6-B431-4A7BF2EBD985}_is1) (Version: 1.4.0.5 - Positivo Informática S.A.)
Positivo Bateria (HKLM\...\{FD6F6859-2863-4ABB-87D0-A263F3E9FF45}_is1) (Version: 1.3.0.3 - Positivo Informática S.A.)
Positivo Conecta (HKLM\...\{4F23361B-2B38-46E2-BA1A-D920F270D5FB}_is1) (Version: 1.1.15.0 - Positivo Informática S.A.)
Positivo Conversor 3D (HKLM\...\{D0582368-2DFF-48EA-AC8D-1FA8E31CA38C}_is1) (Version: 1.0.0.7 - Positivo Informática S.A.)
Positivo NIS 2012 License Activator (HKLM\...\{5400FA29-4A55-4EB9-AD27-AF20DBD334E1}_is1) (Version: 1.2.0.0 - Positivo Informática S.A.)
Positivo Notícias (HKLM\...\{BBF502F8-11A6-4401-8F2F-714ADA01B61A}_is1) (Version: 1.2.1.2 - Positivo Informática S.A.)
Positivo Sincronize (HKLM\...\{6DA3261A-DCEB-401A-ABE0-A367C252B86C}_is1) (Version: 1.4.1.8 - Positivo Informática S.A.)
Positivo WebCam (HKLM\...\{E11C7438-7550-4676-92CE-846CC5DA3548}_is1) (Version: 1.4.1.1 - Positivo Informática S.A.)
PowerISO (HKLM\...\PowerISO) (Version: 6.2 - Power Software Ltd)
REALTEK Wireless LAN Driver (HKLM\...\{9D3D8C60-A55F-4123-B2B9-173F09590E16}) (Version: 1.00.0180 - REALTEK Semiconductor Corp.)
REALTEK Wireless LAN Driver (HKLM\...\{9D3D8C60-A55F-4fed-B2B9-173F09590E16}) (Version: 1.00.0148 - REALTEK Semiconductor Corp.)
Recuva (HKLM\...\Recuva) (Version: 1.51 - Piriform)
Skype™ 6.21 (HKLM\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 6.21.104 - Skype Technologies S.A.)
Software de Cadastro Positivo 6.0 (HKLM\...\{4A33ECF3-6AC6-4A9B-932C-4E81625423C7}_is1) (Version: 6.0.0.0 - Positivo Informática)
swMSM (Version: 12.0.0.1 - Adobe Systems, Inc) Hidden
Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 14.0.3.0 - Synaptics Incorporated)
TeamViewer 10 Host (HKLM\...\TeamViewer) (Version: 10.0.47484 - TeamViewer)
Tutorial 1.0 (HKLM\...\{1C86726E-4A85-4322-8A1C-56EDE170FAB5}_is1) (Version: 1.0.0.0 - Positivo Informática)
Update for 2007 Microsoft Office System (KB967642) (HKLM\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{C444285D-5E4F-48A4-91DD-47AAAA68E92D}) (Version: - Microsoft)
Vivo - Guia Vivo Internet versão 1.0 (HKLM\...\{C2E8B9C9-677A-46E6-AEC7-9435B5BCA765}_is1) (Version: 1.0 - Vivo)
VIVO INTERNET (HKLM\...\VIVO INTERNET) (Version: 16.002.10.02.149 - Huawei Technologies Co.,Ltd)
VLC media player (HKLM\...\VLC media player) (Version: 2.1.5 - VideoLAN)
VSDC Free Video Editor version 3.3.0.394 (HKLM\...\VSDC Free Video Editor_is1) (Version: 3.3.0.394 - Flash-Integro LLC)
Webcam 1.5 (HKLM\...\{39B78651-6FD2-4752-BE68-C3BDB6F2D9EE}) (Version: 1.5 - OEM)
Windows 7 USB/DVD Download Tool (HKLM\...\{CCF298AF-9CE1-4B26-B251-486E98A34789}) (Version: 1.0.30 - Microsoft Corporation)
Windows Driver Package - Action-BroadCom - Multilaser (WinUSB) AndroidUsbDeviceClass (07/09/2013 8.0.0000.00000) (HKLM\...\0B3B40948510BB694094EC4F02454A5D64DCC28E) (Version: 07/09/2013 8.0.0000.00000 - Action-BroadCom - Multilaser)
Windows Driver Package - Android (WUDFRd) WPD (04/07/2013 5.2.5326.4762) (HKLM\...\11A0B871BAD4BD9A57E59C3635218E2427AA2C62) (Version: 04/07/2013 5.2.5326.4762 - Android)
Windows Driver Package - Fuzhou Rockchip (Rockusb) Rockusb Device (08/05/2013 3.70.0000) (HKLM\...\20BAB42A3EFA96A512A3479105D342498A3184E2) (Version: 08/05/2013 3.70.0000 - Fuzhou Rockchip)
Windows Driver Package - Fuzhou Rockchip (Rockusb) Rockusb Device (08/05/2013 3.70.0000) (HKLM\...\328F5FBCD04EBC59EF192FC861498F08886BC3FE) (Version: 08/05/2013 3.70.0000 - Fuzhou Rockchip)
Windows Driver Package - Google, Inc. (WinUSB) AndroidUsbDeviceClass (06/06/2014 10.0.0000.00000) (HKLM\...\B13BAA93EE6462533D715AB88DB021ECC72FACDD) (Version: 06/06/2014 10.0.0000.00000 - Google, Inc.)
Windows Driver Package - Google, Inc. (WinUSB) AndroidUsbDeviceClass (08/27/2012 7.0.0000.00001) (HKLM\...\DD5996E7B3B8B7F86BD863BE2D13D10BAEEDF5EE) (Version: 08/27/2012 7.0.0000.00001 - Google, Inc.)
Windows Driver Package - Google, Inc. (WinUSB) AndroidUsbDeviceClass (08/27/2013 7.0.0000.00001) (HKLM\...\DD35777ACC26D30A3585F9724356AF8111A6F38C) (Version: 08/27/2013 7.0.0000.00001 - Google, Inc.)
Windows Driver Package - MediaTek Inc. (usbser) Ports (01/05/2012 2.0000.0.1) (HKLM\...\49D9ABA9270C5BDFD7AE1BEB607D36B26BB90235) (Version: 01/05/2012 2.0000.0.1 - MediaTek Inc.)
Windows Driver Package - MediaTek Inc. (usbser) Ports (12/24/2011 2.0000.0.0) (HKLM\...\D0E6296D177F42BB31C0200E49412003DB6C4633) (Version: 12/24/2011 2.0000.0.0 - MediaTek Inc.)
Windows Driver Package - USB Devices (usbUDisc) USB (01/24/2014 1.0.0.1) (HKLM\...\B2A7D664285C0D269794E0F21D756D5138D1FB29) (Version: 01/24/2014 1.0.0.1 - USB Devices)
Windows Live Essentials (HKLM\...\WinLiveSuite) (Version: 16.4.3528.0331 - Microsoft Corporation)
WindowsAndroid version 4.0.3 (HKU\S-1-5-21-3521617747-3582639055-3673487234-1000\...\{7E07052F-A4CE-4932-B066-B9203888439F}_is1) (Version: 4.0.3 - SocketeQ, Inc.)
WinRAR archiver (HKLM\...\WinRAR archiver) (Version: - )
Wondershare Video Editor(Build 4.8.0) (HKLM\...\Wondershare Video Editor_is1) (Version: - Wondershare Software)
Языковой пакет для поддержки размещения набора средств Microsoft Visual Studio Tools для работы с приложениями 2012 (x86) - RUS (Version: 11.0.51108 - Microsoft Corporation) Hidden

==================== Exame Personalizado CLSID (Whitelisted): ==========================

(Se uma entrada for incluída na fixlist, será removida do Registro. O arquivo não será movido, a menos que seja colocado separadamente.)

CustomCLSID: HKU\S-1-5-21-3521617747-3582639055-3673487234-1000_Classes\CLSID\{022105BD-948A-40C9-AB42-A3300DDF097F}\localserver32 -> C:\Users\rosa maria\AppData\Local\Google\Update\GoogleUpdate.exe (Google Inc.)
CustomCLSID: HKU\S-1-5-21-3521617747-3582639055-3673487234-1000_Classes\CLSID\{0F22A205-CFB0-4679-8499-A6F44A80A208}\InprocServer32 -> C:\Users\rosa maria\AppData\Local\Google\Update\1.3.25.5\psuser.dll => Nenhum Arquivo
CustomCLSID: HKU\S-1-5-21-3521617747-3582639055-3673487234-1000_Classes\CLSID\{1FD1FE74-9E3C-4C1C-AEEB-AAB592AD770F}\localserver32 -> C:\Users\rosa maria\AppData\Local\Facebook\Update\FacebookUpdate.exe (Facebook Inc.)
CustomCLSID: HKU\S-1-5-21-3521617747-3582639055-3673487234-1000_Classes\CLSID\{22181302-A8A6-4F84-A541-E5CBFC70CC43}\localserver32 -> C:\Users\rosa maria\AppData\Local\Google\Update\1.3.29.1\GoogleUpdateOnDemand.exe (Google Inc.)
CustomCLSID: HKU\S-1-5-21-3521617747-3582639055-3673487234-1000_Classes\CLSID\{2F0E2680-9FF5-43C0-B76E-114A56E93598}\localserver32 -> C:\Users\rosa maria\AppData\Local\Google\Update\1.3.29.1\GoogleUpdateOnDemand.exe (Google Inc.)
CustomCLSID: HKU\S-1-5-21-3521617747-3582639055-3673487234-1000_Classes\CLSID\{51F9E8EF-59D7-475B-A106-C7EA6F30C119}\localserver32 -> C:\Users\rosa maria\AppData\Local\Google\Update\1.3.29.1\GoogleUpdateOnDemand.exe (Google Inc.)
CustomCLSID: HKU\S-1-5-21-3521617747-3582639055-3673487234-1000_Classes\CLSID\{5C65F4B0-3651-4514-B207-D10CB699B14B}\localserver32 -> C:\Users\rosa maria\AppData\Local\Google\Chrome\Application\47.0.2526.73\delegate_execute.exe (Google Inc.)
CustomCLSID: HKU\S-1-5-21-3521617747-3582639055-3673487234-1000_Classes\CLSID\{5E71E4F3-E8C7-4906-9626-973E418762B6}\InprocServer32 -> C:\Users\rosa maria\AppData\Local\Facebook\Update\1.2.205.0\goopdate.dll (Facebook Inc.)
CustomCLSID: HKU\S-1-5-21-3521617747-3582639055-3673487234-1000_Classes\CLSID\{724FE766-71C2-4E6E-8379-CD0EF5E51BDD}\InprocServer32 -> C:\Users\rosa maria\AppData\Local\Google\Update\1.3.28.17\psuser.dll => Nenhum Arquivo
CustomCLSID: HKU\S-1-5-21-3521617747-3582639055-3673487234-1000_Classes\CLSID\{8B9F5BF4-0407-4BB2-9FED-4C0372DABD00}\localserver32 -> C:\Users\rosa maria\AppData\Local\Facebook\Video\Skype\FacebookVideoCallingProxy.exe (Skype Limited)
CustomCLSID: HKU\S-1-5-21-3521617747-3582639055-3673487234-1000_Classes\CLSID\{90B3DFBF-AF6A-4EA0-8899-F332194690F8}\InprocServer32 -> C:\Users\rosa maria\AppData\Local\Google\Update\1.3.24.15\psuser.dll => Nenhum Arquivo
CustomCLSID: HKU\S-1-5-21-3521617747-3582639055-3673487234-1000_Classes\CLSID\{C3101A8B-0EE1-4612-BFE9-41FFC1A3C19D}\InprocServer32 -> C:\Users\rosa maria\AppData\Local\Google\Update\1.3.29.1\npGoogleUpdate3.dll (Google Inc.)
CustomCLSID: HKU\S-1-5-21-3521617747-3582639055-3673487234-1000_Classes\CLSID\{C442AC41-9200-4770-8CC0-7CDB4F245C55}\InprocServer32 -> C:\Users\rosa maria\AppData\Local\Google\Update\1.3.29.1\npGoogleUpdate3.dll (Google Inc.)
CustomCLSID: HKU\S-1-5-21-3521617747-3582639055-3673487234-1000_Classes\CLSID\{C5A2122B-A05B-4FD8-AE49-91990AE10998}\InprocServer32 -> C:\Users\rosa maria\AppData\Local\Google\Update\1.3.21.115\psuser.dll => Nenhum Arquivo
CustomCLSID: HKU\S-1-5-21-3521617747-3582639055-3673487234-1000_Classes\CLSID\{CBE9C57E-FFA9-4123-8354-AD360D6DD3CC}\InprocServer32 -> C:\Users\rosa maria\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll => Nenhum Arquivo
CustomCLSID: HKU\S-1-5-21-3521617747-3582639055-3673487234-1000_Classes\CLSID\{CC182BE1-84CE-4A57-B85C-FD4BBDF78CB2}\InprocServer32 -> C:\Users\rosa maria\AppData\Local\Google\Update\1.3.29.1\psuser.dll (Google Inc.)
CustomCLSID: HKU\S-1-5-21-3521617747-3582639055-3673487234-1000_Classes\CLSID\{D0336C0B-7919-4C04-8CCE-2EBAE2ECE8C9}\InprocServer32 -> C:\Users\rosa maria\AppData\Local\Google\Update\1.3.25.11\psuser.dll => Nenhum Arquivo
CustomCLSID: HKU\S-1-5-21-3521617747-3582639055-3673487234-1000_Classes\CLSID\{D1EDC4F5-7F4D-4B12-906A-614ECF66DDAF}\InprocServer32 -> C:\Users\rosa maria\AppData\Local\Google\Update\1.3.28.15\psuser.dll => Nenhum Arquivo
CustomCLSID: HKU\S-1-5-21-3521617747-3582639055-3673487234-1000_Classes\CLSID\{E67BE843-BBBE-4484-95FB-05271AE86750}\localserver32 -> C:\Users\rosa maria\AppData\Local\Google\Update\1.3.29.1\GoogleUpdateOnDemand.exe (Google Inc.)
CustomCLSID: HKU\S-1-5-21-3521617747-3582639055-3673487234-1000_Classes\CLSID\{E8CF3E55-F919-49D9-ABC0-948E6CB34B9F}\InprocServer32 -> C:\Users\rosa maria\AppData\Local\Google\Update\1.3.29.1\psuser.dll (Google Inc.)
CustomCLSID: HKU\S-1-5-21-3521617747-3582639055-3673487234-1000_Classes\CLSID\{FB994D36-B312-46CE-A40B-CF63980641F9}\InprocServer32 -> C:\Users\rosa maria\AppData\Local\Google\Update\1.3.21.111\psuser.dll => Nenhum Arquivo

==================== Pontos de Restauração =========================

05-12-2015 18:48:10 Ponto de Verificação Agendado
07-12-2015 19:32:39 Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.23026
08-12-2015 05:53:15 Removed AccessData FTK Imager.
08-12-2015 05:55:25 Removed AccessData FTK Imager.
08-12-2015 06:04:16 Windows Update

==================== Hosts Conteúdo: ===============================

(Se necessário, a diretiva Hosts: pode ser incluída na fixlist para redefinir o Hosts.)

2009-07-14 00:04 - 2009-06-10 19:39 - 00000824 ____N C:\Windows\system32\Drivers\etc\hosts


==================== Tarefas Agendadas (Whitelisted) =============

(Se uma entrada for incluída na fixlist, será removida do Registro. O arquivo não será movido, a menos que seja colocado separadamente.)

Task: {057222CB-6522-4ED9-8258-13BFDD0F6462} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-3521617747-3582639055-3673487234-1000UA => C:\Users\rosa maria\AppData\Local\Google\Update\GoogleUpdate.exe [2015-10-03] (Google Inc.)
Task: {14333C43-29C8-4546-A251-3F00F8B1B803} - System32\Tasks\AdobeAAMUpdater-1.0-DÉBORAH-rosa maria => C:\Program Files\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2014-02-27] (Adobe Systems Incorporated)
Task: {2A72F177-8C05-4BDC-BBE4-90BE82D62BD5} - System32\Tasks\{15369D7A-84FD-4661-88A0-8828215375F1} => pcalua.exe -a "C:\Programas Baixados\Corel Draw\corel draw x4 - versão completa - em portugues - pt br brasil (sem vírus)dr14t22-fkth7sj-kn3cthp-5bed2vw.exe" -d "C:\Programas Baixados\Corel Draw"
Task: {57B5056E-450D-4336-884E-E190F889BCE0} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files\Google\Update\GoogleUpdate.exe [2015-10-03] (Google Inc.)
Task: {5ED51CE7-7FFA-468E-89CF-4E601929F298} - System32\Tasks\FacebookUpdateTaskUserS-1-5-21-3521617747-3582639055-3673487234-1000UA => C:\Users\rosa maria\AppData\Local\Facebook\Update\FacebookUpdate.exe [2014-07-27] (Facebook Inc.)
Task: {6A7E787C-6334-4B1B-92A8-07F8DE2618A0} - System32\Tasks\AVAST Software\Avast settings backup => C:\Program Files\Common Files\AV\avast! Antivirus\backup.exe [2015-12-03] (AVAST Software)
Task: {80CF1C54-342D-4483-8869-5621937F4363} - System32\Tasks\{BC351F10-1E95-4B9F-A5AF-B51033DB8586} => C:\Program Files\Wondershare\Video Editor\VideoEditor.exe [2014-11-18] (Wondershare Software)
Task: {BAD714A6-1A19-4950-9E01-D57C06C627BB} - System32\Tasks\FacebookUpdateTaskUserS-1-5-21-3521617747-3582639055-3673487234-1000Core => C:\Users\rosa maria\AppData\Local\Facebook\Update\FacebookUpdate.exe [2014-07-27] (Facebook Inc.)
Task: {BD26BCD2-40CA-4B05-A507-0F820E5D4F47} - System32\Tasks\avast! Emergency Update => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [2015-11-05] (AVAST Software)
Task: {BEEC9B6E-199D-454F-8BCC-B2E4F0E5F6CC} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-3521617747-3582639055-3673487234-1000Core => C:\Users\rosa maria\AppData\Local\Google\Update\GoogleUpdate.exe [2015-10-03] (Google Inc.)
Task: {D95E2B2D-A242-4359-9588-4989D0DA41D3} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2015-11-05] (Adobe Systems Incorporated)
Task: {D96297C5-FE93-4678-8E1C-C29DD1038B6C} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files\Google\Update\GoogleUpdate.exe [2015-10-03] (Google Inc.)
Task: {ED406145-AA33-44FF-9269-C24C704E6FAE} - System32\Tasks\svchost => C:\Users\rosa maria\AppData\Local\Temp\setup.exe [2015-12-07] (TZ) <==== ATENÇÃO

(Se uma entrada for incluída na fixlist, o arquivo da tarefa (.job) será movido. O arquivo que está sendo executado pela tarefa não será movido.)

Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-3521617747-3582639055-3673487234-1000Core.job => C:\Users\rosa maria\AppData\Local\Facebook\Update\FacebookUpdate.exe
Task: C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-3521617747-3582639055-3673487234-1000UA.job => C:\Users\rosa maria\AppData\Local\Facebook\Update\FacebookUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3521617747-3582639055-3673487234-1000Core.job => C:\Users\rosa maria\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3521617747-3582639055-3673487234-1000UA.job => C:\Users\rosa maria\AppData\Local\Google\Update\GoogleUpdate.exe

==================== Atalhos =============================

(As entradas podem ser listadas para serem restauradas ou removidas.)

Shortcut: C:\Users\rosa maria\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\NetBrazil\Corrige EasiSlides para 64 bits.lnk -> C:\EasiSlidesData\EasiSlides\Faz.bat () <==== ATENÇÃO

ShortcutWithArgument: C:\Users\rosa maria\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk -> C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation) -> hxxp://www.navegaki.com?uid={80411a9fc2b94f9d9cd91971b508237f}&r=eg <==== ATENÇÃO
ShortcutWithArgument: C:\Users\rosa maria\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google Chrome\Google Chrome.lnk -> C:\Users\rosa maria\AppData\Local\Google\Chrome\Application\chrome.exe (Google Inc.) -> hxxp://www.navegaki.com?uid={80411a9fc2b94f9d9cd91971b508237f}&r=eg <==== ATENÇÃO
ShortcutWithArgument: C:\Users\rosa maria\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\Internet Explorer (No Add-ons).lnk -> C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation) -> hxxp://www.navegaki.com?uid={80411a9fc2b94f9d9cd91971b508237f}&r=eg <==== ATENÇÃO
ShortcutWithArgument: C:\Users\rosa maria\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk -> C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation) -> hxxp://www.yeabests.cc/ <==== ATENÇÃO
ShortcutWithArgument: C:\Users\rosa maria\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Google Chrome.lnk -> C:\Users\rosa maria\AppData\Local\Google\Chrome\Application\chrome.exe (Google Inc.) -> hxxp://www.yeabests.cc/ <==== ATENÇÃO
ShortcutWithArgument: C:\Users\rosa maria\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Internet Explorer.lnk -> C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation) -> hxxp://www.yeabests.cc/ <==== ATENÇÃO
ShortcutWithArgument: C:\Users\rosa maria\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Yeabeats Browser.lnk -> C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation) -> hxxp://www.yeabests.cc/ <==== ATENÇÃO
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk -> C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation) -> hxxp://www.yeabests.cc/ <==== ATENÇÃO
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome\Google Chrome.lnk -> C:\Users\rosa maria\AppData\Local\Google\Chrome\Application\chrome.exe (Google Inc.) -> hxxp://www.navegaki.com?uid={80411a9fc2b94f9d9cd91971b508237f}&r=eg <==== ATENÇÃO

==================== Módulos Carregados (Whitelisted) ==============

2015-11-05 20:57 - 2015-11-05 20:57 - 00103888 _____ () C:\Program Files\AVAST Software\Avast\log.dll
2015-11-05 20:57 - 2015-11-05 20:57 - 00125512 _____ () C:\Program Files\AVAST Software\Avast\JsonRpcServer.dll
2015-12-01 09:27 - 2015-12-01 09:27 - 02813440 _____ () C:\Program Files\AVAST Software\Avast\defs\15120101\algo.dll
2015-11-05 20:57 - 2015-11-05 20:57 - 00466448 _____ () C:\Program Files\AVAST Software\Avast\ffl2.dll
2010-11-16 11:37 - 2010-11-16 11:37 - 00264704 _____ () C:\ProgramData\DatacardService\HWDeviceService.exe
2015-12-07 19:38 - 2015-12-07 19:38 - 00307200 _____ () C:\Program Files\65027720-1449524274-11E1-A1BA-037F22D11100\jnspB516.tmp
2015-11-05 07:21 - 2015-11-05 07:21 - 06728120 _____ () C:\Users\rosa maria\AppData\Roaming\XBox\XBLive.exe
2015-10-27 08:40 - 2015-10-27 08:40 - 00241592 _____ () C:\Users\rosa maria\AppData\Roaming\XBox\Xbox.Live.dll
2012-04-17 17:19 - 2007-01-17 16:36 - 00129024 _____ () C:\Program Files\WinRAR\rarext.dll
2015-11-05 20:57 - 2015-11-05 20:57 - 40540672 _____ () C:\Program Files\AVAST Software\Avast\libcef.dll
2015-12-08 14:23 - 2015-12-08 14:23 - 00444416 _____ () C:\Program Files\65027720-1449524274-11E1-A1BA-037F22D11100\knst9BF4.tmp
2012-03-17 19:17 - 2011-09-06 15:35 - 00040448 _____ () C:\Program Files\Positivo Informática\Positivo Experience\Positivo WebCam\VCam.ax

==================== Alternate Data Streams (Whitelisted) =========

(Se uma entrada for incluída na fixlist, somente o ADS será removido.)


==================== Modo de Segurança (Whitelisted) ===================

(Se uma entrada for incluída na fixlist, será removida do Registro. O valor "AlternateShell" será restaurado.)


==================== EXE Associação (Whitelisted) ===============

(Se uma entrada for incluída na fixlist, o ítem no Registro será restaurado para o padrão ou removido.)


==================== Internet Explorer confiável/restrito ===============

(Se uma entrada for incluída na fixlist, será removida do Registro.)


==================== Outras Áreas ============================

(Atualmente não há nenhuma correção automática para esta seção.)

HKU\S-1-5-21-3521617747-3582639055-3673487234-1000\Control Panel\Desktop\\Wallpaper -> %windir%\web\wallpaper\windows\img0.jpg
DNS Servers: 192.168.0.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Firewall do Windows está habilitado.

==================== MSCONFIG/TASK MANAGER ítens desabilitados ==

(Atualmente não há nenhuma correção automática para esta seção.)

MSCONFIG\Services: AdobeARMservice => 2
MSCONFIG\Services: AdobeFlashPlayerUpdateSvc => 3
MSCONFIG\Services: AppManagerService => 2
MSCONFIG\Services: BatteryManagerSrv => 2
MSCONFIG\Services: gupdate => 2
MSCONFIG\Services: gupdatem => 3
MSCONFIG\Services: gusvc => 3
MSCONFIG\Services: IAStorDataMgrSvc => 2
MSCONFIG\Services: PSI_SVC_2 => 2
MSCONFIG\Services: SkypeUpdate => 2
MSCONFIG\Services: STacSV => 2
MSCONFIG\Services: SwitchBoard => 3
MSCONFIG\startupreg: Adobe ARM => "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
MSCONFIG\startupreg: AdobeAAMUpdater-1.0 => "C:\Program Files\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe"
MSCONFIG\startupreg: AdobeCS6ServiceManager => "C:\Program Files\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe" -launchedbylogin
MSCONFIG\startupreg: Facebook Update => "C:\Users\rosa maria\AppData\Local\Facebook\Update\FacebookUpdate.exe" /c /nocrashserver
MSCONFIG\startupreg: Google Update => "C:\Users\rosa maria\AppData\Local\Google\Update\GoogleUpdate.exe" /c
MSCONFIG\startupreg: GoogleDriveSync => "C:\Program Files\Google\Drive\googledrivesync.exe" /autostart
MSCONFIG\startupreg: HotKeysCmds => C:\Windows\system32\hkcmd.exe
MSCONFIG\startupreg: IAStorIcon => C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
MSCONFIG\startupreg: IgfxTray => C:\Windows\system32\igfxtray.exe
MSCONFIG\startupreg: Persistence => C:\Windows\system32\igfxpers.exe
MSCONFIG\startupreg: PWRISOVM.EXE => C:\Program Files\PowerISO\PWRISOVM.EXE -startup
MSCONFIG\startupreg: Sidebar => "C:\Program Files\Windows Sidebar\sidebar.exe" /autoRun
MSCONFIG\startupreg: Skype => "C:\Program Files\Skype\Phone\Skype.exe" /minimized /regrun
MSCONFIG\startupreg: SunJavaUpdateSched => "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
MSCONFIG\startupreg: SwitchBoard => C:\Program Files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
MSCONFIG\startupreg: SynTPEnh => %ProgramFiles%\Synaptics\SynTP\SynTPEnh.exe
MSCONFIG\startupreg: SysTrayApp => C:\Program Files\IDT\WDM\sttray.exe
MSCONFIG\startupreg: Wondershare Helper Compact.exe => C:\Program Files\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe

==================== Regras do Firewall (Whitelisted) ===============

(Se uma entrada for incluída na fixlist, será removida do Registro. O arquivo não será movido, a menos que seja colocado separadamente.)

FirewallRules: [{02999165-FDD0-489E-9183-013E628106A0}] => (Allow) C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe
FirewallRules: [{A71EE377-E125-4DAA-A5AE-BCE6B7004B92}] => (Allow) C:\Users\rosa maria\AppData\Local\Facebook\Video\Skype\FacebookVideoCalling.exe
FirewallRules: [{FF84B66D-1DDE-414E-8E29-983C1DB2D774}] => (Allow) C:\Users\rosa maria\AppData\Local\Microsoft\SkyDrive\SkyDrive.exe
FirewallRules: [{4D388250-859F-49B7-993B-FC556BB09C6D}] => (Allow) C:\Program Files\Windows Live\Contacts\wlcomm.exe
FirewallRules: [{70115261-3AB1-4509-8E19-D2169C6FA527}] => (Allow) LPort=2869
FirewallRules: [{7975CC04-488A-4AC2-A3ED-EEA2CCF40779}] => (Allow) LPort=1900
FirewallRules: [{C979AFA1-A65F-4B29-877F-A45A4F72EE77}] => (Allow) C:\Program Files\Windows Live\Messenger\msnmsgr.exe
FirewallRules: [{0ECC611A-3754-4776-965D-1EEB6EF25CE2}] => (Allow) C:\Program Files\Skype\Phone\Skype.exe
FirewallRules: [TCP Query User{5FAE8B90-CD8D-476B-A378-CB283D49EDBC}C:\program files\youwave_android\vb\vboxsdl.exe] => (Allow) C:\program files\youwave_android\vb\vboxsdl.exe
FirewallRules: [UDP Query User{F847B71D-9E2B-4008-BB4C-C6B9F38F6329}C:\program files\youwave_android\vb\vboxsdl.exe] => (Allow) C:\program files\youwave_android\vb\vboxsdl.exe
FirewallRules: [{FEAB262C-C387-4797-BE78-BFFA1FB897C1}] => (Allow) C:\Program Files\AVAST Software\Avast\ng\vbox\aswFe.exe
FirewallRules: [{4A7B80AF-6754-4A57-B9CD-D828A528BA8F}] => (Allow) C:\Program Files\AVAST Software\Avast\ng\vbox\aswFe.exe
FirewallRules: [{20A331BF-2B1E-4244-9B3E-B52C2609049C}] => (Allow) C:\Users\rosa maria\Downloads\uTorrentPortable\App\uTorrent\uTorrent.exe
FirewallRules: [{2F6C0FB3-1103-4383-B5DD-54BD617329F2}] => (Allow) C:\Users\rosa maria\Downloads\uTorrentPortable\App\uTorrent\uTorrent.exe
FirewallRules: [{0C5F908B-E961-492B-BA2D-151B9F1C0BF1}] => (Allow) C:\Program Files\FlashIntegro\VideoEditor\VideoEditor.exe
FirewallRules: [{B4EABB41-AD2C-46BB-B55A-69636587BBBC}] => (Allow) C:\Program Files\FlashIntegro\VideoEditor\VideoEditor.exe
FirewallRules: [{D35F4246-A722-4784-9142-A575320F6F9D}] => (Allow) C:\Program Files\FlashIntegro\VideoEditor\Updater.exe
FirewallRules: [{DBD1C2D9-2161-424F-A91F-08D30ED394A3}] => (Allow) C:\Program Files\FlashIntegro\VideoEditor\Updater.exe
FirewallRules: [{CA6105C4-5654-45A3-B70E-A01D35AD55B3}] => (Block) c:\Program Files\Corel\CorelDRAW Graphics Suite X7\Programs\CorelDrw.exe
FirewallRules: [{F7524D30-D3B2-4433-8423-719D73F24502}] => (Block) c:\Program Files\Corel\CorelDRAW Graphics Suite X7\Programs\CorelPP.exe
FirewallRules: [TCP Query User{BE47C68F-33F2-492E-B248-8268DCEB33EA}C:\programas baixados\instaladores\conversor de audio e video\ffinstonline.exe] => (Allow) C:\programas baixados\instaladores\conversor de audio e video\ffinstonline.exe
FirewallRules: [UDP Query User{602691C0-6231-40F0-B936-82BD02E4DE0C}C:\programas baixados\instaladores\conversor de audio e video\ffinstonline.exe] => (Allow) C:\programas baixados\instaladores\conversor de audio e video\ffinstonline.exe
FirewallRules: [{76133BF6-B660-48C2-93BE-50A83CFB9177}] => (Allow) C:\Program Files\FreeTime\FormatFactory\FormatFactory.exe
FirewallRules: [{093BEAD3-CCE4-4671-835C-9D49B5E7CFBB}] => (Allow) C:\Program Files\FreeTime\FormatFactory\FFModules\Encoder\Doc\EBookCodec.exe
FirewallRules: [{63D8509E-3812-4408-95E9-61437CCACEC6}] => (Allow) C:\Program Files\FreeTime\FormatFactory\FormatFactory.exe
FirewallRules: [{3B5E4CE2-2AF7-4031-9316-98135082DF13}] => (Allow) C:\Program Files\FreeTime\FormatFactory\FFModules\Encoder\Doc\EBookCodec.exe
FirewallRules: [{40D61C59-E2C1-4A23-9B40-52C3E39BBD7D}] => (Allow) C:\Program Files\TeamViewer\TeamViewer.exe
FirewallRules: [{8C7099AB-6740-4F5B-8EE8-6C0736051F06}] => (Allow) C:\Program Files\TeamViewer\TeamViewer.exe
FirewallRules: [{8B71DC8D-A6FF-4314-A772-EB82AE0D43DD}] => (Allow) C:\Program Files\TeamViewer\TeamViewer_Service.exe
FirewallRules: [{BA5C3991-8396-464A-9393-5C45AC1167CA}] => (Allow) C:\Program Files\TeamViewer\TeamViewer_Service.exe

==================== Dispositivos Apresentando Falhas No Gerenciador =============


==================== Erros no Log de eventos: =========================

Erros em Aplicativos:
==================
Error: (12/08/2015 07:30:54 PM) (Source: Google Update) (EventID: 20) (User: DÉBORAH)
Description: Network Request Error.
Error: 0x80072ee7. Http status code: 0.
Url=https://www.facebook.com/omaha/update.php
Trying config: source=IE, direct connection.
trying CUP:WinHTTP.
Send request returned 0x80072ee7. Http status code 0.
trying WinHTTP.
Send request returned 0x80072ee7. Http status code 0.
trying CUP:iexplore.
Send request returned 0x80004005. Http status code 0.
Trying config: source=auto, wpad=1, script=.
trying CUP:WinHTTP.
Send request returned 0x80072ee7. Http status code 0.
trying WinHTTP.
Send request returned 0x80072ee7. Http status code 0.
trying CUP:iexplore.
Send request returned 0x80004005. Http status code 0.
Trying config: source=IE, direct connection.
trying CUP:WinHTTP.
Send request returned 0x80072ee7. Http status code 0.
trying WinHTTP.
Send request returned 0x80072ee7. Http status code 0.
trying CUP:iexplore.
Send request returned 0x80004005. Http status code 0.
Trying config: source=auto, wpad=1, script=.
trying CUP:WinHTTP.
Send request returned 0x80072ee7

Error: (12/08/2015 11:28:53 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (12/08/2015 03:34:43 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (12/07/2015 07:53:37 PM) (Source: ESENT) (EventID: 215) (User: )
Description: WinMail (2096) WindowsMail0: O backup parou porque ele foi interrompido pelo cliente ou houve falha na conexão com o cliente.

Error: (12/07/2015 01:22:27 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Nome de aplicativo com falha: GWXUX.exe, versão: 6.3.9600.18064, carimbo de hora: 0x56042785
Nome do módulo de falhas: ntdll.dll, versão: 6.1.7601.19045, carimbo de hora: 0x56258dbb
Código de exceção: 0xc0000005
Deslocamento com falha: 0x00032228
Identificação do processo com falha: 0x874
Hora de início do aplicativo com falha: 0xGWXUX.exe0
Caminho do aplicativo com falha: GWXUX.exe1
FCaminho do módulo de falhas: GWXUX.exe2
Identificação do Relatório: GWXUX.exe3

Error: (12/07/2015 12:44:31 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Nome de aplicativo com falha: GWXUX.exe, versão: 6.3.9600.18064, carimbo de hora: 0x56042785
Nome do módulo de falhas: ntdll.dll, versão: 6.1.7601.19045, carimbo de hora: 0x56258dbb
Código de exceção: 0xc0000005
Deslocamento com falha: 0x00032228
Identificação do processo com falha: 0x500
Hora de início do aplicativo com falha: 0xGWXUX.exe0
Caminho do aplicativo com falha: GWXUX.exe1
FCaminho do módulo de falhas: GWXUX.exe2
Identificação do Relatório: GWXUX.exe3

Error: (12/07/2015 12:07:31 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Nome de aplicativo com falha: GWXUX.exe, versão: 6.3.9600.18064, carimbo de hora: 0x56042785
Nome do módulo de falhas: ntdll.dll, versão: 6.1.7601.19045, carimbo de hora: 0x56258dbb
Código de exceção: 0xc0000005
Deslocamento com falha: 0x00032228
Identificação do processo com falha: 0x1108
Hora de início do aplicativo com falha: 0xGWXUX.exe0
Caminho do aplicativo com falha: GWXUX.exe1
FCaminho do módulo de falhas: GWXUX.exe2
Identificação do Relatório: GWXUX.exe3

Error: (12/06/2015 11:16:01 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Nome de aplicativo com falha: GWXUX.exe, versão: 6.3.9600.18064, carimbo de hora: 0x56042785
Nome do módulo de falhas: ntdll.dll, versão: 6.1.7601.19045, carimbo de hora: 0x56258dbb
Código de exceção: 0xc0000005
Deslocamento com falha: 0x00032228
Identificação do processo com falha: 0x132c
Hora de início do aplicativo com falha: 0xGWXUX.exe0
Caminho do aplicativo com falha: GWXUX.exe1
FCaminho do módulo de falhas: GWXUX.exe2
Identificação do Relatório: GWXUX.exe3

Error: (12/06/2015 08:08:50 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Nome de aplicativo com falha: GWXUX.exe, versão: 6.3.9600.18064, carimbo de hora: 0x56042785
Nome do módulo de falhas: ntdll.dll, versão: 6.1.7601.19045, carimbo de hora: 0x56258dbb
Código de exceção: 0xc0000005
Deslocamento com falha: 0x00032228
Identificação do processo com falha: 0x14f4
Hora de início do aplicativo com falha: 0xGWXUX.exe0
Caminho do aplicativo com falha: GWXUX.exe1
FCaminho do módulo de falhas: GWXUX.exe2
Identificação do Relatório: GWXUX.exe3

Error: (12/05/2015 12:42:47 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003


Erros de Sistema:
=============
Error: (12/09/2015 05:52:19 AM) (Source: DCOM) (EventID: 10016) (User: DÉBORAH)
Description: Específico do aplicativoLocalAtivação{0C0A3666-30C9-11D0-8F20-00805F2CD064}{9209B1A6-964A-11D0-9372-00A0C9034910}DÉBORAHrosa mariaS-1-5-21-3521617747-3582639055-3673487234-1000LocalHost (Usando LRPC)

Error: (12/09/2015 05:50:40 AM) (Source: DCOM) (EventID: 10016) (User: DÉBORAH)
Description: Específico do aplicativoLocalAtivação{0C0A3666-30C9-11D0-8F20-00805F2CD064}{9209B1A6-964A-11D0-9372-00A0C9034910}DÉBORAHrosa mariaS-1-5-21-3521617747-3582639055-3673487234-1000LocalHost (Usando LRPC)

Error: (12/09/2015 05:45:03 AM) (Source: DCOM) (EventID: 10016) (User: DÉBORAH)
Description: Específico do aplicativoLocalAtivação{0C0A3666-30C9-11D0-8F20-00805F2CD064}{9209B1A6-964A-11D0-9372-00A0C9034910}DÉBORAHrosa mariaS-1-5-21-3521617747-3582639055-3673487234-1000LocalHost (Usando LRPC)

Error: (12/08/2015 07:55:30 PM) (Source: DCOM) (EventID: 10010) (User: )
Description: {682159D9-C321-47CA-B3F1-30E36B2EC8B9}

Error: (12/08/2015 11:28:26 AM) (Source: Microsoft-Windows-WLAN-AutoConfig) (EventID: 10000) (User: AUTORIDADE NT)
Description: Falha na inicialização do Módulo de Extensibilidade de WLAN.

Caminho do Módulo: C:\Windows\system32\Rtlihvs.dll
Código de Erro: 126

Error: (12/08/2015 03:55:06 AM) (Source: DCOM) (EventID: 10010) (User: )
Description: {682159D9-C321-47CA-B3F1-30E36B2EC8B9}

Error: (12/08/2015 03:41:29 AM) (Source: Service Control Manager) (EventID: 7030) (User: )
Description: O serviço Xbox Live Network Manager Service está marcado como um serviço interativo. No entanto, o sistema está configurado para não permitir serviços interativos. Esse serviço pode não funcionar corretamente.

Error: (12/08/2015 03:34:19 AM) (Source: Microsoft-Windows-WLAN-AutoConfig) (EventID: 10000) (User: AUTORIDADE NT)
Description: Falha na inicialização do Módulo de Extensibilidade de WLAN.

Caminho do Módulo: C:\Windows\system32\Rtlihvs.dll
Código de Erro: 126

Error: (12/07/2015 07:54:58 PM) (Source: Service Control Manager) (EventID: 7030) (User: )
Description: O serviço GoogleChromeUpService está marcado como um serviço interativo. No entanto, o sistema está configurado para não permitir serviços interativos. Esse serviço pode não funcionar corretamente.

Error: (12/05/2015 12:41:19 AM) (Source: Microsoft-Windows-WLAN-AutoConfig) (EventID: 10000) (User: AUTORIDADE NT)
Description: Falha na inicialização do Módulo de Extensibilidade de WLAN.

Caminho do Módulo: C:\Windows\system32\Rtlihvs.dll
Código de Erro: 126


==================== Informações da Memória ===========================

Processador: Intel(R) Atom(TM) CPU D525 @ 1.80GHz
Percentagem de memória em uso: 59%
RAM física total: 2038.3 MB
RAM física disponível: 820.32 MB
Virtual Total: 12038.3 MB
Virtual disponível: 10492.8 MB

==================== Drives ================================

Drive c: (Disco Local) (Fixed) (Total:288.32 GB) (Free:96.16 GB) NTFS

==================== MBR & Tabela de Partições ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 298.1 GB) (Disk ID: 7E3688CC)
Partition 1: (Active) - (Size=9.8 GB) - (Type=27)
Partition 2: (Not Active) - (Size=288.3 GB) - (Type=07 NTFS)

==================== Fim de Addition.txt ============================